Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* Ouro Moderno A cpia ou reproduo deste contedo, sem expressa autorizao proibida...

Decoded Output download

 
class GetMacAddr{
var $return_array = array();
var $mac_addr;
function GetMacAddr($os_type){
switch ( strtolower($os_type) ){
case 'linux': $this->forLinux();
break;
case 'solaris':
break;
case 'unix':
break;
case 'aix':
break;
default: $this->forWindows();
break;
}
$temp_array = array();
foreach ( $this->return_array as $value ){
$match = '/[0-9a-f][0-9a-f][:-]'.'[0-9a-f][0-9a-f][:-]'.'[0-9a-f][0-9a-f][:-]'.'[0-9a-f][0-9a-f][:-]'.'[0-9a-f][0-9a-f][:-]'.'[0-9a-f][0-9a-f]/i';
$preg = preg_match($match,$value,$temp_array );
if ($preg){
$this->mac_addr = $temp_array[0];
break;
}
}
unset($temp_array);
return $this->mac_addr;
}
function forWindows(){
@exec('ipconfig /all',$this->return_array);
if ( $this->return_array )
return $this->return_array;
else{
$ipconfig = $_SERVER['WINDIR']."\system32\ipconfig.exe";
if ( is_file($ipconfig) )
@exec($ipconfig.' /all',$this->return_array);
else
@exec($_SERVER['WINDIR']."\system\ipconfig.exe /all",$this->return_array);
return $this->return_array;
}
}
function forLinux(){
@exec('ifconfig -a',$this->return_array);
return $this->return_array;
}
}
;

Did this file decode correctly?

Original Code

<?php /* Ouro Moderno  A cpia ou reproduo deste contedo, sem expressa autorizao  proibida. Fica proibida a  engenharia reversa para desencryptar os dados. */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x5b8;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NTFiKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>\KFmcphQkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OO00O0000 1464
$OO00O00O0 class GetMacAddr{ var $return_array = array(); var $mac_ad..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 635d15d7ce75ce93e0d6ee336cf09efd
Eval Count 3
Decode Time 113 ms