glacier ctf 25
This commit is contained in:
1
2025/glacier/rev/c2/.python-version
Normal file
1
2025/glacier/rev/c2/.python-version
Normal file
@@ -0,0 +1 @@
|
||||
3.12
|
||||
0
2025/glacier/rev/c2/README.md
Normal file
0
2025/glacier/rev/c2/README.md
Normal file
116
2025/glacier/rev/c2/build_packet.py
Normal file
116
2025/glacier/rev/c2/build_packet.py
Normal file
@@ -0,0 +1,116 @@
|
||||
import struct
|
||||
|
||||
def calculate_c2_checksum(payload_bytes: bytes) -> int:
|
||||
"""
|
||||
Calculates the 8-bit checksum for the C2 packet payload based on the
|
||||
decompiled Rust/C logic (main_packet_building).
|
||||
|
||||
The algorithm is a custom XOR reduction over the payload data, primarily
|
||||
using 4-byte (DWORD) and 1-byte chunks, mimicking the final reduction
|
||||
of the SSE logic.
|
||||
|
||||
The original logic is complex (32-byte blocks with SSE, then 4-byte,
|
||||
then 1-byte), but the core of the final reduction is based on
|
||||
accumulating XORs in 32-bit blocks and then folding the result.
|
||||
|
||||
For simplicity and focusing on the non-SSE reduction path (which handles
|
||||
most sizes and remainders), we use a DWORD-based XOR sum and then a
|
||||
byte-based XOR sum for the remainder.
|
||||
"""
|
||||
|
||||
payload_len = len(payload_bytes)
|
||||
checksum_v16 = 0
|
||||
|
||||
# --- 1. Process data in 4-byte (DWORD) chunks (Handles up to N & 0xFFFC) ---
|
||||
# This section mimics the logic for sizes < 32 and the 4-byte remainder loop.
|
||||
|
||||
# v26 = a5 & 0x3FFC (The largest multiple of 4 less than a5)
|
||||
processed_4byte_len = payload_len & 0xFFFC
|
||||
|
||||
# Iterate through the payload 4 bytes at a time
|
||||
for i in range(0, processed_4byte_len, 4):
|
||||
# Read 4 bytes as a little-endian integer (DWORD)
|
||||
dword_value = struct.unpack('<I', payload_bytes[i:i+4])[0]
|
||||
|
||||
# Accumulate the XOR sum of the DWORDs
|
||||
# In the original code, this happens in an SSE register, but we simplify
|
||||
# it to an integer XOR sum for the final 8-bit result.
|
||||
checksum_v16 ^= dword_value
|
||||
|
||||
# --- 2. Final Reduction/Folding (Mimics SSE reduction) ---
|
||||
# The original SSE reduction folds a 128-bit XOR sum down to an 8-bit value.
|
||||
# We perform a similar reduction on the 32-bit (dword) XOR sum.
|
||||
|
||||
# Fold 32-bit result to 16-bit: v28 = _mm_xor_si128(_mm_srli_epi32(v27, 0x10u), v27)
|
||||
# This means XORing the upper 16 bits with the lower 16 bits.
|
||||
checksum_v16 = (checksum_v16 & 0xFFFF) ^ (checksum_v16 >> 16)
|
||||
|
||||
# Fold 16-bit result to 8-bit: _mm_xor_si128(_mm_srli_epi16(v28, 8u), v28)
|
||||
# This means XORing the upper 8 bits with the lower 8 bits.
|
||||
checksum_v16 = (checksum_v16 & 0xFF) ^ (checksum_v16 >> 8)
|
||||
|
||||
# The checksum is now a single 8-bit value (0-255)
|
||||
checksum_v16 &= 0xFF
|
||||
|
||||
# --- 3. Process the final 1-3 byte remainder (The byte loop LABEL_21) ---
|
||||
# The remainder starts at the end of the 4-byte processed section.
|
||||
|
||||
# The XOR accumulation continues with the remaining 1-3 bytes.
|
||||
for i in range(processed_4byte_len, payload_len):
|
||||
checksum_v16 ^= payload_bytes[i]
|
||||
|
||||
# Ensure the final result is 8 bits
|
||||
return checksum_v16 & 0xFF
|
||||
|
||||
def build_packet(command_id: int, payload: bytes) -> bytes:
|
||||
"""
|
||||
Constructs the complete C2 packet ready for transmission.
|
||||
"""
|
||||
magic_bytes = b'\x43\x42' # 0x4342 Big-Endian
|
||||
cmd_id = command_id.to_bytes(1, 'big')
|
||||
reserved_byte = b'\x00'
|
||||
|
||||
payload_len = len(payload)
|
||||
# Payload length is Big-Endian (BYTE1(a5) then a5)
|
||||
len_bytes = payload_len.to_bytes(2, 'big')
|
||||
|
||||
# Calculate the 8-bit checksum over the payload data
|
||||
checksum_v16 = calculate_c2_checksum(payload)
|
||||
|
||||
# Checksum field is 2 bytes (Big-Endian), where MSB is 0x00 and LSB is the 8-bit checksum.
|
||||
checksum_bytes = b'\x00' + checksum_v16.to_bytes(1, 'big')
|
||||
|
||||
# Combine all parts
|
||||
packet = (
|
||||
magic_bytes +
|
||||
cmd_id +
|
||||
reserved_byte +
|
||||
len_bytes +
|
||||
payload +
|
||||
checksum_bytes
|
||||
)
|
||||
|
||||
return packet
|
||||
|
||||
# --- Example Usage ---
|
||||
# 1. Define inputs
|
||||
COMMAND_OPCODE = 0x01 # Example command ID
|
||||
PAYLOAD_DATA = b"cato@unknown" # N = 43 bytes
|
||||
|
||||
# 2. Calculate checksum and build the packet
|
||||
final_packet = build_packet(COMMAND_OPCODE, PAYLOAD_DATA)
|
||||
final_checksum_byte = final_packet[-1]
|
||||
|
||||
print(f"--- Packet Construction ---")
|
||||
print(f"Payload Length (N): {len(PAYLOAD_DATA)} bytes")
|
||||
print(f"Calculated Checksum (v16): {hex(final_checksum_byte)}")
|
||||
print(f"Total Packet Size: {len(final_packet)} bytes (N + 8)")
|
||||
print(f"Final Packet (Hex): {final_packet.hex()}")
|
||||
|
||||
# Verify structure:
|
||||
# Magic Bytes: 0x4342 ('CB')
|
||||
# CMD ID: 0x01
|
||||
# Reserved: 0x00
|
||||
# Length: 0x002B (43 decimal)
|
||||
# Payload: 43 bytes of "This is..."
|
||||
# Checksum: 0x00{v16}
|
||||
BIN
2025/glacier/rev/c2/c2_client
Executable file
BIN
2025/glacier/rev/c2/c2_client
Executable file
Binary file not shown.
BIN
2025/glacier/rev/c2/c2_client.i64
Normal file
BIN
2025/glacier/rev/c2/c2_client.i64
Normal file
Binary file not shown.
30
2025/glacier/rev/c2/dec
Executable file
30
2025/glacier/rev/c2/dec
Executable file
@@ -0,0 +1,30 @@
|
||||
#!/usr/bin/python3
|
||||
|
||||
import sys
|
||||
|
||||
KEY = (
|
||||
b"\x2B\x5F\x52\x17\x05\x56\x41\x37\x38\x75\x01\x44\x5E\x06\x6C\x27\x09"
|
||||
b"\x50\x41\x11\x18\x78\x56\x0D\x33\x0B\x07\x4C\x58\x0B\x07\x4C\x5F\x0B"
|
||||
b"\x0A\x40\x59\x0B\x00\x40\x55\x0B\x06"
|
||||
)
|
||||
|
||||
def decrypt(hex_string):
|
||||
# Convert hex dump to bytes
|
||||
encrypted_bytes = bytes.fromhex(hex_string.replace(" ", "").replace("\n", ""))
|
||||
|
||||
decrypted = []
|
||||
key_len = len(KEY)
|
||||
|
||||
# Rolling XOR Logic (matches Rust sub_D7B0)
|
||||
for i, byte in enumerate(encrypted_bytes):
|
||||
k = KEY[i % key_len]
|
||||
decrypted.append(byte ^ k)
|
||||
|
||||
result_bytes = bytes(decrypted)
|
||||
|
||||
print(result_bytes.decode('utf-8'))
|
||||
|
||||
if len(sys.argv) != 2:
|
||||
print("pass decrypt text as hexstring")
|
||||
|
||||
decrypt(sys.argv[1])
|
||||
138
2025/glacier/rev/c2/dec_rc5_chatgpt.py
Normal file
138
2025/glacier/rev/c2/dec_rc5_chatgpt.py
Normal file
@@ -0,0 +1,138 @@
|
||||
import hashlib
|
||||
import struct
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# RC5 core parameters
|
||||
# ----------------------------
|
||||
W = 32 # word size in bits
|
||||
R = 12 # rounds
|
||||
B = 16 # key bytes (RC5-32/12/16)
|
||||
WORD_MASK = 0xFFFFFFFF
|
||||
BLOCK_SIZE = 8 # 2 * 32-bit words
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# Utility: Rotate left/right
|
||||
# ----------------------------
|
||||
def rotl(x, n):
|
||||
return ((x << n) & WORD_MASK) | (x >> (32 - n))
|
||||
|
||||
|
||||
def rotr(x, n):
|
||||
return ((x >> n) | (x << (32 - n))) & WORD_MASK
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# Key Expansion
|
||||
# ----------------------------
|
||||
def expand_key(key: bytes):
|
||||
# Constants for RC5 with w=32
|
||||
P32 = 0xB7E15163
|
||||
Q32 = 0x9E3779B9
|
||||
|
||||
# Convert key into c 32-bit words L[0..c-1]
|
||||
c = max(1, B // 4)
|
||||
L = list(struct.unpack("<" + "I" * c, key))
|
||||
|
||||
# Initialize S-array
|
||||
t = 2 * (R + 1)
|
||||
S = [0] * t
|
||||
S[0] = P32
|
||||
for i in range(1, t):
|
||||
S[i] = (S[i - 1] + Q32) & WORD_MASK
|
||||
|
||||
# Mix key into S
|
||||
i = j = 0
|
||||
A = Bv = 0
|
||||
for _ in range(3 * max(t, c)):
|
||||
A = S[i] = rotl((S[i] + A + Bv) & WORD_MASK, 3)
|
||||
Bv = L[j] = rotl((L[j] + A + Bv) & WORD_MASK, (A + Bv) & 31)
|
||||
i = (i + 1) % t
|
||||
j = (j + 1) % c
|
||||
|
||||
return S
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# Block Encrypt/Decrypt
|
||||
# ----------------------------
|
||||
def rc5_encrypt_block(block: bytes, S):
|
||||
A, B = struct.unpack("<II", block)
|
||||
A = (A + S[0]) & WORD_MASK
|
||||
B = (B + S[1]) & WORD_MASK
|
||||
|
||||
for i in range(1, R + 1):
|
||||
A = (rotl(A ^ B, B & 31) + S[2 * i]) & WORD_MASK
|
||||
B = (rotl(B ^ A, A & 31) + S[2 * i + 1]) & WORD_MASK
|
||||
|
||||
return struct.pack("<II", A, B)
|
||||
|
||||
|
||||
def rc5_decrypt_block(block: bytes, S):
|
||||
A, B = struct.unpack("<II", block)
|
||||
|
||||
for i in range(R, 0, -1):
|
||||
B = rotr((B - S[2 * i + 1]) & WORD_MASK, A & 31) ^ A
|
||||
A = rotr((A - S[2 * i]) & WORD_MASK, B & 31) ^ B
|
||||
|
||||
B = (B - S[1]) & WORD_MASK
|
||||
A = (A - S[0]) & WORD_MASK
|
||||
|
||||
return struct.pack("<II", A, B)
|
||||
|
||||
|
||||
# ----------------------------
|
||||
# CBC mode + PKCS#7
|
||||
# ----------------------------
|
||||
|
||||
def rc5_cbc_encrypt(key: bytes, iv: bytes, plaintext: bytes) -> bytes:
|
||||
if len(iv) != BLOCK_SIZE:
|
||||
raise ValueError("IV must be 8 bytes")
|
||||
|
||||
S = expand_key(key)
|
||||
|
||||
blocks = []
|
||||
prev = iv
|
||||
|
||||
for i in range(0, len(plaintext), BLOCK_SIZE):
|
||||
block = plaintext[i:i + BLOCK_SIZE]
|
||||
x = bytes(a ^ b for a, b in zip(block, prev))
|
||||
enc = rc5_encrypt_block(x, S)
|
||||
blocks.append(enc)
|
||||
prev = enc
|
||||
|
||||
return b"".join(blocks)
|
||||
|
||||
|
||||
def rc5_cbc_decrypt(key: bytes, iv: bytes, ciphertext: bytes) -> bytes:
|
||||
if len(iv) != BLOCK_SIZE:
|
||||
raise ValueError("IV must be 8 bytes")
|
||||
if len(ciphertext) % BLOCK_SIZE != 0:
|
||||
raise ValueError("Ciphertext not aligned to block size")
|
||||
|
||||
S = expand_key(key)
|
||||
blocks = []
|
||||
prev = iv
|
||||
|
||||
for i in range(0, len(ciphertext), BLOCK_SIZE):
|
||||
block = ciphertext[i:i + BLOCK_SIZE]
|
||||
dec = rc5_decrypt_block(block, S)
|
||||
x = bytes(a ^ b for a, b in zip(dec, prev))
|
||||
blocks.append(x)
|
||||
prev = block
|
||||
|
||||
return b"".join(blocks)
|
||||
|
||||
KEY = bytes.fromhex("99 90 9c 9d d5 8c 81 82 91 98 94 95 dd 84 89 9a")
|
||||
ITERATIONS = 85454
|
||||
key_bytes = hashlib.pbkdf2_hmac("sha256", KEY, b"", ITERATIONS, dklen=16)
|
||||
|
||||
print(f"[+] Key: {key_bytes.hex()}")
|
||||
iv = bytes.fromhex("bb7cdd2e104c3410")
|
||||
with open("./output/85454_bb7cdd2e104c3410.enc", "rb") as f:
|
||||
ct = f.read()
|
||||
|
||||
dec = rc5_cbc_decrypt(key_bytes, iv, ct)
|
||||
print("decrypted:", dec)
|
||||
|
||||
1
2025/glacier/rev/c2/flag.txt
Normal file
1
2025/glacier/rev/c2/flag.txt
Normal file
@@ -0,0 +1 @@
|
||||
FLAG{This is a test flag for educational purposes}
|
||||
777
2025/glacier/rev/c2/func_sha1
Normal file
777
2025/glacier/rev/c2/func_sha1
Normal file
@@ -0,0 +1,777 @@
|
||||
.init_proc<===>f16f10f1768f0b19ddcad7199966e82a58c96e6e
|
||||
sub_390<===>6e1d01b07799d69e2e6c738891121fd8d087e1fd
|
||||
._Unwind_Resume<===>ec735ea6219973eaf1ec18d892b0ebcbee85ac81
|
||||
.__cxa_finalize<===>86a776d84f14d3595aae30be476a01efcfba9ffc
|
||||
sub_3D0<===>1a55cc33323a5c74ff170798d205113148180d6d
|
||||
sub_440<===>ffac3321ab87c900b2226cd3db98ac387bacde6b
|
||||
sub_540<===>973073a1549c10528c6979a706db004f6a8029f8
|
||||
sub_590<===>b0051d8b8b6eaecbc1851af30ee73096788fc0c8
|
||||
sub_680<===>e08cf3cee9a4aa705310103caa926ed7b0384b9f
|
||||
sub_700<===>83a5f129b22c8f47da05ac2dc3c7bb35f885b46e
|
||||
sub_760<===>f0026f66e376dee316fd915e7b533e4bfd636ef7
|
||||
sub_16A0<===>692916e0633133a76613309874eda3e17396a9cf
|
||||
sub_3D40<===>0d03632601b729d37cc5325c71a13e6c0667997e
|
||||
core::panicking::assert_failed<===>a95331fc6be5a6e9b4e7181d6e7f8900c7cdfb0e
|
||||
core::panicking::assert_failed<===>595bb5955c3279dc2b4b715451ab36bda1d48475
|
||||
sub_4670<===>6abf97c1a208e09c271ff3a656d11b3b61962c22
|
||||
sub_46F0<===>25dac6342887b8cc2ea0975bd1c66be13de28c83
|
||||
sub_47D0<===>84379859bb256867c5ac777d0fa6c2e9bec8062f
|
||||
std::thread::ThreadId::new::exhausted<===>cfa815e379677365e15ac0a473c0cde90ed1f3c4
|
||||
sub_4860<===>9fb703add54b0e2588f216c231b80c443826041b
|
||||
sub_4869<===>a15336aecbc1d321e71e35f793f7ddeb217b7121
|
||||
sub_48D0<===>69e60af046090389ec0c845e35212505e039f26f
|
||||
sub_4970<===>c30df4e2de0f27487f21bfc8d2801c6c688452e6
|
||||
sub_4A40<===>0604d32fba3cf854d60b59987236de52f62884b8
|
||||
sub_4B00<===>7770eafb85d45b4c864ae914d7c1977af71d393c
|
||||
sub_4BC0<===>f55870b502074a2d0374eea576c8f51c40532ced
|
||||
sub_4C80<===>a36820d28193f0bd87152e069daef8ed916876b7
|
||||
std::panicking::rust_panic<===>6c812a4d14afa66f8ff214fe533d5b08417ae105
|
||||
sub_4D10<===>f4524544dd8eae38cc84b32bd8a10212e24757c2
|
||||
std::sys::sync::mutex::futex::Mutex::lock_contended<===>9ace755d4faa6ae73fc5d9302838f92e22ef55c2
|
||||
std::sys::sync::once::futex::Once::call<===>651ca3286b0b6da283e113ea422a56fc585b2579
|
||||
std::sys::sync::rwlock::futex::RwLock::read_contended<===>85cfd3773eb5a6d2afc1542f1853af6e69d45493
|
||||
std::sys::sync::rwlock::futex::RwLock::wake_writer_or_readers<===>f0ab5b4ca35865200aaa05a6d5ea6690ce42b45a
|
||||
std::alloc::rust_oom<===>443d5a887485d6d5b22528b5fa5c1cb7e9e61998
|
||||
sub_5310<===>695fc1be4dd8ac08f6b160aa7983e92243308729
|
||||
alloc::raw_vec::RawVecInner<A>::reserve::do_reserve_and_handle<===>9b893ac016c838e479636d095fa9f38dc3f69200
|
||||
sub_5354<===>1467bb24df3386783e40b3201167853db890c7a2
|
||||
core::slice::index::slice_end_index_overflow_fail<===>855700a49b781b6d2c51e214fe3bf609a3ed5da3
|
||||
sub_5410<===>0fef33afc88bc26884275b063ca511648412f471
|
||||
sub_54C0<===>9568f34d77277414b51433025295b22778255223
|
||||
sub_5532<===>ee6930c330d525fd6b41d9622da266e51aefe4ad
|
||||
sub_5549<===>62eb979cb39329416c884bec1a77db3fddfa4301
|
||||
sub_5560<===>856f7b69243ddab25b4cb8487de1f1f4553f4e3c
|
||||
core::cell::panic_already_borrowed<===>7c0f9a14c20c3d7fde3e3ef151f83edb14af67cb
|
||||
sub_55D0<===>8ee7999fda834d28c66434eed17ead1a8ede3a6e
|
||||
core::option::expect_failed<===>7979848a15926a383da8bdbf60e46bf5ca955af6
|
||||
core::panicking::panic_fmt<===>6c915fa9fd1929d25e7156731ac2e53da3a0190a
|
||||
sub_5670<===>a6719532b7a2ed147950828e00084c3f1f13769e
|
||||
core::panicking::panic<===>2bb5defb210e367c0b01e69f3ac9d01d81b20750
|
||||
core::panicking::panic_nounwind<===>e39a1539fdd5ab82f86a66633496020882f2d15a
|
||||
core::panicking::panic_nounwind_nobacktrace<===>e39a1539fdd5ab82f86a66633496020882f2d15a
|
||||
sub_5795<===>6a6c386ea4338cb4f576fbe63278a112b6156481
|
||||
sub_57F1<===>ac998b5aa330477b8bcbcc62c4964ff962351fea
|
||||
sub_5805<===>edb9bda4086f16a8954f00f11106a8951ac21a99
|
||||
core::panicking::assert_failed<===>6244d490b6a01292b87c17dd23f3cdc2e0f24eb1
|
||||
sub_5849<===>5979f02a7cf49366cbdb95272409926cb0f65ace
|
||||
core::result::unwrap_failed<===>f2e9ef3b7ed0b7aacbda2f88509b77e6c3ac5830
|
||||
std::thread::ThreadId::new::exhausted<===>f23b7f0d39f976c910249ebf9f2b4eecd83bf18d
|
||||
sub_5A50<===>6e3e99824b814c9a02e84d0b8f16eca455979395
|
||||
sub_5A60<===>572e8f0f07397b6a2ccd1477035438406fd01729
|
||||
sub_5A70<===>6a2b95f65f5914c68db89bda67174c0c5f64668b
|
||||
core::slice::index::slice_end_index_overflow_fail<===>c41842193a4cc906506558bbcc5a455f9b448f19
|
||||
sub_5AC0<===>80cf256175fe74fb9152b2c32e8b3eff341b1fa1
|
||||
sub_5AE0<===>fa243bb6c2b0c6e2202b6f945264793730e1ea6c
|
||||
core::slice::index::slice_end_index_overflow_fail<===>638304905f2de24980634503ea4b4c3ccf9b4274
|
||||
core::slice::index::slice_end_index_overflow_fail<===>aacf426cfc424b815e5298c6fb05efb19c28c85b
|
||||
core::slice::index::slice_start_index_len_fail<===>1c356ad795db0f8cd99c31b007170f9a8b6e9b44
|
||||
core::slice::index::slice_start_index_len_fail<===>342ec051cf73c41c38f103f58548fcc9e327eac9
|
||||
core::slice::index::slice_start_index_len_fail<===>00ba00b4684ea1effe296a09e9badc42cd41c856
|
||||
alloc::vec::Vec<T,A>::insert::assert_failed<===>9d475ddafb40454fcf6f694ca8f368abfc5b2457
|
||||
start<===>d447f85467b58f02928a0a3441aa2350cbc3ba54
|
||||
deregister_tm_clones<===>95fa1a8ae8daf8e38ed88e6a2dfe9751675f08d1
|
||||
register_tm_clones<===>cc67949e4265da6701337376b32f5834ac719632
|
||||
__do_global_dtors_aux<===>20cdba0106930abe419be8afedcd42b86b6d115b
|
||||
j_register_tm_clones<===>dcafcf32d7ccc9fd28a1723966fa1db1789ec93b
|
||||
sub_5E20<===>6cb3f2416cde84ff2a0ce7c477293d4cdfea2b1d
|
||||
sub_5E80<===>fd0dbbf1e10768af23eaa9fec5ca11dcb7e23ba7
|
||||
sub_5F30<===>f684f0991002dc924656abe378def24e5759eead
|
||||
sub_61A0<===>49af6cdad89f7f6d619c8b56815c1c5c0de35db3
|
||||
sub_61D0<===>a6be59b6095f06eee0d110ae6540bd99786e5992
|
||||
sub_6260<===>fb12f05518f3abf4abe6fa0145d07281ed6d4c51
|
||||
sub_6320<===>937ab85438e51df7ac4d1c423739d0d28412f17a
|
||||
sub_6500<===>904527968fcef56ee36f9b840a1666eb17ba636a
|
||||
sub_66F0<===>f1bdf0c0b72bc9e5747af4bb89f9f88e1437b383
|
||||
main_packet_building<===>18ffbe76ccf6fe910ad5affcfd0f1881b19888da
|
||||
parse_packet<===>bc686ca9d81801b74010f0e07d36b0d06b409b10
|
||||
crypto_stuff<===>c8f524fee85eb690f0affef5419dce520455ae02
|
||||
main_anti_debug<===>3732234490da108167dbb8e0154ce1ced571a421
|
||||
main<===>b0fed4095c40001809b9218f59bc3549acb3e3c1
|
||||
sub_BFF0<===>7ac6a9e99da93c2d293428157303a74d9aeb1cbf
|
||||
sub_C000<===>a58c86e6edec04845c5b7fa322cb4ffa0e40571c
|
||||
<&T as core::fmt::Debug>::fmt<===>c74349215fd84c584fe2a36670098f46a3bd2a22
|
||||
sub_C080<===>4b04e622c93d7fa55ce90349a140a9de46dda2e5
|
||||
sub_C150<===>d3b8e9e32ec65b486b77adeeee01ef10b684e609
|
||||
sub_C540<===>64fd104c89bf7b337b09fff0012bfdb3237fddfc
|
||||
<alloc::string::FromUtf8Error as core::fmt::Debug>::fmt<===>33b0304e142681eb962eb944c7e8e43c733a99fc
|
||||
sub_C670<===>6f61b63f37125ac9bee18b94a56b39e0d9dbdd17
|
||||
string_decrypt<===>504f269ce0b0262b2f83891b6f781cc0fee3637d
|
||||
sub_CAC0<===>0f0f4602f859c1ec50bd36ff5f88b55d9bdce138
|
||||
sub_CAE0<===>40b3f2dd40cbce4f6a588ddb746ae8e59911f37a
|
||||
sub_CAF0<===>5b8ba4b30ccfd3448c2a2c326a5e28d4861767eb
|
||||
sub_CDD0<===>33ed0e036ce07722927f1f4e33ae898b37af4a75
|
||||
sub_CE70<===>ccb93a48fc79e8e824f39606b221c1f74f84b768
|
||||
sub_CED0<===>0fa1da2331d315f3e5938aaea3ad9ac643b8ec14
|
||||
sub_CF60<===>75fdc033a811b944f0a50701bc79430ae5084811
|
||||
sub_CFE0<===>7fac4b566bb9269fc01a8c8f11f7b6c70fbdc241
|
||||
sub_D0A0<===>1333410b0a476b9d4995f85cdecaca0787be3c96
|
||||
sub_D290<===>b58324ec5fd60d432916eb919a0b7bd418c41aad
|
||||
sub_D420<===>c6bed4cf926ac4ba02ff181fc3c53cadd033525d
|
||||
sub_D7B0<===>dbc89d79baad7f6ae2a6788b642cf31f3a9346d4
|
||||
sub_D970<===>1e744f0d9a4cb17b96550d40cc7ff1792bcca556
|
||||
sub_DB30<===>e55c753be8d2703556ad7629225d6e797edb340b
|
||||
sub_DE00<===>fd0dbbf1e10768af23eaa9fec5ca11dcb7e23ba7
|
||||
sub_DEB0<===>fd0dbbf1e10768af23eaa9fec5ca11dcb7e23ba7
|
||||
gemini_str::trim<===>802cc8553c6a8478915259c104d98136967fafff
|
||||
sub_E200<===>28c508ac585cc8238927b2dd6bd4f3e72f052f38
|
||||
sub_E3C0<===>fd0dbbf1e10768af23eaa9fec5ca11dcb7e23ba7
|
||||
j___rust_alloc_0<===>8e8481eae143a5d0eafa9e7d64dc95e02e13fe6d
|
||||
j_free<===>c3445c066198592317196f5acc01a77360039182
|
||||
sub_E490<===>069c53710b6c541cc1c337a7bc5639504eb2b766
|
||||
j___rust_alloc_zeroed_0<===>90d9b88cce418f6c1c58f70026490bd6da57107c
|
||||
sub_E4B0<===>ce041b7ac506b8ea3d1dd0759ece2d518252a858
|
||||
nullsub_1<===>82ea66d9ee4d85856bd4c46adcbd7103d6923aa0
|
||||
sub_E4D0<===>0122ede5772cf861215ad3ca71b1b1854cd0737a
|
||||
sub_114C0<===>cc7a4bb643e7ac108e7bba925887eec7a09e489d
|
||||
sub_114E0<===>ed3d40f2643be7a016b0d1c7b261df96545d8ab6
|
||||
sub_11500<===>b7cabca90160c57f740ee929c868ae3d60b2e86e
|
||||
sub_11740<===>29c26d97947ec5876bd725807f3007288661a18e
|
||||
sub_11760<===>d4cf11ecd9c7a7979b41bb64bcdc4d793def5d02
|
||||
sub_11780<===>4407e4aabe73454e0ca3fbbc6db3f057ae6d8532
|
||||
sub_117A0<===>3e0ab2153678bcecd6a4bcb626cce3f1e75e0f87
|
||||
<&T as core::fmt::Debug>::fmt<===>835d3aeb7f6c4a8dcf74104a3a24f2bd0e8d8281
|
||||
<&T as core::fmt::Debug>::fmt<===>c7df70f26bbf190336292cb44c3437359ddea4f8
|
||||
sub_11930<===>956f9137fb4b6dba870dc138066e1cc3cc8b836d
|
||||
sub_11960<===>934d2ea2d26586a24e18f22bea616f3a9554eddd
|
||||
sub_11990<===>5db07ebdfcbbc32b2ddcab745e80a66b81b87a51
|
||||
sub_119B0<===>819da26d3deaf9c962985d2746a814094d6d3e36
|
||||
sub_11A50<===>a04300dd8c937b8bb6785186881997769c688e46
|
||||
sub_11A80<===>fd9c765fea86281199af80c123608fdf917d95f4
|
||||
sub_11B90<===>e7615a775ab16fb005200ebfc3e47adae110734b
|
||||
sub_11D30<===>bf28f8e7803d829a33846e9a068b5105f0d9326d
|
||||
sub_11E80<===>db267250cdcb16ee6d7a001e26981aead3271648
|
||||
sub_11E90<===>0d458f235945773b4e518d2d20d686db15a67815
|
||||
sub_11EA0<===>1d12735ab00a815d41f7ccd14f13550f767279ca
|
||||
sub_11EB0<===>49175f1a33a410ec403972f7f5df0e6a249e8f4e
|
||||
sub_11EC0<===>a860166a66438c356992f59a0923843fe1e3ad60
|
||||
sub_11FC0<===>19deb73ee263a57d0e5d0893b9d55a964f6f89e4
|
||||
sub_12130<===>a3110e94894a4af065fdccf83841ab888afd0165
|
||||
std::sys::pal::unix::fs::stat::{{closure}}<===>eb67eacbe81f26ef4af70912e57aaa5b1acc8b36
|
||||
sub_12230<===>bdda2b1077e31d64fdf2aea99681f22df720acb9
|
||||
sub_12280<===>c06ddfeb1206a6ee2054171189072779f638737a
|
||||
sub_12290<===>65d44e07f53b68760d1cd6ebb7fa938ba051a325
|
||||
sub_122B0<===>0f3afa5b876b93e43dc01af4a2d4d548c36c25e3
|
||||
sub_122C0<===>4d0e130a4e31d90479514a5b54cf0cb6aa198cf9
|
||||
sub_122E0<===>b094e304d10953f6c24a04b76191e05b0c5ebd1a
|
||||
core::ptr::drop_in_place<alloc::vec::Vec<(std::ffi::os_str::OsString,std::ffi::os_str::OsString)>><===>6fe5c472b59b000f601d47ddf4efa1671b0b4a1e
|
||||
sub_12440<===>b05a875adab569f3ae66a8293d863535996001e0
|
||||
sub_124B0<===>1d9b39095454a4d3b10de94f5d4cdc84237479e8
|
||||
sub_125B0<===>7585dcf2592acec81cdb802f61dd513184c4c661
|
||||
sub_12660<===>139b958fe7f230249b6db807e1c41694b21f4902
|
||||
sub_12760<===>7df162c639c4de1afe1ae867ffd42b73d207c6cf
|
||||
sub_127B0<===>d4ff88f4870e64535169521dee5348429f9b87fa
|
||||
sub_12890<===>f465c7eff918ec95692ad1825014805bc9c29b85
|
||||
sub_12970<===>d3eaf63374ee95553a2bf6f4138ec4cf775c14bb
|
||||
core::ptr::drop_in_place<panic_unwind::real_imp::Exception><===>403470915d910c874d89f931b9aad83ee6d51ff4
|
||||
sub_12A40<===>1454522d3dd67a4475cac1ae2d77e2d9933af997
|
||||
sub_12A90<===>3b98cabb44a541bac2d4fbe9941d908665e763f6
|
||||
sub_12B00<===>1d61f8c56608bb6855b7476cba63d3c77558561e
|
||||
sub_12BD0<===>ebc2bff30a0122745c25446c45a0f14fe484def7
|
||||
sub_12CD0<===>e4026fd6b6f0f0c58aa95257c272933e996063b5
|
||||
sub_12D30<===>b282e987494014f56598dacf2a78e85d52e4eb89
|
||||
sub_12DF0<===>281272c04e6c222f0c91e67896851600319ee836
|
||||
sub_12E60<===>2eca14d91b260b61c65b7ec4bf30b79528d166ae
|
||||
sub_12F10<===>2334106ddf6ad83080492fb5ce0d95f5fccc5031
|
||||
sub_12F50<===>87a801fa24c59e2c91bb9fbea731525d19920291
|
||||
sub_12FF0<===>bd7c4ba1c4444f7172e259b30a669309d338e7e1
|
||||
sub_130E0<===>350a72aa322dc3506a4dbd38a57ba5152e105186
|
||||
sub_13150<===>c46e87d657b3d507fd619171086206586730a5b5
|
||||
sub_13170<===>715b217c8cf93944cfbcb35110ee582c9da88e32
|
||||
sub_13240<===>76a061550671a31d64e6a50033a2f1a383444baa
|
||||
sub_132E0<===>5ef113e08d4f4f3320bd9ea2bbc41b9d6e83e375
|
||||
sub_13370<===>59bb6ebf2b91df480b2daa03155e178b00c2cbf1
|
||||
<alloc::vec::into_iter::IntoIter<T,A> as core::ops::drop::Drop>::drop<===>fdb87f6055959c97f12f1a3bc3b729c42dd4a215
|
||||
sub_13460<===>64f9cbc8657667435160d3a1ac92035696b21dd7
|
||||
sub_13530<===>18935821c5e76ab51a46e7dabc475d20ac40aab3
|
||||
sub_135A0<===>c00c0608117559eeb0be2271a2d95d8023db4ae6
|
||||
sub_135C0<===>3b98cabb44a541bac2d4fbe9941d908665e763f6
|
||||
sub_13630<===>f4e84a83333dda2cc664f3b21faa06808bc2e1a5
|
||||
sub_13770<===>fe1f298eaca28c099c6fbdba2319d0f584a93a66
|
||||
sub_13780<===>ab0302bc19b11db588582092971c6181d9790c85
|
||||
core::ptr::drop_in_place<std::sys::pal::unix::process::process_common::ChildPipes><===>a2eece4e027b5baeb042b71b42a91e42caeafd53
|
||||
core::ptr::drop_in_place<std::sys::pal::unix::process::process_common::StdioPipes><===>704a327b631fb76a4da3d9be4910ff5bf8dda9f2
|
||||
core::ptr::drop_in_place<alloc::vec::Vec<alloc::string::String>><===>d64f4ccb714ad454fa023c6274e8619bbb2d12fc
|
||||
core::ptr::drop_in_place<std::backtrace_rs::symbolize::gimli::Library><===>03cbe90c53613e42b2cb010de923b7448827ec1f
|
||||
sub_139D0<===>1658a7651d71c79f3cb61ed19244eee7cc3ae784
|
||||
sub_13A20<===>0d787b5bac0821c92c0fb9c6f63e23a6a0085bd6
|
||||
sub_13A40<===>7b01949d33b62466cdd24717a5a753aab72a5c1b
|
||||
core::ptr::drop_in_place<alloc::vec::Vec<alloc::string::String>><===>99238a5f8569dd96183dc705c249abaf621526db
|
||||
core::ptr::drop_in_place<std::backtrace_rs::symbolize::gimli::stash::Stash><===>e736c16e99d67ee85de3ce85e4019c0f41a4d28c
|
||||
core::ptr::drop_in_place<alloc::vec::Vec<addr2line::LineSequence>><===>cf41ab2dafc4c13384654541223ee996c4648027
|
||||
core::ptr::drop_in_place<alloc::boxed::Box<[alloc::string::String]>><===>8ceabe8b50699d35b5914197d78f80957c7d14c4
|
||||
sub_13CE0<===>cfbc3f6f41eebf088f076d9ff7554a5eeb9aa8d2
|
||||
sub_13D00<===>3c516a8621cb73cec8f921d4ea1e7452a5b761d7
|
||||
sub_13D10<===>8e4ba9c39ed2a6fa4924e1685c6456a52b4c2151
|
||||
sub_13E20<===>58a049801f4dc4aa89a36766aa8bfe2f81dcb816
|
||||
sub_13E30<===>30627c862b3d4b81ab621f1750be5e1d809bbaef
|
||||
core::ptr::drop_in_place<(std::ffi::os_str::OsString,std::ffi::os_str::OsString)><===>d808b5835bcbd52925150ebd0285b085f57c12a2
|
||||
core::ptr::drop_in_place<std::io::buffered::bufwriter::BufWriter<W>::flush_buf::BufGuard><===>a13bc9a1e4a3e12bbb6eaffdb0ffe9e7f7d44014
|
||||
sub_13FE0<===>1d201253b237fe635768c2baae5b0d5b47205777
|
||||
core::ptr::drop_in_place<core::result::Result<addr2line::Lines,gimli::read::Error>><===>de6f2fb82341e49487e749c1d8a38f02d9f9f184
|
||||
sub_14100<===>0fd0e8bb3ca74f80c2e612cceed9652bd2e1c785
|
||||
core::str::validations::next_code_point<===>fefab3fb63aaf671ea054a41ad7372b1eadc0b56
|
||||
sub_14290<===>8684d20fcb95005cc03523364bfdca87a0b7862b
|
||||
sub_14310<===>660b134235a43b565026eb98b7cbad6e52401c8f
|
||||
core::array::<impl core::fmt::Debug for [T; N]>::fmt<===>fcc97213f3ed33df3ace4784c851c788770778a1
|
||||
sub_14570<===>11dbea6336ce781b4c417cc963500e1cafdb5555
|
||||
nullsub_2<===>9edb35b9273d53cfed2ebb63c6b66fed73cdcd62
|
||||
sub_14590<===>4e4783185b9b87aeab7444acd17848dac98d1a64
|
||||
zero_eax<===>3a472be1734293501c9eb9568cccfbb996d09f5f
|
||||
sub_145C0<===>60214b52db6363787da6d53d003ab962922e0408
|
||||
sub_146D0<===>b5666f6a1c6462783e111c1b379b2f6b4da58a12
|
||||
sub_14790<===>b0ddda564721f787de6303d837dab4a7e43b7e41
|
||||
sub_14850<===>b0ddda564721f787de6303d837dab4a7e43b7e41
|
||||
sub_14910<===>3e7f85dbdaf4fdd5a2c1df42ad71ce12a6c1ddd6
|
||||
sub_149C0<===>b5666f6a1c6462783e111c1b379b2f6b4da58a12
|
||||
sub_14A80<===>253cf9802bf14a9432c0e4ef9a6df0d57c327efd
|
||||
sub_14BF0<===>c037b0fb238e2df1ed0a74c4817079942399bbd7
|
||||
sub_14F70<===>786b90a48bfc19c69d2877315803542dc2d36688
|
||||
sub_154E0<===>3bae5fb31ed7ca8a5d6dc66d6a463d598521fc43
|
||||
sub_15590<===>66b6d63c6adafafa99dd2cb1c8864accffca722c
|
||||
sub_15650<===>630567a043312c1db10de7e5d6a68e399e4d791b
|
||||
sub_157A0<===>08212d9c084045e9699dd3c3a441a6dc0ab2cee8
|
||||
sub_15900<===>630567a043312c1db10de7e5d6a68e399e4d791b
|
||||
sub_15A50<===>630567a043312c1db10de7e5d6a68e399e4d791b
|
||||
sub_15BA0<===>ee5d372ded37a8d1916b09520cd4cae3e67551bb
|
||||
sub_15D10<===>038300a472d19b34a13cd45ddefcfb2ac95e942c
|
||||
sub_163B0<===>20d1c8f3ee754e6b7ca8c1ef14160ed2ab04cd88
|
||||
sub_16AA0<===>e45aaec6a31e97da4a57abb4ffbdf0ab7c208979
|
||||
sub_17180<===>038300a472d19b34a13cd45ddefcfb2ac95e942c
|
||||
sub_17820<===>ea54f072b5989892b91101e0213508ddb77a1eba
|
||||
sub_17F10<===>875000e1ce7c0096d3cdcfd813d34528a03cb4c1
|
||||
sub_189B0<===>244e32197cb354c111d2bcbcd5cfdf3bcfcaa1a8
|
||||
sub_19410<===>c3706c9a9fb1fea22df0eaaa72e2ffc6f987e09e
|
||||
sub_19E00<===>7ea0845d3d9856c72d6f428b4fb8f31192347413
|
||||
sub_1A810<===>244e32197cb354c111d2bcbcd5cfdf3bcfcaa1a8
|
||||
sub_1B240<===>cc86f9d273ca58faecb0d3b0039755d78ea2c52d
|
||||
sub_1B320<===>9334d3a67873f494943a4bc9022a2e8cd8673eef
|
||||
sub_1B420<===>bf783763b084e7c6469d6086722446dcb9a2769f
|
||||
sub_1B890<===>b98b7b06fc7e8450214cadf62f8c584bbce1d714
|
||||
sub_1B8A0<===>3dd7039891f36665c7e311eef6b0487a7f2cb71c
|
||||
sub_1B8B0<===>0f1f838b23f1db6d7f5a0aa169fd24d8b05676dd
|
||||
sub_1C100<===>ef1f4d3e88af7c2eeaa659438f42130d80b4e351
|
||||
sub_1C120<===>6855c0deeb9a46c3ba1794a71dc21436d0af21e5
|
||||
sub_1C250<===>f54b2cc2cb5f9ea9ddebd7ff15a51227beba82fb
|
||||
sub_1C2C0<===>66370dfe7e081fb6c203891c379ada5c087b7a51
|
||||
sub_1D180<===>1304fc304b0c151c8abd5f71e7564497c9940cd8
|
||||
sub_1D580<===>002158dc321488e6e07120cfeea8d2c1e31101bb
|
||||
sub_1D990<===>002158dc321488e6e07120cfeea8d2c1e31101bb
|
||||
sub_1DDA0<===>d971d3c7bf295a48535e77386a6fcab9001322eb
|
||||
sub_1DFB0<===>b19e0b4edb09aaa85d801b6fd34d2a182bc0ec32
|
||||
sub_1E190<===>be579bb9eebbdb9f1d247c7e7c74f49e3bf34225
|
||||
sub_1E490<===>ded4550fbc77aae79e99ba89f66a68b2725f39ef
|
||||
sub_1E720<===>b530905708ac3f14a364331cfdbbebed21a85cd8
|
||||
sub_1EAE0<===>916dbe540936c84a02a7c29b17330d61a22ab3f4
|
||||
sub_1EE10<===>5771286702d57eedc8932ce5522e5a04dcb8c1d6
|
||||
sub_1F210<===>75342da32856aaecd524cf2c0d1db3272c2d7598
|
||||
sub_1F5A0<===>d5b6ef2227469aef0f64aac8ce62de698e7c0811
|
||||
sub_1F960<===>a5e1323bd8476c6dd3c2b903b6f3cca28e401075
|
||||
sub_1FD60<===>5fd0ed1d18466b62a7bba843c72880bd331ec67a
|
||||
sub_20640<===>935c682bac564004f6162ecda49d5289aff9cc70
|
||||
alloc::sync::Arc<T,A>::drop_slow<===>73e259baf1af742aff4970fc5a35aa8394284d10
|
||||
alloc::sync::Arc<T,A>::drop_slow<===>62bb8df15a013c2647d98a81230381d1e735f04e
|
||||
sub_20FA0<===>c16d3a8317b2aedac6ab34bb5997891fe0b5d0d7
|
||||
sub_21040<===>6b77342712f4e117496e5e184454d191e61b132d
|
||||
sub_210B0<===>c7b705e92558ba283bbfb44cdb8f7400e5540caf
|
||||
sub_21100<===>a6d8a42905be11278a36c94f25f06ea9f44c6a09
|
||||
sub_211C0<===>b9ea3495dd0b6de4da115acd5455d544d2a3ad09
|
||||
sub_21280<===>1fbddc75c9ab1b97772c64667fdeddbccfc0a3e1
|
||||
sub_21340<===>55e22336836a09bf2f9698a3bf793cc1e40310aa
|
||||
sub_21400<===>0719bcc7175c265ce6448ccb3594b076f2519bc6
|
||||
sub_214C0<===>c56b7ac0c4e73bba8f718c7252b158fef792d0b2
|
||||
sub_21580<===>138431d5205dcb9095228a14e84b26aff3a71877
|
||||
sub_21640<===>a85e01c784250d672374c3e6dda2a58d0fa068b9
|
||||
sub_21700<===>aee2232871fdc939be2e5fe3c17fe6bbf889304b
|
||||
sub_217C0<===>2888382941b3a33627c65fa50ff997d75d29f21f
|
||||
sub_21880<===>b10feb0eb80775887617a1df48207763acddb987
|
||||
sub_21940<===>3b65f6fdf5277accf330f8941d4b82ee3cf665bc
|
||||
sub_21C30<===>d3ebf807e625b8274609a6236f98c8ab7ca291f2
|
||||
sub_22000<===>aa65c828a0efec3a8ebdd4a635234c89cd0090dd
|
||||
gimli::read::line::parse_directory_v5<===>2da1c00bf9943cd68c2bbff6d9d56589d0868d91
|
||||
sub_22B20<===>dc048ebac119e1a9e5be590fecb7aa00b7508dfc
|
||||
sub_22D80<===>3762a251fc065a337563d0a26cef93e58c923750
|
||||
sub_241E0<===>353d94209c03e179fcb1fc948bb5fcc05cf90f6c
|
||||
sub_24740<===>5ea037628e39af014075c75cf65de2254bdbf5c1
|
||||
sub_24CB0<===>b79e37e677214290c672d1512f63b005d3a4c510
|
||||
sub_24FE0<===>8112c190ac3201325a195244d6993af365a2b9c8
|
||||
sub_25040<===>c6e6ae865d67d3227cab4635a3de0a3e74f9097d
|
||||
sub_25670<===>15448cfa65ba535a8cb1361cb9d16aeb355fe720
|
||||
sub_27C40<===>cb922ed427e6349477355235484060a25e91da32
|
||||
sub_27E30<===>e2f24ae44d4ad4fc3132763e1ce33c624e8cf53b
|
||||
sub_28870<===>76e1a4f741784d56370f7c7f3fa11b2c7765ab8c
|
||||
sub_28920<===>d6b38079920a1c94497ab4fc1f92ded35fb58e4c
|
||||
sub_289D0<===>a03ffa1aab5045178f82cd8ab7ac064c358db76f
|
||||
sub_28AD0<===>e56bb335739fb53dd5b261599f3ea65ffdf87f11
|
||||
sub_28D80<===>d0a641b57310924851640e0b844f7382d2953410
|
||||
sub_29C30<===>1157559a8cb09dd14612f0804cf588fbf5507708
|
||||
sub_29C50<===>b28b0c8a298c1212ec54bafdc37983d33bf5a668
|
||||
sub_29C70<===>910a9f3c0805ca37c436aa918dff2148157f0cb8
|
||||
sub_29CD0<===>a6dc96f361de4a2e76997f7827649d3bebcd5e61
|
||||
sub_29EB0<===>35cfae5f613ddb355b2718b982fef9b8dea9ec8a
|
||||
sub_29F30<===>8e51a3619fc75bb7d5c4a2dd70632cb0f791b6cb
|
||||
<gimli::read::unit::AttributeValue<R,Offset> as core::clone::Clone>::clone<===>8ca4f1e7fe96c46e1dde0ea6275755c5abc8d499
|
||||
sub_2A140<===>b51dc06e3745762a0607c20ee9f4f5445e9e4764
|
||||
sub_2A2A0<===>cbafcb407c80a80d3ebb6628bb025f47913b2406
|
||||
sub_2A730<===>0b3ce53664fb6bfdbe6194b37f2363ea277ce7f4
|
||||
sub_2ABF0<===>074c9e2c3e35b5fa3d70bab3e65bbb1315a52814
|
||||
sub_2AED0<===>c58253969c43c0e9e93b73ba5b98e9837542f52e
|
||||
sub_2B450<===>1fcbbf0ac31ce0b6c95534d0c5afa6fd7a2da06c
|
||||
sub_2B860<===>515e2e634a26a0ef4fd2ab279a7b4e77efee7cf1
|
||||
sub_2CA30<===>087f3b81b179a32a1dfdf02c1212f88a3c641106
|
||||
sub_2CBD0<===>14fba5987f7dc61855ceb6f8fa98c0b90dae3f35
|
||||
call_main<===>24c5300334f6f026455a9e078c0258c01caf7dc9
|
||||
sub_2D3D0<===>6c37d5fe8c0e8737910dea64dc3b961e87cbcdf1
|
||||
sub_2D5B0<===>ad487d6b53eb2331b3d739ca7283a1fc1d125d33
|
||||
sub_2D960<===>8ec1017beb627ac12f3da193077084057e59a8cc
|
||||
sub_2DA00<===>b30b728392b276829d933c9f52d333df9d29efc6
|
||||
dropper?<===>a268e17a6516d76a31d08dd386e4410a48c2003e
|
||||
sub_2DD30<===>acd1ac8d279abb0f6a6ccac63b00db91479db2fd
|
||||
sub_2DD50<===>5eb3fc9b7b2124147959aef9680c1c52eb9fa87f
|
||||
sub_2DF80<===>11d026e4ed8a6a5e9e16d1c95ac5b488944d54cb
|
||||
sub_2E060<===>e4ac279c929871f7c64f38160a69e5ba98e1d7b6
|
||||
sub_2E080<===>bca78a4ae20a095c68634500b98bc0bb8e2e69a5
|
||||
sub_2E170<===>7ab1e40c4b01c5c2ffc16031f9b93c8fb8cb4efb
|
||||
sub_2E450<===>a9c8aa506b2ce473f8342aa4d2e4e8510d911ff4
|
||||
write_to_enc_file<===>53a0b7bf8e58dc2dc8c9298d4b50d3b526f6ed43
|
||||
sub_2E8C0<===>2a3b26ba8b073f757af37900e4c93f9ffc2ac850
|
||||
sub_2EA50<===>dbf8b0b0e731a34fdfdf40bfb8bc48f2e46bae74
|
||||
sub_2EB50<===>50f23fe72d005a3b9d693fdc0cb147395c2adc8f
|
||||
sub_2EBA0<===>65fcbff3479a89b62738db2554d4136535274d4c
|
||||
sub_2ED90<===>a078543a8a910e992a8321c0466bfea5f6aaa1e2
|
||||
sub_2EFE0<===>254af1c97e32d3842b13de1ef01fab6abf6687b2
|
||||
sub_2F030<===>cb832b38bba07f26d0ea340db3a931db82e23e3e
|
||||
sub_2F040<===>14d6aeea4b2725531c824895f5c8f53cd10550e1
|
||||
sub_2F180<===>359f7630c335f8574c948cb771ead4e373c2126f
|
||||
sub_2F1C0<===>7216d93fe3101d48f32974d73ac6c47540171538
|
||||
sub_2F4B0<===>de28bfae25b68ebc777b1bff466801c53de39b34
|
||||
sub_2F720<===>7d30834e8b235e1c2be671e6de5d0b62d456509d
|
||||
sub_2F790<===>f25f0decaef72ffcc627320d1bb52bad9da9f8c5
|
||||
sub_2F8F0<===>e5ea57621f0e4c2e01c00022c920fdfc4e63cadc
|
||||
sub_2F900<===>8b3d11ae85d4abea500df71eb2ef49a634015615
|
||||
sub_2F970<===>f95321e59366ad62da5130f24ba73712489b0899
|
||||
sub_2FAB0<===>d6bb5b32dd884104ee46dab62d43f12408462cd8
|
||||
sub_2FAC0<===>f5b7a7c1c26373a1bde94cf3cf9219cf1acf54ff
|
||||
sub_2FB80<===>3530ab4d101a5fada9394b48993377614eb9d017
|
||||
sub_2FE90<===>0a1ac3c74cd50819136963a2c8f6f79eb5fdf850
|
||||
sub_301A0<===>8941447930495ef5a4faddb570e2d753fc53f881
|
||||
sub_302A0<===>99b9428acbcddbb75b553ae4b1cbc2883d9a6166
|
||||
sub_303A0<===>e01c7ed3f6c2b850195209104b0ca45667a3f547
|
||||
sub_304A0<===>4a07ebc72335c136082ac5c5c92bb9402c155668
|
||||
sub_30510<===>e8771ec5d625951e2ffc0f368fb220b2b8eff8fb
|
||||
sub_30610<===>a31c6ba30d8ab345dc0d51cd558d1643bad8c69e
|
||||
sub_306B0<===>98cc7b5bad7864890837138c2126421aca04615c
|
||||
sub_30770<===>f051e69ad2dc793f1df0b12e7cce32d90cf7f46b
|
||||
sub_30940<===>dff8cc4fb8c3d883f48cf9799b7659825b219e61
|
||||
sub_30A70<===>83d44c08863b38b982e57d16c57c1c7af0630031
|
||||
sub_30BA0<===>27306f6e9565f60dd3238735ca34a5280d383a7f
|
||||
sub_30CD0<===>1fbda4d321274b5d79b64f7c9f4de4e11a12ac9e
|
||||
sub_31040<===>6e57739b65a8dc825a7a0c140045145602a654b9
|
||||
<alloc::string::String as std::net::socket_addr::ToSocketAddrs>::to_socket_addrs<===>62f45e1e777ef135ebf03467903be182b0c40405
|
||||
sub_31140<===>f4b3eb42b845641895d4be85d027ddc6cecb9bf9
|
||||
sub_31190<===>6d4f4802281a957bd0f06041085bc1ce702fdd1e
|
||||
sub_311D0<===>9986f75bee8b697f388c6759d684074057129fcf
|
||||
sub_312A0<===>067cb8aaec69db21f6533e37cbfa61652995a280
|
||||
sub_313F0<===>f1067534212ae2e1e5038e1defb230dfac7cfdef
|
||||
sub_31780<===>2e3136fc10e3314ccb7c42ed46f2a89e007b53ad
|
||||
sub_31870<===>81243626b78d1ae3fd6adba765fb6e49f8ce8ce2
|
||||
sub_31C20<===>92f8c2cd0db8524ab1e8d38ad7b4e05f504ce1e7
|
||||
sub_31FE0<===>727f88f12eedd5605a1f726ace6b29d1a858b0c3
|
||||
sub_32240<===>86ff7fcaf021002e9b73e8bbc929e1d654d68ef6
|
||||
<std::sys::os_str::bytes::Buf as core::fmt::Debug>::fmt<===>15ccec98dd617db2e14de4c3a3a4ff48fa9179d5
|
||||
sub_325B0<===>207f5c0609e257c8b40f9b26c5321a98e105db46
|
||||
std::path::Path::is_file<===>6d1cda53bf886a056da53a9d81115d507f3bbb69
|
||||
std::path::Path::is_dir<===>2fa52d6c330def973299fd7956ac36777f49e637
|
||||
sub_32A80<===>37c91074c49b66f5fd616e58d72b54d8b27d0fe3
|
||||
sub_32DE0<===>e116e167954e5b93449837de293ba8b70556eadb
|
||||
sub_32E00<===>3b516488082a7037928ce45355e832ffadda10cf
|
||||
sub_33010<===>bdda2b1077e31d64fdf2aea99681f22df720acb9
|
||||
sub_33060<===>908cd6fef2738ff9a129b7ee29d0a0717db5b489
|
||||
sub_330D0<===>0b8f70003e8afc38b9968753928c74be378c3207
|
||||
sub_33130<===>6440e85a41970af5e535fe35cec1181d0d5c9e63
|
||||
sub_333B0<===>ec47b06d078b682b425f3b49b9f0ad1b86f74183
|
||||
sub_333D0<===>8f64f57406d6c6a267c24a06f3e96a6e59c1c6bc
|
||||
sub_33520<===>85e0d1f9438ccab0630f384ca578c831fd36e425
|
||||
sub_337C0<===>282e3e03f400418e34cd5e23e8bc7e28d0e472dc
|
||||
sub_337D0<===>84c26cf140c6c258ae45eb57a784d5b90b75c339
|
||||
sub_338F0<===>031423ca0f3413db6ba81a903bdc41b579f4c648
|
||||
sub_33A40<===>d75a2e56e7df02280c9a29d4c8bba44b3058fce1
|
||||
__rust_alloc_0<===>ab86907c8162e49103a9888513fffdc65d038786
|
||||
free<===>ad4b64c21e627a65049735f397de9c9f7d361159
|
||||
sub_33C10<===>07fae75dcc572238340bcd6956729f76abe43d0a
|
||||
__rust_alloc_zeroed_0<===>5f668f7355c78371fb9febb9eb2d5a5626490755
|
||||
sub_33D50<===>74c379a4d39e224ac68693d48fd21fc54bccdb50
|
||||
sub_33E20<===>ad8309682ce48d1fa96d533f8f73c03823d7936e
|
||||
sub_33EEB<===>7b70905db23308235f54ed5428819bbbb96c579e
|
||||
sub_3408D<===>4a812b3e59797904705c688dac4d5829291d5bc1
|
||||
sub_34220<===>d639a33ba8fec5d14da223ecccae92ba9d665edf
|
||||
sub_34500<===>3885f95a18079da1c752d9730dc2f771285da3b3
|
||||
sub_34550<===>4b9e9542d0ceabde2df0bef714f417ad4c29c878
|
||||
sub_34570<===>3ef269de6e2b8055b571d8330b1bd1da1e36bb46
|
||||
<std::panicking::begin_panic_handler::FormatStringPayload as core::panic::PanicPayload>::get<===>5633ca23dbba790c5c0e0732a549cd9131f8de01
|
||||
sub_347B0<===>1ddfa7ce9633226190c0a4644c0f3984d6691bee
|
||||
sub_34800<===>3eb4c8d87b565ba7e87518407df3db84b24b7643
|
||||
sub_34810<===>c665488aa113eb1aeebc305ee95fcbd1096242d0
|
||||
sub_34820<===>2b12dbd3a15e87024254ea84a92e56788f730ee9
|
||||
sub_34840<===>592effe000b39e18977409e026316d13caffc282
|
||||
sub_34920<===>bed7e8dc0a395b2407b2c498a911eb410ddda8f1
|
||||
sub_349A3<===>0da42937c2600867f9d73c3c4497e18d0291c8fa
|
||||
std::backtrace_rs::symbolize::Symbol::name<===>33bf412ad2d90021e5a392f64cdd098d5b024b98
|
||||
sub_34CF0<===>92a3ed06974e5244df6834b2e07479a6955af098
|
||||
sub_34DD0<===>f0aa993525a0b1aaf444ad2690f00ff02e2f6ab4
|
||||
sub_35190<===>ddd8b07803b5e50bb33e2465d8d04bca6b19a754
|
||||
<regex_automata::util::start::Start as core::fmt::Debug>::fmt<===>9e045eed92179aa5ba8d0a939db6c0d0dcf7132f
|
||||
sub_35390<===>7a71046470c130521244befe374241131bb67cc8
|
||||
<std::path::StripPrefixError as core::fmt::Debug>::fmt<===>19188e203035998817d32f66ed7f18a04ae03670
|
||||
sub_35490<===>f2ae6b939bfcb21b359cea91c37f81cced20418c
|
||||
sub_354B0<===>a1291619021fb673d315b47af4c27e7155b09a3c
|
||||
sub_35810<===>3e122f6fdd635c27c9308fbb5343af3478d68c3e
|
||||
sub_35A70<===>b70a1d15c1d518d27b9c771612813d36234bf196
|
||||
sub_36900<===>937dd740bcb92e80cd104555a76a5d11054a0856
|
||||
sub_36CC0<===>72e91bd5fd4478d08ca2985eb9169877634c8e3c
|
||||
stop_thread_logic<===>67185cdba791651f1a889c7e48bac2e31bf36018
|
||||
s_box_stuff<===>cd3042a1989da2eb0495865e9722543b77972054
|
||||
sub_376A0<===>0ffc7d5e1b1d490b493b9135d15cb59eebeafb4a
|
||||
sub_376B0<===>54fe9514ee713e33804bfae216d8b6fa42dcc84f
|
||||
sub_376C0<===>c858061015bc69510c1963ff18174fb686630ceb
|
||||
sub_37CE0<===>985e3420be87d24c20805a75b76436c1eceb3d99
|
||||
sub_37D00<===>2c9f1e6aa2dc0001b4241acd244797cab24ccab0
|
||||
sub_37E60<===>be05aa2b075de2f304ddaeb4d47bdb18acf591e8
|
||||
sub_37EB0<===>351f16311d3ca02724028eadec4b0bcd13479afe
|
||||
sub_38140<===>432ee5b5ecd1c02596f84b6d0f0d5064e981c797
|
||||
sub_38280<===>00163d9d50da44393773188040ec184bbb7e0e52
|
||||
sub_38450<===>187a49a306356cfc7ce7668a097114206872d56b
|
||||
sub_38520<===>26cc6fa7ef5ab1f2a62ebefcecaa969bf5f7d077
|
||||
sub_387F0<===>609830d5270c647560e481d72b140c875d7fe469
|
||||
sub_389B0<===>1d28060c57092ae43c83ff5bd465ae84b598a86c
|
||||
sub_38BC0<===>44029b0a686d0405d12e6f6d0efb7a7c54bc19b0
|
||||
sub_38D20<===>43261aca27b6b643873b1f95fbed195b6eb4e846
|
||||
sub_38D70<===>15d6583d634b26783361857de0ab05a3104ee718
|
||||
sub_38EC0<===>01c42dddf98249201adb6779e54353ef06dec342
|
||||
sub_38FD0<===>990469b5543614bbf9f7debf575c5c6512754ba4
|
||||
sub_39060<===>1596e1e444aeeb5320e3a55ae29afc0e65261496
|
||||
sub_39310<===>89e7152c6004d3fcc8cef1fa9057616ddccce9d7
|
||||
sub_3A110<===>d2a5af50b5200b17d57e50f5b87d21da087a443b
|
||||
sub_3A3E0<===>3c0124fd47fc32f346567ef97721ac3e06feb3d8
|
||||
sub_3A590<===>522ca0d6f77596ee955c710c1a00fff8f279b565
|
||||
sub_3B5B0<===>c2d7ea9bf1c576a8c04c77d71342b7177fa92513
|
||||
sub_3B980<===>78ebe9be5a3e39fb9242db1fa9d6e877117d0564
|
||||
sub_3BB40<===>1bffca0842863d444bcfd973457a629b5b9b9fed
|
||||
sub_3BC20<===>4a20b23aa274b57735c5c7a457abe59bce430caa
|
||||
sub_3BE00<===>ed24d6f5a5fe63ad2acaf7aec705967cf3dead1a
|
||||
sub_3BE50<===>2762ba9825c1920edfc27ca48d7087ec25b43224
|
||||
sub_3BEA0<===>43ff6c4e6cc9538026d3a62213352e11b6dda419
|
||||
sub_3BEB0<===>5a541cfde27c8ac0b7a861280fb14ab17f594a79
|
||||
sub_3BEC0<===>46a84d47dd9b22c75ecf92a9bac8cf02fa346911
|
||||
sub_3BEE0<===>f46a4f38a5fe80016ec6005f630b07d937681f1d
|
||||
sub_3BFE0<===>7269c921140ceaa269b3dc3572c4b11e117adc97
|
||||
sub_3C0C0<===>5107b898a012120a1bb9889ad267af5f6723fd6c
|
||||
std::backtrace_rs::backtrace::libunwind::trace::trace_fn<===>d3ef5ea50676744effdbca33807c5430772296eb
|
||||
sub_3C210<===>d6afacc6bc1e8f689f2fb1f9dbadb3bbac58be8a
|
||||
sub_3C312<===>8f81dfe5b52ea9fa24b9f79051207a079a052dca
|
||||
sub_3F5B0<===>51ee6c60cc8e100dc9a493e801a01f0eaa8d00c3
|
||||
sub_3F858<===>4e93517ac8bbf59a8059dc67df85448b4f04da35
|
||||
sub_43820<===>723b429561fda16e1e523619355b955b0ce3d2f7
|
||||
sub_444B0<===>d9cc7c0b24cc5d5b9114ffc481e9d07a2d6e5b43
|
||||
sub_448F0<===>a8e79d2c757b3de4c112fa3f321abe7743fc366b
|
||||
sub_45040<===>1533df5e955bac2a8693e31e5ef7b23b1e03c079
|
||||
sub_453D0<===>1a2333f5fdece8676a67de9cdc5ae96b94afcb55
|
||||
sub_45490<===>441b796a176744e3124f0aed0ab6395890c95380
|
||||
sub_45630<===>545de494bdeec48154f6a3417d6dd52dcdc6c380
|
||||
sub_45740<===>797bb567de4bb73c7c827d7f0de39bb4be902c4e
|
||||
callback<===>2015da01d672a15149f23fccfc045f3429a6c61c
|
||||
sub_45EF0<===>7992ab57ef4737c9658c3479bcbe5bd9ce6e9e94
|
||||
sub_466E0<===>bcc99e85edebcc6ac7a46466a1fb97d3b077287e
|
||||
core::ptr::drop_in_place<panic_unwind::real_imp::Exception><===>403470915d910c874d89f931b9aad83ee6d51ff4
|
||||
core::ptr::drop_in_place<alloc::boxed::Box<panic_unwind::real_imp::Exception>><===>909b780a819f578b45628971f81999c951e4666d
|
||||
__rust_panic_cleanup<===>3369c5c2e6b06749f20fcce9365f850982b9b0d8
|
||||
sub_46900<===>e622ebc52c0dc21d02e77e034980caaa247fb645
|
||||
sub_469B0<===>2b61a4415c3c4f6d2420bd173402a8bea8274008
|
||||
sub_469D0<===>77e8dea1615fabaee92dea90f14456e273455c96
|
||||
sub_46D9F<===>481c497d4941d5b2746ffdf3628993c2e4b06871
|
||||
sub_46E03<===>9599023ae75bc431f5a24d30c4ac6e74d7805fc6
|
||||
sub_46F2D<===>6666d53520b22972119ee5f6b0ef1edabf4b5192
|
||||
sub_47106<===>ac1e7af9e5e1977675dbd3be644036d25d69cc43
|
||||
sub_47186<===>59430fade247f61b91017e11bf931d9bb9779ff0
|
||||
sub_471FE<===>623c9f85f8280744606820b2617f126dff9f4df7
|
||||
alloc::collections::btree::map::entry::VacantEntry<K,V,A>::insert_entry<===>cd4e5b3b4619031a9b03a737822453b23e9b96c7
|
||||
sub_4736F<===>6bcd9ae425222ffe62ffeec0ea3675aa91cf4a46
|
||||
sub_4740D<===>3fd559cbae040c42f91f5a2ec69b7f098ecd8e67
|
||||
sub_474D2<===>9c316810bc6fd122d3e327661f0584ef8ececc8d
|
||||
alloc::collections::btree::node::Handle<alloc::collections::btree::node::NodeRef<alloc::collections::btree::node::marker::Mut,K,V,alloc::collections::btree::node::marker::Leaf>,alloc::collections::btree::node::marker::KV>::split<===>36bb326e9f3cabe84f5af8e2a27fa8a22e1048d7
|
||||
alloc::collections::btree::node::Handle<alloc::collections::btree::node::NodeRef<alloc::collections::btree::node::marker::Mut,K,V,alloc::collections::btree::node::marker::Leaf>,alloc::collections::btree::node::marker::Edge>::insert_fit<===>f5617b316dfab365aff09ae3aafe5386a03206cd
|
||||
sub_477BC<===>5dcb1238debfd9ebda65b6b6a3bda54bb6417a95
|
||||
sub_47A25<===>7fbc00e48ca162ae758a7004fba390e640bf5c4a
|
||||
alloc::collections::btree::node::Handle<alloc::collections::btree::node::NodeRef<alloc::collections::btree::node::marker::Mut,K,V,alloc::collections::btree::node::marker::Internal>,alloc::collections::btree::node::marker::KV>::split<===>44871edae9c883ee4c7cf918a8e560143889534e
|
||||
sub_47D39<===>cd102d0bbd7ce187899cbd39fdf0b6aa04f665ff
|
||||
sub_47E88<===>fa487685ffb09921daa4f05b87890b85522f9613
|
||||
sub_47FFD<===>023f8a1220c74f85498818a223702a000ef1285b
|
||||
sub_4802E<===>063fe14e551ac93ed2b47f0d4a831aaf11a30b46
|
||||
alloc::raw_vec::RawVec<T,A>::grow_one<===>f557fc963ab1935a17a93c10bb3b2df605c1b20d
|
||||
alloc::raw_vec::RawVec<T,A>::grow_one<===>aecd9e2fe8f9b74ce8d31ebd232a24444a42e8df
|
||||
sub_480ED<===>65d848c2b16888f0887e3ea844504975971c845b
|
||||
sub_48133<===>c020b97cc18369817bbc2e3b8116c8ce915ef846
|
||||
sub_48226<===>72a1faf99f4eb19342932f23ca435531b93dc0b4
|
||||
nullsub_3<===>930d656a772e361b7dd344b33b224e988760f175
|
||||
<[A] as core::slice::cmp::SlicePartialEq<B>>::equal<===>b222357d1084a928f74875e23d6b081ec77dd1be
|
||||
sub_48304<===>bb18e71a62fb8654f2dd99283c512e582a6ddb88
|
||||
sub_48314<===>2c7beb42ee1cca7b06ac6b7b4d889e9d9d865b28
|
||||
sub_48415<===>bc37c477ce157ebc277c43599814b831f3a191f2
|
||||
sub_484A0<===>d619f49f2f59624ce71e1520b555bb4122740e46
|
||||
sub_4860A<===>f311b40f2955ed2f0d45dc2e9dcb7508dcb4cdbd
|
||||
sub_48646<===>f20ec98844c31e2e3adbae765a2eba2cf1018712
|
||||
sub_48954<===>46b6edc412edce5027cacb1669257c073e4c3b24
|
||||
sub_48967<===>efc34414be3dedefd84e78b7abf14aeff496bed9
|
||||
sub_4898B<===>bc29c25cf699bda682d6ec8265443ec380a9b654
|
||||
sub_489B6<===>e79f637ffba4ad5737dc99b89f98439ebb37dc88
|
||||
sub_489BF<===>b9a669ed43ed8d39788b2f75891ff4e449a6941f
|
||||
sub_489D4<===>33cef691d836163ff14f99edab76f372e47eb473
|
||||
sub_48A41<===>bb8a93a0c5ddfa82e5266e7f941f7caf76837cec
|
||||
sub_48AFB<===>28738f684dd77991e66276dccb696cc97e8a4d49
|
||||
sub_48B0B<===>821e5c28d3d151d5753ca0f7155c3c8e674b677b
|
||||
sub_48B81<===>00e86ef70cae6f98e80201933f5e2a49199690cc
|
||||
sub_48CCF<===>64fd98e5ae6082ee22b5510c56153a612ba8459e
|
||||
sub_48D8D<===>31c511701a55b605a56093b795838d69864bd14a
|
||||
sub_48DA0<===>49e85a15cea429c3042c0edee8c802d30c7dc3c7
|
||||
sub_48DB5<===>5156263c799154aedf819f3f1491f07b7914d765
|
||||
sub_48DFA<===>e44aef4cafd3367ad1de8ad8330ac82330d584cd
|
||||
sub_49163<===>577f027762e8f381d59b06f9b2f6da41e5cdd6ba
|
||||
sub_49178<===>1de5abddef6f0b3f5ef2c6299dbd6f6063cbc10e
|
||||
sub_49C43<===>defc48fca10b559e0067364c079adcf68ce72eea
|
||||
sub_4A04F<===>c0c360eef33376dce0a5aa80ef9350099db5cf21
|
||||
sub_4A14D<===>1f1bf245552cdac92ca1dbba20ba433bfa900ea2
|
||||
sub_4A178<===>29404eef9ba8c4873efc9f23c92d5a58be050bee
|
||||
sub_4A217<===>4219e7aef78812dae444c28cca6aa6ed622fb8e1
|
||||
sub_4A2B9<===>c5f3e00d989865724309d862ba3b2c28d8797abf
|
||||
sub_4A32D<===>9e404aba8222b06abf75580fca6f64da1d8b3ce2
|
||||
sub_4A37C<===>69173d031f46733ee35003534d9ba7e5dd2879d3
|
||||
sub_4A3FA<===>13511f95b084b76b0e144266dc9d4260a2aa5aa5
|
||||
rustc_demangle::v0::Printer::skipping_printing<===>d67b087a06082383ff476392147914ba345a0287
|
||||
sub_4A61D<===>80d086cea5676e46a7c9b6586064cb52054cc7cc
|
||||
sub_4A70B<===>304687cf2727119cf56250bc018b557f6c1d7232
|
||||
sub_4A7EC<===>264c430be34a9097822058b84a56aeb467789790
|
||||
sub_4A8DA<===>ff81f230c94a9b2de4e4ad1153d3faba5ed70c14
|
||||
sub_4AA73<===>34081cfa8ae8316bdab020fe1761658219bc3664
|
||||
sub_4AB64<===>4f8791dccbc6c090b9856962c2c7019be37ffe15
|
||||
sub_4ACE7<===>df2880ad99c1d17fe94dceb899f33a30ff10835f
|
||||
sub_4AE65<===>2b59b0ab978d8d20f1227287f2800ca054a53083
|
||||
sub_4B036<===>16db6701ad95f26b60a12a775702bee371e28029
|
||||
sub_4B17A<===>031d4e2247227e411b4fb9fdb6106e335dcfb6dc
|
||||
sub_4B211<===>d8e0d3a6bf458c54510e0ec25c84fb4c16f9f463
|
||||
sub_4B2AE<===>ab06ac95ca4862f4d8fc27f39135d2d71334b875
|
||||
sub_4B350<===>6cfd6fe5fef6c362a6a590890c92cca7bd129ee2
|
||||
sub_4B574<===>4668231149e3b4f60b424272f7033e88aa35cdd7
|
||||
sub_4BC54<===>954b3a18ab6a0c3915d8ff859ec6b60b59af275a
|
||||
sub_4C158<===>b686323dc031c7fb33d67cb57f7fe6acb6f2ce08
|
||||
sub_4C4E4<===>28a426edd96a30feabdea02428f3df493c0088ed
|
||||
sub_4C62B<===>8b8d9e9c24ee603887768a32e6c9bfcf45313bbb
|
||||
sub_4CC9F<===>d0d4c39c9228dd006119a59fc5c505942375e0dc
|
||||
sub_4CE08<===>df5c5b80c66578a24ac2b7ade9f2fd5724fafc87
|
||||
sub_4D119<===>312ae6cbe8cb5b3bbf2df716c065c226994600a1
|
||||
sub_4DC62<===>441d1dcc3f4d9bed71445fd42180629d65b88952
|
||||
sub_4DCFA<===>b6fa972c8cb6e0c3bd461b060ea40dfaef1efa8a
|
||||
sub_4DD1F<===>9bcb91053ab3d80c433a31b7e0cb840426e53522
|
||||
sub_4DE5F<===>32a2bf99afa7362994c3110582ad49f4684111ab
|
||||
sub_4DE74<===>632305f0f2a26609666e97ec2467c15a9903441b
|
||||
sub_4DEF2<===>8a2284faf9fda692d227b20b30cfe664ce0630ec
|
||||
sub_4DF3D<===>b0ebdcf3cbba7244072d568ee533af433cb7ff30
|
||||
sub_4E392<===>db23faf172d06925cf225e168828ac98f9cea0b1
|
||||
sub_4E7CC<===>056a1d62cd8e39152c59c1418a893ac54a30d85c
|
||||
sub_4E99B<===>4888411d3b577ace577b25ea36e1ba1bcf3dc6ea
|
||||
sub_503E0<===>e7114a73184aae9980b8fb8dcbd729f86efe1955
|
||||
sub_507D0<===>760aeb2e905c217263841ce1097570c31c733661
|
||||
sub_50800<===>c62242dc445db37f645a7973fc14642f0861a9de
|
||||
sub_50820<===>6d5706a6092d7100ad64ec2d1697b669ae230b07
|
||||
sub_508C0<===>57ab5159ad60ba0490bfe371491ef00b1a2a3db3
|
||||
sub_508D0<===>67c966660c3e058e7c93e6ec4a2e803f8db48be3
|
||||
sub_508F0<===>09e306eb5ff252b42e8eb1a4c88d8e4789bee70c
|
||||
sub_50910<===>e4c915dc0ccae1bfb114af9a7f75b5cd2f3f2ad0
|
||||
sub_50A50<===>f6405dc62fa02dc528b5a31404659405ff998ec7
|
||||
sub_50B80<===>ada19be7850e55633e7a64477711ec320a94b3f0
|
||||
sub_50BA0<===>64b491da0d340a77cb63b6f913ea50ff27121cab
|
||||
sub_50C20<===>1c2fb379fb3e1bd11fdf05a5db1bb99446433401
|
||||
sub_50C40<===>ce87dad4ada64eae17e99e704db2a0721759598a
|
||||
sub_50DE0<===>1237f7ccad03083ddc81f3b1fbfc388187211ff4
|
||||
sub_51040<===>630d140a819f3bd3cb64e2e30cbcb7686b6acaa3
|
||||
sub_51110<===>4ec787c4c1e0d72addc6d1a70756ffdf870b3659
|
||||
sub_511C0<===>5015ad0bb3dc0c5b6c8b63dd534f3f917e902a8f
|
||||
sub_511D0<===>8a806e5b8fa75fac61684bc65c9548d222b32866
|
||||
sub_51260<===>d96c901ede404804c58c872e557bff86b349ad62
|
||||
sub_51310<===>54c641a430608b25e6ed4d5935050696618b2b80
|
||||
sub_51370<===>6855c0deeb9a46c3ba1794a71dc21436d0af21e5
|
||||
sub_51490<===>023b9c4a58385c37b09ea4c0b8b04f8e4984de49
|
||||
sub_51670<===>6b36de5d0414571d58a58a5c0a4ad30a49ef366b
|
||||
sub_51690<===>b0add5d4f35ecd7cf1592646b3bb7ec9777caaf0
|
||||
sub_518C0<===>fe0a239bd82313a98403f133bca541724ba6e5f3
|
||||
sub_519F0<===>0328254a9eee1fe97eb1d75e3b796026dd3fe05f
|
||||
sub_51A10<===>7bd8da7719d3bdbc313a7d06a31ed48777edd34a
|
||||
sub_51C70<===>25f438fcf2b9d50972054ef94fb1c08849bcf208
|
||||
sub_52020<===>cd01d17f372eb666e17f7fd4fe011386f8c46f9a
|
||||
sub_52170<===>d3ddb8eda751b00c489b8d8d420cec08c5c9157f
|
||||
sub_52360<===>33d647c79a6d616d9be31c0002a7ac4d966b37b3
|
||||
sub_52500<===>956c7246780bb199f405d297a90e6d7d2576a52b
|
||||
sub_52690<===>d950ee723cf96084015bf342f910a5b260af118d
|
||||
sub_526B0<===>88a95a4e74771ee490612e6be1f95269b3d40000
|
||||
<core::fmt::builders::PadAdapter as core::fmt::Write>::write_char<===>bbe081e9e104ca9b7ec8e08dff91938680387d2e
|
||||
sub_52980<===>f7bad997655c901f2f811862ddac23b95fd152c5
|
||||
sub_52B10<===>657f99de90360e0606dfd24b67bdf8b0465a38a3
|
||||
sub_52B70<===>2d4bab2f40423560d63c3153341bf687e15ff3ea
|
||||
sub_52CA0<===>f203e72460275d7df703917c58a82b224c8f3263
|
||||
sub_52D30<===>9c3649518be655add32c6cf4d153426904b55ee8
|
||||
sub_52E50<===>a98ba011074ef7259f1520a0bf3ad1142b0f0cc3
|
||||
sub_52E90<===>07cd876d66646154a5461d10d11620602bff1505
|
||||
sub_52EA0<===>25cfedee1fc4faec4718231754d2d035bc2c2a74
|
||||
sub_52EB0<===>7a9b17a1e7873981a6753fa0a81e5f77a3a23988
|
||||
sub_530C0<===>d1ed4403cf682dd4a247bd33eb87978a7b984a19
|
||||
core::fmt::Formatter::pad_integral::write_prefix<===>4577365eddb991fc4a1c5adf985b20cee6b48cae
|
||||
core::fmt::Formatter::pad<===>a436102399ca4ac418c922ff3597054bf0c3e90d
|
||||
sub_53A70<===>84b265de82ca5ecb7bd312994115b57738509ff0
|
||||
sub_53A80<===>438420e18764d45c2031370407db9c5c0c9fac4a
|
||||
sub_53AC0<===>d3f589ae3de45a88e80fcfb4273f62a3f2468435
|
||||
sub_53B70<===>09768d499b6ffc777f02d3f74ff156399355e566
|
||||
sub_53C40<===>9f32add8f3bbddc0cde5923637ad90824b492e9c
|
||||
sub_53C90<===>4295b3664429f2d9051e9a3f6dc5803154ab69dc
|
||||
sub_53DD0<===>3f8dd19634664a9046e61280a2fd4fe18fc8b7e3
|
||||
sub_53E10<===>6bd227e4de0717f528fae5db6eba34dffb0673c1
|
||||
sub_53E20<===>f0c96e2a7ecdb8861fdce1ffe1e081de02dfb610
|
||||
sub_541A0<===>0cdbe62d27ad42546c9a414f7f66cb827bc7084d
|
||||
sub_541C0<===>3d24e23a882f5200daf101a9b1d67be08668091e
|
||||
sub_54260<===>1082f6701bd90360396f3660eb51f28d830c290e
|
||||
sub_54330<===>94acb7202eb5ba0540f9f3cdc117a799735e1f17
|
||||
sub_543F0<===>c79b3f705f7bc5aee36c9196b34252eb3de05572
|
||||
core::slice::memchr::memrchr<===>cecd4ad8f1dd97694b7b271432761597ed8cc671
|
||||
sub_54610<===>4350ea137bfa31d65db857b2380fab9ab64e432d
|
||||
sub_54640<===>bd992cb8c13e5b228cdf95a9ef21fcc4bd526739
|
||||
sub_54840<===>a43c409e02cec042eb1091bf70c1abb6771580f1
|
||||
sub_54ED0<===>a8e5cec883fae48c7eb0ff365557c9c8d3a160ab
|
||||
sub_54F90<===>236161c400190b3ee046f4ced70ac629636894f5
|
||||
sub_554E0<===>22b6685fc124156f4ece88acdf6710f2a7aadfcd
|
||||
sub_55910<===>3d81f2c311f373ac1ffff1682fd9e6553c606519
|
||||
sub_55AA0<===>b16f02542debf98ed0f904ba3d84cccbc5731866
|
||||
sub_55E80<===>91c4c15bd7802727a34e33e9d6add0a7b8775f4c
|
||||
sub_55FA0<===>a5ff037ace8da92ca5e6d279d844a62456c4e6ad
|
||||
core::fmt::num::<impl core::fmt::LowerHex for u8>::fmt<===>ee4b17ea6da659c44dab33df16f51cdc61146bdb
|
||||
core::fmt::num::<impl core::fmt::UpperHex for u8>::fmt<===>fb8acb41c3efcc600aa30110e9af8e43073fbd44
|
||||
core::fmt::num::<impl core::fmt::LowerHex for u16>::fmt<===>d9daa3c4f40eea12bd4de630804cc879119a73c8
|
||||
core::fmt::num::<impl core::fmt::LowerHex for u32>::fmt<===>2dfca82ed3eaf3ce55a6a7bc1cff32d298baeb33
|
||||
core::fmt::num::<impl core::fmt::UpperHex for u32>::fmt<===>98796450bc7cdc184898f283929e848bcc50233b
|
||||
core::fmt::num::<impl core::fmt::LowerHex for usize>::fmt<===>49e2f4ea7339392e8283c7168a04a0b58e92ba7e
|
||||
core::fmt::num::<impl core::fmt::UpperHex for usize>::fmt<===>cace9fcbdd8fae62fd77da5d0e615718222793c3
|
||||
sub_56440<===>611bda66dbc35a6ed65ad59405bab2e242037538
|
||||
sub_564E0<===>84de3ee1d42eef1bfbe06fc0446924c222b81a4e
|
||||
sub_565F0<===>534f0aae5dabb40b889c6a901d0ad2149bb44057
|
||||
sub_56710<===>a7da8880fd61b1fb88df3df9d5b9efd0b9322dba
|
||||
sub_56820<===>43a1d0c84803aafc6e9bf8a969494a5505d6c0d5
|
||||
sub_56950<===>1cf9e32f40d8f9a11a86e0700d837040bc2f93cd
|
||||
sub_56960<===>91fc0b7ebbc901b76c2ac2c2a6671be7b7cccf40
|
||||
sub_56A40<===>8fc66619cd06e6b9d44f148a05e286cc89fdd005
|
||||
sub_56A60<===>d9767a59cffc7e393ec1ad801fc6744344f87370
|
||||
sub_56A80<===>4eefcfe2a556e404f35c3a09277469120d7888f1
|
||||
.term_proc<===>5fdd6ffc527268e88563f60499fea977479ec682
|
||||
getenv<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
dl_iterate_phdr<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__imp_free<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
recv<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pidfd_spawnp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawn_file_actions_init<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__libc_start_main<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
abort<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_Backtrace<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__errno_location<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__res_init<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_setpgroup<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_exit<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
chroot<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sendmsg<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
writev<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_getattr_np<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sigaction<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__cxa_thread_atexit_impl<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__xpg_strerror_r<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
readlink<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
fcntl<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetRegionStart<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_destroy<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
write<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
getpid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetTextRelBase<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_RaiseException<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawn_file_actions_destroy<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
strlen<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
chdir<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
dup2<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
stat64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
send<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
gai_strerror<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_key_create<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
memset<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
ioctl<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
getcwd<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetIPInfo<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
close<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
setgroups<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetLanguageSpecificData<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_key_delete<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
read<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
memcmp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__tls_get_addr<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_init<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
calloc<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
signal<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
syscall<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sigemptyset<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_attr_getstack<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
realpath<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
memcpy<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
socketpair<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pidfd_getpid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetIP<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_attr_getguardsize<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
mmap64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pause<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
malloc<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
bcmp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
ptrace<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
realloc<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
munmap<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
recvmsg<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
getauxval<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_setsigdefault<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
statx<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_GetDataRelBase<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
gnu_get_libc_version<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
poll<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_SetGR<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
open64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
memmove<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_self<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
setgid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
waitpid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
mprotect<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sysconf<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_attr_destroy<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
execvp<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
setpgid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pipe2<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawnattr_setflags<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
exit<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
connect<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
lseek64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
fstat64<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_memalign<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
setuid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_DeleteException<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawn_file_actions_adddup2<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
getaddrinfo<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sigaltstack<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_Resume<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
waitid<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
posix_spawn_file_actions_addchdir_np<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
__cxa_finalize<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
sigaddset<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
fork<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
pthread_setspecific<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
_Unwind_SetIP<===>8cd537a621659c289f0707bad94719b5782ddb1f
|
||||
freeaddrinfo<===>5f2a01414cd5aa75c672523f836fcd95f7dea09e
|
||||
socket<===>b082df749cf765800d7fdafdafc2c1b819e24b48
|
||||
__gmon_start__<===>2a1f5993928c1b1cc260b95fa0dfa81e44574d69
|
||||
42
2025/glacier/rev/c2/ida_script.py
Normal file
42
2025/glacier/rev/c2/ida_script.py
Normal file
@@ -0,0 +1,42 @@
|
||||
import idc
|
||||
import idaapi
|
||||
import sys
|
||||
|
||||
def main():
|
||||
# 1. Get the effective address (EA) of the current cursor position.
|
||||
ea = idaapi.get_screen_ea()
|
||||
|
||||
if ea == idaapi.BADADDR:
|
||||
print("[-] Error: Could not get current effective address.")
|
||||
return
|
||||
|
||||
# 2. Read the value at the effective address.
|
||||
# We will try to read a 4-byte (DWORD) value as a common default.
|
||||
# You might need to adjust the size (e.g., idc.get_qword for 8 bytes, idc.get_byte for 1 byte)
|
||||
# depending on what you are highlighting.
|
||||
try:
|
||||
# Use get_wide_dword to read 4 bytes (DWORD).
|
||||
# Note: If you highlight an immediate value, you might need more complex logic
|
||||
# (like analyzing the instruction's operand) to get the value directly.
|
||||
# This approach assumes you are highlighting the address of the variable's value in memory.
|
||||
value = idc.get_wide_dword(ea)
|
||||
except Exception as e:
|
||||
print(f"[-] Error reading memory at 0x{ea:X}: {e}")
|
||||
return
|
||||
|
||||
# 3. Format the value as a hexadecimal string.
|
||||
# The 'X' format specifier produces a hexadecimal string (e.g., 'DEADBEEF').
|
||||
# The '0' fills with leading zeros up to the required width (8 for DWORD).
|
||||
hex_string = f"{value:08X}"
|
||||
|
||||
# 4. Print the output in the format you requested:
|
||||
# "Passing value as hex string: DEADBEEF"
|
||||
print(f"[+] Effective Address: 0x{ea:X}")
|
||||
print(f"[+] Extracted Value (4-bytes): 0x{value:X}")
|
||||
print(f"[+] Passing value as hex string: {hex_string}")
|
||||
|
||||
if __name__ == "__main__":
|
||||
# Ensure the environment is set up for IDAPython execution
|
||||
print("--- Running Script to Get Highlighted Value ---")
|
||||
main()
|
||||
print("--- Script Finished ---")
|
||||
6
2025/glacier/rev/c2/main.py
Normal file
6
2025/glacier/rev/c2/main.py
Normal file
@@ -0,0 +1,6 @@
|
||||
def main():
|
||||
print("Hello from c2!")
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
16
2025/glacier/rev/c2/network_captures/1
Normal file
16
2025/glacier/rev/c2/network_captures/1
Normal file
@@ -0,0 +1,16 @@
|
||||
00000000 43 42 01 00 00 0c 63 61 74 6f 40 75 6e 6b 6e 6f CB....ca to@unkno
|
||||
00000010 77 6e 00 31 wn.1
|
||||
00000000 43 42 05 00 00 38 41 43 4b 3a 20 43 6c 69 65 6e CB...8AC K: Clien
|
||||
00000010 74 20 27 63 61 74 6f 40 75 6e 6b 6e 6f 77 6e 27 t 'cato@ unknown'
|
||||
00000020 20 72 65 67 69 73 74 65 72 65 64 2e 0a 46 49 4c registe red..FIL
|
||||
00000030 45 4e 41 4d 45 3a 66 6c 61 67 2e 74 78 74 00 16 ENAME:fl ag.txt..
|
||||
00000014 43 42 06 00 00 09 66 6c 61 67 2e 74 78 74 00 00 CB....fl ag.txt..
|
||||
00000024 5a Z
|
||||
00000040 43 42 07 00 00 14 99 90 9c 9d d5 8c 81 82 91 98 CB...... ........
|
||||
00000050 94 95 dd 84 89 9a 00 01 03 a0 00 b2 ........ ....
|
||||
00000025 43 42 05 00 00 0a 43 52 59 50 54 4f 5f 41 43 4b CB....CR YPTO_ACK
|
||||
00000035 00 15 ..
|
||||
0000005C 43 42 05 00 00 02 4f 4b 00 04 CB....OK ..
|
||||
00000037 43 42 ff 00 00 00 00 00 CB......
|
||||
00000066 43 6c 69 65 6e 74 20 64 69 73 63 6f 6e 6e 65 63 Client d isconnec
|
||||
00000076 74 69 6e 67 0a ting.
|
||||
16
2025/glacier/rev/c2/network_captures/2
Normal file
16
2025/glacier/rev/c2/network_captures/2
Normal file
@@ -0,0 +1,16 @@
|
||||
00000000 43 42 01 00 00 0c 63 61 74 6f 40 75 6e 6b 6e 6f CB....ca to@unkno
|
||||
00000010 77 6e 00 31 wn.1
|
||||
00000000 43 42 05 00 00 38 41 43 4b 3a 20 43 6c 69 65 6e CB...8AC K: Clien
|
||||
00000010 74 20 27 63 61 74 6f 40 75 6e 6b 6e 6f 77 6e 27 t 'cato@ unknown'
|
||||
00000020 20 72 65 67 69 73 74 65 72 65 64 2e 0a 46 49 4c registe red..FIL
|
||||
00000030 45 4e 41 4d 45 3a 66 6c 61 67 2e 74 78 74 00 16 ENAME:fl ag.txt..
|
||||
00000014 43 42 06 00 00 09 66 6c 61 67 2e 74 78 74 00 00 CB....fl ag.txt..
|
||||
00000024 5a Z
|
||||
00000040 43 42 07 00 00 14 99 90 9c 9d d5 8c 81 82 91 98 CB...... ........
|
||||
00000050 94 95 dd 84 89 9a 00 00 e9 89 00 70 ........ ...p
|
||||
00000025 43 42 05 00 00 0a 43 52 59 50 54 4f 5f 41 43 4b CB....CR YPTO_ACK
|
||||
00000035 00 15 ..
|
||||
0000005C 43 42 05 00 00 02 4f 4b 00 04 CB....OK ..
|
||||
00000037 43 42 ff 00 00 00 00 00 CB......
|
||||
00000066 43 6c 69 65 6e 74 20 64 69 73 63 6f 6e 6e 65 63 Client d isconnec
|
||||
00000076 74 69 6e 67 0a ting.
|
||||
16
2025/glacier/rev/c2/network_captures/3
Normal file
16
2025/glacier/rev/c2/network_captures/3
Normal file
@@ -0,0 +1,16 @@
|
||||
00000000 43 42 01 00 00 0c 63 61 74 6f 40 75 6e 6b 6e 6f CB....ca to@unkno
|
||||
00000010 77 6e 00 31 wn.1
|
||||
00000000 43 42 05 00 00 38 41 43 4b 3a 20 43 6c 69 65 6e CB...8AC K: Clien
|
||||
00000010 74 20 27 63 61 74 6f 40 75 6e 6b 6e 6f 77 6e 27 t 'cato@ unknown'
|
||||
00000020 20 72 65 67 69 73 74 65 72 65 64 2e 0a 46 49 4c registe red..FIL
|
||||
00000030 45 4e 41 4d 45 3a 66 6c 61 67 2e 74 78 74 00 16 ENAME:fl ag.txt..
|
||||
00000014 43 42 06 00 00 09 66 6c 61 67 2e 74 78 74 00 00 CB....fl ag.txt..
|
||||
00000024 5a Z
|
||||
00000040 43 42 07 00 00 14 99 90 9c 9d d5 8c 81 82 91 98 CB...... ........
|
||||
00000050 94 95 dd 84 89 9a 00 00 96 5d 00 db ........ .]..
|
||||
00000025 43 42 05 00 00 0a 43 52 59 50 54 4f 5f 41 43 4b CB....CR YPTO_ACK
|
||||
00000035 00 15 ..
|
||||
0000005C 43 42 05 00 00 02 4f 4b 00 04 CB....OK ..
|
||||
00000037 43 42 ff 00 00 00 00 00 CB......
|
||||
00000066 43 6c 69 65 6e 74 20 64 69 73 63 6f 6e 6e 65 63 Client d isconnec
|
||||
00000076 74 69 6e 67 0a ting.
|
||||
16
2025/glacier/rev/c2/network_captures/4
Normal file
16
2025/glacier/rev/c2/network_captures/4
Normal file
@@ -0,0 +1,16 @@
|
||||
00000000 43 42 01 00 00 0c 63 61 74 6f 40 75 6e 6b 6e 6f CB....ca to@unkno
|
||||
00000010 77 6e 00 31 wn.1
|
||||
00000000 43 42 05 00 00 38 41 43 4b 3a 20 43 6c 69 65 6e CB...8AC K: Clien
|
||||
00000010 74 20 27 63 61 74 6f 40 75 6e 6b 6e 6f 77 6e 27 t 'cato@ unknown'
|
||||
00000020 20 72 65 67 69 73 74 65 72 65 64 2e 0a 46 49 4c registe red..FIL
|
||||
00000030 45 4e 41 4d 45 3a 66 6c 61 67 2e 74 78 74 00 16 ENAME:fl ag.txt..
|
||||
00000014 43 42 06 00 00 09 66 6c 61 67 2e 74 78 74 00 00 CB....fl ag.txt..
|
||||
00000024 5a Z
|
||||
00000040 43 42 07 00 00 14 99 90 9c 9d d5 8c 81 82 91 98 CB...... ........
|
||||
00000050 94 95 dd 84 89 9a 00 00 12 27 00 25 ........ .'.%
|
||||
00000025 43 42 05 00 00 0a 43 52 59 50 54 4f 5f 41 43 4b CB....CR YPTO_ACK
|
||||
00000035 00 15 ..
|
||||
0000005C 43 42 05 00 00 02 4f 4b 00 04 CB....OK ..
|
||||
00000037 43 42 ff 00 00 00 00 00 CB......
|
||||
00000066 43 6c 69 65 6e 74 20 64 69 73 63 6f 6e 6e 65 63 Client d isconnec
|
||||
00000076 74 69 6e 67 0a ting.
|
||||
2
2025/glacier/rev/c2/output/85454_bb7cdd2e104c3410.enc
Normal file
2
2025/glacier/rev/c2/output/85454_bb7cdd2e104c3410.enc
Normal file
@@ -0,0 +1,2 @@
|
||||
|庑'W
|
||||
<EFBFBD>r<>0<EFBFBD>K<EFBFBD><4B><EFBFBD>Ǽ<EFBFBD>tNpخ<70><D8AE><EFBFBD><06><>7<EFBFBD>5<><11>1<13><><EFBFBD><EFBFBD><EFBFBD><08>&<26><><EFBFBD><EFBFBD>
|
||||
1
2025/glacier/rev/c2/output/flag.txt
Normal file
1
2025/glacier/rev/c2/output/flag.txt
Normal file
@@ -0,0 +1 @@
|
||||
FLAG{This is a test flag for educational purposes}
|
||||
208
2025/glacier/rev/c2/output_strace
Normal file
208
2025/glacier/rev/c2/output_strace
Normal file
@@ -0,0 +1,208 @@
|
||||
execve("./c2_client", ["./c2_client", "challs.glacierctf.com:13392"], 0x7ffec0bcc568 /* 82 vars */) = 0
|
||||
brk(NULL) = 0x56381f8d9000
|
||||
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
|
||||
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=188279, ...}) = 0
|
||||
mmap(NULL, 188279, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbaeac10000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=905800, ...}) = 0
|
||||
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaeac0e000
|
||||
mmap(NULL, 180712, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaeabe1000
|
||||
mmap(0x7fbaeabe5000, 143360, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fbaeabe5000
|
||||
mmap(0x7fbaeac08000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x27000) = 0x7fbaeac08000
|
||||
mmap(0x7fbaeac0c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2a000) = 0x7fbaeac0c000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360w\2\0\0\0\0\0"..., 832) = 832
|
||||
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 896, 64) = 896
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=2145632, ...}) = 0
|
||||
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 896, 64) = 896
|
||||
mmap(NULL, 2169904, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaea800000
|
||||
mmap(0x7fbaea824000, 1511424, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7fbaea824000
|
||||
mmap(0x7fbaea995000, 454656, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x195000) = 0x7fbaea995000
|
||||
mmap(0x7fbaeaa04000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x203000) = 0x7fbaeaa04000
|
||||
mmap(0x7fbaeaa0a000, 31792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbaeaa0a000
|
||||
close(3) = 0
|
||||
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaeabde000
|
||||
arch_prctl(ARCH_SET_FS, 0x7fbaeabde780) = 0
|
||||
set_tid_address(0x7fbaeabdea50) = 79924
|
||||
set_robust_list(0x7fbaeabdea60, 24) = 0
|
||||
rseq(0x7fbaeabde680, 0x20, 0, 0x53053053) = 0
|
||||
mprotect(0x7fbaeaa04000, 16384, PROT_READ) = 0
|
||||
mprotect(0x7fbaeac0c000, 4096, PROT_READ) = 0
|
||||
mprotect(0x5637f9ef2000, 20480, PROT_READ) = 0
|
||||
mprotect(0x7fbaeac7f000, 8192, PROT_READ) = 0
|
||||
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
|
||||
getrandom("\xb5\x7c\x0e\xd9\x6a\xe0\x43\x77", 8, GRND_NONBLOCK) = 8
|
||||
munmap(0x7fbaeac10000, 188279) = 0
|
||||
poll([{fd=0, events=0}, {fd=1, events=0}, {fd=2, events=0}], 3, 0) = 0 (Timeout)
|
||||
rt_sigaction(SIGPIPE, {sa_handler=SIG_IGN, sa_mask=[PIPE], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fbaea83e4d0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
|
||||
brk(NULL) = 0x56381f8d9000
|
||||
brk(0x56381f8fa000) = 0x56381f8fa000
|
||||
openat(AT_FDCWD, "/proc/self/maps", O_RDONLY|O_CLOEXEC) = 3
|
||||
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
|
||||
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
|
||||
read(3, "5637f9e82000-5637f9ed9000 r-xp 0"..., 1024) = 1024
|
||||
read(3, "-7fbaeaa12000 rw-p 00000000 00:0"..., 1024) = 1024
|
||||
read(3, " /usr/lib/ld-linux-"..., 1024) = 567
|
||||
lseek(3, 0, SEEK_CUR) = 2615
|
||||
lseek(3, 2531, SEEK_SET) = 2531
|
||||
close(3) = 0
|
||||
sched_getaffinity(79924, 32, [0 1 2 3 4 5 6 7]) = 8
|
||||
rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
|
||||
sigaltstack(NULL, {ss_sp=NULL, ss_flags=SS_DISABLE, ss_size=0}) = 0
|
||||
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbaeac3b000
|
||||
mprotect(0x7fbaeac3b000, 4096, PROT_NONE) = 0
|
||||
sigaltstack({ss_sp=0x7fbaeac3c000, ss_flags=0, ss_size=8192}, NULL) = 0
|
||||
rt_sigaction(SIGSEGV, {sa_handler=0x5637f9eb8900, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_SIGINFO, sa_restorer=0x7fbaea83e4d0}, NULL, 8) = 0
|
||||
rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
|
||||
rt_sigaction(SIGBUS, {sa_handler=0x5637f9eb8900, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_SIGINFO, sa_restorer=0x7fbaea83e4d0}, NULL, 8) = 0
|
||||
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=359, ...}, 0) = 0
|
||||
newfstatat(AT_FDCWD, "/", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
|
||||
openat(AT_FDCWD, "/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=359, ...}) = 0
|
||||
read(3, "# Name Service Switch configurat"..., 4096) = 359
|
||||
read(3, "", 4096) = 0
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=359, ...}) = 0
|
||||
close(3) = 0
|
||||
newfstatat(AT_FDCWD, "/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=285, ...}, 0) = 0
|
||||
openat(AT_FDCWD, "/etc/host.conf", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=73, ...}) = 0
|
||||
read(3, "# Resolver configuration file.\n#"..., 4096) = 73
|
||||
read(3, "", 4096) = 0
|
||||
close(3) = 0
|
||||
futex(0x7fbaeaa1072c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
|
||||
openat(AT_FDCWD, "/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=285, ...}) = 0
|
||||
read(3, "# Generated by NetworkManager\nse"..., 4096) = 285
|
||||
read(3, "", 4096) = 0
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=285, ...}) = 0
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=188279, ...}) = 0
|
||||
mmap(NULL, 188279, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbaeabb0000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libnss_mymachines.so.2", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=379936, ...}) = 0
|
||||
mmap(NULL, 379896, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaeab53000
|
||||
mmap(0x7fbaeab57000, 266240, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fbaeab57000
|
||||
mmap(0x7fbaeab98000, 81920, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x45000) = 0x7fbaeab98000
|
||||
mmap(0x7fbaeabac000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x59000) = 0x7fbaeabac000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libcap.so.2", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 {\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=43064, ...}) = 0
|
||||
mmap(NULL, 45128, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaeac2f000
|
||||
mmap(0x7fbaeac32000, 20480, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fbaeac32000
|
||||
mmap(0x7fbaeac37000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7fbaeac37000
|
||||
mmap(0x7fbaeac39000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7fbaeac39000
|
||||
close(3) = 0
|
||||
mprotect(0x7fbaeac39000, 4096, PROT_READ) = 0
|
||||
mprotect(0x7fbaeabac000, 12288, PROT_READ) = 0
|
||||
prctl(PR_CAPBSET_READ, CAP_MAC_OVERRIDE) = 1
|
||||
prctl(PR_CAPBSET_READ, 0x30 /* CAP_??? */) = -1 EINVAL (Invalid argument)
|
||||
prctl(PR_CAPBSET_READ, CAP_CHECKPOINT_RESTORE) = 1
|
||||
prctl(PR_CAPBSET_READ, 0x2c /* CAP_??? */) = -1 EINVAL (Invalid argument)
|
||||
prctl(PR_CAPBSET_READ, 0x2a /* CAP_??? */) = -1 EINVAL (Invalid argument)
|
||||
prctl(PR_CAPBSET_READ, 0x29 /* CAP_??? */) = -1 EINVAL (Invalid argument)
|
||||
munmap(0x7fbaeabb0000, 188279) = 0
|
||||
futex(0x7fbaeabaf358, FUTEX_WAKE_PRIVATE, 2147483647) = 0
|
||||
rt_sigprocmask(SIG_BLOCK, [HUP USR1 USR2 PIPE ALRM CHLD TSTP URG VTALRM PROF WINCH IO], [], 8) = 0
|
||||
openat(AT_FDCWD, "/run/systemd/machines/challs.glacierctf.com", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
|
||||
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
|
||||
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
|
||||
fstat(3, {st_mode=S_IFREG|0644, st_size=188279, ...}) = 0
|
||||
mmap(NULL, 188279, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbaeabb0000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libnss_resolve.so.2", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=211304, ...}) = 0
|
||||
mmap(NULL, 215400, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaeab1e000
|
||||
mmap(0x7fbaeab21000, 143360, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fbaeab21000
|
||||
mmap(0x7fbaeab44000, 45056, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7fbaeab44000
|
||||
mmap(0x7fbaeab4f000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x30000) = 0x7fbaeab4f000
|
||||
close(3) = 0
|
||||
openat(AT_FDCWD, "/usr/lib/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
|
||||
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
|
||||
fstat(3, {st_mode=S_IFREG|0755, st_size=1100400, ...}) = 0
|
||||
mmap(NULL, 1102152, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbaea6f2000
|
||||
mmap(0x7fbaea701000, 569344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7fbaea701000
|
||||
mmap(0x7fbaea78c000, 466944, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9a000) = 0x7fbaea78c000
|
||||
mmap(0x7fbaea7fe000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10b000) = 0x7fbaea7fe000
|
||||
close(3) = 0
|
||||
mprotect(0x7fbaea7fe000, 4096, PROT_READ) = 0
|
||||
mprotect(0x7fbaeab4f000, 12288, PROT_READ) = 0
|
||||
munmap(0x7fbaeabb0000, 188279) = 0
|
||||
futex(0x7fbaeab520e4, FUTEX_WAKE_PRIVATE, 2147483647) = 0
|
||||
rt_sigprocmask(SIG_BLOCK, [HUP USR1 USR2 PIPE ALRM CHLD TSTP URG VTALRM PROF WINCH IO], [], 8) = 0
|
||||
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
|
||||
connect(3, {sa_family=AF_UNIX, sun_path="/run/systemd/resolve/io.systemd.Resolve"}, 42) = 0
|
||||
sendto(3, "{\"method\":\"io.systemd.Resolve.Re"..., 104, MSG_DONTWAIT|MSG_NOSIGNAL, NULL, 0) = 104
|
||||
mmap(NULL, 135168, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaeabbd000
|
||||
recvfrom(3, 0x7fbaeabbd010, 135152, MSG_DONTWAIT, NULL, NULL) = -1 EAGAIN (Resource temporarily unavailable)
|
||||
ppoll([{fd=3, events=POLLIN}], 1, {tv_sec=119, tv_nsec=999564000}, NULL, 8) = 1 ([{fd=3, revents=POLLIN}], left {tv_sec=119, tv_nsec=974852424})
|
||||
recvfrom(3, "{\"parameters\":{\"addresses\":[{\"if"..., 135152, MSG_DONTWAIT, NULL, NULL) = 130
|
||||
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
|
||||
close(3) = 0
|
||||
munmap(0x7fbaeabbd000, 135168) = 0
|
||||
socket(AF_INET, SOCK_STREAM|SOCK_CLOEXEC, IPPROTO_IP) = 3
|
||||
connect(3, {sa_family=AF_INET, sin_port=htons(13392), sin_addr=inet_addr("34.185.202.132")}, 16) = 0
|
||||
openat(AT_FDCWD, "/dev/null", O_RDONLY|O_CLOEXEC) = 4
|
||||
pipe2([5, 6], O_CLOEXEC) = 0
|
||||
pipe2([7, 8], O_CLOEXEC) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
|
||||
mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbaeac26000
|
||||
rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
|
||||
clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7fbaeac26000, stack_size=0x9000}, 88) = 79925
|
||||
waitid(P_PID, 79925, NULL, WEXITED, NULL) = 0
|
||||
munmap(0x7fbaeac26000, 36864) = 0
|
||||
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
|
||||
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79925, si_uid=1000, si_status=127, si_utime=0, si_stime=0} ---
|
||||
close(4) = 0
|
||||
close(6) = 0
|
||||
close(8) = 0
|
||||
close(5) = 0
|
||||
close(7) = 0
|
||||
sendto(3, "CB\1\0\0\fcato@unknown\0001", 20, MSG_NOSIGNAL, NULL, 0) = 20
|
||||
recvfrom(3, "CB\5\0\08ACK: Client 'cato@unknown'"..., 4096, 0, NULL, NULL) = 64
|
||||
openat(AT_FDCWD, "/proc/self/status", O_RDONLY|O_CLOEXEC) = 4
|
||||
statx(4, "", AT_STATX_SYNC_AS_STAT|AT_EMPTY_PATH, STATX_ALL, {stx_mask=STATX_BASIC_STATS|STATX_MNT_ID, stx_attributes=0, stx_mode=S_IFREG|0444, stx_size=0, ...}) = 0
|
||||
read(4, "Name:\tc2_client\nUmask:\t0022\nStat", 32) = 32
|
||||
read(4, "e:\tR (running)\nTgid:\t79924\nNgid:", 32) = 32
|
||||
read(4, "\t0\nPid:\t79924\nPPid:\t79922\nTracer"..., 64) = 64
|
||||
read(4, "000\nGid:\t1000\t1000\t1000\t1000\nFDS"..., 128) = 128
|
||||
read(4, "79175\nKthread:\t0\nVmPeak:\t 524"..., 256) = 256
|
||||
read(4, "mLib:\t 2768 kB\nVmPTE:\t 5"..., 512) = 512
|
||||
read(4, "lationIndirectBranch:\tconditiona"..., 1024) = 515
|
||||
read(4, "", 509) = 0
|
||||
close(4) = 0
|
||||
sendto(3, "CB\6\0\0\tflag.txt\1\0[", 17, MSG_NOSIGNAL, NULL, 0) = 17
|
||||
recvfrom(3, "CB\7\0\0\24\312\303\317\316\206\337\322\321\302\313\307\306\216\327\332\311\0\0[\201\0\312", 4096, 0, NULL, NULL) = 28
|
||||
openat(AT_FDCWD, "flag.txt", O_RDONLY|O_CLOEXEC) = 4
|
||||
statx(4, "", AT_STATX_SYNC_AS_STAT|AT_EMPTY_PATH, STATX_ALL, {stx_mask=STATX_ALL|STATX_MNT_ID, stx_attributes=0, stx_mode=S_IFREG|0644, stx_size=50, ...}) = 0
|
||||
read(4, "FLAG{This is a test flag for edu"..., 50) = 50
|
||||
read(4, "", 32) = 0
|
||||
close(4) = 0
|
||||
openat(AT_FDCWD, "/dev/urandom", O_RDONLY|O_CLOEXEC) = 4
|
||||
read(4, "J\341%\220\354*\0>", 8) = 8
|
||||
close(4) = 0
|
||||
openat(AT_FDCWD, "23425_4ae12590ec2a003e.enc", O_WRONLY|O_CREAT|O_TRUNC|O_CLOEXEC, 0666) = 4
|
||||
write(4, "d\10\311\275\257\23\331\232-)R\335`HG\236\202\311\177\352\f\333\223\t\245\25\200\177\345\337\206\7"..., 56) = 56
|
||||
close(4) = 0
|
||||
sendto(3, "CB\5\0\0\nCRYPTO_ACK\0\25", 18, MSG_NOSIGNAL, NULL, 0) = 18
|
||||
recvfrom(3, "CB\5\0\0\2OK\0\4", 4096, 0, NULL, NULL) = 10
|
||||
sendto(3, "CB\377\0\0\0\0\0", 8, MSG_NOSIGNAL, NULL, 0) = 8
|
||||
recvfrom(3, "Client disconnecting\n", 4096, 0, NULL, NULL) = 21
|
||||
close(3) = 0
|
||||
sigaltstack({ss_sp=NULL, ss_flags=SS_DISABLE, ss_size=8192}, NULL) = 0
|
||||
munmap(0x7fbaeac3b000, 12288) = 0
|
||||
exit_group(0) = ?
|
||||
+++ exited with 0 +++
|
||||
7
2025/glacier/rev/c2/pyproject.toml
Normal file
7
2025/glacier/rev/c2/pyproject.toml
Normal file
@@ -0,0 +1,7 @@
|
||||
[project]
|
||||
name = "c2"
|
||||
version = "0.1.0"
|
||||
description = "Add your description here"
|
||||
readme = "README.md"
|
||||
requires-python = ">=3.12"
|
||||
dependencies = []
|
||||
14
2025/glacier/rev/c2/rc5_dec.py
Normal file
14
2025/glacier/rev/c2/rc5_dec.py
Normal file
@@ -0,0 +1,14 @@
|
||||
import struct
|
||||
import hashlib
|
||||
from Crypto.Cipher import RC5
|
||||
|
||||
if __name__ == '__main__':
|
||||
# 1. The Key from your network trace (Packet 4)
|
||||
# Payload: 99 90 9c 9d d5 8c 81 82 91 98 94 95 dd 84 89 9a ...
|
||||
|
||||
KEY = bytes.fromhex("99 90 9c 9d d5 8c 81 82 91 98 94 95 dd 84 89 9a")
|
||||
ITERATIONS = 85454
|
||||
key_bytes = hashlib.pbkdf2_hmac("sha256", KEY, b"", ITERATIONS, dklen=16)
|
||||
|
||||
print(f"[+] Key: {key_bytes.hex()}")
|
||||
|
||||
4
2025/glacier/rev/c2/sha256sum
Normal file
4
2025/glacier/rev/c2/sha256sum
Normal file
@@ -0,0 +1,4 @@
|
||||
1fc7de3e9527b3ac668e1fad1b654f188c83cd6eb8bc6ea6088856e59a80c62c ./29184_12d00e8952ca926a.enc
|
||||
238a0a036c925b968abe5013828b1bea820445438a4afcc7ae2fd01587570bfc ./c2_client
|
||||
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 ./deploy.sh
|
||||
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 ./deploy.bat
|
||||
2631
2025/glacier/rev/c2/strings
Normal file
2631
2025/glacier/rev/c2/strings
Normal file
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user