Edit tour

Linux Analysis Report
main_arm7.elf

Overview

General Information

Sample name:	main_arm7.elf
Analysis ID:	1561540
MD5:	0523d595f7f8b7b8bf05cb804de5f32f
SHA1:	5fcd1fb36f56d96c9185ce454613946f7161df4d
SHA256:	7045550dcae0e634c84ac8729c51c0972de3ec326d6541d48d2fc3fbc8c59093
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	72
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561540
Start date and time:	2024-11-23 18:17:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	main_arm7.elf
Detection:	MAL
Classification:	mal72.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: main_arm7.elf

Runtime Messages

Command:	/tmp/main_arm7.elf
PID:	5414
Exit Code:	1
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

main_arm7.elf (PID: 5414, Parent: 5340, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/main_arm7.elf

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
main_arm7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
main_arm7.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x183e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x183fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18410:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18424:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18438:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1844c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18460:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18474:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18488:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1849c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18500:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18514:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18528:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1853c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18550:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18564:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18578:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
main_arm7.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x182a8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x183e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x183fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18410:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18424:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18438:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1844c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18460:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18474:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18488:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1849c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x184ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18500:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18514:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18528:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1853c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18550:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18564:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18578:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x182a8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: main_arm7.elf PID: 5414	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: main_arm7.elf PID: 5414	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x22977:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2298b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2299f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x229b3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x229c7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x229db:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x229ef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22a03:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22a17:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22a2b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22a3f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22a53:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22a67:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22a7b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22a8f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22aa3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22ab7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22acb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22adf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22af3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x22b07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: main_arm7.elf PID: 5414	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x2285d:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 1 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: main_arm7.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: main_arm7.elf

ReversingLabs: Detection: 55%

System Summary

Malicious sample detected (through community Yara rule)

Source: main_arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: main_arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: main_arm7.elf PID: 5414, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: main_arm7.elf PID: 5414, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: main_arm7.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/telnetsshwatchdogsshd/usr/compress/bin//compress/bin/compress/usr/bashmain_x86main_x86_64main_mipsmain_mipselmain_armmain_arm5main_arm6main_arm7main_ppcmain_m68kmain_sh4main_spchttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt//tmp/var/mnt/boot/home/dev/..//root(deleted)/proc/self/exe

Source: main_arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: main_arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: main_arm7.elf PID: 5414, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: main_arm7.elf PID: 5414, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal72.troj.linELF@0/0@0/0

Source: /tmp/main_arm7.elf (PID: 5414)

Queries kernel information via 'uname':

Jump to behavior

Source: main_arm7.elf, 5414.1.0000564075463000.0000564075591000.rw-.sdmp	Binary or memory string: Gu@V!/etc/qemu-binfmt/arm
Source: main_arm7.elf, 5414.1.00007ffc62385000.00007ffc623a6000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/main_arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/main_arm7.elf
Source: main_arm7.elf, 5414.1.0000564075463000.0000564075591000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: main_arm7.elf, 5414.1.00007ffc62385000.00007ffc623a6000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: main_arm7.elf, type: SAMPLE
Source: Yara match	File source: 5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: main_arm7.elf PID: 5414, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: main_arm7.elf, type: SAMPLE
Source: Yara match	File source: 5414.1.00007f0b68017000.00007f0b68031000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: main_arm7.elf PID: 5414, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
main_arm7.elf	55%	ReversingLabs	Linux.Backdoor.Mirai
main_arm7.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

⊘No contacted IP infos

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.983961706098249
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	main_arm7.elf
File size:	183'519 bytes
MD5:	0523d595f7f8b7b8bf05cb804de5f32f
SHA1:	5fcd1fb36f56d96c9185ce454613946f7161df4d
SHA256:	7045550dcae0e634c84ac8729c51c0972de3ec326d6541d48d2fc3fbc8c59093
SHA512:	079cd6dfe752a3024837909873b6fe029fe5171ec25cd081a39b36652c52f42d75b321e3acd48e37f43f3409f82448a02b94d7eefbfe5a7ccbd73e131290439b
SSDEEP:	3072:s1oYmk9arrjvePa5xDqNMouUofbyZLfZQ33FTjoNM/RF6U8U0ULl:koaarPWPa5xDqNMjULfS3NMNM/RFYULl
TLSH:	F8042A45EA404B13C4D627B9F6DF424633239B9493EB73069528AFB43FC679E4F22A05
File Content Preview:	.ELF..............(.........4...8)......4. ...(........p............p...p...............................................................hf..........................................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	141624
Section Header Size:	40
Number of Section Headers:	30
Header String Table Index:	27

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x17ab0	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1fba0	0x17ba0	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1fbb0	0x17bb0	0x21c8	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x21d78	0x19d78	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x21d90	0x19d90	0x170	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x2a000	0x1a000	0x4	0x0	0x3	WA	0	0	4
.tdata	PROGBITS	0x2a004	0x1a004	0x4	0x0	0x403	WAT	0	0	4
.tbss	NOBITS	0x2a008	0x1a008	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x2a008	0x1a008	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x2a00c	0x1a00c	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2a010	0x1a010	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x2a014	0x1a014	0xc0	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2a0d4	0x1a0d4	0x310	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2a3e4	0x1a3e4	0x6284	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1a3e4	0xeec	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x1b2d0	0x160	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x1b430	0x23e	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1b66e	0x29df	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1e04d	0x986	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1e9d3	0x10da	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1fab0	0x33c	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1fdec	0xabc	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x208a8	0x182a	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x220d2	0x730	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x22802	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x22818	0x11e	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x22de8	0x6640	0x10	0x0		29	946	4
.strtab	STRTAB	0x0	0x29428	0x38b7	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x19d90	0x21d90	0x21d90	0x170	0x170	4.7279	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x19f00	0x19f00	6.1445	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x1a000	0x2a000	0x2a000	0x3e4	0x6668	4.2862	0x6	RW	0x8000	.eh_frame .tdata .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x1a004	0x2a004	0x2a004	0x4	0xc	2.0000	0x4	R	0x4	.tdata .tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1fba0	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1fbb0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x21d78	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x21d90	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2a000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2a004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2a008	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2a008	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2a00c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2a010	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x2a014	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x2a0d4	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x2a3e4	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	26
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1fba0	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1fbac	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8218	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8414	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x86cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8af8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x91f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x980c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9efc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa5f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xacbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb53c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb89c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbcd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbf64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc244	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc2d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcf4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcf9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd040	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd1e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd390	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd3d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd3e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd45c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd4c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdcf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe38c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe42c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe4cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe560	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe5d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe5f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe6ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe6c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe7e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe7f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe85c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe8b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf11c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf258	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf2fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf42c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf8fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfaec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10570	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1070c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10930	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10abc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11070	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x112b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11918	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11928	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11edc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1242c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1257c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12750	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1299c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12da0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ee4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13200	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1336c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13654	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13bac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13bb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13cb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14444	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x144c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14548	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14550	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1455c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14568	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14600	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x146f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14734	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1476c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14794	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14890	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14be0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14de4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15034	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15614	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1571c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1574c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1581c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x167a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16884	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ff8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17810	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17848	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17920	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x179c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fe4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1809c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1816c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18224	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18360	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1847c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x184c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18524	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18654	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x186d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x191c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ba8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19d04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19fd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a3c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a48c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a5d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1abfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1acb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b07c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b0c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b2ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b2f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b3e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b484	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b4b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b50c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b59c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b5a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b5d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b658	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b734	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b7ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b814	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ba74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1baac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bbc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bc68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bcc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bde4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1be7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c060	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c098	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c0f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c204	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c25c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c674	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c694	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c800	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c82c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c854	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c87c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c95c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c9a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c9e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ca4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ca60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ccc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d068	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d0bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d0e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d19c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d278	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d3b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d508	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d534	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d690	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1de84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dfc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e100	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e5a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e5c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e6b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e790	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e87c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e8c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e95c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ea54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eaa4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eafc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eb88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ecd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ecf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eeb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ef0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1efd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f154	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f570	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fa0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fb4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a00c	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a008	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8214	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8334	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8abc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x91ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9808	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9ef8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa5f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xacb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb51c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb898	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fbcc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1fbf0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xbcd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbf60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc240	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc5d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a0d4	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0xd050	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd1cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd374	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a0d8	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2a194	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0xd3e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd3f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd458	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd4c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdc5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a1bc	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2a1c0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2a1c4	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0xdce4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdd4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xde28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe388	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe424	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe4c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe550	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a1c8	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0xe7d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe838	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe858	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe8a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe908	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xec14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xee14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf250	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf2f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf41c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf8d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfae0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1051c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x106fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10910	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a1cc	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x20b1c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x2a1d0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x10ab4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1106c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x112a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1190c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11c58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ed4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12134	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12414	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a1e4	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x128a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12c40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x131e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13b8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	24
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	24
$d	.symtab	0x144b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1453c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x145f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x146e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14730	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14768	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1478c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x147dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1481c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14854	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x148cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1490c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1494c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1498c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x149e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ae0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ba4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14bdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14de0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1502c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x151a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20cb8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1527c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x152c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x155e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15678	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x156e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15814	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15cec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a1f0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2a1ec	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1677c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20d34	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x16a30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16fc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a2d4	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x20d3c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x173a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17758	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17900	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17bf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17e10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20dc0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17ebc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17fdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18094	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x180d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18120	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18164	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x181d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18220	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x182a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x182e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18358	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x183a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1842c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18474	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x184b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1850c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x185dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x186d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19064	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a2d8	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x191ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19a60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19b7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a2f0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x19c30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19ce8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19da8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19e4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a308	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2a3a0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x19ef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19fc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a0b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a1a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2192c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1a3b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a46c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a3b4	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1a5b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1abd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ac48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b054	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b0b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b11c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b29c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b3d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b420	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b4b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b540	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b72c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b794	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b804	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ba40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1baa0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bbb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bc60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bcb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bdd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1be6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bf68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c044	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c08c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a3cc	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1c19c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c1fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c250	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c5fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a3d0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1c670	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c6f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c75c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c7fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c94c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c99c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c9dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ca44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ccb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d060	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d198	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d274	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d490	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1de64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21d30	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1e0ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e6a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e788	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e874	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ea4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1eaa0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1eb7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ecc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1eeb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1efd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f0a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f150	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a1e0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2b8	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x118f	0	NOTYPE	<unknown>	DEFAULT	24
$d	.symtab	0x0	0	TLS	<unknown>	DEFAULT	8
$d	.symtab	0x2a3dc	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x21a18	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x2199c	12	OBJECT	<unknown>	DEFAULT	4
C.31.4592	.symtab	0x1fbf0	44	OBJECT	<unknown>	DEFAULT	4
C.32.4593	.symtab	0x1fbcc	36	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x20cb8	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x219a8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x20cdc	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x20d0c	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x20ce8	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x20d00	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x20cf4	12	OBJECT	<unknown>	DEFAULT	4
GET_UID	.symtab	0x3009c	1	OBJECT	<unknown>	DEFAULT	15
LOCAL_ADDR	.symtab	0x30094	4	OBJECT	<unknown>	DEFAULT	15
LOCAL_ADDR2	.symtab	0x300dc	4	OBJECT	<unknown>	DEFAULT	15
Laligned	.symtab	0x179e8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x17a04	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x1c694	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x2a014	0	OBJECT	<unknown>	HIDDEN	13
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x12f98	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x12f9c	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x13c4c	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x12f90	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x12fd4	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x13c70	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x14410	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x12fc8	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x13be0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x13c04	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x13c28	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x12ef8	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x13510	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x12f44	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x2a3dc	4	OBJECT	<unknown>	DEFAULT	14
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x21a18	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x2a000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x2a000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x2a3dc	4	OBJECT	<unknown>	HIDDEN	14
__GI___close	.symtab	0x1b440	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x1b424	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2a3e0	4	OBJECT	<unknown>	HIDDEN	14
__GI___errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__GI___fcntl_nocancel	.symtab	0x14568	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1dfc8	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x17cfc	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x1b440	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x14600	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1b4d0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x1b560	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x1eac0	100	FUNC	<unknown>	HIDDEN	2
__GI___longjmp	.symtab	0x1c674	20	FUNC	<unknown>	HIDDEN	2
__GI___nptl_create_event	.symtab	0x12748	4	FUNC	<unknown>	HIDDEN	2
__GI___nptl_death_event	.symtab	0x1274c	4	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x1b4d0	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x1b4b4	24	FUNC	<unknown>	HIDDEN	2
__GI___pthread_cleanup_upto	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__GI___pthread_keys	.symtab	0x2b3e8	8192	OBJECT	<unknown>	HIDDEN	15
__GI___pthread_unwind	.symtab	0x118c4	84	FUNC	<unknown>	HIDDEN	2
__GI___pthread_unwind_next	.symtab	0x11918	16	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x1b560	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x1b544	24	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x1b124	392	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x1860c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x18630	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x185e8	36	FUNC	<unknown>	HIDDEN	2
__GI___stack_user	.symtab	0x2b3c8	8	OBJECT	<unknown>	HIDDEN	15
__GI___uClibc_fini	.symtab	0x1c134	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1c204	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x1eac0	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x1eaa4	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x17d14	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1c694	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x19a68	296	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x17f2c	116	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x1a1b4	32	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x17fa0	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1eb30	88	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x14734	56	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x1b440	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x14e54	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1cfec	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1d020	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1ccc4	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x18028	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x1a3c8	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x152c4	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x14600	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x173c4	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1de84	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1dfc8	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x16ff8	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x17770	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x155f4	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1acb0	972	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x156ec	48	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x17810	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1ecd0	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1ecf4	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1c6fc	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x17848	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1dfc8	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1c800	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1c82c	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1c840	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1c854	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1476c	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1b2ac	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x147a8	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x1809c	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x147e0	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1c868	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x17ec0	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1e95c	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x19fd0	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x1c87c	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x17e20	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x14820	56	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1f0e4	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1e5c0	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x17910	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1e590	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x17a20	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1e6b0	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x17920	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x14444	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1c95c	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x14910	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x14990	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1b4d0	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x15034	196	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x15614	116	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1b2f4	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x19ba8	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x19e68	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1b560	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x151a8	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1cbd8	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x14ae8	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x1816c	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x18224	136	FUNC	<unknown>	HIDDEN	2
__GI_remove	.symtab	0x15688	100	FUNC	<unknown>	HIDDEN	2
__GI_rmdir	.symtab	0x1c9a0	64	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1c9e0	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x14c94	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x182f0	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x183ac	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x14d18	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x18434	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1a0c8	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x144c0	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x184c0	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x18510	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x18524	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x14d58	140	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x1571c	48	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x1847c	68	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x19ef8	216	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x17a44	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1e790	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x1e5a0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x1e5a0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1e87c	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x179c0	96	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x17b34	204	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1e8c0	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1e910	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x17c00	252	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1a1d4	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1a5d8	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x17e44	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x14de4	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x1ca4c	20	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x14e14	64	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x15e90	324	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1574c	208	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1d068	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1d0e0	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1d0bc	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x1eac0	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2a010	0	OBJECT	<unknown>	DEFAULT	12
__JCR_LIST__	.symtab	0x2a010	0	OBJECT	<unknown>	DEFAULT	12
___Unwind_ForcedUnwind	.symtab	0x13c4c	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x13be0	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x13c04	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x13c28	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x1f160	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1fabc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1fabc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1faa0	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1fb4c	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1f160	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1fad4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1fb1c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1fb34	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1fb04	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1faec	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1f800	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1f570	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1f154	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1f15c	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1f4bc	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1f494	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x12da0	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x12ecc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1f510	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0xe7e0	8	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x1f470	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x12c8c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x12d88	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1f4fc	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x13bac	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x13ba4	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x13b9c	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x30088	4	OBJECT	<unknown>	HIDDEN	15
__atexit_lock	.symtab	0x2a3b4	24	OBJECT	<unknown>	DEFAULT	14
__bss_end__	.symtab	0x30668	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2a3e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2a3e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x1c1b0	84	FUNC	<unknown>	DEFAULT	2
__clone	.symtab	0x1ac4c	100	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x1b440	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x1b424	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1fa1c	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x2a3e0	4	OBJECT	<unknown>	DEFAULT	14
__curbrk	.symtab	0x30090	4	OBJECT	<unknown>	HIDDEN	15
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x2a0d4	0	NOTYPE	<unknown>	DEFAULT	14
__deallocate_stack	.symtab	0xf2fc	304	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x14560	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x14554	0	FUNC	<unknown>	DEFAULT	2
__default_stacksize	.symtab	0x2a1e0	4	OBJECT	<unknown>	HIDDEN	14
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x12ee4	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1f800	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x12da0	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x2a00c	0	OBJECT	<unknown>	DEFAULT	11
__end__	.symtab	0x30668	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x30080	4	OBJECT	<unknown>	DEFAULT	15
__eqdf2	.symtab	0x1fa1c	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0xe83c	32	FUNC	<unknown>	DEFAULT	2
__error	.symtab	0x1acac	0	NOTYPE	<unknown>	DEFAULT	2
__exidx_end	.symtab	0x21f00	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x21d90	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2f5f4	4	OBJECT	<unknown>	HIDDEN	15
__extendsfdf2	.symtab	0x1f4bc	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x14568	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1dfc8	300	FUNC	<unknown>	DEFAULT	2
__find_in_stack_list	.symtab	0xeaf0	308	FUNC	<unknown>	HIDDEN	2
__fini_array_end	.symtab	0x2a010	0	NOTYPE	<unknown>	HIDDEN	11
__fini_array_start	.symtab	0x2a00c	0	NOTYPE	<unknown>	HIDDEN	11
__fixunsdfsi	.symtab	0x1fb4c	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1f510	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1f494	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1f4fc	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1f470	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0xe6ac	24	FUNC	<unknown>	DEFAULT	2
__fork_generation	.symtab	0x30250	4	OBJECT	<unknown>	HIDDEN	15
__fork_generation_pointer	.symtab	0x30634	4	OBJECT	<unknown>	HIDDEN	15
__fork_handlers	.symtab	0x30638	4	OBJECT	<unknown>	HIDDEN	15
__fork_lock	.symtab	0x2f5f8	4	OBJECT	<unknown>	HIDDEN	15
__frame_dummy_init_array_entry	.symtab	0x2a008	0	OBJECT	<unknown>	DEFAULT	10
__free_stacks	.symtab	0xf258	164	FUNC	<unknown>	HIDDEN	2
__free_tcb	.symtab	0xf42c	116	FUNC	<unknown>	HIDDEN	2
__gedf2	.symtab	0x1fa0c	148	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x1c760	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1eb88	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1476c	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x1b2ac	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x17cfc	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x13350	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x13438	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x13bd0	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x133cc	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x134f0	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x13bd8	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x13cb4	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x143c8	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x13654	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x1fa0c	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x2a00c	0	NOTYPE	<unknown>	HIDDEN	10
__init_array_start	.symtab	0x2a008	0	NOTYPE	<unknown>	HIDDEN	10
__init_sched_fifo_prio	.symtab	0x120f4	76	FUNC	<unknown>	HIDDEN	2
__is_smp	.symtab	0x30248	4	OBJECT	<unknown>	HIDDEN	15
__ledf2	.symtab	0x1fa14	140	FUNC	<unknown>	HIDDEN	2
__libc_accept	.symtab	0x17f2c	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x1b440	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x18028	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x1b5d0	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x1b658	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	9
__libc_fcntl	.symtab	0x14600	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1acb0	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x8	4	TLS	<unknown>	HIDDEN	9
__libc_longjmp	.symtab	0x14858	56	FUNC	<unknown>	DEFAULT	2
__libc_multiple_threads	.symtab	0x3063c	4	OBJECT	<unknown>	HIDDEN	15
__libc_multiple_threads_ptr	.symtab	0x30244	4	OBJECT	<unknown>	HIDDEN	15
__libc_nanosleep	.symtab	0x14990	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1b4d0	100	FUNC	<unknown>	DEFAULT	2
__libc_pthread_init	.symtab	0x1b07c	68	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1b560	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x1816c	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x18224	136	FUNC	<unknown>	DEFAULT	2
__libc_resp	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_select	.symtab	0x14c94	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x182f0	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x183ac	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1b838	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x144c0	136	FUNC	<unknown>	DEFAULT	2
__libc_siglongjmp	.symtab	0x14858	56	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x3007c	4	OBJECT	<unknown>	DEFAULT	15
__libc_write	.symtab	0x1eac0	100	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x1b0c0	100	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait	.symtab	0x11aec	156	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x11a54	152	FUNC	<unknown>	HIDDEN	2
__lll_robust_lock_wait	.symtab	0x11edc	208	FUNC	<unknown>	HIDDEN	2
__lll_robust_timedlock_wait	.symtab	0x11d90	332	FUNC	<unknown>	HIDDEN	2
__lll_timedlock_wait	.symtab	0x11c60	304	FUNC	<unknown>	HIDDEN	2
__lll_timedwait_tid	.symtab	0x11b88	216	FUNC	<unknown>	HIDDEN	2
__longjmp	.symtab	0x1c674	20	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x1fa14	140	FUNC	<unknown>	HIDDEN	2
__make_stacks_executable	.symtab	0xf11c	8	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x19638	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x186d8	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2a2d8	24	OBJECT	<unknown>	DEFAULT	14
__malloc_state	.symtab	0x302bc	888	OBJECT	<unknown>	DEFAULT	15
__malloc_trim	.symtab	0x19588	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1f570	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x1fa1c	132	FUNC	<unknown>	HIDDEN	2
__nptl_create_event	.symtab	0x12748	4	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0xf124	308	FUNC	<unknown>	HIDDEN	2
__nptl_death_event	.symtab	0x1274c	4	FUNC	<unknown>	DEFAULT	2
__nptl_initial_report_events	.symtab	0x2d3ec	1	OBJECT	<unknown>	DEFAULT	15
__nptl_last_event	.symtab	0x2b3dc	4	OBJECT	<unknown>	DEFAULT	15
__nptl_nthreads	.symtab	0x2a1cc	4	OBJECT	<unknown>	DEFAULT	14
__nptl_setxid	.symtab	0xee24	688	FUNC	<unknown>	HIDDEN	2
__nptl_threads_events	.symtab	0x2b3d4	8	OBJECT	<unknown>	DEFAULT	15
__open	.symtab	0x1b4d0	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x1b4b4	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x30084	4	OBJECT	<unknown>	DEFAULT	15
__preinit_array_end	.symtab	0x2a008	0	NOTYPE	<unknown>	HIDDEN	9
__preinit_array_start	.symtab	0x2a008	0	NOTYPE	<unknown>	HIDDEN	9
__progname	.symtab	0x2a3d4	4	OBJECT	<unknown>	DEFAULT	14
__progname_full	.symtab	0x2a3d8	4	OBJECT	<unknown>	DEFAULT	14
__pthread_cleanup_pop	.symtab	0x1257c	56	FUNC	<unknown>	HIDDEN	2
__pthread_cleanup_pop_restore	.symtab	0x12658	240	FUNC	<unknown>	DEFAULT	2
__pthread_cleanup_push	.symtab	0x125b4	40	FUNC	<unknown>	HIDDEN	2
__pthread_cleanup_push_defer	.symtab	0x125dc	124	FUNC	<unknown>	DEFAULT	2
__pthread_create_2_1	.symtab	0xfaec	2692	FUNC	<unknown>	DEFAULT	2
__pthread_current_priority	.symtab	0x11fb4	320	FUNC	<unknown>	HIDDEN	2
__pthread_debug	.symtab	0x30240	4	OBJECT	<unknown>	HIDDEN	15
__pthread_disable_asynccancel	.symtab	0x1242c	136	FUNC	<unknown>	HIDDEN	2
__pthread_enable_asynccancel	.symtab	0x124b4	200	FUNC	<unknown>	HIDDEN	2
__pthread_init_static_tls	.symtab	0x10570	412	FUNC	<unknown>	HIDDEN	2
__pthread_initialize_minimal	.symtab	0x1299c	752	FUNC	<unknown>	DEFAULT	2
__pthread_initialize_minimal_internal	.symtab	0x1299c	752	FUNC	<unknown>	HIDDEN	2
__pthread_keys	.symtab	0x2b3e8	8192	OBJECT	<unknown>	DEFAULT	15
__pthread_multiple_threads	.symtab	0x3024c	4	OBJECT	<unknown>	HIDDEN	15
__pthread_mutex_lock	.symtab	0x11070	576	FUNC	<unknown>	PROTECTED	2
__pthread_mutex_lock_full	.symtab	0x10abc	1460	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock_internal	.symtab	0x11070	576	FUNC	<unknown>	HIDDEN	2
__pthread_mutex_unlock	.symtab	0x118bc	8	FUNC	<unknown>	PROTECTED	2
__pthread_mutex_unlock_full	.symtab	0x112b0	1264	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock_internal	.symtab	0x118bc	8	FUNC	<unknown>	HIDDEN	2
__pthread_mutex_unlock_usercnt	.symtab	0x117a0	284	FUNC	<unknown>	HIDDEN	2
__pthread_return_0	.symtab	0x1c0f0	8	FUNC	<unknown>	DEFAULT	2
__pthread_tpp_change_priority	.symtab	0x12140	748	FUNC	<unknown>	HIDDEN	2
__pthread_unwind	.symtab	0x118c4	84	FUNC	<unknown>	DEFAULT	2
__pthread_unwind_next	.symtab	0x11918	16	FUNC	<unknown>	DEFAULT	2
__read	.symtab	0x1b560	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x1b544	24	FUNC	<unknown>	DEFAULT	2
__reclaim_stacks	.symtab	0x1070c	548	FUNC	<unknown>	HIDDEN	2
__register_atfork	.symtab	0x1b124	392	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resp	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
__restore_core_regs	.symtab	0x13bb4	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x3008c	4	OBJECT	<unknown>	HIDDEN	15
__sched_fifo_max_prio	.symtab	0x2a1e8	4	OBJECT	<unknown>	HIDDEN	14
__sched_fifo_min_prio	.symtab	0x2a1e4	4	OBJECT	<unknown>	HIDDEN	14
__set_robust_list_avail	.symtab	0x3025c	4	OBJECT	<unknown>	HIDDEN	15
__sigaction	.symtab	0xe7f0	76	FUNC	<unknown>	DEFAULT	2
__sigaddset	.symtab	0x1860c	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x18630	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x185e8	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1ea54	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1c688	12	FUNC	<unknown>	DEFAULT	2
__stack_user	.symtab	0x2b3c8	8	OBJECT	<unknown>	DEFAULT	15
__static_tls_align_m1	.symtab	0x30254	4	OBJECT	<unknown>	HIDDEN	15
__static_tls_size	.symtab	0x30258	4	OBJECT	<unknown>	HIDDEN	15
__stdin	.symtab	0x2a1fc	4	OBJECT	<unknown>	DEFAULT	14
__stdio_READ	.symtab	0x1eeb4	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1d19c	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1ef0c	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1d278	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1efd4	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1f0a8	60	FUNC	<unknown>	HIDDEN	2

Network Behavior

⊘No network behavior found

System Behavior

Analysis Process: main_arm7.elf PID: 5414, Parent PID: 5340

General

Start time (UTC):	17:17:57
Start date (UTC):	23/11/2024
Path:	/tmp/main_arm7.elf
Arguments:	/tmp/main_arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report main_arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

System Behavior

Analysis Process: main_arm7.elf PID: 5414, Parent PID: 5340

General

Chronological Activities

Linux Analysis Report
main_arm7.elf