Module Import alias Import alias Import alias ImportFrom alias ImportFrom alias FunctionDef arguments args NameParam defaults Num body Return Call AttributeLoad Str attr Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr Call NameLoad NameLoad decorator_list FunctionDef arguments args NameParam defaults body Assign NameStore Call AttributeLoad NameLoad attr Str AttributeLoad NameLoad attr If Call AttributeLoad NameLoad attr NameLoad body Return NameLoad orelse Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults NameLoad body Expr Str If NameLoad body Assign NameStore SubscriptLoad Call AttributeLoad NameLoad attr Str Num Index Num If CompareNotEq Call AttributeLoad NameLoad attr Str Num body Assign NameStore Call AttributeLoad NameLoad attr Str Call AttributeLoad Str attr NameLoad NameLoad keyword Num Assign NameStore Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr Str AttributeLoad NameLoad attr Str NameLoad Assign NameStore Call AttributeLoad Str attr ListComp NameLoad comprehension NameStore Call AttributeLoad NameLoad attr Str BoolOpAnd CompareNotEq Call AttributeLoad NameLoad attr Str UnaryOpNot Call AttributeLoad Call AttributeLoad NameLoad attr attr Str UnaryOpNot Call AttributeLoad Call AttributeLoad Call AttributeLoad NameLoad attr attr attr Str UnaryOpNot Call AttributeLoad Call AttributeLoad Call AttributeLoad NameLoad attr attr attr Str Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults NameLoad body Assign NameStore BinOpAdd Str NameLoad If NameLoad body Assign NameStore Call AttributeLoad Str attr Call NameLoad Call AttributeLoad NameLoad attr Str orelse If UnaryOpNot NameLoad body Assign NameStore Call AttributeLoad Str attr Call NameLoad Call AttributeLoad NameLoad attr Str Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults Str body If CompareEq NameLoad Str body Return Call AttributeLoad Str attr Call NameLoad NameLoad Str keyword ListLoad Str orelse If CompareEq NameLoad Str body Return Call AttributeLoad Str attr Call NameLoad NameLoad Str keyword ListLoad Str decorator_list
N/A N/A random N/A string N/A re base64 b64encode termcolor colored gen_random_string N/A N/A length N/A 10 N/A N/A N/A N/A join N/A N/A random sample N/A string ascii_letters N/A int length N/A validate_ntlm N/A N/A data N/A N/A N/A allowed N/A N/A re compile ^[0-9a-f]{32} N/A re IGNORECASE N/A N/A N/A allowed match data N/A N/A True N/A N/A False N/A obfs_ps_script N/A N/A script function_name N/A None N/A N/A 
     Strip block comments, line comments, empty lines, verbose statements,
     and debug statements from a PowerShell source file.

     If the function_name paramater is passed, replace the main powershell function name with it
      N/A function_name N/A N/A function_line N/A N/A N/A script split 1 N/A 0 N/A N/A N/A N/A function_line find function -1 N/A N/A script N/A N/A re sub -.* N/A N/A -{}
 format function_name script count 1 N/A strippedCode N/A N/A re sub N/A N/A re compile <#.*?#> N/A re DOTALL script N/A strippedCode N/A N/A join N/A line N/A line N/A N/A strippedCode split N/A N/A N/A N/A line strip N/A N/A N/A N/A N/A line strip startswith # N/A N/A N/A N/A N/A N/A N/A line strip lower startswith write-verbose  N/A N/A N/A N/A N/A N/A N/A line strip lower startswith write-debug  N/A strippedCode N/A create_ps_command N/A N/A ps_command force_ps32 N/A False N/A N/A ps_command N/A [Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}; ps_command N/A force_ps32 N/A N/A command N/A N/A %SystemRoot%\SysWOW64\WindowsPowershell\v1.0\powershell.exe -exec bypass -window hidden -noni -nop -encoded {} format N/A b64encode N/A N/A ps_command encode UTF-16LE N/A N/A N/A force_ps32 N/A N/A command N/A N/A powershell.exe -exec bypass -window hidden -noni -nop -encoded {} format N/A b64encode N/A N/A ps_command encode UTF-16LE N/A command N/A highlight N/A N/A text color N/A yellow N/A N/A N/A color yellow N/A N/A N/A N/A {} format N/A colored text yellow attrs N/A bold N/A N/A N/A color red N/A N/A N/A N/A {} format N/A colored text red attrs N/A bold N/A