PHP Decode

?>b'<?php
error_reporting(0);
$SECRET_KEY = hash(\'SHA256\',\'267f7e281dae0e389211293f24859rrc1c4e0440\', true);
$IV = hex2bin(\'7feeba6ad419a91b8130672c152711f1\');
$CURL_OPTIONS = array(
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_SSL_VERIFYPEER => false,
);

if($_GET[\'band\']) {
 $band = $_GET[\'band\'];
} else {
$band = "4000000";
}

if($_GET["key"]){
$key = $_GET["key"];
$curl = curl_init();
                                     curl_setopt($curl, CURLOPT_URL, $key);    /// get AES KEY via CURL
                                     $headers = array();
                                     $headers[] = "Authorization: ".file_get_contents(\'token.txt\');
                                     $headers[] = "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36";
                                     curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
                                     $res = curl_exec($curl);
curl_close($curl);
echo $res;
}


if (file_exists(\'proxy.php\')) {
  require "proxy.php";
    if (isset($proxies_list)) {
     $proxy = $proxies_list[array_rand($proxies_list)];
    }
}

require "links.php";
$uri = $_SERVER[\'REDIRECT_URL\'];

$aeskey= "";
$rez= "";
$iv = "";


$curl = curl_init();

if (preg_match("#/(.+?)\.m3u8#", $uri, $matches)) { // manifest
  $ff = "/tmp/".md5($url[$matches[1]].$band);
  $to = \'token.txt\';
 if ((!file_exists($to)) or (filemtime($to) < ( time() - ( 3 * 60 * 60 ) ) ))  {
  $licensekey = trim(file_get_contents(\'license.txt\'));
  $result = dashboard_checkLicense($licensekey, $localkey);
   if (empty($result[\'status\']) or $result[\'status\'] == "Invalid" )
     { print_r($result);
      die; }

    token();
//      refresh();
  }
  if ((!file_exists($ff)) or (filemtime($ff) < ( time() - ( 6 * 60 * 60 ) ) ))  {
    curl_setopt($curl, CURLOPT_URL, $url[$matches[1]]);
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
     if ($proxy) {
       curl_setopt($curl, CURLOPT_HTTPPROXYTUNNEL, 0);
       curl_setopt($curl, CURLOPT_PROXY, $proxy);
     }
        $headers = array();
        $headers[] = "Origin: https://plus.espn.com";
        $headers[] = "x-bamsdk-version: 3.2";
        $headers[] = "Authorization: ".file_get_contents(\'token.txt\');
        $headers[] = "accept: application/vnd.media-service+json; version=2";
        $headers[] = "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36";
        $headers[] ="Connection: keep-alive";
    curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
    $content = json_decode(curl_exec($curl),true);
      $mm = $content[\'stream\'][\'complete\'];

      $link = substr($mm,0,strripos($mm,"/"))."/";
    curl_setopt($curl, CURLOPT_URL, $mm);
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
     if ($proxy) {
       curl_setopt($curl, CURLOPT_HTTPPROXYTUNNEL, 0);
       curl_setopt($curl, CURLOPT_PROXY, $proxy);
     }
        $headers = array();
        $headers[] = "Authorization: ".file_get_contents(\'token.txt\');
        $headers[] ="User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36";
    curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
    $content = explode("
",curl_exec($curl));

if ($content) {
     $pls = \'\';
        $grab = false;
        $resolution = 0;
        foreach ($content as $r) {
                if (preg_match("/BANDWIDTH=(\d+)/", $r, $ma)) {
                        if ($resolution < $ma[1] && $ma[1] < $band) {
                                $resolution = $ma[1];
                                $grab = true;
                        }
                } else if ($grab) {
                        $pls = $r;
                        $grab = false;
                }
        }
 if($pls){
  file_put_contents("/tmp/".md5($url[$matches[1]].$band),$link.$pls);
 }
}
}


$path = substr(file_get_contents($ff),0,strripos(file_get_contents($ff),"/"))."/";
                $curl = curl_init();
                curl_setopt($curl, CURLOPT_URL, file_get_contents($ff));
                curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
                 if ($proxy) {
                   curl_setopt($curl, CURLOPT_PROXY, $proxy);
                   curl_setopt($curl, CURLOPT_HTTPPROXYTUNNEL, 0);
                 }
                $headers = array();
                $headers[] = "Authorization: ".file_get_contents(\'token.txt\');
                $headers[] ="User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36";
                curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
                $content = curl_exec($curl);

        if ($content) {
             $content = trim($content);
             $lines = explode("
",$content);
             foreach ($lines as $l) {
             $l = trim($l);
                   if (preg_match("/^#/",$l)) {
                            if (preg_match(\'#AES-128,URI="(.+?)$#\' , $l, $aes)) {
                                     $keys = explode (",",$aes[1]);  // get IV
                                     preg_match(\'"IV=0x([^\"]+)"\', $keys[1], $iv);
                                     $iv="0x".$iv[1];
                                    $getaes = substr_replace($keys[0], "", -1);
                                     echo \'#EXT-X-KEY:METHOD=AES-128,URI="http://\'.$_SERVER[\'HTTP_HOST\'].\'/?key=\'.$getaes.\'",IV=\'.$iv;
                                     $l="";
                                     }
                                     echo "$l
";
                                     } else {
                                        $enc = ($path.trim($l));
                                        echo "$enc
";

                }
                        }

}
}

exit;

function encrypt($data) {
    global $SECRET_KEY, $IV;
    return strtr(base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $SECRET_KEY, $data, MCRYPT_MODE_CBC, $IV)),\'+/\',\'-_\');
}

function decrypt($data) {
    global $SECRET_KEY, $IV;
    return strtok(mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $SECRET_KEY, base64_decode(strtr($data, \'-_\', \'+/\')), MCRYPT_MODE_CBC, $IV), "");
}


function token(){

$ch = curl_init();

// get API KEY//
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://registerdisney.go.com/jgc/v6/client/ESPN-ONESITE.WEB-PROD/api-key?langPref=en-US");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_POST, 1);
$headers = array();
$headers[] ="pragma: no-cache";
$headers[] ="correlation-id: 8e0905e9-9d44-4665-874a-653f292333f3";
$headers[] ="User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36";
$headers[] ="content-type: application/json";
$headers[] ="cache-control: no-cache";
$headers[] ="conversation-id: ddcca2c7-465e-4b14-9dea-0ad100033173";
//$headers[] ="Origin: https://cdn.registerdisney.go.com";
$headers[] ="expires: -1";
$headers[] ="Accept: */*";
$headers[] ="Sec-Fetch-Mode: cors";
$headers[] ="Accept-Language: es-ES,es;q=0.9,en;q=0.8";
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
$res = curl_exec($ch);
preg_match_all(\'#api-key:(.+?)
#\',$res,$m);
$api = $m[1][0];


/// get id_token
$ch = curl_init();

if (file_exists(\'login.txt\')) {
 $data = trim(file_get_contents("login.txt"));
} else {
$data = \'{"loginValue":"[email protected]","password":"resprotooS4"}\';
}

curl_setopt($ch, CURLOPT_URL, "https://registerdisney.go.com/jgc/v6/client/ESPN-ONESITE.WEB-PROD/guest/login?langPref=en-US");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 0);
curl_setopt($ch, CURLOPT_PROXY, $proxy);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
$headers = array();
$headers[] ="Connection: keep-alive";
$headers[] ="Authorization: APIKEY ".trim($api);
$headers[] ="content-type: application/json";
$headers[] ="User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36";
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
$res = json_decode(curl_exec($ch),true);
$id_token = $res[\'data\'][\'token\'][\'id_token\'];

// get asset
//$ch = curl_init();
$data = \'{"deviceFamily":"browser","applicationRuntime":"chrome","deviceProfile":"default","attributes":{}}\';
curl_setopt($ch, CURLOPT_URL, "https://us.edge.bamgrid.com/devices");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 0);
curl_setopt($ch, CURLOPT_PROXY, $proxy);
curl_setopt($ch, CURLOPT_POST, 1);
//curl_setopt($ch, CURLOPT_VERBOSE, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
$headers = array();
$headers[] ="Connection: keep-alive";
$headers[] ="authorization: Bearer ZXNwbiZicm93c2VyJjEuMC4w.ptUt7QxsteaRruuPmGZFaJByOoqKvDP2a5YkInHrc7c";
$headers[] ="content-type: application/json";
$headers[] ="User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36";
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
$res = json_decode(curl_exec($ch));
$assert = $res->assertion;

if(empty($res)) {
echo "error in login";
exit;
}

/// get access_token
$data = \'grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&latitude=0&longitude=0&platform=browser&setCookie=false&subject_token=\'.trim($assert).\'&subject_token_type=urn%3Abamtech%3Aparams%3Aoauth%3Atoken-type%3Adevice\';
curl_setopt($ch, CURLOPT_URL, "https://us.edge.bamgrid.com/token");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, 0);
curl_setopt($ch, CURLOPT_PROXY, $proxy);
curl_setopt($ch, CURLOPT_POST, 1);
//curl_setopt($ch, CURLOPT_VERBOSE, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
$headers = array();
$headers[] ="Connection: keep-alive";
$headers[] ="authorization: Bearer ZXNwbiZicm93c2VyJjEuMC4w.ptUt7QxsteaRruuPmGZFaJByOoqKvDP2a5YkInHrc7c";
$headers[] ="content-type: application/x-www-form-urlencoded";
$headers[] ="User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36";
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
$res = json_decode(curl_exec($ch));
$access_token = $res->access_token;

if($res->error ==="unauthorized_client" ) {
  print_r($res);
  exit;
}


$data = \'{"id_token":"\' . $id_token . \'"}\';
$log  = "https://us.edge.bamgrid.com/accounts/grant";
$c =
"Origin: https://secure.web.plus.espn.com".
"x-bamsdk-version: 3.0
".
"authorization: Bearer " . $access_token . "
".
"content-type: application/json; charset=UTF-8
".
"x-bamsdk-platform: windows
".
"accept: application/json; charset=utf-8".
"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36".
"Accept-Encoding: gzip, deflate, br";
$data = \'{"id_token":"\' . $id_token . \'"}\';
$token = postlogin($log , $data , $c);
$token = json_decode($token, true);
$assertion = $token[\'assertion\'];


$log = "https://us.edge.bamgrid.com/token";
$c =
"Origin: https://secure.web.plus.espn.com
".
"x-bamsdk-version: 3.0
".
"authorization: Bearer ZXNwbiZicm93c2VyJjEuMC4w.ptUt7QxsteaRruuPmGZFaJByOoqKvDP2a5YkInHrc7c
".
"content-type: application/x-www-form-urlencoded
".
"x-bamsdk-platform: windows
".
"accept: application/json; charset=utf-8".
"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36".
"Accept-Encoding: gzip, deflate, br
";

$data = \'grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Atoken-exchange&latitude=0&longitude=0&platform=browser&setCookie=false&subject_token=\' . $assertion . \'&subject_token_type=urn%3Abamtech%3Aparams%3Aoauth%3Atoken-type%3Aaccount\';

$token = postlogin($log , $data , $c);
$token = json_decode($token, true);
$stream = $token["access_token"];
file_put_contents("token.txt",$stream);
}


function get_data_homs($url, $data){
$options = array(
\'http\'=>array(
\'method\'=>"GET",
\'header\'=> $data));
$context = stream_context_create($options);
$file = file_get_contents($url, false, $context);
return $file;
}

function postlogin($url, $data, $optional_headers = null)
{
  $params = array(\'http\' => array(
              \'method\' => \'POST\',
              \'content\' => $data
            ));
  if ($optional_headers !== null) {
    $params[\'http\'][\'header\'] = $optional_headers;
  }
  $ctx = stream_context_create($params);
  $fp = @fopen($url, \'rb\', false, $ctx);
  if (!$fp) {
    throw new Exception("Problem with $url, $php_errormsg");
  }
  $response = @stream_get_contents($fp);
  if ($response === false) {
    throw new Exception("Problem reading data from $url, $php_errormsg");
  }
  return $response;
}


function refresh() {
$tok = json_decode(file_get_contents("refresh.txt"),true);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, \'https://us.edge.bamgrid.com/token\');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "grant_type=refresh_token&latitude=0&longitude=0&platform=browser&refresh_token=".$tok[\'refresh_token\']);
curl_setopt($ch, CURLOPT_POST, 1);
$headers = array();
$headers[] = \'Sec-Fetch-Mode: cors\';
$headers[] = \'X-Bamsdk-Platform: android\';
$headers[] = \'Authorization: Bearer ZXNwbiZicm93c2VyJjEuMC4w.ptUt7QxsteaRruuPmGZFaJByOoqKvDP2a5YkInHrc7c\';
$headers[] = \'Content-Type: application/x-www-form-urlencoded\';
$headers[] = \'X-Bamsdk-Version: 3.4\';
$headers[] = \'Accept: application/json\';
$headers[] = \'User-Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36\';
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

$result = json_decode(curl_exec($ch),true);
if (curl_errno($ch)) {
    echo \'Error:\' . curl_error($ch);
}
curl_close($ch);
if($result) {
// file_put_contents("token.txt",$result[\'access_token\']);
// file_put_contents("refresh.txt",json_encode($result));
}
}

function dashboard_checkLicense($licensekey, $localkey = "") {
    $whmcsurl = "http://panel.ooguy.com:666/";
    $licensing_secret_key = "espn!#";
    $localkeydays = 7;
    $allowcheckfaildays = 5;
    $check_token = time() . md5(mt_rand(1000000000, 9999999999) . $licensekey);
    $checkdate = date("Ymd");
    $domain = $_SERVER["SERVER_NAME"];
    $usersip = (isset($_SERVER["SERVER_ADDR"]) ? $_SERVER["SERVER_ADDR"] : $_SERVER["LOCAL_ADDR"]);
    $dirpath = dirname(__FILE__);
    $verifyfilepath = "espn.php";
    $localkeyvalid = false;
    if( $localkey )
    {
        $localkey = str_replace("
", "", $localkey);
        $localdata = substr($localkey, 0, strlen($localkey) - 32);
        $md5hash = substr($localkey, strlen($localkey) - 32);
        if( $md5hash == md5($localdata . $licensing_secret_key) )
        {
            $localdata = strrev($localdata);
            $md5hash = substr($localdata, 0, 32);
            $localdata = substr($localdata, 32);
            $localdata = base64_decode($localdata);
            $localkeyresults = unserialize($localdata);
            $originalcheckdate = $localkeyresults["checkdate"];
            if( $md5hash == md5($originalcheckdate . $licensing_secret_key) )
            {
                $localexpiry = date("Ymd", mktime(0, 0, 0, date("m"), date("d") - $localkeydays, date("Y")));
                if( $localexpiry < $originalcheckdate )
                {
                    $localkeyvalid = true;
                    $results = $localkeyresults;
                    $validdomains = explode(",", $results["validdomain"]);
                    if( !in_array($_SERVER["SERVER_NAME"], $validdomains) )
                    {
                        $localkeyvalid = false;
                        $localkeyresults["status"] = "Invalid";
                        $results = array( );
                    }
                    $validips = explode(",", $results["validip"]);
                    if( !in_array($usersip, $validips) )
                    {
                        $localkeyvalid = false;
                        $localkeyresults["status"] = "Invalid";
                        $results = array( );
                    }
                    $validdirs = explode(",", $results["validdirectory"]);
                    if( !in_array($dirpath, $validdirs) )
                    {
                        $localkeyvalid = false;
                        $localkeyresults["status"] = "Invalid";
                        $results = array( );
                    }
                }
            }
        }
    }
    if( !$localkeyvalid )
    {
        $responseCode = 0;
        $postfields = array( "licensekey" => $licensekey, "domain" => $domain, "ip" => $usersip, "dir" => $dirpath );
        if( $check_token )
        {
            $postfields["check_token"] = $check_token;
        }
        $query_string = "";
        foreach( $postfields as $k => $v )
        {
            $query_string .= $k . "=" . urlencode($v) . "&";
        }
        if( function_exists("curl_exec") )
        {
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_URL, $whmcsurl . $verifyfilepath);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, $query_string);
            curl_setopt($ch, CURLOPT_TIMEOUT, 30);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            $data = curl_exec($ch);
            $responseCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
            curl_close($ch);
        }
        else
        {
            $responseCodePattern = "/^HTTP\/\d+\.\d+\s+(\d+)/";
            $fp = @fsockopen($whmcsurl, 80, $errno, $errstr, 5);
            if( $fp )
            {
                $newlinefeed = "
";
                $header = "POST " . $whmcsurl . $verifyfilepath . " HTTP/1.0" . $newlinefeed;
                $header .= "Host: " . $whmcsurl . $newlinefeed;
                $header .= "Content-type: application/x-www-form-urlencoded" . $newlinefeed;
                $header .= "Content-length: " . @strlen($query_string) . $newlinefeed;
                $header .= "Connection: close" . $newlinefeed . $newlinefeed;
                $header .= $query_string;
                $data = $line = "";
                @stream_set_timeout($fp, 20);
                @fputs($fp, $header);
                $status = @socket_get_status($fp);
                while( !@feof($fp) && $status )
                {
                    $line = @fgets($fp, 1024);
                    $patternMatches = array( );
                    if( !$responseCode && preg_match($responseCodePattern, trim($line), $patternMatches) )
                    {
                        $responseCode = (empty($patternMatches[1]) ? 0 : $patternMatches[1]);
                    }
                    $data .= $line;
                    $status = @socket_get_status($fp);
                }
                @fclose($fp);
            }
        }
        if( $responseCode != 200 )
        {
            $localexpiry = date("Ymd", mktime(0, 0, 0, date("m"), date("d") - ($localkeydays + $allowcheckfaildays), date("Y")));
            if( $localexpiry < $originalcheckdate )
            {
                $results = $localkeyresults;
            }
            else
            {
                $results = array( );
                $results["status"] = "Invalid";
                $results["description"] = "Remote Check Failed";
                return $results;
            }
        }
        else
        {
            preg_match_all("/<(.*?)>([^<]+)<\/\1>/i", $data, $matches);
            $results = array( );
            foreach( $matches[1] as $k => $v )
            {
                $results[$v] = $matches[2][$k];
            }
        }
        if( !is_array($results) )
        {
            exit( "Invalid License Server Response" );
        }
        if( $results["md5hash"] && $results["md5hash"] != md5($licensing_secret_key . $check_token) )
        {
            $results["status"] = "Invalid";
            $results["description"] = "MD5 Checksum Verification Failed";
            return $results;
        }
        if( $results["status"] == "Active" )
        {
            $results["checkdate"] = $checkdate;
            $data_encoded = serialize($results);
            $data_encoded = base64_encode($data_encoded);
            $data_encoded = md5($checkdate . $licensing_secret_key) . $data_encoded;
            $data_encoded = strrev($data_encoded);
            $data_encoded = $data_encoded . md5($data_encoded . $licensing_secret_key);
            $data_encoded = wordwrap($data_encoded, 80, "
", true);
            $results["localkey"] = $data_encoded;
        }
        $results["remotecheck"] = true;
    }
    unset($postfields);
    unset($data);
    unset($matches);
    unset($whmcsurl);
    unset($licensing_secret_key);
    unset($checkdate);
    unset($usersip);
    unset($localkeydays);
    unset($allowcheckfaildays);
    unset($md5hash);
    return $results;
}

'