Normalizing all files to ascii encoding

Exfiltration/Get-VaultCredential.ps1

@@ -1,4 +1,4 @@
-function Get-VaultCredential
+function Get-VaultCredential
 {
 <#
 .SYNOPSIS
@@ -398,4 +398,4 @@ Only web credentials can be displayed in cleartext.
             $null = $Vaultcli::VaultCloseVault([Ref] $VaultHandle)
         }
     }
-}
+}

Exfiltration/VolumeShadowCopyTools.ps1

@@ -1,4 +1,4 @@
-function Get-VolumeShadowCopy
+function Get-VolumeShadowCopy
 {
 <#
 .SYNOPSIS
@@ -289,4 +289,4 @@ function Mount-VolumeShadowCopy
     {
 
     }
-}
+}

Mayhem/Mayhem.psd1

@@ -1,4 +1,4 @@
-@{
+@{
 
 # Script module or binary module file associated with this manifest.
 ModuleToProcess = 'Mayhem.psm1'

Mayhem/Mayhem.psm1

@@ -1,4 +1,4 @@
-function Set-MasterBootRecord
+function Set-MasterBootRecord
 {
 <#
 .SYNOPSIS
@@ -57,7 +57,7 @@ int CGh0stApp::KillMBR()
 	DWORD dwBytesWritten, dwBytesReturned; 
 	BYTE pMBR[512] = {0}; 
 	 
-	// 重新构造MBR 
+	// ????MBR 
 	memcpy(pMBR, scode, sizeof(scode) - 1); 
 	pMBR[510] = 0x55; 
 	pMBR[511] = 0xAA; 
@@ -85,7 +85,7 @@ int CGh0stApp::KillMBR()
 		&dwBytesReturned,  
 		NULL 
 		); 
-	// 写入病毒内容 
+	// ?????? 
 	WriteFile(hDevice, pMBR, sizeof(pMBR), &dwBytesWritten, NULL); 
 	DeviceIoControl 
 		( 
@@ -363,4 +363,4 @@ Set-CriticalProcess -Force -Verbose
     {
         Stop-Process -Id $PID
     }
-}
+}

Recon/Get-ComputerDetails.ps1

@@ -1,4 +1,4 @@
-function Get-ComputerDetails
+function Get-ComputerDetails
 {
 <#
 .SYNOPSIS
@@ -577,4 +577,4 @@ Github repo: https://github.com/clymb3r/PowerShell
     }
 
     return $ReturnInfo
-}
+}