Edit tour
Linux
Analysis Report
mipsel.elf
Overview
General Information
| Sample name: | mipsel.elf |
| Analysis ID: | 1538198 |
| MD5: | ad661aeb6feb98e630cf15419d61d431 |
| SHA1: | 9d2190b0791a737a8dca248b63add995c48b743f |
| SHA256: | b6f47ffd17d7ce45c4df0232947f1ad0345d06196c3ce271beaf98b077e2c200 |
| Tags: | elfuser-abuse_ch |
| Infos: |  |
Detection
Gafgyt, Mirai
| Score: | 80 |
| Range: | 0 - 100 |
| Whitelisted: | false |
Signatures
Antivirus / Scanner detection for submitted sample
Found malware configuration
Suricata IDS alerts for network traffic
Yara detected Gafgyt
Yara detected Mirai
Detected TCP or UDP traffic on non-standard ports
Sample contains strings that are user agent strings indicative of HTTP manipulation
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)
Classification
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1538198 |
| Start date and time: | 2024-10-20 19:31:06 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 5m 4s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultlinuxfilecookbook.jbs |
| Analysis system description: | Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11) |
| Analysis Mode: | default |
| Sample name: | mipsel.elf |
| Detection: | MAL |
| Classification: | mal80.troj.linELF@0/0@0/0 |
- VT rate limit hit for: mipsel.elf
| Command: | /tmp/mipsel.elf |
| PID: | 6236 |
| Exit Code: | 0 |
| Exit Code Info: | |
| Killed: | False |
| Standard Output: | |
| Standard Error: |
- system is lnxubuntu20
- mipsel.elf New Fork (PID: 6238, Parent: 6236)
- mipsel.elf New Fork (PID: 6240, Parent: 6238)
- mipsel.elf New Fork (PID: 6242, Parent: 6240)
- mipsel.elf New Fork (PID: 6248, Parent: 6242)
- cleanup
| Name | Description | Attribution | Blogpost URLs | Link |
|---|---|---|---|---|
| Bashlite, Gafgyt | Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps. | No Attribution |
| Name | Description | Attribution | Blogpost URLs | Link |
|---|---|---|---|---|
| Mirai | Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world. | No Attribution |
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_Gafgyt | Yara detected Gafgyt | Joe Security | ||
| JoeSecurity_Mirai_3 | Yara detected Mirai | Joe Security |
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_Mirai_3 | Yara detected Mirai | Joe Security | ||
| JoeSecurity_Mirai_3 | Yara detected Mirai | Joe Security | ||
| JoeSecurity_Mirai_3 | Yara detected Mirai | Joe Security | ||
| JoeSecurity_Mirai_3 | Yara detected Mirai | Joe Security | ||
| JoeSecurity_Mirai_3 | Yara detected Mirai | Joe Security | ||
| Click to see the 3 entries | ||||
| Timestamp | SID | Severity | Classtype | Source IP | Source Port | Destination IP | Destination Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2024-10-20T19:31:52.579027+0200 | 2847206 | 1 | A Network Trojan was detected | 192.168.2.23 | 41010 | 212.224.93.228 | 666 | TCP |
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | Avira: | ||
| Source: | Malware Configuration Extractor: | ||
Networking | |
|---|
| Source: | Suricata IDS: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Classification label: | ||
| Source: | ELF static info symbol of initial sample: | ||
| Source: | ELF static info symbol of initial sample: | ||
| Source: | ELF static info symbol of initial sample: | ||
| Source: | ELF static info symbol of initial sample: | ||
| Source: | ELF static info symbol of initial sample: | ||
| Source: | ELF static info symbol of initial sample: | ||
| Source: | Queries kernel information via 'uname': | Jump to behavior | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
Stealing of Sensitive Information | |
|---|
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
| Source: | User agent string found: | ||
Remote Access Functionality | |
|---|
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | Path Interception | Path Interception | Direct Volume Access | OS Credential Dumping | 11 Security Software Discovery | Remote Services | Data from Local System | 1 Data Obfuscation | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | Rootkit | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 1 Encrypted Channel | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 1 Non-Standard Port | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 1 Application Layer Protocol | Traffic Duplication | Data Destruction |
{"C2 url": "212.224.93.228:666"}
Is Dropped
Number of created Files
Is malicious
Internet| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Avira | EXP/ELF.Mirai.W |
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No contacted domains info
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| true | unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 212.224.93.228 | unknown | Germany | 44066 | DE-FIRSTCOLOwwwfirst-colonetDE | true | |
| 109.202.202.202 | unknown | Switzerland | 13030 | INIT7CH | false | |
| 91.189.91.43 | unknown | United Kingdom | 41231 | CANONICAL-ASGB | false | |
| 91.189.91.42 | unknown | United Kingdom | 41231 | CANONICAL-ASGB | false |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 212.224.93.228 | Get hash | malicious | Gafgyt, Mirai | Browse | ||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| 109.202.202.202 | Get hash | malicious | Unknown | Browse |
| |
| 91.189.91.43 | Get hash | malicious | Gafgyt, Mirai | Browse | ||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| 91.189.91.42 | Get hash | malicious | Gafgyt, Mirai | Browse | ||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Gafgyt, Mirai | Browse |
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| CANONICAL-ASGB | Get hash | malicious | Gafgyt, Mirai | Browse |
| |
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| DE-FIRSTCOLOwwwfirst-colonetDE | Get hash | malicious | Gafgyt, Mirai | Browse |
| |
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| CANONICAL-ASGB | Get hash | malicious | Gafgyt, Mirai | Browse |
| |
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| INIT7CH | Get hash | malicious | Gafgyt, Mirai | Browse |
| |
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Gafgyt, Mirai | Browse |
|
⊘No context
⊘No context
⊘No created / dropped files found
| File type: | |
| Entropy (8bit): | 5.243120386144088 |
| TrID: |
|
| File name: | mipsel.elf |
| File size: | 152'201 bytes |
| MD5: | ad661aeb6feb98e630cf15419d61d431 |
| SHA1: | 9d2190b0791a737a8dca248b63add995c48b743f |
| SHA256: | b6f47ffd17d7ce45c4df0232947f1ad0345d06196c3ce271beaf98b077e2c200 |
| SHA512: | 1af6eacb57bac1f327d305f23a28519afa750fee3ec2d80a203b6dcf1b18ddd897299d96b04d5aa7729c412cb48a267682e8f90d1dd05790e29c0ac05e0ac72c |
| SSDEEP: | 1536:bVeTpqCVvWRYx0O9vPBysZgvsgxqAz/0ufMytVcpLtaoLAImlP+s4zWfOodW:byvWmBx+sK/PfligImlWs4zWfOodW |
| TLSH: | 5DE38366BB619EB7D80FCE7309A64501118CDD4642D93FAFB2A0E51CE76B84F08E3D54 |
| File Content Preview: | .ELF......................@.4...........4. ...(........p......@...@...........................@...@...........................E...E......q..........Q.td.................................................NF....<.M.'!......'.......................<.M.'!... .. |
ELF header | |
|---|---|
| Class: | |
| Data: | |
| Version: | |
| Machine: | |
| Version Number: | |
| Type: | |
| OS/ABI: | |
| ABI Version: | 0 |
| Entry Point Address: | |
| Flags: | |
| ELF Header Size: | 52 |
| Program Header Offset: | 52 |
| Program Header Size: | 32 |
| Number of Program Headers: | 4 |
| Section Header Offset: | 130568 |
| Section Header Size: | 40 |
| Number of Section Headers: | 21 |
| Header String Table Index: | 18 |
| Name | Type | Address | Offset | Size | EntSize | Flags | Flags Description | Link | Info | Align |
|---|---|---|---|---|---|---|---|---|---|---|
| NULL | 0x0 | 0x0 | 0x0 | 0x0 | 0x0 | 0 | 0 | 0 | ||
| .reginfo | MIPS_REGINFO | 0x4000b4 | 0xb4 | 0x18 | 0x18 | 0x2 | A | 0 | 0 | 4 |
| .init | PROGBITS | 0x4000cc | 0xcc | 0x8c | 0x0 | 0x6 | AX | 0 | 0 | 4 |
| .text | PROGBITS | 0x400160 | 0x160 | 0x18fa0 | 0x0 | 0x6 | AX | 0 | 0 | 16 |
| .fini | PROGBITS | 0x419100 | 0x19100 | 0x5c | 0x0 | 0x6 | AX | 0 | 0 | 4 |
| .rodata | PROGBITS | 0x419160 | 0x19160 | 0x3460 | 0x0 | 0x2 | A | 0 | 0 | 16 |
| .eh_frame | PROGBITS | 0x41c5c0 | 0x1c5c0 | 0x4 | 0x0 | 0x2 | A | 0 | 0 | 4 |
| .ctors | PROGBITS | 0x45c5c4 | 0x1c5c4 | 0x8 | 0x0 | 0x3 | WA | 0 | 0 | 4 |
| .dtors | PROGBITS | 0x45c5cc | 0x1c5cc | 0x8 | 0x0 | 0x3 | WA | 0 | 0 | 4 |
| .jcr | PROGBITS | 0x45c5d4 | 0x1c5d4 | 0x4 | 0x0 | 0x3 | WA | 0 | 0 | 4 |
| .data.rel.ro | PROGBITS | 0x45c5d8 | 0x1c5d8 | 0x430 | 0x0 | 0x3 | WA | 0 | 0 | 4 |
| .data | PROGBITS | 0x45ca10 | 0x1ca10 | 0x4b0 | 0x0 | 0x3 | WA | 0 | 0 | 16 |
| .got | PROGBITS | 0x45cec0 | 0x1cec0 | 0x4d4 | 0x4 | 0x10000003 | WAp | 0 | 0 | 16 |
| .sbss | NOBITS | 0x45d394 | 0x1d394 | 0x20 | 0x0 | 0x10000003 | WAp | 0 | 0 | 4 |
| .bss | NOBITS | 0x45d3c0 | 0x1d394 | 0x63b4 | 0x0 | 0x3 | WA | 0 | 0 | 16 |
| .comment | PROGBITS | 0x0 | 0x1d394 | 0xb76 | 0x0 | 0x0 | 0 | 0 | 1 | |
| .mdebug.abi32 | PROGBITS | 0xb76 | 0x1df0a | 0x0 | 0x0 | 0x0 | 0 | 0 | 1 | |
| .pdr | PROGBITS | 0x0 | 0x1df0c | 0x1e60 | 0x0 | 0x0 | 0 | 0 | 4 | |
| .shstrtab | STRTAB | 0x0 | 0x1fd6c | 0x9a | 0x0 | 0x0 | 0 | 0 | 1 | |
| .symtab | SYMTAB | 0x0 | 0x20150 | 0x2eb0 | 0x10 | 0x0 | 20 | 315 | 4 | |
| .strtab | STRTAB | 0x0 | 0x23000 | 0x2289 | 0x0 | 0x0 | 0 | 0 | 1 |
| Type | Offset | Virtual Address | Physical Address | File Size | Memory Size | Entropy | Flags | Flags Description | Align | Prog Interpreter | Section Mappings |
|---|---|---|---|---|---|---|---|---|---|---|---|
| <unknown> | 0xb4 | 0x4000b4 | 0x4000b4 | 0x18 | 0x18 | 0.9834 | 0x4 | R | 0x4 | .reginfo | |
| LOAD | 0x0 | 0x400000 | 0x400000 | 0x1c5c4 | 0x1c5c4 | 5.1686 | 0x5 | R E | 0x10000 | .reginfo .init .text .fini .rodata .eh_frame | |
| LOAD | 0x1c5c4 | 0x45c5c4 | 0x45c5c4 | 0xdd0 | 0x71b0 | 4.2717 | 0x6 | RW | 0x10000 | .ctors .dtors .jcr .data.rel.ro .data .got .sbss .bss | |
| GNU_STACK | 0x0 | 0x0 | 0x0 | 0x0 | 0x0 | 0.0000 | 0x7 | RWE | 0x4 |
| Name | Version Info Name | Version Info File Name | Section Name | Value | Size | Symbol Type | Symbol Bind | Symbol Visibility | Ndx |
|---|---|---|---|---|---|---|---|---|---|
| .symtab | 0x0 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_UNDEF | |||
| .symtab | 0x4000b4 | 0 | SECTION | <unknown> | DEFAULT | 1 | |||
| .symtab | 0x4000cc | 0 | SECTION | <unknown> | DEFAULT | 2 | |||
| .symtab | 0x400160 | 0 | SECTION | <unknown> | DEFAULT | 3 | |||
| .symtab | 0x419100 | 0 | SECTION | <unknown> | DEFAULT | 4 | |||
| .symtab | 0x419160 | 0 | SECTION | <unknown> | DEFAULT | 5 | |||
| .symtab | 0x41c5c0 | 0 | SECTION | <unknown> | DEFAULT | 6 | |||
| .symtab | 0x45c5c4 | 0 | SECTION | <unknown> | DEFAULT | 7 | |||
| .symtab | 0x45c5cc | 0 | SECTION | <unknown> | DEFAULT | 8 | |||
| .symtab | 0x45c5d4 | 0 | SECTION | <unknown> | DEFAULT | 9 | |||
| .symtab | 0x45c5d8 | 0 | SECTION | <unknown> | DEFAULT | 10 | |||
| .symtab | 0x45ca10 | 0 | SECTION | <unknown> | DEFAULT | 11 | |||
| .symtab | 0x45cec0 | 0 | SECTION | <unknown> | DEFAULT | 12 | |||
| .symtab | 0x45d394 | 0 | SECTION | <unknown> | DEFAULT | 13 | |||
| .symtab | 0x45d3c0 | 0 | SECTION | <unknown> | DEFAULT | 14 | |||
| .symtab | 0x0 | 0 | SECTION | <unknown> | DEFAULT | 15 | |||
| .symtab | 0xb76 | 0 | SECTION | <unknown> | DEFAULT | 16 | |||
| .symtab | 0x0 | 0 | SECTION | <unknown> | DEFAULT | 17 | |||
| .symtab | 0x0 | 0 | SECTION | <unknown> | DEFAULT | 18 | |||
| .symtab | 0x0 | 0 | SECTION | <unknown> | DEFAULT | 19 | |||
| .symtab | 0x0 | 0 | SECTION | <unknown> | DEFAULT | 20 | |||
| C.100.4584 | .symtab | 0x45c668 | 144 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.104.4624 | .symtab | 0x45c6f8 | 144 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.108.4664 | .symtab | 0x45c788 | 144 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.112.4704 | .symtab | 0x45c818 | 144 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.116.4744 | .symtab | 0x45c8a8 | 144 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.120.4784 | .symtab | 0x45c938 | 144 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.124.4823 | .symtab | 0x45c9c8 | 8 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.128.4856 | .symtab | 0x45c9d0 | 8 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.132.4889 | .symtab | 0x45c9d8 | 8 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.136.4922 | .symtab | 0x45c9e0 | 8 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.140.4955 | .symtab | 0x45c9e8 | 8 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.142.4982 | .symtab | 0x45c9fc | 12 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.143.4983 | .symtab | 0x45c9f0 | 12 | OBJECT | <unknown> | DEFAULT | 10 | ||
| C.96.4543 | .symtab | 0x45c5d8 | 144 | OBJECT | <unknown> | DEFAULT | 10 | ||
| GetRandomIP | .symtab | 0x402c58 | 172 | FUNC | <unknown> | DEFAULT | 3 | ||
| OreoServer | .symtab | 0x45ca50 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| Q | .symtab | 0x45d400 | 16384 | OBJECT | <unknown> | DEFAULT | 14 | ||
| RandString | .symtab | 0x402534 | 268 | FUNC | <unknown> | DEFAULT | 3 | ||
| Send100UP | .symtab | 0x404d80 | 540 | FUNC | <unknown> | DEFAULT | 3 | ||
| SendNUKE | .symtab | 0x4051b8 | 540 | FUNC | <unknown> | DEFAULT | 3 | ||
| SendOVH | .symtab | 0x404948 | 540 | FUNC | <unknown> | DEFAULT | 3 | ||
| SendPAKI | .symtab | 0x404f9c | 540 | FUNC | <unknown> | DEFAULT | 3 | ||
| SendZAP | .symtab | 0x404b64 | 540 | FUNC | <unknown> | DEFAULT | 3 | ||
| _GLOBAL_OFFSET_TABLE_ | .symtab | 0x45cec0 | 0 | OBJECT | <unknown> | DEFAULT | 12 | ||
| _Jv_RegisterClasses | .symtab | 0x0 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_UNDEF | ||
| _READ.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _WRITE.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __CTOR_END__ | .symtab | 0x45c5c8 | 0 | OBJECT | <unknown> | DEFAULT | 7 | ||
| __CTOR_LIST__ | .symtab | 0x45c5c4 | 0 | OBJECT | <unknown> | DEFAULT | 7 | ||
| __C_ctype_b | .symtab | 0x45cae0 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __C_ctype_b.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __C_ctype_b_data | .symtab | 0x41ae20 | 768 | OBJECT | <unknown> | DEFAULT | 5 | ||
| __C_ctype_tolower | .symtab | 0x45ceb0 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __C_ctype_tolower.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __C_ctype_tolower_data | .symtab | 0x41c2c0 | 768 | OBJECT | <unknown> | DEFAULT | 5 | ||
| __C_ctype_toupper | .symtab | 0x45caf0 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __C_ctype_toupper.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __C_ctype_toupper_data | .symtab | 0x41b120 | 768 | OBJECT | <unknown> | DEFAULT | 5 | ||
| __DTOR_END__ | .symtab | 0x45c5d0 | 0 | OBJECT | <unknown> | DEFAULT | 8 | ||
| __DTOR_LIST__ | .symtab | 0x45c5cc | 0 | OBJECT | <unknown> | DEFAULT | 8 | ||
| __EH_FRAME_BEGIN__ | .symtab | 0x41c5c0 | 0 | OBJECT | <unknown> | DEFAULT | 6 | ||
| __FRAME_END__ | .symtab | 0x41c5c0 | 0 | OBJECT | <unknown> | DEFAULT | 6 | ||
| __GI___C_ctype_b | .symtab | 0x45cae0 | 4 | OBJECT | <unknown> | HIDDEN | 11 | ||
| __GI___C_ctype_b_data | .symtab | 0x41ae20 | 768 | OBJECT | <unknown> | HIDDEN | 5 | ||
| __GI___C_ctype_tolower | .symtab | 0x45ceb0 | 4 | OBJECT | <unknown> | HIDDEN | 11 | ||
| __GI___C_ctype_tolower_data | .symtab | 0x41c2c0 | 768 | OBJECT | <unknown> | HIDDEN | 5 | ||
| __GI___C_ctype_toupper | .symtab | 0x45caf0 | 4 | OBJECT | <unknown> | HIDDEN | 11 | ||
| __GI___C_ctype_toupper_data | .symtab | 0x41b120 | 768 | OBJECT | <unknown> | HIDDEN | 5 | ||
| __GI___ctype_b | .symtab | 0x45cae4 | 4 | OBJECT | <unknown> | HIDDEN | 11 | ||
| __GI___ctype_tolower | .symtab | 0x45ceb4 | 4 | OBJECT | <unknown> | HIDDEN | 11 | ||
| __GI___ctype_toupper | .symtab | 0x45caf4 | 4 | OBJECT | <unknown> | HIDDEN | 11 | ||
| __GI___errno_location | .symtab | 0x40ee40 | 24 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___fgetc_unlocked | .symtab | 0x4189e0 | 388 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___glibc_strerror_r | .symtab | 0x410d60 | 68 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___h_errno_location | .symtab | 0x413ba0 | 24 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___libc_fcntl | .symtab | 0x40e350 | 136 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___libc_fcntl64 | .symtab | 0x40e3e0 | 104 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___libc_open | .symtab | 0x40e800 | 124 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___uClibc_fini | .symtab | 0x413180 | 196 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___uClibc_init | .symtab | 0x4132dc | 140 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI___xpg_strerror_r | .symtab | 0x410db0 | 392 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI__exit | .symtab | 0x40e450 | 80 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_abort | .symtab | 0x416260 | 428 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_atoi | .symtab | 0x412a60 | 28 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_atol | .symtab | 0x412a60 | 28 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_brk | .symtab | 0x416440 | 112 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_chdir | .symtab | 0x40e4a0 | 88 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_close | .symtab | 0x40e500 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_connect | .symtab | 0x411720 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_dup2 | .symtab | 0x40e560 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_errno | .symtab | 0x463670 | 4 | OBJECT | <unknown> | HIDDEN | 14 | ||
| __GI_execl | .symtab | 0x412de0 | 204 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_execve | .symtab | 0x413870 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_exit | .symtab | 0x412cf0 | 236 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fclose | .symtab | 0x416510 | 512 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fcntl | .symtab | 0x40e350 | 136 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fcntl64 | .symtab | 0x40e3e0 | 104 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fflush_unlocked | .symtab | 0x4170a0 | 628 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fgetc_unlocked | .symtab | 0x4189e0 | 388 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fgets | .symtab | 0x416e30 | 216 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fgets_unlocked | .symtab | 0x417320 | 268 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fopen | .symtab | 0x416710 | 28 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fork | .symtab | 0x40e5c0 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fputs_unlocked | .symtab | 0x410510 | 128 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fseek | .symtab | 0x416730 | 68 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fseeko64 | .symtab | 0x416780 | 388 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_fwrite_unlocked | .symtab | 0x410590 | 280 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_getc_unlocked | .symtab | 0x4189e0 | 388 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_getdtablesize | .symtab | 0x40e620 | 72 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_getegid | .symtab | 0x4138d0 | 88 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_geteuid | .symtab | 0x413930 | 88 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_getgid | .symtab | 0x413990 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_gethostbyname | .symtab | 0x411240 | 116 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_gethostbyname_r | .symtab | 0x4112c0 | 1108 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_getpid | .symtab | 0x40e670 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_getrlimit | .symtab | 0x40e6d0 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_getsockname | .symtab | 0x411780 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_getuid | .symtab | 0x4139f0 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_h_errno | .symtab | 0x463674 | 4 | OBJECT | <unknown> | HIDDEN | 14 | ||
| __GI_inet_addr | .symtab | 0x4111f0 | 72 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_inet_aton | .symtab | 0x4152e0 | 280 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_inet_ntoa | .symtab | 0x4111cc | 32 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_inet_ntoa_r | .symtab | 0x411110 | 188 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_inet_ntop | .symtab | 0x417c40 | 852 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_inet_pton | .symtab | 0x417790 | 700 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_initstate_r | .symtab | 0x412910 | 328 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_ioctl | .symtab | 0x40e730 | 104 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_isatty | .symtab | 0x410fa0 | 60 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_kill | .symtab | 0x40e7a0 | 88 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_lseek64 | .symtab | 0x4188f0 | 164 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_memchr | .symtab | 0x414c30 | 264 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_memcpy | .symtab | 0x4106b0 | 308 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_memmove | .symtab | 0x414d40 | 816 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_mempcpy | .symtab | 0x415070 | 76 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_memrchr | .symtab | 0x4150c0 | 272 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_memset | .symtab | 0x4107f0 | 144 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_nanosleep | .symtab | 0x413a50 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_open | .symtab | 0x40e800 | 124 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_pipe | .symtab | 0x40e310 | 64 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_poll | .symtab | 0x4164b0 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_raise | .symtab | 0x4188a0 | 76 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_random | .symtab | 0x4122e0 | 164 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_random_r | .symtab | 0x4126ec | 176 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_rawmemchr | .symtab | 0x417430 | 200 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_read | .symtab | 0x40e920 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_recv | .symtab | 0x411860 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_sbrk | .symtab | 0x413ab0 | 144 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_select | .symtab | 0x40e980 | 120 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_send | .symtab | 0x4118c0 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_sendto | .symtab | 0x411920 | 128 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_seteuid | .symtab | 0x40ea00 | 220 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_setresuid | .symtab | 0x40eae0 | 88 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_setreuid | .symtab | 0x40eb40 | 88 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_setsockopt | .symtab | 0x4119a0 | 120 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_setstate_r | .symtab | 0x4125b0 | 316 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_sigaction | .symtab | 0x413720 | 232 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_sigaddset | .symtab | 0x411a80 | 104 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_sigemptyset | .symtab | 0x411af0 | 60 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_signal | .symtab | 0x411b30 | 252 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_sigprocmask | .symtab | 0x40ec30 | 148 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_sleep | .symtab | 0x412eb0 | 564 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_socket | .symtab | 0x411a20 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_sprintf | .symtab | 0x40ee60 | 80 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_srandom_r | .symtab | 0x41279c | 372 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strcasecmp | .symtab | 0x418b70 | 108 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strchr | .symtab | 0x410880 | 256 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strcmp | .symtab | 0x410980 | 44 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strcoll | .symtab | 0x410980 | 44 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strcpy | .symtab | 0x4109b0 | 36 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strdup | .symtab | 0x417610 | 144 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strlen | .symtab | 0x4109e0 | 184 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strncat | .symtab | 0x417500 | 180 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strncpy | .symtab | 0x410aa0 | 188 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strnlen | .symtab | 0x410b60 | 256 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strpbrk | .symtab | 0x4152a0 | 64 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strspn | .symtab | 0x4175c0 | 76 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strstr | .symtab | 0x410c60 | 256 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strtok | .symtab | 0x410f80 | 32 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strtok_r | .symtab | 0x4151d0 | 204 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_strtol | .symtab | 0x412a80 | 28 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_tcgetattr | .symtab | 0x410fe0 | 176 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_time | .symtab | 0x40ecd0 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_tolower | .symtab | 0x4189a0 | 60 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_toupper | .symtab | 0x40ee00 | 60 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_vfork | .symtab | 0x40ed30 | 28 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_vsnprintf | .symtab | 0x40eeb0 | 260 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_wait4 | .symtab | 0x413b40 | 88 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_waitpid | .symtab | 0x40ed50 | 28 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_wcrtomb | .symtab | 0x413bc0 | 112 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_wcsnrtombs | .symtab | 0x413c70 | 228 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_wcsrtombs | .symtab | 0x413c30 | 64 | FUNC | <unknown> | HIDDEN | 3 | ||
| __GI_write | .symtab | 0x40ed70 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __JCR_END__ | .symtab | 0x45c5d4 | 0 | OBJECT | <unknown> | DEFAULT | 9 | ||
| __JCR_LIST__ | .symtab | 0x45c5d4 | 0 | OBJECT | <unknown> | DEFAULT | 9 | ||
| __app_fini | .symtab | 0x46365c | 4 | OBJECT | <unknown> | HIDDEN | 14 | ||
| __atexit_lock | .symtab | 0x45ce30 | 24 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __bsd_signal | .symtab | 0x411b30 | 252 | FUNC | <unknown> | HIDDEN | 3 | ||
| __bss_start | .symtab | 0x45d394 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_ABS | ||
| __check_one_fd | .symtab | 0x413254 | 136 | FUNC | <unknown> | DEFAULT | 3 | ||
| __ctype_b | .symtab | 0x45cae4 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __ctype_tolower | .symtab | 0x45ceb4 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __ctype_toupper | .symtab | 0x45caf4 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __curbrk | .symtab | 0x4636b0 | 4 | OBJECT | <unknown> | HIDDEN | 14 | ||
| __data_start | .symtab | 0x45ca30 | 0 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __decode_answer | .symtab | 0x4182a0 | 340 | FUNC | <unknown> | HIDDEN | 3 | ||
| __decode_dotted | .symtab | 0x418d00 | 340 | FUNC | <unknown> | HIDDEN | 3 | ||
| __decode_header | .symtab | 0x4180b0 | 228 | FUNC | <unknown> | HIDDEN | 3 | ||
| __deregister_frame_info | .symtab | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
| __dns_lookup | .symtab | 0x415400 | 2568 | FUNC | <unknown> | HIDDEN | 3 | ||
| __do_global_ctors_aux | .symtab | 0x419090 | 0 | FUNC | <unknown> | DEFAULT | 3 | ||
| __do_global_dtors_aux | .symtab | 0x400160 | 0 | FUNC | <unknown> | DEFAULT | 3 | ||
| __dso_handle | .symtab | 0x45ca10 | 0 | OBJECT | <unknown> | HIDDEN | 11 | ||
| __encode_dotted | .symtab | 0x418be0 | 280 | FUNC | <unknown> | HIDDEN | 3 | ||
| __encode_header | .symtab | 0x417fa0 | 272 | FUNC | <unknown> | HIDDEN | 3 | ||
| __encode_question | .symtab | 0x4181a0 | 172 | FUNC | <unknown> | HIDDEN | 3 | ||
| __environ | .symtab | 0x463654 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| __errno_location | .symtab | 0x40ee40 | 24 | FUNC | <unknown> | DEFAULT | 3 | ||
| __errno_location.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __exit_cleanup | .symtab | 0x463640 | 4 | OBJECT | <unknown> | HIDDEN | 14 | ||
| __fgetc_unlocked | .symtab | 0x4189e0 | 388 | FUNC | <unknown> | DEFAULT | 3 | ||
| __fini_array_end | .symtab | 0x45c5c4 | 0 | NOTYPE | <unknown> | HIDDEN | SHN_ABS | ||
| __fini_array_start | .symtab | 0x45c5c4 | 0 | NOTYPE | <unknown> | HIDDEN | SHN_ABS | ||
| __get_hosts_byname_r | .symtab | 0x4161f0 | 104 | FUNC | <unknown> | HIDDEN | 3 | ||
| __glibc_strerror_r | .symtab | 0x410d60 | 68 | FUNC | <unknown> | DEFAULT | 3 | ||
| __glibc_strerror_r.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __h_errno_location | .symtab | 0x413ba0 | 24 | FUNC | <unknown> | DEFAULT | 3 | ||
| __h_errno_location.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __heap_alloc | .symtab | 0x412040 | 188 | FUNC | <unknown> | DEFAULT | 3 | ||
| __heap_free | .symtab | 0x412148 | 364 | FUNC | <unknown> | DEFAULT | 3 | ||
| __heap_link_free_area | .symtab | 0x412100 | 44 | FUNC | <unknown> | DEFAULT | 3 | ||
| __heap_link_free_area_after | .symtab | 0x41212c | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| __init_array_end | .symtab | 0x45c5c4 | 0 | NOTYPE | <unknown> | HIDDEN | SHN_ABS | ||
| __init_array_start | .symtab | 0x45c5c4 | 0 | NOTYPE | <unknown> | HIDDEN | SHN_ABS | ||
| __length_dotted | .symtab | 0x418e60 | 72 | FUNC | <unknown> | HIDDEN | 3 | ||
| __length_question | .symtab | 0x418250 | 72 | FUNC | <unknown> | HIDDEN | 3 | ||
| __libc_close | .symtab | 0x40e500 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_connect | .symtab | 0x411720 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_creat | .symtab | 0x40e87c | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_fcntl | .symtab | 0x40e350 | 136 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_fcntl64 | .symtab | 0x40e3e0 | 104 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_fork | .symtab | 0x40e5c0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_getpid | .symtab | 0x40e670 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_lseek64 | .symtab | 0x4188f0 | 164 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_nanosleep | .symtab | 0x413a50 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_open | .symtab | 0x40e800 | 124 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_poll | .symtab | 0x4164b0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_read | .symtab | 0x40e920 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_recv | .symtab | 0x411860 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_select | .symtab | 0x40e980 | 120 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_send | .symtab | 0x4118c0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_sendto | .symtab | 0x411920 | 128 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_sigaction | .symtab | 0x413720 | 232 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_stack_end | .symtab | 0x463650 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| __libc_waitpid | .symtab | 0x40ed50 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| __libc_write | .symtab | 0x40ed70 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| __malloc_heap | .symtab | 0x45cd60 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __malloc_heap_lock | .symtab | 0x463620 | 24 | OBJECT | <unknown> | DEFAULT | 14 | ||
| __malloc_sbrk_lock | .symtab | 0x463740 | 24 | OBJECT | <unknown> | DEFAULT | 14 | ||
| __nameserver | .symtab | 0x463768 | 12 | OBJECT | <unknown> | HIDDEN | 14 | ||
| __nameservers | .symtab | 0x45d3a4 | 4 | OBJECT | <unknown> | HIDDEN | 13 | ||
| __open_etc_hosts | .symtab | 0x418400 | 108 | FUNC | <unknown> | HIDDEN | 3 | ||
| __open_nameservers | .symtab | 0x415e10 | 984 | FUNC | <unknown> | HIDDEN | 3 | ||
| __pagesize | .symtab | 0x463658 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| __preinit_array_end | .symtab | 0x45c5c4 | 0 | NOTYPE | <unknown> | HIDDEN | SHN_ABS | ||
| __preinit_array_start | .symtab | 0x45c5c4 | 0 | NOTYPE | <unknown> | HIDDEN | SHN_ABS | ||
| __pthread_initialize_minimal | .symtab | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
| __pthread_mutex_init | .symtab | 0x413244 | 8 | FUNC | <unknown> | DEFAULT | 3 | ||
| __pthread_mutex_lock | .symtab | 0x413244 | 8 | FUNC | <unknown> | DEFAULT | 3 | ||
| __pthread_mutex_trylock | .symtab | 0x413244 | 8 | FUNC | <unknown> | DEFAULT | 3 | ||
| __pthread_mutex_unlock | .symtab | 0x413244 | 8 | FUNC | <unknown> | DEFAULT | 3 | ||
| __pthread_return_0 | .symtab | 0x413244 | 8 | FUNC | <unknown> | DEFAULT | 3 | ||
| __pthread_return_void | .symtab | 0x41324c | 8 | FUNC | <unknown> | DEFAULT | 3 | ||
| __raise | .symtab | 0x4188a0 | 76 | FUNC | <unknown> | HIDDEN | 3 | ||
| __read_etc_hosts_r | .symtab | 0x41846c | 1076 | FUNC | <unknown> | HIDDEN | 3 | ||
| __register_frame_info | .symtab | 0x0 | 0 | FUNC | <unknown> | DEFAULT | SHN_UNDEF | ||
| __resolv_lock | .symtab | 0x45ce70 | 24 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __rtld_fini | .symtab | 0x463660 | 4 | OBJECT | <unknown> | HIDDEN | 14 | ||
| __searchdomain | .symtab | 0x463758 | 16 | OBJECT | <unknown> | HIDDEN | 14 | ||
| __searchdomains | .symtab | 0x45d3a8 | 4 | OBJECT | <unknown> | HIDDEN | 13 | ||
| __sigaddset | .symtab | 0x411c58 | 44 | FUNC | <unknown> | DEFAULT | 3 | ||
| __sigdelset | .symtab | 0x411c84 | 48 | FUNC | <unknown> | DEFAULT | 3 | ||
| __sigismember | .symtab | 0x411c30 | 40 | FUNC | <unknown> | DEFAULT | 3 | ||
| __start | .symtab | 0x4002a0 | 100 | FUNC | <unknown> | DEFAULT | 3 | ||
| __stdin | .symtab | 0x45cb4c | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __stdio_READ | .symtab | 0x418eb0 | 140 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_WRITE | .symtab | 0x413d60 | 280 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_adjust_position | .symtab | 0x416910 | 320 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_fwrite | .symtab | 0x413e80 | 472 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_init_mutex | .symtab | 0x40f078 | 32 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_mutex_initializer.3833 | .symtab | 0x41b420 | 24 | OBJECT | <unknown> | DEFAULT | 5 | ||
| __stdio_rfill | .symtab | 0x418f40 | 88 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_seek | .symtab | 0x416dc0 | 112 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_trans2r_o | .symtab | 0x418fa0 | 228 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_trans2w_o | .symtab | 0x414060 | 308 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdio_wcommit | .symtab | 0x40f1c0 | 100 | FUNC | <unknown> | HIDDEN | 3 | ||
| __stdout | .symtab | 0x45cb50 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| __syscall_error | .symtab | 0x4136d0 | 72 | FUNC | <unknown> | HIDDEN | 3 | ||
| __syscall_error.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __syscall_fcntl.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __syscall_fcntl64.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __syscall_rt_sigaction | .symtab | 0x413810 | 84 | FUNC | <unknown> | HIDDEN | 3 | ||
| __syscall_rt_sigaction.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __uClibc_fini | .symtab | 0x413180 | 196 | FUNC | <unknown> | DEFAULT | 3 | ||
| __uClibc_init | .symtab | 0x4132dc | 140 | FUNC | <unknown> | DEFAULT | 3 | ||
| __uClibc_main | .symtab | 0x413368 | 864 | FUNC | <unknown> | DEFAULT | 3 | ||
| __uClibc_main.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| __uclibc_progname | .symtab | 0x45ce50 | 4 | OBJECT | <unknown> | HIDDEN | 11 | ||
| __vfork | .symtab | 0x40ed30 | 28 | FUNC | <unknown> | HIDDEN | 3 | ||
| __xpg_strerror_r | .symtab | 0x410db0 | 392 | FUNC | <unknown> | DEFAULT | 3 | ||
| __xpg_strerror_r.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _adjust_pos.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _charpad | .symtab | 0x40f230 | 128 | FUNC | <unknown> | DEFAULT | 3 | ||
| _cs_funcs.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _dl_aux_init | .symtab | 0x416410 | 44 | FUNC | <unknown> | DEFAULT | 3 | ||
| _dl_phdr | .symtab | 0x45d3ac | 4 | OBJECT | <unknown> | DEFAULT | 13 | ||
| _dl_phnum | .symtab | 0x45d3b0 | 4 | OBJECT | <unknown> | DEFAULT | 13 | ||
| _edata | .symtab | 0x45d394 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_ABS | ||
| _end | .symtab | 0x463774 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_ABS | ||
| _errno | .symtab | 0x463670 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| _exit | .symtab | 0x40e450 | 80 | FUNC | <unknown> | DEFAULT | 3 | ||
| _exit.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _fbss | .symtab | 0x45d394 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_ABS | ||
| _fdata | .symtab | 0x45ca10 | 0 | NOTYPE | <unknown> | DEFAULT | 11 | ||
| _fini | .symtab | 0x419100 | 28 | FUNC | <unknown> | DEFAULT | 4 | ||
| _fixed_buffers | .symtab | 0x461418 | 8192 | OBJECT | <unknown> | DEFAULT | 14 | ||
| _fopen.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _fp_out_narrow | .symtab | 0x40f2b0 | 228 | FUNC | <unknown> | DEFAULT | 3 | ||
| _fpmaxtostr | .symtab | 0x4143e0 | 2120 | FUNC | <unknown> | HIDDEN | 3 | ||
| _fpmaxtostr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _ftext | .symtab | 0x400160 | 0 | NOTYPE | <unknown> | DEFAULT | 3 | ||
| _fwrite.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _gp | .symtab | 0x464eb0 | 0 | NOTYPE | <unknown> | DEFAULT | SHN_ABS | ||
| _gp_disp | .symtab | 0x0 | 0 | OBJECT | <unknown> | DEFAULT | SHN_UNDEF | ||
| _h_errno | .symtab | 0x463674 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| _init | .symtab | 0x4000cc | 28 | FUNC | <unknown> | DEFAULT | 2 | ||
| _load_inttype | .symtab | 0x4141a0 | 136 | FUNC | <unknown> | HIDDEN | 3 | ||
| _load_inttype.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _ppfs_init | .symtab | 0x40fb40 | 220 | FUNC | <unknown> | HIDDEN | 3 | ||
| _ppfs_init.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _ppfs_parsespec | .symtab | 0x40ff1c | 1512 | FUNC | <unknown> | HIDDEN | 3 | ||
| _ppfs_parsespec.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _ppfs_prepargs | .symtab | 0x40fc20 | 100 | FUNC | <unknown> | HIDDEN | 3 | ||
| _ppfs_prepargs.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _ppfs_setargs | .symtab | 0x40fc90 | 544 | FUNC | <unknown> | HIDDEN | 3 | ||
| _ppfs_setargs.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _promoted_size | .symtab | 0x40feb0 | 108 | FUNC | <unknown> | DEFAULT | 3 | ||
| _pthread_cleanup_pop_restore | .symtab | 0x41324c | 8 | FUNC | <unknown> | DEFAULT | 3 | ||
| _pthread_cleanup_push_defer | .symtab | 0x41324c | 8 | FUNC | <unknown> | DEFAULT | 3 | ||
| _rfill.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _sigintr | .symtab | 0x4636c0 | 128 | OBJECT | <unknown> | HIDDEN | 14 | ||
| _stdio.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _stdio_fopen | .symtab | 0x416a50 | 880 | FUNC | <unknown> | HIDDEN | 3 | ||
| _stdio_init | .symtab | 0x40efc0 | 184 | FUNC | <unknown> | HIDDEN | 3 | ||
| _stdio_openlist | .symtab | 0x45cb54 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| _stdio_openlist_add_lock | .symtab | 0x45cb00 | 24 | OBJECT | <unknown> | DEFAULT | 11 | ||
| _stdio_openlist_dec_use | .symtab | 0x416f10 | 400 | FUNC | <unknown> | DEFAULT | 3 | ||
| _stdio_openlist_del_count | .symtab | 0x461414 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| _stdio_openlist_del_lock | .symtab | 0x45cb18 | 24 | OBJECT | <unknown> | DEFAULT | 11 | ||
| _stdio_openlist_use_count | .symtab | 0x461410 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| _stdio_streams | .symtab | 0x45cb58 | 240 | OBJECT | <unknown> | DEFAULT | 11 | ||
| _stdio_term | .symtab | 0x40f098 | 284 | FUNC | <unknown> | HIDDEN | 3 | ||
| _stdio_user_locking | .symtab | 0x45cb30 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| _stdlib_strto_l | .symtab | 0x412aa0 | 592 | FUNC | <unknown> | HIDDEN | 3 | ||
| _stdlib_strto_l.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _store_inttype | .symtab | 0x414230 | 68 | FUNC | <unknown> | HIDDEN | 3 | ||
| _store_inttype.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _string_syserrmsgs | .symtab | 0x41b590 | 2934 | OBJECT | <unknown> | HIDDEN | 5 | ||
| _string_syserrmsgs.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _trans2r.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _trans2w.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _uintmaxtostr | .symtab | 0x414280 | 340 | FUNC | <unknown> | HIDDEN | 3 | ||
| _uintmaxtostr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _vfprintf_internal | .symtab | 0x40f394 | 1960 | FUNC | <unknown> | HIDDEN | 3 | ||
| _vfprintf_internal.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| _wcommit.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| abort | .symtab | 0x416260 | 428 | FUNC | <unknown> | DEFAULT | 3 | ||
| abort.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| atoi | .symtab | 0x412a60 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| atol | .symtab | 0x412a60 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| atol.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| bcopy | .symtab | 0x410f40 | 32 | FUNC | <unknown> | DEFAULT | 3 | ||
| bcopy.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| been_there_done_that | .symtab | 0x4636a0 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| been_there_done_that.2792 | .symtab | 0x463664 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| bot.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| brk | .symtab | 0x416440 | 112 | FUNC | <unknown> | DEFAULT | 3 | ||
| brk.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| bsd_signal | .symtab | 0x411b30 | 252 | FUNC | <unknown> | DEFAULT | 3 | ||
| buf.2613 | .symtab | 0x463430 | 16 | OBJECT | <unknown> | DEFAULT | 14 | ||
| buf.4833 | .symtab | 0x463440 | 460 | OBJECT | <unknown> | DEFAULT | 14 | ||
| bzero | .symtab | 0x410f60 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| bzero.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| c | .symtab | 0x45ca48 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| chdir | .symtab | 0x40e4a0 | 88 | FUNC | <unknown> | DEFAULT | 3 | ||
| chdir.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| checksum_tcp_udp | .symtab | 0x402ed0 | 572 | FUNC | <unknown> | DEFAULT | 3 | ||
| close | .symtab | 0x40e500 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| close.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| completed.2296 | .symtab | 0x45d3c0 | 1 | OBJECT | <unknown> | DEFAULT | 14 | ||
| connect | .symtab | 0x411720 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| connect.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| connectTimeout | .symtab | 0x401d78 | 824 | FUNC | <unknown> | DEFAULT | 3 | ||
| creat | .symtab | 0x40e87c | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| crtstuff.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| crtstuff.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| csum | .symtab | 0x402d04 | 460 | FUNC | <unknown> | DEFAULT | 3 | ||
| currentServer | .symtab | 0x45ca40 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| data_start | .symtab | 0x45ca30 | 0 | OBJECT | <unknown> | DEFAULT | 11 | ||
| decodea.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| decoded.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| decodeh.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| dl-support.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| dnslookup.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| dup2 | .symtab | 0x40e560 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| dup2.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| encoded.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| encodeh.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| encodeq.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| environ | .symtab | 0x463654 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| errno | .symtab | 0x463670 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| errno.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| estridx | .symtab | 0x41b500 | 126 | OBJECT | <unknown> | DEFAULT | 5 | ||
| execl | .symtab | 0x412de0 | 204 | FUNC | <unknown> | DEFAULT | 3 | ||
| execl.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| execve | .symtab | 0x413870 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| execve.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| exit | .symtab | 0x412cf0 | 236 | FUNC | <unknown> | DEFAULT | 3 | ||
| exit.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| exp10_table | .symtab | 0x41c1a8 | 72 | OBJECT | <unknown> | DEFAULT | 5 | ||
| fclose | .symtab | 0x416510 | 512 | FUNC | <unknown> | DEFAULT | 3 | ||
| fclose.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fcntl | .symtab | 0x40e350 | 136 | FUNC | <unknown> | DEFAULT | 3 | ||
| fcntl64 | .symtab | 0x40e3e0 | 104 | FUNC | <unknown> | DEFAULT | 3 | ||
| fdgets | .symtab | 0x401c54 | 292 | FUNC | <unknown> | DEFAULT | 3 | ||
| fdopen_pids | .symtab | 0x461400 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| fdpclose | .symtab | 0x4019d8 | 636 | FUNC | <unknown> | DEFAULT | 3 | ||
| fdpopen | .symtab | 0x401564 | 1140 | FUNC | <unknown> | DEFAULT | 3 | ||
| fflush_unlocked | .symtab | 0x4170a0 | 628 | FUNC | <unknown> | DEFAULT | 3 | ||
| fflush_unlocked.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fgetc_unlocked | .symtab | 0x4189e0 | 388 | FUNC | <unknown> | DEFAULT | 3 | ||
| fgetc_unlocked.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fgets | .symtab | 0x416e30 | 216 | FUNC | <unknown> | DEFAULT | 3 | ||
| fgets.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fgets_unlocked | .symtab | 0x417320 | 268 | FUNC | <unknown> | DEFAULT | 3 | ||
| fgets_unlocked.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fmt | .symtab | 0x41c190 | 20 | OBJECT | <unknown> | DEFAULT | 5 | ||
| fopen | .symtab | 0x416710 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| fopen.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fork | .symtab | 0x40e5c0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| fork.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fputs_unlocked | .symtab | 0x410510 | 128 | FUNC | <unknown> | DEFAULT | 3 | ||
| fputs_unlocked.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| frame_dummy | .symtab | 0x40021c | 0 | FUNC | <unknown> | DEFAULT | 3 | ||
| free | .symtab | 0x411eb0 | 396 | FUNC | <unknown> | DEFAULT | 3 | ||
| free.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fseek | .symtab | 0x416730 | 68 | FUNC | <unknown> | DEFAULT | 3 | ||
| fseeko | .symtab | 0x416730 | 68 | FUNC | <unknown> | DEFAULT | 3 | ||
| fseeko.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fseeko64 | .symtab | 0x416780 | 388 | FUNC | <unknown> | DEFAULT | 3 | ||
| fseeko64.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| fwrite_unlocked | .symtab | 0x410590 | 280 | FUNC | <unknown> | DEFAULT | 3 | ||
| fwrite_unlocked.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getHost | .symtab | 0x4023f0 | 160 | FUNC | <unknown> | DEFAULT | 3 | ||
| getOurIP | .symtab | 0x40d264 | 896 | FUNC | <unknown> | DEFAULT | 3 | ||
| get_hosts_byname_r.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getc_unlocked | .symtab | 0x4189e0 | 388 | FUNC | <unknown> | DEFAULT | 3 | ||
| getdtablesize | .symtab | 0x40e620 | 72 | FUNC | <unknown> | DEFAULT | 3 | ||
| getdtablesize.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getegid | .symtab | 0x4138d0 | 88 | FUNC | <unknown> | DEFAULT | 3 | ||
| getegid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| geteuid | .symtab | 0x413930 | 88 | FUNC | <unknown> | DEFAULT | 3 | ||
| geteuid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getgid | .symtab | 0x413990 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| getgid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| gethostbyname | .symtab | 0x411240 | 116 | FUNC | <unknown> | DEFAULT | 3 | ||
| gethostbyname.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| gethostbyname_r | .symtab | 0x4112c0 | 1108 | FUNC | <unknown> | DEFAULT | 3 | ||
| gethostbyname_r.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getpid | .symtab | 0x40e670 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| getpid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getrlimit | .symtab | 0x40e6d0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| getrlimit.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getsockname | .symtab | 0x411780 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| getsockname.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getsockopt | .symtab | 0x4117e0 | 120 | FUNC | <unknown> | DEFAULT | 3 | ||
| getsockopt.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| getuid | .symtab | 0x4139f0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| getuid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| gotIP | .symtab | 0x45d3e8 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| h.4832 | .symtab | 0x46360c | 20 | OBJECT | <unknown> | DEFAULT | 14 | ||
| h_errno | .symtab | 0x463674 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| heap_alloc.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| heap_free.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| hextable | .symtab | 0x41918c | 1024 | OBJECT | <unknown> | DEFAULT | 5 | ||
| hlt | .symtab | 0x4002fc | 0 | NOTYPE | <unknown> | DEFAULT | 3 | ||
| htonl | .symtab | 0x4110d0 | 40 | FUNC | <unknown> | DEFAULT | 3 | ||
| htons | .symtab | 0x4110f8 | 24 | FUNC | <unknown> | DEFAULT | 3 | ||
| i.3637 | .symtab | 0x45ca4c | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| index | .symtab | 0x410880 | 256 | FUNC | <unknown> | DEFAULT | 3 | ||
| inet_addr | .symtab | 0x4111f0 | 72 | FUNC | <unknown> | DEFAULT | 3 | ||
| inet_aton | .symtab | 0x4152e0 | 280 | FUNC | <unknown> | DEFAULT | 3 | ||
| inet_aton.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| inet_makeaddr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| inet_ntoa | .symtab | 0x4111cc | 32 | FUNC | <unknown> | DEFAULT | 3 | ||
| inet_ntoa.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| inet_ntoa_r | .symtab | 0x411110 | 188 | FUNC | <unknown> | DEFAULT | 3 | ||
| inet_ntop | .symtab | 0x417c40 | 852 | FUNC | <unknown> | DEFAULT | 3 | ||
| inet_ntop4 | .symtab | 0x417a4c | 500 | FUNC | <unknown> | DEFAULT | 3 | ||
| inet_pton | .symtab | 0x417790 | 700 | FUNC | <unknown> | DEFAULT | 3 | ||
| inet_pton4 | .symtab | 0x4176a0 | 240 | FUNC | <unknown> | DEFAULT | 3 | ||
| initConnection | .symtab | 0x40d014 | 592 | FUNC | <unknown> | DEFAULT | 3 | ||
| init_rand | .symtab | 0x400310 | 300 | FUNC | <unknown> | DEFAULT | 3 | ||
| initfini.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| initfini.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| initial_fa | .symtab | 0x45cc50 | 264 | OBJECT | <unknown> | DEFAULT | 11 | ||
| initstate | .symtab | 0x412434 | 208 | FUNC | <unknown> | DEFAULT | 3 | ||
| initstate_r | .symtab | 0x412910 | 328 | FUNC | <unknown> | DEFAULT | 3 | ||
| ioctl | .symtab | 0x40e730 | 104 | FUNC | <unknown> | DEFAULT | 3 | ||
| ioctl.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| ioctl_keepalive | .symtab | 0x409388 | 480 | FUNC | <unknown> | DEFAULT | 3 | ||
| ioctl_pid | .symtab | 0x45d3e0 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| isatty | .symtab | 0x410fa0 | 60 | FUNC | <unknown> | DEFAULT | 3 | ||
| isatty.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| isspace | .symtab | 0x40edd0 | 44 | FUNC | <unknown> | DEFAULT | 3 | ||
| isspace.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| kill | .symtab | 0x40e7a0 | 88 | FUNC | <unknown> | DEFAULT | 3 | ||
| kill.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| lengthd.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| lengthq.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| libc/string/mips/memcpy.S | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| libc/string/mips/memset.S | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| libc/sysdeps/linux/mips/crt1.S | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| libc/sysdeps/linux/mips/crti.S | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| libc/sysdeps/linux/mips/crtn.S | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| libc/sysdeps/linux/mips/pipe.S | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| listFork | .symtab | 0x4029e0 | 632 | FUNC | <unknown> | DEFAULT | 3 | ||
| llseek.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| lseek64 | .symtab | 0x4188f0 | 164 | FUNC | <unknown> | DEFAULT | 3 | ||
| macAddress | .symtab | 0x45d3f8 | 6 | OBJECT | <unknown> | DEFAULT | 14 | ||
| main | .symtab | 0x40d5e4 | 3372 | FUNC | <unknown> | DEFAULT | 3 | ||
| mainCommSock | .symtab | 0x45d3e4 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| makeIPPacket | .symtab | 0x403270 | 296 | FUNC | <unknown> | DEFAULT | 3 | ||
| makeVSEPacket | .symtab | 0x403398 | 332 | FUNC | <unknown> | DEFAULT | 3 | ||
| malloc | .symtab | 0x411cc0 | 492 | FUNC | <unknown> | DEFAULT | 3 | ||
| malloc.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| memchr | .symtab | 0x414c30 | 264 | FUNC | <unknown> | DEFAULT | 3 | ||
| memchr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| memcpy | .symtab | 0x4106b0 | 308 | FUNC | <unknown> | DEFAULT | 3 | ||
| memmove | .symtab | 0x414d40 | 816 | FUNC | <unknown> | DEFAULT | 3 | ||
| memmove.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| mempcpy | .symtab | 0x415070 | 76 | FUNC | <unknown> | DEFAULT | 3 | ||
| mempcpy.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| memrchr | .symtab | 0x4150c0 | 272 | FUNC | <unknown> | DEFAULT | 3 | ||
| memrchr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| memset | .symtab | 0x4107f0 | 144 | FUNC | <unknown> | DEFAULT | 3 | ||
| mylock | .symtab | 0x45cd70 | 24 | OBJECT | <unknown> | DEFAULT | 11 | ||
| mylock | .symtab | 0x463680 | 24 | OBJECT | <unknown> | DEFAULT | 14 | ||
| mylock | .symtab | 0x45ce90 | 24 | OBJECT | <unknown> | DEFAULT | 11 | ||
| nanosleep | .symtab | 0x413a50 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| nanosleep.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| next_start.1065 | .symtab | 0x463420 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| ntohl | .symtab | 0x411090 | 40 | FUNC | <unknown> | DEFAULT | 3 | ||
| ntohl.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| ntohs | .symtab | 0x4110b8 | 24 | FUNC | <unknown> | DEFAULT | 3 | ||
| ntop.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| numpids | .symtab | 0x45d3f0 | 8 | OBJECT | <unknown> | DEFAULT | 14 | ||
| object.2349 | .symtab | 0x45d3c4 | 24 | OBJECT | <unknown> | DEFAULT | 14 | ||
| open | .symtab | 0x40e800 | 124 | FUNC | <unknown> | DEFAULT | 3 | ||
| open.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| opennameservers.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| ourIP | .symtab | 0x45d394 | 4 | OBJECT | <unknown> | DEFAULT | 13 | ||
| ourPublicIP | .symtab | 0x45d398 | 4 | OBJECT | <unknown> | DEFAULT | 13 | ||
| ovhl7 | .symtab | 0x405c94 | 4756 | FUNC | <unknown> | DEFAULT | 3 | ||
| p.2294 | .symtab | 0x45ca20 | 0 | OBJECT | <unknown> | DEFAULT | 11 | ||
| parseHex | .symtab | 0x4020b0 | 176 | FUNC | <unknown> | DEFAULT | 3 | ||
| pids | .symtab | 0x45d3a0 | 4 | OBJECT | <unknown> | DEFAULT | 13 | ||
| pipe | .symtab | 0x40e310 | 64 | FUNC | <unknown> | DEFAULT | 3 | ||
| poll | .symtab | 0x4164b0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| poll.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| prctl | .symtab | 0x40e8a0 | 120 | FUNC | <unknown> | DEFAULT | 3 | ||
| prctl.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| prefix.4045 | .symtab | 0x41b450 | 12 | OBJECT | <unknown> | DEFAULT | 5 | ||
| .symtab | 0x400d6c | 1456 | FUNC | <unknown> | DEFAULT | 3 | |||
| printchar | .symtab | 0x4007e0 | 184 | FUNC | <unknown> | DEFAULT | 3 | ||
| printi | .symtab | 0x400ad4 | 664 | FUNC | <unknown> | DEFAULT | 3 | ||
| prints | .symtab | 0x400898 | 572 | FUNC | <unknown> | DEFAULT | 3 | ||
| processCmd | .symtab | 0x409568 | 15020 | FUNC | <unknown> | DEFAULT | 3 | ||
| qual_chars.4050 | .symtab | 0x41b470 | 20 | OBJECT | <unknown> | DEFAULT | 5 | ||
| raise | .symtab | 0x4188a0 | 76 | FUNC | <unknown> | DEFAULT | 3 | ||
| raise.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| rand | .symtab | 0x4122c0 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| rand.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| rand_cmwc | .symtab | 0x40043c | 472 | FUNC | <unknown> | DEFAULT | 3 | ||
| random | .symtab | 0x4122e0 | 164 | FUNC | <unknown> | DEFAULT | 3 | ||
| random.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| random_poly_info | .symtab | 0x41c110 | 40 | OBJECT | <unknown> | DEFAULT | 5 | ||
| random_r | .symtab | 0x4126ec | 176 | FUNC | <unknown> | DEFAULT | 3 | ||
| random_r.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| randtbl | .symtab | 0x45cd88 | 128 | OBJECT | <unknown> | DEFAULT | 11 | ||
| rangechoice | .symtab | 0x45ca44 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| rawmemchr | .symtab | 0x417430 | 200 | FUNC | <unknown> | DEFAULT | 3 | ||
| rawmemchr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| read | .symtab | 0x40e920 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| read.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| read_etc_hosts_r.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| recv | .symtab | 0x411860 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| recv.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| recvLine | .symtab | 0x402640 | 928 | FUNC | <unknown> | DEFAULT | 3 | ||
| sbrk | .symtab | 0x413ab0 | 144 | FUNC | <unknown> | DEFAULT | 3 | ||
| sbrk.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| scanPid | .symtab | 0x45d39c | 4 | OBJECT | <unknown> | DEFAULT | 13 | ||
| sclose | .symtab | 0x4034e4 | 128 | FUNC | <unknown> | DEFAULT | 3 | ||
| select | .symtab | 0x40e980 | 120 | FUNC | <unknown> | DEFAULT | 3 | ||
| select.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| send | .symtab | 0x4118c0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| send.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| sendFLUX | .symtab | 0x4082ec | 1720 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendHEX | .symtab | 0x4059ec | 680 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendHTTP | .symtab | 0x4053d4 | 1560 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendLDAP | .symtab | 0x4039b8 | 664 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendNTP | .symtab | 0x403c50 | 664 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendSNMP | .symtab | 0x403ee8 | 664 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendSSDP | .symtab | 0x404418 | 664 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendSTD | .symtab | 0x403720 | 664 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendTCP | .symtab | 0x407930 | 2492 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendTELNET | .symtab | 0x4046b0 | 664 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendTFTP | .symtab | 0x404180 | 664 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendUDP | .symtab | 0x406f28 | 2568 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendVSE | .symtab | 0x4089a4 | 2532 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendto | .symtab | 0x411920 | 128 | FUNC | <unknown> | DEFAULT | 3 | ||
| sendto.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| seteuid | .symtab | 0x40ea00 | 220 | FUNC | <unknown> | DEFAULT | 3 | ||
| seteuid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| setresuid | .symtab | 0x40eae0 | 88 | FUNC | <unknown> | DEFAULT | 3 | ||
| setresuid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| setreuid | .symtab | 0x40eb40 | 88 | FUNC | <unknown> | DEFAULT | 3 | ||
| setreuid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| setsockopt | .symtab | 0x4119a0 | 120 | FUNC | <unknown> | DEFAULT | 3 | ||
| setsockopt.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| setstate | .symtab | 0x412384 | 176 | FUNC | <unknown> | DEFAULT | 3 | ||
| setstate_r | .symtab | 0x4125b0 | 316 | FUNC | <unknown> | DEFAULT | 3 | ||
| setuid | .symtab | 0x40eba0 | 136 | FUNC | <unknown> | DEFAULT | 3 | ||
| setuid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| sigaction | .symtab | 0x413720 | 232 | FUNC | <unknown> | DEFAULT | 3 | ||
| sigaction.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| sigaddset | .symtab | 0x411a80 | 104 | FUNC | <unknown> | DEFAULT | 3 | ||
| sigaddset.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| sigempty.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| sigemptyset | .symtab | 0x411af0 | 60 | FUNC | <unknown> | DEFAULT | 3 | ||
| signal | .symtab | 0x411b30 | 252 | FUNC | <unknown> | DEFAULT | 3 | ||
| signal.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| sigprocmask | .symtab | 0x40ec30 | 148 | FUNC | <unknown> | DEFAULT | 3 | ||
| sigprocmask.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| sigsetops.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| sleep | .symtab | 0x412eb0 | 564 | FUNC | <unknown> | DEFAULT | 3 | ||
| sleep.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| socket | .symtab | 0x411a20 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| socket.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| socket_connect | .symtab | 0x403564 | 444 | FUNC | <unknown> | DEFAULT | 3 | ||
| sockprintf | .symtab | 0x40140c | 344 | FUNC | <unknown> | DEFAULT | 3 | ||
| spec_and_mask.4049 | .symtab | 0x41b484 | 16 | OBJECT | <unknown> | DEFAULT | 5 | ||
| spec_base.4044 | .symtab | 0x41b45c | 7 | OBJECT | <unknown> | DEFAULT | 5 | ||
| spec_chars.4046 | .symtab | 0x41b4b0 | 21 | OBJECT | <unknown> | DEFAULT | 5 | ||
| spec_flags.4045 | .symtab | 0x41b4c8 | 8 | OBJECT | <unknown> | DEFAULT | 5 | ||
| spec_or_mask.4048 | .symtab | 0x41b494 | 16 | OBJECT | <unknown> | DEFAULT | 5 | ||
| spec_ranges.4047 | .symtab | 0x41b4a4 | 9 | OBJECT | <unknown> | DEFAULT | 5 | ||
| sprintf | .symtab | 0x40ee60 | 80 | FUNC | <unknown> | DEFAULT | 3 | ||
| sprintf.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| srand | .symtab | 0x412504 | 172 | FUNC | <unknown> | DEFAULT | 3 | ||
| srandom | .symtab | 0x412504 | 172 | FUNC | <unknown> | DEFAULT | 3 | ||
| srandom_r | .symtab | 0x41279c | 372 | FUNC | <unknown> | DEFAULT | 3 | ||
| static_id | .symtab | 0x45ce60 | 2 | OBJECT | <unknown> | DEFAULT | 11 | ||
| static_ns | .symtab | 0x463698 | 4 | OBJECT | <unknown> | DEFAULT | 14 | ||
| stderr | .symtab | 0x45cb48 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| stdin | .symtab | 0x45cb40 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| stdout | .symtab | 0x45cb44 | 4 | OBJECT | <unknown> | DEFAULT | 11 | ||
| strcasecmp | .symtab | 0x418b70 | 108 | FUNC | <unknown> | DEFAULT | 3 | ||
| strcasecmp.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strchr | .symtab | 0x410880 | 256 | FUNC | <unknown> | DEFAULT | 3 | ||
| strchr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strcmp | .symtab | 0x410980 | 44 | FUNC | <unknown> | DEFAULT | 3 | ||
| strcmp.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strcoll | .symtab | 0x410980 | 44 | FUNC | <unknown> | DEFAULT | 3 | ||
| strcpy | .symtab | 0x4109b0 | 36 | FUNC | <unknown> | DEFAULT | 3 | ||
| strcpy.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strdup | .symtab | 0x417610 | 144 | FUNC | <unknown> | DEFAULT | 3 | ||
| strdup.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strerror_r | .symtab | 0x410db0 | 392 | FUNC | <unknown> | DEFAULT | 3 | ||
| strlen | .symtab | 0x4109e0 | 184 | FUNC | <unknown> | DEFAULT | 3 | ||
| strlen.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strncat | .symtab | 0x417500 | 180 | FUNC | <unknown> | DEFAULT | 3 | ||
| strncat.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strncpy | .symtab | 0x410aa0 | 188 | FUNC | <unknown> | DEFAULT | 3 | ||
| strncpy.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strnlen | .symtab | 0x410b60 | 256 | FUNC | <unknown> | DEFAULT | 3 | ||
| strnlen.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strpbrk | .symtab | 0x4152a0 | 64 | FUNC | <unknown> | DEFAULT | 3 | ||
| strpbrk.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strspn | .symtab | 0x4175c0 | 76 | FUNC | <unknown> | DEFAULT | 3 | ||
| strspn.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strstr | .symtab | 0x410c60 | 256 | FUNC | <unknown> | DEFAULT | 3 | ||
| strstr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strtok | .symtab | 0x410f80 | 32 | FUNC | <unknown> | DEFAULT | 3 | ||
| strtok.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strtok_r | .symtab | 0x4151d0 | 204 | FUNC | <unknown> | DEFAULT | 3 | ||
| strtok_r.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| strtol | .symtab | 0x412a80 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| strtol.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| szprintf | .symtab | 0x401394 | 120 | FUNC | <unknown> | DEFAULT | 3 | ||
| tcgetattr | .symtab | 0x410fe0 | 176 | FUNC | <unknown> | DEFAULT | 3 | ||
| tcgetattr.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| tcpcsum | .symtab | 0x40310c | 356 | FUNC | <unknown> | DEFAULT | 3 | ||
| time | .symtab | 0x40ecd0 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| time.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| tolower | .symtab | 0x4189a0 | 60 | FUNC | <unknown> | DEFAULT | 3 | ||
| tolower.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| toupper | .symtab | 0x40ee00 | 60 | FUNC | <unknown> | DEFAULT | 3 | ||
| toupper.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| trim | .symtab | 0x400614 | 460 | FUNC | <unknown> | DEFAULT | 3 | ||
| type_codes | .symtab | 0x41b4d0 | 24 | OBJECT | <unknown> | DEFAULT | 5 | ||
| type_sizes | .symtab | 0x41b4e8 | 12 | OBJECT | <unknown> | DEFAULT | 5 | ||
| unknown.1088 | .symtab | 0x41b580 | 14 | OBJECT | <unknown> | DEFAULT | 5 | ||
| unsafe_state | .symtab | 0x45ce10 | 28 | OBJECT | <unknown> | DEFAULT | 11 | ||
| uppercase | .symtab | 0x402490 | 164 | FUNC | <unknown> | DEFAULT | 3 | ||
| useragents | .symtab | 0x45ca54 | 128 | OBJECT | <unknown> | DEFAULT | 11 | ||
| usleep | .symtab | 0x4130f0 | 144 | FUNC | <unknown> | DEFAULT | 3 | ||
| usleep.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| vfork | .symtab | 0x40ed30 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| vfork.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| vsnprintf | .symtab | 0x40eeb0 | 260 | FUNC | <unknown> | DEFAULT | 3 | ||
| vsnprintf.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| wait4 | .symtab | 0x413b40 | 88 | FUNC | <unknown> | DEFAULT | 3 | ||
| wait4.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| waitpid | .symtab | 0x40ed50 | 28 | FUNC | <unknown> | DEFAULT | 3 | ||
| waitpid.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| wcrtomb | .symtab | 0x413bc0 | 112 | FUNC | <unknown> | DEFAULT | 3 | ||
| wcrtomb.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| wcsnrtombs | .symtab | 0x413c70 | 228 | FUNC | <unknown> | DEFAULT | 3 | ||
| wcsnrtombs.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| wcsrtombs | .symtab | 0x413c30 | 64 | FUNC | <unknown> | DEFAULT | 3 | ||
| wcsrtombs.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| wildString | .symtab | 0x402160 | 656 | FUNC | <unknown> | DEFAULT | 3 | ||
| write | .symtab | 0x40ed70 | 84 | FUNC | <unknown> | DEFAULT | 3 | ||
| write.c | .symtab | 0x0 | 0 | FILE | <unknown> | DEFAULT | SHN_ABS | ||
| xdigits.3043 | .symtab | 0x41c274 | 17 | OBJECT | <unknown> | DEFAULT | 5 | ||
| zprintf | .symtab | 0x40131c | 120 | FUNC | <unknown> | DEFAULT | 3 |
| Timestamp | SID | Signature | Severity | Source IP | Source Port | Dest IP | Dest Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2024-10-20T19:31:52.579027+0200 | 2847206 | ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin | 1 | 192.168.2.23 | 41010 | 212.224.93.228 | 666 | TCP |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Oct 20, 2024 19:31:52.571863890 CEST | 41010 | 666 | 192.168.2.23 | 212.224.93.228 |
| Oct 20, 2024 19:31:52.577963114 CEST | 666 | 41010 | 212.224.93.228 | 192.168.2.23 |
| Oct 20, 2024 19:31:52.578038931 CEST | 41010 | 666 | 192.168.2.23 | 212.224.93.228 |
| Oct 20, 2024 19:31:52.579026937 CEST | 41010 | 666 | 192.168.2.23 | 212.224.93.228 |
| Oct 20, 2024 19:31:52.584050894 CEST | 666 | 41010 | 212.224.93.228 | 192.168.2.23 |
| Oct 20, 2024 19:31:53.481590986 CEST | 666 | 41010 | 212.224.93.228 | 192.168.2.23 |
| Oct 20, 2024 19:31:53.481853962 CEST | 41010 | 666 | 192.168.2.23 | 212.224.93.228 |
| Oct 20, 2024 19:31:53.633748055 CEST | 666 | 41010 | 212.224.93.228 | 192.168.2.23 |
| Oct 20, 2024 19:31:53.633974075 CEST | 41010 | 666 | 192.168.2.23 | 212.224.93.228 |
| Oct 20, 2024 19:31:53.858361959 CEST | 43928 | 443 | 192.168.2.23 | 91.189.91.42 |
| Oct 20, 2024 19:31:59.233618021 CEST | 42836 | 443 | 192.168.2.23 | 91.189.91.43 |
| Oct 20, 2024 19:32:00.257441998 CEST | 42516 | 80 | 192.168.2.23 | 109.202.202.202 |
| Oct 20, 2024 19:32:15.615334034 CEST | 43928 | 443 | 192.168.2.23 | 91.189.91.42 |
| Oct 20, 2024 19:32:25.853687048 CEST | 42836 | 443 | 192.168.2.23 | 91.189.91.43 |
| Oct 20, 2024 19:32:29.949114084 CEST | 42516 | 80 | 192.168.2.23 | 109.202.202.202 |
| Oct 20, 2024 19:32:56.569190979 CEST | 43928 | 443 | 192.168.2.23 | 91.189.91.42 |
System Behavior
| Start time (UTC): | 17:31:51 |
| Start date (UTC): | 20/10/2024 |
| Path: | /tmp/mipsel.elf |
| Arguments: | /tmp/mipsel.elf |
| File size: | 5773336 bytes |
| MD5 hash: | 0d6f61f82cf2f781c6eb0661071d42d9 |
| Start time (UTC): | 17:31:51 |
| Start date (UTC): | 20/10/2024 |
| Path: | /tmp/mipsel.elf |
| Arguments: | - |
| File size: | 5773336 bytes |
| MD5 hash: | 0d6f61f82cf2f781c6eb0661071d42d9 |
| Start time (UTC): | 17:31:51 |
| Start date (UTC): | 20/10/2024 |
| Path: | /tmp/mipsel.elf |
| Arguments: | - |
| File size: | 5773336 bytes |
| MD5 hash: | 0d6f61f82cf2f781c6eb0661071d42d9 |
| Start time (UTC): | 17:31:51 |
| Start date (UTC): | 20/10/2024 |
| Path: | /tmp/mipsel.elf |
| Arguments: | - |
| File size: | 5773336 bytes |
| MD5 hash: | 0d6f61f82cf2f781c6eb0661071d42d9 |
| Start time (UTC): | 17:31:51 |
| Start date (UTC): | 20/10/2024 |
| Path: | /tmp/mipsel.elf |
| Arguments: | - |
| File size: | 5773336 bytes |
| MD5 hash: | 0d6f61f82cf2f781c6eb0661071d42d9 |