Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- The base64 encoded string:
- ----------------------------------------------------------------------------
- CjU3MTI2NjE2MTI3ODQyMzA1ODE3ODE1NDMzMTcyNTE2NjAyODg5MjIzMzIwODUzNTI5NzAxNDg5
- MjQ4ODY4MzU1MDkxNDkyMjkyNjU2MzQ0Mjg1Njc4NjgxNzQ2OTQxOTc4NzExODUzNjQ1MjI1NTc2
- ODUxMjkzMTQyMDAxNzA3MTE2MDQ1NzIyNDAzNzQ2MzY1OTAxNTI0NzkyODc3MTA2MTk0NDQ3Mjkw
- MjY3NTIwNTI3NjA1NTczNjA3NTA0MDIxNDg2MTU3MDY5NjI1OTc4NjcyNzI1ODUxNDQ1OTk3MTUz
- MzU3NTQzMzkwNzIxMTExMDg1ODgzNzI2Nzk3MjgzOTU2MjcxNzI5Njc3Mzc3OTc1MzczNzk2NzAx
- MDUzNjg4MTg3NzQ2MzUyOTAxNjMyMjAxMTA5MTQ2MTM4NTM1MTI3MzQwMDI0NDQ3NzExMjQwODI5
- ODk3MzM0MzMzNDAxMjA0MDg0MzA3MjY2OTQzMzMwOTk3NjE1OTc3MTI5NTMzMjc5OTkyMjgzNzUy
- MDYzNzUxNjM1NzY2MzE3MjMyODA2NjIyOTA4MjU2OTQ1MTE0MTA1NTk0NjY0MTkwMTgwNzEwODgx
- ODU1MTgxNzE3NzQ4Njc1MjczMTAwMDM4NTI5NTk4NTEyNTE0MjQ5NDI0NjU5NDI2NzEwMDE3MzEy
- MTg2OTUzNTg3Mjk2NjgzNTgxNjc5OTA4OTQwMDA4MjkxMzUwODExNjI5MzEyOTQ2OTIwNjE1MDQ0
- MTM2MzQzMjczMDU4ODQ2ODQxOTg1Mjg5ODg5MTcxOTgxNDA1ODQwNTI1Mzc4MTM0MTg0OTg0MTky
- NzUyNzY3NTQ4NTE1MTU3NzU5ODc3NTc3NTU2MjY2NzE2Mwo=
- ----------------------------------------------------------------------------
- The hexadecimal decoded string:
- ----------------------------------------------------------------------------
- 5712661612784230581781543317251660288922332085352970148924886835509149229265
- 6344285678681746941978711853645225576851293142001707116045722403746365901524
- 7928771061944472902675205276055736075040214861570696259786727258514459971533
- 5754339072111108588372679728395627172967737797537379670105368818774635290163
- 2201109146138535127340024447711240829897334333401204084307266943330997615977
- 1295332799922837520637516357663172328066229082569451141055946641901807108818
- 5518171774867527310003852959851251424942465942671001731218695358729668358167
- 9908940008291350811629312946920615044136343273058846841985289889171981405840
- 5253781341849841927527675485151577598775775562667163
- ----------------------------------------------------------------------------
- WIN32 & WIN64 assembly code:
- ----------------------------------------------------------------------------
- 00000000 57 push edi
- 00000001 126616 adc ah,[esi+0x16]
- 00000004 127842 adc bh,[eax+0x42]
- 00000007 305817 xor [eax+0x17],bl ; decryption
- 0000000A 8154331725166028 adc dword [ebx+esi+0x17],0x28601625
- 00000012 8922 mov [edx],esp
- 00000014 3320 xor esp,[eax] ; decryption
- 00000016 853529701489 test [dword 0x89147029],esi
- 0000001C 2488 and al,0x88
- 0000001E 6835509149 push dword 0x49915035
- 00000023 229265634428 and dl,[edx+0x28446365]
- 00000029 56 push esi
- 0000002A 7868 js 0x94
- 0000002C 17 pop ss
- 0000002D 46 inc esi
- 0000002E 94 xchg eax,esp
- 0000002F 197871 sbb [eax+0x71],edi
- 00000032 185364 sbb [ebx+0x64],dl
- 00000035 52 push edx
- 00000036 2557685129 and eax,0x29516857
- 0000003B 314200 xor [edx+0x0],eax ; decryption
- 0000003E 17 pop ss
- 0000003F 07 pop es
- 00000040 116045 adc [eax+0x45],esp
- 00000043 7224 jc 0x69
- 00000045 03746365 add esi,[ebx+0x65] ; math
- 00000049 90 nop
- 0000004A 1524792877 adc eax,0x77287924
- 0000004F 106194 adc [ecx-0x6c],ah
- 00000052 44 inc esp
- 00000053 7290 jc 0xffffffe5
- 00000055 267520 es jnz 0x78 ; loop
- 00000058 52 push edx
- 00000059 7605 jna 0x60
- 0000005B 57 push edi
- 0000005C 3607 ss pop es
- 0000005E 50 push eax
- 0000005F 40 inc eax
- 00000060 214861 and [eax+0x61],ecx
- 00000063 57 push edi
- 00000064 06 push es
- 00000065 96 xchg eax,esi
- 00000066 2597867272 and eax,0x72728697
- 0000006B 58 pop eax
- 0000006C 51 push ecx
- 0000006D 44 inc esp
- 0000006E 59 pop ecx
- 0000006F 97 xchg eax,edi
- 00000070 1533575433 adc eax,0x33545733
- 00000075 90 nop
- 00000076 7211 jc 0x89
- 00000078 1108 adc [eax],ecx
- 0000007A 58 pop eax
- 0000007B 83726797 xor dword [edx+0x67],byte -0x69 ; decryption
- 0000007F 2839 sub [ecx],bh ; math
- 00000081 56 push esi
- 00000082 27 daa
- 00000083 17 pop ss
- 00000084 296773 sub [edi+0x73],esp ; math
- 00000087 7797 ja 0x20
- 00000089 53 push ebx
- 0000008A 7379 jnc 0x105
- 0000008C 670105 add [di],eax ; math
- 0000008F 368818 mov [ss:eax],bl
- 00000092 7746 ja 0xda
- 00000094 3529016322 xor eax,0x22630129 ; decryption
- 00000099 0110 add [eax],edx ; math
- 0000009B 91 xchg eax,ecx
- 0000009C 46 inc esi
- 0000009D 138535127340 adc eax,[ebp+0x40731235]
- 000000A3 02444771 add al,[edi+eax*2+0x71] ; math
- 000000A7 124082 adc al,[eax-0x7e]
- 000000AA 98 cwde
- 000000AB 97 xchg eax,edi
- 000000AC 334333 xor eax,[ebx+0x33] ; decryption
- 000000AF 40 inc eax
- 000000B0 120408 adc al,[eax+ecx]
- 000000B3 43 inc ebx
- 000000B4 07 pop es
- 000000B5 2669433309976159 imul eax,[es:ebx+0x33],dword 0x59619709
- 000000BD 7712 ja 0xd1
- 000000BF 95 xchg eax,ebp
- 000000C0 3327 xor esp,[edi] ; decryption
- 000000C2 99 cdq
- 000000C3 92 xchg eax,edx
- 000000C4 2837 sub [edi],dh ; math
- 000000C6 52 push edx
- 000000C7 06 push es
- 000000C8 37 aaa
- 000000C9 51 push ecx
- 000000CA 635766 arpl [edi+0x66],dx
- 000000CD 317232 xor [edx+0x32],esi ; decryption
- 000000D0 80662290 and byte [esi+0x22],0x90
- 000000D4 82 db 0x82
- 000000D5 56 push esi
- 000000D6 94 xchg eax,esp
- 000000D7 51 push ecx
- 000000D8 1410 adc al,0x10
- 000000DA 55 push ebp
- 000000DB 94 xchg eax,esp
- 000000DC 6641 inc cx
- 000000DE 90 nop
- 000000DF 1807 sbb [edi],al
- 000000E1 108818551817 adc [eax+0x17185518],cl
- 000000E7 17 pop ss
- 000000E8 7486 jz 0x70
- 000000EA 7527 jnz 0x113 ; loop
- 000000EC 3100 xor [eax],eax ; decryption
- 000000EE 038529598512 add eax,[ebp+0x12855929] ; math
- 000000F4 51 push ecx
- 000000F5 42 inc edx
- 000000F6 49 dec ecx
- 000000F7 42 inc edx
- 000000F8 46 inc esi
- 000000F9 59 pop ecx
- 000000FA 42 inc edx
- 000000FB 671001 adc [bx+di],al
- 000000FE 7312 jnc 0x112
- 00000100 186953 sbb [ecx+0x53],ch
- 00000103 58 pop eax
- 00000104 7296 jc 0x9c
- 00000106 6835816799 push dword 0x99678135
- 0000010B 08940008291350 or [eax+eax+0x50132908],dl
- 00000112 811629312946 adc dword [esi],0x46293129
- 00000118 92 xchg eax,edx
- 00000119 06 push es
- 0000011A 1504413634 adc eax,0x34364104
- 0000011F 327305 xor dh,[ebx+0x5] ; decryption
- 00000122 884684 mov [esi-0x7c],al
- 00000125 198528988917 sbb [ebp+0x17899828],eax
- 0000012B 198140584052 sbb [ecx+0x52405840],eax
- 00000131 53 push ebx
- 00000132 7813 js 0x147
- 00000134 41 inc ecx
- 00000135 849841927527 test [eax+0x27759241],bl
- 0000013B 6754 push esp
- 0000013D 851515775987 test [dword 0x87597715],edx
- 00000143 7577 jnz 0x1bc ; loop
- 00000145 55 push ebp
- 00000146 626671 bound esp,[esi+0x71]
- 00000149 63 db 0x63
- ----------------------------------------------------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement