Edit tour

Linux Analysis Report
meow.arm7.elf

Overview

General Information

Sample name:	meow.arm7.elf
Analysis ID:	1556088
MD5:	9d526474fb45b10806f7a079de157b41
SHA1:	db50783b1f5c100d17b71d25bf0b09b97e1cf96b
SHA256:	962ef40999fae3d3e6c02c0a6d2fcae72cc0c49070b0f5179ce1b8df7759c7b4
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Connects to many ports of the same IP (likely port scanning)

Detected TCP or UDP traffic on non-standard ports

Found strings indicative of a multi-platform dropper

Sample and/or dropped files contains symbols with suspicious names

Sample listens on a socket

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556088
Start date and time:	2024-11-14 22:07:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	meow.arm7.elf
Detection:	MAL
Classification:	mal52.troj.linELF@0/0@10/0

Warnings

VT rate limit hit for: meow.arm7.elf

Runtime Messages

Command:	/tmp/meow.arm7.elf
PID:	6214
Exit Code:
Exit Code Info:
Killed:	True
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

meow.arm7.elf (PID: 6214, Parent: 6136, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/meow.arm7.elf

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Spreading
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: meow.arm7.elf

ReversingLabs: Detection: 23%

Source: meow.arm7.elf

String: /proc//cmdlinewgetcurlftp[ locker ] Killing process: %d (cmd: %s)

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 77.232.36.208 ports 3,4,5,7,8,53847

Source: global traffic	TCP traffic: 192.168.2.23:57026 -> 91.142.77.79:8080
Source: global traffic	TCP traffic: 192.168.2.23:50270 -> 77.232.36.208:53847

Source: /tmp/meow.arm7.elf (PID: 6214)

Socket: 127.0.0.1:45995

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.142.77.79
Source: unknown	TCP traffic detected without corresponding DNS query: 91.142.77.79
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.142.77.79
Source: unknown	TCP traffic detected without corresponding DNS query: 91.142.77.79
Source: unknown	TCP traffic detected without corresponding DNS query: 91.142.77.79
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.142.77.79
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.208
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.208
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.208
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.208
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.208
Source: unknown	TCP traffic detected without corresponding DNS query: 77.232.36.208
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 208.67.222.222
Source: unknown	UDP traffic detected without corresponding DNS query: 208.67.220.220
Source: unknown	UDP traffic detected without corresponding DNS query: 9.9.9.9
Source: unknown	UDP traffic detected without corresponding DNS query: 4.2.2.1
Source: unknown	UDP traffic detected without corresponding DNS query: 180.76.76.76
Source: unknown	UDP traffic detected without corresponding DNS query: 185.85.15.34

Source: global traffic	DNS traffic detected: DNS query: kitty.xlabresearch.ru
Source: global traffic	DNS traffic detected: DNS query: fish.dvrhelpers.su

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: meow.arm7.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: classification engine

Classification label: mal52.troj.linELF@0/0@10/0

Source: /tmp/meow.arm7.elf (PID: 6214)

Queries kernel information via 'uname':

Jump to behavior

Source: meow.arm7.elf, 6214.1.00007ffd34fd7000.00007ffd34ff8000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/meow.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/meow.arm7.elf
Source: meow.arm7.elf, 6214.1.0000563d86fda000.0000563d8712c000.rw-.sdmp	Binary or memory string: =V!/etc/qemu-binfmt/arm
Source: meow.arm7.elf, 6214.1.0000563d86fda000.0000563d8712c000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: meow.arm7.elf, 6214.1.00007ffd34fd7000.00007ffd34ff8000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
meow.arm7.elf	24%	ReversingLabs	Linux.Backdoor.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
kitty.xlabresearch.ru	146.112.61.108	true	false		unknown
fish.dvrhelpers.su	unknown	unknown	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
91.142.77.79	unknown	Russian Federation	48720	VTSL1-ASRU	false
77.232.36.208	unknown	Russian Federation	28968	EUT-ASEUTIPNetworkRU	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	ub8ehJSePAfc9FYqZIT6.mpsl.elf	Get hash	malicious	Unknown	Browse
	yakuza.arm5.elf	Get hash	malicious	Mirai	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse
	main_sh4.elf	Get hash	malicious	Mirai	Browse
	la.bot.arm6.elf	Get hash	malicious	Unknown	Browse
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse
	la.bot.arc.elf	Get hash	malicious	Mirai	Browse
91.189.91.42	ub8ehJSePAfc9FYqZIT6.mpsl.elf	Get hash	malicious	Unknown	Browse
	yakuza.arm5.elf	Get hash	malicious	Mirai	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse
	main_sh4.elf	Get hash	malicious	Mirai	Browse
	la.bot.arm6.elf	Get hash	malicious	Unknown	Browse
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse
	la.bot.arc.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	ub8ehJSePAfc9FYqZIT6.mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	yakuza.mips.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	yakuza.arm6.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	yakuza.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm7.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
EUT-ASEUTIPNetworkRU	hiss.arm5.elf	Get hash	malicious	Unknown	Browse	77.232.39.139
	meow.arm7.elf	Get hash	malicious	Unknown	Browse	77.232.42.137
	na.elf	Get hash	malicious	Unknown	Browse	77.232.36.152
	https://stacksports.captainu.com	Get hash	malicious	Unknown	Browse	77.232.36.155
	http://blacksaltys.com	Get hash	malicious	Unknown	Browse	77.232.36.155
	https://imago-technologies.com/	Get hash	malicious	Unknown	Browse	77.232.36.155
	http://twbcompany.com	Get hash	malicious	Unknown	Browse	77.232.36.155
	http://www.twbcompany.com	Get hash	malicious	Unknown	Browse	77.232.36.155
	874A7cigvX.exe	Get hash	malicious	Tofsee	Browse	77.232.41.29
	RSno9EH0K9.exe	Get hash	malicious	Tofsee	Browse	77.232.41.29
INIT7CH	ub8ehJSePAfc9FYqZIT6.mpsl.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	yakuza.arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	main_sh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	la.bot.arc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
VTSL1-ASRU	SecuriteInfo.com.Win32.MalwareX-gen.27138.13961.dll	Get hash	malicious	GO Backdoor	Browse	91.142.74.28
	SecuriteInfo.com.Win32.MalwareX-gen.27138.13961.dll	Get hash	malicious	GO Backdoor	Browse	91.142.74.28
	SecuriteInfo.com.Win32.Malware-gen.26009.9463.exe	Get hash	malicious	GO Backdoor	Browse	91.142.74.28
	Notepad3_v6.23.203.2.exe	Get hash	malicious	Amadey, GO Backdoor	Browse	91.142.74.28
	file.dll	Get hash	malicious	Unknown	Browse	91.142.74.28
	file.dll	Get hash	malicious	Unknown	Browse	91.142.73.198
	file.dll	Get hash	malicious	Unknown	Browse	91.142.74.28
	file.dll	Get hash	malicious	Unknown	Browse	91.142.74.28
	file.dll	Get hash	malicious	Unknown	Browse	91.142.74.28
	file.dll	Get hash	malicious	Unknown	Browse	91.142.74.28

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.9460149668227
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	meow.arm7.elf
File size:	183'195 bytes
MD5:	9d526474fb45b10806f7a079de157b41
SHA1:	db50783b1f5c100d17b71d25bf0b09b97e1cf96b
SHA256:	962ef40999fae3d3e6c02c0a6d2fcae72cc0c49070b0f5179ce1b8df7759c7b4
SHA512:	6a9451c23d824c9cc58e12f2d441d5f431a0b8bc98dae4e98839caeda2211f2d8449ef696665ec9780b567e28beeb740a44973a48c0d74f14ad7504583126f09
SSDEEP:	3072:rsilxxogZF5ZM54anv8wy6ybt0qld3Dt46XIYM/93CVQlq:rsiF24anv8wy6Mt9zt46XPM/93Cn
TLSH:	EB041909EA50572BC2E237BFEA9A438E33334B48B7D733158A345AB53BC5B985D32115
File Content Preview:	.ELF..............(.........4...H<......4. ...(........ph...hL..hL..................................................................h....S..........................................Q.td..................................-...L..................G.F.G.F.G.F.G.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81d0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	146504
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x1a988	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x22a78	0x1aa78	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x22a88	0x1aa88	0x21c8	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x24c50	0x1cc50	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x24c68	0x1cc68	0x118	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x2d000	0x1d000	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x2d004	0x1d004	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x2d004	0x1d004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x2d008	0x1d008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2d00c	0x1d00c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x2d010	0x1d010	0xac	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2d0bc	0x1d0bc	0x2ac	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2d368	0x1d368	0x505c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1d368	0xc52	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x1dfc0	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x1e100	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1e313	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x20356	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x20a38	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x218b0	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x21b68	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x22432	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x235c1	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x23b19	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x23b2f	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x240d0	0x5d50	0x10	0x0		28	868	4
.strtab	STRTAB	0x0	0x29e20	0x2d7b	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x1cc68	0x24c68	0x24c68	0x118	0x118	4.5139	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x1cd80	0x1cd80	6.0162	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x1d000	0x2d000	0x2d000	0x368	0x53c4	3.9428	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x1d004	0x2d004	0x2d004	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x22a78	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x22a88	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x24c50	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x24c68	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2d000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2d004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2d004	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2d008	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2d00c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2d010	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x2d0bc	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x2d368	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x22a78	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x22a84	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x812c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x820c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8dac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8e68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9084	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x91b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9310	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x94b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x960c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x97f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9a14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9af8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9d34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9de4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9ec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa3ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa51c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa8c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa9b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xae74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbc08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc1b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcab8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd808	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xddd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe8b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf924	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10040	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10918	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10df8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11278	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1136c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12174	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x121c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12adc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14308	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1437c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x144c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14674	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x146d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1473c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15180	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15920	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15dfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1613c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1624c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1631c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16490	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16598	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x165cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16720	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1676c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x167ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ac4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17330	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17374	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17524	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17d00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17da0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ee4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18014	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18090	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x187d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1887c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x188a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x188e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1892c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x189a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x189e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ab0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18bf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ca4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18dc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a154	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a2bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a5fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a614	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a6b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a8d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a964	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aa3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ab34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ae14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aed8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b024	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bafc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bce8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bd30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bfac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bfb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bfe4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c03c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c044	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c100	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c324	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c3d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c838	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c8ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c8f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c920	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c9c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cd64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cda8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cde8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ce28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ce88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cef4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cf80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cf94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d478	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d49c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d558	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d888	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d8a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d8dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d9ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e178	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e1a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eaf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ec38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ed54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f3b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f4dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fa10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fa20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fa40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fb30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fb54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fc34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fd24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fe10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fe34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fe78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ff14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20014	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x2006c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x200a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20118	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20180	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x203d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x203e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20470	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x204c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x204d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x2061c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20800	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20920	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x209f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20a30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20a70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20efc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21398	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x214d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x2152c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x215c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x215cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x215d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x215fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21608	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21614	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21834	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x219a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21a00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21a6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21b24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21c88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x221d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x221d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x221e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x221e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x222a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x222e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x229fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x22a44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8164	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d008	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x81bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d004	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x2d0c0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x8200	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d0c4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x22a90	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x863c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8c68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8da4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8e5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9070	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x911c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x91b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9308	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x949c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x95e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x97f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9a08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d0f4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x9ac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9d24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9ddc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9ec0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa3a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa514	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa8b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d0f8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x23170	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa99c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xae64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d0fc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d100	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d104	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d108	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x233c8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xcaa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d10c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d110	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d114	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d118	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xe8b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d11c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x233fc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xf1a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d120	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d124	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2344c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1003c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d128	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x23465	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10908	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d12c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d130	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x11100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d144	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x11194	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11268	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11368	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d148	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x12144	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d14c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x12abc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d150	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x133d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13fe4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d154	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x142ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14374	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x143e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x144c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1458c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1466c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d168	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x146d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14734	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14af0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15150	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d16c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x151dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15240	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15330	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15890	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1591c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x15c1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15df8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ec8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16230	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16314	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x163d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16488	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23bc8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x16564	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16594	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x165c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16718	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16764	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x167dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16934	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d174	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d170	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1726c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23c20	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17520	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1756c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17ab8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d258	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x23c28	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17ce0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17ec4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17fe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23cac	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1808c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x183d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18534	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x187c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18874	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x188e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18924	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18998	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x189dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18aa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18be8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18ce8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18db8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18dfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19790	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d25c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x198d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19c94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a138	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a18c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a2a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d274	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1a5d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a69c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a814	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a8b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d28c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2d324	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1a960	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aa30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ab24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ac14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24830	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1ae04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aeb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d338	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1b000	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b61c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b694	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ba3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bb58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bcd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1be14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bf40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bf50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bfe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c070	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c25c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c310	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c370	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c3c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c770	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d350	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1c830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c860	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c8e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c95c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c9c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cac0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cb64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cbf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cc2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cc6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cd54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cda4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cde4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ce24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ce80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ceec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cf7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d35c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x248c2	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1d06c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d41c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d554	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d878	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d9a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1da84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1deb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ead4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24bf8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1efe8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f398	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f4d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fb28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fc2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fd1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fe08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20004	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20010	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20170	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x203ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2040c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2d364	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x204bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20614	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x207fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2091c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x209f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20adc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21818	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x221c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$t	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
C.0.4535	.symtab	0x23170	40	OBJECT	<unknown>	DEFAULT	4
C.10.4628	.symtab	0x2342c	16	OBJECT	<unknown>	DEFAULT	4
C.10.4628	.symtab	0x2348d	12	OBJECT	<unknown>	DEFAULT	4
C.11.4629	.symtab	0x23414	24	OBJECT	<unknown>	DEFAULT	4
C.11.4629	.symtab	0x23479	20	OBJECT	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x248a0	12	OBJECT	<unknown>	DEFAULT	4
C.12.4630	.symtab	0x233fc	24	OBJECT	<unknown>	DEFAULT	4
C.12.4630	.symtab	0x23465	20	OBJECT	<unknown>	DEFAULT	4
C.18.4649	.symtab	0x2344c	25	OBJECT	<unknown>	DEFAULT	4
C.18.4664	.symtab	0x233da	16	OBJECT	<unknown>	DEFAULT	4
C.19.4674	.symtab	0x233ca	16	OBJECT	<unknown>	DEFAULT	4
C.22.4695	.symtab	0x233c8	2	OBJECT	<unknown>	DEFAULT	4
C.45.5651	.symtab	0x22e38	8	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x23bc8	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x248ac	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x24bc4	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x23bf8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x24bd0	12	OBJECT	<unknown>	DEFAULT	4
C.8.5276	.symtab	0x22a90	8	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x23bec	12	OBJECT	<unknown>	DEFAULT	4
C.9.4627	.symtab	0x2343c	16	OBJECT	<unknown>	DEFAULT	4
C.9.4627	.symtab	0x23499	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x23be0	12	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0x17dc8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x17de4	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x1c960	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x2d010	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x215cc	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x215d0	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x22280	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x215c4	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x21608	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x222a4	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x22a44	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x215fc	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x22214	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x22238	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x2225c	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x2152c	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x21b44	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x21578	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x2d35c	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x248c2	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x2d000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x2d000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x2d35c	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x1bf70	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x1bf54	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2d360	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x16578	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x15b8c	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1f3b0	300	FUNC	<unknown>	HIDDEN	2
__GI___fputc_unlocked	.symtab	0x17ae8	264	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x17ecc	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x1bf70	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x15c24	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1c000	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x1c090	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x20030	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x1c000	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x1bfe4	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x1c090	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x1c074	24	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x1bb60	392	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x1c2a8	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1c378	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x20030	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x20014	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x17ee4	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1c960	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1a194	296	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x188a4	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x20470	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x1bf70	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x1613c	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1d3a8	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1d3dc	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1d080	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x1892c	116	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x15d18	64	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x15d58	64	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x1ae14	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1d558	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x15c24	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1f004	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1eaf4	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1f3b0	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1ec38	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1f4dc	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1d888	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1b698	972	FUNC	<unknown>	HIDDEN	2
__GI_fputc_unlocked	.symtab	0x17ae8	264	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x17bf0	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x2061c	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x20640	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x15d98	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x17c28	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1f3b0	300	FUNC	<unknown>	HIDDEN	2
__GI_getcwd	.symtab	0x1c9c8	256	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1cb68	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1cb94	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1cba8	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1cbbc	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1cbd0	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1bce8	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x1cbf8	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x189a0	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x1cc30	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1cc70	20	FUNC	<unknown>	HIDDEN	2
__GI_htonl	.symtab	0x180a0	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x18090	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x1887c	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1ff14	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x18860	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x187d4	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x18538	668	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x181c0	552	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x1aa3c	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x1cc84	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x17ff0	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x15e10	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x18a2c	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x20a70	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1fa40	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x17cf0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1fa10	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1fb30	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1fb54	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x17d00	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1c7bc	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1cd64	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x1cda8	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1ce28	96	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x180d0	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x180c0	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1c000	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x1631c	196	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x16720	76	FUNC	<unknown>	HIDDEN	2
__GI_putc_unlocked	.symtab	0x17ae8	264	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1bd30	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x1a614	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1a8d4	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1c090	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x16490	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1cf94	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x15e8c	64	FUNC	<unknown>	HIDDEN	2
__GI_realpath	.symtab	0x1a2bc	832	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x18ab0	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x18b68	136	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1ce88	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x15f10	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x18c34	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x18cf0	136	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x18d78	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1ab34	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1c864	136	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1cef4	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x1be20	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x18dc0	68	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x1d8a8	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x1a964	216	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1fc34	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1fd24	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1fa20	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1fa20	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x1fe10	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1fe34	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x17da0	96	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x17e00	204	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1fe78	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1fec8	76	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1ac20	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1b024	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x18014	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x15f94	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x1cf80	20	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x16980	324	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1d8dc	208	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1d424	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1d49c	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1d478	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x20030	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2d00c	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x2d00c	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x22280	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x22214	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x22238	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x2225c	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x20aec	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x21448	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x21448	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x2142c	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x214d8	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x20aec	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x21460	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x214a8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x214c0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x21490	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x21478	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x2118c	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x20efc	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x20ae0	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x20ae8	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x20e48	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x20e20	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x15a34	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x15b60	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x20e9c	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x1c910	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x20dfc	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x15920	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x15a1c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x20e88	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x221e0	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x221d8	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x221d0	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x2f990	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x2d338	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x323c4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2d368	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2d368	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x1c324	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x1bf70	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x1bf54	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x213a8	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x2d360	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2fed4	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x2d0bc	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x1c904	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x1c8f8	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x15b78	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x2118c	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x15a34	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x812c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x2d008	0	OBJECT	<unknown>	DEFAULT	10
__dso_handle	.symtab	0x2d0bc	0	OBJECT	<unknown>	HIDDEN	13
__end__	.symtab	0x323c4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2f988	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x213a8	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x16578	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x24d80	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x24c68	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2f438	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x20e48	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x15b8c	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1f3b0	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2d00c	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x2d008	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x214d8	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x20e9c	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x20e20	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x20e88	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x20dfc	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x1b698	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x32390	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x32394	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x2f43c	4	OBJECT	<unknown>	HIDDEN	14
__fputc_unlocked	.symtab	0x17ae8	264	FUNC	<unknown>	DEFAULT	2
__frame_dummy_init_array_entry	.symtab	0x2d004	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x21398	148	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x1cac8	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x204d4	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1cbd0	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x1bce8	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x17ecc	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x21984	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x21a6c	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x22204	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x21a00	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x21b24	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x2220c	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x222e8	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x229fc	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x21c88	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x21398	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x2d008	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x2d004	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x213a0	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x1bf70	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x1892c	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x1c100	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x1c188	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x15c24	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1b698	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x32398	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x1ce28	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1c000	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1c090	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x18ab0	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x18b68	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x15f10	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x18c34	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x18cf0	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x201a4	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1c864	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2f984	4	OBJECT	<unknown>	DEFAULT	14
__libc_write	.symtab	0x20030	100	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x1bafc	100	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x1ba64	152	FUNC	<unknown>	HIDDEN	2
__ltdf2	.symtab	0x213a0	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x19d64	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x18e04	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2d25c	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x32018	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x19cb4	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x20efc	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x213a8	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x1c000	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x1bfe4	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x2f98c	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x2d004	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x2d004	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x2d354	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x2d358	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x203d4	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1c26c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x1c264	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x1c264	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x1c264	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x1c264	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x1c090	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x1c074	24	FUNC	<unknown>	DEFAULT	2
__register_atfork	.symtab	0x1bb60	392	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x221e8	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x2f994	4	OBJECT	<unknown>	HIDDEN	14
__sigjmp_save	.symtab	0x20a30	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x204c8	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x2d180	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x20800	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1d9ac	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x20858	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1dee8	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x20920	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x209f4	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x20950	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1e028	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x16950	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2d184	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x20ae8	788	FUNC	<unknown>	HIDDEN	2
__sys_connect	.symtab	0x188e8	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x18a6c	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x18b20	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x18bf0	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x18ca4	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x1c838	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x1cde8	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x1c920	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x15ecc	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x20180	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x1c2a8	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1c378	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x1c3d0	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2d350	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x15920	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x20030	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x20014	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x17ee4	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x16090	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x15fc4	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_atoi	.symtab	0x1389c	136	FUNC	<unknown>	DEFAULT	2
_bss_custom_printf_spec	.symtab	0x2f418	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x323c4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x811d	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8121	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8129	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x810d	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x8111	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x8115	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x8119	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8125	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x16ac4	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x31fc8	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x31ff0	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x2d258	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x203e0	56	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls	.symtab	0x2d364	4	OBJECT	<unknown>	DEFAULT	13
_dl_nothread_init_static_tls	.symtab	0x20418	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x323bc	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x323c0	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x323b0	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x323ac	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x323b4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x323a4	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x20118	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x323a0	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x323b8	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x323a8	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x3239c	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x2d368	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x323c4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x1c960	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x22a78	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2d418	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x16b18	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1e300	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1e104	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x1f580	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x17290	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x17578	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x17330	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x17374	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x17524	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1c27c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1c274	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x1c8ec	8	FUNC	<unknown>	DEFAULT	2
_start	.symtab	0x81d0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1da88	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1676c	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x2d188	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x2d3f8	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x1ed54	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x2d414	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x2d404	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x2d410	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x2d18c	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x167ec	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x2d170	4	OBJECT	<unknown>	DEFAULT	13

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 30
• 53847 undefined
• 8080 undefined
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 14, 2024 22:07:51.251962900 CET	43928	443	192.168.2.23	91.189.91.42
Nov 14, 2024 22:07:52.911942959 CET	57026	8080	192.168.2.23	91.142.77.79
Nov 14, 2024 22:07:52.917793036 CET	8080	57026	91.142.77.79	192.168.2.23
Nov 14, 2024 22:07:52.918025970 CET	57026	8080	192.168.2.23	91.142.77.79
Nov 14, 2024 22:07:56.883281946 CET	42836	443	192.168.2.23	91.189.91.43
Nov 14, 2024 22:07:57.651269913 CET	42516	80	192.168.2.23	109.202.202.202
Nov 14, 2024 22:08:04.932550907 CET	57026	8080	192.168.2.23	91.142.77.79
Nov 14, 2024 22:08:04.938330889 CET	8080	57026	91.142.77.79	192.168.2.23
Nov 14, 2024 22:08:04.938755989 CET	57026	8080	192.168.2.23	91.142.77.79
Nov 14, 2024 22:08:04.944158077 CET	8080	57026	91.142.77.79	192.168.2.23
Nov 14, 2024 22:08:05.665153027 CET	8080	57026	91.142.77.79	192.168.2.23
Nov 14, 2024 22:08:05.666166067 CET	57026	8080	192.168.2.23	91.142.77.79
Nov 14, 2024 22:08:12.497383118 CET	43928	443	192.168.2.23	91.189.91.42
Nov 14, 2024 22:08:15.675446987 CET	57026	8080	192.168.2.23	91.142.77.79
Nov 14, 2024 22:08:15.681381941 CET	8080	57026	91.142.77.79	192.168.2.23
Nov 14, 2024 22:08:22.736005068 CET	42836	443	192.168.2.23	91.189.91.43
Nov 14, 2024 22:08:28.879249096 CET	42516	80	192.168.2.23	109.202.202.202
Nov 14, 2024 22:08:33.209749937 CET	50270	53847	192.168.2.23	77.232.36.208
Nov 14, 2024 22:08:33.215178967 CET	53847	50270	77.232.36.208	192.168.2.23
Nov 14, 2024 22:08:33.215379000 CET	50270	53847	192.168.2.23	77.232.36.208
Nov 14, 2024 22:08:35.219115019 CET	50270	53847	192.168.2.23	77.232.36.208
Nov 14, 2024 22:08:35.224896908 CET	53847	50270	77.232.36.208	192.168.2.23
Nov 14, 2024 22:08:35.225286007 CET	50270	53847	192.168.2.23	77.232.36.208
Nov 14, 2024 22:08:35.230830908 CET	53847	50270	77.232.36.208	192.168.2.23
Nov 14, 2024 22:08:35.951164961 CET	53847	50270	77.232.36.208	192.168.2.23
Nov 14, 2024 22:08:35.954262972 CET	50270	53847	192.168.2.23	77.232.36.208
Nov 14, 2024 22:08:37.937083006 CET	50270	53847	192.168.2.23	77.232.36.208
Nov 14, 2024 22:08:37.942539930 CET	53847	50270	77.232.36.208	192.168.2.23
Nov 14, 2024 22:08:53.451930046 CET	43928	443	192.168.2.23	91.189.91.42
Nov 14, 2024 22:09:13.929527998 CET	42836	443	192.168.2.23	91.189.91.43

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 14, 2024 22:07:52.897933960 CET	57542	53	192.168.2.23	8.8.8.8
Nov 14, 2024 22:07:52.909509897 CET	53	57542	8.8.8.8	192.168.2.23
Nov 14, 2024 22:08:25.689259052 CET	60111	53	192.168.2.23	8.8.8.8
Nov 14, 2024 22:08:25.697658062 CET	53	60111	8.8.8.8	192.168.2.23
Nov 14, 2024 22:08:25.700804949 CET	38272	53	192.168.2.23	1.1.1.1
Nov 14, 2024 22:08:25.793598890 CET	53	38272	1.1.1.1	192.168.2.23
Nov 14, 2024 22:08:25.796844959 CET	58077	53	192.168.2.23	208.67.222.222
Nov 14, 2024 22:08:25.804564953 CET	53	58077	208.67.222.222	192.168.2.23
Nov 14, 2024 22:08:25.807485104 CET	56587	53	192.168.2.23	208.67.220.220
Nov 14, 2024 22:08:25.815361023 CET	53	56587	208.67.220.220	192.168.2.23
Nov 14, 2024 22:08:25.818320990 CET	32949	53	192.168.2.23	9.9.9.9
Nov 14, 2024 22:08:25.850142956 CET	53	32949	9.9.9.9	192.168.2.23
Nov 14, 2024 22:08:25.854312897 CET	58439	53	192.168.2.23	4.2.2.1
Nov 14, 2024 22:08:25.861236095 CET	53	58439	4.2.2.1	192.168.2.23
Nov 14, 2024 22:08:25.864655018 CET	45731	53	192.168.2.23	180.76.76.76
Nov 14, 2024 22:08:26.181524992 CET	53	45731	180.76.76.76	192.168.2.23
Nov 14, 2024 22:08:26.184910059 CET	51362	53	192.168.2.23	185.85.15.34
Nov 14, 2024 22:08:33.197088003 CET	56756	53	192.168.2.23	8.8.8.8
Nov 14, 2024 22:08:33.208365917 CET	53	56756	8.8.8.8	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 14, 2024 22:07:52.897933960 CET	192.168.2.23	8.8.8.8	0xd833	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.689259052 CET	192.168.2.23	8.8.8.8	0x869c	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.700804949 CET	192.168.2.23	1.1.1.1	0x869c	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.796844959 CET	192.168.2.23	208.67.222.222	0x869c	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.807485104 CET	192.168.2.23	208.67.220.220	0x869c	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.818320990 CET	192.168.2.23	9.9.9.9	0x869c	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.854312897 CET	192.168.2.23	4.2.2.1	0x869c	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.864655018 CET	192.168.2.23	180.76.76.76	0x869c	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:26.184910059 CET	192.168.2.23	185.85.15.34	0x869c	Standard query (0)	kitty.xlabresearch.ru	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:33.197088003 CET	192.168.2.23	8.8.8.8	0x8f19	Standard query (0)	fish.dvrhelpers.su	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 14, 2024 22:08:25.697658062 CET	8.8.8.8	192.168.2.23	0x869c	Name error (3)	kitty.xlabresearch.ru	none	none	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.804564953 CET	208.67.222.222	192.168.2.23	0x869c	No error (0)	kitty.xlabresearch.ru		146.112.61.108	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.815361023 CET	208.67.220.220	192.168.2.23	0x869c	No error (0)	kitty.xlabresearch.ru		146.112.61.108	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.850142956 CET	9.9.9.9	192.168.2.23	0x869c	Name error (3)	kitty.xlabresearch.ru	none	none	A (IP address)	IN (0x0001)	false
Nov 14, 2024 22:08:25.861236095 CET	4.2.2.1	192.168.2.23	0x869c	Name error (3)	kitty.xlabresearch.ru	none	none	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: meow.arm7.elf PID: 6214, Parent PID: 6136

General

Start time (UTC):	21:07:51
Start date (UTC):	14/11/2024
Path:	/tmp/meow.arm7.elf
Arguments:	/tmp/meow.arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report meow.arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: meow.arm7.elf PID: 6214, Parent PID: 6136

General

File Activities

File Opened

File Read

Process Activities

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Listening

Socket Connecting

Chronological Activities

Linux Analysis Report
meow.arm7.elf