Edit tour

Linux Analysis Report
meow.arm.elf

Overview

General Information

Sample name:	meow.arm.elf
Analysis ID:	1538572
MD5:	8dae5997bb3f3bf3d9307a3840a8ebf0
SHA1:	303c4f98247b944b9016cd711bd51fea6279b877
SHA256:	0b5188fbb6d18f527e062f11afff0669df5c4fd8564753b9758dcd1a1b719e3d
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Contains symbols with names commonly found in malware

Detected TCP or UDP traffic on non-standard ports

Found strings indicative of a multi-platform dropper

Sample listens on a socket

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1538572
Start date and time:	2024-10-21 14:55:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	meow.arm.elf
Detection:	MAL
Classification:	mal60.linELF@0/0@3/0

Warnings

VT rate limit hit for: meow.arm.elf

Runtime Messages

Command:	/tmp/meow.arm.elf
PID:	6364
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

meow.arm.elf (PID: 6364, Parent: 6167, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/meow.arm.elf

meow.arm.elf New Fork (PID: 6366, Parent: 6364)

meow.arm.elf New Fork (PID: 6368, Parent: 6366)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: meow.arm.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: meow.arm.elf

ReversingLabs: Detection: 23%

Source: meow.arm.elf

String: /lib//sbin//usr//proc//exeself/fd/fd/socket:/proc/proc//exewgetcurlftpmountabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789/proc/net/tcp/proc//exe/fd//proc//maps/lib/usr/lib

Source: global traffic	TCP traffic: 192.168.2.23:38540 -> 194.26.25.141:8080
Source: global traffic	TCP traffic: 192.168.2.23:43602 -> 185.173.37.56:1337

Source: /tmp/meow.arm.elf (PID: 6364)

Socket: 127.0.0.1:45295

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.141
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.141
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.141
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.141
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.141
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 194.26.25.141
Source: unknown	TCP traffic detected without corresponding DNS query: 172.105.120.101
Source: unknown	TCP traffic detected without corresponding DNS query: 172.105.120.101
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 172.105.120.101
Source: unknown	TCP traffic detected without corresponding DNS query: 172.105.120.101
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 172.105.120.101
Source: unknown	TCP traffic detected without corresponding DNS query: 172.105.120.101
Source: unknown	TCP traffic detected without corresponding DNS query: 185.173.37.56
Source: unknown	TCP traffic detected without corresponding DNS query: 185.173.37.56
Source: unknown	TCP traffic detected without corresponding DNS query: 185.173.37.56
Source: unknown	TCP traffic detected without corresponding DNS query: 185.173.37.56
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: global traffic

DNS traffic detected: DNS query: ipcamlover.ru

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: add_attack
Source: ELF static info symbol of initial sample	Name: attack_add_pid
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_ongoing
Source: ELF static info symbol of initial sample	Name: attack_parse
Source: ELF static info symbol of initial sample	Name: attack_remove_id
Source: ELF static info symbol of initial sample	Name: attack_start
Source: ELF static info symbol of initial sample	Name: attack_stop
Source: ELF static info symbol of initial sample	Name: attacks_ack
Source: ELF static info symbol of initial sample	Name: attacks_gre

Source: classification engine

Classification label: mal60.linELF@0/0@3/0

Source: /tmp/meow.arm.elf (PID: 6364)

Queries kernel information via 'uname':

Jump to behavior

Source: meow.arm.elf, 6364.1.00007ffdf691a000.00007ffdf693b000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/meow.arm.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/meow.arm.elf
Source: meow.arm.elf, 6364.1.0000561b4d937000.0000561b4da65000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: meow.arm.elf, 6364.1.0000561b4d937000.0000561b4da65000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm
Source: meow.arm.elf, 6364.1.00007ffdf691a000.00007ffdf693b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
meow.arm.elf	24%	ReversingLabs	Linux.Trojan.DDOSAgent
meow.arm.elf	100%	Avira	ANDROID/AVE.Mirai.bgffb

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ipcamlover.ru	unknown	unknown	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.173.37.56	unknown	Russian Federation	50473	ECO-ASRU	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
172.105.120.101	unknown	United States	63949	LINODE-APLinodeLLCUS	false
194.26.25.141	unknown	unknown	63018	DEDICATEDUS	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	bot.mpsl.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	mirai.mips.elf	Get hash	malicious	Unknown	Browse
	bot.ppc.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	bot.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	bot.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Unknown	Browse
	bin.sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	bin.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
91.189.91.42	bot.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	bot.mpsl.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	mirai.mips.elf	Get hash	malicious	Unknown	Browse
	bot.ppc.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	bot.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	bot.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
LINODE-APLinodeLLCUS	meow.arm7.elf	Get hash	malicious	Unknown	Browse	172.105.109.175
	ekte.exe	Get hash	malicious	FormBook	Browse	45.33.6.223
	IND24072113_1.xlsx	Get hash	malicious	Unknown	Browse	45.33.6.223
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	172.104.125.52
	sparc.elf	Get hash	malicious	Unknown	Browse	103.3.63.184
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	198.74.57.190
	SOA-INV0892024.xla.xlsx	Get hash	malicious	FormBook	Browse	45.33.6.223
	arm.elf	Get hash	malicious	Mirai	Browse	45.79.58.115
	17291572854cc9a756b19449615607a5b810bcd9b747e17a6d30707cd1749cb754a28fb507530.dat-decoded.exe	Get hash	malicious	Unknown	Browse	198.58.98.151
	i6.elf	Get hash	malicious	Unknown	Browse	172.104.115.20
DEDICATEDUS	meow.arm5.elf	Get hash	malicious	Unknown	Browse	194.26.25.7
	la.bot.arm-20241006-1050.elf	Get hash	malicious	Unknown	Browse	200.220.163.218
	2.exe	Get hash	malicious	AsyncRAT	Browse	216.105.171.163
	dKMlbDZXP3.elf	Get hash	malicious	Mirai	Browse	216.52.183.163
	build.hta	Get hash	malicious	Quasar	Browse	64.42.179.59
	build.exe	Get hash	malicious	Quasar	Browse	64.42.179.59
	Replace.exe	Get hash	malicious	Unknown	Browse	74.201.73.52
	x1b5bmJgLm.elf	Get hash	malicious	Unknown	Browse	200.220.163.225
	0FnrrE8B6Y.elf	Get hash	malicious	Mirai	Browse	168.81.61.232
	D2M15lCoQK.elf	Get hash	malicious	Mirai	Browse	45.74.57.45
INIT7CH	bot.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	bot.mpsl.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	mirai.mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	bot.ppc.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	bot.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	bot.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	sshd.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	sshd.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
ECO-ASRU	https://ledger.com-loginrecovermode.com/	Get hash	malicious	Unknown	Browse	185.173.39.226
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57
	file.exe	Get hash	malicious	RedLine	Browse	185.173.38.57

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	5.912151340505042
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	meow.arm.elf
File size:	138'468 bytes
MD5:	8dae5997bb3f3bf3d9307a3840a8ebf0
SHA1:	303c4f98247b944b9016cd711bd51fea6279b877
SHA256:	0b5188fbb6d18f527e062f11afff0669df5c4fd8564753b9758dcd1a1b719e3d
SHA512:	a71032a1a15cc089cef7884141034f5ac970c20ede34556f41a543cd4b572f7b06db695238bae321640a5c9140cf550b626d6470ea747909d8c6cec03ee8484c
SSDEEP:	3072:D0jENolUz9vY1t8GAIUZnucBFLSpc0/vT4FOKZCc/A/H2OfA:Ij9liNxIFwS3v0FOKZCc/A/HS
TLSH:	85D3E648F915832FC2D237BAE7AA03CD37365A98A7A7332549345FB43BC97A46D36110
File Content Preview:	.ELF...a..........(.........4...........4. ...(..........................................................X..........Q.td..................................-...L."...{Z..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	107524
Section Header Size:	40
Number of Section Headers:	21
Header String Table Index:	18

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0x16a24	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1ead4	0x16ad4	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1eae8	0x16ae8	0x15f4	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x280dc	0x180dc	0x4	0x0	0x3	WA	0	0	4
.ctors	PROGBITS	0x280e0	0x180e0	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x280e8	0x180e8	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x280f0	0x180f0	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x280f4	0x180f4	0x2e4	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x283d8	0x183d8	0x5588	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x183d8	0xc64	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x19040	0x120	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x19160	0x70d	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1986d	0xb4	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x19921	0x978	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1a29c	0xa0	0x0	0x0		0	0	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1a33c	0x10	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1a34c	0xb8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1a74c	0x4fc0	0x10	0x0		20	735	4
.strtab	STRTAB	0x0	0x1f70c	0x25d8	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x180dc	0x180dc	5.8885	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x180dc	0x280dc	0x280dc	0x2fc	0x5884	3.3456	0x6	RW	0x8000	.eh_frame .ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1ead4	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1eae8	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x280dc	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x280e0	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x280e8	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x280f0	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x280f4	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x283d8	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1ead4	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eae0	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1ea98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eacc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1eae4	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x85b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8afc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8c08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8cc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8ec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8fb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x93c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x949c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9694	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x98b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9994	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9b7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9c1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9ccc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa624	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa6c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa714	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xabe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb3f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xba04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc008	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc998	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcf5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd7b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xddf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe9a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf44c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfc50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10eb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ff4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11764	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11dec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12778	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15144	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1538c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1549c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15568	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1564c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15650	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15718	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1579c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15804	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1588c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15914	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x160d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16268	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16304	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16398	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16474	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16560	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16710	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1671c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16784	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ea4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ed4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16fc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1701c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1704c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17060	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1831c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1841c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1849c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18528	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1863c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18790	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18870	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18938	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1894c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ae4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19118	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19384	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19460	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x194ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1974c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19828	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19854	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1987c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19aa4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19afc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19b04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19bd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19f60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a4b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a52c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a53c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a5f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a620	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ade4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ae1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1afb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b600	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b69c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b7dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b9ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1badc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bc50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c25c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c3a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c4c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c50c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c594	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c67c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c754	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c844	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c85c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c880	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c8b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c908	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ca68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cab8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ccb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cdec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ce18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ced4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cfd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d04c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d08c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d1e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1db68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ddc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1de80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1deb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e3f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e91c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ea44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x280e0	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x280e8	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x280fc	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1eac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28100	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28104	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1eaf0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x85b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8af0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8c00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8cb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8ec0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8fac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x927c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9368	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x93bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9494	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x968c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x98a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28124	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x9964	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9b78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9c18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9cc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa288	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa61c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28128	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1ec24	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa6fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xabd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2812c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28130	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28134	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28138	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1ee7c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xc98c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2813c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28140	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28144	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28148	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x2814c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1ee9e	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xf43c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28150	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28154	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1eeee	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10430	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28158	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1ef07	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10ea8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2815c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10f7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ff0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11054	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11104	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1131c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11748	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28160	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x118d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11dd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11f00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28164	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x28168	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1249c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1263c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2816c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x133a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28170	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x13c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28174	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x14200	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28178	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x150a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15140	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1520c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x152b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15384	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x28	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x48	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x50	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x70	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x1619c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16264	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16300	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f0a8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x16458	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16470	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16718	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16df4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2818c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x17b24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17e88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x182d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18318	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1840c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x281a4	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x18484	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x185a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18624	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x281bc	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x18700	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1878c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18864	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18934	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f0d8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x18ae0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28268	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x18c24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19318	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19380	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1945c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x194a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19710	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28280	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x19818	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x199e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19af8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2828c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1f152	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x19bc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29490	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x19f5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a0b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a528	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a538	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a5e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x28294	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1f454	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1ad30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f488	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1afb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aff8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b514	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x283d0	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1f490	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1b5f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b68c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b7b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b98c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bad8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c254	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c33c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c674	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f514	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1c750	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c840	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c878	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c8b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d95c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20094	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1da6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1db60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dc10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ddb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x78	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x98	0	NOTYPE	<unknown>	DEFAULT	16
C.0.3674	.symtab	0x1ec24	40	OBJECT	<unknown>	DEFAULT	4
C.1.3461	.symtab	0x1f0a8	24	OBJECT	<unknown>	DEFAULT	4
C.10.3948	.symtab	0x1eece	16	OBJECT	<unknown>	DEFAULT	4
C.10.3948	.symtab	0x1ef2f	12	OBJECT	<unknown>	DEFAULT	4
C.11.3949	.symtab	0x1eeb6	24	OBJECT	<unknown>	DEFAULT	4
C.11.3949	.symtab	0x1ef1b	20	OBJECT	<unknown>	DEFAULT	4
C.12.3950	.symtab	0x1ee9e	24	OBJECT	<unknown>	DEFAULT	4
C.12.3950	.symtab	0x1ef07	20	OBJECT	<unknown>	DEFAULT	4
C.18.3969	.symtab	0x1eeee	25	OBJECT	<unknown>	DEFAULT	4
C.18.3984	.symtab	0x1ee8e	16	OBJECT	<unknown>	DEFAULT	4
C.19.3994	.symtab	0x1ee7e	16	OBJECT	<unknown>	DEFAULT	4
C.22.4015	.symtab	0x1ee7c	2	OBJECT	<unknown>	DEFAULT	4
C.44.4979	.symtab	0x1eafc	8	OBJECT	<unknown>	DEFAULT	4
C.7.4618	.symtab	0x1eaf0	8	OBJECT	<unknown>	DEFAULT	4
C.9.3947	.symtab	0x1eede	16	OBJECT	<unknown>	DEFAULT	4
C.9.3947	.symtab	0x1ef3b	12	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0x1c138	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x1c154	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x19854	40	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x280e4	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x280e0	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x2828c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1f152	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x280ec	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x280e8	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x280dc	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x280dc	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x2828c	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_b	.symtab	0x28290	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x16468	12	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x156b4	100	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1b9ac	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x1c580	20	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x15650	100	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x17128	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x1714c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x17104	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x193bc	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x19460	76	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x1c594	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x19854	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1831c	256	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x18938	12	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x16e20	44	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1c880	56	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x1987c	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x15718	44	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x160d8	212	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x19efc	48	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x19f2c	52	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x19bd8	804	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x16e4c	44	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x15744	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x29490	4	OBJECT	<unknown>	HIDDEN	10
__GI_execve	.symtab	0x15770	44	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x18ae4	156	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x19f60	368	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x15650	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1b7dc	464	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1b544	188	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1b9ac	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1b600	156	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1badc	148	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1a0d0	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1579c	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x1bb70	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1dc7c	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1dc88	312	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x198a8	80	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x1bba4	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1b9ac	304	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x19990	40	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x199b8	8	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x199c0	8	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x199c8	8	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x199d0	24	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x157c8	8	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x199e8	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x16e78	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x19a14	8	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x29494	4	OBJECT	<unknown>	HIDDEN	10
__GI_htonl	.symtab	0x16730	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x1671c	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x16dfc	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1c754	240	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x16b90	620	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x16850	512	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x18870	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x1c8b8	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1c6bc	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x157d8	44	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x16ed4	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1dc18	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1d980	244	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x164b0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1c0e0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1da74	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1da8c	220	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x164c0	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1974c	96	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x19a1c	48	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x19a4c	44	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x19a78	44	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x16764	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x16750	20	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x15804	92	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x16268	156	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x15860	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1c844	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x18420	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x18704	140	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1db68	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x158bc	44	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x16398	208	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x19b04	212	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x158e8	44	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x16f00	44	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x16f2c	52	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x19aa4	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x15914	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x16f60	44	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x16f8c	52	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x15944	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x16fc0	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1863c	200	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x197ac	116	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x1701c	48	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x1704c	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x17060	164	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x15970	48	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x18b80	168	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x16ff0	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x1a0dc	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x18790	224	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x159a0	80	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1c170	236	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1c25c	232	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1c0f0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1c0f0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x1c344	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1c368	64	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1c110	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x16560	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1c3a8	216	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1c67c	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1c480	68	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1c4c4	72	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x16618	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x16710	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1c50c	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x18944	8	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x18d40	1528	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1c6dc	120	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x159f0	8	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x19afc	8	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1a110	180	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1ca68	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1cad8	172	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1cab8	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x159f8	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x280f0	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x280f0	0	OBJECT	<unknown>	DEFAULT	8
__adddf3	.symtab	0x1dffc	736	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1e9cc	20	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1e9cc	20	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1e9b0	48	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1ea44	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1dffc	736	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1e9e0	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1ea1c	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1ea30	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1ea08	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1e9f4	20	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1e718	516	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1e3f0	808	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1dff0	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1dff8	740	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1e330	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1e304	44	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1deb0	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv0	.symtab	0x1564c	4	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1dfd8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1e384	108	FUNC	<unknown>	HIDDEN	2
__aeabi_ldiv0	.symtab	0x1564c	4	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x1e2dc	40	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x1538c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x15484	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1e370	128	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x29488	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x28268	24	OBJECT	<unknown>	DEFAULT	9
__bss_end__	.symtab	0x2d960	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x283d8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x283d8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x19428	56	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1e92c	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x28290	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x2b4ac	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x280f4	0	NOTYPE	<unknown>	DEFAULT	9
__default_rt_sa_restorer	.symtab	0x19824	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x19820	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x1564c	4	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1e718	516	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1deb0	296	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1ea98	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x280f8	0	OBJECT	<unknown>	HIDDEN	9
__end__	.symtab	0x2d960	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x29480	4	OBJECT	<unknown>	DEFAULT	10
__eqdf2	.symtab	0x1e92c	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x16468	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x29478	4	OBJECT	<unknown>	HIDDEN	10
__extendsfdf2	.symtab	0x1e330	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x156b4	100	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1b9ac	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x280e0	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x280e0	0	NOTYPE	<unknown>	HIDDEN	6
__fixunsdfsi	.symtab	0x1ea44	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1e384	108	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1e304	44	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1e370	128	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1e2dc	40	FUNC	<unknown>	HIDDEN	2
__gedf2	.symtab	0x1e91c	148	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x198f8	152	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1c908	352	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x199d0	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x1c580	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x1e91c	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x280e0	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x280e0	0	NOTYPE	<unknown>	HIDDEN	6
__ledf2	.symtab	0x1e924	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x15718	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x16e4c	44	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x15650	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1579c	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1dc18	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x19a78	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x15804	92	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x158bc	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x16f00	44	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x16f2c	52	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x15914	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x16f60	44	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x16f8c	52	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x197ac	116	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2947c	4	OBJECT	<unknown>	DEFAULT	10
__libc_write	.symtab	0x159f8	44	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x1e924	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x17f44	424	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x17170	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2818c	24	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x2d590	888	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0x17ea0	164	FUNC	<unknown>	DEFAULT	2
__modsi3	.symtab	0x15568	228	FUNC	<unknown>	HIDDEN	2
__muldf3	.symtab	0x1e3f0	808	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x1e92c	132	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x29484	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x280e0	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x280e0	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x28284	4	OBJECT	<unknown>	DEFAULT	9
__progname_full	.symtab	0x28288	4	OBJECT	<unknown>	DEFAULT	9
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x1938c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x19384	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x19384	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x19384	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x19384	8	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x2948c	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x17128	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x1714c	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x17104	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x282a0	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x1cb84	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1cbe0	212	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1ddc0	192	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1ccb4	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x1a52c	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4591	.symtab	0x1f454	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x1cdec	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1de80	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1ce18	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1ced4	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1a5f4	44	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x282a4	4	OBJECT	<unknown>	DEFAULT	9
__subdf3	.symtab	0x1dff8	740	FUNC	<unknown>	HIDDEN	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x19828	44	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x193bc	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x19460	76	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x194ac	672	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x28280	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0x1538c	248	FUNC	<unknown>	HIDDEN	2
__umodsi3	.symtab	0x1549c	204	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x1c594	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x15d34	728	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x15a24	784	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x1600c	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_atoi	.symtab	0x146b0	132	FUNC	<unknown>	DEFAULT	2
_bss_custom_printf_spec	.symtab	0x2b4a0	10	OBJECT	<unknown>	DEFAULT	10
_bss_end__	.symtab	0x2d960	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x1a620	80	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2d908	40	OBJECT	<unknown>	HIDDEN	10
_custom_printf_handler	.symtab	0x2d930	40	OBJECT	<unknown>	HIDDEN	10
_custom_printf_spec	.symtab	0x283d0	4	OBJECT	<unknown>	HIDDEN	9
_dl_aux_init	.symtab	0x1c85c	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x2d958	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x2d95c	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x283d8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2d960	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x29490	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x19854	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1ead4	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x294a0	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x1a670	128	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1d1e0	1952	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x29494	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1cfd8	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x1bc50	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x1ad4c	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x1b004	1344	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x1ade4	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x1ae1c	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1afb8	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1939c	32	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x19394	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2d588	8	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1a1c4	748	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1a4b0	124	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x282a8	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x282ac	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x1b69c	320	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x2949c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x282c4	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x29498	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x282e0	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x1a53c	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x282dc	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x1894c	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1d04c	64	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1f524	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1d08c	340	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x1a6f0	1628	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1831c	256	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_attack	.symtab	0xa560	196	FUNC	<unknown>	DEFAULT	2
add_entry	.symtab	0x15210	172	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x18938	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x18938	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_add_pid	.symtab	0x9b7c	160	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x98b8	220	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x28408	80	OBJECT	<unknown>	DEFAULT	10
attack_parse	.symtab	0x9ccc	1100	FUNC	<unknown>	DEFAULT	2
attack_remove_id	.symtab	0x9c1c	176	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0xa118	376	FUNC	<unknown>	DEFAULT	2
attack_stop	.symtab	0x9994	488	FUNC	<unknown>	DEFAULT	2
attacks_ack	.symtab	0xabe8	2060	FUNC	<unknown>	DEFAULT	2
attacks_gre	.symtab	0xb3f4	1552	FUNC	<unknown>	DEFAULT	2
attacks_icmp	.symtab	0xba04	1540	FUNC	<unknown>	DEFAULT	2
attacks_raknet	.symtab	0xc008	2448	FUNC	<unknown>	DEFAULT	2
attacks_rand	.symtab	0xc998	1476	FUNC	<unknown>	DEFAULT	2
attacks_socket	.symtab	0xcfec	1996	FUNC	<unknown>	DEFAULT	2
attacks_std	.symtab	0xd7b8	1592	FUNC	<unknown>	DEFAULT	2
attacks_stomp	.symtab	0xddf0	2996	FUNC	<unknown>	DEFAULT	2
attacks_tfo	.symtab	0xe9a4	2728	FUNC	<unknown>	DEFAULT	2
attacks_udp	.symtab	0xf44c	2052	FUNC	<unknown>	DEFAULT	2
attacks_vse	.symtab	0xfc50	2020	FUNC	<unknown>	DEFAULT	2
attacks_wra	.symtab	0x10434	2692	FUNC	<unknown>	DEFAULT	2
authenticate	.symtab	0x8fb4	316	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x29474	4	OBJECT	<unknown>	DEFAULT	10
bind	.symtab	0x16e20	44	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1c880	56	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x17060	164	FUNC	<unknown>	DEFAULT	2
call___do_global_ctors_aux	.symtab	0x1eacc	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x17a2c	268	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
check_conn	.symtab	0xcf5c	144	FUNC	<unknown>	DEFAULT	2
check_proc	.symtab	0x11b0c	736	FUNC	<unknown>	DEFAULT	2
checksum	.symtab	0x11f08	304	FUNC	<unknown>	DEFAULT	2
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock	.symtab	0x16474	48	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x1987c	44	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x15718	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x160d8	212	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cnc_ports	.symtab	0x28108	24	OBJECT	<unknown>	DEFAULT	9
command_parse	.symtab	0x81cc	1004	FUNC	<unknown>	DEFAULT	2
completed.4916	.symtab	0x283d8	1	OBJECT	<unknown>	DEFAULT	10
conn	.symtab	0x2b4b0	8368	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x16e4c	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
data_start	.symtab	0x28100	0	NOTYPE	<unknown>	DEFAULT	9
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0x15744	44	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x29480	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x29490	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
esi_fd	.symtab	0x28120	4	OBJECT	<unknown>	DEFAULT	9
exe_access	.symtab	0x11764	380	FUNC	<unknown>	DEFAULT	2
execve	.symtab	0x15770	44	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x18ae4	156	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x20094	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x19f60	368	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x15650	100	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x161ac	188	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x16304	148	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1b7dc	464	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x1b544	188	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1b9ac	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1b600	156	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1badc	148	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x20080	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1a0d0	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x280f4	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x283d4	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0x1579c	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x1bb70	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x180ec	520	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
free_opts	.symtab	0xa624	156	FUNC	<unknown>	DEFAULT	2
fseek	.symtab	0x1dc7c	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1dc7c	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1dc88	312	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x198a8	80	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x1bba4	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_local_addr	.symtab	0x14d1c	208	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x1b544	188	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1b9ac	304	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x19990	40	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x199b8	8	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x199c0	8	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x199c8	8	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x199d0	24	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x157c8	8	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x157d0	8	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x199e8	44	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x16e78	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x16ea4	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x19a14	8	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gre.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x29494	4	OBJECT	<unknown>	DEFAULT	10
head	.symtab	0x28458	4	OBJECT	<unknown>	DEFAULT	10
htonl	.symtab	0x16730	32	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x1671c	20	FUNC	<unknown>	DEFAULT	2
icmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
index	.symtab	0x1c170	236	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x16dfc	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1c754	240	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntop	.symtab	0x16b90	620	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x16a50	320	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x16850	512	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x16784	204	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x18528	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x18870	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x1c8b8	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1c6bc	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x157d8	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_add_process	.symtab	0x10ff4	100	FUNC	<unknown>	DEFAULT	2
killer_check_paths	.symtab	0x10eb8	208	FUNC	<unknown>	DEFAULT	2
killer_find_realpath	.symtab	0x11058	176	FUNC	<unknown>	DEFAULT	2
killer_pid	.symtab	0x283f8	4	OBJECT	<unknown>	DEFAULT	10
killer_realpath	.symtab	0x28460	4096	OBJECT	<unknown>	DEFAULT	10
killer_shoot_list	.symtab	0x11108	544	FUNC	<unknown>	DEFAULT	2
killer_start	.symtab	0x11328	1084	FUNC	<unknown>	DEFAULT	2
killer_vanish_list	.symtab	0x10f88	108	FUNC	<unknown>	DEFAULT	2
listen	.symtab	0x16ed4	44	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
locker.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
locker_find	.symtab	0x118e0	176	FUNC	<unknown>	DEFAULT	2
locker_getpids	.symtab	0x11a58	180	FUNC	<unknown>	DEFAULT	2
locker_init	.symtab	0x11dec	284	FUNC	<unknown>	DEFAULT	2
locker_insert	.symtab	0x11990	200	FUNC	<unknown>	DEFAULT	2
locker_pid	.symtab	0x283f4	4	OBJECT	<unknown>	DEFAULT	10
locker_process	.symtab	0x93c0	220	FUNC	<unknown>	DEFAULT	2
locker_status	.symtab	0x283fc	1	OBJECT	<unknown>	DEFAULT	10
lseek64	.symtab	0x1dc18	100	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x9694	548	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
main_check_connection	.symtab	0x8afc	268	FUNC	<unknown>	DEFAULT	2
main_disconnect_connection	.symtab	0x8c08	184	FUNC	<unknown>	DEFAULT	2
main_handle_connection	.symtab	0x90f0	648	FUNC	<unknown>	DEFAULT	2
main_make_connection	.symtab	0x85b8	1348	FUNC	<unknown>	DEFAULT	2
main_read_connection	.symtab	0x8f24	144	FUNC	<unknown>	DEFAULT	2
main_read_data	.symtab	0x8cc0	520	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x171e8	2116	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x182f4	40	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x1d980	244	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x164b0	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x1c0e0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1da74	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1da8c	220	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x164c0	156	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 14:56:17.395703077 CEST	38540	8080	192.168.2.23	194.26.25.141
Oct 21, 2024 14:56:17.401170969 CEST	8080	38540	194.26.25.141	192.168.2.23
Oct 21, 2024 14:56:17.401276112 CEST	38540	8080	192.168.2.23	194.26.25.141
Oct 21, 2024 14:56:19.406394005 CEST	38540	8080	192.168.2.23	194.26.25.141
Oct 21, 2024 14:56:19.412102938 CEST	8080	38540	194.26.25.141	192.168.2.23
Oct 21, 2024 14:56:19.412173986 CEST	38540	8080	192.168.2.23	194.26.25.141
Oct 21, 2024 14:56:19.417716980 CEST	8080	38540	194.26.25.141	192.168.2.23
Oct 21, 2024 14:56:20.357497931 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 21, 2024 14:56:21.125411034 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 21, 2024 14:56:25.737612963 CEST	8080	38540	194.26.25.141	192.168.2.23
Oct 21, 2024 14:56:25.740735054 CEST	38540	8080	192.168.2.23	194.26.25.141
Oct 21, 2024 14:56:35.203460932 CEST	43928	443	192.168.2.23	91.189.91.42
Oct 21, 2024 14:56:35.747432947 CEST	38540	8080	192.168.2.23	194.26.25.141
Oct 21, 2024 14:56:35.753010988 CEST	8080	38540	194.26.25.141	192.168.2.23
Oct 21, 2024 14:56:45.777434111 CEST	44272	7777	192.168.2.23	172.105.120.101
Oct 21, 2024 14:56:45.783262968 CEST	7777	44272	172.105.120.101	192.168.2.23
Oct 21, 2024 14:56:45.783335924 CEST	44272	7777	192.168.2.23	172.105.120.101
Oct 21, 2024 14:56:47.489732027 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 21, 2024 14:56:47.784898043 CEST	44272	7777	192.168.2.23	172.105.120.101
Oct 21, 2024 14:56:47.790215969 CEST	7777	44272	172.105.120.101	192.168.2.23
Oct 21, 2024 14:56:47.790294886 CEST	44272	7777	192.168.2.23	172.105.120.101
Oct 21, 2024 14:56:47.795833111 CEST	7777	44272	172.105.120.101	192.168.2.23
Oct 21, 2024 14:56:51.585199118 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 21, 2024 14:56:54.125220060 CEST	7777	44272	172.105.120.101	192.168.2.23
Oct 21, 2024 14:56:54.128730059 CEST	44272	7777	192.168.2.23	172.105.120.101
Oct 21, 2024 14:57:04.124946117 CEST	44272	7777	192.168.2.23	172.105.120.101
Oct 21, 2024 14:57:04.130614042 CEST	7777	44272	172.105.120.101	192.168.2.23
Oct 21, 2024 14:57:14.144099951 CEST	43602	1337	192.168.2.23	185.173.37.56
Oct 21, 2024 14:57:14.149715900 CEST	1337	43602	185.173.37.56	192.168.2.23
Oct 21, 2024 14:57:14.149852991 CEST	43602	1337	192.168.2.23	185.173.37.56
Oct 21, 2024 14:57:16.150631905 CEST	43602	1337	192.168.2.23	185.173.37.56
Oct 21, 2024 14:57:16.157166958 CEST	1337	43602	185.173.37.56	192.168.2.23
Oct 21, 2024 14:57:16.157227039 CEST	43602	1337	192.168.2.23	185.173.37.56
Oct 21, 2024 14:57:16.157582045 CEST	43928	443	192.168.2.23	91.189.91.42
Oct 21, 2024 14:57:16.164509058 CEST	1337	43602	185.173.37.56	192.168.2.23

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 14:56:17.374437094 CEST	42090	53	192.168.2.23	8.8.8.8
Oct 21, 2024 14:56:17.386672974 CEST	53	42090	8.8.8.8	192.168.2.23
Oct 21, 2024 14:56:45.757325888 CEST	43881	53	192.168.2.23	8.8.8.8
Oct 21, 2024 14:56:45.775058985 CEST	53	43881	8.8.8.8	192.168.2.23
Oct 21, 2024 14:57:14.134567976 CEST	58741	53	192.168.2.23	8.8.8.8
Oct 21, 2024 14:57:14.143569946 CEST	53	58741	8.8.8.8	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 21, 2024 14:56:17.374437094 CEST	192.168.2.23	8.8.8.8	0xfdac	Standard query (0)	ipcamlover.ru	A (IP address)	IN (0x0001)	false
Oct 21, 2024 14:56:45.757325888 CEST	192.168.2.23	8.8.8.8	0x1f69	Standard query (0)	ipcamlover.ru	A (IP address)	IN (0x0001)	false
Oct 21, 2024 14:57:14.134567976 CEST	192.168.2.23	8.8.8.8	0x27ab	Standard query (0)	ipcamlover.ru	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: meow.arm.elf PID: 6364, Parent PID: 6167

General

Start time (UTC):	12:56:16
Start date (UTC):	21/10/2024
Path:	/tmp/meow.arm.elf
Arguments:	/tmp/meow.arm.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: meow.arm.elf PID: 6366, Parent PID: 6364

General

Start time (UTC):	12:56:16
Start date (UTC):	21/10/2024
Path:	/tmp/meow.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: meow.arm.elf PID: 6368, Parent PID: 6366

General

Start time (UTC):	12:56:16
Start date (UTC):	21/10/2024
Path:	/tmp/meow.arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report meow.arm.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

System Behavior

Analysis Process: meow.arm.elf PID: 6364, Parent PID: 6167

General

Chronological Activities

Analysis Process: meow.arm.elf PID: 6366, Parent PID: 6364

General

Chronological Activities

Analysis Process: meow.arm.elf PID: 6368, Parent PID: 6366

General

Chronological Activities

Linux Analysis Report
meow.arm.elf