glacier ctf 25
This commit is contained in:
1
2025/glacier/rev/c2/.python-version
Normal file
1
2025/glacier/rev/c2/.python-version
Normal file
@@ -0,0 +1 @@
|
||||
3.12
|
||||
0
2025/glacier/rev/c2/README.md
Normal file
0
2025/glacier/rev/c2/README.md
Normal file
116
2025/glacier/rev/c2/build_packet.py
Normal file
116
2025/glacier/rev/c2/build_packet.py
Normal file
@@ -0,0 +1,116 @@
|
||||
import struct
|
||||
|
||||
def calculate_c2_checksum(payload_bytes: bytes) -> int:
|
||||
"""
|
||||
Calculates the 8-bit checksum for the C2 packet payload based on the
|
||||
decompiled Rust/C logic (main_packet_building).
|
||||
|
||||
The algorithm is a custom XOR reduction over the payload data, primarily
|
||||
using 4-byte (DWORD) and 1-byte chunks, mimicking the final reduction
|
||||
of the SSE logic.
|
||||
|
||||
The original logic is complex (32-byte blocks with SSE, then 4-byte,
|
||||
then 1-byte), but the core of the final reduction is based on
|
||||
accumulating XORs in 32-bit blocks and then folding the result.
|
||||
|
||||
For simplicity and focusing on the non-SSE reduction path (which handles
|
||||
most sizes and remainders), we use a DWORD-based XOR sum and then a
|
||||
byte-based XOR sum for the remainder.
|
||||
"""
|
||||
|
||||
payload_len = len(payload_bytes)
|
||||
checksum_v16 = 0
|
||||
|
||||
# --- 1. Process data in 4-byte (DWORD) chunks (Handles up to N & 0xFFFC) ---
|
||||
# This section mimics the logic for sizes < 32 and the 4-byte remainder loop.
|
||||
|
||||
# v26 = a5 & 0x3FFC (The largest multiple of 4 less than a5)
|
||||
processed_4byte_len = payload_len & 0xFFFC
|
||||
|
||||
# Iterate through the payload 4 bytes at a time
|
||||
for i in range(0, processed_4byte_len, 4):
|
||||
# Read 4 bytes as a little-endian integer (DWORD)
|
||||
dword_value = struct.unpack('<I', payload_bytes[i:i+4])[0]
|
||||
|
||||
# Accumulate the XOR sum of the DWORDs
|
||||
# In the original code, this happens in an SSE register, but we simplify
|
||||
# it to an integer XOR sum for the final 8-bit result.
|
||||
checksum_v16 ^= dword_value
|
||||
|
||||
# --- 2. Final Reduction/Folding (Mimics SSE reduction) ---
|
||||
# The original SSE reduction folds a 128-bit XOR sum down to an 8-bit value.
|
||||
# We perform a similar reduction on the 32-bit (dword) XOR sum.
|
||||
|
||||
# Fold 32-bit result to 16-bit: v28 = _mm_xor_si128(_mm_srli_epi32(v27, 0x10u), v27)
|
||||
# This means XORing the upper 16 bits with the lower 16 bits.
|
||||
checksum_v16 = (checksum_v16 & 0xFFFF) ^ (checksum_v16 >> 16)
|
||||
|
||||
# Fold 16-bit result to 8-bit: _mm_xor_si128(_mm_srli_epi16(v28, 8u), v28)
|
||||
# This means XORing the upper 8 bits with the lower 8 bits.
|
||||
checksum_v16 = (checksum_v16 & 0xFF) ^ (checksum_v16 >> 8)
|
||||
|
||||
# The checksum is now a single 8-bit value (0-255)
|
||||
checksum_v16 &= 0xFF
|
||||
|
||||
# --- 3. Process the final 1-3 byte remainder (The byte loop LABEL_21) ---
|
||||
# The remainder starts at the end of the 4-byte processed section.
|
||||
|
||||
# The XOR accumulation continues with the remaining 1-3 bytes.
|
||||
for i in range(processed_4byte_len, payload_len):
|
||||
checksum_v16 ^= payload_bytes[i]
|
||||
|
||||
# Ensure the final result is 8 bits
|
||||
return checksum_v16 & 0xFF
|
||||
|
||||
def build_packet(command_id: int, payload: bytes) -> bytes:
|
||||
"""
|
||||
Constructs the complete C2 packet ready for transmission.
|
||||
"""
|
||||
magic_bytes = b'\x43\x42' # 0x4342 Big-Endian
|
||||
cmd_id = command_id.to_bytes(1, 'big')
|
||||
reserved_byte = b'\x00'
|
||||
|
||||
payload_len = len(payload)
|
||||
# Payload length is Big-Endian (BYTE1(a5) then a5)
|
||||
len_bytes = payload_len.to_bytes(2, 'big')
|
||||
|
||||
# Calculate the 8-bit checksum over the payload data
|
||||
checksum_v16 = calculate_c2_checksum(payload)
|
||||
|
||||
# Checksum field is 2 bytes (Big-Endian), where MSB is 0x00 and LSB is the 8-bit checksum.
|
||||
checksum_bytes = b'\x00' + checksum_v16.to_bytes(1, 'big')
|
||||
|
||||
# Combine all parts
|
||||
packet = (
|
||||
magic_bytes +
|
||||
cmd_id +
|
||||
reserved_byte +
|
||||
len_bytes +
|
||||
payload +
|
||||
checksum_bytes
|
||||
)
|
||||
|
||||
return packet
|
||||
|
||||
# --- Example Usage ---
|
||||
# 1. Define inputs
|
||||
COMMAND_OPCODE = 0x01 # Example command ID
|
||||
PAYLOAD_DATA = b"cato@unknown" # N = 43 bytes
|
||||
|
||||
# 2. Calculate checksum and build the packet
|
||||
final_packet = build_packet(COMMAND_OPCODE, PAYLOAD_DATA)
|
||||
final_checksum_byte = final_packet[-1]
|
||||
|
||||
print(f"--- Packet Construction ---")
|
||||
print(f"Payload Length (N): {len(PAYLOAD_DATA)} bytes")
|
||||
print(f"Calculated Checksum (v16): {hex(final_checksum_byte)}")
|
||||
print(f"Total Packet Size: {len(final_packet)} bytes (N + 8)")
|
||||
print(f"Final Packet (Hex): {final_packet.hex()}")
|
||||
|
||||
# Verify structure:
|
||||
# Magic Bytes: 0x4342 ('CB')
|
||||
# CMD ID: 0x01
|
||||
# Reserved: 0x00
|
||||
# Length: 0x002B (43 decimal)
|
||||
# Payload: 43 bytes of "This is..."
|
||||
# Checksum: 0x00{v16}
|
||||
BIN
2025/glacier/rev/c2/c2_client
Executable file
BIN
2025/glacier/rev/c2/c2_client
Executable file
Binary file not shown.
BIN
2025/glacier/rev/c2/c2_client.i64
Normal file
BIN
2025/glacier/rev/c2/c2_client.i64
Normal file
Binary file not shown.
30
2025/glacier/rev/c2/dec
Executable file
30
2025/glacier/rev/c2/dec
Executable file
@@ -0,0 +1,30 @@
|
||||
#!/usr/bin/python3
|
||||
|
||||
import sys
|
||||
|
||||
KEY = (
|
||||
b"\x2B\x5F\x52\x17\x05\x56\x41\x37\x38\x75\x01\x44\x5E\x06\x6C\x27\x09"
|
||||
b"\x50\x41\x11\x18\x78\x56\x0D\x33\x0B\x07\x4C\x58\x0B\x07\x4C\x5F\x0B"
|
||||
b"\x0A\x40\x59\x0B\x00\x40\x55\x0B\x06"
|
||||
)
|
||||
|
||||
def decrypt(hex_string):
|
||||
# Convert hex dump to bytes
|
||||
encrypted_bytes = bytes.fromhex(hex_string.replace(" ", "").replace("\n", ""))
|
||||
|
||||
decrypted = []
|
||||
key_len = len(KEY)
|
||||
|
||||
# Rolling XOR Logic (matches Rust sub_D7B0)
|
||||
for i, byte in enumerate(encrypted_bytes):
|
||||
k = KEY[i % key_len]
|
||||
decrypted.append(byte ^ k)
|
||||
|
||||
result_bytes = bytes(decrypted)
|
||||
|
||||
print(result_bytes.decode('utf-8'))
|
||||
|
||||
if len(sys.argv) != 2:
|
||||
print("pass decrypt text as hexstring")
|
||||
|
||||
decrypt(sys.argv[1])
|
||||
138
2025/glacier/rev/c2/dec_rc5_chatgpt.py
Normal file
138
2025/glacier/rev/c2/dec_rc5_chatgpt.py
Normal file
@@ -0,0 +1,138 @@
|
||||
import hashlib
|
||||
import struct
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# RC5 core parameters
|
||||
# ----------------------------
|
||||
W = 32 # word size in bits
|
||||
R = 12 # rounds
|
||||
B = 16 # key bytes (RC5-32/12/16)
|
||||
WORD_MASK = 0xFFFFFFFF
|
||||
BLOCK_SIZE = 8 # 2 * 32-bit words
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# Utility: Rotate left/right
|
||||
# ----------------------------
|
||||
def rotl(x, n):
|
||||
return ((x << n) & WORD_MASK) | (x >> (32 - n))
|
||||
|
||||
|
||||
def rotr(x, n):
|
||||
return ((x >> n) | (x << (32 - n))) & WORD_MASK
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# Key Expansion
|
||||
# ----------------------------
|
||||
def expand_key(key: bytes):
|
||||
# Constants for RC5 with w=32
|
||||
P32 = 0xB7E15163
|
||||
Q32 = 0x9E3779B9
|
||||
|
||||
# Convert key into c 32-bit words L[0..c-1]
|
||||
c = max(1, B // 4)
|
||||
L = list(struct.unpack("<" + "I" * c, key))
|
||||
|
||||
# Initialize S-array
|
||||
t = 2 * (R + 1)
|
||||
S = [0] * t
|
||||
S[0] = P32
|
||||
for i in range(1, t):
|
||||
S[i] = (S[i - 1] + Q32) & WORD_MASK
|
||||
|
||||
# Mix key into S
|
||||
i = j = 0
|
||||
A = Bv = 0
|
||||
for _ in range(3 * max(t, c)):
|
||||
A = S[i] = rotl((S[i] + A + Bv) & WORD_MASK, 3)
|
||||
Bv = L[j] = rotl((L[j] + A + Bv) & WORD_MASK, (A + Bv) & 31)
|
||||
i = (i + 1) % t
|
||||
j = (j + 1) % c
|
||||
|
||||
return S
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# Block Encrypt/Decrypt
|
||||
# ----------------------------
|
||||
def rc5_encrypt_block(block: bytes, S):
|
||||
A, B = struct.unpack("<II", block)
|
||||
A = (A + S[0]) & WORD_MASK
|
||||
B = (B + S[1]) & WORD_MASK
|
||||
|
||||
for i in range(1, R + 1):
|
||||
A = (rotl(A ^ B, B & 31) + S[2 * i]) & WORD_MASK
|
||||
B = (rotl(B ^ A, A & 31) + S[2 * i + 1]) & WORD_MASK
|
||||
|
||||
return struct.pack("<II", A, B)
|
||||
|
||||
|
||||
def rc5_decrypt_block(block: bytes, S):
|
||||
A, B = struct.unpack("<II", block)
|
||||
|
||||
for i in range(R, 0, -1):
|
||||
B = rotr((B - S[2 * i + 1]) & WORD_MASK, A & 31) ^ A
|
||||
A = rotr((A - S[2 * i]) & WORD_MASK, B & 31) ^ B
|
||||
|
||||
B = (B - S[1]) & WORD_MASK
|
||||
A = (A - S[0]) & WORD_MASK
|
||||
|
||||
return struct.pack("<II", A, B)
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# CBC mode + PKCS#7
|
||||
# ----------------------------
|
||||
|
||||
def rc5_cbc_encrypt(key: bytes, iv: bytes, plaintext: bytes) -> bytes:
|
||||
if len(iv) != BLOCK_SIZE:
|
||||
raise ValueError("IV must be 8 bytes")
|
||||
|
||||
S = expand_key(key)
|
||||
|
||||
blocks = []
|
||||
prev = iv
|
||||
|
||||
for i in range(0, len(plaintext), BLOCK_SIZE):
|
||||
block = plaintext[i:i + BLOCK_SIZE]
|
||||
x = bytes(a ^ b for a, b in zip(block, prev))
|
||||
enc = rc5_encrypt_block(x, S)
|
||||
blocks.append(enc)
|
||||
prev = enc
|
||||
|
||||
return b"".join(blocks)
|
||||
|
||||
|
||||
def rc5_cbc_decrypt(key: bytes, iv: bytes, ciphertext: bytes) -> bytes:
|
||||
if len(iv) != BLOCK_SIZE:
|
||||
raise ValueError("IV must be 8 bytes")
|
||||
if len(ciphertext) % BLOCK_SIZE != 0:
|
||||
raise ValueError("Ciphertext not aligned to block size")
|
||||
|
||||
S = expand_key(key)
|
||||
blocks = []
|
||||
prev = iv
|
||||
|
||||
for i in range(0, len(ciphertext), BLOCK_SIZE):
|
||||
block = ciphertext[i:i + BLOCK_SIZE]
|
||||
dec = rc5_decrypt_block(block, S)
|
||||
x = bytes(a ^ b for a, b in zip(dec, prev))
|
||||
blocks.append(x)
|
||||
prev = block
|
||||
|
||||
return b"".join(blocks)
|
||||
|
||||
KEY = bytes.fromhex("99 90 9c 9d d5 8c 81 82 91 98 94 95 dd 84 89 9a")
|
||||
ITERATIONS = 85454
|
||||
key_bytes = hashlib.pbkdf2_hmac("sha256", KEY, b"", ITERATIONS, dklen=16)
|
||||
|
||||
print(f"[+] Key: {key_bytes.hex()}")
|
||||
iv = bytes.fromhex("bb7cdd2e104c3410")
|
||||
with open("./output/85454_bb7cdd2e104c3410.enc", "rb") as f:
|
||||
ct = f.read()
|
||||
|
||||
dec = rc5_cbc_decrypt(key_bytes, iv, ct)
|
||||
print("decrypted:", dec)
|
||||
|
||||
1
2025/glacier/rev/c2/flag.txt
Normal file
1
2025/glacier/rev/c2/flag.txt
Normal file
@@ -0,0 +1 @@
|
||||
FLAG{This is a test flag for educational purposes}
|
||||
777
2025/glacier/rev/c2/func_sha1
Normal file
777
2025/glacier/rev/c2/func_sha1
Normal file
@@ -0,0 +1,777 @@
|
||||
.init_proc<===>f16f10f1768f0b19ddcad7199966e82a58c96e6e
|
||||
sub_390<===>6e1d01b07799d69e2e6c738891121fd8d087e1fd
|
||||
._Unwind_Resume<===>ec735ea6219973eaf1ec18d892b0ebcbee85ac81
|
||||
.__cxa_finalize<===>86a776d84f14d3595aae30be476a01efcfba9ffc
|
||||
sub_3D0<===>1a55cc33323a5c74ff170798d205113148180d6d
|
||||
sub_440<===>ffac3321ab87c900b2226cd3db98ac387bacde6b
|
||||
sub_540<===>973073a1549c10528c6979a706db004f6a8029f8
|
||||
sub_590<===>b0051d8b8b6eaecbc1851af30ee73096788fc0c8
|
||||
sub_680<===>e08cf3cee9a4aa705310103caa926ed7b0384b9f
|
||||
sub_700<===>83a5f129b22c8f47da05ac2dc3c7bb35f885b46e
|
||||
sub_760<===>f0026f66e376dee316fd915e7b533e4bfd636ef7
|
||||
sub_16A0<===>692916e0633133a76613309874eda3e17396a9cf
|
||||
sub_3D40<===>0d03632601b729d37cc5325c71a13e6c0667997e
|
||||
core::panicking::assert_failed<===>a95331fc6be5a6e9b4e7181d6e7f8900c7cdfb0e
|
||||
core::panicking::assert_failed<===>595bb5955c3279dc2b4b715451ab36bda1d48475
|
||||
sub_4670<===>6abf97c1a208e09c271ff3a656d11b3b61962c22
|
||||
sub_46F0<===>25dac6342887b8cc2ea0975bd1c66be13de28c83
|
||||
sub_47D0<===>84379859bb256867c5ac777d0fa6c2e9bec8062f
|
||||
std::thread::ThreadId::new::exhausted<===>cfa815e379677365e15ac0a473c0cde90ed1f3c4
|
||||
sub_4860<===>9fb703add54b0e2588f216c231b80c443826041b
|
||||
sub_4869<===>a15336aecbc1d321e71e35f793f7ddeb217b7121
|
||||
sub_48D0<===>69e60af046090389ec0c845e35212505e039f26f
|
||||
sub_4970<===>c30df4e2de0f27487f21bfc8d2801c6c688452e6
|
||||
sub_4A40<===>0604d32fba3cf854d60b59987236de52f62884b8
|
||||
sub_4B00<===>7770eafb85d45b4c864ae914d7c1977af71d393c
|
||||
sub_4BC0<===>f55870b502074a2d0374eea576c8f51c40532ced
|
||||
sub_4C80<===>a36820d28193f0bd87152e069daef8ed916876b7
|
||||
std::panicking::rust_panic<===>6c812a4d14afa66f8ff214fe533d5b08417ae105
|
||||
sub_4D10<===>f4524544dd8eae38cc84b32bd8a10212e24757c2
|
||||
std::sys::sync::mutex::futex::Mutex::lock_contended<===>9ace755d4faa6ae73fc5d9302838f92e22ef55c2
|
||||
std::sys::sync::once::futex::Once::call<===>651ca3286b0b6da283e113ea422a56fc585b2579
|
||||
std::sys::sync::rwlock::futex::RwLock::read_contended<===>85cfd3773eb5a6d2afc1542f1853af6e69d45493
|
||||
std::sys::sync::rwlock::futex::RwLock::wake_writer_or_readers<===>f0ab5b4ca35865200aaa05a6d5ea6690ce42b45a
|
||||
std::alloc::rust_oom<===>443d5a887485d6d5b22528b5fa5c1cb7e9e61998
|
||||
sub_5310<===>695fc1be4dd8ac08f6b160aa7983e92243308729
|
||||
alloc::raw_vec::RawVecInner<A>::reserve::do_reserve_and_handle<===>9b893ac016c838e479636d095fa9f38dc3f69200
|
||||
sub_5354<===>1467bb24df3386783e40b3201167853db890c7a2
|
||||
core::slice::index::slice_end_index_overflow_fail<===>855700a49b781b6d2c51e214fe3bf609a3ed5da3
|
||||
sub_5410<===>0fef33afc88bc26884275b063ca511648412f471
|
||||
sub_54C0<===>9568f34d77277414b51433025295b22778255223
|
||||
sub_5532<===>ee6930c330d525fd6b41d9622da266e51aefe4ad
|
||||
sub_5549<===>62eb979cb39329416c884bec1a77db3fddfa4301
|
||||
sub_5560<===>856f7b69243ddab25b4cb8487de1f1f4553f4e3c
|
||||
core::cell::panic_already_borrowed<===>7c0f9a14c20c3d7fde3e3ef151f83edb14af67cb
|
||||
sub_55D0<===>8ee7999fda834d28c66434eed17ead1a8ede3a6e
|
||||
core::option::expect_failed<===>7979848a15926a383da8bdbf60e46bf5ca955af6
|
||||
core::panicking::panic_fmt<===>6c915fa9fd1929d25e7156731ac2e53da3a0190a
|
||||
sub_5670<===>a6719532b7a2ed147950828e00084c3f1f13769e
|
||||
core::panicking::panic<===>2bb5defb210e367c0b01e69f3ac9d01d81b20750
|
||||
core::panicking::panic_nounwind<===>e39a1539fdd5ab82f86a66633496020882f2d15a
|
||||
core::panicking::panic_nounwind_nobacktrace<===>e39a1539fdd5ab82f86a66633496020882f2d15a
|
||||
sub_5795<===>6a6c386ea4338cb4f576fbe63278a112b6156481
|
||||
sub_57F1<===>ac998b5aa330477b8bcbcc62c4964ff962351fea
|
||||
sub_5805<===>edb9bda4086f16a8954f00f11106a8951ac21a99
|
||||
core::panicking::assert_failed<===>6244d490b6a01292b87c17dd23f3cdc2e0f24eb1
|
||||
sub_5849<===>5979f02a7cf49366cbdb95272409926cb0f65ace
|
||||
core::result::unwrap_failed<===>f2e9ef3b7ed0b7aacbda2f88509b77e6c3ac5830
|
||||
std::thread::ThreadId::new::exhausted<===>f23b7f0d39f976c910249ebf9f2b4eecd83bf18d
|
||||
sub_5A50<===>6e3e99824b814c9a02e84d0b8f16eca455979395
|
||||
sub_5A60<===>572e8f0f07397b6a2ccd1477035438406fd01729
|
||||
sub_5A70<===>6a2b95f65f5914c68db89bda67174c0c5f64668b
|
||||
core::slice::index::slice_end_index_overflow_fail<===>c41842193a4cc906506558bbcc5a455f9b448f19
|
||||
sub_5AC0<===>80cf256175fe74fb9152b2c32e8b3eff341b1fa1
|
||||
sub_5AE0<===>fa243bb6c2b0c6e2202b6f945264793730e1ea6c
|
||||
core::slice::index::slice_end_index_overflow_fail<===>638304905f2de24980634503ea4b4c3ccf9b4274
|
||||
core::slice::index::slice_end_index_overflow_fail<===>aacf426cfc424b815e5298c6fb05efb19c28c85b
|
||||
core::slice::index::slice_start_index_len_fail<===>1c356ad795db0f8cd99c31b007170f9a8b6e9b44
|
||||
core::slice::index::slice_start_index_len_fail<===>342ec051cf73c41c38f103f58548fcc9e327eac9
|
||||
core::slice::index::slice_start_index_len_fail<===>00ba00b4684ea1effe296a09e9badc42cd41c856
|
||||
alloc::vec::Vec<T,A>::insert::assert_failed<===>9d475ddafb40454fcf6f694ca8f368abfc5b2457
|
||||
start<===>d447f85467b58f02928a0a3441aa2350cbc3ba54
|
||||
deregister_tm_clones<===>95fa1a8ae8daf8e38ed88e6a2dfe9751675f08d1
|
||||
register_tm_clones<===>cc67949e4265da6701337376b32f5834ac719632
|
||||
__do_global_dtors_aux<===>20cdba0106930abe419be8afedcd42b86b6d115b
|
||||
j_register_tm_clones<===>dcafcf32d7ccc9fd28a1723966fa1db1789ec93b
|
||||
sub_5E20<===>6cb3f2416cde84ff2a0ce7c477293d4cdfea2b1d
|
||||
sub_5E80<===>fd0dbbf1e10768af23eaa9fec5ca11dcb7e23ba7
|
||||
sub_5F30<===>f684f0991002dc924656abe378def24e5759eead
|
||||
sub_61A0<===>49af6cdad89f7f6d619c8b56815c1c5c0de35db3
|
||||
sub_61D0<===>a6be59b6095f06eee0d110ae6540bd99786e5992
|
||||
sub_6260<===>fb12f05518f3abf4abe6fa0145d07281ed6d4c51
|
||||
sub_6320<===>937ab85438e51df7ac4d1c423739d0d28412f17a
|
||||
sub_6500<===>904527968fcef56ee36f9b840a1666eb17ba636a
|
||||
sub_66F0<===>f1bdf0c0b72bc9e5747af4bb89f9f88e1437b383
|
||||
main_packet_building<===>18ffbe76ccf6fe910ad5affcfd0f1881b19888da
|
||||
parse_packet<===>bc686ca9d81801b74010f0e07d36b0d06b409b10
|
||||
crypto_stuff<===>c8f524fee85eb690f0affef5419dce520455ae02
|
||||
main_anti_debug<===>3732234490da108167dbb8e0154ce1ced571a421
|
||||
main<===>b0fed4095c40001809b9218f59bc3549acb3e3c1
|
||||
sub_BFF0<===>7ac6a9e99da93c2d293428157303a74d9aeb1cbf
|
||||
sub_C000<===>a58c86e6edec04845c5b7fa322cb4ffa0e40571c
|
||||
<&T as core::fmt::Debug>::fmt<===>c74349215fd84c584fe2a36670098f46a3bd2a22
|
||||
sub_C080<===>4b04e622c93d7fa55ce90349a140a9de46dda2e5
|
||||
sub_C150<===>d3b8e9e32ec65b486b77adeeee01ef10b684e609
|
||||
sub_C540<===>64fd104c89bf7b337b09fff0012bfdb3237fddfc
|
||||
<alloc::string::FromUtf8Error as core::fmt::Debug>::fmt<===>33b0304e142681eb962eb944c7e8e43c733a99fc
|
||||
sub_C670<===>6f61b63f37125ac9bee18b94a56b39e0d9dbdd17
|
||||
string_decrypt<===>504f269ce0b0262b2f83891b6f781cc0fee3637d
|
||||
sub_CAC0<===>0f0f4602f859c1ec50bd36ff5f88b55d9bdce138
|
||||
sub_CAE0<===>40b3f2dd40cbce4f6a588ddb746ae8e59911f37a
|
||||
sub_CAF0<===>5b8ba4b30ccfd3448c2a2c326a5e28d4861767eb
|
||||
sub_CDD0<===>33ed0e036ce07722927f1f4e33ae898b37af4a75
|
||||
sub_CE70<===>ccb93a48fc79e8e824f39606b221c1f74f84b768
|
||||
sub_CED0<===>0fa1da2331d315f3e5938aaea3ad9ac643b8ec14
|
||||
sub_CF60<===>75fdc033a811b944f0a50701bc79430ae5084811
|
||||
sub_CFE0<===>7fac4b566bb9269fc01a8c8f11f7b6c70fbdc241
|
||||
sub_D0A0<===>1333410b0a476b9d4995f85cdecaca0787be3c96
|
||||
sub_D290<===>b58324ec5fd60d432916eb919a0b7bd418c41aad
|
||||
sub_D420<===>c6bed4cf926ac4ba02ff181fc3c53cadd033525d
|
||||
sub_D7B0<===>dbc89d79baad7f6ae2a6788b642cf31f3a9346d4
|
||||
sub_D970<===>1e744f0d9a4cb17b96550d40cc7ff1792bcca556
|
||||
sub_DB30<===>e55c753be8d2703556ad7629225d6e797edb340b
|
||||
sub_DE00<===>fd0dbbf1e10768af23eaa9fec5ca11dcb7e23ba7
|
||||
sub_DEB0<===>fd0dbbf1e10768af23eaa9fec5ca11dcb7e23ba7
|
||||
gemini_str::trim<===>802cc8553c6a8478915259c104d98136967fafff
|
||||
sub_E200<===>28c508ac585cc8238927b2dd6bd4f3e72f052f38
|
||||
sub_E3C0<===>fd0dbbf1e10768af23eaa9fec5ca11dcb7e23ba7
|
||||
j___rust_alloc_0<===>8e8481eae143a5d0eafa9e7d64dc95e02e13fe6d
|
||||
j_free<===>c3445c066198592317196f5acc01a77360039182
|
||||
sub_E490<===>069c53710b6c541cc1c337a7bc5639504eb2b766
|
||||
j___rust_alloc_zeroed_0<===>90d9b88cce418f6c1c58f70026490bd6da57107c
|
||||
sub_E4B0<===>ce041b7ac506b8ea3d1dd0759ece2d518252a858
|
||||
nullsub_1<===>82ea66d9ee4d85856bd4c46adcbd7103d6923aa0
|
||||
sub_E4D0<===>0122ede5772cf861215ad3ca71b1b1854cd0737a
|
||||
sub_114C0<===>cc7a4bb643e7ac108e7bba925887eec7a09e489d
|
||||
sub_114E0<===>ed3d40f2643be7a016b0d1c7b261df96545d8ab6
|
||||
sub_11500<===>b7cabca90160c57f740ee929c868ae3d60b2e86e
|
||||
sub_11740<===>29c26d97947ec5876bd725807f3007288661a18e
|
||||
sub_11760<===>d4cf11ecd9c7a7979b41bb64bcdc4d793def5d02
|
||||
sub_11780<===>4407e4aabe73454e0ca3fbbc6db3f057ae6d8532
|
||||
sub_117A0<===>3e0ab2153678bcecd6a4bcb626cce3f1e75e0f87
|
||||
<&T as core::fmt::Debug>::fmt<===>835d3aeb7f6c4a8dcf74104a3a24f2bd0e8d8281
|
||||
<&T as core::fmt::Debug>::fmt<===>c7df70f26bbf190336292cb44c3437359ddea4f8
|
||||
sub_11930<===>956f9137fb4b6dba870dc138066e1cc3cc8b836d
|
||||
sub_11960<===>934d2ea2d26586a24e18f22bea616f3a9554eddd
|
||||
sub_11990<===>5db07ebdfcbbc32b2ddcab745e80a66b81b87a51
|
||||
sub_119B0<===>819da26d3deaf9c962985d2746a814094d6d3e36
|
||||
sub_11A50<===>a04300dd8c937b8bb6785186881997769c688e46
|
||||
sub_11A80<===>fd9c765fea86281199af80c123608fdf917d95f4
|
||||
sub_11B90<===>e7615a775ab16fb005200ebfc3e47adae110734b
|
||||
sub_11D30<===>bf28f8e7803d829a33846e9a068b5105f0d9326d
|
||||
sub_11E80<===>db267250cdcb16ee6d7a001e26981aead3271648
|
||||
sub_11E90<===>0d458f235945773b4e518d2d20d686db15a67815
|
||||
sub_11EA0<===>1d12735ab00a815d41f7ccd14f13550f767279ca
|
||||
sub_11EB0<===>49175f1a33a410ec403972f7f5df0e6a249e8f4e
|
||||
sub_11EC0<===>a860166a66438c356992f59a0923843fe1e3ad60
|
||||
sub_11FC0<===>19deb73ee263a57d0e5d0893b9d55a964f6f89e4
|
||||
sub_12130<===>a3110e94894a4af065fdccf83841ab888afd0165
|
||||
std::sys::pal::unix::fs::stat::{{closure}}<===>eb67eacbe81f26ef4af70912e57aaa5b1acc8b36
|
||||
sub_12230<===>bdda2b1077e31d64fdf2aea99681f22df720acb9
|
||||
sub_12280<===>c06ddfeb1206a6ee2054171189072779f638737a
|
||||
sub_12290<===>65d44e07f53b68760d1cd6ebb7fa938ba051a325
|
||||
sub_122B0<===>0f3afa5b876b93e43dc01af4a2d4d548c36c25e3
|
||||
sub_122C0<===>4d0e130a4e31d90479514a5b54cf0cb6aa198cf9
|
||||
sub_122E0<===>b094e304d10953f6c24a04b76191e05b0c5ebd1a
|
||||
core::ptr::drop_in_place<alloc::vec::Vec<(std::ffi::os_str::OsString,std::ffi::os_str::OsString)>><===>6fe5c472b59b000f601d47ddf4efa1671b0b4a1e
|
||||
sub_12440<===>b05a875adab569f3ae66a8293d863535996001e0
|
||||
sub_124B0<===>1d9b39095454a4d3b10de94f5d4cdc84237479e8
|
||||
sub_125B0<===>7585dcf2592acec81cdb802f61dd513184c4c661
|
||||
sub_12660<===>139b958fe7f230249b6db807e1c41694b21f4902
|
||||
sub_12760<===>7df162c639c4de1afe1ae867ffd42b73d207c6cf
|
||||
sub_127B0<===>d4ff88f4870e64535169521dee5348429f9b87fa
|
||||
sub_12890<===>f465c7eff918ec95692ad1825014805bc9c29b85
|
||||
sub_12970<===>d3eaf63374ee95553a2bf6f4138ec4cf775c14bb
|
||||
core::ptr::drop_in_place<panic_unwind::real_imp::Exception><===>403470915d910c874d89f931b9aad83ee6d51ff4
|
||||
sub_12A40<===>1454522d3dd67a4475cac1ae2d77e2d9933af997
|
||||
sub_12A90<===>3b98cabb44a541bac2d4fbe9941d908665e763f6
|
||||
sub_12B00<===>1d61f8c56608bb6855b7476cba63d3c77558561e
|
||||
sub_12BD0<===>ebc2bff30a0122745c25446c45a0f14fe484def7
|
||||
sub_12CD0<===>e4026fd6b6f0f0c58aa95257c272933e996063b5
|
||||
sub_12D30<===>b282e987494014f56598dacf2a78e85d52e4eb89
|
||||
sub_12DF0<===>281272c04e6c222f0c91e67896851600319ee836
|
||||
sub_12E60<===>2eca14d91b260b61c65b7ec4bf30b79528d166ae
|
||||
sub_12F10<===>2334106ddf6ad83080492fb5ce0d95f5fccc5031
|
||||
sub_12F50<===>87a801fa24c59e2c91bb9fbea731525d19920291
|
||||
sub_12FF0<===>bd7c4ba1c4444f7172e259b30a669309d338e7e1
|
||||
sub_130E0<===>350a72aa322dc3506a4dbd38a57ba5152e105186
|
||||
sub_13150<===>c46e87d657b3d507fd619171086206586730a5b5
|
||||
sub_13170<===>715b217c8cf93944cfbcb35110ee582c9da88e32
|
||||
sub_13240<===>76a061550671a31d64e6a50033a2f1a383444baa
|
||||
sub_132E0<===>5ef113e08d4f4f3320bd9ea2bbc41b9d6e83e375
|
||||
sub_13370<===>59bb6ebf2b91df480b2daa03155e178b00c2cbf1
|
||||
<alloc::vec::into_iter::IntoIter<T,A> as core::ops::drop::Drop>::drop<===>fdb87f6055959c97f12f1a3bc3b729c42dd4a215
|
||||
sub_13460<===>64f9cbc8657667435160d3a1ac92035696b21dd7
|
||||
sub_13530<===>18935821c5e76ab51a46e7dabc475d20ac40aab3
|
||||
sub_135A0<===>c00c0608117559eeb0be2271a2d95d8023db4ae6
|
||||
sub_135C0<===>3b98cabb44a541bac2d4fbe9941d908665e763f6
|
||||
sub_13630<===>f4e84a83333dda2cc664f3b21faa06808bc2e1a5
|
||||
sub_13770<===>fe1f298eaca28c099c6fbdba2319d0f584a93a66
|
||||
sub_13780<===>ab0302bc19b11db588582092971c6181d9790c85
|
||||
core::ptr::drop_in_place<std::sys::pal::unix::process::process_common::ChildPipes><===>a2eece4e027b5baeb042b71b42a91e42caeafd53
|
||||
core::ptr::drop_in_place<std::sys::pal::unix::process::process_common::StdioPipes><===>704a327b631fb76a4da3d9be4910ff5bf8dda9f2
|
||||
core::ptr::drop_in_place<alloc::vec::Vec<alloc::string::String>><===>d64f4ccb714ad454fa023c6274e8619bbb2d12fc
|
||||
core::ptr::drop_in_place<std::backtrace_rs::symbolize::gimli::Library><===>03cbe90c53613e42b2cb010de923b7448827ec1f
|
||||
sub_139D0<===>1658a7651d71c79f3cb61ed19244eee7cc3ae784
|
||||
sub_13A20<===>0d787b5bac0821c92c0fb9c6f63e23a6a0085bd6
|
||||
sub_13A40<===>7b01949d33b62466cdd24717a5a753aab72a5c1b
|
||||
core::ptr::drop_in_place<alloc::vec::Vec<alloc::string::String>><===>99238a5f8569dd96183dc705c249abaf621526db
|
||||
core::ptr::drop_in_place<std::backtrace_rs::symbolize::gimli::stash::Stash><===>e736c16e99d67ee85de3ce85e4019c0f41a4d28c
|
||||
core::ptr::drop_in_place<alloc::vec::Vec<addr2line::LineSequence>><===>cf41ab2dafc4c13384654541223ee996c4648027
|
||||
core::ptr::drop_in_place<alloc::boxed::Box<[alloc::string::String]>><===>8ceabe8b50699d35b5914197d78f80957c7d14c4
|
||||
sub_13CE0<===>cfbc3f6f41eebf088f076d9ff7554a5eeb9aa8d2
|
||||
sub_13D00<===>3c516a8621cb73cec8f921d4ea1e7452a5b761d7
|
||||
sub_13D10<===>8e4ba9c39ed2a6fa4924e1685c6456a52b4c2151
|
||||
sub_13E20<===>58a049801f4dc4aa89a36766aa8bfe2f81dcb816
|
||||
sub_13E30<===>30627c862b3d4b81ab621f1750be5e1d809bbaef
|
||||
core::ptr::drop_in_place<(std::ffi::os_str::OsString,std::ffi::os_str::OsString)><===>d808b5835bcbd52925150ebd0285b085f57c12a2
|
||||
core::ptr::drop_in_place<std::io::buffered::bufwriter::BufWriter<W>::flush_buf::BufGuard><===>a13bc9a1e4a3e12bbb6eaffdb0ffe9e7f7d44014
|
||||
sub_13FE0<===>1d201253b237fe635768c2baae5b0d5b47205777
|
||||
core::ptr::drop_in_place<core::result::Result<addr2line::Lines,gimli::read::Error>><===>de6f2fb82341e49487e749c1d8a38f02d9f9f184
|
||||
sub_14100<===>0fd0e8bb3ca74f80c2e612cceed9652bd2e1c785
|
||||
core::str::validations::next_code_point<===>fefab3fb63aaf671ea054a41ad7372b1eadc0b56
|
||||
sub_14290<===>8684d20fcb95005cc03523364bfdca87a0b7862b
|
||||
sub_14310<===>660b134235a43b565026eb98b7cbad6e52401c8f
|
||||
core::array::<impl core::fmt::Debug for [T; N]>::fmt<===>fcc97213f3ed33df3ace4784c851c788770778a1
|
||||
sub_14570<===>11dbea6336ce781b4c417cc963500e1cafdb5555
|
||||
nullsub_2<===>9edb35b9273d53cfed2ebb63c6b66fed73cdcd62
|
||||
sub_14590<===>4e4783185b9b87aeab7444acd17848dac98d1a64
|
||||
zero_eax<===>3a472be1734293501c9eb9568cccfbb996d09f5f
|
||||
sub_145C0<===>60214b52db6363787da6d53d003ab962922e0408
|
||||
sub_146D0<===>b5666f6a1c6462783e111c1b379b2f6b4da58a12
|
||||
sub_14790<===>b0ddda564721f787de6303d837dab4a7e43b7e41
|
||||
sub_14850<===>b0ddda564721f787de6303d837dab4a7e43b7e41
|
||||
sub_14910<===>3e7f85dbdaf4fdd5a2c1df42ad71ce12a6c1ddd6
|
||||
sub_149C0<===>b5666f6a1c6462783e111c1b379b2f6b4da58a12
|
||||
sub_14A80<===>253cf9802bf14a9432c0e4ef9a6df0d57c327efd
|
||||
sub_14BF0<===>c037b0fb238e2df1ed0a74c4817079942399bbd7
|
||||
sub_14F70<===>786b90a48bfc19c69d2877315803542dc2d36688
|
||||
sub_154E0<===>3bae5fb31ed7ca8a5d6dc66d6a463d598521fc43
|
||||
sub_15590<===>66b6d63c6adafafa99dd2cb1c8864accffca722c
|
||||
sub_15650<===>630567a043312c1db10de7e5d6a68e399e4d791b
|
||||
sub_157A0<===>08212d9c084045e9699dd3c3a441a6dc0ab2cee8
|
||||
sub_15900<===>630567a043312c1db10de7e5d6a68e399e4d791b
|
||||
sub_15A50<===>630567a043312c1db10de7e5d6a68e399e4d791b
|
||||
sub_15BA0<===>ee5d372ded37a8d1916b09520cd4cae3e67551bb
|
||||
sub_15D10<===>038300a472d19b34a13cd45ddefcfb2ac95e942c
|
||||
sub_163B0<===>20d1c8f3ee754e6b7ca8c1ef14160ed2ab04cd88
|
||||
sub_16AA0<===>e45aaec6a31e97da4a57abb4ffbdf0ab7c208979
|
||||
sub_17180<===>038300a472d19b34a13cd45ddefcfb2ac95e942c
|
||||
sub_17820<===>ea54f072b5989892b91101e0213508ddb77a1eba
|
||||
sub_17F10<===>875000e1ce7c0096d3cdcfd813d34528a03cb4c1
|
||||
sub_189B0<===>244e32197cb354c111d2bcbcd5cfdf3bcfcaa1a8
|
||||
sub_19410<===>c3706c9a9fb1fea22df0eaaa72e2ffc6f987e09e
|
||||
sub_19E00<===>7ea0845d3d9856c72d6f428b4fb8f31192347413
|
||||
sub_1A810<===>244e32197cb354c111d2bcbcd5cfdf3bcfcaa1a8
|
||||
sub_1B240<===>cc86f9d273ca58faecb0d3b0039755d78ea2c52d
|
||||
sub_1B320<===>9334d3a67873f494943a4bc9022a2e8cd8673eef
|
||||
sub_1B420<===>bf783763b084e7c6469d6086722446dcb9a2769f
|
||||
sub_1B890<===>b98b7b06fc7e8450214cadf62f8c584bbce1d714
|
||||
sub_1B8A0<===>3dd7039891f36665c7e311eef6b0487a7f2cb71c
|
||||
sub_1B8B0<===>0f1f838b23f1db6d7f5a0aa169fd24d8b05676dd
|
||||
sub_1C100<===>ef1f4d3e88af7c2eeaa659438f42130d80b4e351
|
||||
sub_1C120<===>6855c0deeb9a46c3ba1794a71dc21436d0af21e5
|
||||
sub_1C250<===>f54b2cc2cb5f9ea9ddebd7ff15a51227beba82fb
|
||||
sub_1C2C0<===>66370dfe7e081fb6c203891c379ada5c087b7a51
|
||||
sub_1D180<===>1304fc304b0c151c8abd5f71e7564497c9940cd8
|
||||
sub_1D580<===>002158dc321488e6e07120cfeea8d2c1e31101bb
|
||||
sub_1D990<===>002158dc321488e6e07120cfeea8d2c1e31101bb
|
||||
sub_1DDA0<===>d971d3c7bf295a48535e77386a6fcab9001322eb
|
||||
sub_1DFB0<===>b19e0b4edb09aaa85d801b6fd34d2a182bc0ec32
|
||||
sub_1E190<===>be579bb9eebbdb9f1d247c7e7c74f49e3bf34225
|
||||
sub_1E490<===>ded4550fbc77aae79e99ba89f66a68b2725f39ef
|
||||
sub_1E720<===>b530905708ac3f14a364331cfdbbebed21a85cd8
|
||||
sub_1EAE0<===>916dbe540936c84a02a7c29b17330d61a22ab3f4
|
||||
sub_1EE10<===>5771286702d57eedc8932ce5522e5a04dcb8c1d6
|
||||
sub_1F210<===>75342da32856aaecd524cf2c0d1db3272c2d7598
|
||||
sub_1F5A0<===>d5b6ef2227469aef0f64aac8ce62de698e7c0811
|
||||
sub_1F960<===>a5e1323bd8476c6dd3c2b903b6f3cca28e401075
|
||||
sub_1FD60<===>5fd0ed1d18466b62a7bba843c72880bd331ec67a
|
||||
sub_20640<===>935c682bac564004f6162ecda49d5289aff9cc70
|
||||
alloc::sync::Arc<T,A>::drop_slow<===>73e259baf1af742aff4970fc5a35aa8394284d10
|
||||
alloc::sync::Arc<T,A>::drop_slow<===>62bb8df15a013c2647d98a81230381d1e735f04e
|
||||
sub_20FA0<===>c16d3a8317b2aedac6ab34bb5997891fe0b5d0d7
|
||||
sub_21040<===>6b77342712f4e117496e5e184454d191e61b132d
|
||||
sub_210B0<===>c7b705e92558ba283bbfb44cdb8f7400e5540caf
|
||||
sub_21100<===>a6d8a42905be11278a36c94f25f06ea9f44c6a09
|
||||
sub_211C0<===>b9ea3495dd0b6de4da115acd5455d544d2a3ad09
|
||||
sub_21280<===>1fbddc75c9ab1b97772c64667fdeddbccfc0a3e1
|
||||
sub_21340<===>55e22336836a09bf2f9698a3bf793cc1e40310aa
|
||||
sub_21400<===>0719bcc7175c265ce6448ccb3594b076f2519bc6
|
||||
sub_214C0<===>c56b7ac0c4e73bba8f718c7252b158fef792d0b2
|
||||
sub_21580<===>138431d5205dcb9095228a14e84b26aff3a71877
|
||||
sub_21640<===>a85e01c784250d672374c3e6dda2a58d0fa068b9
|
||||
sub_21700<===>aee2232871fdc939be2e5fe3c17fe6bbf889304b
|
||||
sub_217C0<===>2888382941b3a33627c65fa50ff997d75d29f21f
|
||||
sub_21880<===>b10feb0eb80775887617a1df48207763acddb987
|
||||
sub_21940<===>3b65f6fdf5277accf330f8941d4b82ee3cf665bc
|
||||
sub_21C30<===>d3ebf807e625b8274609a6236f98c8ab7ca291f2
|
||||
sub_22000<===>aa65c828a0efec3a8ebdd4a635234c89cd0090dd
|
||||
gimli::read::line::parse_directory_v5<===>2da1c00bf9943cd68c2bbff6d9d56589d0868d91
|
||||
sub_22B20<===>dc048ebac119e1a9e5be590fecb7aa00b7508dfc
|
||||
sub_22D80<===>3762a251fc065a337563d0a26cef93e58c923750
|
||||
sub_241E0<===>353d94209c03e179fcb1fc948bb5fcc05cf90f6c
|
||||
sub_24740<===>5ea037628e39af014075c75cf65de2254bdbf5c1
|
||||
sub_24CB0<===>b79e37e677214290c672d1512f63b005d3a4c510
|
||||
sub_24FE0<===>8112c190ac3201325a195244d6993af365a2b9c8
|
||||
sub_25040<===>c6e6ae865d67d3227cab4635a3de0a3e74f9097d
|
||||
sub_25670<===>15448cfa65ba535a8cb1361cb9d16aeb355fe720
|
||||
sub_27C40<===>cb922ed427e6349477355235484060a25e91da32
|
||||
sub_27E30<===>e2f24ae44d4ad4fc3132763e1ce33c624e8cf53b
|
||||
sub_28870<===>76e1a4f741784d56370f7c7f3fa11b2c7765ab8c
|
||||
sub_28920<===>d6b38079920a1c94497ab4fc1f92ded35fb58e4c
|
||||
sub_289D0<===>a03ffa1aab5045178f82cd8ab7ac064c358db76f
|
||||
sub_28AD0<===>e56bb335739fb53dd5b261599f3ea65ffdf87f11
|
||||
sub_28D80<===>d0a641b57310924851640e0b844f7382d2953410
|
||||
sub_29C30<===>1157559a8cb09dd14612f0804cf588fbf5507708
|
||||
sub_29C50<===>b28b0c8a298c1212ec54bafdc37983d33bf5a668
|
||||
sub_29C70<===>910a9f3c0805ca37c436aa918dff2148157f0cb8
|
||||
sub_29CD0<===>a6dc96f361de4a2e76997f7827649d3bebcd5e61
|
||||
sub_29EB0<===>35cfae5f613ddb355b2718b982fef9b8dea9ec8a
|
||||
sub_29F30<===>8e51a3619fc75bb7d5c4a2dd70632cb0f791b6cb
|
||||
<gimli::read::unit::AttributeValue<R,Offset> as core::clone::Clone>::clone<===>8ca4f1e7fe96c46e1dde0ea6275755c5abc8d499
|
||||
sub_2A140<===>b51dc06e3745762a0607c20ee9f4f5445e9e4764
|
||||
sub_2A2A0<===>cbafcb407c80a80d3ebb6628bb025f47913b2406
|
||||
sub_2A730<===>0b3ce53664fb6bfdbe6194b37f2363ea277ce7f4
|
||||
sub_2ABF0<===>074c9e2c3e35b5fa3d70bab3e65bbb1315a52814
|
||||
sub_2AED0<===>c58253969c43c0e9e93b73ba5b98e9837542f52e
|
||||
sub_2B450<===>1fcbbf0ac31ce0b6c95534d0c5afa6fd7a2da06c
|
||||
sub_2B860<===>515e2e634a26a0ef4fd2ab279a7b4e77efee7cf1
|
||||
sub_2CA30<===>087f3b81b179a32a1dfdf02c1212f88a3c641106
|
||||
sub_2CBD0<===>14fba5987f7dc61855ceb6f8fa98c0b90dae3f35
|
||||
call_main<===>24c5300334f6f026455a9e078c0258c01caf7dc9
|
||||
sub_2D3D0<===>6c37d5fe8c0e8737910dea64dc3b961e87cbcdf1
|
||||
sub_2D5B0<===>ad487d6b53eb2331b3d739ca7283a1fc1d125d33
|
||||
sub_2D960<===>8ec1017beb627ac12f3da193077084057e59a8cc
|
||||
sub_2DA00<===>b30b728392b276829d933c9f52d333df9d29efc6
|
||||
dropper?<===>a268e17a6516d76a31d08dd386e4410a48c2003e
|
||||
sub_2DD30<===>acd1ac8d279abb0f6a6ccac63b00db91479db2fd
|
||||
sub_2DD50<===>5eb3fc9b7b2124147959aef9680c1c52eb9fa87f
|
||||
sub_2DF80<===>11d026e4ed8a6a5e9e16d1c95ac5b488944d54cb
|
||||
sub_2E060<===>e4ac279c929871f7c64f38160a69e5ba98e1d7b6
|
||||
sub_2E080<===>bca78a4ae20a095c68634500b98bc0bb8e2e69a5
|
||||
sub_2E170<===>7ab1e40c4b01c5c2ffc16031f9b93c8fb8cb4efb
|
||||
sub_2E450<===>a9c8aa506b2ce473f8342aa4d2e4e8510d911ff4
|
||||
write_to_enc_file<===>53a0b7bf8e58dc2dc8c9298d4b50d3b526f6ed43
|
||||
sub_2E8C0<===>2a3b26ba8b073f757af37900e4c93f9ffc2ac850
|
||||
sub_2EA50<===>dbf8b0b0e731a34fdfdf40bfb8bc48f2e46bae74
|
||||
sub_2EB50<===>50f23fe72d005a3b9d693fdc0cb147395c2adc8f
|
||||
sub_2EBA0<===>65fcbff3479a89b62738db2554d4136535274d4c
|
||||
sub_2ED90<===>a078543a8a910e992a8321c0466bfea5f6aaa1e2
|
||||
sub_2EFE0<===>254af1c97e32d3842b13de1ef01fab6abf6687b2
|
||||
sub_2F030<===>cb832b38bba07f26d0ea340db3a931db82e23e3e
|
||||
sub_2F040<===>14d6aeea4b2725531c824895f5c8f53cd10550e1
|
||||
sub_2F180<===>359f7630c335f8574c948cb771ead4e373c2126f
|
||||
sub_2F1C0<===>7216d93fe3101d48f32974d73ac6c47540171538
|
||||
sub_2F4B0<===>de28bfae25b68ebc777b1bff466801c53de39b34
|
||||
sub_2F720<===>7d30834e8b235e1c2be671e6de5d0b62d456509d
|
||||
sub_2F790<===>f25f0decaef72ffcc627320d1bb52bad9da9f8c5
|
||||
sub_2F8F0<===>e5ea57621f0e4c2e01c00022c920fdfc4e63cadc
|
||||
sub_2F900<===>8b3d11ae85d4abea500df71eb2ef49a634015615
|
||||
sub_2F970<===>f95321e59366ad62da5130f24ba73712489b0899
|
||||
sub_2FAB0<===>d6bb5b32dd884104ee46dab62d43f12408462cd8
|
||||
sub_2FAC0<===>f5b7a7c1c26373a1bde94cf3cf9219cf1acf54ff
|
||||
sub_2FB80<===>3530ab4d101a5fada9394b48993377614eb9d017
|
||||
sub_2FE90<===>0a1ac3c74cd50819136963a2c8f6f79eb5fdf850
|
||||
sub_301A0<===>8941447930495ef5a4faddb570e2d753fc53f881
|
||||
sub_302A0<===>99b9428acbcddbb75b553ae4b1cbc2883d9a6166
|
||||
sub_303A0<===>e01c7ed3f6c2b850195209104b0ca45667a3f547
|
||||
sub_304A0<===>4a07ebc72335c136082ac5c5c92bb9402c155668
|
||||
sub_30510<===>e8771ec5d625951e2ffc0f368fb220b2b8eff8fb
|
||||
sub_30610<===>a31c6ba30d8ab345dc0d51cd558d1643bad8c69e
|
||||
sub_306B0<===>98cc7b5bad7864890837138c2126421aca04615c
|
||||
sub_30770<===>f051e69ad2dc793f1df0b12e7cce32d90cf7f46b
|
||||
sub_30940<===>dff8cc4fb8c3d883f48cf9799b7659825b219e61
|
||||
sub_30A70<===>83d44c08863b38b982e57d16c57c1c7af0630031
|
||||
sub_30BA0<===>27306f6e9565f60dd3238735ca34a5280d383a7f
|
||||
sub_30CD0<===>1fbda4d321274b5d79b64f7c9f4de4e11a12ac9e
|
||||
sub_31040<===>6e57739b65a8dc825a7a0c140045145602a654b9
|
||||
<alloc::string::String as std::net::socket_addr::ToSocketAddrs>::to_socket_addrs<===>62f45e1e777ef135ebf03467903be182b0c40405
|
||||
sub_31140<===>f4b3eb42b845641895d4be85d027ddc6cecb9bf9
|
||||
sub_31190<===>6d4f4802281a957bd0f06041085bc1ce702fdd1e
|
||||
sub_311D0<===>9986f75bee8b697f388c6759d684074057129fcf
|
||||
sub_312A0<===>067cb8aaec69db21f6533e37cbfa61652995a280
|
||||
sub_313F0<===>f1067534212ae2e1e5038e1defb230dfac7cfdef
|
||||
sub_31780<===>2e3136fc10e3314ccb7c42ed46f2a89e007b53ad
|
||||
sub_31870<===>81243626b78d1ae3fd6adba765fb6e49f8ce8ce2
|
||||
sub_31C20<===>92f8c2cd0db8524ab1e8d38ad7b4e05f504ce1e7
|
||||
sub_31FE0<===>727f88f12eedd5605a1f726ace6b29d1a858b0c3
|
||||
sub_32240<===>86ff7fcaf021002e9b73e8bbc929e1d654d68ef6
|
||||
<std::sys::os_str::bytes::Buf as core::fmt::Debug>::fmt<===>15ccec98dd617db2e14de4c3a3a4ff48fa9179d5
|
||||
sub_325B0<===>207f5c0609e257c8b40f9b26c5321a98e105db46
|
||||
std::path::Path::is_file<===>6d1cda53bf886a056da53a9d81115d507f3bbb69
|
||||
std::path::Path::is_dir<===>2fa52d6c330def973299fd7956ac36777f49e637
|
||||
sub_32A80<===>37c91074c49b66f5fd616e58d72b54d8b27d0fe3
|
||||
sub_32DE0<===>e116e167954e5b93449837de293ba8b70556eadb
|
||||
sub_32E00<===>3b516488082a7037928ce45355e832ffadda10cf
|
||||
sub_33010<===>bdda2b1077e31d64fdf2aea99681f22df720acb9
|
||||
sub_33060<===>908cd6fef2738ff9a129b7ee29d0a0717db5b489
|
||||
sub_330D0<===>0b8f70003e8afc38b9968753928c74be378c3207
|
||||
sub_33130<===>6440e85a41970af5e535fe35cec1181d0d5c9e63
|
||||
sub_333B0<===>ec47b06d078b682b425f3b49b9f0ad1b86f74183
|
||||
sub_333D0<===>8f64f57406d6c6a267c24a06f3e96a6e59c1c6bc
|
||||
sub_33520<===>85e0d1f9438ccab0630f384ca578c831fd36e425
|
||||
sub_337C0<===>282e3e03f400418e34cd5e23e8bc7e28d0e472dc
|
||||
sub_337D0<===>84c26cf140c6c258ae45eb57a784d5b90b75c339
|
||||
sub_338F0<===>031423ca0f3413db6ba81a903bdc41b579f4c648
|
||||
sub_33A40<===>d75a2e56e7df02280c9a29d4c8bba44b3058fce1
|
||||
__rust_alloc_0<===>ab86907c8162e49103a9888513fffdc65d038786
|
||||
free<===>ad4b64c21e627a65049735f397de9c9f7d361159
|
||||
sub_33C10<===>07fae75dcc572238340bcd6956729f76abe43d0a
|
||||
__rust_alloc_zeroed_0<===>5f668f7355c78371fb9febb9eb2d5a5626490755
|
||||
sub_33D50<===>74c379a4d39e224ac68693d48fd21fc54bccdb50
|
||||
sub_33E20<===>ad8309682ce48d1fa96d533f8f73c03823d7936e
|
||||
sub_33EEB<===>7b70905db23308235f54ed5428819bbbb96c579e
|
||||
sub_3408D<===>4a812b3e59797904705c688dac4d5829291d5bc1
|
||||
sub_34220<===>d639a33ba8fec5d14da223ecccae92ba9d665edf
|
||||
sub_34500<===>3885f95a18079da1c752d9730dc2f771285da3b3
|
||||
sub_34550<===>4b9e9542d0ceabde2df0bef714f417ad4c29c878
|
||||
sub_34570<===>3ef269de6e2b8055b571d8330b1bd1da1e36bb46
|
||||
<std::panicking::begin_panic_handler::FormatStringPayload as core::panic::PanicPayload>::get<===>5633ca23dbba790c5c0e0732a549cd9131f8de01
|
||||
sub_347B0<===>1ddfa7ce9633226190c0a4644c0f3984d6691bee
|
||||
sub_34800<===>3eb4c8d87b565ba7e87518407df3db84b24b7643
|
||||
sub_34810<===>c665488aa113eb1aeebc305ee95fcbd1096242d0
|
||||
sub_34820<===>2b12dbd3a15e87024254ea84a92e56788f730ee9
|
||||
sub_34840<===>592effe000b39e18977409e026316d13caffc282
|
||||
sub_34920<===>bed7e8dc0a395b2407b2c498a911eb410ddda8f1
|
||||
sub_349A3<===>0da42937c2600867f9d73c3c4497e18d0291c8fa
|
||||
std::backtrace_rs::symbolize::Symbol::name<===>33bf412ad2d90021e5a392f64cdd098d5b024b98
|
||||
sub_34CF0<===>92a3ed06974e5244df6834b2e07479a6955af098
|
||||
sub_34DD0<===>f0aa993525a0b1aaf444ad2690f00ff02e2f6ab4
|
||||
sub_35190<===>ddd8b07803b5e50bb33e2465d8d04bca6b19a754
|
||||
<regex_automata::util::start::Start as core::fmt::Debug>::fmt<===>9e045eed92179aa5ba8d0a939db6c0d0dcf7132f
|
||||
sub_35390<===>7a71046470c130521244befe374241131bb67cc8
|
||||
<std::path::StripPrefixError as core::fmt::Debug>::fmt<===>19188e203035998817d32f66ed7f18a04ae03670
|
||||
sub_35490<===>f2ae6b939bfcb21b359cea91c37f81cced20418c
|
||||
sub_354B0<===>a1291619021fb673d315b47af4c27e7155b09a3c
|
||||
sub_35810<===>3e122f6fdd635c27c9308fbb5343af3478d68c3e
|
||||
sub_35A70<===>b70a1d15c1d518d27b9c771612813d36234bf196
|
||||
sub_36900<===>937dd740bcb92e80cd104555a76a5d11054a0856
|
||||
sub_36CC0<===>72e91bd5fd4478d08ca2985eb9169877634c8e3c
|
||||
stop_thread_logic<===>67185cdba791651f1a889c7e48bac2e31bf36018
|
||||
s_box_stuff<===>cd3042a1989da2eb0495865e9722543b77972054
|
||||
sub_376A0<===>0ffc7d5e1b1d490b493b9135d15cb59eebeafb4a
|
||||
sub_376B0<===>54fe9514ee713e33804bfae216d8b6fa42dcc84f
|
||||
sub_376C0<===>c858061015bc69510c1963ff18174fb686630ceb
|
||||
sub_37CE0<===>985e3420be87d24c20805a75b76436c1eceb3d99
|
||||
sub_37D00<===>2c9f1e6aa2dc0001b4241acd244797cab24ccab0
|
||||
sub_37E60<===>be05aa2b075de2f304ddaeb4d47bdb18acf591e8
|
||||
sub_37EB0<===>351f16311d3ca02724028eadec4b0bcd13479afe
|
||||
sub_38140<===>432ee5b5ecd1c02596f84b6d0f0d5064e981c797
|
||||
sub_38280<===>00163d9d50da44393773188040ec184bbb7e0e52
|
||||
sub_38450<===>187a49a306356cfc7ce7668a097114206872d56b
|
||||
sub_38520<===>26cc6fa7ef5ab1f2a62ebefcecaa969bf5f7d077
|
||||
sub_387F0<===>609830d5270c647560e481d72b140c875d7fe469
|
||||
sub_389B0<===>1d28060c57092ae43c83ff5bd465ae84b598a86c
|
||||
sub_38BC0<===>44029b0a686d0405d12e6f6d0efb7a7c54bc19b0
|
||||
sub_38D20<===>43261aca27b6b643873b1f95fbed195b6eb4e846
|
||||
sub_38D70<===>15d6583d634b26783361857de0ab05a3104ee718
|
||||
sub_38EC0<===>01c42dddf98249201adb6779e54353ef06dec342
|
||||
sub_38FD0<===>990469b5543614bbf9f7debf575c5c6512754ba4
|
||||
sub_39060<===>1596e1e444aeeb5320e3a55ae29afc0e65261496
|
||||
sub_39310<===>89e7152c6004d3fcc8cef1fa9057616ddccce9d7
|
||||
sub_3A110<===>d2a5af50b5200b17d57e50f5b87d21da087a443b
|
||||
sub_3A3E0<===>3c0124fd47fc32f346567ef97721ac3e06feb3d8
|
||||
sub_3A590<===>522ca0d6f77596ee955c710c1a00fff8f279b565
|
||||
sub_3B5B0<===>c2d7ea9bf1c576a8c04c77d71342b7177fa92513
|
||||
sub_3B980<===>78ebe9be5a3e39fb9242db1fa9d6e877117d0564
|
||||
sub_3BB40<===>1bffca0842863d444bcfd973457a629b5b9b9fed
|
||||
sub_3BC20<===>4a20b23aa274b57735c5c7a457abe59bce430caa
|
||||
sub_3BE00<===>ed24d6f5a5fe63ad2acaf7aec705967cf3dead1a
|
||||
sub_3BE50<===>2762ba9825c1920edfc27ca48d7087ec25b43224
|
||||
sub_3BEA0<===>43ff6c4e6cc9538026d3a62213352e11b6dda419
|
||||
sub_3BEB0<===>5a541cfde27c8ac0b7a861280fb14ab17f594a79
|
||||
sub_3BEC0<===>46a84d47dd9b22c75ecf92a9bac8cf02fa346911
|
||||
sub_3BEE0<===>f46a4f38a5fe80016ec6005f630b07d937681f1d
|
||||
sub_3BFE0<===>7269c921140ceaa269b3dc3572c4b11e117adc97
|
||||
sub_3C0C0<===>5107b898a012120a1bb9889ad267af5f6723fd6c
|
||||
std::backtrace_rs::backtrace::libunwind::trace::trace_fn<===>d3ef5ea50676744effdbca33807c5430772296eb
|
||||
sub_3C210<===>d6afacc6bc1e8f689f2fb1f9dbadb3bbac58be8a
|
||||
sub_3C312<===>8f81dfe5b52ea9fa24b9f79051207a079a052dca
|
||||
sub_3F5B0<===>51ee6c60cc8e100dc9a493e801a01f0eaa8d00c3
|
||||
sub_3F858<===>4e93517ac8bbf59a8059dc67df85448b4f04da35
|
||||
sub_43820<===>723b429561fda16e1e523619355b955b0ce3d2f7
|
||||
sub_444B0<===>d9cc7c0b24cc5d5b9114ffc481e9d07a2d6e5b43
|
||||
sub_448F0<===>a8e79d2c757b3de4c112fa3f321abe7743fc366b
|
||||
sub_45040<===>1533df5e955bac2a8693e31e5ef7b23b1e03c079
|
||||
sub_453D0<===>1a2333f5fdece8676a67de9cdc5ae96b94afcb55
|
||||
sub_45490<===>441b796a176744e3124f0aed0ab6395890c95380
|
||||
sub_45630<===>545de494bdeec48154f6a3417d6dd52dcdc6c380
|
||||
sub_45740<===>797bb567de4bb73c7c827d7f0de39bb4be902c4e
|
||||
callback<===>2015da01d672a15149f23fccfc045f3429a6c61c
|
||||
sub_45EF0<===>7992ab57ef4737c9658c3479bcbe5bd9ce6e9e94
|
||||
sub_466E0<===>bcc99e85edebcc6ac7a46466a1fb97d3b077287e
|
||||
core::ptr::drop_in_place<panic_unwind::real_imp::Exception><===>403470915d910c874d89f931b9aad83ee6d51ff4
|
||||
core::ptr::drop_in_place<alloc::boxed::Box<panic_unwind::real_imp::Exception>><===>909b780a819f578b45628971f81999c951e4666d
|
||||
__rust_panic_cleanup<===>3369c5c2e6b06749f20fcce9365f850982b9b0d8
|
||||
sub_46900<===>e622ebc52c0dc21d02e77e034980caaa247fb645
|
||||
sub_469B0<===>2b61a4415c3c4f6d2420bd173402a8bea8274008
|
||||
sub_469D0<===>77e8dea1615fabaee92dea90f14456e273455c96
|
||||
sub_46D9F<===>481c497d4941d5b2746ffdf3628993c2e4b06871
|
||||
sub_46E03<===>9599023ae75bc431f5a24d30c4ac6e74d7805fc6
|
||||
sub_46F2D<===>6666d53520b22972119ee5f6b0ef1edabf4b5192
|
||||
sub_47106<===>ac1e7af9e5e1977675dbd3be644036d25d69cc43
|
||||
sub_47186<===>59430fade247f61b91017e11bf931d9bb9779ff0
|
||||
sub_471FE<===>623c9f85f8280744606820b2617f126dff9f4df7
|
||||
alloc::collections::btree::map::entry::VacantEntry<K,V,A>::insert_entry<===>cd4e5b3b4619031a9b03a737822453b23e9b96c7
|
||||
sub_4736F<===>6bcd9ae425222ffe62ffeec0ea3675aa91cf4a46
|
||||
sub_4740D<===>3fd559cbae040c42f91f5a2ec69b7f098ecd8e67
|
||||
sub_474D2<===>9c316810bc6fd122d3e327661f0584ef8ececc8d
|
||||
alloc::collections::btree::node::Handle<alloc::collections::btree::node::NodeRef<alloc::collections::btree::node::marker::Mut,K,V,alloc::collections::btree::node::marker::Leaf>,alloc::collections::btree::node::marker::KV>::split<===>36bb326e9f3cabe84f5af8e2a27fa8a22e1048d7
|
||||
alloc::collections::btree::node::Handle<alloc::collections::btree::node::NodeRef<alloc::collections::btree::node::marker::Mut,K,V,alloc::collections::btree::node::marker::Leaf>,alloc::collections::btree::node::marker::Edge>::insert_fit<===>f5617b316dfab365aff09ae3aafe5386a03206cd
|
||||
sub_477BC<===>5dcb1238debfd9ebda65b6b6a3bda54bb6417a95
|
||||
sub_47A25<===>7fbc00e48ca162ae758a7004fba390e640bf5c4a
|
||||
alloc::collections::btree::node::Handle<alloc::collections::btree::node::NodeRef<alloc::collections::btree::node::marker::Mut,K,V,alloc::collections::btree::node::marker::Internal>,alloc::collections::btree::node::marker::KV>::split<===>44871edae9c883ee4c7cf918a8e560143889534e
|
||||
sub_47D39<===>cd102d0bbd7ce187899cbd39fdf0b6aa04f665ff
|
||||
sub_47E88<===>fa487685ffb09921daa4f05b87890b85522f9613
|
||||
sub_47FFD<===>023f8a1220c74f85498818a223702a000ef1285b
|
||||
sub_4802E<===>063fe14e551ac93ed2b47f0d4a831aaf11a30b46
|
||||
alloc::raw_vec::RawVec<T,A>::grow_one<===>f557fc963ab1935a17a93c10bb3b2df605c1b20d
|
||||
alloc::raw_vec::RawVec<T,A>::grow_one<===>aecd9e2fe8f9b74ce8d31ebd232a24444a42e8df
|
||||
sub_480ED<===>65d848c2b16888f0887e3ea844504975971c845b
|
||||
sub_48133<===>c020b97cc18369817bbc2e3b8116c8ce915ef846
|
||||
sub_48226<===>72a1faf99f4eb19342932f23ca435531b93dc0b4
|
||||
nullsub_3<===>930d656a772e361b7dd344b33b224e988760f175
|
||||
<[A] as core::slice::cmp::SlicePartialEq<B>>::equal<===>b222357d1084a928f74875e23d6b081ec77dd1be
|
||||
sub_48304<===>bb18e71a62fb8654f2dd99283c512e582a6ddb88
|
||||
sub_48314<===>2c7beb42ee1cca7b06ac6b7b4d889e9d9d865b28
|
||||
sub_48415<===>bc37c477ce157ebc277c43599814b831f3a191f2
|
||||
sub_484A0<===>d619f49f2f59624ce71e1520b555bb4122740e46
|
||||
sub_4860A<===>f311b40f2955ed2f0d45dc2e9dcb7508dcb4cdbd
|
||||
sub_48646<===>f20ec98844c31e2e3adbae765a2eba2cf1018712
|
||||
sub_48954<===>46b6edc412edce5027cacb1669257c073e4c3b24
|
||||
sub_48967<===>efc34414be3dedefd84e78b7abf14aeff496bed9
|
||||
sub_4898B<===>bc29c25cf699bda682d6ec8265443ec380a9b654
|
||||
sub_489B6<===>e79f637ffba4ad5737dc99b89f98439ebb37dc88
|
||||
sub_489BF<===>b9a669ed43ed8d39788b2f75891ff4e449a6941f
|
||||
sub_489D4<===>33cef691d836163ff14f99edab76f372e47eb473
|
||||
sub_48A41<===>bb8a93a0c5ddfa82e5266e7f941f7caf76837cec
|
||||
sub_48AFB<===>28738f684dd77991e66276dccb696cc97e8a4d49
|
||||
sub_48B0B<===>821e5c28d3d151d5753ca0f7155c3c8e674b677b
|
||||
sub_48B81<===>00e86ef70cae6f98e80201933f5e2a49199690cc
|
||||
sub_48CCF<===>64fd98e5ae6082ee22b5510c56153a612ba8459e
|
||||
sub_48D8D<===>31c511701a55b605a56093b795838d69864bd14a
|
||||
sub_48DA0<===>49e85a15cea429c3042c0edee8c802d30c7dc3c7
|
||||
sub_48DB5<===>5156263c799154aedf819f3f1491f07b7914d765
|
||||
sub_48DFA<===>e44aef4cafd3367ad1de8ad8330ac82330d584cd
|
||||
sub_49163<===>577f027762e8f381d59b06f9b2f6da41e5cdd6ba
|
||||
sub_49178<===>1de5abddef6f0b3f5ef2c6299dbd6f6063cbc10e
|
||||
sub_49C43<===>defc48fca10b559e0067364c079adcf68ce72eea
|
||||
sub_4A04F<===>c0c360eef33376dce0a5aa80ef9350099db5cf21
|
||||
sub_4A14D<===>1f1bf245552cdac92ca1dbba20ba433bfa900ea2
|
||||
sub_4A178<===>29404eef9ba8c4873efc9f23c92d5a58be050bee
|
||||
sub_4A217<===>4219e7aef78812dae444c28cca6aa6ed622fb8e1
|
||||
sub_4A2B9<===>c5f3e00d989865724309d862ba3b2c28d8797abf
|
||||
sub_4A32D<===>9e404aba8222b06abf75580fca6f64da1d8b3ce2
|
||||
sub_4A37C<===>69173d031f46733ee35003534d9ba7e5dd2879d3
|
||||
sub_4A3FA<===>13511f95b084b76b0e144266dc9d4260a2aa5aa5
|
||||
rustc_demangle::v0::Printer::skipping_printing<===>d67b087a06082383ff476392147914ba345a0287
|
||||
sub_4A61D<===>80d086cea5676e46a7c9b6586064cb52054cc7cc
|
||||
sub_4A70B<===>304687cf2727119cf56250bc018b557f6c1d7232
|
||||
sub_4A7EC<===>264c430be34a9097822058b84a56aeb467789790
|
||||
sub_4A8DA<===>ff81f230c94a9b2de4e4ad1153d3faba5ed70c14
|
||||
sub_4AA73<===>34081cfa8ae8316bdab020fe1761658219bc3664
|
||||
sub_4AB64<===>4f8791dccbc6c090b9856962c2c7019be37ffe15
|
||||
sub_4ACE7<===>df2880ad99c1d17fe94dceb899f33a30ff10835f
|
||||
sub_4AE65<===>2b59b0ab978d8d20f1227287f2800ca054a53083
|
||||
sub_4B036<===>16db6701ad95f26b60a12a775702bee371e28029
|
||||
sub_4B17A<===>031d4e2247227e411b4fb9fdb6106e335dcfb6dc
|
||||
sub_4B211<===>d8e0d3a6bf458c54510e0ec25c84fb4c16f9f463
|
||||
sub_4B2AE<===>ab06ac95ca4862f4d8fc27f39135d2d71334b875
|
||||
sub_4B350<===>6cfd6fe5fef6c362a6a590890c92cca7bd129ee2
|
||||
sub_4B574<===>4668231149e3b4f60b424272f7033e88aa35cdd7
|
||||
sub_4BC54<===>954b3a18ab6a0c3915d8ff859ec6b60b59af275a
|
||||
sub_4C158<===>b686323dc031c7fb33d67cb57f7fe6acb6f2ce08
|
||||
sub_4C4E4<===>28a426edd96a30feabdea02428f3df493c0088ed
|
||||
sub_4C62B<===>8b8d9e9c24ee603887768a32e6c9bfcf45313bbb
|
||||
sub_4CC9F<===>d0d4c39c9228dd006119a59fc5c505942375e0dc
|
||||
sub_4CE08<===>df5c5b80c66578a24ac2b7ade9f2fd5724fafc87
|
||||
sub_4D119<===>312ae6cbe8cb5b3bbf2df716c065c226994600a1
|
||||
sub_4DC62<===>441d1dcc3f4d9bed71445fd42180629d65b88952
|
||||
sub_4DCFA<===>b6fa972c8cb6e0c3bd461b060ea40dfaef1efa8a
|
||||
sub_4DD1F<===>9bcb91053ab3d80c433a31b7e0cb840426e53522
|
||||
sub_4DE5F<===>32a2bf99afa7362994c3110582ad49f4684111ab
|
||||
sub_4DE74<===>632305f0f2a26609666e97ec2467c15a9903441b
|
||||
sub_4DEF2<===>8a2284faf9fda692d227b20b30cfe664ce0630ec
|
||||
sub_4DF3D<===>b0ebdcf3cbba7244072d568ee533af433cb7ff30
|
||||
sub_4E392<===>db23faf172d06925cf225e168828ac98f9cea0b1
|
||||
sub_4E7CC<===>056a1d62cd8e39152c59c1418a893ac54a30d85c
|
||||
sub_4E99B<===>4888411d3b577ace577b25ea36e1ba1bcf3dc6ea
|
||||
sub_503E0<===>e7114a73184aae9980b8fb8dcbd729f86efe1955
|
||||
sub_507D0<===>760aeb2e905c217263841ce1097570c31c733661
|
||||
sub_50800<===>c62242dc445db37f645a7973fc14642f0861a9de
|
||||
sub_50820<===>6d5706a6092d7100ad64ec2d1697b669ae230b07
|
||||
sub_508C0<===>57ab5159ad60ba0490bfe371491ef00b1a2a3db3
|
||||
sub_508D0<===>67c966660c3e058e7c93e6ec4a2e803f8db48be3
|
||||
sub_508F0<===>09e306eb5ff252b42e8eb1a4c88d8e4789bee70c
|
||||
sub_50910<===>e4c915dc0ccae1bfb114af9a7f75b5cd2f3f2ad0
|
||||
sub_50A50<===>f6405dc62fa02dc528b5a31404659405ff998ec7
|
||||
sub_50B80<===>ada19be7850e55633e7a64477711ec320a94b3f0
|
||||
sub_50BA0<===>64b491da0d340a77cb63b6f913ea50ff27121cab
|
||||
sub_50C20<===>1c2fb379fb3e1bd11fdf05a5db1bb99446433401
|
||||
sub_50C40<===>ce87dad4ada64eae17e99e704db2a0721759598a
|
||||
sub_50DE0<===>1237f7ccad03083ddc81f3b1fbfc388187211ff4
|
||||
sub_51040<===>630d140a819f3bd3cb64e2e30cbcb7686b6acaa3
|
||||
sub_51110<===>4ec787c4c1e0d72addc6d1a70756ffdf870b3659
|
||||
sub_511C0<===>5015ad0bb3dc0c5b6c8b63dd534f3f917e902a8f
|
||||
sub_511D0<===>8a806e5b8fa75fac61684bc65c9548d222b32866
|
||||
sub_51260<===>d96c901ede404804c58c872e557bff86b349ad62
|
||||
sub_51310<===>54c641a430608b25e6ed4d5935050696618b2b80
|
||||
sub_51370<===>6855c0deeb9a46c3ba1794a71dc21436d0af21e5
|
||||
sub_51490<===>023b9c4a58385c37b09ea4c0b8b04f8e4984de49
|
||||
sub_51670<===>6b36de5d0414571d58a58a5c0a4ad30a49ef366b
|
||||
sub_51690<===>b0add5d4f35ecd7cf1592646b3bb7ec9777caaf0
|
||||
sub_518C0<===>fe0a239bd82313a98403f133bca541724ba6e5f3
|
||||
sub_519F0<===>0328254a9eee1fe97eb1d75e3b796026dd3fe05f
|
||||
sub_51A10<===>7bd8da7719d3bdbc313a7d06a31ed48777edd34a
|
||||
sub_51C70<===>25f438fcf2b9d50972054ef94fb1c08849bcf208
|
||||
sub_52020<===>cd01d17f372eb666e17f7fd4fe011386f8c46f9a
|
||||
sub_52170<===>d3ddb8eda751b00c489b8d8d420cec08c5c9157f
|
||||
sub_52360<===>33d647c79a6d616d9be31c0002a7ac4d966b37b3
|
||||
sub_52500<===>956c7246780bb199f405d297a90e6d7d2576a52b
|
||||
sub_52690<===>d950ee723cf96084015bf342f910a5b260af118d
|
||||
sub_526B0<===>88a95a4e74771ee490612e6be1f95269b3d40000
|
||||
<core::fmt::builders::PadAdapter as core::fmt::Write>::write_char<===>bbe081e9e104ca9b7ec8e08dff91938680387d2e
|
||||
sub_52980<===>f7bad997655c901f2f811862ddac23b95fd152c5
|
||||
sub_52B10<===>657f99de90360e0606dfd24b67bdf8b0465a38a3
|
||||
sub_52B70<===>2d4bab2f40423560d63c3153341bf687e15ff3ea
|
||||
sub_52CA0<===>f203e72460275d7df703917c58a82b224c8f3263
|
||||
sub_52D30<===>9c3649518be655add32c6cf4d153426904b55ee8
|
||||
sub_52E50<===>a98ba011074ef7259f1520a0bf3ad1142b0f0cc3
|
||||
sub_52E90<===>07cd876d66646154a5461d10d11620602bff1505
|
||||
sub_52EA0<===>25cfedee1fc4faec4718231754d2d035bc2c2a74
|
||||
sub_52EB0<===>7a9b17a1e7873981a6753fa0a81e5f77a3a23988
|
||||
sub_530C0<===>d1ed4403cf682dd4a247bd33eb87978a7b984a19
|
||||
core::fmt::Formatter::pad_integral::write_prefix<===>4577365eddb991fc4a1c5adf985b20cee6b48cae
|
||||
core::fmt::Formatter::pad<===>a436102399ca4ac418c922ff3597054bf0c3e90d
|
||||
sub_53A70<===>84b265de82ca5ecb7bd312994115b57738509ff0
|
||||
sub_53A80<===>438420e18764d45c2031370407db9c5c0c9fac4a
|
||||
sub_53AC0<===>d3f589ae3de45a88e80fcfb4273f62a3f2468435
|
||||
sub_53B70<===>09768d499b6ffc777f02d3f74ff156399355e566
|
||||
sub_53C40<===>9f32add8f3bbddc0cde5923637ad90824b492e9c
|
||||
sub_53C90<===>4295b3664429f2d9051e9a3f6dc5803154ab69dc
|
||||
sub_53DD0<===>3f8dd19634664a9046e61280a2fd4fe18fc8b7e3
|
||||
sub_53E10<===>6bd227e4de0717f528fae5db6eba34dffb0673c1
|
||||
sub_53E20<===>f0c96e2a7ecdb8861fdce1ffe1e081de02dfb610
|
||||
sub_541A0<===>0cdbe62d27ad42546c9a414f7f66cb827bc7084d
|
||||
sub_541C0<===>3d24e23a882f5200daf101a9b1d67be08668091e
|
||||
sub_54260<===>1082f6701bd90360396f3660eb51f28d830c290e
|
||||
sub_54330<===>94acb7202eb5ba0540f9f3cdc117a799735e1f17
|
||||
sub_543F0<===>c79b3f705f7bc5aee36c9196b34252eb3de05572
|
||||
core::slice::memchr::memrchr<===>cecd4ad8f1dd97694b7b271432761597ed8cc671
|
||||
sub_54610<===>4350ea137bfa31d65db857b2380fab9ab64e432d
|
||||
sub_54640<===>bd992cb8c13e5b228cdf95a9ef21fcc4bd526739
|
||||
sub_54840<===>a43c409e02cec042eb1091bf70c1abb6771580f1
|
||||
sub_54ED0<===>a8e5cec883fae48c7eb0ff365557c9c8d3a160ab
|
||||
sub_54F90<===>236161c400190b3ee046f4ced70ac629636894f5
|
||||
sub_554E0<===>22b6685fc124156f4ece88acdf6710f2a7aadfcd
|
||||
sub_55910<===>3d81f2c311f373ac1ffff1682fd9e6553c606519
|
||||
sub_55AA0<===>b16f02542debf98ed0f904ba3d84cccbc5731866
|
||||
sub_55E80<===>91c4c15bd7802727a34e33e9d6add0a7b8775f4c
|
||||
sub_55FA0<===>a5ff037ace8da92ca5e6d279d844a62456c4e6ad
|
||||
core::fmt::num::<impl core::fmt::LowerHex for u8>::fmt<===>ee4b17ea6da659c44dab33df16f51cdc61146bdb
|
||||
core::fmt::num::<impl core::fmt::UpperHex for u8>::fmt<===>fb8acb41c3efcc600aa30110e9af8e43073fbd44
|
||||
core::fmt::num::<impl core::fmt::LowerHex for u16>::fmt<===>d9daa3c4f40eea12bd4de630804cc879119a73c8
|
||||
core::fmt::num::<impl core::fmt::LowerHex for u32>::fmt<===>2dfca82ed3eaf3ce55a6a7bc1cff32d298baeb33
|
||||
core::fmt::num::<impl core::fmt::UpperHex for u32>::fmt<===>98796450bc7cdc184898f283929e848bcc50233b
|
||||
core::fmt::num::<impl core::fmt::LowerHex for usize>::fmt<===>49e2f4ea7339392e8283c7168a04a0b58e92ba7e
|
||||
core::fmt::num::<impl core::fmt::UpperHex for usize>::fmt<===>cace9fcbdd8fae62fd77da5d0e615718222793c3
|
||||
sub_56440<===>611bda66dbc35a6ed65ad59405bab2e242037538
|
||||
sub_564E0<===>84de3ee1d42eef1bfbe06fc0446924c222b81a4e
|
||||
sub_565F0<===>534f0aae5dabb40b889c6a901d0ad2149bb44057
|
||||
sub_56710<===>a7da8880fd61b1fb88df3df9d5b9efd0b9322dba
|
||||
sub_56820<===>43a1d0c84803aafc6e9bf8a969494a5505d6c0d5
|
||||
sub_56950<===>1cf9e32f40d8f9a11a86e0700d837040bc2f93cd
|
||||
sub_56960<===>91fc0b7ebbc901b76c2ac2c2a6671be7b7cccf40
|
||||
sub_56A40<===>8fc66619cd06e6b9d44f148a05e286cc89fdd005
|
||||
sub_56A60<===>d9767a59cffc7e393ec1ad801fc6744344f87370
|
||||
sub_56A80<===>4eefcfe2a556e404f35c3a09277469120d7888f1
|
||||
.term_proc<===>5fdd6ffc527268e88563f60499fea977479ec682
|
||||
getenv<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
dl_iterate_phdr<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__imp_free<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
recv<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pidfd_spawnp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawn_file_actions_init<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__libc_start_main<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
abort<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_Backtrace<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__errno_location<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__res_init<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_setpgroup<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_exit<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
chroot<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sendmsg<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
writev<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_getattr_np<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sigaction<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__cxa_thread_atexit_impl<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__xpg_strerror_r<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
readlink<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
fcntl<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetRegionStart<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_destroy<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
write<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
getpid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetTextRelBase<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_RaiseException<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawn_file_actions_destroy<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
strlen<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
chdir<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
dup2<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
stat64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
send<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
gai_strerror<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_key_create<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
memset<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
ioctl<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
getcwd<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetIPInfo<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
close<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
setgroups<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetLanguageSpecificData<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_key_delete<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
read<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
memcmp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__tls_get_addr<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_init<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
calloc<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
signal<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
syscall<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sigemptyset<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_attr_getstack<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
realpath<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
memcpy<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
socketpair<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pidfd_getpid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetIP<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_attr_getguardsize<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
mmap64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pause<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
malloc<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
bcmp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
ptrace<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
realloc<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
munmap<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
recvmsg<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
getauxval<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_setsigdefault<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
statx<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetDataRelBase<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
gnu_get_libc_version<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
poll<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_SetGR<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
open64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
memmove<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_self<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
setgid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
waitpid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
mprotect<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sysconf<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_attr_destroy<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
execvp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
setpgid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pipe2<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_setflags<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
exit<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
connect<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
lseek64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
fstat64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_memalign<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
setuid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_DeleteException<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawn_file_actions_adddup2<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
getaddrinfo<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sigaltstack<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_Resume<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
waitid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawn_file_actions_addchdir_np<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__cxa_finalize<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sigaddset<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
fork<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_setspecific<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_SetIP<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
freeaddrinfo<===>5f2a01414cd5aa75c672523f836fcd95f7dea09e
|
||||
socket<===>b082df749cf765800d7fdafdafc2c1b819e24b48
|
||||
__gmon_start__<===>2a1f5993928c1b1cc260b95fa0dfa81e44574d69
|
||||
42
2025/glacier/rev/c2/ida_script.py
Normal file
42
2025/glacier/rev/c2/ida_script.py
Normal file
@@ -0,0 +1,42 @@
|
||||
import idc
|
||||
import idaapi
|
||||
import sys
|
||||
|
||||
def main():
|
||||
# 1. Get the effective address (EA) of the current cursor position.
|
||||
ea = idaapi.get_screen_ea()
|
||||
|
||||
if ea == idaapi.BADADDR:
|
||||
print("[-] Error: Could not get current effective address.")
|
||||
return
|
||||
|
||||
# 2. Read the value at the effective address.
|
||||
# We will try to read a 4-byte (DWORD) value as a common default.
|
||||
# You might need to adjust the size (e.g., idc.get_qword for 8 bytes, idc.get_byte for 1 byte)
|
||||
# depending on what you are highlighting.
|
||||
try:
|
||||
# Use get_wide_dword to read 4 bytes (DWORD).
|
||||
# Note: If you highlight an immediate value, you might need more complex logic
|
||||
# (like analyzing the instruction's operand) to get the value directly.
|
||||
# This approach assumes you are highlighting the address of the variable's value in memory.
|
||||
value = idc.get_wide_dword(ea)
|
||||
except Exception as e:
|
||||
print(f"[-] Error reading memory at 0x{ea:X}: {e}")
|
||||
return
|
||||
|
||||
# 3. Format the value as a hexadecimal string.
|
||||
# The 'X' format specifier produces a hexadecimal string (e.g., 'DEADBEEF').
|
||||
# The '0' fills with leading zeros up to the required width (8 for DWORD).
|
||||
hex_string = f"{value:08X}"
|
||||
|
||||
# 4. Print the output in the format you requested:
|
||||
# "Passing value as hex string: DEADBEEF"
|
||||
print(f"[+] Effective Address: 0x{ea:X}")
|
||||
print(f"[+] Extracted Value (4-bytes): 0x{value:X}")
|
||||
print(f"[+] Passing value as hex string: {hex_string}")
|
||||
|
||||
if __name__ == "__main__":
|
||||
# Ensure the environment is set up for IDAPython execution
|
||||
print("--- Running Script to Get Highlighted Value ---")
|
||||
main()
|
||||
print("--- Script Finished ---")
|
||||
6
2025/glacier/rev/c2/main.py
Normal file
6
2025/glacier/rev/c2/main.py
Normal file
@@ -0,0 +1,6 @@
|
||||
def main():
|
||||
print("Hello from c2!")
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
16
2025/glacier/rev/c2/network_captures/1
Normal file
16
2025/glacier/rev/c2/network_captures/1
Normal file
@@ -0,0 +1,16 @@
|
||||
00000000 43 42 01 00 00 0c 63 61 74 6f 40 75 6e 6b 6e 6f CB....ca to@unkno
|
||||
00000010 77 6e 00 31 wn.1
|
||||
00000000 43 42 05 00 00 38 41 43 4b 3a 20 43 6c 69 65 6e CB...8AC K: Clien
|
||||
00000010 74 20 27 63 61 74 6f 40 75 6e 6b 6e 6f 77 6e 27 t 'cato@ unknown'
|
||||
00000020 20 72 65 67 69 73 74 65 72 65 64 2e 0a 46 49 4c registe red..FIL
|
||||
00000030 45 4e 41 4d 45 3a 66 6c 61 67 2e 74 78 74 00 16 ENAME:fl ag.txt..
|
||||
00000014 43 42 06 00 00 09 66 6c 61 67 2e 74 78 74 00 00 CB....fl ag.txt..
|
||||
00000024 5a Z
|
||||
00000040 43 42 07 00 00 14 99 90 9c 9d d5 8c 81 82 91 98 CB...... ........
|
||||
00000050 94 95 dd 84 89 9a 00 01 03 a0 00 b2 ........ ....
|
||||
00000025 43 42 05 00 00 0a 43 52 59 50 54 4f 5f 41 43 4b CB....CR YPTO_ACK
|
||||
00000035 00 15 ..
|
||||
0000005C 43 42 05 00 00 02 4f 4b 00 04 CB....OK ..
|
||||
00000037 43 42 ff 00 00 00 00 00 CB......
|
||||
00000066 43 6c 69 65 6e 74 20 64 69 73 63 6f 6e 6e 65 63 Client d isconnec
|
||||
00000076 74 69 6e 67 0a ting.
|
||||
16
2025/glacier/rev/c2/network_captures/2
Normal file
16
2025/glacier/rev/c2/network_captures/2
Normal file
@@ -0,0 +1,16 @@
|
||||
00000000 43 42 01 00 00 0c 63 61 74 6f 40 75 6e 6b 6e 6f CB....ca to@unkno
|
||||
00000010 77 6e 00 31 wn.1
|
||||
00000000 43 42 05 00 00 38 41 43 4b 3a 20 43 6c 69 65 6e CB...8AC K: Clien
|
||||
00000010 74 20 27 63 61 74 6f 40 75 6e 6b 6e 6f 77 6e 27 t 'cato@ unknown'
|
||||
00000020 20 72 65 67 69 73 74 65 72 65 64 2e 0a 46 49 4c registe red..FIL
|
||||
00000030 45 4e 41 4d 45 3a 66 6c 61 67 2e 74 78 74 00 16 ENAME:fl ag.txt..
|
||||
00000014 43 42 06 00 00 09 66 6c 61 67 2e 74 78 74 00 00 CB....fl ag.txt..
|
||||
00000024 5a Z
|
||||
00000040 43 42 07 00 00 14 99 90 9c 9d d5 8c 81 82 91 98 CB...... ........
|
||||
00000050 94 95 dd 84 89 9a 00 00 e9 89 00 70 ........ ...p
|
||||
00000025 43 42 05 00 00 0a 43 52 59 50 54 4f 5f 41 43 4b CB....CR YPTO_ACK
|
||||
00000035 00 15 ..
|
||||
0000005C 43 42 05 00 00 02 4f 4b 00 04 CB....OK ..
|
||||
00000037 43 42 ff 00 00 00 00 00 CB......
|
||||
00000066 43 6c 69 65 6e 74 20 64 69 73 63 6f 6e 6e 65 63 Client d isconnec
|
||||
00000076 74 69 6e 67 0a ting.
|
||||
16
2025/glacier/rev/c2/network_captures/3
Normal file
16
2025/glacier/rev/c2/network_captures/3
Normal file
@@ -0,0 +1,16 @@
|
||||
00000000 43 42 01 00 00 0c 63 61 74 6f 40 75 6e 6b 6e 6f CB....ca to@unkno
|
||||
00000010 77 6e 00 31 wn.1
|
||||
00000000 43 42 05 00 00 38 41 43 4b 3a 20 43 6c 69 65 6e CB...8AC K: Clien
|
||||
00000010 74 20 27 63 61 74 6f 40 75 6e 6b 6e 6f 77 6e 27 t 'cato@ unknown'
|
||||
00000020 20 72 65 67 69 73 74 65 72 65 64 2e 0a 46 49 4c registe red..FIL
|
||||
00000030 45 4e 41 4d 45 3a 66 6c 61 67 2e 74 78 74 00 16 ENAME:fl ag.txt..
|
||||
00000014 43 42 06 00 00 09 66 6c 61 67 2e 74 78 74 00 00 CB....fl ag.txt..
|
||||
00000024 5a Z
|
||||
00000040 43 42 07 00 00 14 99 90 9c 9d d5 8c 81 82 91 98 CB...... ........
|
||||
00000050 94 95 dd 84 89 9a 00 00 96 5d 00 db ........ .]..
|
||||
00000025 43 42 05 00 00 0a 43 52 59 50 54 4f 5f 41 43 4b CB....CR YPTO_ACK
|
||||
00000035 00 15 ..
|
||||
0000005C 43 42 05 00 00 02 4f 4b 00 04 CB....OK ..
|
||||
00000037 43 42 ff 00 00 00 00 00 CB......
|
||||
00000066 43 6c 69 65 6e 74 20 64 69 73 63 6f 6e 6e 65 63 Client d isconnec
|
||||
00000076 74 69 6e 67 0a ting.
|
||||
16
2025/glacier/rev/c2/network_captures/4
Normal file
16
2025/glacier/rev/c2/network_captures/4
Normal file
@@ -0,0 +1,16 @@
|
||||
00000000 43 42 01 00 00 0c 63 61 74 6f 40 75 6e 6b 6e 6f CB....ca to@unkno
|
||||
00000010 77 6e 00 31 wn.1
|
||||
00000000 43 42 05 00 00 38 41 43 4b 3a 20 43 6c 69 65 6e CB...8AC K: Clien
|
||||
00000010 74 20 27 63 61 74 6f 40 75 6e 6b 6e 6f 77 6e 27 t 'cato@ unknown'
|
||||
00000020 20 72 65 67 69 73 74 65 72 65 64 2e 0a 46 49 4c registe red..FIL
|
||||
00000030 45 4e 41 4d 45 3a 66 6c 61 67 2e 74 78 74 00 16 ENAME:fl ag.txt..
|
||||
00000014 43 42 06 00 00 09 66 6c 61 67 2e 74 78 74 00 00 CB....fl ag.txt..
|
||||
00000024 5a Z
|
||||
00000040 43 42 07 00 00 14 99 90 9c 9d d5 8c 81 82 91 98 CB...... ........
|
||||
00000050 94 95 dd 84 89 9a 00 00 12 27 00 25 ........ .'.%
|
||||
00000025 43 42 05 00 00 0a 43 52 59 50 54 4f 5f 41 43 4b CB....CR YPTO_ACK
|
||||
00000035 00 15 ..
|
||||
0000005C 43 42 05 00 00 02 4f 4b 00 04 CB....OK ..
|
||||
00000037 43 42 ff 00 00 00 00 00 CB......
|
||||
00000066 43 6c 69 65 6e 74 20 64 69 73 63 6f 6e 6e 65 63 Client d isconnec
|
||||
00000076 74 69 6e 67 0a ting.
|
||||
2
2025/glacier/rev/c2/output/85454_bb7cdd2e104c3410.enc
Normal file
2
2025/glacier/rev/c2/output/85454_bb7cdd2e104c3410.enc
Normal file
@@ -0,0 +1,2 @@
|
||||
|庑'W
|
||||
<EFBFBD>r<>0<EFBFBD>K<EFBFBD><4B><EFBFBD>Ǽ<EFBFBD>tNpخ<70><D8AE><EFBFBD><06><>7<EFBFBD>5<><11>1<13><><EFBFBD><EFBFBD><EFBFBD><08>&<26><><EFBFBD><EFBFBD>
|
||||
1
2025/glacier/rev/c2/output/flag.txt
Normal file
1
2025/glacier/rev/c2/output/flag.txt
Normal file
@@ -0,0 +1 @@
|
||||
FLAG{This is a test flag for educational purposes}
|
||||
208
2025/glacier/rev/c2/output_strace
Normal file
208
2025/glacier/rev/c2/output_strace
Normal file
@@ -0,0 +1,208 @@
|
||||
execve("./c2_client", ["./c2_client", "challs.glacierctf.com:13392"], 0x7ffec0bcc568 /* 82 vars */) = 0
|
||||
brk(NULL) = 0x56381f8d9000
|
||||
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
|
||||
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=188279, ...}) = 0
|
||||
mmap(NULL, 188279, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbaeac10000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=905800, ...}) = 0
|
||||
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaeac0e000
|
||||
mmap(NULL, 180712, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaeabe1000
|
||||
mmap(0x7fbaeabe5000, 143360, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fbaeabe5000
|
||||
mmap(0x7fbaeac08000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x27000) = 0x7fbaeac08000
|
||||
mmap(0x7fbaeac0c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2a000) = 0x7fbaeac0c000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360w\2\0\0\0\0\0"..., 832) = 832
|
||||
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 896, 64) = 896
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=2145632, ...}) = 0
|
||||
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 896, 64) = 896
|
||||
mmap(NULL, 2169904, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaea800000
|
||||
mmap(0x7fbaea824000, 1511424, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7fbaea824000
|
||||
mmap(0x7fbaea995000, 454656, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x195000) = 0x7fbaea995000
|
||||
mmap(0x7fbaeaa04000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x203000) = 0x7fbaeaa04000
|
||||
mmap(0x7fbaeaa0a000, 31792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbaeaa0a000
|
||||
close(3) = 0
|
||||
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaeabde000
|
||||
arch_prctl(ARCH_SET_FS, 0x7fbaeabde780) = 0
|
||||
set_tid_address(0x7fbaeabdea50) = 79924
|
||||
set_robust_list(0x7fbaeabdea60, 24) = 0
|
||||
rseq(0x7fbaeabde680, 0x20, 0, 0x53053053) = 0
|
||||
mprotect(0x7fbaeaa04000, 16384, PROT_READ) = 0
|
||||
mprotect(0x7fbaeac0c000, 4096, PROT_READ) = 0
|
||||
mprotect(0x5637f9ef2000, 20480, PROT_READ) = 0
|
||||
mprotect(0x7fbaeac7f000, 8192, PROT_READ) = 0
|
||||
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
|
||||
getrandom("\xb5\x7c\x0e\xd9\x6a\xe0\x43\x77", 8, GRND_NONBLOCK) = 8
|
||||
munmap(0x7fbaeac10000, 188279) = 0
|
||||
poll([{fd=0, events=0}, {fd=1, events=0}, {fd=2, events=0}], 3, 0) = 0 (Timeout)
|
||||
rt_sigaction(SIGPIPE, {sa_handler=SIG_IGN, sa_mask=[PIPE], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fbaea83e4d0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
|
||||
brk(NULL) = 0x56381f8d9000
|
||||
brk(0x56381f8fa000) = 0x56381f8fa000
|
||||
openat(AT_FDCWD, "/proc/self/maps", O_RDONLY|O_CLOEXEC) = 3
|
||||
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
|
||||
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
|
||||
read(3, "5637f9e82000-5637f9ed9000 r-xp 0"..., 1024) = 1024
|
||||
read(3, "-7fbaeaa12000 rw-p 00000000 00:0"..., 1024) = 1024
|
||||
read(3, " /usr/lib/ld-linux-"..., 1024) = 567
|
||||
lseek(3, 0, SEEK_CUR) = 2615
|
||||
lseek(3, 2531, SEEK_SET) = 2531
|
||||
close(3) = 0
|
||||
sched_getaffinity(79924, 32, [0 1 2 3 4 5 6 7]) = 8
|
||||
rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
|
||||
sigaltstack(NULL, {ss_sp=NULL, ss_flags=SS_DISABLE, ss_size=0}) = 0
|
||||
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbaeac3b000
|
||||
mprotect(0x7fbaeac3b000, 4096, PROT_NONE) = 0
|
||||
sigaltstack({ss_sp=0x7fbaeac3c000, ss_flags=0, ss_size=8192}, NULL) = 0
|
||||
rt_sigaction(SIGSEGV, {sa_handler=0x5637f9eb8900, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_SIGINFO, sa_restorer=0x7fbaea83e4d0}, NULL, 8) = 0
|
||||
rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
|
||||
rt_sigaction(SIGBUS, {sa_handler=0x5637f9eb8900, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_SIGINFO, sa_restorer=0x7fbaea83e4d0}, NULL, 8) = 0
|
||||
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=359, ...}, 0) = 0
|
||||
newfstatat(AT_FDCWD, "/", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
|
||||
openat(AT_FDCWD, "/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=359, ...}) = 0
|
||||
read(3, "# Name Service Switch configurat"..., 4096) = 359
|
||||
read(3, "", 4096) = 0
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=359, ...}) = 0
|
||||
close(3) = 0
|
||||
newfstatat(AT_FDCWD, "/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=285, ...}, 0) = 0
|
||||
openat(AT_FDCWD, "/etc/host.conf", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=73, ...}) = 0
|
||||
read(3, "# Resolver configuration file.\n#"..., 4096) = 73
|
||||
read(3, "", 4096) = 0
|
||||
close(3) = 0
|
||||
futex(0x7fbaeaa1072c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
|
||||
openat(AT_FDCWD, "/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=285, ...}) = 0
|
||||
read(3, "# Generated by NetworkManager\nse"..., 4096) = 285
|
||||
read(3, "", 4096) = 0
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=285, ...}) = 0
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=188279, ...}) = 0
|
||||
mmap(NULL, 188279, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbaeabb0000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libnss_mymachines.so.2", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=379936, ...}) = 0
|
||||
mmap(NULL, 379896, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaeab53000
|
||||
mmap(0x7fbaeab57000, 266240, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fbaeab57000
|
||||
mmap(0x7fbaeab98000, 81920, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x45000) = 0x7fbaeab98000
|
||||
mmap(0x7fbaeabac000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x59000) = 0x7fbaeabac000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libcap.so.2", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 {\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=43064, ...}) = 0
|
||||
mmap(NULL, 45128, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaeac2f000
|
||||
mmap(0x7fbaeac32000, 20480, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fbaeac32000
|
||||
mmap(0x7fbaeac37000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7fbaeac37000
|
||||
mmap(0x7fbaeac39000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7fbaeac39000
|
||||
close(3) = 0
|
||||
mprotect(0x7fbaeac39000, 4096, PROT_READ) = 0
|
||||
mprotect(0x7fbaeabac000, 12288, PROT_READ) = 0
|
||||
prctl(PR_CAPBSET_READ, CAP_MAC_OVERRIDE) = 1
|
||||
prctl(PR_CAPBSET_READ, 0x30 /* CAP_??? */) = -1 EINVAL (Invalid argument)
|
||||
prctl(PR_CAPBSET_READ, CAP_CHECKPOINT_RESTORE) = 1
|
||||
prctl(PR_CAPBSET_READ, 0x2c /* CAP_??? */) = -1 EINVAL (Invalid argument)
|
||||
prctl(PR_CAPBSET_READ, 0x2a /* CAP_??? */) = -1 EINVAL (Invalid argument)
|
||||
prctl(PR_CAPBSET_READ, 0x29 /* CAP_??? */) = -1 EINVAL (Invalid argument)
|
||||
munmap(0x7fbaeabb0000, 188279) = 0
|
||||
futex(0x7fbaeabaf358, FUTEX_WAKE_PRIVATE, 2147483647) = 0
|
||||
rt_sigprocmask(SIG_BLOCK, [HUP USR1 USR2 PIPE ALRM CHLD TSTP URG VTALRM PROF WINCH IO], [], 8) = 0
|
||||
openat(AT_FDCWD, "/run/systemd/machines/challs.glacierctf.com", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
|
||||
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
|
||||
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=188279, ...}) = 0
|
||||
mmap(NULL, 188279, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbaeabb0000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libnss_resolve.so.2", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=211304, ...}) = 0
|
||||
mmap(NULL, 215400, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaeab1e000
|
||||
mmap(0x7fbaeab21000, 143360, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fbaeab21000
|
||||
mmap(0x7fbaeab44000, 45056, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7fbaeab44000
|
||||
mmap(0x7fbaeab4f000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x30000) = 0x7fbaeab4f000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=1100400, ...}) = 0
|
||||
mmap(NULL, 1102152, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaea6f2000
|
||||
mmap(0x7fbaea701000, 569344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7fbaea701000
|
||||
mmap(0x7fbaea78c000, 466944, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9a000) = 0x7fbaea78c000
|
||||
mmap(0x7fbaea7fe000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10b000) = 0x7fbaea7fe000
|
||||
close(3) = 0
|
||||
mprotect(0x7fbaea7fe000, 4096, PROT_READ) = 0
|
||||
mprotect(0x7fbaeab4f000, 12288, PROT_READ) = 0
|
||||
munmap(0x7fbaeabb0000, 188279) = 0
|
||||
futex(0x7fbaeab520e4, FUTEX_WAKE_PRIVATE, 2147483647) = 0
|
||||
rt_sigprocmask(SIG_BLOCK, [HUP USR1 USR2 PIPE ALRM CHLD TSTP URG VTALRM PROF WINCH IO], [], 8) = 0
|
||||
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
|
||||
connect(3, {sa_family=AF_UNIX, sun_path="/run/systemd/resolve/io.systemd.Resolve"}, 42) = 0
|
||||
sendto(3, "{\"method\":\"io.systemd.Resolve.Re"..., 104, MSG_DONTWAIT|MSG_NOSIGNAL, NULL, 0) = 104
|
||||
mmap(NULL, 135168, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaeabbd000
|
||||
recvfrom(3, 0x7fbaeabbd010, 135152, MSG_DONTWAIT, NULL, NULL) = -1 EAGAIN (Resource temporarily unavailable)
|
||||
ppoll([{fd=3, events=POLLIN}], 1, {tv_sec=119, tv_nsec=999564000}, NULL, 8) = 1 ([{fd=3, revents=POLLIN}], left {tv_sec=119, tv_nsec=974852424})
|
||||
recvfrom(3, "{\"parameters\":{\"addresses\":[{\"if"..., 135152, MSG_DONTWAIT, NULL, NULL) = 130
|
||||
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
|
||||
close(3) = 0
|
||||
munmap(0x7fbaeabbd000, 135168) = 0
|
||||
socket(AF_INET, SOCK_STREAM|SOCK_CLOEXEC, IPPROTO_IP) = 3
|
||||
connect(3, {sa_family=AF_INET, sin_port=htons(13392), sin_addr=inet_addr("34.185.202.132")}, 16) = 0
|
||||
openat(AT_FDCWD, "/dev/null", O_RDONLY|O_CLOEXEC) = 4
|
||||
pipe2([5, 6], O_CLOEXEC) = 0
|
||||
pipe2([7, 8], O_CLOEXEC) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbaeac26000
|
||||
rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
|
||||
clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7fbaeac26000, stack_size=0x9000}, 88) = 79925
|
||||
waitid(P_PID, 79925, NULL, WEXITED, NULL) = 0
|
||||
munmap(0x7fbaeac26000, 36864) = 0
|
||||
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
|
||||
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79925, si_uid=1000, si_status=127, si_utime=0, si_stime=0} ---
|
||||
close(4) = 0
|
||||
close(6) = 0
|
||||
close(8) = 0
|
||||
close(5) = 0
|
||||
close(7) = 0
|
||||
sendto(3, "CB\1\0\0\fcato@unknown\0001", 20, MSG_NOSIGNAL, NULL, 0) = 20
|
||||
recvfrom(3, "CB\5\0\08ACK: Client 'cato@unknown'"..., 4096, 0, NULL, NULL) = 64
|
||||
openat(AT_FDCWD, "/proc/self/status", O_RDONLY|O_CLOEXEC) = 4
|
||||
statx(4, "", AT_STATX_SYNC_AS_STAT|AT_EMPTY_PATH, STATX_ALL, {stx_mask=STATX_BASIC_STATS|STATX_MNT_ID, stx_attributes=0, stx_mode=S_IFREG|0444, stx_size=0, ...}) = 0
|
||||
read(4, "Name:\tc2_client\nUmask:\t0022\nStat", 32) = 32
|
||||
read(4, "e:\tR (running)\nTgid:\t79924\nNgid:", 32) = 32
|
||||
read(4, "\t0\nPid:\t79924\nPPid:\t79922\nTracer"..., 64) = 64
|
||||
read(4, "000\nGid:\t1000\t1000\t1000\t1000\nFDS"..., 128) = 128
|
||||
read(4, "79175\nKthread:\t0\nVmPeak:\t 524"..., 256) = 256
|
||||
read(4, "mLib:\t 2768 kB\nVmPTE:\t 5"..., 512) = 512
|
||||
read(4, "lationIndirectBranch:\tconditiona"..., 1024) = 515
|
||||
read(4, "", 509) = 0
|
||||
close(4) = 0
|
||||
sendto(3, "CB\6\0\0\tflag.txt\1\0[", 17, MSG_NOSIGNAL, NULL, 0) = 17
|
||||
recvfrom(3, "CB\7\0\0\24\312\303\317\316\206\337\322\321\302\313\307\306\216\327\332\311\0\0[\201\0\312", 4096, 0, NULL, NULL) = 28
|
||||
openat(AT_FDCWD, "flag.txt", O_RDONLY|O_CLOEXEC) = 4
|
||||
statx(4, "", AT_STATX_SYNC_AS_STAT|AT_EMPTY_PATH, STATX_ALL, {stx_mask=STATX_ALL|STATX_MNT_ID, stx_attributes=0, stx_mode=S_IFREG|0644, stx_size=50, ...}) = 0
|
||||
read(4, "FLAG{This is a test flag for edu"..., 50) = 50
|
||||
read(4, "", 32) = 0
|
||||
close(4) = 0
|
||||
openat(AT_FDCWD, "/dev/urandom", O_RDONLY|O_CLOEXEC) = 4
|
||||
read(4, "J\341%\220\354*\0>", 8) = 8
|
||||
close(4) = 0
|
||||
openat(AT_FDCWD, "23425_4ae12590ec2a003e.enc", O_WRONLY|O_CREAT|O_TRUNC|O_CLOEXEC, 0666) = 4
|
||||
write(4, "d\10\311\275\257\23\331\232-)R\335`HG\236\202\311\177\352\f\333\223\t\245\25\200\177\345\337\206\7"..., 56) = 56
|
||||
close(4) = 0
|
||||
sendto(3, "CB\5\0\0\nCRYPTO_ACK\0\25", 18, MSG_NOSIGNAL, NULL, 0) = 18
|
||||
recvfrom(3, "CB\5\0\0\2OK\0\4", 4096, 0, NULL, NULL) = 10
|
||||
sendto(3, "CB\377\0\0\0\0\0", 8, MSG_NOSIGNAL, NULL, 0) = 8
|
||||
recvfrom(3, "Client disconnecting\n", 4096, 0, NULL, NULL) = 21
|
||||
close(3) = 0
|
||||
sigaltstack({ss_sp=NULL, ss_flags=SS_DISABLE, ss_size=8192}, NULL) = 0
|
||||
munmap(0x7fbaeac3b000, 12288) = 0
|
||||
exit_group(0) = ?
|
||||
+++ exited with 0 +++
|
||||
7
2025/glacier/rev/c2/pyproject.toml
Normal file
7
2025/glacier/rev/c2/pyproject.toml
Normal file
@@ -0,0 +1,7 @@
|
||||
[project]
|
||||
name = "c2"
|
||||
version = "0.1.0"
|
||||
description = "Add your description here"
|
||||
readme = "README.md"
|
||||
requires-python = ">=3.12"
|
||||
dependencies = []
|
||||
14
2025/glacier/rev/c2/rc5_dec.py
Normal file
14
2025/glacier/rev/c2/rc5_dec.py
Normal file
@@ -0,0 +1,14 @@
|
||||
import struct
|
||||
import hashlib
|
||||
from Crypto.Cipher import RC5
|
||||
|
||||
if __name__ == '__main__':
|
||||
# 1. The Key from your network trace (Packet 4)
|
||||
# Payload: 99 90 9c 9d d5 8c 81 82 91 98 94 95 dd 84 89 9a ...
|
||||
|
||||
KEY = bytes.fromhex("99 90 9c 9d d5 8c 81 82 91 98 94 95 dd 84 89 9a")
|
||||
ITERATIONS = 85454
|
||||
key_bytes = hashlib.pbkdf2_hmac("sha256", KEY, b"", ITERATIONS, dklen=16)
|
||||
|
||||
print(f"[+] Key: {key_bytes.hex()}")
|
||||
|
||||
4
2025/glacier/rev/c2/sha256sum
Normal file
4
2025/glacier/rev/c2/sha256sum
Normal file
@@ -0,0 +1,4 @@
|
||||
1fc7de3e9527b3ac668e1fad1b654f188c83cd6eb8bc6ea6088856e59a80c62c ./29184_12d00e8952ca926a.enc
|
||||
238a0a036c925b968abe5013828b1bea820445438a4afcc7ae2fd01587570bfc ./c2_client
|
||||
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 ./deploy.sh
|
||||
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 ./deploy.bat
|
||||
2631
2025/glacier/rev/c2/strings
Normal file
2631
2025/glacier/rev/c2/strings
Normal file
File diff suppressed because it is too large
Load Diff
BIN
2025/glacier/rev/guessy-timezones/challenge.i64
Normal file
BIN
2025/glacier/rev/guessy-timezones/challenge.i64
Normal file
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Reference in New Issue
Block a user