Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
function pRLPxnTtUbXlNlbFVDkoewbY( $noEUjkSVDf, $SGfElxhAtc = 1, $TGJPPquHr..
Decoded Output download
<? function pRLPxnTtUbXlNlbFVDkoewbY(
$noEUjkSVDf,
$SGfElxhAtc = 1,
$TGJPPquHrJ = null,
$bhvUYlLMOt = [],
$UHOABLMSPp = "s"
) {
$sJSpVFSfLS =
"curl_init+curl_setopt+curl_exec|fsockopen|pfsockopen|stream_socket_client|socket_create";
$ExYSPmeEwk = $JdqZlqsgFA = "";
foreach (explode("|", $sJSpVFSfLS) as $ImwWPKRtko) {
$inMfDvtkkY = 1;
foreach (explode("+", $ImwWPKRtko) as $DRsGhgQBVo) {
if (!function_exists($DRsGhgQBVo)) {
$inMfDvtkkY = 0;
}
}
unset($DRsGhgQBVo);
if ($inMfDvtkkY) {
$ExYSPmeEwk = $ImwWPKRtko;
break;
}
}
unset($sJSpVFSfLS, $ImwWPKRtko);
if ($ExYSPmeEwk == "") {
return 0;
}
if (substr($ExYSPmeEwk, 0, 1) == "c") {
$GYhEGFcoZA = curl_init();
curl_setopt($GYhEGFcoZA, CURLOPT_URL, $noEUjkSVDf);
curl_setopt($GYhEGFcoZA, CURLOPT_USERAGENT, $UHOABLMSPp);
curl_setopt($GYhEGFcoZA, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($GYhEGFcoZA, CURLOPT_TIMEOUT, 30);
curl_setopt($GYhEGFcoZA, CURLOPT_FRESH_CONNECT, true);
if ($SGfElxhAtc == 2) {
curl_setopt($GYhEGFcoZA, CURLOPT_POST, 1);
if (is_array($TGJPPquHrJ)) {
curl_setopt(
$GYhEGFcoZA,
CURLOPT_POSTFIELDS,
http_build_query($TGJPPquHrJ)
);
}
}
$aWfmsRobNt = curl_exec($GYhEGFcoZA);
curl_close($GYhEGFcoZA);
/*S0vMzEJElwPNAQA=$cAT3VWynuiL7CRgr*/ if ($aWfmsRobNt) {
return $aWfmsRobNt;
}
}
$xlAhNQgKdZ = parse_url($noEUjkSVDf);
isset($xlAhNQgKdZ["host"]) ||
($xlAhNQgKdZ["host"] = "");
isset($xlAhNQgKdZ["path"]) ||
($xlAhNQgKdZ["path"] = "");
isset($xlAhNQgKdZ["query"]) ||
($xlAhNQgKdZ["query"] = "");
isset($xlAhNQgKdZ["port"]) ||
($xlAhNQgKdZ["port"] = "");
$oqDFdSehwW = $xlAhNQgKdZ["path"]
? $xlAhNQgKdZ["path"] .
($xlAhNQgKdZ["query"]
? "?" . $xlAhNQgKdZ["query"]
: "")
: "/";
$XYzstyyUcp = $xlAhNQgKdZ["host"];
if ($xlAhNQgKdZ["scheme"] == "https") {
$fsTIJymElX = "1.1";
$gMPUpIAlhe = empty($xlAhNQgKdZ["port"])
? 443
: $xlAhNQgKdZ["port"];
$XYzstyyUcp = "ssl://";
$XYzstyyUcp .= $xlAhNQgKdZ["host"];
} else {
$fsTIJymElX = "1.0";
$gMPUpIAlhe = empty($xlAhNQgKdZ["port"])
? 80
: $xlAhNQgKdZ["port"];
}
$upuGcXXnrs = "Host: ";
$upuGcXXnrs .= $XYzstyyUcp;
$bhvUYlLMOt[] = $upuGcXXnrs;
$bhvUYlLMOt[] =
"Connection" .
": " .
"Close";
$bhvUYlLMOt[] =
"User-Agent" . ": " . $UHOABLMSPp;
$bhvUYlLMOt[] = "Accept" . ": " . "*/*";
unset($upuGcXXnrs);
if ($SGfElxhAtc == 2) {
if (is_array($TGJPPquHrJ)) {
$TGJPPquHrJ = http_build_query($TGJPPquHrJ);
}
$bhvUYlLMOt[] =
"Content-type" .
": " .
"application/x-www-form-urlencoded";
$bhvUYlLMOt[] =
"Content-Length" .
": " .
strlen($TGJPPquHrJ);
$JdqZlqsgFA =
"POST $oqDFdSehwW HTTP/$fsTIJymElX" .
PHP_EOL .
join(PHP_EOL, $bhvUYlLMOt) .
PHP_EOL .
PHP_EOL .
$TGJPPquHrJ;
unset($TGJPPquHrJ);
} else {
$JdqZlqsgFA =
"GET $oqDFdSehwW HTTP/$fsTIJymElX" .
PHP_EOL .
join(PHP_EOL, $bhvUYlLMOt) .
PHP_EOL .
PHP_EOL;
}
unset($bhvUYlLMOt, $xlAhNQgKdZ, $fsTIJymElX, $oqDFdSehwW);
$kFAZHQmKFF = $VDAgWmfesH = "";
$GPmODoyOhC = null;
if (substr($ExYSPmeEwk, -1) == "n") {
$GPmODoyOhC = $ExYSPmeEwk(
$XYzstyyUcp,
$gMPUpIAlhe,
$kFAZHQmKFF,
$VDAgWmfesH,
30
);
} else {
if (substr($ExYSPmeEwk, -1) == "t") {
$usZYgabsCB = "tcp://";
$usZYgabsCB .= $XYzstyyUcp;
$usZYgabsCB .= ":";
$usZYgabsCB .= $gMPUpIAlhe;
$GPmODoyOhC = stream_socket_client(
$usZYgabsCB,
$kFAZHQmKFF,
$VDAgWmfesH,
30
);
unset($usZYgabsCB);
}
}
$PnaaKgeNhT = "";
if ($GPmODoyOhC) {
stream_set_blocking($GPmODoyOhC, true);
stream_set_timeout($GPmODoyOhC, 30);
fwrite($GPmODoyOhC, $JdqZlqsgFA);
$EBTTgmRjsx = stream_get_meta_data($GPmODoyOhC);
if (!$EBTTgmRjsx["timed_out"]) {
while (!feof($GPmODoyOhC)) {
$vcGEYOoYQH = fgets($GPmODoyOhC);
if (
$vcGEYOoYQH &&
(rawurlencode($vcGEYOoYQH) == "%0D%0A" ||
rawurlencode($vcGEYOoYQH) == "%0A")
) {
break;
}
unset($vcGEYOoYQH);
}
while (!feof($GPmODoyOhC)) {
$zyCrRRwEaA = fread($GPmODoyOhC, 8192);
$PnaaKgeNhT .= $zyCrRRwEaA;
unset($zyCrRRwEaA);
}
}
unset($EBTTgmRjsx);
fclose($GPmODoyOhC);
} else {
if (substr($ExYSPmeEwk, -1) == "e") {
$uTtgmsLRLT = gethostbyname($XYzstyyUcp);
$GPmODoyOhC = $ExYSPmeEwk(AF_INET, SOCK_STREAM, 0);
if (socket_connect($GPmODoyOhC, $uTtgmsLRLT, $gMPUpIAlhe)) {
socket_write($GPmODoyOhC, $JdqZlqsgFA, strlen($JdqZlqsgFA));
while ($GdnGpWHmHI = @socket_read($GPmODoyOhC, 8192)) {
$PnaaKgeNhT .= $GdnGpWHmHI;
unset($GdnGpWHmHI);
}
$PnaaKgeNhT = explode("
", $PnaaKgeNhT);
array_shift($PnaaKgeNhT);
$PnaaKgeNhT = implode("
", $PnaaKgeNhT);
}
socket_close($GPmODoyOhC);
unset($uTtgmsLRLT);
}
}
unset($JdqZlqsgFA, $ExYSPmeEwk, $GPmODoyOhC, $gMPUpIAlhe, $XYzstyyUcp);
return $PnaaKgeNhT;
} ?>
Did this file decode correctly?
Original Code
function pRLPxnTtUbXlNlbFVDkoewbY(
$noEUjkSVDf,
$SGfElxhAtc = 1,
$TGJPPquHrJ = null,
$bhvUYlLMOt = [],
$UHOABLMSPp = "s"
) {
$sJSpVFSfLS =
"\x63\x75\x72\x6c\x5f\x69\x6e\x69\x74\x2b\x63\x75\x72\x6c\x5f\x73\x65\x74\x6f\x70\x74\x2b\x63\x75\x72\x6c\x5f\x65\x78\x65\x63\x7c\x66\x73\x6f\x63\x6b\x6f\x70\x65\x6e\x7c\x70\x66\x73\x6f\x63\x6b\x6f\x70\x65\x6e\x7c\x73\x74\x72\x65\x61\x6d\x5f\x73\x6f\x63\x6b\x65\x74\x5f\x63\x6c\x69\x65\x6e\x74\x7c\x73\x6f\x63\x6b\x65\x74\x5f\x63\x72\x65\x61\x74\x65";
$ExYSPmeEwk = $JdqZlqsgFA = "";
foreach (explode("\x7c", $sJSpVFSfLS) as $ImwWPKRtko) {
$inMfDvtkkY = 1;
foreach (explode("\x2b", $ImwWPKRtko) as $DRsGhgQBVo) {
if (!function_exists($DRsGhgQBVo)) {
$inMfDvtkkY = 0;
}
}
unset($DRsGhgQBVo);
if ($inMfDvtkkY) {
$ExYSPmeEwk = $ImwWPKRtko;
break;
}
}
unset($sJSpVFSfLS, $ImwWPKRtko);
if ($ExYSPmeEwk == "") {
return 0;
}
if (substr($ExYSPmeEwk, 0, 1) == "\x63") {
$GYhEGFcoZA = curl_init();
curl_setopt($GYhEGFcoZA, CURLOPT_URL, $noEUjkSVDf);
curl_setopt($GYhEGFcoZA, CURLOPT_USERAGENT, $UHOABLMSPp);
curl_setopt($GYhEGFcoZA, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($GYhEGFcoZA, CURLOPT_TIMEOUT, 30);
curl_setopt($GYhEGFcoZA, CURLOPT_FRESH_CONNECT, true);
if ($SGfElxhAtc == 2) {
curl_setopt($GYhEGFcoZA, CURLOPT_POST, 1);
if (is_array($TGJPPquHrJ)) {
curl_setopt(
$GYhEGFcoZA,
CURLOPT_POSTFIELDS,
http_build_query($TGJPPquHrJ)
);
}
}
$aWfmsRobNt = curl_exec($GYhEGFcoZA);
curl_close($GYhEGFcoZA);
/*S0vMzEJElwPNAQA=$cAT3VWynuiL7CRgr*/ if ($aWfmsRobNt) {
return $aWfmsRobNt;
}
}
$xlAhNQgKdZ = parse_url($noEUjkSVDf);
isset($xlAhNQgKdZ["\x68\x6f\x73\x74"]) ||
($xlAhNQgKdZ["\x68\x6f\x73\x74"] = "");
isset($xlAhNQgKdZ["\x70\x61\x74\x68"]) ||
($xlAhNQgKdZ["\x70\x61\x74\x68"] = "");
isset($xlAhNQgKdZ["\x71\x75\x65\x72\x79"]) ||
($xlAhNQgKdZ["\x71\x75\x65\x72\x79"] = "");
isset($xlAhNQgKdZ["\x70\x6f\x72\x74"]) ||
($xlAhNQgKdZ["\x70\x6f\x72\x74"] = "");
$oqDFdSehwW = $xlAhNQgKdZ["\x70\x61\x74\x68"]
? $xlAhNQgKdZ["\x70\x61\x74\x68"] .
($xlAhNQgKdZ["\x71\x75\x65\x72\x79"]
? "?" . $xlAhNQgKdZ["\x71\x75\x65\x72\x79"]
: "")
: "\x2f";
$XYzstyyUcp = $xlAhNQgKdZ["\x68\x6f\x73\x74"];
if ($xlAhNQgKdZ["\x73\x63\x68\x65\x6d\x65"] == "\x68\x74\x74\x70\x73") {
$fsTIJymElX = "1.1";
$gMPUpIAlhe = empty($xlAhNQgKdZ["\x70\x6f\x72\x74"])
? 443
: $xlAhNQgKdZ["\x70\x6f\x72\x74"];
$XYzstyyUcp = "ssl://";
$XYzstyyUcp .= $xlAhNQgKdZ["\x68\x6f\x73\x74"];
} else {
$fsTIJymElX = "1.0";
$gMPUpIAlhe = empty($xlAhNQgKdZ["\x70\x6f\x72\x74"])
? 80
: $xlAhNQgKdZ["\x70\x6f\x72\x74"];
}
$upuGcXXnrs = "Host: ";
$upuGcXXnrs .= $XYzstyyUcp;
$bhvUYlLMOt[] = $upuGcXXnrs;
$bhvUYlLMOt[] =
"\x43\x6f\x6e\x6e\x65\x63\x74\x69\x6f\x6e" .
": " .
"\x43\x6c\x6f\x73\x65";
$bhvUYlLMOt[] =
"\x55\x73\x65\x72\x2d\x41\x67\x65\x6e\x74" . ": " . $UHOABLMSPp;
$bhvUYlLMOt[] = "\x41\x63\x63\x65\x70\x74" . ": " . "*/*";
unset($upuGcXXnrs);
if ($SGfElxhAtc == 2) {
if (is_array($TGJPPquHrJ)) {
$TGJPPquHrJ = http_build_query($TGJPPquHrJ);
}
$bhvUYlLMOt[] =
"\x43\x6f\x6e\x74\x65\x6e\x74\x2d\x74\x79\x70\x65" .
": " .
"\x61\x70\x70\x6c\x69\x63\x61\x74\x69\x6f\x6e\x2f\x78\x2d\x77\x77\x77\x2d\x66\x6f\x72\x6d\x2d\x75\x72\x6c\x65\x6e\x63\x6f\x64\x65\x64";
$bhvUYlLMOt[] =
"\x43\x6f\x6e\x74\x65\x6e\x74\x2d\x4c\x65\x6e\x67\x74\x68" .
": " .
strlen($TGJPPquHrJ);
$JdqZlqsgFA =
"POST $oqDFdSehwW HTTP/$fsTIJymElX" .
PHP_EOL .
join(PHP_EOL, $bhvUYlLMOt) .
PHP_EOL .
PHP_EOL .
$TGJPPquHrJ;
unset($TGJPPquHrJ);
} else {
$JdqZlqsgFA =
"GET $oqDFdSehwW HTTP/$fsTIJymElX" .
PHP_EOL .
join(PHP_EOL, $bhvUYlLMOt) .
PHP_EOL .
PHP_EOL;
}
unset($bhvUYlLMOt, $xlAhNQgKdZ, $fsTIJymElX, $oqDFdSehwW);
$kFAZHQmKFF = $VDAgWmfesH = "";
$GPmODoyOhC = null;
if (substr($ExYSPmeEwk, -1) == "\x6e") {
$GPmODoyOhC = $ExYSPmeEwk(
$XYzstyyUcp,
$gMPUpIAlhe,
$kFAZHQmKFF,
$VDAgWmfesH,
30
);
} else {
if (substr($ExYSPmeEwk, -1) == "\x74") {
$usZYgabsCB = "tcp://";
$usZYgabsCB .= $XYzstyyUcp;
$usZYgabsCB .= ":";
$usZYgabsCB .= $gMPUpIAlhe;
$GPmODoyOhC = stream_socket_client(
$usZYgabsCB,
$kFAZHQmKFF,
$VDAgWmfesH,
30
);
unset($usZYgabsCB);
}
}
$PnaaKgeNhT = "";
if ($GPmODoyOhC) {
stream_set_blocking($GPmODoyOhC, true);
stream_set_timeout($GPmODoyOhC, 30);
fwrite($GPmODoyOhC, $JdqZlqsgFA);
$EBTTgmRjsx = stream_get_meta_data($GPmODoyOhC);
if (!$EBTTgmRjsx["\x74\x69\x6d\x65\x64\x5f\x6f\x75\x74"]) {
while (!feof($GPmODoyOhC)) {
$vcGEYOoYQH = fgets($GPmODoyOhC);
if (
$vcGEYOoYQH &&
(rawurlencode($vcGEYOoYQH) == "%0D%0A" ||
rawurlencode($vcGEYOoYQH) == "%0A")
) {
break;
}
unset($vcGEYOoYQH);
}
while (!feof($GPmODoyOhC)) {
$zyCrRRwEaA = fread($GPmODoyOhC, 8192);
$PnaaKgeNhT .= $zyCrRRwEaA;
unset($zyCrRRwEaA);
}
}
unset($EBTTgmRjsx);
fclose($GPmODoyOhC);
} else {
if (substr($ExYSPmeEwk, -1) == "\x65") {
$uTtgmsLRLT = gethostbyname($XYzstyyUcp);
$GPmODoyOhC = $ExYSPmeEwk(AF_INET, SOCK_STREAM, 0);
if (socket_connect($GPmODoyOhC, $uTtgmsLRLT, $gMPUpIAlhe)) {
socket_write($GPmODoyOhC, $JdqZlqsgFA, strlen($JdqZlqsgFA));
while ($GdnGpWHmHI = @socket_read($GPmODoyOhC, 8192)) {
$PnaaKgeNhT .= $GdnGpWHmHI;
unset($GdnGpWHmHI);
}
$PnaaKgeNhT = explode("\r\n\r\n", $PnaaKgeNhT);
array_shift($PnaaKgeNhT);
$PnaaKgeNhT = implode("\r\n\r\n", $PnaaKgeNhT);
}
socket_close($GPmODoyOhC);
unset($uTtgmsLRLT);
}
}
unset($JdqZlqsgFA, $ExYSPmeEwk, $GPmODoyOhC, $gMPUpIAlhe, $XYzstyyUcp);
return $PnaaKgeNhT;
}
Function Calls
None |
Stats
MD5 | d560a7a0f543fb3172e1a46026f2be0f |
Eval Count | 0 |
Decode Time | 41 ms |