Edit tour

Linux Analysis Report
meow.arm5.elf

Overview

General Information

Sample name:	meow.arm5.elf
Analysis ID:	1538550
MD5:	e3a9d8f7b0a5377f5e422c6ec6354fae
SHA1:	46b7a6cf518f0f3670784d4ebe33cb5ddbd00cfa
SHA256:	75224ee98d25854715b2ef96ef268dd51eff736b1f7fa0227546d0ea407649dc
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Detected TCP or UDP traffic on non-standard ports

Found strings indicative of a multi-platform dropper

Sample and/or dropped files contains symbols with suspicious names

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1538550
Start date and time:	2024-10-21 14:31:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	meow.arm5.elf
Detection:	MAL
Classification:	mal64.troj.linELF@0/0@5/0

Warnings

VT rate limit hit for: meow.arm5.elf

Runtime Messages

Command:	/tmp/meow.arm5.elf
PID:	5484
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

meow.arm5.elf (PID: 5484, Parent: 5411, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/meow.arm5.elf

meow.arm5.elf New Fork (PID: 5486, Parent: 5484)

meow.arm5.elf New Fork (PID: 5488, Parent: 5486)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: meow.arm5.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: meow.arm5.elf

ReversingLabs: Detection: 15%

Source: meow.arm5.elf

String: /lib//sbin//usr//proc//exeself/fd/fd/socket:/proc/proc//exewgetcurlftpmountabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789/proc/net/tcp/proc//exe/fd//proc//maps/lib/usr/lib

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 194.26.25.7 ports 8080,9583,3,5,8,9

Source: global traffic	TCP traffic: 192.168.2.14:53202 -> 194.26.25.146:7777
Source: global traffic	TCP traffic: 192.168.2.14:39634 -> 194.26.25.7:9583
Source: global traffic	TCP traffic: 192.168.2.14:59900 -> 45.89.63.16:5555

Source: /tmp/meow.arm5.elf (PID: 5484)

Socket: 127.0.0.1:45295

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.146
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.146
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.146
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.146
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.146
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.146
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 172.236.34.39
Source: unknown	TCP traffic detected without corresponding DNS query: 172.236.34.39
Source: unknown	TCP traffic detected without corresponding DNS query: 172.236.34.39
Source: unknown	TCP traffic detected without corresponding DNS query: 172.236.34.39
Source: unknown	TCP traffic detected without corresponding DNS query: 172.236.34.39
Source: unknown	TCP traffic detected without corresponding DNS query: 172.236.34.39
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.7
Source: unknown	TCP traffic detected without corresponding DNS query: 45.89.63.16
Source: unknown	TCP traffic detected without corresponding DNS query: 45.89.63.16
Source: unknown	TCP traffic detected without corresponding DNS query: 45.89.63.16
Source: unknown	TCP traffic detected without corresponding DNS query: 45.89.63.16

Source: global traffic	DNS traffic detected: DNS query: dvrhelpers.su
Source: global traffic	DNS traffic detected: DNS query: xlabresearch.ru
Source: global traffic	DNS traffic detected: DNS query: xlabsecurity.ru

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: add_attack
Source: ELF static info symbol of initial sample	Name: attack_add_pid
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_ongoing
Source: ELF static info symbol of initial sample	Name: attack_parse
Source: ELF static info symbol of initial sample	Name: attack_remove_id
Source: ELF static info symbol of initial sample	Name: attack_start
Source: ELF static info symbol of initial sample	Name: attack_stop
Source: ELF static info symbol of initial sample	Name: attacks_ack
Source: ELF static info symbol of initial sample	Name: attacks_gre

Source: meow.arm5.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: classification engine

Classification label: mal64.troj.linELF@0/0@5/0

Source: /tmp/meow.arm5.elf (PID: 5484)

Queries kernel information via 'uname':

Jump to behavior

Source: meow.arm5.elf, 5484.1.0000564bd373a000.0000564bd3868000.rw-.sdmp	Binary or memory string: KV!/etc/qemu-binfmt/arm
Source: meow.arm5.elf, 5484.1.0000564bd373a000.0000564bd3868000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: meow.arm5.elf, 5484.1.00007fff538ac000.00007fff538cd000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: meow.arm5.elf, 5484.1.00007fff538ac000.00007fff538cd000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/meow.arm5.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/meow.arm5.elf

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
meow.arm5.elf	16%	ReversingLabs	Linux.Trojan.DDOSAgent
meow.arm5.elf	100%	Avira	LINUX/AVI.Agent.tovti

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dvrhelpers.su	unknown	unknown	false	unknown
xlabsecurity.ru	unknown	unknown	false	unknown
xlabresearch.ru	unknown	unknown	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.236.34.39	unknown	United States	20940	AKAMAI-ASN1EU	false
194.26.25.146	unknown	unknown	63018	DEDICATEDUS	false
194.26.25.7	unknown	unknown	63018	DEDICATEDUS	true
45.89.63.16	unknown	Russian Federation	48430	FIRSTDC-ASRU	false

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AKAMAI-ASN1EU	https://www.childkorea.or.kr/bbs/link.html?code=alarm&number=3064&url=https://form.jotform.com/242923371946059	Get hash	malicious	HTMLPhisher	Browse	2.20.245.138
	http://www.5movierulz.mom	Get hash	malicious	Unknown	Browse	2.16.164.105
	http://google.com	Get hash	malicious	Unknown	Browse	23.221.22.215
	bin.armv7l.elf	Get hash	malicious	Mirai	Browse	23.43.60.226
	RFQ_PO-GGA7765JK09_MATERIALS_SPECIFICATIONS.scr.exe	Get hash	malicious	PureLog Stealer, RedLine	Browse	172.234.222.138
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	23.199.0.224
	yakuza.sparc.elf	Get hash	malicious	Unknown	Browse	172.234.241.17
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	104.77.135.121
	Ageeconstruction -_(BENEFIT INSTRUCTIONS)_.docx	Get hash	malicious	Mamba2FA	Browse	88.221.110.138
	https://na4.docusign.net/Signing/EmailStart.aspx?a=943f47c1-68f1-4387-ae39-91f2830b86a0&etti=24&acct=e7f3e748-8206-4510-8315-0e64f8c91c9b&er=99aeb7e9-c08a-4462-99dc-389e7b080ab6	Get hash	malicious	Phisher	Browse	2.16.168.6
DEDICATEDUS	la.bot.arm-20241006-1050.elf	Get hash	malicious	Unknown	Browse	200.220.163.218
	2.exe	Get hash	malicious	AsyncRAT	Browse	216.105.171.163
	dKMlbDZXP3.elf	Get hash	malicious	Mirai	Browse	216.52.183.163
	build.hta	Get hash	malicious	Quasar	Browse	64.42.179.59
	build.exe	Get hash	malicious	Quasar	Browse	64.42.179.59
	Replace.exe	Get hash	malicious	Unknown	Browse	74.201.73.52
	x1b5bmJgLm.elf	Get hash	malicious	Unknown	Browse	200.220.163.225
	0FnrrE8B6Y.elf	Get hash	malicious	Mirai	Browse	168.81.61.232
	D2M15lCoQK.elf	Get hash	malicious	Mirai	Browse	45.74.57.45
	CGlwOBF2cH.elf	Get hash	malicious	Unknown	Browse	45.74.57.32
FIRSTDC-ASRU	BLh4H2eIU9.exe	Get hash	malicious	RHADAMANTHYS	Browse	37.221.67.152
	vsYkceYJOX.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RedLine, Stealc, Vidar	Browse	62.133.62.93
	6.dll	Get hash	malicious	Unknown	Browse	141.98.169.154
	build.exe	Get hash	malicious	PureLog Stealer	Browse	93.185.167.95
	arm7.elf	Get hash	malicious	Unknown	Browse	45.89.63.160
	fblXRRCHON.pos.dll	Get hash	malicious	Unknown	Browse	141.98.169.154
	GmsiIZXruf.hos.dll	Get hash	malicious	Unknown	Browse	141.98.169.154
	file.exe	Get hash	malicious	LummaC, Amadey, Clipboard Hijacker, Cryptbot, LummaC Stealer	Browse	62.133.62.93
	https://www.izmailovo.ru/contacts/	Get hash	malicious	HTMLPhisher	Browse	5.182.5.41
	VMRhiAFJtl.exe	Get hash	malicious	Amadey, Clipboard Hijacker, CryptOne, Cryptbot, PureLog Stealer, RedLine, Stealc	Browse	62.133.62.93
DEDICATEDUS	la.bot.arm-20241006-1050.elf	Get hash	malicious	Unknown	Browse	200.220.163.218
	2.exe	Get hash	malicious	AsyncRAT	Browse	216.105.171.163
	dKMlbDZXP3.elf	Get hash	malicious	Mirai	Browse	216.52.183.163
	build.hta	Get hash	malicious	Quasar	Browse	64.42.179.59
	build.exe	Get hash	malicious	Quasar	Browse	64.42.179.59
	Replace.exe	Get hash	malicious	Unknown	Browse	74.201.73.52
	x1b5bmJgLm.elf	Get hash	malicious	Unknown	Browse	200.220.163.225
	0FnrrE8B6Y.elf	Get hash	malicious	Mirai	Browse	168.81.61.232
	D2M15lCoQK.elf	Get hash	malicious	Mirai	Browse	45.74.57.45
	CGlwOBF2cH.elf	Get hash	malicious	Unknown	Browse	45.74.57.32

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.8893563302137535
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	meow.arm5.elf
File size:	169'673 bytes
MD5:	e3a9d8f7b0a5377f5e422c6ec6354fae
SHA1:	46b7a6cf518f0f3670784d4ebe33cb5ddbd00cfa
SHA256:	75224ee98d25854715b2ef96ef268dd51eff736b1f7fa0227546d0ea407649dc
SHA512:	82fe506a8458661946200a834a5945f21d5c799b1bfb7ce956ba10394774c93a2a71a2be49f2672f11bd634c0004a8c94ebb27e13d60813622dd254d515d9682
SSDEEP:	3072:rUdt8mpTzSvQt/6JtE3juZ6hsAcFJDGi8kZjXd:/UTKETuohFcSi8kFt
TLSH:	37F32A48FB54972FC3E223BEEA5A438D33328F94A797331689346BB52FC67586D21114
File Content Preview:	.ELF..............(.....l...4...8,......4. ...(........pD...D...D........................................................................8..........Q.td.............................@-..@............/..@-.,@...0....S..... 0....S.........../..0...0...@..../

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x816c
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	142392
Section Header Size:	40
Number of Section Headers:	27
Header String Table Index:	24

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80b4	0xb4	0x14	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x80c8	0xc8	0x1796c	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1fa34	0x17a34	0x14	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x1fa48	0x17a48	0x11fc	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x20c44	0x18c44	0xc8	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x29000	0x19000	0x4	0x0	0x3	WA	0	0	4
.init_array	INIT_ARRAY	0x29004	0x19004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x29008	0x19008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2900c	0x1900c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x29010	0x19010	0x28	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x29038	0x19038	0x98	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x290d0	0x190d0	0x3744	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x190d0	0xa0e	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x19ae0	0x220	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x19d00	0x2b7	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x19fb7	0x3216	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1d1cd	0xb23	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1dcf0	0x14c7	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1f1b8	0x380	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1f538	0xa74	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1ffac	0x2392	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x2233e	0x7e0	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x22b1e	0x14	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x22b32	0x106	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x23070	0x4880	0x10	0x0		26	747	4
.strtab	STRTAB	0x0	0x278f0	0x1dd9	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x18c44	0x20c44	0x20c44	0xc8	0xc8	4.3561	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x18d0c	0x18d0c	5.9636	0x5	R E	0x8000	.init .text .fini .rodata .ARM.exidx
LOAD	0x19000	0x29000	0x29000	0xd0	0x3814	2.2790	0x6	RW	0x8000	.eh_frame .init_array .fini_array .jcr .got .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80c8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1fa34	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1fa48	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x20c44	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x29000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x29004	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x29008	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2900c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x29010	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x29038	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x290d0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
$a	.symtab	0x80b4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1fa34	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1fa38	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x810c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x816c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8ae4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8bf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8cc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8eb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8fa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x92a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x938c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x93dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x94c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x96ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x98d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x99b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9b58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9bf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa23c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa5e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa680	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa6d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xab94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb348	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb928	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbed4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc7d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcda0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd52c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdaf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe5c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x106fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1076c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x107d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10888	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10aac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10eec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1106c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x112a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x116a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11de4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x139d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1490c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14958	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14aac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14dcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14de0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1519c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15334	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x153cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15460	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1585c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15aec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x166e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16928	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16acc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16fcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1703c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17060	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1720c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17224	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17384	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1752c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1755c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1763c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1767c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17834	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1787c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x178b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1794c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17958	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17998	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x179a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x179a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17df0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ea8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18518	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18694	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x186d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1883c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18904	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18998	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18acc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18bb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ca4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ccc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x196c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19aec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19cb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ed0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19f18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a680	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b2a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bc3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bd80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c130	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c2ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c498	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c4c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c4f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c534	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c630	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c914	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ca70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbe4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d01c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d4b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d5f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d654	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d6a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d954	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dfa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e4d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e56c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e574	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e5a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e5b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e5bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e7dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e92c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e948	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e9a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ea14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eacc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eaec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ec30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f178	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f180	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f24c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f9a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f9ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fa20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29008	0	NOTYPE	<unknown>	DEFAULT	8
$d	.symtab	0x8158	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29004	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x818c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2903c	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x1fa50	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x8578	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8ad4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8bf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8cb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8eac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8fa0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9290	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x937c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x93d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x94b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x96a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x98c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2905c	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x9984	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9b54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9bf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9c98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa234	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa5d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29060	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x1fb7c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa6bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xab84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29064	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x29068	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x2906c	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x29070	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x1fdd4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xc7c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29074	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x29078	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x2907c	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x29080	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x29084	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x1fdf6	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xeeb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29088	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x2908c	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x1fe46	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xfd4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29090	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x1fe5f	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10618	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29094	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x106f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10768	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x107d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10884	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10aa0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ed0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29098	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x11060	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x112a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1156c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x116a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2909c	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x290a0	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x11c0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ce0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11de0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290a4	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x12b04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290a8	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x133f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290ac	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x139c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290b0	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x148b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14908	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14954	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14aa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x150f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15188	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15330	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x153c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a168	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x155c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15850	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ae0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15fd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x166c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2000a	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x169e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16af0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16b14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16eec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17038	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1705c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17198	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x171b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17200	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x172ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1734c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17380	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20084	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17638	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x178a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17940	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17948	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17950	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17994	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1799c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x179a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x185a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18690	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x186cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x188fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18988	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18bfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ca0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ce8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cf4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290c4	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x18d20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a5b0	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x18d8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ed8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x196ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x200c1	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x19ae8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19c64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19cb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19e34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19ef0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a660	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b23c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20200	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1c3cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c474	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x203e0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1c4bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c4f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c904	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cb28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cbb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cbdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x1df98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb0	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x1e4cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe8	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x20b44	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x168d	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x1e7c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f168	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x120	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x1203	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x304	0	NOTYPE	<unknown>	DEFAULT	19
$d	.symtab	0x203c	0	NOTYPE	<unknown>	DEFAULT	21
C.0.3089	.symtab	0x1fb7c	40	OBJECT	<unknown>	DEFAULT	4
C.10.3380	.symtab	0x1fe26	16	OBJECT	<unknown>	DEFAULT	4
C.10.3380	.symtab	0x1fe87	12	OBJECT	<unknown>	DEFAULT	4
C.11.3381	.symtab	0x1fe0e	24	OBJECT	<unknown>	DEFAULT	4
C.11.3381	.symtab	0x1fe73	20	OBJECT	<unknown>	DEFAULT	4
C.12.3382	.symtab	0x1fdf6	24	OBJECT	<unknown>	DEFAULT	4
C.12.3382	.symtab	0x1fe5f	20	OBJECT	<unknown>	DEFAULT	4
C.18.3401	.symtab	0x1fe46	25	OBJECT	<unknown>	DEFAULT	4
C.18.3416	.symtab	0x1fde6	16	OBJECT	<unknown>	DEFAULT	4
C.19.3426	.symtab	0x1fdd6	16	OBJECT	<unknown>	DEFAULT	4
C.22.3448	.symtab	0x1fdd4	2	OBJECT	<unknown>	DEFAULT	4
C.38.4033	.symtab	0x1fa5c	8	OBJECT	<unknown>	DEFAULT	4
C.7.3681	.symtab	0x1fa50	8	OBJECT	<unknown>	DEFAULT	4
C.9.3379	.symtab	0x1fe36	16	OBJECT	<unknown>	DEFAULT	4
C.9.3379	.symtab	0x1fe93	12	OBJECT	<unknown>	DEFAULT	4
_DYNAMIC	.symtab	0x0	0	NOTYPE	<unknown>	HIDDEN	SHN_UNDEF
_Exit	.symtab	0x18ee8	24	FUNC	<unknown>	DEFAULT	2
_Exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_GLOBAL_OFFSET_TABLE_	.symtab	0x29010	0	OBJECT	<unknown>	HIDDEN	10
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_Unwind_Complete	.symtab	0x1e574	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1e578	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1f228	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1e56c	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1e5b0	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1f24c	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1f9ec	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1e5a4	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1f1bc	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1f1e0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1f204	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1e4d4	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1eaec	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1e520	76	FUNC	<unknown>	HIDDEN	2
__EH_FRAME_BEGIN__	.symtab	0x29000	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x29000	0	OBJECT	<unknown>	DEFAULT	6
__JCR_END__	.symtab	0x2900c	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x2900c	0	OBJECT	<unknown>	DEFAULT	9
___Unwind_ForcedUnwind	.symtab	0x1f228	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1f1bc	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1f1e0	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1f204	36	FUNC	<unknown>	HIDDEN	2
___environ	.symtab	0x2a5b0	4	OBJECT	<unknown>	DEFAULT	12
__a_barrier	.symtab	0x18c40	0	FUNC	<unknown>	HIDDEN	2
__a_barrier_dummy	.symtab	0x18c50	0	NOTYPE	<unknown>	HIDDEN	2
__a_barrier_oldkuser	.symtab	0x18c5c	0	NOTYPE	<unknown>	HIDDEN	2
__a_barrier_ptr	.symtab	0x290c4	0	NOTYPE	<unknown>	HIDDEN	11
__a_barrier_v6	.symtab	0x18c84	0	NOTYPE	<unknown>	HIDDEN	2
__a_barrier_v7	.symtab	0x18c8c	0	NOTYPE	<unknown>	HIDDEN	2
__a_cas	.symtab	0x18c94	0	FUNC	<unknown>	HIDDEN	2
__a_cas_dummy	.symtab	0x18ca4	0	NOTYPE	<unknown>	HIDDEN	2
__a_cas_ptr	.symtab	0x290c8	0	NOTYPE	<unknown>	HIDDEN	11
__a_cas_v6	.symtab	0x18cc0	0	NOTYPE	<unknown>	HIDDEN	2
__a_cas_v7	.symtab	0x18ce4	0	NOTYPE	<unknown>	HIDDEN	2
__a_gettp	.symtab	0x18d08	0	FUNC	<unknown>	HIDDEN	2
__a_gettp_dummy	.symtab	0x18d18	0	NOTYPE	<unknown>	HIDDEN	2
__a_gettp_ptr	.symtab	0x290cc	0	NOTYPE	<unknown>	HIDDEN	11
__adddf3	.symtab	0x1cc0c	784	FUNC	<unknown>	HIDDEN	2
__addsf3	.symtab	0x1d6b4	444	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1d568	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1d568	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1d54c	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2iz	.symtab	0x1d5f8	92	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1d654	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1cc0c	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1d580	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1d5c8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1d5e0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1d5b0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1d598	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1d2ac	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1d01c	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1cc00	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1cc08	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1cf68	64	FUNC	<unknown>	HIDDEN	2
__aeabi_fadd	.symtab	0x1d6b4	444	FUNC	<unknown>	HIDDEN	2
__aeabi_frsub	.symtab	0x1d6a8	456	FUNC	<unknown>	HIDDEN	2
__aeabi_fsub	.symtab	0x1d6b0	448	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1cf40	40	FUNC	<unknown>	HIDDEN	2
__aeabi_i2f	.symtab	0x1d878	32	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x14c88	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x14db4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1cfbc	96	FUNC	<unknown>	HIDDEN	2
__aeabi_l2f	.symtab	0x1d8a8	172	FUNC	<unknown>	HIDDEN	2
__aeabi_llsl	.symtab	0x1cbe4	28	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x18d08	0	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x1cf1c	36	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2f	.symtab	0x1d870	40	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x14b74	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x14c70	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1cfa8	116	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2f	.symtab	0x1d898	188	FUNC	<unknown>	HIDDEN	2
__aeabi_uldivmod	.symtab	0x1d954	0	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1f188	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1f180	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1f178	8	FUNC	<unknown>	HIDDEN	2
__aio_close	.symtab	0x18a44	4	FUNC	<unknown>	DEFAULT	2
__ashldi3	.symtab	0x1cbe4	28	FUNC	<unknown>	HIDDEN	2
__block_all_sigs	.symtab	0x1731c	52	FUNC	<unknown>	DEFAULT	2
__block_app_sigs	.symtab	0x17350	52	FUNC	<unknown>	DEFAULT	2
__bss_end__	.symtab	0x2c814	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x290d0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x290d0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__clock_gettime	.symtab	0x18904	148	FUNC	<unknown>	DEFAULT	2
__clz_tab	.symtab	0x20b44	256	OBJECT	<unknown>	HIDDEN	4
__cmpdf2	.symtab	0x1d4c8	132	FUNC	<unknown>	HIDDEN	2
__copy_tls	.symtab	0x18d24	108	FUNC	<unknown>	DEFAULT	2
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x29038	0	NOTYPE	<unknown>	DEFAULT	11
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x14dcc	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1d2ac	524	FUNC	<unknown>	HIDDEN	2
__divdi3	.symtab	0x1da00	1440	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x14c88	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80c8	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x29008	0	OBJECT	<unknown>	DEFAULT	8
__dso_handle	.symtab	0x29038	0	OBJECT	<unknown>	HIDDEN	11
__end__	.symtab	0x2c814	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2a5b0	4	OBJECT	<unknown>	DEFAULT	12
__environ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__eqdf2	.symtab	0x1d4c8	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x15120	20	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x20d0c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x20c44	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__expand_heap	.symtab	0x19aec	388	FUNC	<unknown>	DEFAULT	2
__extendsfdf2	.symtab	0x1cf68	64	FUNC	<unknown>	HIDDEN	2
__fini_array_end	.symtab	0x2900c	0	NOTYPE	<unknown>	HIDDEN	8
__fini_array_start	.symtab	0x29008	0	NOTYPE	<unknown>	HIDDEN	8
__fixdfsi	.symtab	0x1d5f8	92	FUNC	<unknown>	HIDDEN	2
__fixunsdfsi	.symtab	0x1d654	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1cfbc	96	FUNC	<unknown>	HIDDEN	2
__floatdisf	.symtab	0x1d8a8	172	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1cf40	40	FUNC	<unknown>	HIDDEN	2
__floatsisf	.symtab	0x1d878	32	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1cfa8	116	FUNC	<unknown>	HIDDEN	2
__floatundisf	.symtab	0x1d898	188	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1cf1c	36	FUNC	<unknown>	HIDDEN	2
__floatunsisf	.symtab	0x1d870	40	FUNC	<unknown>	HIDDEN	2
__fork_handler	.symtab	0x17224	4	FUNC	<unknown>	DEFAULT	2
__frame_dummy_init_array_entry	.symtab	0x29004	0	OBJECT	<unknown>	DEFAULT	7
__funcs_on_exit	.symtab	0x15134	4	FUNC	<unknown>	DEFAULT	2
__fwritex	.symtab	0x1c6cc	240	FUNC	<unknown>	DEFAULT	2
__gedf2	.symtab	0x1d4b8	148	FUNC	<unknown>	HIDDEN	2
__get_handler_set	.symtab	0x19c94	36	FUNC	<unknown>	DEFAULT	2
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1e92c	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1ea14	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1f1ac	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1e9a8	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1eacc	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1f1b4	0	FUNC	<unknown>	HIDDEN	2
__gnu_ldivmod_helper	.symtab	0x1d9b8	72	FUNC	<unknown>	HIDDEN	2
__gnu_uldivmod_helper	.symtab	0x1d970	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1f290	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1f9a4	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1ec30	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x1d4b8	148	FUNC	<unknown>	HIDDEN	2
__hwcap	.symtab	0x2c7c8	4	OBJECT	<unknown>	DEFAULT	12
__inet_aton	.symtab	0x16b78	288	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x29008	0	NOTYPE	<unknown>	HIDDEN	7
__init_array_start	.symtab	0x29004	0	NOTYPE	<unknown>	HIDDEN	7
__init_ssp	.symtab	0x14f04	4	FUNC	<unknown>	DEFAULT	2
__init_tls	.symtab	0x18d90	344	FUNC	<unknown>	DEFAULT	2
__init_tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__intscan	.symtab	0x18f00	1984	FUNC	<unknown>	DEFAULT	2
__lctrans	.symtab	0x1c49c	36	FUNC	<unknown>	DEFAULT	2
__lctrans.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__lctrans_cur	.symtab	0x1c4c0	56	FUNC	<unknown>	DEFAULT	2
__lctrans_impl	.symtab	0x1c498	4	FUNC	<unknown>	DEFAULT	2
__ledf2	.symtab	0x1d4c0	140	FUNC	<unknown>	HIDDEN	2
__libc	.symtab	0x2c7cc	52	OBJECT	<unknown>	DEFAULT	12
__libc_sigaction	.symtab	0x19cb8	400	FUNC	<unknown>	DEFAULT	2
__libc_start_main	.symtab	0x14f08	536	FUNC	<unknown>	DEFAULT	2
__libc_start_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__lock	.symtab	0x18630	100	FUNC	<unknown>	DEFAULT	2
__lock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__lockfile	.symtab	0x1c5c4	108	FUNC	<unknown>	DEFAULT	2
__lockfile.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__ltdf2	.symtab	0x1d4c0	140	FUNC	<unknown>	HIDDEN	2
__madvise	.symtab	0x16910	24	FUNC	<unknown>	DEFAULT	2
__malloc0	.symtab	0x166e0	84	FUNC	<unknown>	DEFAULT	2
__mmap	.symtab	0x1692c	192	FUNC	<unknown>	DEFAULT	2
__mremap	.symtab	0x169ec	56	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1d01c	656	FUNC	<unknown>	HIDDEN	2
__munmap	.symtab	0x16a28	56	FUNC	<unknown>	DEFAULT	2
__nedf2	.symtab	0x1d4c8	132	FUNC	<unknown>	HIDDEN	2
__ofl_lock	.symtab	0x1cbbc	40	FUNC	<unknown>	DEFAULT	2
__ofl_unlock	.symtab	0x1cb9c	32	FUNC	<unknown>	DEFAULT	2
__progname	.symtab	0x2a168	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x2a16c	4	OBJECT	<unknown>	DEFAULT	12
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore	.symtab	0x1c534	0	FUNC	<unknown>	DEFAULT	2
__restore_core_regs	.symtab	0x1f190	28	FUNC	<unknown>	HIDDEN	2
__restore_rt	.symtab	0x1c53c	0	FUNC	<unknown>	DEFAULT	2
__restore_sigs	.symtab	0x17384	48	FUNC	<unknown>	DEFAULT	2
__set_thread_area	.symtab	0x1c2ac	356	FUNC	<unknown>	DEFAULT	2
__set_thread_area.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__shgetc	.symtab	0x19724	268	FUNC	<unknown>	DEFAULT	2
__shlim	.symtab	0x196c0	100	FUNC	<unknown>	DEFAULT	2
__sigaction	.symtab	0x19e48	60	FUNC	<unknown>	DEFAULT	2
__simple_malloc	.symtab	0x154b4	280	FUNC	<unknown>	DEFAULT	2
__static_tls	.symtab	0x2c804	16	OBJECT	<unknown>	DEFAULT	12
__stderr_used	.symtab	0x2a6e0	4	OBJECT	<unknown>	DEFAULT	12
__stdin_used	.symtab	0x2a6e0	4	OBJECT	<unknown>	DEFAULT	12
__stdio_exit	.symtab	0x1caec	68	FUNC	<unknown>	DEFAULT	2
__stdio_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdio_exit_needed	.symtab	0x1caec	68	FUNC	<unknown>	DEFAULT	2
__stdout_used	.symtab	0x2a6e0	4	OBJECT	<unknown>	DEFAULT	12
__stpcpy	.symtab	0x1bd80	196	FUNC	<unknown>	DEFAULT	2
__stpncpy	.symtab	0x1be44	308	FUNC	<unknown>	DEFAULT	2
__strchrnul	.symtab	0x1bf9c	348	FUNC	<unknown>	DEFAULT	2
__strerror_l	.symtab	0x1c410	108	FUNC	<unknown>	DEFAULT	2
__strtoimax_internal	.symtab	0x17808	4	FUNC	<unknown>	DEFAULT	2
__strtol_internal	.symtab	0x1779c	36	FUNC	<unknown>	DEFAULT	2
__strtoll_internal	.symtab	0x177e4	36	FUNC	<unknown>	DEFAULT	2
__strtoul_internal	.symtab	0x177c0	36	FUNC	<unknown>	DEFAULT	2
__strtoull_internal	.symtab	0x1780c	36	FUNC	<unknown>	DEFAULT	2
__strtoumax_internal	.symtab	0x17830	4	FUNC	<unknown>	DEFAULT	2
__subdf3	.symtab	0x1cc08	788	FUNC	<unknown>	HIDDEN	2
__subsf3	.symtab	0x1d6b0	448	FUNC	<unknown>	HIDDEN	2
__syscall	.symtab	0x19830	0	FUNC	<unknown>	HIDDEN	2
__syscall3	.symtab	0x1519c	32	FUNC	<unknown>	DEFAULT	2
__syscall3	.symtab	0x17060	32	FUNC	<unknown>	DEFAULT	2
__syscall3	.symtab	0x185a4	32	FUNC	<unknown>	DEFAULT	2
__syscall3	.symtab	0x1c544	32	FUNC	<unknown>	DEFAULT	2
__syscall4	.symtab	0x172f8	36	FUNC	<unknown>	DEFAULT	2
__syscall4	.symtab	0x18700	36	FUNC	<unknown>	DEFAULT	2
__syscall4	.symtab	0x19c70	36	FUNC	<unknown>	DEFAULT	2
__syscall6	.symtab	0x17080	44	FUNC	<unknown>	DEFAULT	2
__syscall_cp	.symtab	0x18694	60	FUNC	<unknown>	DEFAULT	2
__syscall_cp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_cp_c	.symtab	0x186d0	48	FUNC	<unknown>	DEFAULT	2
__syscall_ret	.symtab	0x153cc	52	FUNC	<unknown>	DEFAULT	2
__sysinfo	.symtab	0x2c800	4	OBJECT	<unknown>	DEFAULT	12
__sysv_signal	.symtab	0x17494	88	FUNC	<unknown>	DEFAULT	2
__toread	.symtab	0x1c630	132	FUNC	<unknown>	DEFAULT	2
__toread.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__toread_needs_stdio_exit	.symtab	0x1c6b4	24	FUNC	<unknown>	DEFAULT	2
__towrite	.symtab	0x1cb30	84	FUNC	<unknown>	DEFAULT	2
__towrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__towrite_needs_stdio_exit	.symtab	0x1cb84	24	FUNC	<unknown>	DEFAULT	2
__udivdi3	.symtab	0x1dfa0	1332	FUNC	<unknown>	HIDDEN	2
__udivsi3	.symtab	0x14b74	252	FUNC	<unknown>	HIDDEN	2
__uflow	.symtab	0x19e84	76	FUNC	<unknown>	DEFAULT	2
__uflow.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__unlock	.symtab	0x185c4	108	FUNC	<unknown>	DEFAULT	2
__unlockfile	.symtab	0x1c564	96	FUNC	<unknown>	DEFAULT	2
__vdsosym	.symtab	0x19860	652	FUNC	<unknown>	DEFAULT	2
__vm_wait	.symtab	0x16928	4	FUNC	<unknown>	DEFAULT	2
__wait	.symtab	0x18758	228	FUNC	<unknown>	DEFAULT	2
__wait.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_atoi	.symtab	0x13e9c	136	FUNC	<unknown>	DEFAULT	2
_bss_end__	.symtab	0x2c814	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_edata	.symtab	0x290d0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2c814	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_environ	.symtab	0x2a5b0	4	OBJECT	<unknown>	DEFAULT	12
_fini	.symtab	0x1fa34	0	FUNC	<unknown>	DEFAULT	3
_init	.symtab	0x80b4	0	FUNC	<unknown>	DEFAULT	1
_start	.symtab	0x816c	0	FUNC	<unknown>	DEFAULT	2
_start_c	.symtab	0x8190	60	FUNC	<unknown>	DEFAULT	2
a_fetch_add	.symtab	0x18724	52	FUNC	<unknown>	DEFAULT	2
abort	.symtab	0x1fa20	20	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_attack	.symtab	0xa518	200	FUNC	<unknown>	DEFAULT	2
add_entry	.symtab	0x14a04	168	FUNC	<unknown>	DEFAULT	2
all_mask	.symtab	0x2008c	8	OBJECT	<unknown>	DEFAULT	4
alloc_fwd	.symtab	0x1585c	656	FUNC	<unknown>	DEFAULT	2
alloc_rev	.symtab	0x155cc	656	FUNC	<unknown>	DEFAULT	2
app_mask	.symtab	0x20084	8	OBJECT	<unknown>	DEFAULT	4
atoi	.symtab	0x1767c	136	FUNC	<unknown>	DEFAULT	2
atoi.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_add_pid	.symtab	0x9b58	156	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x98d0	228	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x29100	80	OBJECT	<unknown>	DEFAULT	12
attack_parse	.symtab	0x9c9c	1072	FUNC	<unknown>	DEFAULT	2
attack_remove_id	.symtab	0x9bf4	168	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0xa0cc	368	FUNC	<unknown>	DEFAULT	2
attack_stop	.symtab	0x99b4	420	FUNC	<unknown>	DEFAULT	2
attacks_ack	.symtab	0xab94	1972	FUNC	<unknown>	DEFAULT	2
attacks_gre	.symtab	0xb348	1504	FUNC	<unknown>	DEFAULT	2
attacks_icmp	.symtab	0xb928	1452	FUNC	<unknown>	DEFAULT	2
attacks_raknet	.symtab	0xbed4	2308	FUNC	<unknown>	DEFAULT	2
attacks_rand	.symtab	0xc7d8	1480	FUNC	<unknown>	DEFAULT	2
attacks_socket	.symtab	0xce34	1784	FUNC	<unknown>	DEFAULT	2
attacks_std	.symtab	0xd52c	1480	FUNC	<unknown>	DEFAULT	2
attacks_stomp	.symtab	0xdaf4	2768	FUNC	<unknown>	DEFAULT	2
attacks_tfo	.symtab	0xe5c4	2300	FUNC	<unknown>	DEFAULT	2
attacks_udp	.symtab	0xeec0	1908	FUNC	<unknown>	DEFAULT	2
attacks_vse	.symtab	0xf634	1820	FUNC	<unknown>	DEFAULT	2
attacks_wra	.symtab	0xfd50	2264	FUNC	<unknown>	DEFAULT	2
authenticate	.symtab	0x8fa8	332	FUNC	<unknown>	DEFAULT	2
bind	.symtab	0x16a60	40	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
block.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bpabi.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk.1739	.symtab	0x2a6d0	4	OBJECT	<unknown>	DEFAULT	12
bsd_signal	.symtab	0x17494	88	FUNC	<unknown>	DEFAULT	2
builtin_tls	.symtab	0x2a5b4	280	OBJECT	<unknown>	DEFAULT	12
cached_aligned32	.symtab	0x17900	0	NOTYPE	<unknown>	DEFAULT	2
calloc	.symtab	0x15460	84	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cgt.1934	.symtab	0x2a5ac	4	OBJECT	<unknown>	DEFAULT	12
check_conn	.symtab	0xcda0	148	FUNC	<unknown>	DEFAULT	2
check_proc	.symtab	0x112a4	740	FUNC	<unknown>	DEFAULT	2
checksum	.symtab	0x116a8	264	FUNC	<unknown>	DEFAULT	2
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock	.symtab	0x18894	112	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_gettime	.symtab	0x18904	148	FUNC	<unknown>	DEFAULT	2
clock_gettime.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x18a48	84	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close_file	.symtab	0x1ca70	124	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x14de0	48	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cnc_ports	.symtab	0x29040	24	OBJECT	<unknown>	DEFAULT	11
command_parse	.symtab	0x81cc	948	FUNC	<unknown>	DEFAULT	2
completed.4200	.symtab	0x290d0	1	OBJECT	<unknown>	DEFAULT	12
congruent_aligned32	.symtab	0x17900	0	NOTYPE	<unknown>	DEFAULT	2
conn	.symtab	0x2a6f0	8368	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x16a88	68	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
copy_last_3_and_return	.symtab	0x17b58	0	NOTYPE	<unknown>	DEFAULT	2
crt1.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cur.1585	.symtab	0x2a17c	4	OBJECT	<unknown>	DEFAULT	12
debruijn32.1947	.symtab	0x2000a	32	OBJECT	<unknown>	DEFAULT	4
dummy	.symtab	0x14f00	4	FUNC	<unknown>	DEFAULT	2
dummy	.symtab	0x15134	4	FUNC	<unknown>	DEFAULT	2
dummy	.symtab	0x16928	4	FUNC	<unknown>	DEFAULT	2
dummy	.symtab	0x16a24	4	FUNC	<unknown>	DEFAULT	2
dummy	.symtab	0x17224	4	FUNC	<unknown>	DEFAULT	2
dummy	.symtab	0x18a44	4	FUNC	<unknown>	DEFAULT	2
dummy	.symtab	0x1c498	4	FUNC	<unknown>	DEFAULT	2
dummy1	.symtab	0x14f04	4	FUNC	<unknown>	DEFAULT	2
dummy_file	.symtab	0x2a6e0	4	OBJECT	<unknown>	DEFAULT	12
dup2	.symtab	0x18a9c	48	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
end.1586	.symtab	0x2a178	4	OBJECT	<unknown>	DEFAULT	12
end.3188	.symtab	0x2a180	4	OBJECT	<unknown>	DEFAULT	12
environ	.symtab	0x2a5b0	4	OBJECT	<unknown>	DEFAULT	12
errid	.symtab	0x203e0	88	OBJECT	<unknown>	DEFAULT	4
errmsg	.symtab	0x20438	1804	OBJECT	<unknown>	DEFAULT	4
esi_fd	.symtab	0x29058	4	OBJECT	<unknown>	DEFAULT	11
exe_access	.symtab	0x10eec	384	FUNC	<unknown>	DEFAULT	2
execve	.symtab	0x1720c	24	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x15138	100	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
expand_heap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x151bc	376	FUNC	<unknown>	DEFAULT	2
fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt_u	.symtab	0x19fd8	148	FUNC	<unknown>	DEFAULT	2
fork	.symtab	0x17228	140	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x810c	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x15aec	1276	FUNC	<unknown>	DEFAULT	2
free_opts	.symtab	0xa5e0	160	FUNC	<unknown>	DEFAULT	2
frexp	.symtab	0x1c83c	216	FUNC	<unknown>	DEFAULT	2
frexp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frexpl	.symtab	0x1c4f8	24	FUNC	<unknown>	DEFAULT	2
frexpl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite	.symtab	0x1c7bc	128	FUNC	<unknown>	DEFAULT	2
fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x1c7bc	128	FUNC	<unknown>	DEFAULT	2
get_eit_entry	.symtab	0x1e5bc	544	FUNC	<unknown>	DEFAULT	2
get_local_addr	.symtab	0x14518	196	FUNC	<unknown>	DEFAULT	2
getint	.symtab	0x1a06c	52	FUNC	<unknown>	DEFAULT	2
getpid	.symtab	0x18acc	20	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x18ae0	20	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x16acc	40	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x16af4	36	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gre.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
handler_set	.symtab	0x2a6d8	8	OBJECT	<unknown>	DEFAULT	12
head	.symtab	0x29150	4	OBJECT	<unknown>	DEFAULT	12
heap_lock.3187	.symtab	0x2a184	8	OBJECT	<unknown>	DEFAULT	12
htonl	.symtab	0x16b18	36	FUNC	<unknown>	DEFAULT	2
htonl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htons	.symtab	0x16b3c	20	FUNC	<unknown>	DEFAULT	2
htons.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
icmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_addr	.symtab	0x16b50	40	FUNC	<unknown>	DEFAULT	2
inet_addr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_aton	.symtab	0x16b78	288	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntop	.symtab	0x16c98	616	FUNC	<unknown>	DEFAULT	2
inet_ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
intscan.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x173b4	24	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_add_process	.symtab	0x1076c	104	FUNC	<unknown>	DEFAULT	2
killer_check_paths	.symtab	0x10628	212	FUNC	<unknown>	DEFAULT	2
killer_find_realpath	.symtab	0x107d4	180	FUNC	<unknown>	DEFAULT	2
killer_pid	.symtab	0x290f0	4	OBJECT	<unknown>	DEFAULT	12
killer_realpath	.symtab	0x29158	4096	OBJECT	<unknown>	DEFAULT	12
killer_shoot_list	.symtab	0x10888	548	FUNC	<unknown>	DEFAULT	2
killer_start	.symtab	0x10aac	1088	FUNC	<unknown>	DEFAULT	2
killer_vanish_list	.symtab	0x106fc	112	FUNC	<unknown>	DEFAULT	2
less_than_32_left	.symtab	0x1791c	0	NOTYPE	<unknown>	DEFAULT	2
less_than_thirtytwo	.symtab	0x17b10	0	NOTYPE	<unknown>	DEFAULT	2
libc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x16f00	40	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lite_malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lock.1587	.symtab	0x2a170	8	OBJECT	<unknown>	DEFAULT	12
locker.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
locker_find	.symtab	0x1106c	180	FUNC	<unknown>	DEFAULT	2
locker_getpids	.symtab	0x111ec	184	FUNC	<unknown>	DEFAULT	2
locker_init	.symtab	0x11588	288	FUNC	<unknown>	DEFAULT	2
locker_insert	.symtab	0x11120	204	FUNC	<unknown>	DEFAULT	2
locker_pid	.symtab	0x290ec	4	OBJECT	<unknown>	DEFAULT	12
locker_process	.symtab	0x93dc	228	FUNC	<unknown>	DEFAULT	2
locker_status	.symtab	0x290f4	1	OBJECT	<unknown>	DEFAULT	12
loop16	.symtab	0x179f4	0	NOTYPE	<unknown>	DEFAULT	2
loop24	.symtab	0x17ab4	0	NOTYPE	<unknown>	DEFAULT	2
loop8	.symtab	0x17a54	0	NOTYPE	<unknown>	DEFAULT	2
madvise	.symtab	0x16910	24	FUNC	<unknown>	DEFAULT	2
madvise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
main	.symtab	0x96ac	548	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
main_check_connection	.symtab	0x8ae4	276	FUNC	<unknown>	DEFAULT	2
main_disconnect_connection	.symtab	0x8bf8	204	FUNC	<unknown>	DEFAULT	2
main_handle_connection	.symtab	0x90f4	664	FUNC	<unknown>	DEFAULT	2
main_make_connection	.symtab	0x8580	1380	FUNC	<unknown>	DEFAULT	2
main_read_connection	.symtab	0x8f14	148	FUNC	<unknown>	DEFAULT	2
main_read_data	.symtab	0x8cc4	496	FUNC	<unknown>	DEFAULT	2
mal	.symtab	0x2a190	1040	OBJECT	<unknown>	DEFAULT	12
malloc	.symtab	0x15fe8	1784	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1bc3c	324	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcmp	.symtab	0x17834	72	FUNC	<unknown>	DEFAULT	2
memcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x1787c	0	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x17b88	332	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x17cd4	284	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
methods	.symtab	0x290fc	4	OBJECT	<unknown>	DEFAULT	12
methods_len	.symtab	0x290f8	1	OBJECT	<unknown>	DEFAULT	12
mmap	.symtab	0x1692c	192	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap64	.symtab	0x1692c	192	FUNC	<unknown>	DEFAULT	2
mmap_step.1740	.symtab	0x2a6cc	4	OBJECT	<unknown>	DEFAULT	12
mremap	.symtab	0x169ec	56	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x16a28	56	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
nanosleep	.symtab	0x1c270	60	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
non_congruent	.symtab	0x1796c	0	NOTYPE	<unknown>	DEFAULT	2
ntohl	.symtab	0x16f28	36	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x16f4c	20	FUNC	<unknown>	DEFAULT	2
ntohs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
number	.symtab	0x2903c	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x2905c	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29060	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29064	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29068	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x2906c	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29070	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29074	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29078	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x2907c	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29080	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29084	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29088	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x2908c	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29090	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29094	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x29098	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x2909c	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x290a0	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x290a4	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x290a8	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x290ac	4	OBJECT	<unknown>	DEFAULT	11
number	.symtab	0x290b0	4	OBJECT	<unknown>	DEFAULT	11
object.4208	.symtab	0x290d4	24	OBJECT	<unknown>	DEFAULT	12
ofl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ofl_head	.symtab	0x2a6e4	4	OBJECT	<unknown>	DEFAULT	12
ofl_lock	.symtab	0x2a6e8	8	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x15334	152	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
open64	.symtab	0x15334	152	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x14e10	76	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
options_hex	.symtab	0xa374	420	FUNC	<unknown>	DEFAULT	2
options_int	.symtab	0xa2ec	136	FUNC	<unknown>	DEFAULT	2
options_str	.symtab	0xa23c	176	FUNC	<unknown>	DEFAULT	2
out	.symtab	0x1a0a0	48	FUNC	<unknown>	DEFAULT	2
p.1223	.symtab	0x2a5a8	4	OBJECT	<unknown>	DEFAULT	12
pad	.symtab	0x1a0d0	124	FUNC	<unknown>	DEFAULT	2
parse.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
partial_word_tail	.symtab	0x17b3c	0	NOTYPE	<unknown>	DEFAULT	2
pipe	.symtab	0x18af4	24	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pop_arg	.symtab	0x19ed0	264	FUNC	<unknown>	DEFAULT	2
pr-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x15400	96	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
printf_core	.symtab	0x1a14c	6568	FUNC	<unknown>	DEFAULT	2
profiles.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x2a16c	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name	.symtab	0x2a168	4	OBJECT	<unknown>	DEFAULT	12
pthread_sigmask	.symtab	0x1883c	88	FUNC	<unknown>	DEFAULT	2
pthread_sigmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
raise	.symtab	0x173cc	76	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
raknet.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x171b8	84	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_domain	.symtab	0x11cf0	244	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x11b88	148	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x11c1c	212	FUNC	<unknown>	DEFAULT	2
rand_num	.symtab	0x11de4	96	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x11e44	216	FUNC	<unknown>	DEFAULT	2
read	.symtab	0x18b0c	64	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir	.symtab	0x14e5c	164	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x14e5c	164	FUNC	<unknown>	DEFAULT	2
readlink	.symtab	0x18b4c	24	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x16734	476	FUNC	<unknown>	DEFAULT	2
recv	.symtab	0x16f60	36	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvfrom	.symtab	0x16f84	72	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_domain_to_hostname	.symtab	0x11f1c	268	FUNC	<unknown>	DEFAULT	2
resolv_entries_free	.symtab	0x12b14	84	FUNC	<unknown>	DEFAULT	2
resolv_lookup	.symtab	0x12114	2560	FUNC	<unknown>	DEFAULT	2
resolv_skip_name	.symtab	0x12028	236	FUNC	<unknown>	DEFAULT	2
resolver.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
restore_core_regs	.symtab	0x1f190	28	FUNC	<unknown>	HIDDEN	2
root	.symtab	0x29154	4	OBJECT	<unknown>	DEFAULT	12
sc_clock_gettime	.symtab	0x18998	120	FUNC	<unknown>	DEFAULT	2
sccp	.symtab	0x186d0	48	FUNC	<unknown>	DEFAULT	2
seed	.symtab	0x2a5a0	8	OBJECT	<unknown>	DEFAULT	12
select	.symtab	0x172b4	68	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select_profile	.symtab	0xa680	1300	FUNC	<unknown>	DEFAULT	2
send	.symtab	0x16fcc	36	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 14:31:47.869507074 CEST	53202	7777	192.168.2.14	194.26.25.146
Oct 21, 2024 14:31:47.875159979 CEST	7777	53202	194.26.25.146	192.168.2.14
Oct 21, 2024 14:31:47.875240088 CEST	53202	7777	192.168.2.14	194.26.25.146
Oct 21, 2024 14:31:49.877198935 CEST	53202	7777	192.168.2.14	194.26.25.146
Oct 21, 2024 14:31:49.882785082 CEST	7777	53202	194.26.25.146	192.168.2.14
Oct 21, 2024 14:31:49.882842064 CEST	53202	7777	192.168.2.14	194.26.25.146
Oct 21, 2024 14:31:49.889229059 CEST	7777	53202	194.26.25.146	192.168.2.14
Oct 21, 2024 14:31:56.216387987 CEST	7777	53202	194.26.25.146	192.168.2.14
Oct 21, 2024 14:31:56.217637062 CEST	53202	7777	192.168.2.14	194.26.25.146
Oct 21, 2024 14:32:06.226989031 CEST	53202	7777	192.168.2.14	194.26.25.146
Oct 21, 2024 14:32:06.232479095 CEST	7777	53202	194.26.25.146	192.168.2.14
Oct 21, 2024 14:32:16.253107071 CEST	39634	9583	192.168.2.14	194.26.25.7
Oct 21, 2024 14:32:16.260632992 CEST	9583	39634	194.26.25.7	192.168.2.14
Oct 21, 2024 14:32:16.260780096 CEST	39634	9583	192.168.2.14	194.26.25.7
Oct 21, 2024 14:32:18.262484074 CEST	39634	9583	192.168.2.14	194.26.25.7
Oct 21, 2024 14:32:18.268220901 CEST	9583	39634	194.26.25.7	192.168.2.14
Oct 21, 2024 14:32:18.268281937 CEST	39634	9583	192.168.2.14	194.26.25.7
Oct 21, 2024 14:32:18.273624897 CEST	9583	39634	194.26.25.7	192.168.2.14
Oct 21, 2024 14:32:24.599962950 CEST	9583	39634	194.26.25.7	192.168.2.14
Oct 21, 2024 14:32:24.600620031 CEST	39634	9583	192.168.2.14	194.26.25.7
Oct 21, 2024 14:32:34.608222008 CEST	39634	9583	192.168.2.14	194.26.25.7
Oct 21, 2024 14:32:34.613950968 CEST	9583	39634	194.26.25.7	192.168.2.14
Oct 21, 2024 14:32:44.652286053 CEST	33678	9583	192.168.2.14	172.236.34.39
Oct 21, 2024 14:32:44.659445047 CEST	9583	33678	172.236.34.39	192.168.2.14
Oct 21, 2024 14:32:44.659614086 CEST	33678	9583	192.168.2.14	172.236.34.39
Oct 21, 2024 14:32:46.661418915 CEST	33678	9583	192.168.2.14	172.236.34.39
Oct 21, 2024 14:32:46.668256044 CEST	9583	33678	172.236.34.39	192.168.2.14
Oct 21, 2024 14:32:46.668399096 CEST	33678	9583	192.168.2.14	172.236.34.39
Oct 21, 2024 14:32:46.674001932 CEST	9583	33678	172.236.34.39	192.168.2.14
Oct 21, 2024 14:32:52.998836994 CEST	9583	33678	172.236.34.39	192.168.2.14
Oct 21, 2024 14:32:52.999383926 CEST	33678	9583	192.168.2.14	172.236.34.39
Oct 21, 2024 14:33:03.008969069 CEST	33678	9583	192.168.2.14	172.236.34.39
Oct 21, 2024 14:33:03.014353037 CEST	9583	33678	172.236.34.39	192.168.2.14
Oct 21, 2024 14:33:13.145224094 CEST	60016	8080	192.168.2.14	194.26.25.7
Oct 21, 2024 14:33:13.152417898 CEST	8080	60016	194.26.25.7	192.168.2.14
Oct 21, 2024 14:33:13.152498960 CEST	60016	8080	192.168.2.14	194.26.25.7
Oct 21, 2024 14:33:15.154388905 CEST	60016	8080	192.168.2.14	194.26.25.7
Oct 21, 2024 14:33:15.159939051 CEST	8080	60016	194.26.25.7	192.168.2.14
Oct 21, 2024 14:33:15.160003901 CEST	60016	8080	192.168.2.14	194.26.25.7
Oct 21, 2024 14:33:15.165461063 CEST	8080	60016	194.26.25.7	192.168.2.14
Oct 21, 2024 14:33:21.491028070 CEST	8080	60016	194.26.25.7	192.168.2.14
Oct 21, 2024 14:33:21.494563103 CEST	60016	8080	192.168.2.14	194.26.25.7
Oct 21, 2024 14:33:31.501161098 CEST	60016	8080	192.168.2.14	194.26.25.7
Oct 21, 2024 14:33:31.506915092 CEST	8080	60016	194.26.25.7	192.168.2.14
Oct 21, 2024 14:33:41.523576021 CEST	59900	5555	192.168.2.14	45.89.63.16
Oct 21, 2024 14:33:41.529623985 CEST	5555	59900	45.89.63.16	192.168.2.14
Oct 21, 2024 14:33:41.530075073 CEST	59900	5555	192.168.2.14	45.89.63.16
Oct 21, 2024 14:33:43.533849001 CEST	59900	5555	192.168.2.14	45.89.63.16
Oct 21, 2024 14:33:43.539640903 CEST	5555	59900	45.89.63.16	192.168.2.14
Oct 21, 2024 14:33:43.539973974 CEST	59900	5555	192.168.2.14	45.89.63.16
Oct 21, 2024 14:33:43.545578957 CEST	5555	59900	45.89.63.16	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 14:31:47.845710993 CEST	34657	53	192.168.2.14	8.8.8.8
Oct 21, 2024 14:31:47.857182980 CEST	53	34657	8.8.8.8	192.168.2.14
Oct 21, 2024 14:32:16.239017963 CEST	42038	53	192.168.2.14	8.8.8.8
Oct 21, 2024 14:32:16.252144098 CEST	53	42038	8.8.8.8	192.168.2.14
Oct 21, 2024 14:32:44.620740891 CEST	42952	53	192.168.2.14	8.8.8.8
Oct 21, 2024 14:32:44.650760889 CEST	53	42952	8.8.8.8	192.168.2.14
Oct 21, 2024 14:33:13.020351887 CEST	48239	53	192.168.2.14	8.8.8.8
Oct 21, 2024 14:33:13.143557072 CEST	53	48239	8.8.8.8	192.168.2.14
Oct 21, 2024 14:33:41.513140917 CEST	40446	53	192.168.2.14	8.8.8.8
Oct 21, 2024 14:33:41.521203995 CEST	53	40446	8.8.8.8	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 21, 2024 14:31:47.845710993 CEST	192.168.2.14	8.8.8.8	0x72e0	Standard query (0)	dvrhelpers.su	A (IP address)	IN (0x0001)	false
Oct 21, 2024 14:32:16.239017963 CEST	192.168.2.14	8.8.8.8	0xef3f	Standard query (0)	xlabresearch.ru	A (IP address)	IN (0x0001)	false
Oct 21, 2024 14:32:44.620740891 CEST	192.168.2.14	8.8.8.8	0x6190	Standard query (0)	xlabsecurity.ru	A (IP address)	IN (0x0001)	false
Oct 21, 2024 14:33:13.020351887 CEST	192.168.2.14	8.8.8.8	0x63e6	Standard query (0)	xlabresearch.ru	A (IP address)	IN (0x0001)	false
Oct 21, 2024 14:33:41.513140917 CEST	192.168.2.14	8.8.8.8	0x9d6a	Standard query (0)	dvrhelpers.su	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: meow.arm5.elf PID: 5484, Parent PID: 5411

General

Start time (UTC):	12:31:46
Start date (UTC):	21/10/2024
Path:	/tmp/meow.arm5.elf
Arguments:	/tmp/meow.arm5.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: meow.arm5.elf PID: 5486, Parent PID: 5484

General

Start time (UTC):	12:31:47
Start date (UTC):	21/10/2024
Path:	/tmp/meow.arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: meow.arm5.elf PID: 5488, Parent PID: 5486

General

Start time (UTC):	12:31:47
Start date (UTC):	21/10/2024
Path:	/tmp/meow.arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report meow.arm5.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

System Behavior

Analysis Process: meow.arm5.elf PID: 5484, Parent PID: 5411

General

Chronological Activities

Analysis Process: meow.arm5.elf PID: 5486, Parent PID: 5484

General

Chronological Activities

Analysis Process: meow.arm5.elf PID: 5488, Parent PID: 5486

General

Chronological Activities

Linux Analysis Report
meow.arm5.elf