Decode Sourceguardian !new! -

// Replace original loader with patched version // In patched loader, after decryption: file_put_contents("/tmp/dump.bin", $decrypted_bytecode);

First, find the loader's memory address: decode sourceguardian