API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 23rd, 2015
307
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.13 KB | None | 0 0
raw download clone embed print report
  1. The base64 encoded string:
  2. ----------------------------------------------------------------------------
  3. CjU3MTI2NjE2MTI3ODQyMzA1ODE3ODE1NDMzMTcyNTE2NjAyODg5MjIzMzIwODUzNTI5NzAxNDg5
  4. MjQ4ODY4MzU1MDkxNDkyMjkyNjU2MzQ0Mjg1Njc4NjgxNzQ2OTQxOTc4NzExODUzNjQ1MjI1NTc2
  5. ODUxMjkzMTQyMDAxNzA3MTE2MDQ1NzIyNDAzNzQ2MzY1OTAxNTI0NzkyODc3MTA2MTk0NDQ3Mjkw
  6. MjY3NTIwNTI3NjA1NTczNjA3NTA0MDIxNDg2MTU3MDY5NjI1OTc4NjcyNzI1ODUxNDQ1OTk3MTUz
  7. MzU3NTQzMzkwNzIxMTExMDg1ODgzNzI2Nzk3MjgzOTU2MjcxNzI5Njc3Mzc3OTc1MzczNzk2NzAx
  8. MDUzNjg4MTg3NzQ2MzUyOTAxNjMyMjAxMTA5MTQ2MTM4NTM1MTI3MzQwMDI0NDQ3NzExMjQwODI5
  9. ODk3MzM0MzMzNDAxMjA0MDg0MzA3MjY2OTQzMzMwOTk3NjE1OTc3MTI5NTMzMjc5OTkyMjgzNzUy
  10. MDYzNzUxNjM1NzY2MzE3MjMyODA2NjIyOTA4MjU2OTQ1MTE0MTA1NTk0NjY0MTkwMTgwNzEwODgx
  11. ODU1MTgxNzE3NzQ4Njc1MjczMTAwMDM4NTI5NTk4NTEyNTE0MjQ5NDI0NjU5NDI2NzEwMDE3MzEy
  12. MTg2OTUzNTg3Mjk2NjgzNTgxNjc5OTA4OTQwMDA4MjkxMzUwODExNjI5MzEyOTQ2OTIwNjE1MDQ0
  13. MTM2MzQzMjczMDU4ODQ2ODQxOTg1Mjg5ODg5MTcxOTgxNDA1ODQwNTI1Mzc4MTM0MTg0OTg0MTky
  14. NzUyNzY3NTQ4NTE1MTU3NzU5ODc3NTc3NTU2MjY2NzE2Mwo=
  15. ----------------------------------------------------------------------------
  16.  
  17.  
  18. The hexadecimal decoded string:
  19. ----------------------------------------------------------------------------
  20. 5712661612784230581781543317251660288922332085352970148924886835509149229265
  21. 6344285678681746941978711853645225576851293142001707116045722403746365901524
  22. 7928771061944472902675205276055736075040214861570696259786727258514459971533
  23. 5754339072111108588372679728395627172967737797537379670105368818774635290163
  24. 2201109146138535127340024447711240829897334333401204084307266943330997615977
  25. 1295332799922837520637516357663172328066229082569451141055946641901807108818
  26. 5518171774867527310003852959851251424942465942671001731218695358729668358167
  27. 9908940008291350811629312946920615044136343273058846841985289889171981405840
  28. 5253781341849841927527675485151577598775775562667163
  29. ----------------------------------------------------------------------------
  30.  
  31.  
  32. WIN32 & WIN64 assembly code:
  33. ----------------------------------------------------------------------------
  34. 00000000 57 push edi
  35. 00000001 126616 adc ah,[esi+0x16]
  36. 00000004 127842 adc bh,[eax+0x42]
  37. 00000007 305817 xor [eax+0x17],bl ; decryption
  38. 0000000A 8154331725166028 adc dword [ebx+esi+0x17],0x28601625
  39. 00000012 8922 mov [edx],esp
  40. 00000014 3320 xor esp,[eax] ; decryption
  41. 00000016 853529701489 test [dword 0x89147029],esi
  42. 0000001C 2488 and al,0x88
  43. 0000001E 6835509149 push dword 0x49915035
  44. 00000023 229265634428 and dl,[edx+0x28446365]
  45. 00000029 56 push esi
  46. 0000002A 7868 js 0x94
  47. 0000002C 17 pop ss
  48. 0000002D 46 inc esi
  49. 0000002E 94 xchg eax,esp
  50. 0000002F 197871 sbb [eax+0x71],edi
  51. 00000032 185364 sbb [ebx+0x64],dl
  52. 00000035 52 push edx
  53. 00000036 2557685129 and eax,0x29516857
  54. 0000003B 314200 xor [edx+0x0],eax ; decryption
  55. 0000003E 17 pop ss
  56. 0000003F 07 pop es
  57. 00000040 116045 adc [eax+0x45],esp
  58. 00000043 7224 jc 0x69
  59. 00000045 03746365 add esi,[ebx+0x65] ; math
  60. 00000049 90 nop
  61. 0000004A 1524792877 adc eax,0x77287924
  62. 0000004F 106194 adc [ecx-0x6c],ah
  63. 00000052 44 inc esp
  64. 00000053 7290 jc 0xffffffe5
  65. 00000055 267520 es jnz 0x78 ; loop
  66. 00000058 52 push edx
  67. 00000059 7605 jna 0x60
  68. 0000005B 57 push edi
  69. 0000005C 3607 ss pop es
  70. 0000005E 50 push eax
  71. 0000005F 40 inc eax
  72. 00000060 214861 and [eax+0x61],ecx
  73. 00000063 57 push edi
  74. 00000064 06 push es
  75. 00000065 96 xchg eax,esi
  76. 00000066 2597867272 and eax,0x72728697
  77. 0000006B 58 pop eax
  78. 0000006C 51 push ecx
  79. 0000006D 44 inc esp
  80. 0000006E 59 pop ecx
  81. 0000006F 97 xchg eax,edi
  82. 00000070 1533575433 adc eax,0x33545733
  83. 00000075 90 nop
  84. 00000076 7211 jc 0x89
  85. 00000078 1108 adc [eax],ecx
  86. 0000007A 58 pop eax
  87. 0000007B 83726797 xor dword [edx+0x67],byte -0x69 ; decryption
  88. 0000007F 2839 sub [ecx],bh ; math
  89. 00000081 56 push esi
  90. 00000082 27 daa
  91. 00000083 17 pop ss
  92. 00000084 296773 sub [edi+0x73],esp ; math
  93. 00000087 7797 ja 0x20
  94. 00000089 53 push ebx
  95. 0000008A 7379 jnc 0x105
  96. 0000008C 670105 add [di],eax ; math
  97. 0000008F 368818 mov [ss:eax],bl
  98. 00000092 7746 ja 0xda
  99. 00000094 3529016322 xor eax,0x22630129 ; decryption
  100. 00000099 0110 add [eax],edx ; math
  101. 0000009B 91 xchg eax,ecx
  102. 0000009C 46 inc esi
  103. 0000009D 138535127340 adc eax,[ebp+0x40731235]
  104. 000000A3 02444771 add al,[edi+eax*2+0x71] ; math
  105. 000000A7 124082 adc al,[eax-0x7e]
  106. 000000AA 98 cwde
  107. 000000AB 97 xchg eax,edi
  108. 000000AC 334333 xor eax,[ebx+0x33] ; decryption
  109. 000000AF 40 inc eax
  110. 000000B0 120408 adc al,[eax+ecx]
  111. 000000B3 43 inc ebx
  112. 000000B4 07 pop es
  113. 000000B5 2669433309976159 imul eax,[es:ebx+0x33],dword 0x59619709
  114. 000000BD 7712 ja 0xd1
  115. 000000BF 95 xchg eax,ebp
  116. 000000C0 3327 xor esp,[edi] ; decryption
  117. 000000C2 99 cdq
  118. 000000C3 92 xchg eax,edx
  119. 000000C4 2837 sub [edi],dh ; math
  120. 000000C6 52 push edx
  121. 000000C7 06 push es
  122. 000000C8 37 aaa
  123. 000000C9 51 push ecx
  124. 000000CA 635766 arpl [edi+0x66],dx
  125. 000000CD 317232 xor [edx+0x32],esi ; decryption
  126. 000000D0 80662290 and byte [esi+0x22],0x90
  127. 000000D4 82 db 0x82
  128. 000000D5 56 push esi
  129. 000000D6 94 xchg eax,esp
  130. 000000D7 51 push ecx
  131. 000000D8 1410 adc al,0x10
  132. 000000DA 55 push ebp
  133. 000000DB 94 xchg eax,esp
  134. 000000DC 6641 inc cx
  135. 000000DE 90 nop
  136. 000000DF 1807 sbb [edi],al
  137. 000000E1 108818551817 adc [eax+0x17185518],cl
  138. 000000E7 17 pop ss
  139. 000000E8 7486 jz 0x70
  140. 000000EA 7527 jnz 0x113 ; loop
  141. 000000EC 3100 xor [eax],eax ; decryption
  142. 000000EE 038529598512 add eax,[ebp+0x12855929] ; math
  143. 000000F4 51 push ecx
  144. 000000F5 42 inc edx
  145. 000000F6 49 dec ecx
  146. 000000F7 42 inc edx
  147. 000000F8 46 inc esi
  148. 000000F9 59 pop ecx
  149. 000000FA 42 inc edx
  150. 000000FB 671001 adc [bx+di],al
  151. 000000FE 7312 jnc 0x112
  152. 00000100 186953 sbb [ecx+0x53],ch
  153. 00000103 58 pop eax
  154. 00000104 7296 jc 0x9c
  155. 00000106 6835816799 push dword 0x99678135
  156. 0000010B 08940008291350 or [eax+eax+0x50132908],dl
  157. 00000112 811629312946 adc dword [esi],0x46293129
  158. 00000118 92 xchg eax,edx
  159. 00000119 06 push es
  160. 0000011A 1504413634 adc eax,0x34364104
  161. 0000011F 327305 xor dh,[ebx+0x5] ; decryption
  162. 00000122 884684 mov [esi-0x7c],al
  163. 00000125 198528988917 sbb [ebp+0x17899828],eax
  164. 0000012B 198140584052 sbb [ecx+0x52405840],eax
  165. 00000131 53 push ebx
  166. 00000132 7813 js 0x147
  167. 00000134 41 inc ecx
  168. 00000135 849841927527 test [eax+0x27759241],bl
  169. 0000013B 6754 push esp
  170. 0000013D 851515775987 test [dword 0x87597715],edx
  171. 00000143 7577 jnz 0x1bc ; loop
  172. 00000145 55 push ebp
  173. 00000146 626671 bound esp,[esi+0x71]
  174. 00000149 63 db 0x63
  175. ----------------------------------------------------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!