⊟
28.6 MB
/srv/reproducible-results/rbuild-debian/r-b-build.dYYQz4gs/b1/yaramod_3.21.0-1.1_i386.changes vs.
/srv/reproducible-results/rbuild-debian/r-b-build.dYYQz4gs/b2/yaramod_3.21.0-1.1_i386.changes
⊟
982 B
Files
    
Offset 1, 6 lines modifiedOffset 1, 6 lines modified
  
1 ·2298ed48676b3460a967ee556134b5b6·769688·libdevel·optional·libyaramod-dev_3.21.0-1.1_i386.deb 
2 ·35af8188821bffaa68798aa4a12ba70e·12435868·debug·optional·libyaramod0-dbgsym_3.21.0-1.1_i386.deb 
3 ·92eb11104faac7cade87da8406136cd0·569316·libs·optional·libyaramod0_3.21.0-1.1_i386.deb 
4 ·23d8993a5cf746fad51b3f35467022ee·10381104·debug·optional·python3-yaramod-dbgsym_3.21.0-1.1_i386.deb 
5 ·7356e929805f64a6f4df26e822da9da9·431812·python·optional·python3-yaramod_3.21.0-1.1_i386.deb1 ·2e9c58c4c9349eb539db99b2d8b3a4cd·767160·libdevel·optional·libyaramod-dev_3.21.0-1.1_i386.deb
 2 ·3980a1cd4e55e89cd84e7d519d51cb59·12436984·debug·optional·libyaramod0-dbgsym_3.21.0-1.1_i386.deb
 3 ·4950412c60e68455a4a2fd5ce4834f42·569412·libs·optional·libyaramod0_3.21.0-1.1_i386.deb
 4 ·bc7eecefe6a21dfb913605ef0ef9104a·10380884·debug·optional·python3-yaramod-dbgsym_3.21.0-1.1_i386.deb
 5 ·d9adcfe713493792237e94fc190462ad·430544·python·optional·python3-yaramod_3.21.0-1.1_i386.deb
⊟
2.11 MB
libyaramod-dev_3.21.0-1.1_i386.deb
⊟
367 B
file list
    
Offset 1, 3 lines modifiedOffset 1, 3 lines modified
1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary
2 -rw-r--r--···0········0········0·····2632·2024-07-03·21:18:46.000000·control.tar.xz2 -rw-r--r--···0········0········0·····2632·2024-07-03·21:18:46.000000·control.tar.xz
3 -rw-r--r--···0········0········0···766864·2024-07-03·21:18:46.000000·data.tar.xz3 -rw-r--r--···0········0········0···764336·2024-07-03·21:18:46.000000·data.tar.xz
⊟
98.0 B
control.tar.xz
⊟
70.0 B
control.tar
⊟
48.0 B
./md5sums
⊟
30.0 B
./md5sums
Files differ
⊟
2.11 MB
data.tar.xz
⊟
2.11 MB
data.tar
⊟
1.65 KB
./usr/include/yaramod/types/modules/generated/module_list.h
    
Offset 5, 33 lines modifiedOffset 5, 33 lines modified
5 */5 */
6 #pragma·once6 #pragma·once
  
7 #include·<vector>7 #include·<vector>
  
8 #include·"yaramod/types/modules/module_content.h"8 #include·"yaramod/types/modules/module_content.h"
9 #include·"module_console_generated.h"9 #include·"module_console_generated.h"
10 #include·"module_cuckoo_generated.h" 
11 #include·"module_dotnet_generated.h" 
12 #include·"module_macho_generated.h" 
13 #include·"module_cuckoo_deprecated_generated.h" 
14 #include·"module_magic_generated.h" 
15 #include·"module_string_generated.h" 
16 #include·"module_math_generated.h" 
17 #include·"module_hash_generated.h"10 #include·"module_hash_generated.h"
 11 #include·"module_elf_generated.h"
 12 #include·"module_math_generated.h"
 13 #include·"module_string_generated.h"
 14 #include·"module_magic_generated.h"
18 #include·"module_dex_generated.h"15 #include·"module_dex_generated.h"
 16 #include·"module_dotnet_generated.h"
 17 #include·"module_cuckoo_deprecated_generated.h"
19 #include·"module_pe_generated.h"18 #include·"module_pe_generated.h"
 19 #include·"module_macho_generated.h"
20 #include·"module_time_generated.h"20 #include·"module_time_generated.h"
21 #include·"module_elf_generated.h"21 #include·"module_cuckoo_generated.h"
  
  
22 namespace·yaramod·{22 namespace·yaramod·{
  
23 namespace·modules·{23 namespace·modules·{
  
24 class·ModuleList·{24 class·ModuleList·{
25 public:25 public:
26 »       std::vector<ModuleContent>·list·=·{Gmodule_console{},·Gmodule_cuckoo{},·Gmodule_dotnet{},·Gmodule_macho{},·Gmodule_cuckoo_deprecated{},·Gmodule_magic{},·Gmodule_string{},·Gmodule_math{},·Gmodule_hash{},·Gmodule_dex{},·Gmodule_pe{},·Gmodule_time{},·Gmodule_elf{}};26 »       std::vector<ModuleContent>·list·=·{Gmodule_console{},·Gmodule_hash{},·Gmodule_elf{},·Gmodule_math{},·Gmodule_string{},·Gmodule_magic{},·Gmodule_dex{},·Gmodule_dotnet{},·Gmodule_cuckoo_deprecated{},·Gmodule_pe{},·Gmodule_macho{},·Gmodule_time{},·Gmodule_cuckoo{}};
27 };27 };
  
28 }·//namespace·modules28 }·//namespace·modules
  
29 }·//·namespace·yaramod29 }·//·namespace·yaramod
⊟
2.1 MB
./usr/lib/i386-linux-gnu/libyaramod.a
⊟
952 B
nm -s {}
    
Offset 15674, 25 lines modifiedOffset 15674, 25 lines modified
15674 000004a0·r·.LC2815674 000004a0·r·.LC28
15675 000002d8·r·.LC315675 000002d8·r·.LC3
15676 00000000·r·.LC615676 00000000·r·.LC6
15677 00000000·r·.LC715677 00000000·r·.LC7
15678 00000048·r·.LC815678 00000048·r·.LC8
15679 0000008c·r·.LC915679 0000008c·r·.LC9
15680 000390e0·r·C.2.015680 000390e0·r·C.2.0
15681 00036fa0·r·C.22.115681 00037b00·r·C.22.1
15682 00032300·r·C.23.215682 00030ee0·r·C.23.2
15683 00027960·r·C.24.315683 0002cde0·r·C.24.3
15684 00027660·r·C.25.415684 0002c560·r·C.25.4
15685 00027320·r·C.26.515685 0002c220·r·C.26.5
15686 00026aa0·r·C.27.615686 00024aa0·r·C.27.6
15687 000229a0·r·C.28.715687 0001fe00·r·C.28.7
15688 000213c0·r·C.29.815688 0001fb00·r·C.29.8
15689 00019c40·r·C.30.915689 0000ccc0·r·C.30.9
15690 00006e00·r·C.31.1015690 00002320·r·C.31.10
15691 00006c20·r·C.32.1115691 00002140·r·C.32.11
15692 00000000·r·C.33.1215692 00000000·r·C.33.12
15693 00000000·V·DW.ref.__gxx_personality_v015693 00000000·V·DW.ref.__gxx_personality_v0
15694 ·········U·_GLOBAL_OFFSET_TABLE_15694 ·········U·_GLOBAL_OFFSET_TABLE_
15695 ·········U·_Unwind_Resume15695 ·········U·_Unwind_Resume
15696 000012c0·T·_ZN7yaramod10ModulePool12_processPathENSt10filesystem7__cxx114pathE15696 000012c0·T·_ZN7yaramod10ModulePool12_processPathENSt10filesystem7__cxx114pathE
15697 00000212·t·_ZN7yaramod10ModulePool12_processPathENSt10filesystem7__cxx114pathE.cold15697 00000212·t·_ZN7yaramod10ModulePool12_processPathENSt10filesystem7__cxx114pathE.cold
15698 000022a0·T·_ZN7yaramod10ModulePool21_processModuleContentERKNS_13ModuleContentE15698 000022a0·T·_ZN7yaramod10ModulePool21_processModuleContentERKNS_13ModuleContentE
⊟
2.1 MB
module_pool.cpp.o
⊟
3.93 KB
readelf --wide --symbols {}
    
Offset 31, 26 lines modifiedOffset 31, 26 lines modified
31 ····27:·00000000·····0·SECTION·LOCAL··DEFAULT···71·.text._ZNSt4pairINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt10shared_ptrIN7yaramod6ModuleEEED2Ev31 ····27:·00000000·····0·SECTION·LOCAL··DEFAULT···71·.text._ZNSt4pairINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt10shared_ptrIN7yaramod6ModuleEEED2Ev
32 ····28:·00000000·····0·SECTION·LOCAL··DEFAULT···73·.text._ZNSt10unique_ptrINSt10filesystem7__cxx114path5_List5_ImplENS3_13_Impl_deleterEED2Ev32 ····28:·00000000·····0·SECTION·LOCAL··DEFAULT···73·.text._ZNSt10unique_ptrINSt10filesystem7__cxx114path5_List5_ImplENS3_13_Impl_deleterEED2Ev
33 ····29:·00000000·····0·SECTION·LOCAL··DEFAULT···75·.text._ZNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEED2Ev33 ····29:·00000000·····0·SECTION·LOCAL··DEFAULT···75·.text._ZNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEED2Ev
34 ····30:·00000000·····0·SECTION·LOCAL··DEFAULT···77·.text._ZNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEED0Ev34 ····30:·00000000·····0·SECTION·LOCAL··DEFAULT···77·.text._ZNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEED0Ev
35 ····31:·00000000·····0·SECTION·LOCAL··DEFAULT···79·.text._ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE35 ····31:·00000000·····0·SECTION·LOCAL··DEFAULT···79·.text._ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
36 ····32:·00000000·····0·SECTION·LOCAL··DEFAULT···81·.text._ZN7yaramod7modules10ModuleListC2Ev36 ····32:·00000000·····0·SECTION·LOCAL··DEFAULT···81·.text._ZN7yaramod7modules10ModuleListC2Ev
37 ····33:·000390e0··4113·OBJECT··LOCAL··DEFAULT··103·C.2.037 ····33:·000390e0··4113·OBJECT··LOCAL··DEFAULT··103·C.2.0
38 ····34:·00036fa0··8500·OBJECT··LOCAL··DEFAULT··103·C.22.138 ····34:·00037b00··5569·OBJECT··LOCAL··DEFAULT··103·C.22.1
39 ····35:·00032300·19589·OBJECT··LOCAL··DEFAULT··103·C.23.239 ····35:·00030ee0·27655·OBJECT··LOCAL··DEFAULT··103·C.23.2
40 ····36:·00027960·43418·OBJECT··LOCAL··DEFAULT··103·C.24.340 ····36:·0002cde0·16610·OBJECT··LOCAL··DEFAULT··103·C.24.3
41 ····37:·00027660···745·OBJECT··LOCAL··DEFAULT··103·C.25.441 ····37:·0002c560··2162·OBJECT··LOCAL··DEFAULT··103·C.25.4
42 ····38:·00027320···826·OBJECT··LOCAL··DEFAULT··103·C.26.542 ····38:·0002c220···826·OBJECT··LOCAL··DEFAULT··103·C.26.5
43 ····39:·00026aa0··2162·OBJECT··LOCAL··DEFAULT··103·C.27.643 ····39:·00024aa0·30578·OBJECT··LOCAL··DEFAULT··103·C.27.6
44 ····40:·000229a0·16610·OBJECT··LOCAL··DEFAULT··103·C.28.744 ····40:·0001fe00·19589·OBJECT··LOCAL··DEFAULT··103·C.28.7
45 ····41:·000213c0··5569·OBJECT··LOCAL··DEFAULT··103·C.29.845 ····41:·0001fb00···745·OBJECT··LOCAL··DEFAULT··103·C.29.8
46 ····42:·00019c40·30578·OBJECT··LOCAL··DEFAULT··103·C.30.946 ····42:·0000ccc0·77360·OBJECT··LOCAL··DEFAULT··103·C.30.9
47 ····43:·00006e00·77360·OBJECT··LOCAL··DEFAULT··103·C.31.1047 ····43:·00002320·43418·OBJECT··LOCAL··DEFAULT··103·C.31.10
48 ····44:·00006c20···462·OBJECT··LOCAL··DEFAULT··103·C.32.1148 ····44:·00002140···462·OBJECT··LOCAL··DEFAULT··103·C.32.11
49 ····45:·00000000·27655·OBJECT··LOCAL··DEFAULT··103·C.33.1249 ····45:·00000000··8500·OBJECT··LOCAL··DEFAULT··103·C.33.12
50 ····46:·00000000·····0·SECTION·LOCAL··DEFAULT···83·.text._ZNSt6vectorIN7yaramod13ModuleContentESaIS1_EED2Ev50 ····46:·00000000·····0·SECTION·LOCAL··DEFAULT···83·.text._ZNSt6vectorIN7yaramod13ModuleContentESaIS1_EED2Ev
51 ····47:·00000000·····0·SECTION·LOCAL··DEFAULT···85·.text._ZNSt10_HashtableINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St10shared_ptrIN7yaramod6ModuleEEESaISC_ENSt8__detail10_Select1stESt8equal_toIS5_ESt4hashIS5_ENSE_18_Mod_range_hashingENSE_20_Default_ranged_hashENSE_20_Prime_rehash_po51 ····47:·00000000·····0·SECTION·LOCAL··DEFAULT···85·.text._ZNSt10_HashtableINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St10shared_ptrIN7yaramod6ModuleEEESaISC_ENSt8__detail10_Select1stESt8equal_toIS5_ESt4hashIS5_ENSE_18_Mod_range_hashingENSE_20_Default_ranged_hashENSE_20_Prime_rehash_po
52 ····48:·00000000·····0·SECTION·LOCAL··DEFAULT···89·.text._ZNSt6vectorIN8nlohmann16json_abi_v3_11_310basic_jsonISt3mapS_NSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEbxydSaNS1_14adl_serializerES_IhSaIhEEvEESaISD_EE17_M_realloc_appendIJSD_EEEvDpOT_52 ····48:·00000000·····0·SECTION·LOCAL··DEFAULT···89·.text._ZNSt6vectorIN8nlohmann16json_abi_v3_11_310basic_jsonISt3mapS_NSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEbxydSaNS1_14adl_serializerES_IhSaIhEEvEESaISD_EE17_M_realloc_appendIJSD_EEEvDpOT_
53 ····49:·00000000·····0·SECTION·LOCAL··DEFAULT···91·.text._ZN8nlohmann16json_abi_v3_11_310basic_jsonISt3mapSt6vectorNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEbxydSaNS0_14adl_serializerES3_IhSaIhEEvE10json_value7destroyENS0_6detail7value_tE53 ····49:·00000000·····0·SECTION·LOCAL··DEFAULT···91·.text._ZN8nlohmann16json_abi_v3_11_310basic_jsonISt3mapSt6vectorNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEbxydSaNS0_14adl_serializerES3_IhSaIhEEvE10json_value7destroyENS0_6detail7value_tE
54 ····50:·00000000···270·FUNC····LOCAL··DEFAULT··100·_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_N8nlohmann16json_abi_v3_11_310basic_jsonISt3mapSt6vectorS5_bxydSaNS9_14adl_serializerESC_IhSaIhEEvEEESt10_Select1stISH_ESt4lessIvESaISH_EE8_M_eraseEPSt13_Rb_tree_nodeISH_E.isra.054 ····50:·00000000···270·FUNC····LOCAL··DEFAULT··100·_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_N8nlohmann16json_abi_v3_11_310basic_jsonISt3mapSt6vectorS5_bxydSaNS9_14adl_serializerESC_IhSaIhEEvEEESt10_Select1stISH_ESt4lessIvESaISH_EE8_M_eraseEPSt13_Rb_tree_nodeISH_E.isra.0
55 ····51:·00000000·····0·SECTION·LOCAL··DEFAULT···93·.text._ZN8nlohmann16json_abi_v3_11_310basic_jsonISt3mapSt6vectorNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEbxydSaNS0_14adl_serializerES3_IhSaIhEEvED2Ev55 ····51:·00000000·····0·SECTION·LOCAL··DEFAULT···93·.text._ZN8nlohmann16json_abi_v3_11_310basic_jsonISt3mapSt6vectorNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEbxydSaNS0_14adl_serializerES3_IhSaIhEEvED2Ev
56 ····52:·00000000·····0·SECTION·LOCAL··DEFAULT···95·.text._ZNSt6vectorIN8nlohmann16json_abi_v3_11_310basic_jsonISt3mapS_NSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEbxydSaNS1_14adl_serializerES_IhSaIhEEvEESaISD_EED2Ev56 ····52:·00000000·····0·SECTION·LOCAL··DEFAULT···95·.text._ZNSt6vectorIN8nlohmann16json_abi_v3_11_310basic_jsonISt3mapS_NSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEbxydSaNS1_14adl_serializerES_IhSaIhEEvEESaISD_EED2Ev
⊟
7.43 KB
readelf --wide --relocs {}
    
Offset 734, 48 lines modifiedOffset 734, 48 lines modified
734 Relocation·section·'.rel.text._ZN7yaramod7modules10ModuleListC2Ev'·at·offset·0x4a774·contains·124·entries:734 Relocation·section·'.rel.text._ZN7yaramod7modules10ModuleListC2Ev'·at·offset·0x4a774·contains·124·entries:
735 ·Offset·····Info····Type················Sym.·Value··Symbol's·Name735 ·Offset·····Info····Type················Sym.·Value··Symbol's·Name
736 0000000a··00007102·R_386_PC32·············00000000···__x86.get_pc_thunk.di736 0000000a··00007102·R_386_PC32·············00000000···__x86.get_pc_thunk.di
737 00000010··00006a0a·R_386_GOTPC············00000000···_GLOBAL_OFFSET_TABLE_737 00000010··00006a0a·R_386_GOTPC············00000000···_GLOBAL_OFFSET_TABLE_
738 00000038··00003b09·R_386_GOTOFF···········00000000···.rodata738 00000038··00003b09·R_386_GOTOFF···········00000000···.rodata
739 00000086··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE739 00000086··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
740 000000a6··00006b04·R_386_PLT32············00000000···_ZdlPvj740 000000a6··00006b04·R_386_PLT32············00000000···_ZdlPvj
741 00000176··00003b09·R_386_GOTOFF···········00000000···.rodata741 00000171··00003b09·R_386_GOTOFF···········00000000···.rodata
742 000001cc··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE742 000001c0··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
743 000001ec··00006b04·R_386_PLT32············00000000···_ZdlPvj743 000001e0··00006b04·R_386_PLT32············00000000···_ZdlPvj
744 000002bf··00003b09·R_386_GOTOFF···········00000000···.rodata744 000002b6··00003b09·R_386_GOTOFF···········00000000···.rodata
745 0000030b··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE745 000002fc··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
746 0000032b··00006b04·R_386_PLT32············00000000···_ZdlPvj746 0000031c··00006b04·R_386_PLT32············00000000···_ZdlPvj
747 000003fc··00003b09·R_386_GOTOFF···········00000000···.rodata747 000003ed··00003b09·R_386_GOTOFF···········00000000···.rodata
748 00000445··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE748 0000042f··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
749 00000465··00006b04·R_386_PLT32············00000000···_ZdlPvj749 0000044f··00006b04·R_386_PLT32············00000000···_ZdlPvj
750 0000053b··00003b09·R_386_GOTOFF···········00000000···.rodata750 00000522··00003b09·R_386_GOTOFF···········00000000···.rodata
751 00000584··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE 
752 000005a4··00006b04·R_386_PLT32············00000000···_ZdlPvj 
753 00000675··00003b09·R_386_GOTOFF···········00000000···.rodata 
754 000006be··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE751 0000056e··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
755 000006de··00006b04·R_386_PLT32············00000000···_ZdlPvj752 0000058e··00006b04·R_386_PLT32············00000000···_ZdlPvj
 753 0000065f··00003b09·R_386_GOTOFF···········00000000···.rodata
 754 000006a8··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
 755 000006c8··00006b04·R_386_PLT32············00000000···_ZdlPvj
756 000007b1··00003b09·R_386_GOTOFF···········00000000···.rodata756 0000079e··00003b09·R_386_GOTOFF···········00000000···.rodata
757 000007fd··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE757 000007e4··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
758 0000081d··00006b04·R_386_PLT32············00000000···_ZdlPvj758 00000804··00006b04·R_386_PLT32············00000000···_ZdlPvj
759 000008ee··00003b09·R_386_GOTOFF···········00000000···.rodata759 000008d7··00003b09·R_386_GOTOFF···········00000000···.rodata
760 00000930··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE760 00000923··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
761 00000950··00006b04·R_386_PLT32············00000000···_ZdlPvj761 00000943··00006b04·R_386_PLT32············00000000···_ZdlPvj
762 00000a21··00003b09·R_386_GOTOFF···········00000000···.rodata762 00000a19··00003b09·R_386_GOTOFF···········00000000···.rodata
763 00000a63··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE763 00000a62··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
764 00000a83··00006b04·R_386_PLT32············00000000···_ZdlPvj764 00000a82··00006b04·R_386_PLT32············00000000···_ZdlPvj
765 00000b59··00003b09·R_386_GOTOFF···········00000000···.rodata765 00000b55··00003b09·R_386_GOTOFF···········00000000···.rodata
766 00000b9f··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE766 00000b97··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
767 00000bbf··00006b04·R_386_PLT32············00000000···_ZdlPvj767 00000bb7··00006b04·R_386_PLT32············00000000···_ZdlPvj
768 00000c92··00003b09·R_386_GOTOFF···········00000000···.rodata768 00000c88··00003b09·R_386_GOTOFF···········00000000···.rodata
769 00000cd4··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE769 00000cd1··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
770 00000cf4··00006b04·R_386_PLT32············00000000···_ZdlPvj770 00000cf1··00006b04·R_386_PLT32············00000000···_ZdlPvj
771 00000dc5··00003b09·R_386_GOTOFF···········00000000···.rodata771 00000dc2··00003b09·R_386_GOTOFF···········00000000···.rodata
772 00000e07··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE772 00000e04··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
773 00000e27··00006b04·R_386_PLT32············00000000···_ZdlPvj773 00000e24··00006b04·R_386_PLT32············00000000···_ZdlPvj
774 00000edc··00003b09·R_386_GOTOFF···········00000000···.rodata774 00000ed9··00003b09·R_386_GOTOFF···········00000000···.rodata
775 00000f25··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE775 00000f25··0000a404·R_386_PLT32············00000000···_ZN7yaramod13ModuleContentC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt16initializer_listIcE
776 00000f4b··00006b04·R_386_PLT32············00000000···_ZdlPvj776 00000f4b··00006b04·R_386_PLT32············00000000···_ZdlPvj
777 00001015··00008b04·R_386_PLT32············00000000···_Znwj777 00001015··00008b04·R_386_PLT32············00000000···_Znwj
778 0000104f··00000102·R_386_PC32·············00000000···.text778 0000104f··00000102·R_386_PC32·············00000000···.text
779 00001065··00000102·R_386_PC32·············00000000···.text779 00001065··00000102·R_386_PC32·············00000000···.text
780 000010ca··00006b04·R_386_PLT32············00000000···_ZdlPvj780 000010ca··00006b04·R_386_PLT32············00000000···_ZdlPvj
781 000010f4··00006b04·R_386_PLT32············00000000···_ZdlPvj781 000010f4··00006b04·R_386_PLT32············00000000···_ZdlPvj
⊟
191 KB
strings --all --bytes=8 {}
Ordering differences only
    
Offset 15, 887 lines modifiedOffset 15, 1702 lines modified
15 m_data.m_type·!=·value_t::string·||·m_data.m_value.string·!=·nullptr15 m_data.m_type·!=·value_t::string·||·m_data.m_value.string·!=·nullptr
16 vector::reserve16 vector::reserve
17 basic_string::substr17 basic_string::substr
18 deprecated18 deprecated
19 YARAMOD_MODULE_SPEC_PATH19 YARAMOD_MODULE_SPEC_PATH
20 Directory·'20 Directory·'
21 ····"kind":·"struct",21 ····"kind":·"struct",
 22 ····"name":·"cuckoo",
 23 ····"attributes":·[
 24 ········{
 25 ············"kind":·"struct",
 26 ············"name":·"network",
 27 ············"attributes":·[
 28 ················{
 29 ····················"kind":·"function",
 30 ····················"name":·"dns_lookup",
 31 ····················"return_type":·"i",
 32 ····················"overloads":·[
 33 ························{
 34 ····························"arguments":·[
 35 ································{
 36 ····································"type":·"r",
 37 ····································"name":·"domain"
 38 ································}
 39 ····························],
 40 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·domain·name·resolution·request·for·a·domain·matching·the·provided·regular·expression.\n\nExample:·cuckoo.network.dns_lookup(/evil\\.com/)"
 41 ························}
 42 ····················]
 43 ················},
 44 ················{
 45 ····················"kind":·"function",
 46 ····················"name":·"http_get",
 47 ····················"return_type":·"i",
 48 ····················"overloads":·[
 49 ························{
 50 ····························"arguments":·[
 51 ································{
 52 ····································"type":·"r",
 53 ····································"name":·"url"
 54 ································}
 55 ····························],
 56 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·HTTP·GET·request·to·a·URL·matching·the·provided·regular·expression."
 57 ························}
 58 ····················]
 59 ················},
 60 ················{
 61 ····················"kind":·"function",
 62 ····················"name":·"http_post",
 63 ····················"return_type":·"i",
 64 ····················"overloads":·[
 65 ························{
 66 ····························"arguments":·[
 67 ································{
 68 ····································"type":·"r",
 69 ····································"name":·"url"
 70 ································}
 71 ····························],
 72 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·HTTP·POST·request·to·a·URL·matching·the·provided·regular·expression."
 73 ························}
 74 ····················]
 75 ················},
 76 ················{
 77 ····················"kind":·"function",
 78 ····················"name":·"http_request",
 79 ····················"return_type":·"i",
 80 ····················"overloads":·[
 81 ························{
 82 ····························"arguments":·[
 83 ································{
 84 ····································"type":·"r",
 85 ····································"name":·"url"
 86 ································}
 87 ····························],
 88 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·HTTP·request·to·a·URL·matching·the·provided·regular·expression."
 89 ························}
 90 ····················]
 91 ················},
 92 ················{
 93 ····················"kind":·"function",
 94 ····················"name":·"host",
 95 ····················"return_type":·"i",
 96 ····················"overloads":·[
 97 ························{
 98 ····························"arguments":·[
 99 ································{
 100 ····································"type":·"r",
 101 ····································"name":·"IP·address"
 102 ································}
 103 ····························],
 104 ····························"documentation":·"Function·returning·true·if·the·program·contacted·an·IP·address·matching·the·provided·regular·expression.·Example:·```cuckoo.network.host(/192\\.168\\.1\\.1/)```"
 105 ························}
 106 ····················]
 107 ················},
 108 ················{
 109 ····················"kind":·"function",
 110 ····················"name":·"http_user_agent",
 111 ····················"return_type":·"i",
 112 ····················"overloads":·[
 113 ························{
 114 ····························"arguments":·[
 115 ································{
 116 ····································"type":·"r",
 117 ····································"name":·"agent"
 118 ································}
 119 ····························],
 120 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·HTTP·request·with·a·user·agent·matching·the·provided·regular·expression.·Example:·```cuckoo.network.http_user_agent(/MSIE·6\\.0/)```"
 121 ························}
 122 ····················]
 123 ················},
 124 ················{
 125 ····················"kind":·"function",
 126 ····················"name":·"tcp",
 127 ····················"return_type":·"i",
 128 ····················"overloads":·[
 129 ························{
 130 ····························"arguments":·[
 131 ································{
 132 ····································"type":·"r",
 133 ····································"name":·"IP·address"
 134 ································},
 135 ································{
 136 ····································"type":·"i",
 137 ····································"name":·"port"
 138 ································}
 139 ····························],
 140 ····························"documentation":·"Function·returning·true·if·the·program·contacted·an·IP·address·matching·the·provided·regular·expression,·over·TCP·on·the·provided·port·number."
 141 ························}
Max diff block lines reached; 186081/195515 bytes (95.17%) of diff not shown.
⊟
1.7 KB
readelf --wide --decompress --hex-dump=.gcc_except_table {}
    
Offset 5, 19 lines modifiedOffset 5, 19 lines modified
5 ··0x00000020·00b80a19·d60a00ff·ff01044c·050000ff·...........L....5 ··0x00000020·00b80a19·d60a00ff·ff01044c·050000ff·...........L....
6 ··0x00000030·ff010b93·0105e001·00eb0105·0000ffff·................6 ··0x00000030·ff010b93·0105e001·00eb0105·0000ffff·................
7 ··0x00000040·01097705·0000be02·050000ff·ff010c84·..w.............7 ··0x00000040·01097705·0000be02·050000ff·ff010c84·..w.............
8 ··0x00000050·0105c00b·009b0305·b90b00ff·ff01042f·.............../8 ··0x00000050·0105c00b·009b0305·b90b00ff·ff01042f·.............../
9 ··0x00000060·050000ff·ff012853·05000088·0205e60b·......(S........9 ··0x00000060·050000ff·ff012853·05000088·0205e60b·......(S........
10 ··0x00000070·00bb0205·fa0b00bf·0405ee0b·00870545·...............E10 ··0x00000070·00bb0205·fa0b00bf·0405ee0b·00870545·...............E
11 ··0x00000080·f60b00c0·06a304ea·0b00870d·05000000·................11 ··0x00000080·f60b00c0·06a304ea·0b00870d·05000000·................
12 ··0x00000090·ff9b7501·6b850105·be4900cb·03059f4c·..u.k....I.....L12 ··0x00000090·ff9b7501·6b850105·be4900bf·03059f4c·..u.k....I.....L
13 ··0x000000a0·008a0605·a84900c4·0805ee49·00830b05·.....I.....I....13 ··0x000000a0·00fb0505·a84900ae·0805ee49·00ed0a05·.....I.....I....
14 ··0x000000b0·bf4400bd·0d05e74c·00fc0f05·9a4900af·.D.....L.....I..14 ··0x000000b0·bf4400a7·0d05e74c·00e30f05·9a4900a2·.D.....L.....I..
15 ··0x000000c0·1205af4d·00e21405·b749009e·1705ca49·...M.....I.....I15 ··0x000000c0·1205af4d·00e11405·b7490096·1705ca49·...M.....I.....I
16 ··0x000000d0·00d31905·a1490086·1c05bd4a·00a41e05·.....I.....J....16 ··0x000000d0·00d01905·a1490083·1c05bd4a·00a41e05·.....I.....J....
17 ··0x000000e0·af490094·2005bb44·00ce2005·c54901e4·.I..·..D..·..I..17 ··0x000000e0·af490094·2005bb44·00ce2005·c54901e4·.I..·..D..·..I..
18 ··0x000000f0·2005b54a·019a4c05·0000894e·05d84e00··..J..L....N..N.18 ··0x000000f0·2005b54a·019a4c05·0000894e·05d84e00··..J..L....N..N.
19 ··0x00000100·01000000·00000000·ffff0109·6b050000·............k...19 ··0x00000100·01000000·00000000·ffff0109·6b050000·............k...
20 ··0x00000110·a4060500·00ffff01·1fa901b5·01931700·................20 ··0x00000110·a4060500·00ffff01·1fa901b5·01931700·................
21 ··0x00000120·ff068a01·93170084·0e058f17·00e81205·................21 ··0x00000120·ff068a01·93170084·0e058f17·00e81205·................
22 ··0x00000130·8f17009b·17050000·ffff0100·ffff0100·................22 ··0x00000130·8f17009b·17050000·ffff0100·ffff0100·................
23 ··0x00000140·ffff0109·5f050000·b0040500·00ffff01·...._...........23 ··0x00000140·ffff0109·5f050000·b0040500·00ffff01·...._...........
⊟
49.7 KB
objdump --line-numbers --disassemble --demangle --reloc --no-show-raw-insn --section=.text._ZN7yaramod7modules10ModuleListC2 […]
    
Offset 76, 49 lines modifiedOffset 76, 47 lines modified
76 »       cmp····%esi,%eax76 »       cmp····%esi,%eax
77 »       je·····1588·<yaramod::modules::ModuleList::ModuleList()+0x1588>77 »       je·····1588·<yaramod::modules::ModuleList::ModuleList()+0x1588>
78 »       mov····%eax,-0x274(%ebp)78 »       mov····%eax,-0x274(%ebp)
79 »       mov····-0x4dc(%ebp),%eax79 »       mov····-0x4dc(%ebp),%eax
80 »       mov····%eax,-0x26c(%ebp)80 »       mov····%eax,-0x26c(%ebp)
81 »       mov····-0x570(%ebp),%eax81 »       mov····-0x570(%ebp),%eax
82 »       mov····%edx,-0x270(%ebp)82 »       mov····%edx,-0x270(%ebp)
83 »       mov····$0x6f6f,%ecx 
84 »       lea····-0x2bc(%ebp),%ebx83 »       lea····-0x2bc(%ebp),%ebx
85 »       lea····-0x2b4(%ebp),%esi84 »       lea····-0x2b4(%ebp),%esi
86 »       mov····$0x2134,%edx85 »       mov····$0x15c1,%edx
87 »       mov····%ebx,-0x520(%ebp)86 »       mov····%ebx,-0x520(%ebp)
88 »       mov····%eax,-0x4e4(%ebp)87 »       mov····%eax,-0x4e4(%ebp)
89 »       lea····0x36fa0(%edi),%eax88 »       lea····0x37b00(%edi),%eax
90 ·R_386_GOTOFF»   .rodata89 ·R_386_GOTOFF»   .rodata
91 »       movl···$0x0,-0x4e0(%ebp)90 »       movl···$0x0,-0x4e0(%ebp)
92 »       movb···$0x0,-0x4dc(%ebp)91 »       movb···$0x0,-0x4dc(%ebp)
93 »       mov····%esi,-0x51c(%ebp)92 »       mov····%esi,-0x51c(%ebp)
94 »       mov····%esi,-0x2bc(%ebp)93 »       mov····%esi,-0x2bc(%ebp)
95 »       movl···$0x6b637563,-0x2b4(%ebp)94 »       movl···$0x68736168,-0x2b4(%ebp)
96 »       mov····%cx,-0x2b0(%ebp) 
97 »       movl···$0x6,-0x2b8(%ebp)95 »       movl···$0x4,-0x2b8(%ebp)
98 »       movb···$0x0,-0x2ae(%ebp)96 »       movb···$0x0,-0x2b0(%ebp)
99 »       push···%edx97 »       push···%edx
100 »       push···%eax98 »       push···%eax
101 »       lea····-0x4cc(%ebp),%eax99 »       lea····-0x4cc(%ebp),%eax
102 »       push···%ebx100 »       push···%ebx
103 »       mov····%edi,%ebx101 »       mov····%edi,%ebx
104 »       mov····%eax,-0x5b8(%ebp)102 »       mov····%eax,-0x5b8(%ebp)
105 »       push···%eax103 »       push···%eax
106 »       call···1cc·<yaramod::modules::ModuleList::ModuleList()+0x1cc>104 »       call···1c0·<yaramod::modules::ModuleList::ModuleList()+0x1c0>
107 ·R_386_PLT32»    yaramod::ModuleContent::ModuleContent(std::__cxx11::basic_string<char,·std::char_traits<char>,·std::allocator<char>·>·const&,·std::initializer_list<char>)105 ·R_386_PLT32»    yaramod::ModuleContent::ModuleContent(std::__cxx11::basic_string<char,·std::char_traits<char>,·std::allocator<char>·>·const&,·std::initializer_list<char>)
108 »       mov····-0x2bc(%ebp),%edx106 »       mov····-0x2bc(%ebp),%edx
109 »       add····$0x10,%esp107 »       add····$0x10,%esp
110 »       cmp····%esi,%edx108 »       cmp····%esi,%edx
111 »       je·····1f3·<yaramod::modules::ModuleList::ModuleList()+0x1f3>109 »       je·····1e7·<yaramod::modules::ModuleList::ModuleList()+0x1e7>
112 »       mov····-0x2b4(%ebp),%eax110 »       mov····-0x2b4(%ebp),%eax
113 »       sub····$0x8,%esp111 »       sub····$0x8,%esp
114 »       add····$0x1,%eax112 »       add····$0x1,%eax
115 »       push···%eax113 »       push···%eax
116 »       push···%edx114 »       push···%edx
117 »       call···1ec·<yaramod::modules::ModuleList::ModuleList()+0x1ec>115 »       call···1e0·<yaramod::modules::ModuleList::ModuleList()+0x1e0>
118 ·R_386_PLT32»    operator·delete(void*,·unsigned·int)116 ·R_386_PLT32»    operator·delete(void*,·unsigned·int)
119 »       add····$0x10,%esp117 »       add····$0x10,%esp
120 »       mov····-0x4cc(%ebp),%eax118 »       mov····-0x4cc(%ebp),%eax
121 »       lea····-0x254(%ebp),%ecx119 »       lea····-0x254(%ebp),%ecx
122 »       lea····-0x4c4(%ebp),%esi120 »       lea····-0x4c4(%ebp),%esi
123 »       mov····-0x4c8(%ebp),%edx121 »       mov····-0x4c8(%ebp),%edx
124 »       mov····%ecx,-0x25c(%ebp)122 »       mov····%ecx,-0x25c(%ebp)
Offset 142, 46 lines modifiedOffset 140, 46 lines modified
142 »       cmp····%esi,%eax140 »       cmp····%esi,%eax
143 »       je·····1840·<yaramod::modules::ModuleList::ModuleList()+0x1840>141 »       je·····1840·<yaramod::modules::ModuleList::ModuleList()+0x1840>
144 »       mov····%eax,-0x244(%ebp)142 »       mov····%eax,-0x244(%ebp)
145 »       mov····-0x4ac(%ebp),%eax143 »       mov····-0x4ac(%ebp),%eax
146 »       mov····%eax,-0x23c(%ebp)144 »       mov····%eax,-0x23c(%ebp)
147 »       mov····-0x578(%ebp),%eax145 »       mov····-0x578(%ebp),%eax
148 »       mov····-0x51c(%ebp),%esi146 »       mov····-0x51c(%ebp),%esi
149 »       mov····%edx,-0x240(%ebp) 
150 »       mov····$0x7465,%ebx 
151 »       mov····$0x4c85,%edx 
152 »       mov····%bx,-0x2b0(%ebp) 
153 »       mov····%edi,%ebx147 »       mov····%edi,%ebx
 148 »       mov····%edx,-0x240(%ebp)
 149 »       mov····$0x6c65,%ecx
 150 »       mov····$0x6c07,%edx
 151 »       movl···$0x0,-0x4b0(%ebp)
154 »       mov····%eax,-0x4b4(%ebp)152 »       mov····%eax,-0x4b4(%ebp)
155 »       lea····0x32300(%edi),%eax153 »       lea····0x30ee0(%edi),%eax
156 ·R_386_GOTOFF»   .rodata154 ·R_386_GOTOFF»   .rodata
157 »       movl···$0x0,-0x4b0(%ebp) 
158 »       movb···$0x0,-0x4ac(%ebp)155 »       movb···$0x0,-0x4ac(%ebp)
159 »       mov····%esi,-0x2bc(%ebp)156 »       mov····%esi,-0x2bc(%ebp)
 157 »       mov····%cx,-0x2b4(%ebp)
160 »       movl···$0x6e746f64,-0x2b4(%ebp)158 »       movb···$0x66,-0x2b2(%ebp)
161 »       movl···$0x6,-0x2b8(%ebp)159 »       movl···$0x3,-0x2b8(%ebp)
162 »       movb···$0x0,-0x2ae(%ebp)160 »       movb···$0x0,-0x2b1(%ebp)
163 »       push···%edx161 »       push···%edx
164 »       push···%eax162 »       push···%eax
165 »       lea····-0x49c(%ebp),%eax163 »       lea····-0x49c(%ebp),%eax
166 »       push···-0x520(%ebp)164 »       push···-0x520(%ebp)
167 »       mov····%eax,-0x5bc(%ebp)165 »       mov····%eax,-0x5bc(%ebp)
168 »       push···%eax166 »       push···%eax
169 »       call···30b·<yaramod::modules::ModuleList::ModuleList()+0x30b>167 »       call···2fc·<yaramod::modules::ModuleList::ModuleList()+0x2fc>
170 ·R_386_PLT32»    yaramod::ModuleContent::ModuleContent(std::__cxx11::basic_string<char,·std::char_traits<char>,·std::allocator<char>·>·const&,·std::initializer_list<char>)168 ·R_386_PLT32»    yaramod::ModuleContent::ModuleContent(std::__cxx11::basic_string<char,·std::char_traits<char>,·std::allocator<char>·>·const&,·std::initializer_list<char>)
171 »       mov····-0x2bc(%ebp),%edx169 »       mov····-0x2bc(%ebp),%edx
172 »       add····$0x10,%esp170 »       add····$0x10,%esp
173 »       cmp····%esi,%edx171 »       cmp····%esi,%edx
174 »       je·····332·<yaramod::modules::ModuleList::ModuleList()+0x332>172 »       je·····323·<yaramod::modules::ModuleList::ModuleList()+0x323>
175 »       mov····-0x2b4(%ebp),%eax173 »       mov····-0x2b4(%ebp),%eax
176 »       sub····$0x8,%esp174 »       sub····$0x8,%esp
177 »       add····$0x1,%eax175 »       add····$0x1,%eax
178 »       push···%eax176 »       push···%eax
179 »       push···%edx177 »       push···%edx
180 »       call···32b·<yaramod::modules::ModuleList::ModuleList()+0x32b>178 »       call···31c·<yaramod::modules::ModuleList::ModuleList()+0x31c>
181 ·R_386_PLT32»    operator·delete(void*,·unsigned·int)179 ·R_386_PLT32»    operator·delete(void*,·unsigned·int)
182 »       add····$0x10,%esp180 »       add····$0x10,%esp
183 »       mov····-0x49c(%ebp),%eax181 »       mov····-0x49c(%ebp),%eax
184 »       lea····-0x224(%ebp),%ecx182 »       lea····-0x224(%ebp),%ecx
185 »       lea····-0x494(%ebp),%esi183 »       lea····-0x494(%ebp),%esi
186 »       mov····-0x498(%ebp),%edx184 »       mov····-0x498(%ebp),%edx
187 »       mov····%ecx,-0x22c(%ebp)185 »       mov····%ecx,-0x22c(%ebp)
Offset 207, 43 lines modifiedOffset 205, 42 lines modified
207 »       mov····%eax,-0x214(%ebp)205 »       mov····%eax,-0x214(%ebp)
208 »       mov····-0x47c(%ebp),%eax206 »       mov····-0x47c(%ebp),%eax
209 »       mov····%eax,-0x20c(%ebp)207 »       mov····%eax,-0x20c(%ebp)
210 »       mov····-0x580(%ebp),%eax208 »       mov····-0x580(%ebp),%eax
211 »       mov····-0x51c(%ebp),%esi209 »       mov····-0x51c(%ebp),%esi
212 »       mov····%edi,%ebx210 »       mov····%edi,%ebx
213 »       mov····%edx,-0x210(%ebp)211 »       mov····%edx,-0x210(%ebp)
214 »       mov····$0xa99a,%edx212 »       mov····$0x40e2,%edx
215 »       movl···$0x0,-0x480(%ebp)213 »       movl···$0x0,-0x480(%ebp)
216 »       mov····%eax,-0x484(%ebp)214 »       mov····%eax,-0x484(%ebp)
217 »       lea····0x27960(%edi),%eax215 »       lea····0x2cde0(%edi),%eax
218 ·R_386_GOTOFF»   .rodata216 ·R_386_GOTOFF»   .rodata
219 »       movb···$0x0,-0x47c(%ebp)217 »       movb···$0x0,-0x47c(%ebp)
220 »       mov····%esi,-0x2bc(%ebp)218 »       mov····%esi,-0x2bc(%ebp)
221 »       movl···$0x6863616d,-0x2b4(%ebp)219 »       movl···$0x6874616d,-0x2b4(%ebp)
222 »       movb···$0x6f,-0x2b0(%ebp) 
223 »       movl···$0x5,-0x2b8(%ebp)220 »       movl···$0x4,-0x2b8(%ebp)
224 »       movb···$0x0,-0x2af(%ebp)221 »       movb···$0x0,-0x2b0(%ebp)
225 »       push···%edx222 »       push···%edx
226 »       push···%eax223 »       push···%eax
227 »       lea····-0x46c(%ebp),%eax224 »       lea····-0x46c(%ebp),%eax
228 »       push···-0x520(%ebp)225 »       push···-0x520(%ebp)
229 »       mov····%eax,-0x5c0(%ebp)226 »       mov····%eax,-0x5c0(%ebp)
230 »       push···%eax227 »       push···%eax
231 »       call···445·<yaramod::modules::ModuleList::ModuleList()+0x445>228 »       call···42f·<yaramod::modules::ModuleList::ModuleList()+0x42f>
Max diff block lines reached; 45859/50637 bytes (90.56%) of diff not shown.
⊟
1.86 MB
readelf --wide --decompress --hex-dump=.rodata {}
    
Offset 1, 14615 lines modifiedOffset 1, 14615 lines modified
  
1 Hex·dump·of·section·'.rodata':1 Hex·dump·of·section·'.rodata':
2 ··0x00000000·7b0a2020·2020226b·696e6422·3a202273·{.····"kind":·"s2 ··0x00000000·7b0a2020·2020226b·696e6422·3a202273·{.····"kind":·"s
Diff chunk too large, falling back to line-by-line diff (512 lines added, 512 lines removed)
3 ··0x00000010·74727563·74222c0a·20202020·226e616d·truct",.····"nam3 ··0x00000010·74727563·74222c0a·20202020·226e616d·truct",.····"nam
4 ··0x00000020·65223a20·22656c66·222c0a20·20202022·e":·"elf",.····"4 ··0x00000020·65223a20·22637563·6b6f6f22·2c0a2020·e":·"cuckoo",.··
5 ··0x00000030·61747472·69627574·6573223a·205b0a20·attributes":·[.·5 ··0x00000030·20202261·74747269·62757465·73223a20···"attributes":·
6 ··0x00000040·20202020·2020207b·0a202020·20202020········{.·······6 ··0x00000040·5b0a2020·20202020·20207b0a·20202020·[.········{.····
7 ··0x00000050·20202020·20226b69·6e64223a·20227661······"kind":·"va7 ··0x00000050·20202020·20202020·226b696e·64223a20·········"kind":·
8 ··0x00000060·6c756522·2c0a2020·20202020·20202020·lue",.··········8 ··0x00000060·22737472·75637422·2c0a2020·20202020·"struct",.······
9 ··0x00000070·2020226e·616d6522·3a202245·545f4e4f···"name":·"ET_NO9 ··0x00000070·20202020·2020226e·616d6522·3a20226e·······"name":·"n
10 ··0x00000080·4e45222c·0a202020·20202020·20202020·NE",.···········10 ··0x00000080·6574776f·726b222c·0a202020·20202020·etwork",.·······
11 ··0x00000090·2022646f·63756d65·6e746174·696f6e22··"documentation"11 ··0x00000090·20202020·20226174·74726962·75746573······"attributes
12 ··0x000000a0·3a20224e·6f206669·6c652074·7970652e·:·"No·file·type.12 ··0x000000a0·223a205b·0a202020·20202020·20202020·":·[.···········
13 ··0x000000b0·222c0a20·20202020·20202020·20202022·",.············"13 ··0x000000b0·20202020·207b0a20·20202020·20202020······{.·········
14 ··0x000000c0·74797065·223a2022·69220a20·20202020·type":·"i".·····14 ··0x000000c0·20202020·20202020·20202022·6b696e64············"kind
15 ··0x000000d0·2020207d·2c0a2020·20202020·20207b0a····},.········{.15 ··0x000000d0·223a2022·66756e63·74696f6e·222c0a20·":·"function",.·
16 ··0x000000e0·20202020·20202020·20202020·226b696e·············"kin16 ··0x000000e0·20202020·20202020·20202020·20202020·················
17 ··0x000000f0·64223a20·2276616c·7565222c·0a202020·d":·"value",.···17 ··0x000000f0·20202022·6e616d65·223a2022·646e735f····"name":·"dns_
18 ··0x00000100·20202020·20202020·20226e61·6d65223a··········"name":18 ··0x00000100·6c6f6f6b·7570222c·0a202020·20202020·lookup",.·······
19 ··0x00000110·20224554·5f52454c·222c0a20·20202020··"ET_REL",.·····19 ··0x00000110·20202020·20202020·20202020·20227265··············"re
20 ··0x00000120·20202020·20202022·646f6375·6d656e74········"document20 ··0x00000120·7475726e·5f747970·65223a20·2269222c·turn_type":·"i",
21 ··0x00000130·6174696f·6e223a20·2252656c·6f636174·ation":·"Relocat21 ··0x00000130·0a202020·20202020·20202020·20202020·.···············
22 ··0x00000140·61626c65·2066696c·652e222c·0a202020·able·file.",.···22 ··0x00000140·20202020·20226f76·65726c6f·61647322······"overloads"
23 ··0x00000150·20202020·20202020·20227479·7065223a··········"type":23 ··0x00000150·3a205b0a·20202020·20202020·20202020·:·[.············
24 ··0x00000160·20226922·0a202020·20202020·207d2c0a··"i".········},.24 ··0x00000160·20202020·20202020·20202020·7b0a2020·············{.··
25 ··0x00000170·20202020·20202020·7b0a2020·20202020·········{.······25 ··0x00000170·20202020·20202020·20202020·20202020·················
26 ··0x00000180·20202020·2020226b·696e6422·3a202276·······"kind":·"v26 ··0x00000180·20202020·20202020·20202261·7267756d···········"argum
27 ··0x00000190·616c7565·222c0a20·20202020·20202020·alue",.·········27 ··0x00000190·656e7473·223a205b·0a202020·20202020·ents":·[.·······
28 ··0x000001a0·20202022·6e616d65·223a2022·45545f45····"name":·"ET_E28 ··0x000001a0·20202020·20202020·20202020·20202020·················
29 ··0x000001b0·58454322·2c0a2020·20202020·20202020·XEC",.··········29 ··0x000001b0·20202020·20202020·207b0a20·20202020··········{.·····
30 ··0x000001c0·20202264·6f63756d·656e7461·74696f6e···"documentation30 ··0x000001c0·20202020·20202020·20202020·20202020·················
31 ··0x000001d0·223a2022·45786563·75746162·6c652066·":·"Executable·f31 ··0x000001d0·20202020·20202020·20202020·20202022················"
32 ··0x000001e0·696c652e·222c0a20·20202020·20202020·ile.",.·········32 ··0x000001e0·74797065·223a2022·72222c0a·20202020·type":·"r",.····
33 ··0x000001f0·20202022·74797065·223a2022·69220a20····"type":·"i".·33 ··0x000001f0·20202020·20202020·20202020·20202020·················
34 ··0x00000200·20202020·2020207d·2c0a2020·20202020········},.······34 ··0x00000200·20202020·20202020·20202020·20202020·················
35 ··0x00000210·20207b0a·20202020·20202020·20202020···{.············35 ··0x00000210·226e616d·65223a20·22646f6d·61696e22·"name":·"domain"
36 ··0x00000220·226b696e·64223a20·2276616c·7565222c·"kind":·"value",36 ··0x00000220·0a202020·20202020·20202020·20202020·.···············
37 ··0x00000230·0a202020·20202020·20202020·20226e61·.············"na37 ··0x00000230·20202020·20202020·20202020·20202020·················
38 ··0x00000240·6d65223a·20224554·5f44594e·222c0a20·me":·"ET_DYN",.·38 ··0x00000240·207d0a20·20202020·20202020·20202020··}.·············
39 ··0x00000250·20202020·20202020·20202022·646f6375············"docu39 ··0x00000250·20202020·20202020·20202020·2020205d················]
40 ··0x00000260·6d656e74·6174696f·6e223a20·22536861·mentation":·"Sha40 ··0x00000260·2c0a2020·20202020·20202020·20202020·,.··············
41 ··0x00000270·72656420·6f626a65·63742066·696c652e·red·object·file.41 ··0x00000270·20202020·20202020·20202020·20202264···············"d
42 ··0x00000280·222c0a20·20202020·20202020·20202022·",.············"42 ··0x00000280·6f63756d·656e7461·74696f6e·223a2022·ocumentation":·"
43 ··0x00000290·74797065·223a2022·69220a20·20202020·type":·"i".·····43 ··0x00000290·46756e63·74696f6e·20726574·75726e69·Function·returni
44 ··0x000002a0·2020207d·2c0a2020·20202020·20207b0a····},.········{.44 ··0x000002a0·6e672074·72756520·69662074·68652070·ng·true·if·the·p
45 ··0x000002b0·20202020·20202020·20202020·226b696e·············"kin45 ··0x000002b0·726f6772·616d2073·656e7420·6120646f·rogram·sent·a·do
46 ··0x000002c0·64223a20·2276616c·7565222c·0a202020·d":·"value",.···46 ··0x000002c0·6d61696e·206e616d·65207265·736f6c75·main·name·resolu
47 ··0x000002d0·20202020·20202020·20226e61·6d65223a··········"name":47 ··0x000002d0·74696f6e·20726571·75657374·20666f72·tion·request·for
48 ··0x000002e0·20224554·5f434f52·45222c0a·20202020··"ET_CORE",.····48 ··0x000002e0·20612064·6f6d6169·6e206d61·74636869··a·domain·matchi
49 ··0x000002f0·20202020·20202020·22646f63·756d656e·········"documen49 ··0x000002f0·6e672074·68652070·726f7669·64656420·ng·the·provided·
50 ··0x00000300·74617469·6f6e223a·2022436f·72652066·tation":·"Core·f50 ··0x00000300·72656775·6c617220·65787072·65737369·regular·expressi
51 ··0x00000310·696c652e·222c0a20·20202020·20202020·ile.",.·········51 ··0x00000310·6f6e2e5c·6e5c6e45·78616d70·6c653a20·on.\n\nExample:·
52 ··0x00000320·20202022·74797065·223a2022·69220a20····"type":·"i".·52 ··0x00000320·6375636b·6f6f2e6e·6574776f·726b2e64·cuckoo.network.d
53 ··0x00000330·20202020·2020207d·2c0a2020·20202020········},.······53 ··0x00000330·6e735f6c·6f6f6b75·70282f65·76696c5c·ns_lookup(/evil\
54 ··0x00000340·20207b0a·20202020·20202020·20202020···{.············54 ··0x00000340·5c2e636f·6d2f2922·0a202020·20202020·\.com/)".·······
55 ··0x00000350·226b696e·64223a20·2276616c·7565222c·"kind":·"value",55 ··0x00000350·20202020·20202020·20202020·20202020·················
56 ··0x00000360·0a202020·20202020·20202020·20226e61·.············"na56 ··0x00000360·207d0a20·20202020·20202020·20202020··}.·············
57 ··0x00000370·6d65223a·2022454d·5f4e4f4e·45222c0a·me":·"EM_NONE",.57 ··0x00000370·20202020·2020205d·0a202020·20202020········].·······
58 ··0x00000380·20202020·20202020·20202020·22646f63·············"doc58 ··0x00000380·20202020·20202020·207d2c0a·20202020··········},.····
59 ··0x00000390·756d656e·74617469·6f6e223a·2022222c·umentation":·"",59 ··0x00000390·20202020·20202020·20202020·7b0a2020·············{.··
60 ··0x000003a0·0a202020·20202020·20202020·20227479·.············"ty60 ··0x000003a0·20202020·20202020·20202020·20202020·················
61 ··0x000003b0·7065223a·20226922·0a202020·20202020·pe":·"i".·······61 ··0x000003b0·2020226b·696e6422·3a202266·756e6374···"kind":·"funct
62 ··0x000003c0·207d2c0a·20202020·20202020·7b0a2020··},.········{.··62 ··0x000003c0·696f6e22·2c0a2020·20202020·20202020·ion",.··········
63 ··0x000003d0·20202020·20202020·2020226b·696e6422···········"kind"63 ··0x000003d0·20202020·20202020·2020226e·616d6522···········"name"
64 ··0x000003e0·3a202276·616c7565·222c0a20·20202020·:·"value",.·····64 ··0x000003e0·3a202268·7474705f·67657422·2c0a2020·:·"http_get",.··
65 ··0x000003f0·20202020·20202022·6e616d65·223a2022········"name":·"65 ··0x000003f0·20202020·20202020·20202020·20202020·················
66 ··0x00000400·454d5f4d·3332222c·0a202020·20202020·EM_M32",.·······66 ··0x00000400·20202272·65747572·6e5f7479·7065223a···"return_type":
67 ··0x00000410·20202020·2022646f·63756d65·6e746174······"documentat67 ··0x00000410·20226922·2c0a2020·20202020·20202020··"i",.··········
68 ··0x00000420·696f6e22·3a202222·2c0a2020·20202020·ion":·"",.······68 ··0x00000420·20202020·20202020·2020226f·7665726c···········"overl
69 ··0x00000430·20202020·20202274·79706522·3a202269·······"type":·"i69 ··0x00000430·6f616473·223a205b·0a202020·20202020·oads":·[.·······
70 ··0x00000440·220a2020·20202020·20207d2c·0a202020·".········},.···70 ··0x00000440·20202020·20202020·20202020·20202020·················
71 ··0x00000450·20202020·207b0a20·20202020·20202020······{.·········71 ··0x00000450·207b0a20·20202020·20202020·20202020··{.·············
72 ··0x00000460·20202022·6b696e64·223a2022·76616c75····"kind":·"valu72 ··0x00000460·20202020·20202020·20202020·20202022················"
73 ··0x00000470·65222c0a·20202020·20202020·20202020·e",.············73 ··0x00000470·61726775·6d656e74·73223a20·5b0a2020·arguments":·[.··
74 ··0x00000480·226e616d·65223a20·22454d5f·53504152·"name":·"EM_SPAR74 ··0x00000480·20202020·20202020·20202020·20202020·················
75 ··0x00000490·43222c0a·20202020·20202020·20202020·C",.············75 ··0x00000490·20202020·20202020·20202020·20207b0a···············{.
76 ··0x000004a0·22646f63·756d656e·74617469·6f6e223a·"documentation":76 ··0x000004a0·20202020·20202020·20202020·20202020·················
77 ··0x000004b0·2022222c·0a202020·20202020·20202020··"",.···········77 ··0x000004b0·20202020·20202020·20202020·20202020·················
78 ··0x000004c0·20227479·7065223a·20226922·0a202020··"type":·"i".···78 ··0x000004c0·20202020·22747970·65223a20·2272222c·····"type":·"r",
79 ··0x000004d0·20202020·207d2c0a·20202020·20202020······},.········79 ··0x000004d0·0a202020·20202020·20202020·20202020·.···············
80 ··0x000004e0·7b0a2020·20202020·20202020·2020226b·{.············"k80 ··0x000004e0·20202020·20202020·20202020·20202020·················
81 ··0x000004f0·696e6422·3a202276·616c7565·222c0a20·ind":·"value",.·81 ··0x000004f0·20202020·20226e61·6d65223a·20227572······"name":·"ur
82 ··0x00000500·20202020·20202020·20202022·6e616d65············"name82 ··0x00000500·6c220a20·20202020·20202020·20202020·l".·············
83 ··0x00000510·223a2022·454d5f33·3836222c·0a202020·":·"EM_386",.···83 ··0x00000510·20202020·20202020·20202020·20202020·················
84 ··0x00000520·20202020·20202020·2022646f·63756d65··········"docume84 ··0x00000520·2020207d·0a202020·20202020·20202020····}.···········
85 ··0x00000530·6e746174·696f6e22·3a202222·2c0a2020·ntation":·"",.··85 ··0x00000530·20202020·20202020·20202020·20202020·················
86 ··0x00000540·20202020·20202020·20202274·79706522···········"type"86 ··0x00000540·205d2c0a·20202020·20202020·20202020··],.············
87 ··0x00000550·3a202269·220a2020·20202020·20207d2c·:·"i".········},87 ··0x00000550·20202020·20202020·20202020·20202020·················
88 ··0x00000560·0a202020·20202020·207b0a20·20202020·.········{.·····88 ··0x00000560·22646f63·756d656e·74617469·6f6e223a·"documentation":
89 ··0x00000570·20202020·20202022·6b696e64·223a2022········"kind":·"89 ··0x00000570·20224675·6e637469·6f6e2072·65747572··"Function·retur
90 ··0x00000580·76616c75·65222c0a·20202020·20202020·value",.········90 ··0x00000580·6e696e67·20747275·65206966·20746865·ning·true·if·the
91 ··0x00000590·20202020·226e616d·65223a20·22454d5f·····"name":·"EM_91 ··0x00000590·2070726f·6772616d·2073656e·74206120··program·sent·a·
92 ··0x000005a0·36384b22·2c0a2020·20202020·20202020·68K",.··········92 ··0x000005a0·48545450·20474554·20726571·75657374·HTTP·GET·request
93 ··0x000005b0·20202264·6f63756d·656e7461·74696f6e···"documentation93 ··0x000005b0·20746f20·61205552·4c206d61·74636869··to·a·URL·matchi
94 ··0x000005c0·223a2022·222c0a20·20202020·20202020·":·"",.·········94 ··0x000005c0·6e672074·68652070·726f7669·64656420·ng·the·provided·
95 ··0x000005d0·20202022·74797065·223a2022·69220a20····"type":·"i".·95 ··0x000005d0·72656775·6c617220·65787072·65737369·regular·expressi
96 ··0x000005e0·20202020·2020207d·2c0a2020·20202020········},.······96 ··0x000005e0·6f6e2e22·0a202020·20202020·20202020·on.".···········
97 ··0x000005f0·20207b0a·20202020·20202020·20202020···{.············97 ··0x000005f0·20202020·20202020·20202020·207d0a20··············}.·
98 ··0x00000600·226b696e·64223a20·2276616c·7565222c·"kind":·"value",98 ··0x00000600·20202020·20202020·20202020·20202020·················
99 ··0x00000610·0a202020·20202020·20202020·20226e61·.············"na99 ··0x00000610·2020205d·0a202020·20202020·20202020····].···········
100 ··0x00000620·6d65223a·2022454d·5f38384b·222c0a20·me":·"EM_88K",.·100 ··0x00000620·20202020·207d2c0a·20202020·20202020······},.········
101 ··0x00000630·20202020·20202020·20202022·646f6375············"docu101 ··0x00000630·20202020·20202020·7b0a2020·20202020·········{.······
102 ··0x00000640·6d656e74·6174696f·6e223a20·22222c0a·mentation":·"",.102 ··0x00000640·20202020·20202020·20202020·2020226b···············"k
103 ··0x00000650·20202020·20202020·20202020·22747970·············"typ103 ··0x00000650·696e6422·3a202266·756e6374·696f6e22·ind":·"function"
104 ··0x00000660·65223a20·2269220a·20202020·20202020·e":·"i".········104 ··0x00000660·2c0a2020·20202020·20202020·20202020·,.··············
105 ··0x00000670·7d2c0a20·20202020·2020207b·0a202020·},.········{.···105 ··0x00000670·20202020·2020226e·616d6522·3a202268·······"name":·"h
106 ··0x00000680·20202020·20202020·20226b69·6e64223a··········"kind":106 ··0x00000680·7474705f·706f7374·222c0a20·20202020·ttp_post",.·····
107 ··0x00000690·20227661·6c756522·2c0a2020·20202020··"value",.······107 ··0x00000690·20202020·20202020·20202020·20202022················"
108 ··0x000006a0·20202020·2020226e·616d6522·3a202245·······"name":·"E108 ··0x000006a0·72657475·726e5f74·79706522·3a202269·return_type":·"i
109 ··0x000006b0·4d5f3836·30222c0a·20202020·20202020·M_860",.········109 ··0x000006b0·222c0a20·20202020·20202020·20202020·",.·············
110 ··0x000006c0·20202020·22646f63·756d656e·74617469·····"documentati110 ··0x000006c0·20202020·20202022·6f766572·6c6f6164········"overload
111 ··0x000006d0·6f6e223a·2022222c·0a202020·20202020·on":·"",.·······111 ··0x000006d0·73223a20·5b0a2020·20202020·20202020·s":·[.··········
112 ··0x000006e0·20202020·20227479·7065223a·20226922······"type":·"i"112 ··0x000006e0·20202020·20202020·20202020·20207b0a···············{.
113 ··0x000006f0·0a202020·20202020·207d2c0a·20202020·.········},.····113 ··0x000006f0·20202020·20202020·20202020·20202020·················
114 ··0x00000700·20202020·7b0a2020·20202020·20202020·····{.··········114 ··0x00000700·20202020·20202020·20202020·22617267·············"arg
115 ··0x00000710·2020226b·696e6422·3a202276·616c7565···"kind":·"value115 ··0x00000710·756d656e·7473223a·205b0a20·20202020·uments":·[.·····
116 ··0x00000720·222c0a20·20202020·20202020·20202022·",.············"116 ··0x00000720·20202020·20202020·20202020·20202020·················
117 ··0x00000730·6e616d65·223a2022·454d5f4d·49505322·name":·"EM_MIPS"117 ··0x00000730·20202020·20202020·2020207b·0a202020············{.···
118 ··0x00000740·2c0a2020·20202020·20202020·20202264·,.············"d118 ··0x00000740·20202020·20202020·20202020·20202020·················
119 ··0x00000750·6f63756d·656e7461·74696f6e·223a2022·ocumentation":·"119 ··0x00000750·20202020·20202020·20202020·20202020·················
120 ··0x00000760·222c0a20·20202020·20202020·20202022·",.············"120 ··0x00000760·20227479·7065223a·20227222·2c0a2020··"type":·"r",.··
121 ··0x00000770·74797065·223a2022·69220a20·20202020·type":·"i".·····121 ··0x00000770·20202020·20202020·20202020·20202020·················
122 ··0x00000780·2020207d·2c0a2020·20202020·20207b0a····},.········{.122 ··0x00000780·20202020·20202020·20202020·20202020·················
123 ··0x00000790·20202020·20202020·20202020·226b696e·············"kin123 ··0x00000790·2020226e·616d6522·3a202275·726c220a···"name":·"url".
124 ··0x000007a0·64223a20·2276616c·7565222c·0a202020·d":·"value",.···124 ··0x000007a0·20202020·20202020·20202020·20202020·················
125 ··0x000007b0·20202020·20202020·20226e61·6d65223a··········"name":125 ··0x000007b0·20202020·20202020·20202020·20202020·················
Max diff block lines reached; 1877072/1945939 bytes (96.46%) of diff not shown.
⊟
2.11 MB
libyaramod0_3.21.0-1.1_i386.deb
⊟
452 B
file list
    
Offset 1, 3 lines modifiedOffset 1, 3 lines modified
1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary
2 -rw-r--r--···0········0········0······904·2024-07-03·21:18:46.000000·control.tar.xz2 -rw-r--r--···0········0········0······912·2024-07-03·21:18:46.000000·control.tar.xz
3 -rw-r--r--···0········0········0···568220·2024-07-03·21:18:46.000000·data.tar.xz3 -rw-r--r--···0········0········0···568308·2024-07-03·21:18:46.000000·data.tar.xz
⊟
98.0 B
control.tar.xz
⊟
70.0 B
control.tar
⊟
48.0 B
./md5sums
⊟
30.0 B
./md5sums
Files differ
⊟
2.11 MB
data.tar.xz
⊟
2.11 MB
data.tar
⊟
2.11 MB
./usr/lib/i386-linux-gnu/libyaramod.so.3.21.0
File has been modified after NT_GNU_BUILD_ID has been applied.
⊟
430 B
readelf --wide --notes {}
    
Offset 1, 4 lines modifiedOffset 1, 4 lines modified
  
1 Displaying·notes·found·in:·.note.gnu.build-id1 Displaying·notes·found·in:·.note.gnu.build-id
2 ··Owner················Data·size·»  Description2 ··Owner················Data·size·»  Description
3 ··GNU··················0x00000014»  NT_GNU_BUILD_ID·(unique·build·ID·bitstring)»   ····Build·ID:·9483e960482177d0e4e305f10f3d36c8ce3c0f483 ··GNU··················0x00000014»  NT_GNU_BUILD_ID·(unique·build·ID·bitstring)»   ····Build·ID:·2a7e52dd960ed1f764ab99676c22beaa684ac254
⊟
191 KB
strings --all --bytes=8 {}
Ordering differences only
    
Offset 4795, 887 lines modifiedOffset 4795, 1702 lines modified
4795 )147:;=IJ]4795 )147:;=IJ]
4796 )14:;EFIJ^de4796 )14:;EFIJ^de
4797 FGNOXZ\^~4797 FGNOXZ\^~
4798 N7yaramod9HexStringE4798 N7yaramod9HexStringE
4799 N7yaramod11ModuleErrorE4799 N7yaramod11ModuleErrorE
4800 N7yaramod6ModuleE4800 N7yaramod6ModuleE
4801 ····"kind":·"struct",4801 ····"kind":·"struct",
 4802 ····"name":·"cuckoo",
 4803 ····"attributes":·[
 4804 ········{
 4805 ············"kind":·"struct",
 4806 ············"name":·"network",
 4807 ············"attributes":·[
 4808 ················{
 4809 ····················"kind":·"function",
 4810 ····················"name":·"dns_lookup",
 4811 ····················"return_type":·"i",
 4812 ····················"overloads":·[
 4813 ························{
 4814 ····························"arguments":·[
 4815 ································{
 4816 ····································"type":·"r",
 4817 ····································"name":·"domain"
 4818 ································}
 4819 ····························],
 4820 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·domain·name·resolution·request·for·a·domain·matching·the·provided·regular·expression.\n\nExample:·cuckoo.network.dns_lookup(/evil\\.com/)"
 4821 ························}
 4822 ····················]
 4823 ················},
 4824 ················{
 4825 ····················"kind":·"function",
 4826 ····················"name":·"http_get",
 4827 ····················"return_type":·"i",
 4828 ····················"overloads":·[
 4829 ························{
 4830 ····························"arguments":·[
 4831 ································{
 4832 ····································"type":·"r",
 4833 ····································"name":·"url"
 4834 ································}
 4835 ····························],
 4836 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·HTTP·GET·request·to·a·URL·matching·the·provided·regular·expression."
 4837 ························}
 4838 ····················]
 4839 ················},
 4840 ················{
 4841 ····················"kind":·"function",
 4842 ····················"name":·"http_post",
 4843 ····················"return_type":·"i",
 4844 ····················"overloads":·[
 4845 ························{
 4846 ····························"arguments":·[
 4847 ································{
 4848 ····································"type":·"r",
 4849 ····································"name":·"url"
 4850 ································}
 4851 ····························],
 4852 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·HTTP·POST·request·to·a·URL·matching·the·provided·regular·expression."
 4853 ························}
 4854 ····················]
 4855 ················},
 4856 ················{
 4857 ····················"kind":·"function",
 4858 ····················"name":·"http_request",
 4859 ····················"return_type":·"i",
 4860 ····················"overloads":·[
 4861 ························{
 4862 ····························"arguments":·[
 4863 ································{
 4864 ····································"type":·"r",
 4865 ····································"name":·"url"
 4866 ································}
 4867 ····························],
 4868 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·HTTP·request·to·a·URL·matching·the·provided·regular·expression."
 4869 ························}
 4870 ····················]
 4871 ················},
 4872 ················{
 4873 ····················"kind":·"function",
 4874 ····················"name":·"host",
 4875 ····················"return_type":·"i",
 4876 ····················"overloads":·[
 4877 ························{
 4878 ····························"arguments":·[
 4879 ································{
 4880 ····································"type":·"r",
 4881 ····································"name":·"IP·address"
 4882 ································}
 4883 ····························],
 4884 ····························"documentation":·"Function·returning·true·if·the·program·contacted·an·IP·address·matching·the·provided·regular·expression.·Example:·```cuckoo.network.host(/192\\.168\\.1\\.1/)```"
 4885 ························}
 4886 ····················]
 4887 ················},
 4888 ················{
 4889 ····················"kind":·"function",
 4890 ····················"name":·"http_user_agent",
 4891 ····················"return_type":·"i",
 4892 ····················"overloads":·[
 4893 ························{
 4894 ····························"arguments":·[
 4895 ································{
 4896 ····································"type":·"r",
 4897 ····································"name":·"agent"
 4898 ································}
 4899 ····························],
 4900 ····························"documentation":·"Function·returning·true·if·the·program·sent·a·HTTP·request·with·a·user·agent·matching·the·provided·regular·expression.·Example:·```cuckoo.network.http_user_agent(/MSIE·6\\.0/)```"
 4901 ························}
 4902 ····················]
 4903 ················},
 4904 ················{
 4905 ····················"kind":·"function",
 4906 ····················"name":·"tcp",
 4907 ····················"return_type":·"i",
 4908 ····················"overloads":·[
 4909 ························{
 4910 ····························"arguments":·[
 4911 ································{
 4912 ····································"type":·"r",
 4913 ····································"name":·"IP·address"
 4914 ································},
 4915 ································{
 4916 ····································"type":·"i",
 4917 ····································"name":·"port"
 4918 ································}
 4919 ····························],
 4920 ····························"documentation":·"Function·returning·true·if·the·program·contacted·an·IP·address·matching·the·provided·regular·expression,·over·TCP·on·the·provided·port·number."
 4921 ························}
Max diff block lines reached; 186083/195464 bytes (95.20%) of diff not shown.
⊟
68.2 KB
objdump --line-numbers --disassemble --demangle --reloc --no-show-raw-insn --section=.text {}
    
Offset 456237, 57 lines modifiedOffset 456237, 54 lines modified
456237 /usr/include/c++/14/bits/basic_string.h:255456237 /usr/include/c++/14/bits/basic_string.h:255
456238 »       mov····-0x4dc(%ebp),%eax456238 »       mov····-0x4dc(%ebp),%eax
456239 »       mov····%eax,-0x26c(%ebp)456239 »       mov····%eax,-0x26c(%ebp)
456240 /usr/include/c++/14/bits/basic_string.h:218456240 /usr/include/c++/14/bits/basic_string.h:218
456241 »       mov····-0x570(%ebp),%eax456241 »       mov····-0x570(%ebp),%eax
456242 /usr/include/c++/14/bits/basic_string.h:223456242 /usr/include/c++/14/bits/basic_string.h:223
456243 »       mov····%edx,-0x270(%ebp)456243 »       mov····%edx,-0x270(%ebp)
456244 /usr/include/c++/14/bits/char_traits.h:427 
456245 »       mov····$0x6f6f,%ecx 
456246 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)456244 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)
456247 »       lea····-0x2bc(%ebp),%ebx456245 »       lea····-0x2bc(%ebp),%ebx
456248 »       lea····-0x2b4(%ebp),%esi456246 »       lea····-0x2b4(%ebp),%esi
456249 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_cuckoo_generated.h:17456247 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_hash_generated.h:17
456250 »       mov····$0x2134,%edx456248 »       mov····$0x15c1,%edx
456251 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)456249 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)
456252 »       mov····%ebx,-0x520(%ebp)456250 »       mov····%ebx,-0x520(%ebp)
456253 /usr/include/c++/14/bits/basic_string.h:218456251 /usr/include/c++/14/bits/basic_string.h:218
456254 »       mov····%eax,-0x4e4(%ebp)456252 »       mov····%eax,-0x4e4(%ebp)
456255 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_cuckoo_generated.h:17456253 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_hash_generated.h:17
456256 »       lea····-0x50ce8(%edi),%eax456254 »       lea····-0x50188(%edi),%eax
456257 /usr/include/c++/14/bits/basic_string.h:223456255 /usr/include/c++/14/bits/basic_string.h:223
456258 »       movl···$0x0,-0x4e0(%ebp)456256 »       movl···$0x0,-0x4e0(%ebp)
456259 /usr/include/c++/14/bits/char_traits.h:350456257 /usr/include/c++/14/bits/char_traits.h:350
456260 »       movb···$0x0,-0x4dc(%ebp)456258 »       movb···$0x0,-0x4dc(%ebp)
456261 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)456259 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)
456262 »       mov····%esi,-0x51c(%ebp)456260 »       mov····%esi,-0x51c(%ebp)
456263 »       mov····%esi,-0x2bc(%ebp)456261 »       mov····%esi,-0x2bc(%ebp)
456264 /usr/include/c++/14/bits/char_traits.h:427456262 /usr/include/c++/14/bits/char_traits.h:427
456265 »       movl···$0x6b637563,-0x2b4(%ebp)456263 »       movl···$0x68736168,-0x2b4(%ebp)
456266 »       mov····%cx,-0x2b0(%ebp) 
456267 /usr/include/c++/14/bits/basic_string.h:223456264 /usr/include/c++/14/bits/basic_string.h:223
456268 »       movl···$0x6,-0x2b8(%ebp)456265 »       movl···$0x4,-0x2b8(%ebp)
456269 /usr/include/c++/14/bits/char_traits.h:350456266 /usr/include/c++/14/bits/char_traits.h:350
456270 »       movb···$0x0,-0x2ae(%ebp)456267 »       movb···$0x0,-0x2b0(%ebp)
456271 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_cuckoo_generated.h:17·(discriminator·2)456268 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_hash_generated.h:17·(discriminator·2)
456272 »       push···%edx456269 »       push···%edx
456273 »       push···%eax456270 »       push···%eax
456274 »       lea····-0x4cc(%ebp),%eax456271 »       lea····-0x4cc(%ebp),%eax
456275 »       push···%ebx456272 »       push···%ebx
456276 »       mov····%edi,%ebx456273 »       mov····%edi,%ebx
456277 »       mov····%eax,-0x5b8(%ebp)456274 »       mov····%eax,-0x5b8(%ebp)
456278 »       push···%eax456275 »       push···%eax
456279 »       call···6c830·<yaramod::ModuleContent::ModuleContent(std::__cxx11::basic_string<char,·std::char_traits<char>,·std::allocator<char>·>·const&,·std::initializer_list<char>)@plt>456276 »       call···6c830·<yaramod::ModuleContent::ModuleContent(std::__cxx11::basic_string<char,·std::char_traits<char>,·std::allocator<char>·>·const&,·std::initializer_list<char>)@plt>
456280 /usr/include/c++/14/bits/basic_string.h:228456277 /usr/include/c++/14/bits/basic_string.h:228
456281 »       mov····-0x2bc(%ebp),%edx456278 »       mov····-0x2bc(%ebp),%edx
456282 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_cuckoo_generated.h:17·(discriminator·2)456279 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_hash_generated.h:17·(discriminator·2)
456283 »       add····$0x10,%esp456280 »       add····$0x10,%esp
456284 /usr/include/c++/14/bits/basic_string.h:269·(discriminator·2)456281 /usr/include/c++/14/bits/basic_string.h:269·(discriminator·2)
456285 »       cmp····%esi,%edx456282 »       cmp····%esi,%edx
456286 »       je·····183543·<yaramod::modules::ModuleList::ModuleList()@@Base+0x1f3>456283 »       je·····183537·<yaramod::modules::ModuleList::ModuleList()@@Base+0x1e7>
456287 /usr/include/c++/14/bits/basic_string.h:294456284 /usr/include/c++/14/bits/basic_string.h:294
456288 »       mov····-0x2b4(%ebp),%eax456285 »       mov····-0x2b4(%ebp),%eax
456289 /usr/include/c++/14/bits/new_allocator.h:172456286 /usr/include/c++/14/bits/new_allocator.h:172
456290 »       sub····$0x8,%esp456287 »       sub····$0x8,%esp
456291 /usr/include/c++/14/bits/basic_string.h:294456288 /usr/include/c++/14/bits/basic_string.h:294
456292 »       add····$0x1,%eax456289 »       add····$0x1,%eax
456293 /usr/include/c++/14/bits/new_allocator.h:172456290 /usr/include/c++/14/bits/new_allocator.h:172
Offset 456343, 55 lines modifiedOffset 456340, 54 lines modified
456343 /usr/include/c++/14/bits/basic_string.h:255456340 /usr/include/c++/14/bits/basic_string.h:255
456344 »       mov····-0x4ac(%ebp),%eax456341 »       mov····-0x4ac(%ebp),%eax
456345 »       mov····%eax,-0x23c(%ebp)456342 »       mov····%eax,-0x23c(%ebp)
456346 /usr/include/c++/14/bits/basic_string.h:218456343 /usr/include/c++/14/bits/basic_string.h:218
456347 »       mov····-0x578(%ebp),%eax456344 »       mov····-0x578(%ebp),%eax
456348 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)456345 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)
456349 »       mov····-0x51c(%ebp),%esi456346 »       mov····-0x51c(%ebp),%esi
 456347 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_elf_generated.h:17·(discriminator·2)
 456348 »       mov····%edi,%ebx
456350 /usr/include/c++/14/bits/basic_string.h:223456349 /usr/include/c++/14/bits/basic_string.h:223
456351 »       mov····%edx,-0x240(%ebp)456350 »       mov····%edx,-0x240(%ebp)
456352 /usr/include/c++/14/bits/char_traits.h:427456351 /usr/include/c++/14/bits/char_traits.h:427
456353 »       mov····$0x7465,%ebx456352 »       mov····$0x6c65,%ecx
456354 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_dotnet_generated.h:17456353 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_elf_generated.h:17
456355 »       mov····$0x4c85,%edx456354 »       mov····$0x6c07,%edx
456356 /usr/include/c++/14/bits/char_traits.h:427 
456357 »       mov····%bx,-0x2b0(%ebp) 
456358 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_dotnet_generated.h:17·(discriminator·2) 
456359 »       mov····%edi,%ebx 
456360 /usr/include/c++/14/bits/basic_string.h:218 
456361 »       mov····%eax,-0x4b4(%ebp) 
456362 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_dotnet_generated.h:17 
456363 »       lea····-0x55988(%edi),%eax 
456364 /usr/include/c++/14/bits/basic_string.h:223456355 /usr/include/c++/14/bits/basic_string.h:223
456365 »       movl···$0x0,-0x4b0(%ebp)456356 »       movl···$0x0,-0x4b0(%ebp)
 456357 /usr/include/c++/14/bits/basic_string.h:218
 456358 »       mov····%eax,-0x4b4(%ebp)
 456359 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_elf_generated.h:17
 456360 »       lea····-0x56da8(%edi),%eax
456366 /usr/include/c++/14/bits/char_traits.h:350456361 /usr/include/c++/14/bits/char_traits.h:350
456367 »       movb···$0x0,-0x4ac(%ebp)456362 »       movb···$0x0,-0x4ac(%ebp)
456368 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)456363 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)
456369 »       mov····%esi,-0x2bc(%ebp)456364 »       mov····%esi,-0x2bc(%ebp)
456370 /usr/include/c++/14/bits/char_traits.h:427456365 /usr/include/c++/14/bits/char_traits.h:427
 456366 »       mov····%cx,-0x2b4(%ebp)
456371 »       movl···$0x6e746f64,-0x2b4(%ebp)456367 »       movb···$0x66,-0x2b2(%ebp)
456372 /usr/include/c++/14/bits/basic_string.h:223456368 /usr/include/c++/14/bits/basic_string.h:223
456373 »       movl···$0x6,-0x2b8(%ebp)456369 »       movl···$0x3,-0x2b8(%ebp)
456374 /usr/include/c++/14/bits/char_traits.h:350456370 /usr/include/c++/14/bits/char_traits.h:350
456375 »       movb···$0x0,-0x2ae(%ebp)456371 »       movb···$0x0,-0x2b1(%ebp)
456376 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_dotnet_generated.h:17·(discriminator·2)456372 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_elf_generated.h:17·(discriminator·2)
456377 »       push···%edx456373 »       push···%edx
456378 »       push···%eax456374 »       push···%eax
456379 »       lea····-0x49c(%ebp),%eax456375 »       lea····-0x49c(%ebp),%eax
456380 »       push···-0x520(%ebp)456376 »       push···-0x520(%ebp)
456381 »       mov····%eax,-0x5bc(%ebp)456377 »       mov····%eax,-0x5bc(%ebp)
456382 »       push···%eax456378 »       push···%eax
456383 »       call···6c830·<yaramod::ModuleContent::ModuleContent(std::__cxx11::basic_string<char,·std::char_traits<char>,·std::allocator<char>·>·const&,·std::initializer_list<char>)@plt>456379 »       call···6c830·<yaramod::ModuleContent::ModuleContent(std::__cxx11::basic_string<char,·std::char_traits<char>,·std::allocator<char>·>·const&,·std::initializer_list<char>)@plt>
456384 /usr/include/c++/14/bits/basic_string.h:228456380 /usr/include/c++/14/bits/basic_string.h:228
456385 »       mov····-0x2bc(%ebp),%edx456381 »       mov····-0x2bc(%ebp),%edx
456386 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_dotnet_generated.h:17·(discriminator·2)456382 ./obj-i686-linux-gnu/src/./include/yaramod/types/modules/generated/module_elf_generated.h:17·(discriminator·2)
456387 »       add····$0x10,%esp456383 »       add····$0x10,%esp
456388 /usr/include/c++/14/bits/basic_string.h:269·(discriminator·2)456384 /usr/include/c++/14/bits/basic_string.h:269·(discriminator·2)
456389 »       cmp····%esi,%edx456385 »       cmp····%esi,%edx
456390 »       je·····183682·<yaramod::modules::ModuleList::ModuleList()@@Base+0x332>456386 »       je·····183673·<yaramod::modules::ModuleList::ModuleList()@@Base+0x323>
456391 /usr/include/c++/14/bits/basic_string.h:294456387 /usr/include/c++/14/bits/basic_string.h:294
456392 »       mov····-0x2b4(%ebp),%eax456388 »       mov····-0x2b4(%ebp),%eax
456393 /usr/include/c++/14/bits/new_allocator.h:172456389 /usr/include/c++/14/bits/new_allocator.h:172
456394 »       sub····$0x8,%esp456390 »       sub····$0x8,%esp
456395 /usr/include/c++/14/bits/basic_string.h:294456391 /usr/include/c++/14/bits/basic_string.h:294
456396 »       add····$0x1,%eax456392 »       add····$0x1,%eax
456397 /usr/include/c++/14/bits/new_allocator.h:172456393 /usr/include/c++/14/bits/new_allocator.h:172
Offset 456447, 52 lines modifiedOffset 456443, 51 lines modified
456447 /usr/include/c++/14/bits/basic_string.h:255456443 /usr/include/c++/14/bits/basic_string.h:255
456448 »       mov····-0x47c(%ebp),%eax456444 »       mov····-0x47c(%ebp),%eax
456449 »       mov····%eax,-0x20c(%ebp)456445 »       mov····%eax,-0x20c(%ebp)
456450 /usr/include/c++/14/bits/basic_string.h:218456446 /usr/include/c++/14/bits/basic_string.h:218
456451 »       mov····-0x580(%ebp),%eax456447 »       mov····-0x580(%ebp),%eax
456452 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)456448 /usr/include/c++/14/bits/basic_string.h:194·(discriminator·1)
Max diff block lines reached; 63030/69633 bytes (90.52%) of diff not shown.
⊟
1.86 MB
readelf --wide --decompress --hex-dump=.rodata {}
    
Offset 5654, 14618 lines modifiedOffset 5654, 14618 lines modified
5654 ··0x001c9130·f043f2ff·f8d9f2ff·68d8f2ff·68d8f2ff·.C......h...h...5654 ··0x001c9130·f043f2ff·f8d9f2ff·68d8f2ff·68d8f2ff·.C......h...h...
5655 ··0x001c9140·18d9f2ff·30d9f2ff·4e377961·72616d6f·....0...N7yaramo5655 ··0x001c9140·18d9f2ff·30d9f2ff·4e377961·72616d6f·....0...N7yaramo
5656 ··0x001c9150·6431314d·6f64756c·65457272·6f724500·d11ModuleErrorE.5656 ··0x001c9150·6431314d·6f64756c·65457272·6f724500·d11ModuleErrorE.
5657 ··0x001c9160·4e377961·72616d6f·64364d6f·64756c65·N7yaramod6Module5657 ··0x001c9160·4e377961·72616d6f·64364d6f·64756c65·N7yaramod6Module
5658 ··0x001c9170·45000000·00000000·00000000·00000000·E...............5658 ··0x001c9170·45000000·00000000·00000000·00000000·E...............
5659 ··0x001c9180·7b0a2020·2020226b·696e6422·3a202273·{.····"kind":·"s5659 ··0x001c9180·7b0a2020·2020226b·696e6422·3a202273·{.····"kind":·"s
Diff chunk too large, falling back to line-by-line diff (512 lines added, 512 lines removed)
5660 ··0x001c9190·74727563·74222c0a·20202020·226e616d·truct",.····"nam5660 ··0x001c9190·74727563·74222c0a·20202020·226e616d·truct",.····"nam
5661 ··0x001c91a0·65223a20·22656c66·222c0a20·20202022·e":·"elf",.····"5661 ··0x001c91a0·65223a20·22637563·6b6f6f22·2c0a2020·e":·"cuckoo",.··
5662 ··0x001c91b0·61747472·69627574·6573223a·205b0a20·attributes":·[.·5662 ··0x001c91b0·20202261·74747269·62757465·73223a20···"attributes":·
5663 ··0x001c91c0·20202020·2020207b·0a202020·20202020········{.·······5663 ··0x001c91c0·5b0a2020·20202020·20207b0a·20202020·[.········{.····
5664 ··0x001c91d0·20202020·20226b69·6e64223a·20227661······"kind":·"va5664 ··0x001c91d0·20202020·20202020·226b696e·64223a20·········"kind":·
5665 ··0x001c91e0·6c756522·2c0a2020·20202020·20202020·lue",.··········5665 ··0x001c91e0·22737472·75637422·2c0a2020·20202020·"struct",.······
5666 ··0x001c91f0·2020226e·616d6522·3a202245·545f4e4f···"name":·"ET_NO5666 ··0x001c91f0·20202020·2020226e·616d6522·3a20226e·······"name":·"n
5667 ··0x001c9200·4e45222c·0a202020·20202020·20202020·NE",.···········5667 ··0x001c9200·6574776f·726b222c·0a202020·20202020·etwork",.·······
5668 ··0x001c9210·2022646f·63756d65·6e746174·696f6e22··"documentation"5668 ··0x001c9210·20202020·20226174·74726962·75746573······"attributes
5669 ··0x001c9220·3a20224e·6f206669·6c652074·7970652e·:·"No·file·type.5669 ··0x001c9220·223a205b·0a202020·20202020·20202020·":·[.···········
5670 ··0x001c9230·222c0a20·20202020·20202020·20202022·",.············"5670 ··0x001c9230·20202020·207b0a20·20202020·20202020······{.·········
5671 ··0x001c9240·74797065·223a2022·69220a20·20202020·type":·"i".·····5671 ··0x001c9240·20202020·20202020·20202022·6b696e64············"kind
5672 ··0x001c9250·2020207d·2c0a2020·20202020·20207b0a····},.········{.5672 ··0x001c9250·223a2022·66756e63·74696f6e·222c0a20·":·"function",.·
5673 ··0x001c9260·20202020·20202020·20202020·226b696e·············"kin5673 ··0x001c9260·20202020·20202020·20202020·20202020·················
5674 ··0x001c9270·64223a20·2276616c·7565222c·0a202020·d":·"value",.···5674 ··0x001c9270·20202022·6e616d65·223a2022·646e735f····"name":·"dns_
5675 ··0x001c9280·20202020·20202020·20226e61·6d65223a··········"name":5675 ··0x001c9280·6c6f6f6b·7570222c·0a202020·20202020·lookup",.·······
5676 ··0x001c9290·20224554·5f52454c·222c0a20·20202020··"ET_REL",.·····5676 ··0x001c9290·20202020·20202020·20202020·20227265··············"re
5677 ··0x001c92a0·20202020·20202022·646f6375·6d656e74········"document5677 ··0x001c92a0·7475726e·5f747970·65223a20·2269222c·turn_type":·"i",
5678 ··0x001c92b0·6174696f·6e223a20·2252656c·6f636174·ation":·"Relocat5678 ··0x001c92b0·0a202020·20202020·20202020·20202020·.···············
5679 ··0x001c92c0·61626c65·2066696c·652e222c·0a202020·able·file.",.···5679 ··0x001c92c0·20202020·20226f76·65726c6f·61647322······"overloads"
5680 ··0x001c92d0·20202020·20202020·20227479·7065223a··········"type":5680 ··0x001c92d0·3a205b0a·20202020·20202020·20202020·:·[.············
5681 ··0x001c92e0·20226922·0a202020·20202020·207d2c0a··"i".········},.5681 ··0x001c92e0·20202020·20202020·20202020·7b0a2020·············{.··
5682 ··0x001c92f0·20202020·20202020·7b0a2020·20202020·········{.······5682 ··0x001c92f0·20202020·20202020·20202020·20202020·················
5683 ··0x001c9300·20202020·2020226b·696e6422·3a202276·······"kind":·"v5683 ··0x001c9300·20202020·20202020·20202261·7267756d···········"argum
5684 ··0x001c9310·616c7565·222c0a20·20202020·20202020·alue",.·········5684 ··0x001c9310·656e7473·223a205b·0a202020·20202020·ents":·[.·······
5685 ··0x001c9320·20202022·6e616d65·223a2022·45545f45····"name":·"ET_E5685 ··0x001c9320·20202020·20202020·20202020·20202020·················
5686 ··0x001c9330·58454322·2c0a2020·20202020·20202020·XEC",.··········5686 ··0x001c9330·20202020·20202020·207b0a20·20202020··········{.·····
5687 ··0x001c9340·20202264·6f63756d·656e7461·74696f6e···"documentation5687 ··0x001c9340·20202020·20202020·20202020·20202020·················
5688 ··0x001c9350·223a2022·45786563·75746162·6c652066·":·"Executable·f5688 ··0x001c9350·20202020·20202020·20202020·20202022················"
5689 ··0x001c9360·696c652e·222c0a20·20202020·20202020·ile.",.·········5689 ··0x001c9360·74797065·223a2022·72222c0a·20202020·type":·"r",.····
5690 ··0x001c9370·20202022·74797065·223a2022·69220a20····"type":·"i".·5690 ··0x001c9370·20202020·20202020·20202020·20202020·················
5691 ··0x001c9380·20202020·2020207d·2c0a2020·20202020········},.······5691 ··0x001c9380·20202020·20202020·20202020·20202020·················
5692 ··0x001c9390·20207b0a·20202020·20202020·20202020···{.············5692 ··0x001c9390·226e616d·65223a20·22646f6d·61696e22·"name":·"domain"
5693 ··0x001c93a0·226b696e·64223a20·2276616c·7565222c·"kind":·"value",5693 ··0x001c93a0·0a202020·20202020·20202020·20202020·.···············
5694 ··0x001c93b0·0a202020·20202020·20202020·20226e61·.············"na5694 ··0x001c93b0·20202020·20202020·20202020·20202020·················
5695 ··0x001c93c0·6d65223a·20224554·5f44594e·222c0a20·me":·"ET_DYN",.·5695 ··0x001c93c0·207d0a20·20202020·20202020·20202020··}.·············
5696 ··0x001c93d0·20202020·20202020·20202022·646f6375············"docu5696 ··0x001c93d0·20202020·20202020·20202020·2020205d················]
5697 ··0x001c93e0·6d656e74·6174696f·6e223a20·22536861·mentation":·"Sha5697 ··0x001c93e0·2c0a2020·20202020·20202020·20202020·,.··············
5698 ··0x001c93f0·72656420·6f626a65·63742066·696c652e·red·object·file.5698 ··0x001c93f0·20202020·20202020·20202020·20202264···············"d
5699 ··0x001c9400·222c0a20·20202020·20202020·20202022·",.············"5699 ··0x001c9400·6f63756d·656e7461·74696f6e·223a2022·ocumentation":·"
5700 ··0x001c9410·74797065·223a2022·69220a20·20202020·type":·"i".·····5700 ··0x001c9410·46756e63·74696f6e·20726574·75726e69·Function·returni
5701 ··0x001c9420·2020207d·2c0a2020·20202020·20207b0a····},.········{.5701 ··0x001c9420·6e672074·72756520·69662074·68652070·ng·true·if·the·p
5702 ··0x001c9430·20202020·20202020·20202020·226b696e·············"kin5702 ··0x001c9430·726f6772·616d2073·656e7420·6120646f·rogram·sent·a·do
5703 ··0x001c9440·64223a20·2276616c·7565222c·0a202020·d":·"value",.···5703 ··0x001c9440·6d61696e·206e616d·65207265·736f6c75·main·name·resolu
5704 ··0x001c9450·20202020·20202020·20226e61·6d65223a··········"name":5704 ··0x001c9450·74696f6e·20726571·75657374·20666f72·tion·request·for
5705 ··0x001c9460·20224554·5f434f52·45222c0a·20202020··"ET_CORE",.····5705 ··0x001c9460·20612064·6f6d6169·6e206d61·74636869··a·domain·matchi
5706 ··0x001c9470·20202020·20202020·22646f63·756d656e·········"documen5706 ··0x001c9470·6e672074·68652070·726f7669·64656420·ng·the·provided·
5707 ··0x001c9480·74617469·6f6e223a·2022436f·72652066·tation":·"Core·f5707 ··0x001c9480·72656775·6c617220·65787072·65737369·regular·expressi
5708 ··0x001c9490·696c652e·222c0a20·20202020·20202020·ile.",.·········5708 ··0x001c9490·6f6e2e5c·6e5c6e45·78616d70·6c653a20·on.\n\nExample:·
5709 ··0x001c94a0·20202022·74797065·223a2022·69220a20····"type":·"i".·5709 ··0x001c94a0·6375636b·6f6f2e6e·6574776f·726b2e64·cuckoo.network.d
5710 ··0x001c94b0·20202020·2020207d·2c0a2020·20202020········},.······5710 ··0x001c94b0·6e735f6c·6f6f6b75·70282f65·76696c5c·ns_lookup(/evil\
5711 ··0x001c94c0·20207b0a·20202020·20202020·20202020···{.············5711 ··0x001c94c0·5c2e636f·6d2f2922·0a202020·20202020·\.com/)".·······
5712 ··0x001c94d0·226b696e·64223a20·2276616c·7565222c·"kind":·"value",5712 ··0x001c94d0·20202020·20202020·20202020·20202020·················
5713 ··0x001c94e0·0a202020·20202020·20202020·20226e61·.············"na5713 ··0x001c94e0·207d0a20·20202020·20202020·20202020··}.·············
5714 ··0x001c94f0·6d65223a·2022454d·5f4e4f4e·45222c0a·me":·"EM_NONE",.5714 ··0x001c94f0·20202020·2020205d·0a202020·20202020········].·······
5715 ··0x001c9500·20202020·20202020·20202020·22646f63·············"doc5715 ··0x001c9500·20202020·20202020·207d2c0a·20202020··········},.····
5716 ··0x001c9510·756d656e·74617469·6f6e223a·2022222c·umentation":·"",5716 ··0x001c9510·20202020·20202020·20202020·7b0a2020·············{.··
5717 ··0x001c9520·0a202020·20202020·20202020·20227479·.············"ty5717 ··0x001c9520·20202020·20202020·20202020·20202020·················
5718 ··0x001c9530·7065223a·20226922·0a202020·20202020·pe":·"i".·······5718 ··0x001c9530·2020226b·696e6422·3a202266·756e6374···"kind":·"funct
5719 ··0x001c9540·207d2c0a·20202020·20202020·7b0a2020··},.········{.··5719 ··0x001c9540·696f6e22·2c0a2020·20202020·20202020·ion",.··········
5720 ··0x001c9550·20202020·20202020·2020226b·696e6422···········"kind"5720 ··0x001c9550·20202020·20202020·2020226e·616d6522···········"name"
5721 ··0x001c9560·3a202276·616c7565·222c0a20·20202020·:·"value",.·····5721 ··0x001c9560·3a202268·7474705f·67657422·2c0a2020·:·"http_get",.··
5722 ··0x001c9570·20202020·20202022·6e616d65·223a2022········"name":·"5722 ··0x001c9570·20202020·20202020·20202020·20202020·················
5723 ··0x001c9580·454d5f4d·3332222c·0a202020·20202020·EM_M32",.·······5723 ··0x001c9580·20202272·65747572·6e5f7479·7065223a···"return_type":
5724 ··0x001c9590·20202020·2022646f·63756d65·6e746174······"documentat5724 ··0x001c9590·20226922·2c0a2020·20202020·20202020··"i",.··········
5725 ··0x001c95a0·696f6e22·3a202222·2c0a2020·20202020·ion":·"",.······5725 ··0x001c95a0·20202020·20202020·2020226f·7665726c···········"overl
5726 ··0x001c95b0·20202020·20202274·79706522·3a202269·······"type":·"i5726 ··0x001c95b0·6f616473·223a205b·0a202020·20202020·oads":·[.·······
5727 ··0x001c95c0·220a2020·20202020·20207d2c·0a202020·".········},.···5727 ··0x001c95c0·20202020·20202020·20202020·20202020·················
5728 ··0x001c95d0·20202020·207b0a20·20202020·20202020······{.·········5728 ··0x001c95d0·207b0a20·20202020·20202020·20202020··{.·············
5729 ··0x001c95e0·20202022·6b696e64·223a2022·76616c75····"kind":·"valu5729 ··0x001c95e0·20202020·20202020·20202020·20202022················"
5730 ··0x001c95f0·65222c0a·20202020·20202020·20202020·e",.············5730 ··0x001c95f0·61726775·6d656e74·73223a20·5b0a2020·arguments":·[.··
5731 ··0x001c9600·226e616d·65223a20·22454d5f·53504152·"name":·"EM_SPAR5731 ··0x001c9600·20202020·20202020·20202020·20202020·················
5732 ··0x001c9610·43222c0a·20202020·20202020·20202020·C",.············5732 ··0x001c9610·20202020·20202020·20202020·20207b0a···············{.
5733 ··0x001c9620·22646f63·756d656e·74617469·6f6e223a·"documentation":5733 ··0x001c9620·20202020·20202020·20202020·20202020·················
5734 ··0x001c9630·2022222c·0a202020·20202020·20202020··"",.···········5734 ··0x001c9630·20202020·20202020·20202020·20202020·················
5735 ··0x001c9640·20227479·7065223a·20226922·0a202020··"type":·"i".···5735 ··0x001c9640·20202020·22747970·65223a20·2272222c·····"type":·"r",
5736 ··0x001c9650·20202020·207d2c0a·20202020·20202020······},.········5736 ··0x001c9650·0a202020·20202020·20202020·20202020·.···············
5737 ··0x001c9660·7b0a2020·20202020·20202020·2020226b·{.············"k5737 ··0x001c9660·20202020·20202020·20202020·20202020·················
5738 ··0x001c9670·696e6422·3a202276·616c7565·222c0a20·ind":·"value",.·5738 ··0x001c9670·20202020·20226e61·6d65223a·20227572······"name":·"ur
5739 ··0x001c9680·20202020·20202020·20202022·6e616d65············"name5739 ··0x001c9680·6c220a20·20202020·20202020·20202020·l".·············
5740 ··0x001c9690·223a2022·454d5f33·3836222c·0a202020·":·"EM_386",.···5740 ··0x001c9690·20202020·20202020·20202020·20202020·················
5741 ··0x001c96a0·20202020·20202020·2022646f·63756d65··········"docume5741 ··0x001c96a0·2020207d·0a202020·20202020·20202020····}.···········
5742 ··0x001c96b0·6e746174·696f6e22·3a202222·2c0a2020·ntation":·"",.··5742 ··0x001c96b0·20202020·20202020·20202020·20202020·················
5743 ··0x001c96c0·20202020·20202020·20202274·79706522···········"type"5743 ··0x001c96c0·205d2c0a·20202020·20202020·20202020··],.············
5744 ··0x001c96d0·3a202269·220a2020·20202020·20207d2c·:·"i".········},5744 ··0x001c96d0·20202020·20202020·20202020·20202020·················
5745 ··0x001c96e0·0a202020·20202020·207b0a20·20202020·.········{.·····5745 ··0x001c96e0·22646f63·756d656e·74617469·6f6e223a·"documentation":
5746 ··0x001c96f0·20202020·20202022·6b696e64·223a2022········"kind":·"5746 ··0x001c96f0·20224675·6e637469·6f6e2072·65747572··"Function·retur
5747 ··0x001c9700·76616c75·65222c0a·20202020·20202020·value",.········5747 ··0x001c9700·6e696e67·20747275·65206966·20746865·ning·true·if·the
5748 ··0x001c9710·20202020·226e616d·65223a20·22454d5f·····"name":·"EM_5748 ··0x001c9710·2070726f·6772616d·2073656e·74206120··program·sent·a·
5749 ··0x001c9720·36384b22·2c0a2020·20202020·20202020·68K",.··········5749 ··0x001c9720·48545450·20474554·20726571·75657374·HTTP·GET·request
5750 ··0x001c9730·20202264·6f63756d·656e7461·74696f6e···"documentation5750 ··0x001c9730·20746f20·61205552·4c206d61·74636869··to·a·URL·matchi
5751 ··0x001c9740·223a2022·222c0a20·20202020·20202020·":·"",.·········5751 ··0x001c9740·6e672074·68652070·726f7669·64656420·ng·the·provided·
5752 ··0x001c9750·20202022·74797065·223a2022·69220a20····"type":·"i".·5752 ··0x001c9750·72656775·6c617220·65787072·65737369·regular·expressi
5753 ··0x001c9760·20202020·2020207d·2c0a2020·20202020········},.······5753 ··0x001c9760·6f6e2e22·0a202020·20202020·20202020·on.".···········
5754 ··0x001c9770·20207b0a·20202020·20202020·20202020···{.············5754 ··0x001c9770·20202020·20202020·20202020·207d0a20··············}.·
5755 ··0x001c9780·226b696e·64223a20·2276616c·7565222c·"kind":·"value",5755 ··0x001c9780·20202020·20202020·20202020·20202020·················
5756 ··0x001c9790·0a202020·20202020·20202020·20226e61·.············"na5756 ··0x001c9790·2020205d·0a202020·20202020·20202020····].···········
5757 ··0x001c97a0·6d65223a·2022454d·5f38384b·222c0a20·me":·"EM_88K",.·5757 ··0x001c97a0·20202020·207d2c0a·20202020·20202020······},.········
5758 ··0x001c97b0·20202020·20202020·20202022·646f6375············"docu5758 ··0x001c97b0·20202020·20202020·7b0a2020·20202020·········{.······
5759 ··0x001c97c0·6d656e74·6174696f·6e223a20·22222c0a·mentation":·"",.5759 ··0x001c97c0·20202020·20202020·20202020·2020226b···············"k
5760 ··0x001c97d0·20202020·20202020·20202020·22747970·············"typ5760 ··0x001c97d0·696e6422·3a202266·756e6374·696f6e22·ind":·"function"
5761 ··0x001c97e0·65223a20·2269220a·20202020·20202020·e":·"i".········5761 ··0x001c97e0·2c0a2020·20202020·20202020·20202020·,.··············
5762 ··0x001c97f0·7d2c0a20·20202020·2020207b·0a202020·},.········{.···5762 ··0x001c97f0·20202020·2020226e·616d6522·3a202268·······"name":·"h
5763 ··0x001c9800·20202020·20202020·20226b69·6e64223a··········"kind":5763 ··0x001c9800·7474705f·706f7374·222c0a20·20202020·ttp_post",.·····
5764 ··0x001c9810·20227661·6c756522·2c0a2020·20202020··"value",.······5764 ··0x001c9810·20202020·20202020·20202020·20202022················"
5765 ··0x001c9820·20202020·2020226e·616d6522·3a202245·······"name":·"E5765 ··0x001c9820·72657475·726e5f74·79706522·3a202269·return_type":·"i
5766 ··0x001c9830·4d5f3836·30222c0a·20202020·20202020·M_860",.········5766 ··0x001c9830·222c0a20·20202020·20202020·20202020·",.·············
5767 ··0x001c9840·20202020·22646f63·756d656e·74617469·····"documentati5767 ··0x001c9840·20202020·20202022·6f766572·6c6f6164········"overload
5768 ··0x001c9850·6f6e223a·2022222c·0a202020·20202020·on":·"",.·······5768 ··0x001c9850·73223a20·5b0a2020·20202020·20202020·s":·[.··········
5769 ··0x001c9860·20202020·20227479·7065223a·20226922······"type":·"i"5769 ··0x001c9860·20202020·20202020·20202020·20207b0a···············{.
5770 ··0x001c9870·0a202020·20202020·207d2c0a·20202020·.········},.····5770 ··0x001c9870·20202020·20202020·20202020·20202020·················
5771 ··0x001c9880·20202020·7b0a2020·20202020·20202020·····{.··········5771 ··0x001c9880·20202020·20202020·20202020·22617267·············"arg
5772 ··0x001c9890·2020226b·696e6422·3a202276·616c7565···"kind":·"value5772 ··0x001c9890·756d656e·7473223a·205b0a20·20202020·uments":·[.·····
5773 ··0x001c98a0·222c0a20·20202020·20202020·20202022·",.············"5773 ··0x001c98a0·20202020·20202020·20202020·20202020·················
5774 ··0x001c98b0·6e616d65·223a2022·454d5f4d·49505322·name":·"EM_MIPS"5774 ··0x001c98b0·20202020·20202020·2020207b·0a202020············{.···
5775 ··0x001c98c0·2c0a2020·20202020·20202020·20202264·,.············"d5775 ··0x001c98c0·20202020·20202020·20202020·20202020·················
5776 ··0x001c98d0·6f63756d·656e7461·74696f6e·223a2022·ocumentation":·"5776 ··0x001c98d0·20202020·20202020·20202020·20202020·················
5777 ··0x001c98e0·222c0a20·20202020·20202020·20202022·",.············"5777 ··0x001c98e0·20227479·7065223a·20227222·2c0a2020··"type":·"r",.··
5778 ··0x001c98f0·74797065·223a2022·69220a20·20202020·type":·"i".·····5778 ··0x001c98f0·20202020·20202020·20202020·20202020·················
5779 ··0x001c9900·2020207d·2c0a2020·20202020·20207b0a····},.········{.5779 ··0x001c9900·20202020·20202020·20202020·20202020·················
Max diff block lines reached; 1877072/1946246 bytes (96.45%) of diff not shown.
⊟
1.58 KB
readelf --wide --decompress --hex-dump=.gcc_except_table {}
    
Offset 3040, 18 lines modifiedOffset 3040, 18 lines modified
3040 ··0x0024af30·ff01044c·050000ff·ff010b93·0105e001·...L............3040 ··0x0024af30·ff01044c·050000ff·ff010b93·0105e001·...L............
3041 ··0x0024af40·00eb0105·0000ffff·01097705·0000be02·..........w.....3041 ··0x0024af40·00eb0105·0000ffff·01097705·0000be02·..........w.....
3042 ··0x0024af50·050000ff·ff010c84·0105c00b·009b0305·................3042 ··0x0024af50·050000ff·ff010c84·0105c00b·009b0305·................
3043 ··0x0024af60·b90b00ff·ff01042f·050000ff·ff012853·......./......(S3043 ··0x0024af60·b90b00ff·ff01042f·050000ff·ff012853·......./......(S
3044 ··0x0024af70·05000088·0205e60b·00bb0205·fa0b00bf·................3044 ··0x0024af70·05000088·0205e60b·00bb0205·fa0b00bf·................
3045 ··0x0024af80·0405ee0b·00870545·f60b00c0·06a304ea·.......E........3045 ··0x0024af80·0405ee0b·00870545·f60b00c0·06a304ea·.......E........
3046 ··0x0024af90·0b00870d·05000000·ff9b7501·6b850105·..........u.k...3046 ··0x0024af90·0b00870d·05000000·ff9b7501·6b850105·..........u.k...
3047 ··0x0024afa0·be4900cb·03059f4c·008a0605·a84900c4·.I.....L.....I..3047 ··0x0024afa0·be4900bf·03059f4c·00fb0505·a84900ae·.I.....L.....I..
3048 ··0x0024afb0·0805ee49·00830b05·bf4400bd·0d05e74c·...I.....D.....L3048 ··0x0024afb0·0805ee49·00ed0a05·bf4400a7·0d05e74c·...I.....D.....L
3049 ··0x0024afc0·00fc0f05·9a4900af·1205af4d·00e21405·.....I.....M....3049 ··0x0024afc0·00e30f05·9a4900a2·1205af4d·00e11405·.....I.....M....
3050 ··0x0024afd0·b749009e·1705ca49·00d31905·a1490086·.I.....I.....I..3050 ··0x0024afd0·b7490096·1705ca49·00d01905·a1490083·.I.....I.....I..
3051 ··0x0024afe0·1c05bd4a·00a41e05·af490094·2005bb44·...J.....I..·..D3051 ··0x0024afe0·1c05bd4a·00a41e05·af490094·2005bb44·...J.....I..·..D
3052 ··0x0024aff0·00ce2005·c54901e4·2005b54a·019a4c05·..·..I..·..J..L.3052 ··0x0024aff0·00ce2005·c54901e4·2005b54a·019a4c05·..·..I..·..J..L.
3053 ··0x0024b000·0000894e·05d84e00·01000000·00000000·...N..N.........3053 ··0x0024b000·0000894e·05d84e00·01000000·00000000·...N..N.........
3054 ··0x0024b010·ffff0109·6b050000·a4060500·00ffff01·....k...........3054 ··0x0024b010·ffff0109·6b050000·a4060500·00ffff01·....k...........
3055 ··0x0024b020·1fa901b5·01931700·ff068a01·93170084·................3055 ··0x0024b020·1fa901b5·01931700·ff068a01·93170084·................
3056 ··0x0024b030·0e058f17·00e81205·8f17009b·17050000·................3056 ··0x0024b030·0e058f17·00e81205·8f17009b·17050000·................
3057 ··0x0024b040·ffff0100·ffff0100·ffff0109·5f050000·............_...3057 ··0x0024b040·ffff0100·ffff0100·ffff0109·5f050000·............_...
⊟
811 B
readelf --wide --decompress --hex-dump=.gnu_debuglink {}
error from `readelf --wide --decompress --hex-dump=.gnu_debuglink {}`: readelf: Error: no .dynamic section in the dynamic segment
    
Offset 1, 7 lines modifiedOffset 1, 7 lines modified
  
1 Hex·dump·of·section·'.gnu_debuglink':1 Hex·dump·of·section·'.gnu_debuglink':
2 ··0x00000000·38336539·36303438·32313737·64306534·83e960482177d0e4 
3 ··0x00000010·65333035·66313066·33643336·63386365·e305f10f3d36c8ce2 ··0x00000000·37653532·64643936·30656431·66373634·7e52dd960ed1f764
 3 ··0x00000010·61623939·36373663·32326265·61613638·ab99676c22beaa68
4 ··0x00000020·33633066·34382e64·65627567·00000000·3c0f48.debug....4 ··0x00000020·34616332·35342e64·65627567·00000000·4ac254.debug....
5 ··0x00000030·cd42aed7····························.B..5 ··0x00000030·0ef6fdf4····························....
  
⊟
1.97 KB
python3-yaramod_3.21.0-1.1_i386.deb
⊟
367 B
file list
    
Offset 1, 3 lines modifiedOffset 1, 3 lines modified
1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary
2 -rw-r--r--···0········0········0·····1028·2024-07-03·21:18:46.000000·control.tar.xz2 -rw-r--r--···0········0········0·····1028·2024-07-03·21:18:46.000000·control.tar.xz
3 -rw-r--r--···0········0········0···430592·2024-07-03·21:18:46.000000·data.tar.xz3 -rw-r--r--···0········0········0···429324·2024-07-03·21:18:46.000000·data.tar.xz
⊟
98.0 B
control.tar.xz
⊟
70.0 B
control.tar
⊟
48.0 B
./md5sums
⊟
30.0 B
./md5sums
Files differ
⊟
1.44 KB
data.tar.xz
⊟
1.42 KB
data.tar
⊟
1.41 KB
./usr/lib/python3/dist-packages/yaramod.cpython-313-i386-linux-gnu.so
File has been modified after NT_GNU_BUILD_ID has been applied.
⊟
430 B
readelf --wide --notes {}
    
Offset 1, 4 lines modifiedOffset 1, 4 lines modified
  
1 Displaying·notes·found·in:·.note.gnu.build-id1 Displaying·notes·found·in:·.note.gnu.build-id
2 ··Owner················Data·size·»  Description2 ··Owner················Data·size·»  Description
3 ··GNU··················0x00000014»  NT_GNU_BUILD_ID·(unique·build·ID·bitstring)»   ····Build·ID:·719610224011e7e6c0f01023437139b438d83bb93 ··GNU··················0x00000014»  NT_GNU_BUILD_ID·(unique·build·ID·bitstring)»   ····Build·ID:·aa987715f4b27bd36fc1e4f75a7fe7ac3d8b0747
⊟
811 B
readelf --wide --decompress --hex-dump=.gnu_debuglink {}
error from `readelf --wide --decompress --hex-dump=.gnu_debuglink {}`: readelf: Error: no .dynamic section in the dynamic segment
    
Offset 1, 7 lines modifiedOffset 1, 7 lines modified
  
1 Hex·dump·of·section·'.gnu_debuglink':1 Hex·dump·of·section·'.gnu_debuglink':
2 ··0x00000000·39363130·32323430·31316537·65366330·9610224011e7e6c0 
3 ··0x00000010·66303130·32333433·37313339·62343338·f01023437139b4382 ··0x00000000·39383737·31356634·62323762·64333666·987715f4b27bd36f
 3 ··0x00000010·63316534·66373561·37666537·61633364·c1e4f75a7fe7ac3d
4 ··0x00000020·64383362·62392e64·65627567·00000000·d83bb9.debug....4 ··0x00000020·38623037·34372e64·65627567·00000000·8b0747.debug....
5 ··0x00000030·1dd2855d····························...]5 ··0x00000030·725b706c····························r[pl
  
⊟
24.3 MB
libyaramod0-dbgsym_3.21.0-1.1_i386.deb
⊟
367 B
file list
    
Offset 1, 3 lines modifiedOffset 1, 3 lines modified
1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary
2 -rw-r--r--···0········0········0······532·2024-07-03·21:18:46.000000·control.tar.xz2 -rw-r--r--···0········0········0······532·2024-07-03·21:18:46.000000·control.tar.xz
3 -rw-r--r--···0········0········0·12435144·2024-07-03·21:18:46.000000·data.tar.xz3 -rw-r--r--···0········0········0·12436260·2024-07-03·21:18:46.000000·data.tar.xz
⊟
615 B
control.tar.xz
⊟
587 B
control.tar
⊟
339 B
./control
    
Offset 6, 8 lines modifiedOffset 6, 8 lines modified
6 Maintainer:·Yangfl·<mmyangfl@gmail.com>6 Maintainer:·Yangfl·<mmyangfl@gmail.com>
7 Installed-Size:·130227 Installed-Size:·13022
8 Depends:·libyaramod0·(=·3.21.0-1.1)8 Depends:·libyaramod0·(=·3.21.0-1.1)
9 Section:·debug9 Section:·debug
10 Priority:·optional10 Priority:·optional
11 Multi-Arch:·same11 Multi-Arch:·same
12 Description:·debug·symbols·for·libyaramod012 Description:·debug·symbols·for·libyaramod0
13 Build-Ids:·9483e960482177d0e4e305f10f3d36c8ce3c0f4813 Build-Ids:·2a7e52dd960ed1f764ab99676c22beaa684ac254
⊟
226 B
./md5sums
⊟
30.0 B
./md5sums
Files differ
⊟
178 B
line order
    
Offset 1, 1 lines modifiedOffset 1, 1 lines modified
1 usr/lib/debug/.build-id/94/83e960482177d0e4e305f10f3d36c8ce3c0f48.debug1 usr/lib/debug/.build-id/2a/7e52dd960ed1f764ab99676c22beaa684ac254.debug
⊟
24.3 MB
data.tar.xz
⊟
24.3 MB
data.tar
⊟
1.39 KB
file list
    
Offset 1, 10 lines modifiedOffset 1, 10 lines modified
1 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./1 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./
2 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/2 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/
3 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/3 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/
4 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/4 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/
5 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/5 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/
6 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/94/6 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/2a/
7 -rw-r--r--···0·root·········(0)·root·········(0)·13323976·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/94/83e960482177d0e4e305f10f3d36c8ce3c0f48.debug7 -rw-r--r--···0·root·········(0)·root·········(0)·13324044·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/2a/7e52dd960ed1f764ab99676c22beaa684ac254.debug
8 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/8 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/
9 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/doc/9 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/doc/
10 lrwxrwxrwx···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/doc/libyaramod0-dbgsym·->·libyaramod010 lrwxrwxrwx···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/doc/libyaramod0-dbgsym·->·libyaramod0
⊟
24.3 MB
./usr/lib/debug/.build-id/94/83e960482177d0e4e305f10f3d36c8ce3c0f48.debug vs.
./usr/lib/debug/.build-id/2a/7e52dd960ed1f764ab99676c22beaa684ac254.debug
File has been modified after NT_GNU_BUILD_ID has been applied. Files 96% similar despite different names
⊟
866 B
readelf --wide --file-header {}
    
Offset 6, 15 lines modifiedOffset 6, 15 lines modified
6 ··OS/ABI:····························UNIX·-·GNU6 ··OS/ABI:····························UNIX·-·GNU
7 ··ABI·Version:·······················07 ··ABI·Version:·······················0
8 ··Type:······························DYN·(Shared·object·file)8 ··Type:······························DYN·(Shared·object·file)
9 ··Machine:···························Intel·803869 ··Machine:···························Intel·80386
10 ··Version:···························0x110 ··Version:···························0x1
11 ··Entry·point·address:···············0x011 ··Entry·point·address:···············0x0
12 ··Start·of·program·headers:··········52·(bytes·into·file)12 ··Start·of·program·headers:··········52·(bytes·into·file)
13 ··Start·of·section·headers:··········13322496·(bytes·into·file)13 ··Start·of·section·headers:··········13322564·(bytes·into·file)
14 ··Flags:·····························0x014 ··Flags:·····························0x0
15 ··Size·of·this·header:···············52·(bytes)15 ··Size·of·this·header:···············52·(bytes)
16 ··Size·of·program·headers:···········32·(bytes)16 ··Size·of·program·headers:···········32·(bytes)
17 ··Number·of·program·headers:·········917 ··Number·of·program·headers:·········9
18 ··Size·of·section·headers:···········40·(bytes)18 ··Size·of·section·headers:···········40·(bytes)
19 ··Number·of·section·headers:·········3719 ··Number·of·section·headers:·········37
20 ··Section·header·string·table·index:·3620 ··Section·header·string·table·index:·36
⊟
3.06 KB
readelf --wide --sections {}
    
Offset 1, 8 lines modifiedOffset 1, 8 lines modified
1 There·are·37·section·headers,·starting·at·offset·0xcb4900:1 There·are·37·section·headers,·starting·at·offset·0xcb4944:
  
2 Section·Headers:2 Section·Headers:
3 ··[Nr]·Name··············Type············Addr·····Off····Size···ES·Flg·Lk·Inf·Al3 ··[Nr]·Name··············Type············Addr·····Off····Size···ES·Flg·Lk·Inf·Al
4 ··[·0]···················NULL············00000000·000000·000000·00······0···0··04 ··[·0]···················NULL············00000000·000000·000000·00······0···0··0
5 ··[·1]·.note.gnu.build-id·NOTE············00000154·000154·000024·00···A··0···0··45 ··[·1]·.note.gnu.build-id·NOTE············00000154·000154·000024·00···A··0···0··4
6 ··[·2]·.gnu.hash·········NOBITS··········00000178·000178·006278·04···A··3···0··46 ··[·2]·.gnu.hash·········NOBITS··········00000178·000178·006278·04···A··3···0··4
7 ··[·3]·.dynsym···········NOBITS··········000063f0·000178·00d450·10···A··4···1··47 ··[·3]·.dynsym···········NOBITS··········000063f0·000178·00d450·10···A··4···1··4
Offset 25, 22 lines modifiedOffset 25, 22 lines modified
25 ··[20]·.data.rel.ro······NOBITS··········0024d7e0·0007c8·003518·00··WA··0···0·3225 ··[20]·.data.rel.ro······NOBITS··········0024d7e0·0007c8·003518·00··WA··0···0·32
26 ··[21]·.dynamic··········NOBITS··········00250cf8·0007c8·000110·08··WA··4···0··426 ··[21]·.dynamic··········NOBITS··········00250cf8·0007c8·000110·08··WA··4···0··4
27 ··[22]·.got··············NOBITS··········00250e08·0007c8·0011e8·04··WA··0···0··427 ··[22]·.got··············NOBITS··········00250e08·0007c8·0011e8·04··WA··0···0··4
28 ··[23]·.data·············NOBITS··········00252000·0007c8·000014·00··WA··0···0··428 ··[23]·.data·············NOBITS··········00252000·0007c8·000014·00··WA··0···0··4
29 ··[24]·.bss··············NOBITS··········00252018·0007c8·000038·00··WA··0···0··829 ··[24]·.bss··············NOBITS··········00252018·0007c8·000038·00··WA··0···0··8
30 ··[25]·.comment··········PROGBITS········00000000·000178·00001f·01··MS··0···0··130 ··[25]·.comment··········PROGBITS········00000000·000178·00001f·01··MS··0···0··1
31 ··[26]·.debug_aranges····PROGBITS········00000000·000198·001dce·00···C··0···0··431 ··[26]·.debug_aranges····PROGBITS········00000000·000198·001dce·00···C··0···0··4
32 ··[27]·.debug_info·······PROGBITS········00000000·001f68·83b108·00···C··0···0··432 ··[27]·.debug_info·······PROGBITS········00000000·001f68·83b151·00···C··0···0··4
33 ··[28]·.debug_abbrev·····PROGBITS········00000000·83d070·009b56·00···C··0···0··433 ··[28]·.debug_abbrev·····PROGBITS········00000000·83d0bc·009b56·00···C··0···0··4
34 ··[29]·.debug_line·······PROGBITS········00000000·846bc8·08744b·00···C··0···0··434 ··[29]·.debug_line·······PROGBITS········00000000·846c14·087445·00···C··0···0··4
35 ··[30]·.debug_str········PROGBITS········00000000·8ce014·1432e9·01·MSC··0···0··435 ··[30]·.debug_str········PROGBITS········00000000·8ce05c·1432e9·01·MSC··0···0··4
36 ··[31]·.debug_line_str···PROGBITS········00000000·a11300·000731·01·MSC··0···0··436 ··[31]·.debug_line_str···PROGBITS········00000000·a11348·000730·01·MSC··0···0··4
37 ··[32]·.debug_loclists···PROGBITS········00000000·a11a34·1971fe·00···C··0···0··437 ··[32]·.debug_loclists···PROGBITS········00000000·a11a78·1971fe·00···C··0···0··4
38 ··[33]·.debug_rnglists···PROGBITS········00000000·ba8c34·056caa·00···C··0···0··438 ··[33]·.debug_rnglists···PROGBITS········00000000·ba8c78·056caa·00···C··0···0··4
39 ··[34]·.symtab···········SYMTAB··········00000000·bff8e0·019140·10·····35·3024··439 ··[34]·.symtab···········SYMTAB··········00000000·bff924·019140·10·····35·3024··4
40 ··[35]·.strtab···········STRTAB··········00000000·c18a20·09bd6a·00······0···0··140 ··[35]·.strtab···········STRTAB··········00000000·c18a64·09bd6a·00······0···0··1
41 ··[36]·.shstrtab·········STRTAB··········00000000·cb478a·000175·00······0···0··141 ··[36]·.shstrtab·········STRTAB··········00000000·cb47ce·000175·00······0···0··1
42 Key·to·Flags:42 Key·to·Flags:
43 ··W·(write),·A·(alloc),·X·(execute),·M·(merge),·S·(strings),·I·(info),43 ··W·(write),·A·(alloc),·X·(execute),·M·(merge),·S·(strings),·I·(info),
44 ··L·(link·order),·O·(extra·OS·processing·required),·G·(group),·T·(TLS),44 ··L·(link·order),·O·(extra·OS·processing·required),·G·(group),·T·(TLS),
45 ··C·(compressed),·x·(unknown),·o·(OS·specific),·E·(exclude),45 ··C·(compressed),·x·(unknown),·o·(OS·specific),·E·(exclude),
46 ··R·(retain),·D·(mbind),·p·(processor·specific)46 ··R·(retain),·D·(mbind),·p·(processor·specific)
⊟
3.85 KB
readelf --wide --symbols {}
    
Offset 2667, 26 lines modifiedOffset 2667, 26 lines modified
2667 ··2663:·00090e12···204·FUNC····LOCAL··DEFAULT···12·_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC2IS3_EEPKcRKS3_.constprop.02667 ··2663:·00090e12···204·FUNC····LOCAL··DEFAULT···12·_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC2IS3_EEPKcRKS3_.constprop.0
2668 ··2664:·0017efc0···329·FUNC····LOCAL··DEFAULT···12·_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN7yaramod6ModuleEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE24_M_get_insert_unique_posERS7_.isra.02668 ··2664:·0017efc0···329·FUNC····LOCAL··DEFAULT···12·_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN7yaramod6ModuleEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE24_M_get_insert_unique_posERS7_.isra.0
2669 ··2665:·0017f110···717·FUNC····LOCAL··DEFAULT···12·_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN7yaramod6ModuleEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE8_M_eraseEPSt13_Rb_tree_nodeISB_E.isra.02669 ··2665:·0017f110···717·FUNC····LOCAL··DEFAULT···12·_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_PN7yaramod6ModuleEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE8_M_eraseEPSt13_Rb_tree_nodeISB_E.isra.0
2670 ··2666:·0017f3e0··1374·FUNC····LOCAL··DEFAULT···12·_ZNSt10_HashtableINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St10shared_ptrIN7yaramod6ModuleEEESaISC_ENSt8__detail10_Select1stESt8equal_toIS5_ESt4hashIS5_ENSE_18_Mod_range_hashingENSE_20_Default_ranged_hashENSE_20_Prime_rehash_policyENSE_17_Hashtable_traitsILb1ELb0ELb1EEEE10_M_emplaceIJS6_IS5_SB_EEEES6_INSE_14_Node_iteratorISC_Lb0ELb1EEEbESt17integral_constantIbLb1EEDpOT_.isra.02670 ··2666:·0017f3e0··1374·FUNC····LOCAL··DEFAULT···12·_ZNSt10_HashtableINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St10shared_ptrIN7yaramod6ModuleEEESaISC_ENSt8__detail10_Select1stESt8equal_toIS5_ESt4hashIS5_ENSE_18_Mod_range_hashingENSE_20_Default_ranged_hashENSE_20_Prime_rehash_policyENSE_17_Hashtable_traitsILb1ELb0ELb1EEEE10_M_emplaceIJS6_IS5_SB_EEEES6_INSE_14_Node_iteratorISC_Lb0ELb1EEEbESt17integral_constantIbLb1EEDpOT_.isra.0
2671 ··2667:·00090ede····86·FUNC····LOCAL··DEFAULT···12·_ZNSt10_HashtableINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St10shared_ptrIN7yaramod6ModuleEEESaISC_ENSt8__detail10_Select1stESt8equal_toIS5_ESt4hashIS5_ENSE_18_Mod_range_hashingENSE_20_Default_ranged_hashENSE_20_Prime_rehash_policyENSE_17_Hashtable_traitsILb1ELb0ELb1EEEE10_M_emplaceIJS6_IS5_SB_EEEES6_INSE_14_Node_iteratorISC_Lb0ELb1EEEbESt17integral_constantIbLb1EEDpOT_.isra.0.cold2671 ··2667:·00090ede····86·FUNC····LOCAL··DEFAULT···12·_ZNSt10_HashtableINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St10shared_ptrIN7yaramod6ModuleEEESaISC_ENSt8__detail10_Select1stESt8equal_toIS5_ESt4hashIS5_ENSE_18_Mod_range_hashingENSE_20_Default_ranged_hashENSE_20_Prime_rehash_policyENSE_17_Hashtable_traitsILb1ELb0ELb1EEEE10_M_emplaceIJS6_IS5_SB_EEEES6_INSE_14_Node_iteratorISC_Lb0ELb1EEEbESt17integral_constantIbLb1EEDpOT_.isra.0.cold
2672 ··2668:·00090f34····57·FUNC····LOCAL··DEFAULT···12·_ZNK7yaramod10ModulePool10getModulesB5cxx11Ev.cold2672 ··2668:·00090f34····57·FUNC····LOCAL··DEFAULT···12·_ZNK7yaramod10ModulePool10getModulesB5cxx11Ev.cold
2673 ··2669:·00202260··4113·OBJECT··LOCAL··DEFAULT···14·C.2.02673 ··2669:·00202260··4113·OBJECT··LOCAL··DEFAULT···14·C.2.0
2674 ··2670:·00200120··8500·OBJECT··LOCAL··DEFAULT···14·C.22.12674 ··2670:·00200c80··5569·OBJECT··LOCAL··DEFAULT···14·C.22.1
2675 ··2671:·001fb480·19589·OBJECT··LOCAL··DEFAULT···14·C.23.22675 ··2671:·001fa060·27655·OBJECT··LOCAL··DEFAULT···14·C.23.2
2676 ··2672:·001f0ae0·43418·OBJECT··LOCAL··DEFAULT···14·C.24.32676 ··2672:·001f5f60·16610·OBJECT··LOCAL··DEFAULT···14·C.24.3
2677 ··2673:·001f07e0···745·OBJECT··LOCAL··DEFAULT···14·C.25.42677 ··2673:·001f56e0··2162·OBJECT··LOCAL··DEFAULT···14·C.25.4
2678 ··2674:·001f04a0···826·OBJECT··LOCAL··DEFAULT···14·C.26.52678 ··2674:·001f53a0···826·OBJECT··LOCAL··DEFAULT···14·C.26.5
2679 ··2675:·001efc20··2162·OBJECT··LOCAL··DEFAULT···14·C.27.6 
2680 ··2676:·001ebb20·16610·OBJECT··LOCAL··DEFAULT···14·C.28.7 
2681 ··2677:·001ea540··5569·OBJECT··LOCAL··DEFAULT···14·C.29.8 
2682 ··2678:·001e2dc0·30578·OBJECT··LOCAL··DEFAULT···14·C.30.92679 ··2675:·001edc20·30578·OBJECT··LOCAL··DEFAULT···14·C.27.6
 2680 ··2676:·001e8f80·19589·OBJECT··LOCAL··DEFAULT···14·C.28.7
 2681 ··2677:·001e8c80···745·OBJECT··LOCAL··DEFAULT···14·C.29.8
 2682 ··2678:·001d5e40·77360·OBJECT··LOCAL··DEFAULT···14·C.30.9
2683 ··2679:·001cff80·77360·OBJECT··LOCAL··DEFAULT···14·C.31.102683 ··2679:·001cb4a0·43418·OBJECT··LOCAL··DEFAULT···14·C.31.10
2684 ··2680:·001cfda0···462·OBJECT··LOCAL··DEFAULT···14·C.32.112684 ··2680:·001cb2c0···462·OBJECT··LOCAL··DEFAULT···14·C.32.11
2685 ··2681:·001c9180·27655·OBJECT··LOCAL··DEFAULT···14·C.33.122685 ··2681:·001c9180··8500·OBJECT··LOCAL··DEFAULT···14·C.33.12
2686 ··2682:·00090f6e···762·FUNC····LOCAL··DEFAULT···12·_ZN7yaramod10ModulePool12_processPathENSt10filesystem7__cxx114pathE.cold2686 ··2682:·00090f6e···762·FUNC····LOCAL··DEFAULT···12·_ZN7yaramod10ModulePool12_processPathENSt10filesystem7__cxx114pathE.cold
2687 ··2683:·00091268···864·FUNC····LOCAL··DEFAULT···12·_ZN7yaramod10ModulePool21_processModuleContentERKNS_13ModuleContentE.cold2687 ··2683:·00091268···864·FUNC····LOCAL··DEFAULT···12·_ZN7yaramod10ModulePool21_processModuleContentERKNS_13ModuleContentE.cold
2688 ··2684:·000915c8··1870·FUNC····LOCAL··DEFAULT···12·_ZN7yaramod10ModulePool5_initERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE.cold2688 ··2684:·000915c8··1870·FUNC····LOCAL··DEFAULT···12·_ZN7yaramod10ModulePool5_initERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE.cold
2689 ··2685:·00091d16····72·FUNC····LOCAL··DEFAULT···12·_ZN7yaramod10ModulePoolC2ENS_8FeaturesERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE.cold2689 ··2685:·00091d16····72·FUNC····LOCAL··DEFAULT···12·_ZN7yaramod10ModulePoolC2ENS_8FeaturesERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE.cold
2690 ··2686:·00000000·····0·FILE····LOCAL··DEFAULT··ABS·plain_string.cpp2690 ··2686:·00000000·····0·FILE····LOCAL··DEFAULT··ABS·plain_string.cpp
2691 ··2687:·002032e0····32·OBJECT··LOCAL··DEFAULT···14·C.33.02691 ··2687:·002032e0····32·OBJECT··LOCAL··DEFAULT···14·C.33.0
2692 ··2688:·00091d5e···210·FUNC····LOCAL··DEFAULT···12·_ZNK7yaramod11PlainString7getTextB5cxx11Ev.cold2692 ··2688:·00091d5e···210·FUNC····LOCAL··DEFAULT···12·_ZNK7yaramod11PlainString7getTextB5cxx11Ev.cold
⊟
430 B
readelf --wide --notes {}
    
Offset 1, 4 lines modifiedOffset 1, 4 lines modified
  
1 Displaying·notes·found·in:·.note.gnu.build-id1 Displaying·notes·found·in:·.note.gnu.build-id
2 ··Owner················Data·size·»  Description2 ··Owner················Data·size·»  Description
3 ··GNU··················0x00000014»  NT_GNU_BUILD_ID·(unique·build·ID·bitstring)»   ····Build·ID:·9483e960482177d0e4e305f10f3d36c8ce3c0f483 ··GNU··················0x00000014»  NT_GNU_BUILD_ID·(unique·build·ID·bitstring)»   ····Build·ID:·2a7e52dd960ed1f764ab99676c22beaa684ac254
⊟
23.8 MB
readelf --wide --debug-dump=rawline {}
    
Offset 363366, 26 lines modifiedOffset 363366, 26 lines modified
363366 ··217»    (udata)»     29»   (line_strp)»(offset:·0xd14):·re2.h363366 ··217»    (udata)»     29»   (line_strp)»(offset:·0xd14):·re2.h
363367 ··218»    (udata)»     29»   (line_strp)»(offset:·0xaa9):·set.h363367 ··218»    (udata)»     29»   (line_strp)»(offset:·0xaa9):·set.h
363368 ··219»    (udata)»     6»    (line_strp)» (offset:·0x751):·expression_type.h363368 ··219»    (udata)»     6»    (line_strp)» (offset:·0x751):·expression_type.h
363369 ··220»    (udata)»     6»    (line_strp)» (offset:·0x763):·token_type.h363369 ··220»    (udata)»     6»    (line_strp)» (offset:·0x763):·token_type.h
363370 ··221»    (udata)»     15»   (line_strp)»(offset:·0x740):·visitor_result.h363370 ··221»    (udata)»     15»   (line_strp)»(offset:·0x740):·visitor_result.h
363371 ··222»    (udata)»     6»    (line_strp)» (offset:·0xd59):·features.h363371 ··222»    (udata)»     6»    (line_strp)» (offset:·0xd59):·features.h
363372 ··223»    (udata)»     14»   (line_strp)»(offset:·0xd75):·module_console_generated.h363372 ··223»    (udata)»     14»   (line_strp)»(offset:·0xd75):·module_console_generated.h
363373 ··224»    (udata)»     14»   (line_strp)»(offset:·0x1087):·module_cuckoo_generated.h363373 ··224»    (udata)»     14»   (line_strp)»(offset:·0x1087):·module_hash_generated.h
363374 ··225»    (udata)»     14»   (line_strp)»(offset:·0x10a1):·module_dotnet_generated.h363374 ··225»    (udata)»     14»   (line_strp)»(offset:·0x109f):·module_elf_generated.h
363375 ··226»    (udata)»     14»   (line_strp)»(offset:·0x10bb):·module_macho_generated.h363375 ··226»    (udata)»     14»   (line_strp)»(offset:·0x10b6):·module_math_generated.h
363376 ··227»    (udata)»     14»   (line_strp)»(offset:·0x10d4):·module_cuckoo_deprecated_generated.h363376 ··227»    (udata)»     14»   (line_strp)»(offset:·0x10ce):·module_string_generated.h
363377 ··228»    (udata)»     14»   (line_strp)»(offset:·0x10f9):·module_magic_generated.h363377 ··228»    (udata)»     14»   (line_strp)»(offset:·0x10e8):·module_magic_generated.h
363378 ··229»    (udata)»     14»   (line_strp)»(offset:·0x1112):·module_string_generated.h 
363379 ··230»    (udata)»     14»   (line_strp)»(offset:·0x112c):·module_math_generated.h 
363380 ··231»    (udata)»     14»   (line_strp)»(offset:·0x1144):·module_hash_generated.h 
363381 ··232»    (udata)»     14»   (line_strp)»(offset:·0x115c):·module_dex_generated.h363378 ··229»    (udata)»     14»   (line_strp)»(offset:·0x1101):·module_dex_generated.h
 363379 ··230»    (udata)»     14»   (line_strp)»(offset:·0x1118):·module_dotnet_generated.h
 363380 ··231»    (udata)»     14»   (line_strp)»(offset:·0x1132):·module_cuckoo_deprecated_generated.h
363382 ··233»    (udata)»     14»   (line_strp)»(offset:·0x1173):·module_pe_generated.h363381 ··232»    (udata)»     14»   (line_strp)»(offset:·0x1157):·module_pe_generated.h
 363382 ··233»    (udata)»     14»   (line_strp)»(offset:·0x116d):·module_macho_generated.h
363383 ··234»    (udata)»     14»   (line_strp)»(offset:·0x1189):·module_time_generated.h363383 ··234»    (udata)»     14»   (line_strp)»(offset:·0x1186):·module_time_generated.h
363384 ··235»    (udata)»     14»   (line_strp)»(offset:·0x11a1):·module_elf_generated.h363384 ··235»    (udata)»     14»   (line_strp)»(offset:·0x119e):·module_cuckoo_generated.h
363385 ··236»    (udata)»     15»   (line_strp)»(offset:·0x11b8):·filesystem_operations.h363385 ··236»    (udata)»     15»   (line_strp)»(offset:·0x11b8):·filesystem_operations.h
363386 ··237»    (udata)»     30»   (line_strp)»(offset:·0xdac):·void_t.hpp363386 ··237»    (udata)»     30»   (line_strp)»(offset:·0xdac):·void_t.hpp
363387 ··238»    (udata)»     31»   (line_strp)»(offset:·0xdb7):·value_t.hpp363387 ··238»    (udata)»     31»   (line_strp)»(offset:·0xdb7):·value_t.hpp
363388 ··239»    (udata)»     32»   (line_strp)»(offset:·0xdc3):·input_adapters.hpp363388 ··239»    (udata)»     32»   (line_strp)»(offset:·0xdc3):·input_adapters.hpp
363389 ··240»    (udata)»     32»   (line_strp)»(offset:·0xdd6):·binary_reader.hpp363389 ··240»    (udata)»     32»   (line_strp)»(offset:·0xdd6):·binary_reader.hpp
363390 ··241»    (udata)»     32»   (line_strp)»(offset:·0xde8):·parser.hpp363390 ··241»    (udata)»     32»   (line_strp)»(offset:·0xde8):·parser.hpp
363391 ··242»    (udata)»     33»   (line_strp)»(offset:·0xdf3):·primitive_iterator.hpp363391 ··242»    (udata)»     33»   (line_strp)»(offset:·0xdf3):·primitive_iterator.hpp
Offset 1365396, 15 lines modifiedOffset 1365396, 15 lines modified
1365396 ··[0x00247c16]··Special·opcode·5:·advance·Address·by·0·to·0x17ed7e·and·Line·by·0·to·5971365396 ··[0x00247c16]··Special·opcode·5:·advance·Address·by·0·to·0x17ed7e·and·Line·by·0·to·597
1365397 ··[0x00247c17]··Special·opcode·61:·advance·Address·by·4·to·0x17ed82·and·Line·by·0·to·5971365397 ··[0x00247c17]··Special·opcode·61:·advance·Address·by·4·to·0x17ed82·and·Line·by·0·to·597
1365398 ··[0x00247c18]··Advance·PC·by·constant·17·to·0x17ed931365398 ··[0x00247c18]··Advance·PC·by·constant·17·to·0x17ed93
1365399 ··[0x00247c19]··Extended·opcode·1:·End·of·Sequence1365399 ··[0x00247c19]··Extended·opcode·1:·End·of·Sequence
  
  
1365400 ··Offset:······················0x247c1c1365400 ··Offset:······················0x247c1c
1365401 ··Length:······················701951365401 ··Length:······················70192
1365402 ··DWARF·Version:···············51365402 ··DWARF·Version:···············5
1365403 ··Address·size·(bytes):········41365403 ··Address·size·(bytes):········4
1365404 ··Segment·selector·(bytes):····01365404 ··Segment·selector·(bytes):····0
1365405 ··Prologue·Length:·············9631365405 ··Prologue·Length:·············963
1365406 ··Minimum·Instruction·Length:··11365406 ··Minimum·Instruction·Length:··1
1365407 ··Maximum·Ops·per·Instruction:·11365407 ··Maximum·Ops·per·Instruction:·1
1365408 ··Initial·value·of·'is_stmt':··11365408 ··Initial·value·of·'is_stmt':··1
Offset 1365495, 26 lines modifiedOffset 1365495, 26 lines modified
1365495 ··35»     (udata)»      3»     (line_strp)»  (offset:·0x3fa):·basic_ios.h1365495 ··35»     (udata)»      3»     (line_strp)»  (offset:·0x3fa):·basic_ios.h
1365496 ··36»     (udata)»      6»     (line_strp)»  (offset:·0x40e):·istream1365496 ··36»     (udata)»      6»     (line_strp)»  (offset:·0x40e):·istream
1365497 ··37»     (udata)»      6»     (line_strp)»  (offset:·0x406):·ostream1365497 ··37»     (udata)»      6»     (line_strp)»  (offset:·0x406):·ostream
1365498 ··38»     (udata)»      6»     (line_strp)»  (offset:·0x51d):·initializer_list1365498 ··38»     (udata)»      6»     (line_strp)»  (offset:·0x51d):·initializer_list
1365499 ··39»     (udata)»      3»     (line_strp)»  (offset:·0x202):·ios_base.h1365499 ··39»     (udata)»      3»     (line_strp)»  (offset:·0x202):·ios_base.h
1365500 ··40»     (udata)»      8»     (line_strp)»  (offset:·0xd90):·module_list.h1365500 ··40»     (udata)»      8»     (line_strp)»  (offset:·0xd90):·module_list.h
1365501 ··41»     (udata)»      8»     (line_strp)»  (offset:·0xd75):·module_console_generated.h1365501 ··41»     (udata)»      8»     (line_strp)»  (offset:·0xd75):·module_console_generated.h
1365502 ··42»     (udata)»      8»     (line_strp)»  (offset:·0x1087):·module_cuckoo_generated.h1365502 ··42»     (udata)»      8»     (line_strp)»  (offset:·0x1087):·module_hash_generated.h
1365503 ··43»     (udata)»      8»     (line_strp)»  (offset:·0x10a1):·module_dotnet_generated.h1365503 ··43»     (udata)»      8»     (line_strp)»  (offset:·0x109f):·module_elf_generated.h
1365504 ··44»     (udata)»      8»     (line_strp)»  (offset:·0x10bb):·module_macho_generated.h1365504 ··44»     (udata)»      8»     (line_strp)»  (offset:·0x10b6):·module_math_generated.h
1365505 ··45»     (udata)»      8»     (line_strp)»  (offset:·0x10d4):·module_cuckoo_deprecated_generated.h1365505 ··45»     (udata)»      8»     (line_strp)»  (offset:·0x10ce):·module_string_generated.h
1365506 ··46»     (udata)»      8»     (line_strp)»  (offset:·0x10f9):·module_magic_generated.h1365506 ··46»     (udata)»      8»     (line_strp)»  (offset:·0x10e8):·module_magic_generated.h
1365507 ··47»     (udata)»      8»     (line_strp)»  (offset:·0x1112):·module_string_generated.h 
1365508 ··48»     (udata)»      8»     (line_strp)»  (offset:·0x112c):·module_math_generated.h 
1365509 ··49»     (udata)»      8»     (line_strp)»  (offset:·0x1144):·module_hash_generated.h 
1365510 ··50»     (udata)»      8»     (line_strp)»  (offset:·0x115c):·module_dex_generated.h1365507 ··47»     (udata)»      8»     (line_strp)»  (offset:·0x1101):·module_dex_generated.h
 1365508 ··48»     (udata)»      8»     (line_strp)»  (offset:·0x1118):·module_dotnet_generated.h
 1365509 ··49»     (udata)»      8»     (line_strp)»  (offset:·0x1132):·module_cuckoo_deprecated_generated.h
1365511 ··51»     (udata)»      8»     (line_strp)»  (offset:·0x1173):·module_pe_generated.h1365510 ··50»     (udata)»      8»     (line_strp)»  (offset:·0x1157):·module_pe_generated.h
 1365511 ··51»     (udata)»      8»     (line_strp)»  (offset:·0x116d):·module_macho_generated.h
1365512 ··52»     (udata)»      8»     (line_strp)»  (offset:·0x1189):·module_time_generated.h1365512 ··52»     (udata)»      8»     (line_strp)»  (offset:·0x1186):·module_time_generated.h
1365513 ··53»     (udata)»      8»     (line_strp)»  (offset:·0x11a1):·module_elf_generated.h1365513 ··53»     (udata)»      8»     (line_strp)»  (offset:·0x119e):·module_cuckoo_generated.h
1365514 ··54»     (udata)»      3»     (line_strp)»  (offset:·0x308):·stl_vector.h1365514 ··54»     (udata)»      3»     (line_strp)»  (offset:·0x308):·stl_vector.h
1365515 ··55»     (udata)»      3»     (line_strp)»  (offset:·0x438):·stl_uninitialized.h1365515 ··55»     (udata)»      3»     (line_strp)»  (offset:·0x438):·stl_uninitialized.h
1365516 ··56»     (udata)»      3»     (line_strp)»  (offset:·0x42d):·vector.tcc1365516 ··56»     (udata)»      3»     (line_strp)»  (offset:·0x42d):·vector.tcc
1365517 ··57»     (udata)»      3»     (line_strp)»  (offset:·0x315):·stl_iterator.h1365517 ··57»     (udata)»      3»     (line_strp)»  (offset:·0x315):·stl_iterator.h
1365518 ··58»     (udata)»      5»     (line_strp)»  (offset:·0xe81):·byte_container_with_subtype.hpp1365518 ··58»     (udata)»      5»     (line_strp)»  (offset:·0xe81):·byte_container_with_subtype.hpp
1365519 ··59»     (udata)»      3»     (line_strp)»  (offset:·0xc3b):·fs_path.h1365519 ··59»     (udata)»      3»     (line_strp)»  (offset:·0xc3b):·fs_path.h
1365520 ··60»     (udata)»      6»     (line_strp)»  (offset:·0x4f6):·string_view1365520 ··60»     (udata)»      6»     (line_strp)»  (offset:·0x4f6):·string_view
Offset 1390485, 3632 lines modifiedOffset 1390485, 3632 lines modified
1390485 ··[0x0025292d]··Advance·Line·by·142·to·3651390485 ··[0x0025292d]··Advance·Line·by·142·to·365
1390486 ··[0x00252930]··Copy·(view·1)1390486 ··[0x00252930]··Copy·(view·1)
1390487 ··[0x00252931]··Set·is_stmt·to·01390487 ··[0x00252931]··Set·is_stmt·to·0
1390488 ··[0x00252932]··Copy·(view·2)1390488 ··[0x00252932]··Copy·(view·2)
1390489 ··[0x00252933]··Set·is_stmt·to·11390489 ··[0x00252933]··Set·is_stmt·to·1
1390490 ··[0x00252934]··Advance·Line·by·-148·to·2171390490 ··[0x00252934]··Advance·Line·by·-148·to·217
1390491 ··[0x00252937]··Copy·(view·3)1390491 ··[0x00252937]··Copy·(view·3)
1390492 ··[0x00252938]··Set·File·Name·to·entry·10·in·the·File·Name·Table 
1390493 ··[0x0025293a]··Set·column·to·49 
1390494 ··[0x0025293c]··Set·is_stmt·to·0 
1390495 ··[0x0025293d]··Advance·Line·by·210·to·427 
1390496 ··[0x00252940]··Copy·(view·4) 
1390497 ··[0x00252941]··Set·File·Name·to·entry·2·in·the·File·Name·Table 
1390498 ··[0x00252943]··Set·column·to·251390492 ··[0x00252938]··Set·column·to·25
1390499 ··[0x00252945]··Extended·opcode·4:·set·Discriminator·to·11390493 ··[0x0025293a]··Extended·opcode·4:·set·Discriminator·to·1
 1390494 ··[0x0025293e]··Set·is_stmt·to·0
1390500 ··[0x00252949]··Advance·Line·by·-233·to·1941390495 ··[0x0025293f]··Advance·Line·by·-23·to·194
1390501 ··[0x0025294c]··Special·opcode·75:·advance·Address·by·5·to·0x1834a7·and·Line·by·0·to·1941390496 ··[0x00252941]··Copy·(view·4)
1390502 ··[0x0025294d]··Set·File·Name·to·entry·42·in·the·File·Name·Table1390497 ··[0x00252942]··Set·File·Name·to·entry·42·in·the·File·Name·Table
1390503 ··[0x0025294f]··Set·column·to·01390498 ··[0x00252944]··Set·column·to·0
1390504 ··[0x00252951]··Advance·Line·by·-177·to·171390499 ··[0x00252946]··Advance·Line·by·-177·to·17
1390505 ··[0x00252954]··Special·opcode·173:·advance·Address·by·12·to·0x1834b3·and·Line·by·0·to·171390500 ··[0x00252949]··Special·opcode·173:·advance·Address·by·12·to·0x1834ae·and·Line·by·0·to·17
1390506 ··[0x00252955]··Set·File·Name·to·entry·2·in·the·File·Name·Table1390501 ··[0x0025294a]··Set·File·Name·to·entry·2·in·the·File·Name·Table
1390507 ··[0x00252957]··Set·column·to·251390502 ··[0x0025294c]··Set·column·to·25
1390508 ··[0x00252959]··Extended·opcode·4:·set·Discriminator·to·11390503 ··[0x0025294e]··Extended·opcode·4:·set·Discriminator·to·1
1390509 ··[0x0025295d]··Advance·Line·by·177·to·1941390504 ··[0x00252952]··Advance·Line·by·177·to·194
1390510 ··[0x00252960]··Special·opcode·75:·advance·Address·by·5·to·0x1834b8·and·Line·by·0·to·1941390505 ··[0x00252955]··Special·opcode·75:·advance·Address·by·5·to·0x1834b3·and·Line·by·0·to·194
1390511 ··[0x00252961]··Set·column·to·261390506 ··[0x00252956]··Set·column·to·26
1390512 ··[0x00252963]··Advance·Line·by·24·to·2181390507 ··[0x00252958]··Advance·Line·by·24·to·218
1390513 ··[0x00252965]··Special·opcode·89:·advance·Address·by·6·to·0x1834be·and·Line·by·0·to·2181390508 ··[0x0025295a]··Special·opcode·89:·advance·Address·by·6·to·0x1834b9·and·Line·by·0·to·218
1390514 ··[0x00252966]··Special·opcode·89:·advance·Address·by·6·to·0x1834c4·and·Line·by·0·to·2181390509 ··[0x0025295b]··Special·opcode·89:·advance·Address·by·6·to·0x1834bf·and·Line·by·0·to·218
1390515 ··[0x00252967]··Set·column·to·71390510 ··[0x0025295c]··Set·column·to·7
1390516 ··[0x00252969]··Set·is_stmt·to·11390511 ··[0x0025295e]··Set·is_stmt·to·1
1390517 ··[0x0025296a]··Advance·Line·by·41·to·2591390512 ··[0x0025295f]··Advance·Line·by·41·to·259
1390518 ··[0x0025296c]··Copy·(view·1)1390513 ··[0x00252961]··Copy·(view·1)
1390519 ··[0x0025296d]··Advance·Line·by·-37·to·2221390514 ··[0x00252962]··Advance·Line·by·-37·to·222
1390520 ··[0x0025296f]··Copy·(view·2)1390515 ··[0x00252964]··Copy·(view·2)
1390521 ··[0x00252970]··Set·File·Name·to·entry·42·in·the·File·Name·Table1390516 ··[0x00252965]··Set·File·Name·to·entry·42·in·the·File·Name·Table
1390522 ··[0x00252972]··Set·column·to·01390517 ··[0x00252967]··Set·column·to·0
1390523 ··[0x00252974]··Set·is_stmt·to·01390518 ··[0x00252969]··Set·is_stmt·to·0
1390524 ··[0x00252975]··Advance·Line·by·-205·to·171390519 ··[0x0025296a]··Advance·Line·by·-205·to·17
1390525 ··[0x00252978]··Copy·(view·3)1390520 ··[0x0025296d]··Copy·(view·3)
1390526 ··[0x00252979]··Set·File·Name·to·entry·2·in·the·File·Name·Table1390521 ··[0x0025296e]··Set·File·Name·to·entry·2·in·the·File·Name·Table
1390527 ··[0x0025297b]··Set·column·to·261390522 ··[0x00252970]··Set·column·to·26
1390528 ··[0x0025297d]··Advance·Line·by·206·to·2231390523 ··[0x00252972]··Advance·Line·by·206·to·223
1390529 ··[0x00252980]··Special·opcode·89:·advance·Address·by·6·to·0x1834ca·and·Line·by·0·to·2231390524 ··[0x00252975]··Special·opcode·89:·advance·Address·by·6·to·0x1834c5·and·Line·by·0·to·223
1390530 ··[0x00252981]··Special·opcode·145:·advance·Address·by·10·to·0x1834d4·and·Line·by·0·to·2231390525 ··[0x00252976]··Special·opcode·145:·advance·Address·by·10·to·0x1834cf·and·Line·by·0·to·223
1390531 ··[0x00252982]··Set·File·Name·to·entry·10·in·the·File·Name·Table1390526 ··[0x00252977]··Set·File·Name·to·entry·10·in·the·File·Name·Table
1390532 ··[0x00252984]··Set·column·to·71390527 ··[0x00252979]··Set·column·to·7
1390533 ··[0x00252986]··Set·is_stmt·to·11390528 ··[0x0025297b]··Set·is_stmt·to·1
1390534 ··[0x00252987]··Advance·Line·by·120·to·3431390529 ··[0x0025297c]··Advance·Line·by·120·to·343
Max diff block lines reached; 24984757/25005214 bytes (99.92%) of diff not shown.
⊟
24.6 KB
readelf --wide --debug-dump=info {}
    
Offset 64314, 15 lines modifiedOffset 64314, 15 lines modified
64314 ··Compilation·Unit·@·offset·0x18f43:64314 ··Compilation·Unit·@·offset·0x18f43:
64315 ···Length:········0x132·(32-bit)64315 ···Length:········0x132·(32-bit)
64316 ···Version:·······564316 ···Version:·······5
64317 ···Unit·Type:·····DW_UT_partial·(3)64317 ···Unit·Type:·····DW_UT_partial·(3)
64318 ···Abbrev·Offset:·0x1f1864318 ···Abbrev·Offset:·0x1f18
64319 ···Pointer·Size:··464319 ···Pointer·Size:··4
64320 ·<0><18f4f>:·Abbrev·Number:·6·(DW_TAG_partial_unit)64320 ·<0><18f4f>:·Abbrev·Number:·6·(DW_TAG_partial_unit)
64321 ····<18f50>···DW_AT_stmt_list···:·(sec_offset)·0x25dcb264321 ····<18f50>···DW_AT_stmt_list···:·(sec_offset)·0x25dcaf
64322 ····<18f54>···DW_AT_comp_dir····:·(line_strp)·(offset:·0x2a):·./obj-i686-linux-gnu/src64322 ····<18f54>···DW_AT_comp_dir····:·(line_strp)·(offset:·0x2a):·./obj-i686-linux-gnu/src
64323 ·<1><18f58>:·Abbrev·Number:·30·(DW_TAG_imported_unit)64323 ·<1><18f58>:·Abbrev·Number:·30·(DW_TAG_imported_unit)
64324 ····<18f59>···DW_AT_import······:·(ref_addr)·<0x3e6d>» [Abbrev·Number:·5·(DW_TAG_partial_unit)]64324 ····<18f59>···DW_AT_import······:·(ref_addr)·<0x3e6d>» [Abbrev·Number:·5·(DW_TAG_partial_unit)]
64325 ·<1><18f5d>:·Abbrev·Number:·30·(DW_TAG_imported_unit)64325 ·<1><18f5d>:·Abbrev·Number:·30·(DW_TAG_imported_unit)
64326 ····<18f5e>···DW_AT_import······:·(ref_addr)·<0x18d5d>»[Abbrev·Number:·6·(DW_TAG_partial_unit)]64326 ····<18f5e>···DW_AT_import······:·(ref_addr)·<0x18d5d>»[Abbrev·Number:·6·(DW_TAG_partial_unit)]
64327 ·<1><18f62>:·Abbrev·Number:·30·(DW_TAG_imported_unit)64327 ·<1><18f62>:·Abbrev·Number:·30·(DW_TAG_imported_unit)
64328 ····<18f63>···DW_AT_import······:·(ref_addr)·<0x1e2cb>»[Abbrev·Number:·126·(DW_TAG_partial_unit)]64328 ····<18f63>···DW_AT_import······:·(ref_addr)·<0x1e2cb>»[Abbrev·Number:·126·(DW_TAG_partial_unit)]
Offset 64490, 15 lines modifiedOffset 64490, 15 lines modified
64490 ··Compilation·Unit·@·offset·0x19079:64490 ··Compilation·Unit·@·offset·0x19079:
64491 ···Length:········0x4abe·(32-bit)64491 ···Length:········0x4abe·(32-bit)
64492 ···Version:·······564492 ···Version:·······5
64493 ···Unit·Type:·····DW_UT_partial·(3)64493 ···Unit·Type:·····DW_UT_partial·(3)
64494 ···Abbrev·Offset:·0x173164494 ···Abbrev·Offset:·0x1731
64495 ···Pointer·Size:··464495 ···Pointer·Size:··4
64496 ·<0><19085>:·Abbrev·Number:·27·(DW_TAG_partial_unit)64496 ·<0><19085>:·Abbrev·Number:·27·(DW_TAG_partial_unit)
64497 ····<19086>···DW_AT_stmt_list···:·(sec_offset)·0x28265564497 ····<19086>···DW_AT_stmt_list···:·(sec_offset)·0x282652
64498 ····<1908a>···DW_AT_comp_dir····:·(line_strp)·(offset:·0x2a):·./obj-i686-linux-gnu/src64498 ····<1908a>···DW_AT_comp_dir····:·(line_strp)·(offset:·0x2a):·./obj-i686-linux-gnu/src
64499 ·<1><1908e>:·Abbrev·Number:·50·(DW_TAG_imported_unit)64499 ·<1><1908e>:·Abbrev·Number:·50·(DW_TAG_imported_unit)
64500 ····<1908f>···DW_AT_import······:·(ref_addr)·<0x2459>» [Abbrev·Number:·5·(DW_TAG_partial_unit)]64500 ····<1908f>···DW_AT_import······:·(ref_addr)·<0x2459>» [Abbrev·Number:·5·(DW_TAG_partial_unit)]
64501 ·<1><19093>:·Abbrev·Number:·50·(DW_TAG_imported_unit)64501 ·<1><19093>:·Abbrev·Number:·50·(DW_TAG_imported_unit)
64502 ····<19094>···DW_AT_import······:·(ref_addr)·<0x36f2>» [Abbrev·Number:·5·(DW_TAG_partial_unit)]64502 ····<19094>···DW_AT_import······:·(ref_addr)·<0x36f2>» [Abbrev·Number:·5·(DW_TAG_partial_unit)]
64503 ·<1><19098>:·Abbrev·Number:·50·(DW_TAG_imported_unit)64503 ·<1><19098>:·Abbrev·Number:·50·(DW_TAG_imported_unit)
64504 ····<19099>···DW_AT_import······:·(ref_addr)·<0x14a6e>»[Abbrev·Number:·5·(DW_TAG_partial_unit)]64504 ····<19099>···DW_AT_import······:·(ref_addr)·<0x14a6e>»[Abbrev·Number:·5·(DW_TAG_partial_unit)]
Offset 76696, 15 lines modifiedOffset 76696, 15 lines modified
76696 ··Compilation·Unit·@·offset·0x1db3b:76696 ··Compilation·Unit·@·offset·0x1db3b:
76697 ···Length:········0x12d·(32-bit)76697 ···Length:········0x12d·(32-bit)
76698 ···Version:·······576698 ···Version:·······5
76699 ···Unit·Type:·····DW_UT_partial·(3)76699 ···Unit·Type:·····DW_UT_partial·(3)
76700 ···Abbrev·Offset:·0x2fde76700 ···Abbrev·Offset:·0x2fde
76701 ···Pointer·Size:··476701 ···Pointer·Size:··4
76702 ·<0><1db47>:·Abbrev·Number:·4·(DW_TAG_partial_unit)76702 ·<0><1db47>:·Abbrev·Number:·4·(DW_TAG_partial_unit)
76703 ····<1db48>···DW_AT_stmt_list···:·(sec_offset)·0x2bc4b376703 ····<1db48>···DW_AT_stmt_list···:·(sec_offset)·0x2bc4b0
76704 ····<1db4c>···DW_AT_comp_dir····:·(line_strp)·(offset:·0x2a):·./obj-i686-linux-gnu/src76704 ····<1db4c>···DW_AT_comp_dir····:·(line_strp)·(offset:·0x2a):·./obj-i686-linux-gnu/src
76705 ·<1><1db50>:·Abbrev·Number:·1·(DW_TAG_imported_unit)76705 ·<1><1db50>:·Abbrev·Number:·1·(DW_TAG_imported_unit)
76706 ····<1db51>···DW_AT_import······:·(ref_addr)·<0x1cdd>» [Abbrev·Number:·5·(DW_TAG_partial_unit)]76706 ····<1db51>···DW_AT_import······:·(ref_addr)·<0x1cdd>» [Abbrev·Number:·5·(DW_TAG_partial_unit)]
76707 ·<1><1db55>:·Abbrev·Number:·1·(DW_TAG_imported_unit)76707 ·<1><1db55>:·Abbrev·Number:·1·(DW_TAG_imported_unit)
76708 ····<1db56>···DW_AT_import······:·(ref_addr)·<0x200b>» [Abbrev·Number:·30·(DW_TAG_partial_unit)]76708 ····<1db56>···DW_AT_import······:·(ref_addr)·<0x200b>» [Abbrev·Number:·30·(DW_TAG_partial_unit)]
76709 ·<1><1db5a>:·Abbrev·Number:·1·(DW_TAG_imported_unit)76709 ·<1><1db5a>:·Abbrev·Number:·1·(DW_TAG_imported_unit)
76710 ····<1db5b>···DW_AT_import······:·(ref_addr)·<0x1dce4>»[Abbrev·Number:·5·(DW_TAG_partial_unit)]76710 ····<1db5b>···DW_AT_import······:·(ref_addr)·<0x1dce4>»[Abbrev·Number:·5·(DW_TAG_partial_unit)]
Offset 2951488, 109 lines modifiedOffset 2951488, 109 lines modified
2951488 ····<589462>···DW_AT_object_pointer:·(ref_udata)·<0x589465>2951488 ····<589462>···DW_AT_object_pointer:·(ref_udata)·<0x589465>
2951489 ·<5><589465>:·Abbrev·Number:·5·(DW_TAG_formal_parameter)2951489 ·<5><589465>:·Abbrev·Number:·5·(DW_TAG_formal_parameter)
2951490 ····<589466>···DW_AT_type········:·(ref_udata)·<0x596c0a>2951490 ····<589466>···DW_AT_type········:·(ref_udata)·<0x596c0a>
2951491 ····<589469>···DW_AT_artificial··:·(flag_present)·12951491 ····<589469>···DW_AT_artificial··:·(flag_present)·1
2951492 ·<5><589469>:·Abbrev·Number:·02951492 ·<5><589469>:·Abbrev·Number:·0
2951493 ·<4><58946a>:·Abbrev·Number:·02951493 ·<4><58946a>:·Abbrev·Number:·0
2951494 ·<3><58946b>:·Abbrev·Number:·88·(DW_TAG_class_type)2951494 ·<3><58946b>:·Abbrev·Number:·88·(DW_TAG_class_type)
2951495 ····<58946c>···DW_AT_name········:·(strp)·(offset:·0xbd6c05):·Gmodule_cuckoo2951495 ····<58946c>···DW_AT_name········:·(strp)·(offset:·0xbdb8e9):·Gmodule_hash
2951496 ····<589470>···DW_AT_byte_size···:·(data1)·482951496 ····<589470>···DW_AT_byte_size···:·(data1)·48
2951497 ····<589471>···DW_AT_decl_file···:·(data1)·2242951497 ····<589471>···DW_AT_decl_file···:·(data1)·224
2951498 ····<589472>···DW_AT_decl_line···:·(data1)·142951498 ····<589472>···DW_AT_decl_line···:·(data1)·14
2951499 ····<589473>···DW_AT_decl_column·:·(data1)·82951499 ····<589473>···DW_AT_decl_column·:·(data1)·8
2951500 ····<589474>···DW_AT_sibling·····:·(ref_udata)·<0x589493>2951500 ····<589474>···DW_AT_sibling·····:·(ref_udata)·<0x589493>
2951501 ·<4><589477>:·Abbrev·Number:·64·(DW_TAG_inheritance)2951501 ·<4><589477>:·Abbrev·Number:·64·(DW_TAG_inheritance)
2951502 ····<589478>···DW_AT_type········:·(ref_udata)·<0x5893a0>,·ModuleContent2951502 ····<589478>···DW_AT_type········:·(ref_udata)·<0x5893a0>,·ModuleContent
2951503 ····<58947b>···DW_AT_data_member_location:·(data1)·02951503 ····<58947b>···DW_AT_data_member_location:·(data1)·0
2951504 ····<58947c>···DW_AT_accessibility:·(data1)·1»   (public)2951504 ····<58947c>···DW_AT_accessibility:·(data1)·1»   (public)
2951505 ·<4><58947d>:·Abbrev·Number:·165·(DW_TAG_subprogram)2951505 ·<4><58947d>:·Abbrev·Number:·165·(DW_TAG_subprogram)
2951506 ····<58947f>···DW_AT_external····:·(flag_present)·12951506 ····<58947f>···DW_AT_external····:·(flag_present)·1
2951507 ····<58947f>···DW_AT_name········:·(strp)·(offset:·0xbd6c05):·Gmodule_cuckoo2951507 ····<58947f>···DW_AT_name········:·(strp)·(offset:·0xbdb8e9):·Gmodule_hash
2951508 ····<589483>···DW_AT_decl_file···:·(data1)·2242951508 ····<589483>···DW_AT_decl_file···:·(data1)·224
2951509 ····<589484>···DW_AT_decl_line···:·(data1)·172951509 ····<589484>···DW_AT_decl_line···:·(data1)·17
2951510 ····<589485>···DW_AT_decl_column·:·(data1)·22951510 ····<589485>···DW_AT_decl_column·:·(data1)·2
2951511 ····<589486>···DW_AT_linkage_name:·(strp)·(offset:·0x83ef3b):·_ZN7yaramod7modules14Gmodule_cuckooC4Ev2951511 ····<589486>···DW_AT_linkage_name:·(strp)·(offset:·0x6b702b):·_ZN7yaramod7modules12Gmodule_hashC4Ev
2951512 ····<58948a>···DW_AT_accessibility:·(implicit_const)·1»  (public)2951512 ····<58948a>···DW_AT_accessibility:·(implicit_const)·1»  (public)
2951513 ····<58948a>···DW_AT_declaration·:·(flag_present)·12951513 ····<58948a>···DW_AT_declaration·:·(flag_present)·1
2951514 ····<58948a>···DW_AT_object_pointer:·(ref_udata)·<0x58948d>2951514 ····<58948a>···DW_AT_object_pointer:·(ref_udata)·<0x58948d>
2951515 ·<5><58948d>:·Abbrev·Number:·5·(DW_TAG_formal_parameter)2951515 ·<5><58948d>:·Abbrev·Number:·5·(DW_TAG_formal_parameter)
2951516 ····<58948e>···DW_AT_type········:·(ref_udata)·<0x596c0e>2951516 ····<58948e>···DW_AT_type········:·(ref_udata)·<0x596c0e>
2951517 ····<589491>···DW_AT_artificial··:·(flag_present)·12951517 ····<589491>···DW_AT_artificial··:·(flag_present)·1
2951518 ·<5><589491>:·Abbrev·Number:·02951518 ·<5><589491>:·Abbrev·Number:·0
2951519 ·<4><589492>:·Abbrev·Number:·02951519 ·<4><589492>:·Abbrev·Number:·0
2951520 ·<3><589493>:·Abbrev·Number:·88·(DW_TAG_class_type)2951520 ·<3><589493>:·Abbrev·Number:·88·(DW_TAG_class_type)
2951521 ····<589494>···DW_AT_name········:·(strp)·(offset:·0xbcbc56):·Gmodule_dotnet2951521 ····<589494>···DW_AT_name········:·(strp)·(offset:·0xbd7ca5):·Gmodule_elf
2951522 ····<589498>···DW_AT_byte_size···:·(data1)·482951522 ····<589498>···DW_AT_byte_size···:·(data1)·48
2951523 ····<589499>···DW_AT_decl_file···:·(data1)·2252951523 ····<589499>···DW_AT_decl_file···:·(data1)·225
2951524 ····<58949a>···DW_AT_decl_line···:·(data1)·142951524 ····<58949a>···DW_AT_decl_line···:·(data1)·14
2951525 ····<58949b>···DW_AT_decl_column·:·(data1)·82951525 ····<58949b>···DW_AT_decl_column·:·(data1)·8
2951526 ····<58949c>···DW_AT_sibling·····:·(ref_udata)·<0x5894bb>2951526 ····<58949c>···DW_AT_sibling·····:·(ref_udata)·<0x5894bb>
2951527 ·<4><58949f>:·Abbrev·Number:·64·(DW_TAG_inheritance)2951527 ·<4><58949f>:·Abbrev·Number:·64·(DW_TAG_inheritance)
2951528 ····<5894a0>···DW_AT_type········:·(ref_udata)·<0x5893a0>,·ModuleContent2951528 ····<5894a0>···DW_AT_type········:·(ref_udata)·<0x5893a0>,·ModuleContent
2951529 ····<5894a3>···DW_AT_data_member_location:·(data1)·02951529 ····<5894a3>···DW_AT_data_member_location:·(data1)·0
2951530 ····<5894a4>···DW_AT_accessibility:·(data1)·1»   (public)2951530 ····<5894a4>···DW_AT_accessibility:·(data1)·1»   (public)
2951531 ·<4><5894a5>:·Abbrev·Number:·165·(DW_TAG_subprogram)2951531 ·<4><5894a5>:·Abbrev·Number:·165·(DW_TAG_subprogram)
2951532 ····<5894a7>···DW_AT_external····:·(flag_present)·12951532 ····<5894a7>···DW_AT_external····:·(flag_present)·1
2951533 ····<5894a7>···DW_AT_name········:·(strp)·(offset:·0xbcbc56):·Gmodule_dotnet2951533 ····<5894a7>···DW_AT_name········:·(strp)·(offset:·0xbd7ca5):·Gmodule_elf
2951534 ····<5894ab>···DW_AT_decl_file···:·(data1)·2252951534 ····<5894ab>···DW_AT_decl_file···:·(data1)·225
2951535 ····<5894ac>···DW_AT_decl_line···:·(data1)·172951535 ····<5894ac>···DW_AT_decl_line···:·(data1)·17
2951536 ····<5894ad>···DW_AT_decl_column·:·(data1)·22951536 ····<5894ad>···DW_AT_decl_column·:·(data1)·2
2951537 ····<5894ae>···DW_AT_linkage_name:·(strp)·(offset:·0x6aa047):·_ZN7yaramod7modules14Gmodule_dotnetC4Ev2951537 ····<5894ae>···DW_AT_linkage_name:·(strp)·(offset:·0x9ce8e2):·_ZN7yaramod7modules11Gmodule_elfC4Ev
2951538 ····<5894b2>···DW_AT_accessibility:·(implicit_const)·1»  (public)2951538 ····<5894b2>···DW_AT_accessibility:·(implicit_const)·1»  (public)
2951539 ····<5894b2>···DW_AT_declaration·:·(flag_present)·12951539 ····<5894b2>···DW_AT_declaration·:·(flag_present)·1
2951540 ····<5894b2>···DW_AT_object_pointer:·(ref_udata)·<0x5894b5>2951540 ····<5894b2>···DW_AT_object_pointer:·(ref_udata)·<0x5894b5>
2951541 ·<5><5894b5>:·Abbrev·Number:·5·(DW_TAG_formal_parameter)2951541 ·<5><5894b5>:·Abbrev·Number:·5·(DW_TAG_formal_parameter)
2951542 ····<5894b6>···DW_AT_type········:·(ref_udata)·<0x596c12>2951542 ····<5894b6>···DW_AT_type········:·(ref_udata)·<0x596c12>
2951543 ····<5894b9>···DW_AT_artificial··:·(flag_present)·12951543 ····<5894b9>···DW_AT_artificial··:·(flag_present)·1
2951544 ·<5><5894b9>:·Abbrev·Number:·02951544 ·<5><5894b9>:·Abbrev·Number:·0
2951545 ·<4><5894ba>:·Abbrev·Number:·02951545 ·<4><5894ba>:·Abbrev·Number:·0
2951546 ·<3><5894bb>:·Abbrev·Number:·88·(DW_TAG_class_type)2951546 ·<3><5894bb>:·Abbrev·Number:·88·(DW_TAG_class_type)
2951547 ····<5894bc>···DW_AT_name········:·(strp)·(offset:·0xbd0459):·Gmodule_macho2951547 ····<5894bc>···DW_AT_name········:·(strp)·(offset:·0xbcc210):·Gmodule_math
2951548 ····<5894c0>···DW_AT_byte_size···:·(data1)·482951548 ····<5894c0>···DW_AT_byte_size···:·(data1)·48
2951549 ····<5894c1>···DW_AT_decl_file···:·(data1)·2262951549 ····<5894c1>···DW_AT_decl_file···:·(data1)·226
2951550 ····<5894c2>···DW_AT_decl_line···:·(data1)·142951550 ····<5894c2>···DW_AT_decl_line···:·(data1)·14
2951551 ····<5894c3>···DW_AT_decl_column·:·(data1)·82951551 ····<5894c3>···DW_AT_decl_column·:·(data1)·8
2951552 ····<5894c4>···DW_AT_sibling·····:·(ref_udata)·<0x5894e3>2951552 ····<5894c4>···DW_AT_sibling·····:·(ref_udata)·<0x5894e3>
2951553 ·<4><5894c7>:·Abbrev·Number:·64·(DW_TAG_inheritance)2951553 ·<4><5894c7>:·Abbrev·Number:·64·(DW_TAG_inheritance)
2951554 ····<5894c8>···DW_AT_type········:·(ref_udata)·<0x5893a0>,·ModuleContent2951554 ····<5894c8>···DW_AT_type········:·(ref_udata)·<0x5893a0>,·ModuleContent
2951555 ····<5894cb>···DW_AT_data_member_location:·(data1)·02951555 ····<5894cb>···DW_AT_data_member_location:·(data1)·0
2951556 ····<5894cc>···DW_AT_accessibility:·(data1)·1»   (public)2951556 ····<5894cc>···DW_AT_accessibility:·(data1)·1»   (public)
2951557 ·<4><5894cd>:·Abbrev·Number:·165·(DW_TAG_subprogram)2951557 ·<4><5894cd>:·Abbrev·Number:·165·(DW_TAG_subprogram)
2951558 ····<5894cf>···DW_AT_external····:·(flag_present)·12951558 ····<5894cf>···DW_AT_external····:·(flag_present)·1
2951559 ····<5894cf>···DW_AT_name········:·(strp)·(offset:·0xbd0459):·Gmodule_macho2951559 ····<5894cf>···DW_AT_name········:·(strp)·(offset:·0xbcc210):·Gmodule_math
2951560 ····<5894d3>···DW_AT_decl_file···:·(data1)·2262951560 ····<5894d3>···DW_AT_decl_file···:·(data1)·226
2951561 ····<5894d4>···DW_AT_decl_line···:·(data1)·172951561 ····<5894d4>···DW_AT_decl_line···:·(data1)·17
2951562 ····<5894d5>···DW_AT_decl_column·:·(data1)·22951562 ····<5894d5>···DW_AT_decl_column·:·(data1)·2
2951563 ····<5894d6>···DW_AT_linkage_name:·(strp)·(offset:·0x5e278d):·_ZN7yaramod7modules13Gmodule_machoC4Ev2951563 ····<5894d6>···DW_AT_linkage_name:·(strp)·(offset:·0x85e31e):·_ZN7yaramod7modules12Gmodule_mathC4Ev
2951564 ····<5894da>···DW_AT_accessibility:·(implicit_const)·1»  (public)2951564 ····<5894da>···DW_AT_accessibility:·(implicit_const)·1»  (public)
2951565 ····<5894da>···DW_AT_declaration·:·(flag_present)·12951565 ····<5894da>···DW_AT_declaration·:·(flag_present)·1
2951566 ····<5894da>···DW_AT_object_pointer:·(ref_udata)·<0x5894dd>2951566 ····<5894da>···DW_AT_object_pointer:·(ref_udata)·<0x5894dd>
Max diff block lines reached; 17087/25104 bytes (68.06%) of diff not shown.
⊟
424 KB
readelf --wide --debug-dump=loc {}
    
Offset 2060737, 15 lines modifiedOffset 2060737, 15 lines modified
2060737 ····0050303c·v0000000·v0000000·location·view·pair2060737 ····0050303c·v0000000·v0000000·location·view·pair
2060738 ····0050303e·v0000000·v0000000·location·view·pair2060738 ····0050303e·v0000000·v0000000·location·view·pair
  
2060739 ····00503040·001833fd·(base·address)2060739 ····00503040·001833fd·(base·address)
2060740 ····00503045·v0000007·v0000000·views·at·00503034·for:2060740 ····00503045·v0000007·v0000000·views·at·00503034·for:
2060741 ·············001833fd·00183435·(DW_OP_fbreg:·-1392)2060741 ·············001833fd·00183435·(DW_OP_fbreg:·-1392)
2060742 ····0050304c·v0000000·v0000000·views·at·00503036·for:2060742 ····0050304c·v0000000·v0000000·views·at·00503036·for:
2060743 ·············00183435·001834db·(DW_OP_fbreg:·-660;·DW_OP_stack_value)2060743 ·············00183435·001834d6·(DW_OP_fbreg:·-660;·DW_OP_stack_value)
2060744 ····00503055·v0000000·v0000000·views·at·00503038·for:2060744 ····00503055·v0000000·v0000000·views·at·00503038·for:
2060745 ·············0018488c·001848cf·(DW_OP_fbreg:·-1392)2060745 ·············0018488c·001848cf·(DW_OP_fbreg:·-1392)
2060746 ····0050305e·v0000000·v0000000·views·at·0050303a·for:2060746 ····0050305e·v0000000·v0000000·views·at·0050303a·for:
2060747 ·············001848cf·00184910·(DW_OP_fbreg:·-660;·DW_OP_stack_value)2060747 ·············001848cf·00184910·(DW_OP_fbreg:·-660;·DW_OP_stack_value)
2060748 ····00503068·v0000000·v0000000·views·at·0050303c·for:2060748 ····00503068·v0000000·v0000000·views·at·0050303c·for:
2060749 ·············00184f72·00184f83·(DW_OP_fbreg:·-1392)2060749 ·············00184f72·00184f83·(DW_OP_fbreg:·-1392)
2060750 ····00503071·v0000000·v0000000·views·at·0050303e·for:2060750 ····00503071·v0000000·v0000000·views·at·0050303e·for:
Offset 2060759, 15 lines modifiedOffset 2060759, 15 lines modified
2060759 ····00503084·v0000000·v0000000·location·view·pair2060759 ····00503084·v0000000·v0000000·location·view·pair
2060760 ····00503086·v0000000·v0000000·location·view·pair2060760 ····00503086·v0000000·v0000000·location·view·pair
  
2060761 ····00503088·001833fd·(base·address)2060761 ····00503088·001833fd·(base·address)
2060762 ····0050308d·v0000007·v0000000·views·at·0050307c·for:2060762 ····0050308d·v0000007·v0000000·views·at·0050307c·for:
2060763 ·············001833fd·00183435·(DW_OP_fbreg:·-1468)2060763 ·············001833fd·00183435·(DW_OP_fbreg:·-1468)
2060764 ····00503094·v0000000·v0000000·views·at·0050307e·for:2060764 ····00503094·v0000000·v0000000·views·at·0050307e·for:
2060765 ·············00183435·001834db·(DW_OP_fbreg:·-1284;·DW_OP_stack_value)2060765 ·············00183435·001834d6·(DW_OP_fbreg:·-1284;·DW_OP_stack_value)
2060766 ····0050309d·v0000000·v0000000·views·at·00503080·for:2060766 ····0050309d·v0000000·v0000000·views·at·00503080·for:
2060767 ·············0018488c·001848cf·(DW_OP_fbreg:·-1468)2060767 ·············0018488c·001848cf·(DW_OP_fbreg:·-1468)
2060768 ····005030a6·v0000000·v0000000·views·at·00503082·for:2060768 ····005030a6·v0000000·v0000000·views·at·00503082·for:
2060769 ·············001848cf·00184910·(DW_OP_fbreg:·-1284;·DW_OP_stack_value)2060769 ·············001848cf·00184910·(DW_OP_fbreg:·-1284;·DW_OP_stack_value)
2060770 ····005030b0·v0000000·v0000000·views·at·00503084·for:2060770 ····005030b0·v0000000·v0000000·views·at·00503084·for:
2060771 ·············00184f72·00184f83·(DW_OP_fbreg:·-1468)2060771 ·············00184f72·00184f83·(DW_OP_fbreg:·-1468)
2060772 ····005030b9·v0000000·v0000000·views·at·00503086·for:2060772 ····005030b9·v0000000·v0000000·views·at·00503086·for:
Offset 2061042, 28 lines modifiedOffset 2061042, 28 lines modified
  
2061042 ····00503346·v0000000·v0000000·location·view·pair2061042 ····00503346·v0000000·v0000000·location·view·pair
2061043 ····00503348·v0000000·v0000000·location·view·pair2061043 ····00503348·v0000000·v0000000·location·view·pair
2061044 ····0050334a·v0000000·v0000000·location·view·pair2061044 ····0050334a·v0000000·v0000000·location·view·pair
  
2061045 ····0050334c·00183470·(base·address)2061045 ····0050334c·00183470·(base·address)
2061046 ····00503351·v0000000·v0000000·views·at·00503346·for:2061046 ····00503351·v0000000·v0000000·views·at·00503346·for:
2061047 ·············00183470·001834db·(DW_OP_fbreg:·-636;·DW_OP_stack_value)2061047 ·············00183470·001834d6·(DW_OP_fbreg:·-636;·DW_OP_stack_value)
2061048 ····00503359·v0000000·v0000000·views·at·00503348·for:2061048 ····00503359·v0000000·v0000000·views·at·00503348·for:
2061049 ·············001848d4·00184910·(DW_OP_fbreg:·-636;·DW_OP_stack_value)2061049 ·············001848d4·00184910·(DW_OP_fbreg:·-636;·DW_OP_stack_value)
2061050 ····00503363·v0000000·v0000000·views·at·0050334a·for:2061050 ····00503363·v0000000·v0000000·views·at·0050334a·for:
2061051 ·············00184fb1·00184fea·(DW_OP_fbreg:·-636;·DW_OP_stack_value)2061051 ·············00184fb1·00184fea·(DW_OP_fbreg:·-636;·DW_OP_stack_value)
2061052 ····0050336d·<End·of·list>2061052 ····0050336d·<End·of·list>
  
2061053 ····0050336e·v0000000·v0000000·location·view·pair2061053 ····0050336e·v0000000·v0000000·location·view·pair
2061054 ····00503370·v0000000·v0000000·location·view·pair2061054 ····00503370·v0000000·v0000000·location·view·pair
2061055 ····00503372·v0000000·v0000000·location·view·pair2061055 ····00503372·v0000000·v0000000·location·view·pair
  
2061056 ····00503374·00183470·(base·address)2061056 ····00503374·00183470·(base·address)
2061057 ····00503379·v0000000·v0000000·views·at·0050336e·for:2061057 ····00503379·v0000000·v0000000·views·at·0050336e·for:
2061058 ·············00183470·001834db·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)2061058 ·············00183470·001834d6·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)
2061059 ····00503381·v0000000·v0000000·views·at·00503370·for:2061059 ····00503381·v0000000·v0000000·views·at·00503370·for:
2061060 ·············001848d4·00184910·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)2061060 ·············001848d4·00184910·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)
2061061 ····0050338b·v0000000·v0000000·views·at·00503372·for:2061061 ····0050338b·v0000000·v0000000·views·at·00503372·for:
2061062 ·············00184fb1·00184fea·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)2061062 ·············00184fb1·00184fea·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)
2061063 ····00503395·<End·of·list>2061063 ····00503395·<End·of·list>
  
2061064 ····00503396·v0000005·v0000000·location·view·pair2061064 ····00503396·v0000005·v0000000·location·view·pair
Offset 2061185, 57 lines modifiedOffset 2061185, 57 lines modified
2061185 ····0050349a·v0000002·v0000000·views·at·00503498·for:2061185 ····0050349a·v0000002·v0000000·views·at·00503498·for:
2061186 ·············00183496·001834a2·(DW_OP_fbreg:·-1256)2061186 ·············00183496·001834a2·(DW_OP_fbreg:·-1256)
2061187 ····005034a4·<End·of·list>2061187 ····005034a4·<End·of·list>
  
2061188 ····005034a5·v0000002·v0000000·location·view·pair2061188 ····005034a5·v0000002·v0000000·location·view·pair
  
2061189 ····005034a7·v0000002·v0000000·views·at·005034a5·for:2061189 ····005034a7·v0000002·v0000000·views·at·005034a5·for:
2061190 ·············001834a2·001834c4·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)2061190 ·············001834a2·001834bf·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)
2061191 ····005034b2·<End·of·list>2061191 ····005034b2·<End·of·list>
  
2061192 ····005034b3·v0000002·v0000000·location·view·pair2061192 ····005034b3·v0000002·v0000000·location·view·pair
  
2061193 ····005034b5·v0000002·v0000000·views·at·005034b3·for:2061193 ····005034b5·v0000002·v0000000·views·at·005034b3·for:
2061194 ·············001834a2·001834c4·(DW_OP_fbreg:·-1252;·DW_OP_stack_value)2061194 ·············001834a2·001834bf·(DW_OP_fbreg:·-1252;·DW_OP_stack_value)
2061195 ····005034c0·<End·of·list>2061195 ····005034c0·<End·of·list>
  
2061196 ····005034c1·v0000000·v0000002·location·view·pair2061196 ····005034c1·v0000000·v0000002·location·view·pair
  
2061197 ····005034c3·v0000000·v0000002·views·at·005034c1·for:2061197 ····005034c3·v0000000·v0000002·views·at·005034c1·for:
2061198 ·············001834a2·001834a2·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)2061198 ·············001834a2·001834a2·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)
2061199 ····005034ce·<End·of·list>2061199 ····005034ce·<End·of·list>
  
2061200 ····005034cf·v0000000·v0000000·location·view·pair2061200 ····005034cf·v0000000·v0000000·location·view·pair
  
2061201 ····005034d1·v0000000·v0000000·views·at·005034cf·for:2061201 ····005034d1·v0000000·v0000000·views·at·005034cf·for:
2061202 ·············001834c4·001834db·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)2061202 ·············001834bf·001834d6·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)
2061203 ····005034dc·<End·of·list>2061203 ····005034dc·<End·of·list>
  
2061204 ····005034dd·v0000000·v0000000·location·view·pair2061204 ····005034dd·v0000000·v0000000·location·view·pair
  
2061205 ····005034df·v0000000·v0000000·views·at·005034dd·for:2061205 ····005034df·v0000000·v0000000·views·at·005034dd·for:
2061206 ·············001834c4·001834db·(DW_OP_lit0;·DW_OP_stack_value)2061206 ·············001834bf·001834d6·(DW_OP_lit0;·DW_OP_stack_value)
2061207 ····005034e8·<End·of·list>2061207 ····005034e8·<End·of·list>
  
2061208 ····005034e9·v0000002·v0000000·location·view·pair2061208 ····005034e9·v0000002·v0000000·location·view·pair
  
2061209 ····005034eb·v0000002·v0000000·views·at·005034e9·for:2061209 ····005034eb·v0000002·v0000000·views·at·005034e9·for:
2061210 ·············001834c4·001834d4·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)2061210 ·············001834bf·001834cf·(DW_OP_fbreg:·-1260;·DW_OP_stack_value)
2061211 ····005034f6·<End·of·list>2061211 ····005034f6·<End·of·list>
  
2061212 ····005034f7·v0000002·v0000000·location·view·pair2061212 ····005034f7·v0000002·v0000000·location·view·pair
  
2061213 ····005034f9·v0000002·v0000000·views·at·005034f7·for:2061213 ····005034f9·v0000002·v0000000·views·at·005034f7·for:
2061214 ·············001834c4·001834d4·(DW_OP_lit0;·DW_OP_stack_value)2061214 ·············001834bf·001834cf·(DW_OP_lit0;·DW_OP_stack_value)
2061215 ····00503502·<End·of·list>2061215 ····00503502·<End·of·list>
  
2061216 ····00503503·v0000000·v0000000·location·view·pair2061216 ····00503503·v0000000·v0000000·location·view·pair
  
2061217 ····00503505·v0000000·v0000000·views·at·00503503·for:2061217 ····00503505·v0000000·v0000000·views·at·00503503·for:
2061218 ·············001834d4·001834db·(DW_OP_fbreg:·-1252;·DW_OP_stack_value)2061218 ·············001834cf·001834d6·(DW_OP_fbreg:·-1252;·DW_OP_stack_value)
2061219 ····00503510·<End·of·list>2061219 ····00503510·<End·of·list>
  
2061220 ····00503511·v0000000·v0000002·location·view·pair2061220 ····00503511·v0000000·v0000002·location·view·pair
  
2061221 ····00503513·v0000000·v0000002·views·at·00503511·for:2061221 ····00503513·v0000000·v0000002·views·at·00503511·for:
2061222 ·············001848d4·001848d4·(DW_OP_fbreg:·-636;·DW_OP_stack_value)2061222 ·············001848d4·001848d4·(DW_OP_fbreg:·-636;·DW_OP_stack_value)
2061223 ····0050351e·<End·of·list>2061223 ····0050351e·<End·of·list>
Offset 2061290, 309 lines modifiedOffset 2061290, 309 lines modified
  
2061290 ····0050359a·v0000000·v0000000·location·view·pair2061290 ····0050359a·v0000000·v0000000·location·view·pair
2061291 ····0050359c·v0000000·v0000000·location·view·pair2061291 ····0050359c·v0000000·v0000000·location·view·pair
2061292 ····0050359e·v0000000·v0000007·location·view·pair2061292 ····0050359e·v0000000·v0000007·location·view·pair
2061293 ····005035a0·v0000000·v0000000·location·view·pair2061293 ····005035a0·v0000000·v0000000·location·view·pair
2061294 ····005035a2·v0000000·v0000000·location·view·pair2061294 ····005035a2·v0000000·v0000000·location·view·pair
  
2061295 ····005035a4·001834db·(base·address)2061295 ····005035a4·001834d6·(base·address)
Max diff block lines reached; 427998/434129 bytes (98.59%) of diff not shown.
⊟
31.7 KB
strings --all --bytes=8 {}
    
Offset 1, 8 lines modifiedOffset 1, 8 lines modified
1 HGCC:·(Debian·14.2.0-17)·14.2.01 TGCC:·(Debian·14.2.0-17)·14.2.0
2 ."="=EzT2 ."="=EzT
3 `hfgGyd[{;3 `hfgGyd[{;
4 ON374r5Z4 ON374r5Z
5 tAzRzZzvz5 tAzRzZzvz
6 y!D.y_)qfw6 y!D.y_)qfw
7 (P0Yofk+7 (P0Yofk+
8 /i(#»   2RaA8 /i(#»   2RaA
Offset 636, 1228 lines modifiedOffset 636, 1242 lines modified
636 X@V{u+sZ636 X@V{u+sZ
637 ".@<%\J9637 ".@<%\J9
638 V=/nB51/D638 V=/nB51/D
639 <B%<YCyQ639 <B%<YCyQ
640 ]`bF]R%M#640 ]`bF]R%M#
641 k}=`S-_<3@641 k}=`S-_<3@
642 Z.hb7R*_0642 Z.hb7R*_0
643 rm"%)I4C0 
644 +YO+$&NK 
645 &a{zA1u= 
646 =Sxb}#*87M" 
647 +Yma)k-4 
648 )8~l;2SKm 
649 RAn1`^Ah»        
650 BAn,`RA@ 
651 flG<`[*W 
652 #An»    yt>R 
653 cW"A.'i?v 
654 ;-C'w;0f 
655 &%=»    mN0) 
656 >ay}dl6h 
657 y=:e:3fy[M 
658 `:D\Aa62? 
659 &FiBsw» " 
660 G)S$CVDk 
661 DSE93$;_ 
662 ]d;`QJUf 
663 ^)w3d»  *d~ 
664 THSfH+DP 
665 &CJn3C.u 
666 ·96cG5!; 
667 !a&·V4sx 
668 qBS;Ok#! 
669 !-&Cjsuu 
670 i(~»    5_Dr 
671 }>RUG~fw 
672 )o>do>tx 
673 3<-*%;)<+ 
674 RX9(('.M 
675 :E8nAnk` 
676 d9\y/tr·[ 
677 Qdz·u\»  - 
678 ^/G:6!'{ 
679 [q8~)4QW 
680 @(UvNL0+@f+R 
681 HZI@'(ZaL+L 
682 q~WmqA<@JN 
683 .Cy1Y~^k 
684 D0J=).l@1 
685 T~j@e;0~?J*? 
686 ·yBK4tQU 
687 )wwvfv6& 
688 eU^q=5z;2 
689 5}+=#-(· 
690 "HS!9#leCf 
691 b'G'a'e/ 
692 P[@=v\Q= 
693 $},1r+,9J 
694 k/jG2Pnq 
695 Fu[luL(5 
696 &HAezGjs 
697 ">e»    3cTM 
698 !<·Ct<\\# 
699 B/ogX»  z| 
700 })6&`e4m 
701 `c#V2h|3' 
702 RSrDpO#:{J 
703 cUg-9VqoV 
704 D*Ir\\#g 
705 '`q4bch( 
706 h`Ax]|ecZS 
707 sWx(~@X$ 
708 *jT:dq9r 
709 [Mp;8vTn 
710 ((K^[mUP`P 
711 7_9!ggdDa 
712 c<sF}[!= 
713 UY^R[2i8 
714 H)!/U_'HT 
715 ups#)?7M 
716 wO"saIJ? 
717 &tpZ,zeS 
718 DL59#}y35 
719 }lu)a/[b 
720 ;A\-:.fK 
721 tPcr$S3a 
722 G7$%ukK) 
723 Da6Iglyji 
724 ·p52mH\· 
725 GdkL;jzC 
726 MUJbxo() 
727 O4Q\^6+X 
728 ^M[HSy?h 
729 '&6=u!M7 
730 y1x{!tR] 
731 KipZ)f|! 
732 %'DV`)wO 
733 z.s!EWfA 
734 {4r:F4r|F1[ 
735 wHK{QE&. 
736 2"O.#Giy" 
737 #^H*SnG}z 
738 ]=vtTK|\ 
739 P$b(1D'=H 
740 8bR^*,&5 
741 `9C@_%e3E> 
742 2"iRN=gO 
743 ~d5gQss( 
744 ^O#en6Ef 
745 !?q.:@{% 
746 _QlVz#7] 
747 _cEP|q8f 
748 /aidPd1AL 
749 6<3VUuGb 
750 [M8X<1EUu 
751 (5"REUw5 
752 [J,a#CfU 
753 :[2D)»  [mb 
Max diff block lines reached; 27600/32387 bytes (85.22%) of diff not shown.
⊟
1.44 KB
readelf --wide --decompress --string-dump=.debug_line_str {}
    
Offset 267, 26 lines modifiedOffset 267, 26 lines modified
267 ··[··1021]··fstream.tcc267 ··[··1021]··fstream.tcc
268 ··[··102d]··exception268 ··[··102d]··exception
269 ··[··1037]··hash_bytes.h269 ··[··1037]··hash_bytes.h
270 ··[··1044]··thread-shared-types.h270 ··[··1044]··thread-shared-types.h
271 ··[··105a]··struct_mutex.h271 ··[··105a]··struct_mutex.h
272 ··[··1069]··pthreadtypes.h272 ··[··1069]··pthreadtypes.h
273 ··[··1078]··gthr-default.h273 ··[··1078]··gthr-default.h
274 ··[··1087]··module_cuckoo_generated.h274 ··[··1087]··module_hash_generated.h
 275 ··[··109f]··module_elf_generated.h
 276 ··[··10b6]··module_math_generated.h
 277 ··[··10ce]··module_string_generated.h
 278 ··[··10e8]··module_magic_generated.h
 279 ··[··1101]··module_dex_generated.h
275 ··[··10a1]··module_dotnet_generated.h280 ··[··1118]··module_dotnet_generated.h
276 ··[··10bb]··module_macho_generated.h 
277 ··[··10d4]··module_cuckoo_deprecated_generated.h281 ··[··1132]··module_cuckoo_deprecated_generated.h
278 ··[··10f9]··module_magic_generated.h 
279 ··[··1112]··module_string_generated.h 
280 ··[··112c]··module_math_generated.h 
281 ··[··1144]··module_hash_generated.h 
282 ··[··115c]··module_dex_generated.h 
283 ··[··1173]··module_pe_generated.h282 ··[··1157]··module_pe_generated.h
 283 ··[··116d]··module_macho_generated.h
284 ··[··1189]··module_time_generated.h284 ··[··1186]··module_time_generated.h
285 ··[··11a1]··module_elf_generated.h285 ··[··119e]··module_cuckoo_generated.h
286 ··[··11b8]··filesystem_operations.h286 ··[··11b8]··filesystem_operations.h
287 ··[··11d0]··stdio2-decl.h287 ··[··11d0]··stdio2-decl.h
288 ··[··11de]··errno.h288 ··[··11de]··errno.h
289 ··[··11e6]··./src/types/hex_string.cpp289 ··[··11e6]··./src/types/hex_string.cpp
290 ··[··1201]··./src/types290 ··[··1201]··./src/types
291 ··[··120d]··./src/types/literal.cpp291 ··[··120d]··./src/types/literal.cpp
292 ··[··1225]··algorithmfwd.h292 ··[··1225]··algorithmfwd.h
⊟
35.0 KB
python3-yaramod-dbgsym_3.21.0-1.1_i386.deb
⊟
452 B
file list
    
Offset 1, 3 lines modifiedOffset 1, 3 lines modified
1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary1 -rw-r--r--···0········0········0········4·2024-07-03·21:18:46.000000·debian-binary
2 -rw-r--r--···0········0········0······532·2024-07-03·21:18:46.000000·control.tar.xz2 -rw-r--r--···0········0········0······536·2024-07-03·21:18:46.000000·control.tar.xz
3 -rw-r--r--···0········0········0·10380380·2024-07-03·21:18:46.000000·data.tar.xz3 -rw-r--r--···0········0········0·10380156·2024-07-03·21:18:46.000000·data.tar.xz
⊟
623 B
control.tar.xz
⊟
595 B
control.tar
⊟
347 B
./control
    
Offset 6, 8 lines modifiedOffset 6, 8 lines modified
6 Maintainer:·Yangfl·<mmyangfl@gmail.com>6 Maintainer:·Yangfl·<mmyangfl@gmail.com>
7 Installed-Size:·119417 Installed-Size:·11941
8 Depends:·python3-yaramod·(=·3.21.0-1.1)8 Depends:·python3-yaramod·(=·3.21.0-1.1)
9 Section:·debug9 Section:·debug
10 Priority:·optional10 Priority:·optional
11 Multi-Arch:·same11 Multi-Arch:·same
12 Description:·debug·symbols·for·python3-yaramod12 Description:·debug·symbols·for·python3-yaramod
13 Build-Ids:·719610224011e7e6c0f01023437139b438d83bb913 Build-Ids:·aa987715f4b27bd36fc1e4f75a7fe7ac3d8b0747
⊟
226 B
./md5sums
⊟
30.0 B
./md5sums
Files differ
⊟
178 B
line order
    
Offset 1, 1 lines modifiedOffset 1, 1 lines modified
1 usr/lib/debug/.build-id/71/9610224011e7e6c0f01023437139b438d83bb9.debug1 usr/lib/debug/.build-id/aa/987715f4b27bd36fc1e4f75a7fe7ac3d8b0747.debug
⊟
33.9 KB
data.tar.xz
⊟
33.9 KB
data.tar
⊟
1.4 KB
file list
    
Offset 1, 10 lines modifiedOffset 1, 10 lines modified
1 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./1 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./
2 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/2 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/
3 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/3 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/
4 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/4 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/
5 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/5 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/
6 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/71/6 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/aa/
7 -rw-r--r--···0·root·········(0)·root·········(0)·12216796·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/71/9610224011e7e6c0f01023437139b438d83bb9.debug7 -rw-r--r--···0·root·········(0)·root·········(0)·12216792·2024-07-03·21:18:46.000000·./usr/lib/debug/.build-id/aa/987715f4b27bd36fc1e4f75a7fe7ac3d8b0747.debug
8 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/8 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/
9 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/doc/9 drwxr-xr-x···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/doc/
10 lrwxrwxrwx···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/doc/python3-yaramod-dbgsym·->·python3-yaramod10 lrwxrwxrwx···0·root·········(0)·root·········(0)········0·2024-07-03·21:18:46.000000·./usr/share/doc/python3-yaramod-dbgsym·->·python3-yaramod
⊟
32.4 KB
./usr/lib/debug/.build-id/71/9610224011e7e6c0f01023437139b438d83bb9.debug vs.
./usr/lib/debug/.build-id/aa/987715f4b27bd36fc1e4f75a7fe7ac3d8b0747.debug
File has been modified after NT_GNU_BUILD_ID has been applied. Files 99% similar despite different names
⊟
867 B
readelf --wide --file-header {}
    
Offset 6, 15 lines modifiedOffset 6, 15 lines modified
6 ··OS/ABI:····························UNIX·-·GNU6 ··OS/ABI:····························UNIX·-·GNU
7 ··ABI·Version:·······················07 ··ABI·Version:·······················0
8 ··Type:······························DYN·(Shared·object·file)8 ··Type:······························DYN·(Shared·object·file)
9 ··Machine:···························Intel·803869 ··Machine:···························Intel·80386
10 ··Version:···························0x110 ··Version:···························0x1
11 ··Entry·point·address:···············0x011 ··Entry·point·address:···············0x0
12 ··Start·of·program·headers:··········52·(bytes·into·file)12 ··Start·of·program·headers:··········52·(bytes·into·file)
13 ··Start·of·section·headers:··········12215276·(bytes·into·file)13 ··Start·of·section·headers:··········12215272·(bytes·into·file)
14 ··Flags:·····························0x014 ··Flags:·····························0x0
15 ··Size·of·this·header:···············52·(bytes)15 ··Size·of·this·header:···············52·(bytes)
16 ··Size·of·program·headers:···········32·(bytes)16 ··Size·of·program·headers:···········32·(bytes)
17 ··Number·of·program·headers:·········1017 ··Number·of·program·headers:·········10
18 ··Size·of·section·headers:···········40·(bytes)18 ··Size·of·section·headers:···········40·(bytes)
19 ··Number·of·section·headers:·········3819 ··Number·of·section·headers:·········38
20 ··Section·header·string·table·index:·3720 ··Section·header·string·table·index:·37
⊟
2.42 KB
readelf --wide --sections {}
    
Offset 1, 8 lines modifiedOffset 1, 8 lines modified
1 There·are·38·section·headers,·starting·at·offset·0xba63ec:1 There·are·38·section·headers,·starting·at·offset·0xba63e8:
  
2 Section·Headers:2 Section·Headers:
3 ··[Nr]·Name··············Type············Addr·····Off····Size···ES·Flg·Lk·Inf·Al3 ··[Nr]·Name··············Type············Addr·····Off····Size···ES·Flg·Lk·Inf·Al
4 ··[·0]···················NULL············00000000·000000·000000·00······0···0··04 ··[·0]···················NULL············00000000·000000·000000·00······0···0··0
5 ··[·1]·.note.gnu.build-id·NOTE············00000174·000174·000024·00···A··0···0··45 ··[·1]·.note.gnu.build-id·NOTE············00000174·000174·000024·00···A··0···0··4
6 ··[·2]·.gnu.hash·········NOBITS··········00000198·000198·00026c·04···A··3···0··46 ··[·2]·.gnu.hash·········NOBITS··········00000198·000198·00026c·04···A··3···0··4
7 ··[·3]·.dynsym···········NOBITS··········00000404·000198·0024f0·10···A··4···1··47 ··[·3]·.dynsym···········NOBITS··········00000404·000198·0024f0·10···A··4···1··4
Offset 30, 18 lines modifiedOffset 30, 18 lines modified
30 ··[25]·.bss··············NOBITS··········002170a0·001010·000090·00··WA··0···0·3230 ··[25]·.bss··············NOBITS··········002170a0·001010·000090·00··WA··0···0·32
31 ··[26]·.comment··········PROGBITS········00000000·000198·00001f·01··MS··0···0··131 ··[26]·.comment··········PROGBITS········00000000·000198·00001f·01··MS··0···0··1
32 ··[27]·.debug_aranges····PROGBITS········00000000·0001b8·002c99·00···C··0···0··432 ··[27]·.debug_aranges····PROGBITS········00000000·0001b8·002c99·00···C··0···0··4
33 ··[28]·.debug_info·······PROGBITS········00000000·002e54·658783·00···C··0···0··433 ··[28]·.debug_info·······PROGBITS········00000000·002e54·658783·00···C··0···0··4
34 ··[29]·.debug_abbrev·····PROGBITS········00000000·65b5d8·0025a8·00···C··0···0··434 ··[29]·.debug_abbrev·····PROGBITS········00000000·65b5d8·0025a8·00···C··0···0··4
35 ··[30]·.debug_line·······PROGBITS········00000000·65db80·05d785·00···C··0···0··435 ··[30]·.debug_line·······PROGBITS········00000000·65db80·05d785·00···C··0···0··4
36 ··[31]·.debug_str········PROGBITS········00000000·6bb308·1fc875·01·MSC··0···0··436 ··[31]·.debug_str········PROGBITS········00000000·6bb308·1fc875·01·MSC··0···0··4
37 ··[32]·.debug_line_str···PROGBITS········00000000·8b7b80·000749·01·MSC··0···0··437 ··[32]·.debug_line_str···PROGBITS········00000000·8b7b80·000748·01·MSC··0···0··4
38 ··[33]·.debug_loclists···PROGBITS········00000000·8b82cc·128d14·00···C··0···0··438 ··[33]·.debug_loclists···PROGBITS········00000000·8b82c8·128d14·00···C··0···0··4
39 ··[34]·.debug_rnglists···PROGBITS········00000000·9e0fe0·04975a·00···C··0···0··439 ··[34]·.debug_rnglists···PROGBITS········00000000·9e0fdc·04975a·00···C··0···0··4
40 ··[35]·.symtab···········SYMTAB··········00000000·a2a73c·022540·10·····36·8198··440 ··[35]·.symtab···········SYMTAB··········00000000·a2a738·022540·10·····36·8198··4
41 ··[36]·.strtab···········STRTAB··········00000000·a4cc7c·1595f5·00······0···0··141 ··[36]·.strtab···········STRTAB··········00000000·a4cc78·1595f5·00······0···0··1
42 ··[37]·.shstrtab·········STRTAB··········00000000·ba6271·00017b·00······0···0··142 ··[37]·.shstrtab·········STRTAB··········00000000·ba626d·00017b·00······0···0··1
43 Key·to·Flags:43 Key·to·Flags:
44 ··W·(write),·A·(alloc),·X·(execute),·M·(merge),·S·(strings),·I·(info),44 ··W·(write),·A·(alloc),·X·(execute),·M·(merge),·S·(strings),·I·(info),
45 ··L·(link·order),·O·(extra·OS·processing·required),·G·(group),·T·(TLS),45 ··L·(link·order),·O·(extra·OS·processing·required),·G·(group),·T·(TLS),
46 ··C·(compressed),·x·(unknown),·o·(OS·specific),·E·(exclude),46 ··C·(compressed),·x·(unknown),·o·(OS·specific),·E·(exclude),
47 ··R·(retain),·D·(mbind),·p·(processor·specific)47 ··R·(retain),·D·(mbind),·p·(processor·specific)
⊟
430 B
readelf --wide --notes {}
    
Offset 1, 4 lines modifiedOffset 1, 4 lines modified
  
1 Displaying·notes·found·in:·.note.gnu.build-id1 Displaying·notes·found·in:·.note.gnu.build-id
2 ··Owner················Data·size·»  Description2 ··Owner················Data·size·»  Description
3 ··GNU··················0x00000014»  NT_GNU_BUILD_ID·(unique·build·ID·bitstring)»   ····Build·ID:·719610224011e7e6c0f01023437139b438d83bb93 ··GNU··················0x00000014»  NT_GNU_BUILD_ID·(unique·build·ID·bitstring)»   ····Build·ID:·aa987715f4b27bd36fc1e4f75a7fe7ac3d8b0747
⊟
2.65 KB
readelf --wide --debug-dump=rawline {}
    
Offset 336, 26 lines modifiedOffset 336, 26 lines modified
336 ··258»    (udata)»     6»    (line_strp)» (offset:·0x1001):·hex_string.h336 ··258»    (udata)»     6»    (line_strp)» (offset:·0x1001):·hex_string.h
337 ··259»    (udata)»     6»    (line_strp)» (offset:·0x100e):·meta.h337 ··259»    (udata)»     6»    (line_strp)» (offset:·0x100e):·meta.h
338 ··260»    (udata)»     5»    (line_strp)» (offset:·0x1015):·uid_generator.h338 ··260»    (udata)»     5»    (line_strp)» (offset:·0x1015):·uid_generator.h
339 ··261»    (udata)»     6»    (line_strp)» (offset:·0x1025):·sections_summary.h339 ··261»    (udata)»     6»    (line_strp)» (offset:·0x1025):·sections_summary.h
340 ··262»    (udata)»     5»    (line_strp)» (offset:·0x1038):·value.h340 ··262»    (udata)»     5»    (line_strp)» (offset:·0x1038):·value.h
341 ··263»    (udata)»     6»    (line_strp)» (offset:·0x1040):·features.h341 ··263»    (udata)»     6»    (line_strp)» (offset:·0x1040):·features.h
342 ··264»    (udata)»     18»   (line_strp)»(offset:·0x104b):·module_console_generated.h342 ··264»    (udata)»     18»   (line_strp)»(offset:·0x104b):·module_console_generated.h
343 ··265»    (udata)»     18»   (line_strp)»(offset:·0x1066):·module_cuckoo_generated.h343 ··265»    (udata)»     18»   (line_strp)»(offset:·0x1066):·module_hash_generated.h
344 ··266»    (udata)»     18»   (line_strp)»(offset:·0x1080):·module_dotnet_generated.h344 ··266»    (udata)»     18»   (line_strp)»(offset:·0x107e):·module_elf_generated.h
345 ··267»    (udata)»     18»   (line_strp)»(offset:·0x109a):·module_macho_generated.h345 ··267»    (udata)»     18»   (line_strp)»(offset:·0x1095):·module_math_generated.h
346 ··268»    (udata)»     18»   (line_strp)»(offset:·0x10b3):·module_cuckoo_deprecated_generated.h346 ··268»    (udata)»     18»   (line_strp)»(offset:·0x10ad):·module_string_generated.h
347 ··269»    (udata)»     18»   (line_strp)»(offset:·0x10d8):·module_magic_generated.h347 ··269»    (udata)»     18»   (line_strp)»(offset:·0x10c7):·module_magic_generated.h
 348 ··270»    (udata)»     18»   (line_strp)»(offset:·0x10e0):·module_dex_generated.h
348 ··270»    (udata)»     18»   (line_strp)»(offset:·0x10f1):·module_string_generated.h349 ··271»    (udata)»     18»   (line_strp)»(offset:·0x10f7):·module_dotnet_generated.h
349 ··271»    (udata)»     18»   (line_strp)»(offset:·0x110b):·module_math_generated.h350 ··272»    (udata)»     18»   (line_strp)»(offset:·0x1111):·module_cuckoo_deprecated_generated.h
350 ··272»    (udata)»     18»   (line_strp)»(offset:·0x1123):·module_hash_generated.h 
351 ··273»    (udata)»     18»   (line_strp)»(offset:·0x113b):·module_dex_generated.h351 ··273»    (udata)»     18»   (line_strp)»(offset:·0x1136):·module_pe_generated.h
352 ··274»    (udata)»     18»   (line_strp)»(offset:·0x1152):·module_pe_generated.h352 ··274»    (udata)»     18»   (line_strp)»(offset:·0x114c):·module_macho_generated.h
353 ··275»    (udata)»     18»   (line_strp)»(offset:·0x1168):·module_time_generated.h353 ··275»    (udata)»     18»   (line_strp)»(offset:·0x1165):·module_time_generated.h
354 ··276»    (udata)»     18»   (line_strp)»(offset:·0x1180):·module_elf_generated.h354 ··276»    (udata)»     18»   (line_strp)»(offset:·0x117d):·module_cuckoo_generated.h
355 ··277»    (udata)»     21»   (line_strp)»(offset:·0x1197):·modifying_visitor.h355 ··277»    (udata)»     21»   (line_strp)»(offset:·0x1197):·modifying_visitor.h
356 ··278»    (udata)»     21»   (line_strp)»(offset:·0xb2d):·utils.h356 ··278»    (udata)»     21»   (line_strp)»(offset:·0xb2d):·utils.h
357 ··279»    (udata)»     21»   (line_strp)»(offset:·0x11ab):·observing_visitor.h357 ··279»    (udata)»     21»   (line_strp)»(offset:·0x11ab):·observing_visitor.h
358 ··280»    (udata)»     23»   (line_strp)»(offset:·0x11bf):·core.h358 ··280»    (udata)»     23»   (line_strp)»(offset:·0x11bf):·core.h
359 ··281»    (udata)»     23»   (line_strp)»(offset:·0x11c6):·format.h359 ··281»    (udata)»     23»   (line_strp)»(offset:·0x11c6):·format.h
360 ··282»    (udata)»     14»   (line_strp)»(offset:·0x11cf):·precedence.h360 ··282»    (udata)»     14»   (line_strp)»(offset:·0x11cf):·precedence.h
361 ··283»    (udata)»     14»   (line_strp)»(offset:·0x11dc):·action.h361 ··283»    (udata)»     14»   (line_strp)»(offset:·0x11dc):·action.h
⊟
22.1 KB
readelf --wide --debug-dump=info {}
    
Offset 1248310, 109 lines modifiedOffset 1248310, 109 lines modified
1248310 ····<240051>···DW_AT_object_pointer:·(ref_udata)·<0x240055>1248310 ····<240051>···DW_AT_object_pointer:·(ref_udata)·<0x240055>
1248311 ·<5><240055>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)1248311 ·<5><240055>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)
1248312 ····<240056>···DW_AT_type········:·(ref_udata)·<0x2576d2>1248312 ····<240056>···DW_AT_type········:·(ref_udata)·<0x2576d2>
1248313 ····<24005a>···DW_AT_artificial··:·(flag_present)·11248313 ····<24005a>···DW_AT_artificial··:·(flag_present)·1
1248314 ·<5><24005a>:·Abbrev·Number:·01248314 ·<5><24005a>:·Abbrev·Number:·0
1248315 ·<4><24005b>:·Abbrev·Number:·01248315 ·<4><24005b>:·Abbrev·Number:·0
1248316 ·<3><24005c>:·Abbrev·Number:·344·(DW_TAG_class_type)1248316 ·<3><24005c>:·Abbrev·Number:·344·(DW_TAG_class_type)
1248317 ····<24005e>···DW_AT_name········:·(strp)·(offset:·0x32c18f):·Gmodule_cuckoo1248317 ····<24005e>···DW_AT_name········:·(strp)·(offset:·0xfc2bf):·Gmodule_hash
1248318 ····<240062>···DW_AT_byte_size···:·(data1)·481248318 ····<240062>···DW_AT_byte_size···:·(data1)·48
1248319 ····<240063>···DW_AT_decl_file···:·(data2)·2651248319 ····<240063>···DW_AT_decl_file···:·(data2)·265
1248320 ····<240065>···DW_AT_decl_line···:·(data1)·141248320 ····<240065>···DW_AT_decl_line···:·(data1)·14
1248321 ····<240066>···DW_AT_decl_column·:·(data1)·81248321 ····<240066>···DW_AT_decl_column·:·(data1)·8
1248322 ····<240067>···DW_AT_sibling·····:·(ref_udata)·<0x240089>1248322 ····<240067>···DW_AT_sibling·····:·(ref_udata)·<0x240089>
1248323 ·<4><24006b>:·Abbrev·Number:·62·(DW_TAG_inheritance)1248323 ·<4><24006b>:·Abbrev·Number:·62·(DW_TAG_inheritance)
1248324 ····<24006c>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent1248324 ····<24006c>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent
1248325 ····<240070>···DW_AT_data_member_location:·(data1)·01248325 ····<240070>···DW_AT_data_member_location:·(data1)·0
1248326 ····<240071>···DW_AT_accessibility:·(data1)·1»   (public)1248326 ····<240071>···DW_AT_accessibility:·(data1)·1»   (public)
1248327 ·<4><240072>:·Abbrev·Number:·389·(DW_TAG_subprogram)1248327 ·<4><240072>:·Abbrev·Number:·389·(DW_TAG_subprogram)
1248328 ····<240074>···DW_AT_external····:·(flag_present)·11248328 ····<240074>···DW_AT_external····:·(flag_present)·1
1248329 ····<240074>···DW_AT_name········:·(strp)·(offset:·0x32c18f):·Gmodule_cuckoo1248329 ····<240074>···DW_AT_name········:·(strp)·(offset:·0xfc2bf):·Gmodule_hash
1248330 ····<240078>···DW_AT_decl_file···:·(data2)·2651248330 ····<240078>···DW_AT_decl_file···:·(data2)·265
1248331 ····<24007a>···DW_AT_decl_line···:·(implicit_const)·171248331 ····<24007a>···DW_AT_decl_line···:·(implicit_const)·17
1248332 ····<24007a>···DW_AT_decl_column·:·(implicit_const)·21248332 ····<24007a>···DW_AT_decl_column·:·(implicit_const)·2
1248333 ····<24007a>···DW_AT_linkage_name:·(strp)·(offset:·0x89e69e):·_ZN7yaramod7modules14Gmodule_cuckooC4Ev1248333 ····<24007a>···DW_AT_linkage_name:·(strp)·(offset:·0x6d879c):·_ZN7yaramod7modules12Gmodule_hashC4Ev
1248334 ····<24007e>···DW_AT_accessibility:·(implicit_const)·1»  (public)1248334 ····<24007e>···DW_AT_accessibility:·(implicit_const)·1»  (public)
1248335 ····<24007e>···DW_AT_declaration·:·(flag_present)·11248335 ····<24007e>···DW_AT_declaration·:·(flag_present)·1
1248336 ····<24007e>···DW_AT_object_pointer:·(ref_udata)·<0x240082>1248336 ····<24007e>···DW_AT_object_pointer:·(ref_udata)·<0x240082>
1248337 ·<5><240082>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)1248337 ·<5><240082>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)
1248338 ····<240083>···DW_AT_type········:·(ref_udata)·<0x2576d7>1248338 ····<240083>···DW_AT_type········:·(ref_udata)·<0x2576d7>
1248339 ····<240087>···DW_AT_artificial··:·(flag_present)·11248339 ····<240087>···DW_AT_artificial··:·(flag_present)·1
1248340 ·<5><240087>:·Abbrev·Number:·01248340 ·<5><240087>:·Abbrev·Number:·0
1248341 ·<4><240088>:·Abbrev·Number:·01248341 ·<4><240088>:·Abbrev·Number:·0
1248342 ·<3><240089>:·Abbrev·Number:·344·(DW_TAG_class_type)1248342 ·<3><240089>:·Abbrev·Number:·344·(DW_TAG_class_type)
1248343 ····<24008b>···DW_AT_name········:·(strp)·(offset:·0x1b6d26):·Gmodule_dotnet1248343 ····<24008b>···DW_AT_name········:·(strp)·(offset:·0x646393):·Gmodule_elf
1248344 ····<24008f>···DW_AT_byte_size···:·(data1)·481248344 ····<24008f>···DW_AT_byte_size···:·(data1)·48
1248345 ····<240090>···DW_AT_decl_file···:·(data2)·2661248345 ····<240090>···DW_AT_decl_file···:·(data2)·266
1248346 ····<240092>···DW_AT_decl_line···:·(data1)·141248346 ····<240092>···DW_AT_decl_line···:·(data1)·14
1248347 ····<240093>···DW_AT_decl_column·:·(data1)·81248347 ····<240093>···DW_AT_decl_column·:·(data1)·8
1248348 ····<240094>···DW_AT_sibling·····:·(ref_udata)·<0x2400b6>1248348 ····<240094>···DW_AT_sibling·····:·(ref_udata)·<0x2400b6>
1248349 ·<4><240098>:·Abbrev·Number:·62·(DW_TAG_inheritance)1248349 ·<4><240098>:·Abbrev·Number:·62·(DW_TAG_inheritance)
1248350 ····<240099>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent1248350 ····<240099>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent
1248351 ····<24009d>···DW_AT_data_member_location:·(data1)·01248351 ····<24009d>···DW_AT_data_member_location:·(data1)·0
1248352 ····<24009e>···DW_AT_accessibility:·(data1)·1»   (public)1248352 ····<24009e>···DW_AT_accessibility:·(data1)·1»   (public)
1248353 ·<4><24009f>:·Abbrev·Number:·389·(DW_TAG_subprogram)1248353 ·<4><24009f>:·Abbrev·Number:·389·(DW_TAG_subprogram)
1248354 ····<2400a1>···DW_AT_external····:·(flag_present)·11248354 ····<2400a1>···DW_AT_external····:·(flag_present)·1
1248355 ····<2400a1>···DW_AT_name········:·(strp)·(offset:·0x1b6d26):·Gmodule_dotnet1248355 ····<2400a1>···DW_AT_name········:·(strp)·(offset:·0x646393):·Gmodule_elf
1248356 ····<2400a5>···DW_AT_decl_file···:·(data2)·2661248356 ····<2400a5>···DW_AT_decl_file···:·(data2)·266
1248357 ····<2400a7>···DW_AT_decl_line···:·(implicit_const)·171248357 ····<2400a7>···DW_AT_decl_line···:·(implicit_const)·17
1248358 ····<2400a7>···DW_AT_decl_column·:·(implicit_const)·21248358 ····<2400a7>···DW_AT_decl_column·:·(implicit_const)·2
1248359 ····<2400a7>···DW_AT_linkage_name:·(strp)·(offset:·0x1739fe):·_ZN7yaramod7modules14Gmodule_dotnetC4Ev1248359 ····<2400a7>···DW_AT_linkage_name:·(strp)·(offset:·0x3df125):·_ZN7yaramod7modules11Gmodule_elfC4Ev
1248360 ····<2400ab>···DW_AT_accessibility:·(implicit_const)·1»  (public)1248360 ····<2400ab>···DW_AT_accessibility:·(implicit_const)·1»  (public)
1248361 ····<2400ab>···DW_AT_declaration·:·(flag_present)·11248361 ····<2400ab>···DW_AT_declaration·:·(flag_present)·1
1248362 ····<2400ab>···DW_AT_object_pointer:·(ref_udata)·<0x2400af>1248362 ····<2400ab>···DW_AT_object_pointer:·(ref_udata)·<0x2400af>
1248363 ·<5><2400af>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)1248363 ·<5><2400af>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)
1248364 ····<2400b0>···DW_AT_type········:·(ref_udata)·<0x2576dc>1248364 ····<2400b0>···DW_AT_type········:·(ref_udata)·<0x2576dc>
1248365 ····<2400b4>···DW_AT_artificial··:·(flag_present)·11248365 ····<2400b4>···DW_AT_artificial··:·(flag_present)·1
1248366 ·<5><2400b4>:·Abbrev·Number:·01248366 ·<5><2400b4>:·Abbrev·Number:·0
1248367 ·<4><2400b5>:·Abbrev·Number:·01248367 ·<4><2400b5>:·Abbrev·Number:·0
1248368 ·<3><2400b6>:·Abbrev·Number:·344·(DW_TAG_class_type)1248368 ·<3><2400b6>:·Abbrev·Number:·344·(DW_TAG_class_type)
1248369 ····<2400b8>···DW_AT_name········:·(strp)·(offset:·0x2385a9):·Gmodule_macho1248369 ····<2400b8>···DW_AT_name········:·(strp)·(offset:·0x858095):·Gmodule_math
1248370 ····<2400bc>···DW_AT_byte_size···:·(data1)·481248370 ····<2400bc>···DW_AT_byte_size···:·(data1)·48
1248371 ····<2400bd>···DW_AT_decl_file···:·(data2)·2671248371 ····<2400bd>···DW_AT_decl_file···:·(data2)·267
1248372 ····<2400bf>···DW_AT_decl_line···:·(data1)·141248372 ····<2400bf>···DW_AT_decl_line···:·(data1)·14
1248373 ····<2400c0>···DW_AT_decl_column·:·(data1)·81248373 ····<2400c0>···DW_AT_decl_column·:·(data1)·8
1248374 ····<2400c1>···DW_AT_sibling·····:·(ref_udata)·<0x2400e3>1248374 ····<2400c1>···DW_AT_sibling·····:·(ref_udata)·<0x2400e3>
1248375 ·<4><2400c5>:·Abbrev·Number:·62·(DW_TAG_inheritance)1248375 ·<4><2400c5>:·Abbrev·Number:·62·(DW_TAG_inheritance)
1248376 ····<2400c6>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent1248376 ····<2400c6>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent
1248377 ····<2400ca>···DW_AT_data_member_location:·(data1)·01248377 ····<2400ca>···DW_AT_data_member_location:·(data1)·0
1248378 ····<2400cb>···DW_AT_accessibility:·(data1)·1»   (public)1248378 ····<2400cb>···DW_AT_accessibility:·(data1)·1»   (public)
1248379 ·<4><2400cc>:·Abbrev·Number:·389·(DW_TAG_subprogram)1248379 ·<4><2400cc>:·Abbrev·Number:·389·(DW_TAG_subprogram)
1248380 ····<2400ce>···DW_AT_external····:·(flag_present)·11248380 ····<2400ce>···DW_AT_external····:·(flag_present)·1
1248381 ····<2400ce>···DW_AT_name········:·(strp)·(offset:·0x2385a9):·Gmodule_macho1248381 ····<2400ce>···DW_AT_name········:·(strp)·(offset:·0x858095):·Gmodule_math
1248382 ····<2400d2>···DW_AT_decl_file···:·(data2)·2671248382 ····<2400d2>···DW_AT_decl_file···:·(data2)·267
1248383 ····<2400d4>···DW_AT_decl_line···:·(implicit_const)·171248383 ····<2400d4>···DW_AT_decl_line···:·(implicit_const)·17
1248384 ····<2400d4>···DW_AT_decl_column·:·(implicit_const)·21248384 ····<2400d4>···DW_AT_decl_column·:·(implicit_const)·2
1248385 ····<2400d4>···DW_AT_linkage_name:·(strp)·(offset:·0x2049b7):·_ZN7yaramod7modules13Gmodule_machoC4Ev1248385 ····<2400d4>···DW_AT_linkage_name:·(strp)·(offset:·0x16915c):·_ZN7yaramod7modules12Gmodule_mathC4Ev
1248386 ····<2400d8>···DW_AT_accessibility:·(implicit_const)·1»  (public)1248386 ····<2400d8>···DW_AT_accessibility:·(implicit_const)·1»  (public)
1248387 ····<2400d8>···DW_AT_declaration·:·(flag_present)·11248387 ····<2400d8>···DW_AT_declaration·:·(flag_present)·1
1248388 ····<2400d8>···DW_AT_object_pointer:·(ref_udata)·<0x2400dc>1248388 ····<2400d8>···DW_AT_object_pointer:·(ref_udata)·<0x2400dc>
1248389 ·<5><2400dc>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)1248389 ·<5><2400dc>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)
1248390 ····<2400dd>···DW_AT_type········:·(ref_udata)·<0x2576e1>1248390 ····<2400dd>···DW_AT_type········:·(ref_udata)·<0x2576e1>
1248391 ····<2400e1>···DW_AT_artificial··:·(flag_present)·11248391 ····<2400e1>···DW_AT_artificial··:·(flag_present)·1
1248392 ·<5><2400e1>:·Abbrev·Number:·01248392 ·<5><2400e1>:·Abbrev·Number:·0
1248393 ·<4><2400e2>:·Abbrev·Number:·01248393 ·<4><2400e2>:·Abbrev·Number:·0
1248394 ·<3><2400e3>:·Abbrev·Number:·344·(DW_TAG_class_type)1248394 ·<3><2400e3>:·Abbrev·Number:·344·(DW_TAG_class_type)
1248395 ····<2400e5>···DW_AT_name········:·(strp)·(offset:·0x8c4ea1):·Gmodule_cuckoo_deprecated1248395 ····<2400e5>···DW_AT_name········:·(strp)·(offset:·0x741069):·Gmodule_string
1248396 ····<2400e9>···DW_AT_byte_size···:·(data1)·481248396 ····<2400e9>···DW_AT_byte_size···:·(data1)·48
1248397 ····<2400ea>···DW_AT_decl_file···:·(data2)·2681248397 ····<2400ea>···DW_AT_decl_file···:·(data2)·268
1248398 ····<2400ec>···DW_AT_decl_line···:·(data1)·141248398 ····<2400ec>···DW_AT_decl_line···:·(data1)·14
1248399 ····<2400ed>···DW_AT_decl_column·:·(data1)·81248399 ····<2400ed>···DW_AT_decl_column·:·(data1)·8
1248400 ····<2400ee>···DW_AT_sibling·····:·(ref_udata)·<0x240110>1248400 ····<2400ee>···DW_AT_sibling·····:·(ref_udata)·<0x240110>
1248401 ·<4><2400f2>:·Abbrev·Number:·62·(DW_TAG_inheritance)1248401 ·<4><2400f2>:·Abbrev·Number:·62·(DW_TAG_inheritance)
1248402 ····<2400f3>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent1248402 ····<2400f3>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent
1248403 ····<2400f7>···DW_AT_data_member_location:·(data1)·01248403 ····<2400f7>···DW_AT_data_member_location:·(data1)·0
1248404 ····<2400f8>···DW_AT_accessibility:·(data1)·1»   (public)1248404 ····<2400f8>···DW_AT_accessibility:·(data1)·1»   (public)
1248405 ·<4><2400f9>:·Abbrev·Number:·389·(DW_TAG_subprogram)1248405 ·<4><2400f9>:·Abbrev·Number:·389·(DW_TAG_subprogram)
1248406 ····<2400fb>···DW_AT_external····:·(flag_present)·11248406 ····<2400fb>···DW_AT_external····:·(flag_present)·1
1248407 ····<2400fb>···DW_AT_name········:·(strp)·(offset:·0x8c4ea1):·Gmodule_cuckoo_deprecated1248407 ····<2400fb>···DW_AT_name········:·(strp)·(offset:·0x741069):·Gmodule_string
1248408 ····<2400ff>···DW_AT_decl_file···:·(data2)·2681248408 ····<2400ff>···DW_AT_decl_file···:·(data2)·268
1248409 ····<240101>···DW_AT_decl_line···:·(implicit_const)·171248409 ····<240101>···DW_AT_decl_line···:·(implicit_const)·17
1248410 ····<240101>···DW_AT_decl_column·:·(implicit_const)·21248410 ····<240101>···DW_AT_decl_column·:·(implicit_const)·2
1248411 ····<240101>···DW_AT_linkage_name:·(strp)·(offset:·0x4edcdc):·_ZN7yaramod7modules25Gmodule_cuckoo_deprecatedC4Ev1248411 ····<240101>···DW_AT_linkage_name:·(strp)·(offset:·0x363fc8):·_ZN7yaramod7modules14Gmodule_stringC4Ev
1248412 ····<240105>···DW_AT_accessibility:·(implicit_const)·1»  (public)1248412 ····<240105>···DW_AT_accessibility:·(implicit_const)·1»  (public)
1248413 ····<240105>···DW_AT_declaration·:·(flag_present)·11248413 ····<240105>···DW_AT_declaration·:·(flag_present)·1
1248414 ····<240105>···DW_AT_object_pointer:·(ref_udata)·<0x240109>1248414 ····<240105>···DW_AT_object_pointer:·(ref_udata)·<0x240109>
1248415 ·<5><240109>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)1248415 ·<5><240109>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)
1248416 ····<24010a>···DW_AT_type········:·(ref_udata)·<0x2576e6>1248416 ····<24010a>···DW_AT_type········:·(ref_udata)·<0x2576e6>
1248417 ····<24010e>···DW_AT_artificial··:·(flag_present)·11248417 ····<24010e>···DW_AT_artificial··:·(flag_present)·1
1248418 ·<5><24010e>:·Abbrev·Number:·01248418 ·<5><24010e>:·Abbrev·Number:·0
Offset 1248440, 135 lines modifiedOffset 1248440, 135 lines modified
1248440 ····<240132>···DW_AT_object_pointer:·(ref_udata)·<0x240136>1248440 ····<240132>···DW_AT_object_pointer:·(ref_udata)·<0x240136>
1248441 ·<5><240136>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)1248441 ·<5><240136>:·Abbrev·Number:·4·(DW_TAG_formal_parameter)
1248442 ····<240137>···DW_AT_type········:·(ref_udata)·<0x2576eb>1248442 ····<240137>···DW_AT_type········:·(ref_udata)·<0x2576eb>
1248443 ····<24013b>···DW_AT_artificial··:·(flag_present)·11248443 ····<24013b>···DW_AT_artificial··:·(flag_present)·1
1248444 ·<5><24013b>:·Abbrev·Number:·01248444 ·<5><24013b>:·Abbrev·Number:·0
1248445 ·<4><24013c>:·Abbrev·Number:·01248445 ·<4><24013c>:·Abbrev·Number:·0
1248446 ·<3><24013d>:·Abbrev·Number:·344·(DW_TAG_class_type)1248446 ·<3><24013d>:·Abbrev·Number:·344·(DW_TAG_class_type)
1248447 ····<24013f>···DW_AT_name········:·(strp)·(offset:·0x741069):·Gmodule_string1248447 ····<24013f>···DW_AT_name········:·(strp)·(offset:·0x2ba619):·Gmodule_dex
1248448 ····<240143>···DW_AT_byte_size···:·(data1)·481248448 ····<240143>···DW_AT_byte_size···:·(data1)·48
1248449 ····<240144>···DW_AT_decl_file···:·(data2)·2701248449 ····<240144>···DW_AT_decl_file···:·(data2)·270
1248450 ····<240146>···DW_AT_decl_line···:·(data1)·141248450 ····<240146>···DW_AT_decl_line···:·(data1)·14
1248451 ····<240147>···DW_AT_decl_column·:·(data1)·81248451 ····<240147>···DW_AT_decl_column·:·(data1)·8
1248452 ····<240148>···DW_AT_sibling·····:·(ref_udata)·<0x24016a>1248452 ····<240148>···DW_AT_sibling·····:·(ref_udata)·<0x24016a>
1248453 ·<4><24014c>:·Abbrev·Number:·62·(DW_TAG_inheritance)1248453 ·<4><24014c>:·Abbrev·Number:·62·(DW_TAG_inheritance)
1248454 ····<24014d>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent1248454 ····<24014d>···DW_AT_type········:·(ref_udata)·<0x23ff7d>,·ModuleContent
1248455 ····<240151>···DW_AT_data_member_location:·(data1)·01248455 ····<240151>···DW_AT_data_member_location:·(data1)·0
1248456 ····<240152>···DW_AT_accessibility:·(data1)·1»   (public)1248456 ····<240152>···DW_AT_accessibility:·(data1)·1»   (public)
Max diff block lines reached; 14262/22581 bytes (63.16%) of diff not shown.
⊟
2.34 KB
strings --all --bytes=8 {}
    
Offset 1, 8 lines modifiedOffset 1, 8 lines modified
1 GCC:·(Debian·14.2.0-17)·14.2.01 GGCC:·(Debian·14.2.0-17)·14.2.0
2 6Wf5emke2 6Wf5emke
3 UuyPUwWV3 UuyPUwWV
4 tSOVS/VS4 tSOVS/VS
5 C.S_q=!_u5 C.S_q=!_u
6 W|QQ8HLz6 W|QQ8HLz
7 \/+9;0ry7 \/+9;0ry
8 6%dq]7y}8 6%dq]7y}
Offset 1518, 110 lines modifiedOffset 1518, 106 lines modified
1518 (:W!EQO0z1518 (:W!EQO0z
1519 9Q$EQon]1519 9Q$EQon]
1520 =h<RxPv\1520 =h<RxPv\
1521 ZGE3[c6-1521 ZGE3[c6-
1522 iKZL)f!|b.H1522 iKZL)f!|b.H
1523 mgwvvfvv~#1523 mgwvvfvv~#
1524 yh',Lu|p1524 yh',Lu|p
1525 8'8JIdi- 
1526 =!j<!j=!1525 =!j<!j=!
 1526 =!j<!j=!
 1527 ;SPf.bQ_PPO
 1528 r+idYX5y)
 1529 4V»     I»    I»   I»  I» I»I»       I»      I»     I»    I»   i
 1530 eCEA:f;d
 1531 aM3w5F(:p\
 1532 +:X6/s^Nf
 1533 p{0hq`!CZ
 1534 ?·g?|UB7@
 1535 \7_u37[A
 1536 UL~P2O.l
 1537 eJDh{S"N
 1538 QZJvFL?c
 1539 =>s>I*7+:_]
 1540 +B)}Y$EJ
 1541 Aja%;qqK
 1542 -<ppnPsw
 1543 );`)Xb.}S
 1544 Qw5y43s(
 1545 H6%e#))W&
 1546 rMo%e]6%e
 1547 H,f.seo%
 1548 ~8m_%}#,0^
 1549 &is&kP;~
 1550 @CD/[@3m
 1551 V{p/LB'U
 1552 5j*_}T`K
 1553 L2~Xo32:{
 1554 8qB{w6'b<|>»    
 1555 70wR@p4'
 1556 xS8zp·%r
 1557 Sm08VG1e
 1558 ZJafyLPO
 1559 8>F.4<]V
 1560 IC>T%]6q
 1561 z9Kbayu>,
 1562 bQ:p8k)(
 1563 z66l\+,J
 1564 vloEY#?1$
 1565 ee+G7bT(2
 1566 px{YlPF&
 1567 5.nm$4» [a@\p
 1568 h~-:s<w»%
 1569 0cry_kgry
 1570 "##VH*» Z<
 1571 ·4\^jXFB
 1572 Jmc;&G&GE
 1573 skI`l@» :
 1574 9sa3Mz+{)
 1575 >V^|fefRx*^
 1576 jc$}.s·q
 1577 =&>eG~G·)
 1578 !w?e"aGo
 1579 5v*}wkP^BV
 1580 .*O^^Rkb
 1581 Y,`_/(b12YQ
 1582 zd0YZzFw
 1583 h=ws0.`K
 1584 QWB{»   C{D
 1585 rOVrd%GgJ
 1586 T%@yQ'`t
 1587 W;8{rWp6
 1588 j3C<]M\>
 1589 {q!ob&U»
 1590 vcmXY5B|
 1591 nTD~Z!8n
 1592 ((3P'R`6
 1593 #4Q.#dO_
 1594 &|?ZNrTi
 1595 ~qv$-Jn2sE(
 1596 \1F_8;ka*
 1597 =!ba{BQz
 1598 <lk,Ij,X=S
 1599 u&a\>hGX
 1600 Q<·rxnL!
 1601 y23AO,)l&(»     
 1602 _Ak.Z\l4wzS
 1603 /k5S:riL
 1604 ,pxrQeh7r
 1605 p9]p1k;<
 1606 ~.`a>EJ^2W
 1607 K5M4IF]tX
 1608 -dN6%V'+
 1609 Ok:9'!tr)
 1610 @OY6=}K[0
 1611 7.Rq\Lfq
 1612 ~Xa·Cr8P
 1613 %-|K<$bM
 1614 +Q-Y.lI»
 1615 R%FJK4)%|R^
 1616 IY.FJS4)e|R
1527 yB$=!:<! 
1528 yB$=!:<! 
1529 FRi@*'eS 
1530 S8G}I}r0Jb 
1531 y~4~3,wQ 
1532 (](%|JK$C 
1533 S~f%6LCd 
1534 [2e.`$O1 
1535 .OB%osqF 
1536 l#7N6ngop 
1537 ISm3w1pm 
1538 n'(%sk6% 
1539 Cy7k@f6· 
1540 p»      San.nb 
1541 yMZO9}8JA` 
1542 op%qxg&U 
1543 CKC<>4RO 
1544 I;8»    J(r; 
Max diff block lines reached; 65/2344 bytes (2.77%) of diff not shown.
⊟
1.41 KB
readelf --wide --decompress --string-dump=.debug_line_str {}
    
Offset 275, 26 lines modifiedOffset 275, 26 lines modified
275 ··[··1001]··hex_string.h275 ··[··1001]··hex_string.h
276 ··[··100e]··meta.h276 ··[··100e]··meta.h
277 ··[··1015]··uid_generator.h277 ··[··1015]··uid_generator.h
278 ··[··1025]··sections_summary.h278 ··[··1025]··sections_summary.h
279 ··[··1038]··value.h279 ··[··1038]··value.h
280 ··[··1040]··features.h280 ··[··1040]··features.h
281 ··[··104b]··module_console_generated.h281 ··[··104b]··module_console_generated.h
282 ··[··1066]··module_cuckoo_generated.h282 ··[··1066]··module_hash_generated.h
283 ··[··1080]··module_dotnet_generated.h283 ··[··107e]··module_elf_generated.h
284 ··[··109a]··module_macho_generated.h284 ··[··1095]··module_math_generated.h
285 ··[··10b3]··module_cuckoo_deprecated_generated.h 
286 ··[··10d8]··module_magic_generated.h 
287 ··[··10f1]··module_string_generated.h285 ··[··10ad]··module_string_generated.h
288 ··[··110b]··module_math_generated.h286 ··[··10c7]··module_magic_generated.h
289 ··[··1123]··module_hash_generated.h 
290 ··[··113b]··module_dex_generated.h287 ··[··10e0]··module_dex_generated.h
 288 ··[··10f7]··module_dotnet_generated.h
 289 ··[··1111]··module_cuckoo_deprecated_generated.h
291 ··[··1152]··module_pe_generated.h290 ··[··1136]··module_pe_generated.h
 291 ··[··114c]··module_macho_generated.h
292 ··[··1168]··module_time_generated.h292 ··[··1165]··module_time_generated.h
293 ··[··1180]··module_elf_generated.h293 ··[··117d]··module_cuckoo_generated.h
294 ··[··1197]··modifying_visitor.h294 ··[··1197]··modifying_visitor.h
295 ··[··11ab]··observing_visitor.h295 ··[··11ab]··observing_visitor.h
296 ··[··11bf]··core.h296 ··[··11bf]··core.h
297 ··[··11c6]··format.h297 ··[··11c6]··format.h
298 ··[··11cf]··precedence.h298 ··[··11cf]··precedence.h
299 ··[··11dc]··action.h299 ··[··11dc]··action.h
300 ··[··11e5]··raw_logging.h300 ··[··11e5]··raw_logging.h
Generated by diffoscope 289