y g __text__TEXT= $j __data__DATA =@@t__bss__DATA g__cstring__TEXTQZU__common__DATA x__picsymbolstub2__TEXT:`FZcD__la_sym_ptr2__DATAeh̜66__nl_symbol_ptr__DATAXfxil__textcoal_nt__TEXTf j @̠\` P-_|US$}y]EEUU}yEE U)‰ЉEf8t0hED$QD$f$df$[]ÐUD$D$$dÐU(E EEED$ED$E$AdÐUS$E}~gU2QEۍg6QBg:QBg>QB gCQBgGQBgLQBgQQB(gUQB gYQB$g^QBxgcQB|ghQB,gmQB4grQB8gwQB<g|QBPgQBLgQBDgQBHgQBTgQBXgQBpeD$e$|bD$e@X$abD$e$CbD$$ PD$$PD$$PD$$PD$$ sPD$$[PD$$CPD$$+PD$$PD$$ PD$$$[]ÐUS$E}~wUЉE$`D$UЉED$E$`u UЉE@(EE끍PMEE$[]US$lE}~_UЉ,E$@`D$UЉ,ED$E$_uEEEEE$[]ÐU(}u}t} uEpEEE$_9ErGE $_9Er/EE8 t$EE8 tEUEEEE맋EEÐUStHE}?vnUЍh7D$E$^ED$ ED$LD$UЍh7$^E늃t[]UVSP}t=D$ED$$4^fLD$$^EvDžE$K<O}E$KD$$]iLD$$x]kLD$$`]`8t'D$wLD$`@X$&^fLD$$-]E}u8`8tLD$`@X$]`8tLD$`@X$]`8D$LD$`@X$k]}u%LD$`$@]DžED$D$$\uM#tȀ tDž~`D$$[9tz`$$\0: t:`D$`D$$Z9`8D$D$ D$MD$`$[E$UZOMD$`$"Zu5`8tVM$Y``@XjMD$`$Yu5`8tqM$Y``tMD$`$Z``8uA`D$MD$`$Z``@X`8uD$`$'ZP[^]ÐUS$HD$[$;ZE}~[UD$ID$[$YID$[U$`Xu>[UD$[UD$[$Y:[UD$[UD$[$[Y"ID$[$;YE$ID$[$Y$[]ÐUEEEE}y E(E@tE(@EÐUS$XEEE$EE}?v4E"E:Eu UЍx0EEč<EE$[]ÐUSdDD$/GD$$VdDD$/G$QV[]ÐUSdaYXtD$D$$UD$D$$UD$D$$tUFD$$UDžU;BrA~D$D$ D$FD$$UD$D$$TD$D$$TUD$GD$$UD$$/U~ƅ.tgt^$KU¸)ЉD$GD$T$D$ D$GD$$SE@$D$GD$$SEEED$'GD$$gSE$TEEED$-GD$$6SED$3GD$$SE@D$@GD$$RE@ D$IGD$$RE@D$QGD$$RE@$D$GD$$REEED$'GD$$dRE$SEEED$-GD$$3R)E@$D$GD$$Rd[]ÐUS$4TE}}}$H}t=E@$D$BD$$QED$BD$$rQED$BD$$UQE@D$BD$$5QE@ D$BD$$QE@D$BD$$PtE@$D$BD$$PED$BD$$P)E@$vD$BD$$~P$[]ÐUe6EUM6M6iCÞ&%ÐUS$`d$UQE}u EizEEE;E|dEEEEE;E|Et$dE UE)ЃЍE)"dE UE)ЃЍEM)))ȉEErEM)EU))ȉEEEE$[]ÐUS4(} ut4$XEE;E |SEU‰UEU‰UDEEE}yEEU)‰ЋU2UE룃4[]ÐU8E D$E$ME}t E@EQD$ED$E$MEE8u}~ } EE$&EEEEUV4}u}vEEED$D$$_M}tE D$E$M DžE}uE;EtEE8\u:EEE8uUEEEEE4EEE$:NƋE $-N)Ɖ=E$NƋE $N)ƋE $MEt$D$$LE$MUEE9E$MD$ED$E$KE$ME$MUE)Љ‹E)9sO$^MD$D$E$K$7MEUE);EsEEE}4^]ÐUS<$K[]US$JE}y<$K}~ $JJJE}y<$ZK}~ $~JD$=$6JD$=$ JD$=$ J$[]ÐUVS)DžDžDžDžDžDžDžD$D$M$:Jd<D$E D$E$VIu&VLL LLLzzzzzzzzzzk\\qzzzzzzzzzzzzzzzMDžNn<D$N@X$JDžP!FE D$M$I<$HDž8<u,8D$<$HB;$HDžPY!DžDžE D$ D$<D$N$IDžP Fu$ttMM8t u3uE D$<$GB;$GtM$GDžPS t=D$M$~ M8~M$E0iz0$y;E D$=D$N$nHDžPD$D$$UEy0=$EDžPQDžD$D$ D$D$$DD$D$$Eƅ$fD$D$$Eƅ$fDžD$D$$Cy7=$ DDžP=|8DžDž<=$Ct@D$D$$C|8|88y%T=D$$DDžPO@O$FOM$xfFD$D$ D$D$|8$BD$OD$|8$By3MD$=D$$DDžPD$|8$BM$BM8tnDždd~Qd;t8|8d;t(M$A9dtd$lAd>AD$ =D$=D$$'C;D$M$?Ct=D$M$!Cu:MN8%>D$$B MM$m@u3Dž4>D$$dBM@$?D$M$;CN8t.MD$ D$>D$$A@u.Dž>D$$AMNtDžD$D$$9ADžDžD$$> DžDžD$D$ D$D$$b>yANu32>8 ?D$$@DžPqtnNu`D$D$$ @D$D$D$ D$D$$]=Nu@y6?D$$? D$D$$<$F=t0D$ D$O?D$$B@"D$_;D$$@M8tMD$$/?uM8 D$D$X$,>M8SD$$D$W?D$$?DžTT~D$XD$$=0TD$$ *uA!u8*u/Qu&WuTuYu ?uNuTBNuT-M8t TD$t?D$$E=D$XD$$<D$$D$W?D$$ >M8t D$?D$$<M8uD$?$_<+$ED$D$?$2<$D$$9 Dž DžD$D$ D$D$$H9u@D$$;M8u>u5MD$ MD$%@D$$?<`EM8t#D$$?8tE}M8$D$ MD$4@D$$;9D$$d;u)D$MD$$c;D$ D$D$$N7$s:y Dž$D$MD$$:DžM8u Dž;t Dž uM8u Dž$:0M8t D$;@D$$9$ D$$tZD$D$D$ D$D$$5;tt@D$$r8M87vDž4N;|"TN$-6̍|8$6$6D$D$$7|MD$$8D$ D$@D$$D$ @D$@D$$D$D$ @D$xMD$xM$4t/D$@D$$7DžP@D$$6M8t D$4AD$$6D$WA$6tM8pAD$$z6MD$ D$D$$3B;D$$86AD$$"6BD$AD$$6 D$AD$$5D$$o3hD$$X3|8Dž4N;|TNTN TNTN hTN;~TNE|8|8 DžDž D$D$ hD$D$$1y3184BD$$74DžP ut|8|8)DžD$OD$|8$l0y8 18utBD$$3B$c3D$D$O@$0O@$1tt0tD$ D$CD$x$3"tD$_;D$x$3M8tMD$t$2uM8xD$4ND$#C$e2M8v1iDž4N;|"TN$90̍|8$0$0D$D$$1|MD$$2D$ tD$@D$$D$ @CD$@D$$D$D$ @D$xMD$xM$ .t/D$GCD$$1DžP tCD$$04N81CD$$1$2D$D$$;-$.M8xD$CD$$g0t2D$D$ D$D$$.M8t,xD$ 4ND$4DD$$/TN4NpMD$\DD$x$0x$0D$xD$TN$,ƍx$09t;M84ND$tDD$$1/M8u4ND$DD$$.K$,xD$DD$$.Dž4N;|TNTNNtD$D$$.D$D$TN$*ND$4ED$$-D$TE$-TN$+4N9|*TNTND4N(ND$tED$$-TN$*4N9|*TNTND4N(M8~ D$ED$$U,TN$J*4N9|*TNTND4N( $-( t$-( t#u$,Ƅ(뫍$KD$ D$h$++MHHQHcHt{HtL$3D$h$+ED$h$+D$h$z+ED$h$b+hD$Љ0D$$;D$$w*t0hD$h$*ED$h$*$)D$h$* $D$h$~*hD$ D$ED$$)M8TNTNh|lMD$ FD$FD$x$$*MDDDDDt8DtxD$ D$4FD$$(lMD$ D$tFD$$(D$ D$FD$$[(FD$$C(x$z)D$xD$TN$$ƍx$E)9t D$GD$$'Dž4N;|"TN$%̍|8$%7GD$$j'MN@X9t,MN9tM$r'DžPP)[^]ÐU(EfEE$ÐUE$#ÐUEfEEfEEÐUEȉEEError typePing PacketSystem RebootSystem Lock UpList System PasswordsView ConsoleGet System InformationLog Pressed KeysSend KeyPress LogShow A Dialog BoxDelete A Value from The RegistryCreate TCP redirection(proxy)Delete TCP redirectionList TCP redirectionsStart ApplicationEnd ApplicationExport a share resourceCancel share exportShow Export ListResend PacketEnable HTTP ServerDisable HTTP ServerResolve Host NameCompress a FileUncompress a FilePlug-in execute0x1a???0x1b???0x1c???0x1d???0x1e???0x1f???Show active processesKill a processStart a processCreate a key in the registrySet the Value of a key in registryDelete a key in registryEnumerate registry keysEnumerate registry valuesCapture a static imageCapture a video streamPlay a sound fileShow Available Video capture devicesCapture the screen to a fileStart sending a file using TCPStart recieving a file using TCPList (running) plug-insKill PluginList directory0x32???0x33???Find a fileDelete a fileView file contentsRename a fileCopy a fileList all network devicesConnect to network resourceEnd connection of a network resourceShow NetWork ConnectionsCreate Directory (folder)Remove directoryShow Running ApplicationsType Of Packet UnknownizGetInfo;Info requestedListen;0Listen for Keystrokes: OFF RequestedListen;1Listen for Keystrokes: ON RequestedEject;0Close the CD ROM RequestedEject;1Open the CD ROM RequestedSendKeys;0Send Text RequestedSwapButton;0Restore Mouse Buttons RequestedSwapButton;1Swap the Mouse Buttons RequestedMessage;Display Message RequestServerPwd;Password Change RequestRemoveServer;05Close ServerRemoveServer;15Remove ServerPassword;0Password AccessPassword;1Password Security Hole AccessPlaySound;Play sound fileSetMousePos;Set Mouse PositionStartApp;Start ApplicationKeyClick;Key ClickDisableKeys;Disable KeysGetApps;List Active ApplicationsFocusApp;Focus ApplicationKillApp;Kill ApplicationShowImage;Show ImageURL;Go to URLUnknown NetBus Command (Garbage?)QQQQWarning: SIGHUP received, but config re-read not yet implemented!  /etc/usr/local/etc~.fakebo: caught SIG%s, shutting down FakeBO server... ???HUPINTQUITILLTRAPABRTBUSFPEKILLUSR1USR2SEGVPIPEALRMTERMCHLDCONTSTOPTSTPTTINTTOUWINCH0x%02X %srt/fakebo.confTrying to open `%s'... failed. success! Using config file `%s'. Can't open `fakebo.conf' in ANY directory, using defaults. Unrecognized command in config file `%s', line %d: %s stdoutLogging to stdout. stderrLogging to stderr. atError opening logfile `%s', using stdout ---[ Config parameters ]--- %s %d ---------[ End ]--------- %sPacket dump: %08X: %s %s %02X %08X: %s%*s %s Command: %s (%s)(%s) Magic=%.8s Len=%ld ID=%ld Type=0x%02X (%s) FakeBO version 0.4.1 Copyright (C) 1998,99 by KoSt Fork error, remaining in foreground. /dev/nullc:dihbavVfakebo version 0.4.1 Path where config file will be searched: "%s", Unknown switch `-%c'. Try `%s -h'. Type `%s -a' for details. udpUnable to find port %s. socketbindtcp[NB] Call to `socket()' failed! Unable to `bind()' on NetBus port %d! 0.4.1FakeBO %s started using PID %d. NONETurning off ignore IP address Error while resolving ignore IP address, ignorehost option ignored! Ignore offical hostname: %s address: %s Resolver returned invalid ignore IP address, ignorehost option ignored! [NB] `select()' failed! [BO] `recvfrom()' error %s (%s)*!*QWTY?[BO] Cracked received packet! Encryption key is 0x%x [BO] Received packet from %s: BO PACKET! BO Packet from %s[BO] packet from %s: %s[BO] select (timeout error) !PONG!%s!%s!%s%02X[BO] Sending packet to %s... [BO] Error replying in sendto: !backorifice%-cUnable to execute custom script `%s'! fork() error, can't exec custom script! [BO] Non-BO data received from %s [BO] non-BO data from %s---[Begining of Data]--- ---[End of Data]--- [BO] Unrecognized data at BO port from %s [BO] Connection from %s ignored [NB] Call to `select()' failed! [NB] Unable to `accept()' connection (maybe a tcp SYN stealth port scan?) [NB] Unable to `accept()' connection (maybe a tcp SYN stealth scan?)`%s' (%s)[NB] Connection[#%d] from %snetbus[NB] Unable to execute `%s'! [NB] Unable to `fork()', cannot execute custom scritSorry, no more connections allowed.[NB] Connection from %s refused (>max connections) [NB] Connection[#%d] from %s accepted! NetBus %s [NB][#%d] Error writing greeting to client! [NB] Sent NetBus Magic String to client #%d. [NB] Connection from `%s' ignored [NB][#%d] Client disconnected. [NB] Client[#%d] disconnected. [NB][#%d] Error reading from client, disconnecting [NB][#%d] Flooding detected. Disconnecting. , [NB](#%d): %s Msg;%s%s [NB](#%d): Sending Answer (hdr): %s [NB](#%d): Sending Answer: %s [NB](#%d): Sending back answering message [NB] Invalid option for logsendingpackets option[NB] Error writing to client #%d! FakeBO ending session A⍀AP魟訟,⍀,P锟菟⍀P{v⍀Pb]⍀PID⍀P0+⍀P⍀P⍀P⍀P̞Ǟo⍀oP鳞讞Z⍀ZP隞蕞E⍀EP遞|0⍀0Phc⍀POJ⍀P61⍀P⍀P⍀P⍀Pҝ͝⍀P鹝贝⍀P頝蛝s⍀sP針肝^⍀^PniI⍀IPUP4⍀4P<7⍀P# ⍀ P ⍀P⍀P؜Ӝ⍀P鿜躜⍀P馜衜⍀P鍜舜⍀Ptow⍀wP[Vb⍀bPB=M⍀MP)$8⍀8P #⍀#P⍀Pޛٛ⍀Pś⍀P鬛觛⍀P铛莛⍀Pzu⍀Pa\⍀PHC{⍀{P/*f⍀fPQ⍀QP<⍀<Pߚ'⍀'P˚ƚ⍀P鲚譚⍀P陚蔚⍀P通G```y``````a(aAaZasaaaaaa b"b;bTbmbbbbbbcc5cNcgcccccccd/dHdadzdddddde)eBe[ete$Ë $Ë$<<<<fu<fm<f^<fV<fP<@<#`:<0<hQ<<@g; g;;`;;;@g;w;g;__;O;_5;%;`_;Xf ;: _:f:~:^t:^h:Xf@:@g,:@g:pf::^999999^9u9c9qT]9H9I98^888^88c8f]898!8777 g7@g7@g7 g|7k7@ge7U7^>7f 7 g7@g6@g6 g66@g66`^6fq6 gS6@gG6@g26 g 66@g 66@^55 ^5f55@g5X5f05@g5@g5 g44]444]4 g4f4y4`]j4 gY4fO4?4.4@g4 43H]3\f3 g3@g33 ]3 g3f3S3C3\(3f"33222\2 g22`\223\z2p2dfd2dfZ2YB202Y&2,\22Y11hf1111hQ1|1@gj1 gR1B1lf<141\(1 g 1f10f0f00KT00\{0p0hd0Y0h>060[00 0`[0//hQ/h/hQ/hQ/s/ [d/P/.hQ.hQ.@g.@g.@gs.@gQ.@g=.@g(. g.hQ .---Z--Z--vZ-r-.Tl-F-f@-0-\Z-`f--CZ-, Z,f,,Y,,Y,|,dfp,dff,YN,<,Y2,Y$,,Y++hf++++hQ++@gv+ g^+N+lfH+8+`Y*+****'Y}*fd*IC*$*f)pf))tf)~)Q)=)tf) )R)( Y(xf((|f((fu(c(YW(fK(f5(f( (X('}'o'g'XS'B':'X#'f' 'X&f&&CX&&u&e&`XN&f.&f&f%%I%X%F%CX8%%f%$f$$f$f$$KTr$`$;X5$!$##"X#f#~#X#f# # X""f"z"O""f "f"!W!!W!f!f!!f~!\!fV!F! W'!!f!f! W f f  f V  f qT  Vy Vo j Z D 8 f( hQffhQVfhQ|hndhQ8+f%hhh@VhQhQ(VfhQQI#V?Q=5V fVIIffrhf^UX;1f".T Ufff{U5-.T%UlQlQUffZUnfJfDl@f<f8f4f0f,f(f$f ffff fff]HHWffffffffffjTPUNDf FU,FU,FU,yq U,b]XD< U,-( T  ~i^H*A)pI 9 x x x x sIkmIkg UISO <,T"TTTTuTeUTH8T(Tf Tk wTk aVFTk 0 Tk Tk Tk Tk Tk tTk ^SCTk -Tk rTk qTk :"kTk \Tk 6&NTk   m fk g  P H KT > Q 8 ( KT  Q   I =   S C f 9 0T (  f  .T   f f f  f f f | f r +T l \ f R 'T @ f (  f  T    fH fH fH fH  fH SH fH fHx fHp f fH\ SHJ fHB fH< 4 SH' fH  fH SH fH fH  SH fH  fH SH   fH `SHW fH4  fH fHfHfHO#fH  SHfHRHfHfHRHfH{fHqRHdfHUCRH=0fH&RHfH RHRHlQHlQHmRHgD & =R = `NII x@Q_IF4II QQQQygQaOQI7Q1QQQfff|fsRm hdR^ hURO hFR@ h7R1 h(R" hR h {R hvR hqR hlR hgR hbR h]R hYR hUR hPR} htKRn heGR_ hVBRP hG>RA h8:R2 h!6R h f zjf `R P h Cf  XTPLB <Tfle4Tfle. ) #PfSePfSe  Lf:eLf:e  Hf!eHf!e  DfeDfe  @fd@fd  =r5:4\l[UPOb6_vdjZYe7FVQ2Sw0>IQI[IjIz@Q ghQlQ hQ <<,h8@gC<Q=" f  g f\L =g   x [8\ `H1@% t` BDc)2szdj5 kNhL4-i p^SzV"V{\!*>x<ZtJ,\:_bocommands___i686.get_pc_thunk.bx_netbusdesc_netbuscommand_netbusdata_bocommandinit_loadconfig_debugconfig_whatbocommand_typeofbocommand_logcpacket_logspacket_msrand___i686.get_pc_thunk.cx_mrand_getkey_g_password_cryptpacket_atoport_strreplace_intro_fork_to_bg_main___i686.get_pc_thunk.axdyld_stub_binding_helper_nbmessage_nbfakever_lognotbopackets_executescriptshell_executescript_toexecutescript_silentmode_bomessage_customrepliespath_usecustomreplies_userealfakebo_bofakever_machinename_sendfakereply_logtosyslog_logconnection_tocrackpackets_ignorehostip_toignorehost_ignorehost_user_nbport_boporttolisten_msg_about_startasdaemon_usage_optarg_repeatbuf_logsendingpackets_logreceivedpackets_out_formats_bufferedlogging_fptolog_logfile_in_formats_addresses_keywords_stop___sF_verboselog_read_write_accept_fwrite_execlp_sendto_fread_RealFakeBO_gethostbyaddr_recvfrom___error_select_bzero_inet_ntoa_gethostbyname_getpid_close_fileno_listen_getprotobyname_bind_setsockopt_perror_socket_dropprivileges_RealBOInit_getopt_open_setsid_exit_fork_memcpy_strtol_getservbyname_memset_syslogprintf_logprintf_printf_strcmp_fclose_sscanf_strstr_fgets_strcat_fopen_strncpy_sprintf_strcpy_strncmp_strlen_setbuf_sigaction_waitpid_fprintf_notyetimplemented_holdrand_resetholdrand_netbuscommands_unknownnetbuscommand_netbusclients_netbuslfd_fakeboconfdir_sighandler_signames_sig_chld_setsignal_siginit_msg.0_conf_reread_NXSwapHostShortToBig_NXSwapHostLongToBig_netbusaddr_netbuskfd__OSSwapInt16__OSSwapInt32