GunshipPenguin / kiteshield

Packer/Protector for x86-64 ELF binaries on Linux
MIT License
131 stars 27 forks source link

binary is stripped not applying inner encryption #3

Closed MyraBaba closed 2 years ago

MyraBaba commented 2 years ago

Hi,

I am trying eith:

kitty bin1 bin1.ps

gives below output :

reading input binary trun applying inner encryption binary is stripped, not applying inner encryption could not apply inner encryption

GunshipPenguin commented 2 years ago

Hi,

You're trying to pack a binary with layer 1 and 2 encryption that has been stripped with the strip command.

As stated in the readme:

Note that for layer 2 encryption to be applied, the input binary must not be stripped as Kiteshield relies on the symbol table being present. On most Linux distros, standard system utilities (eg. /bin/ls) are generally stripped.

You can still however pack stripped binaries without layer 2 encryption using the -n flag:

./packer/kiteshield -n program packed.ks This will produce an output binary packed with only layer 1 encryption and the runtime engine omitted.

MyraBaba commented 2 years ago

@GunshipPenguin thanks.

I check the bin yes its stripped ..

I will compile with obj info not stripped and try again. With this way it could more secure right ?

MyraBaba commented 2 years ago

@GunshipPenguin

Succesfully encrypted the binary now.

But when run its runnign waiting cpu %100 and not starting the actual program.

here 👍 kiteshield -v _cRuN _ecRuN .... .....

instrumenting RETN instr at address 0x8007f9162 not encrypting function calloc@@GLIBC_2.2.5 as it's not in .text encrypting function _PyAccu_FinishAsList with key e9209f0e9f36dae4fafd4e528be67fa1 instrumenting RETN instr at address 0x8007d1f12 instrumenting RETN instr at address 0x8007d1f4a not encrypting function getspent@@GLIBC_2.2.5 as it's not in .text encrypting function _PyUnicode_IsCaseIgnorable with key 71497897b782f5f1a55d9f35bc2a95bf instrumenting RETN instr at address 0x8006be213 not encrypting function munmap@@GLIBC_2.2.5 as it's not in .text not encrypting function pwrite64@@GLIBC_2.2.5 as it's not in .text encrypting function PyEval_CallFunction with key 26ed1060c270e1b6924fdc1d6c4145bc instrumenting RETN instr at address 0x8006f2426 instrumenting RETN instr at address 0x8006f244d instrumenting RETN instr at address 0x8006f245b encrypting function PyInitelementtree with key 58938f40e7f8ea2443e5f9ec37067bad instrumenting RETN instr at address 0x80072c43f encrypting function PyNumber_InPlaceMatrixMultiply with key 54f6112d5ffc5a3952d6c3ed3bceec60 instrumenting RETN instr at address 0x80060a159 encrypting function PyException_SetTraceback with key 6f13399618588712913ac2d22cd377eb instrumenting RETN instr at address 0x800629dcc encrypting function _PyEval_GetSwitchInterval with key 0cb574432f027720d4ed78966ae37545 instrumenting RETN instr at address 0x8006c79e7 encrypting function _PyUnicode_EncodeUTF16 with key 6eec4f137c0db943752b0a16320922e3 instrumenting RETN instr at address 0x80069ac02 instrumenting RETN instr at address 0x80069b443 instrumenting RETN instr at address 0x80069b4d4 encrypting function PySys_AddWarnOptionUnicode with key d264449c33044041473306c12cff0647 instrumenting JMP instr at address 0x800702790 instrumenting RETN instr at address 0x800702799 encrypting function _Py_Dealloc with key 96bea9819a888d400936977b59dd27fe instrumenting JMP instr at address 0x80065eeb4 not encrypting function feof@@GLIBC_2.2.5 as it's not in .text encrypting function PyErr_WarnExplicitFormat with key 4e6dd7a0e6d7167635636a7e3139a1b2 instrumenting RETN instr at address 0x8006c2ecc encrypting function PyObject_Free with key 1b92c5b17c3f0761d56ae940c86db4c9 instrumenting JMP instr at address 0x8006610ea encrypting function _PySHA3_KeccakP1600_Permute_24rounds with key a251c47920f5d9bbb6d16f592e7ed266 instrumenting RETN instr at address 0x8007a2f6d encrypting function _Py_NameConstant with key 6666e5d0f3798d00d114f3efaeaf09d1 instrumenting RETN instr at address 0x8007e1018 encrypting function _Py_Suite with key 642e21db5af9407007eae74ed5de79c5 instrumenting RETN instr at address 0x8007dfa81 encrypting function PySequence_GetSlice with key 29cd60fb66c94f3694e31c0742868e0d instrumenting RETN instr at address 0x80060b875 instrumenting RETN instr at address 0x80060b89c instrumenting RETN instr at address 0x80060b8c6 encrypting function PyTuple_Size with key a50f667fc5a576c559bf0c93d3cd1548 instrumenting RETN instr at address 0x80066c461 instrumenting RETN instr at address 0x80066c482 encrypting function PyImport_ImportModule with key 0d6d3ab0ada8d4c4ae7687e124c456e8 instrumenting RETN instr at address 0x8006eb865 instrumenting RETN instr at address 0x8006eb889 instrumenting RETN instr at address 0x8006eb897 encrypting function PyMapping_GetItemString with key e2816bcdc9a42355a369136b39280986 instrumenting RETN instr at address 0x80060c095 instrumenting RETN instr at address 0x80060c0ba instrumenting RETN instr at address 0x80060c0d2 not encrypting function lgetxattr@@GLIBC_2.3 as it's not in .text not encrypting function XML_SetElementHandler as it's not in .text not encrypting function writev@@GLIBC_2.2.5 as it's not in .text encrypting function PyCodec_IncrementalEncoder with key 5b3c3579cda21435d74c377bdf22005f instrumenting RETN instr at address 0x8006df963 instrumenting RETN instr at address 0x8006df979 instrumenting RETN instr at address 0x8006df9ba not encrypting function XML_SetUnknownEncodingHandler as it's not in .text encrypting function _Py_keyword with key ee16378741150ac25a601164fc8d271f instrumenting RETN instr at address 0x8007e17f3 encrypting function PyFuture_FromAST with key 214491b4740c4037656df729384b2b10 instrumenting RETN instr at address 0x8006e34f0 instrumenting RETN instr at address 0x8006e3512 instrumenting RETN instr at address 0x8006e3520 not encrypting function faccessat@@GLIBC_2.4 as it's not in .text encrypting function _PyLong_NumBits with key d4d2430a0a74b6c3bd3d69c9112eb412 instrumenting RETN instr at address 0x800647a7f instrumenting RETN instr at address 0x800647a80 instrumenting RETN instr at address 0x800647a88 encrypting function PySeqIter_New with key ac4de4b4e32d73bf549f0c74c3ca2c59 instrumenting RETN instr at address 0x800636dc1 instrumenting RETN instr at address 0x800636ddc encrypting function _PyLong_AsInt with key a44b38dfd654054f70ce831a837eecde instrumenting RETN instr at address 0x800646edc not encrypting function fclose@@GLIBC_2.2.5 as it's not in .text encrypting function _PyLong_Copy with key df0633c8279bab942cafea9718c27c74 instrumenting RETN instr at address 0x800644d39 instrumenting RETN instr at address 0x800644dae instrumenting RETN instr at address 0x800644db9 encrypting function PyErr_GetExcInfo with key 35dd71fa451c7f2c17aca4789e5d8490 instrumenting RETN instr at address 0x8006e1800 not encrypting function dlopen@@GLIBC_2.2.5 as it's not in .text encrypting function PyInterpreterState_ThreadHead with key f7d32f5c1bbb0126f13a23cf4aad2e3e instrumenting RETN instr at address 0x8006f7da4 encrypting function PyUnicode_AsWideChar with key 4768df6499db6e7f7ad45323fbdf2203 instrumenting RETN instr at address 0x800697f87 instrumenting RETN instr at address 0x800697faf encrypting function _Py_write_noraise with key 73264268df9ee62f414df9f68219adfc instrumenting RETN instr at address 0x80070f5e8 encrypting function PyInit_faulthandler with key cd072afdd53c07065331422b85412697 instrumenting JMP instr at address 0x800771f4c not encrypting function XML_StopParser as it's not in .text encrypting function _Py_set_387controlword with key 1b561b3accf0dbb570f5a17fd204af59 instrumenting RETN instr at address 0x8006f6ce9 encrypting function PyErr_Clear with key a3bab277efefb16c04d20d9ffa7cae1e instrumenting JMP instr at address 0x8006e16d6 encrypting function _Py_gitversion with key 6067e16e28e65285561a77adec3646f3 instrumenting RETN instr at address 0x8007ccfa7 not encrypting function recvfrom@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicode_RSplit with key 85a8ac47a414040a3a81f4c226a62cec instrumenting JMP instr at address 0x8006a4865 instrumenting RETN instr at address 0x8006a4882 instrumenting RETN instr at address 0x8006a4897 encrypting function PyModule_Create2 with key abbef30c55b88f9f214b5037ad4e4b63 instrumenting RETN instr at address 0x80065c11f instrumenting RETN instr at address 0x80065c167 instrumenting RETN instr at address 0x80065c1f2 encrypting function PyGILState_GetThisThreadState with key f3fa270a68bf4eb4dc3614077697a0ff instrumenting JMP instr at address 0x8006f7f70 instrumenting RETN instr at address 0x8006f7f7a encrypting function PyInitcollections with key 4af2e0b7282f480950da87cfab73e546 instrumenting RETN instr at address 0x800719baa instrumenting RETN instr at address 0x800719bb6 encrypting function PyCodec_Register with key 2afcb156edb98eaf6ee58d7fd01bc0ea instrumenting JMP instr at address 0x8006df4cc instrumenting RETN instr at address 0x8006df4ec encrypting function Py_GetCopyright with key 5b9a3fee4ff89c7a8a9c4ea62f7cb613 instrumenting RETN instr at address 0x8007f5fc7 not encrypting function strncpy@@GLIBC_2.2.5 as it's not in .text encrypting function _PyUnicode_ToUpperFull with key 50d3a2d5dc0b5a529901c3dcfbd9da9d instrumenting RETN instr at address 0x8006be044 instrumenting RETN instr at address 0x8006be053 instrumenting RETN instr at address 0x8006be086 instrumenting RETN instr at address 0x8006be097 not encrypting function XML_GetFeatureList as it's not in .text not encrypting function XML_SetAttlistDeclHandler as it's not in .text encrypting function _Py_set_inheritable_async_safe with key db6725864e087cba1428525b549230dd instrumenting RETN instr at address 0x80070efc0 instrumenting RETN instr at address 0x80070efee encrypting function _Py_Bytes with key 14cbdc6f6fd1d9573fb4c7d9fe48d621 instrumenting RETN instr at address 0x8007e0fb8 encrypting function PyTuple_New with key 1d3565d44a664b56bb0d58cc7c2a8474 instrumenting RETN instr at address 0x80066bde1 instrumenting RETN instr at address 0x80066beb5 instrumenting JMP instr at address 0x80066bede encrypting function _Py_CheckRecursiveCall with key 58cea805918ba940be67cc75e5d96ed1 instrumenting RETN instr at address 0x8006c8359 instrumenting RETN instr at address 0x8006c8392 encrypting function _PyUnicode_IsXidStart with key 3dde7731779a45442b771c3caef789cb instrumenting RETN instr at address 0x8006bdaff not encrypting function xstat64@@GLIBC_2.2.5 as it's not in .text encrypting function _Py_With with key 5eef5c68cd685efb02cf45b8a5c8ffd0 instrumenting RETN instr at address 0x8007e023c encrypting function PyThread_create_key with key 5afffdcc0b243db31a44958e6a0a68be instrumenting RETN instr at address 0x800710350 not encrypting function XML_SetStartElementHandler as it's not in .text not encrypting function PyMapping_Length due to first instruction being jmp/ret/call encrypting function Py_GetBuildInfo with key 2245ef41020fe9a0a52f73e4742e1c47 instrumenting RETN instr at address 0x8007cd036 encrypting function PyNode_Free with key 099ab06d361dccf23ecba7ccedb5cb87 instrumenting JMP instr at address 0x8007cd983 instrumenting RETN instr at address 0x8007cd990 encrypting function _PySHA3_KeccakP1600_ExtractAndAddLanes with key 8344c7acc81a9ad8d84f373424e208d6 instrumenting RETN instr at address 0x8007a6177 instrumenting RETN instr at address 0x8007a61ad encrypting function _PyLong_FromNbInt with key 980bf8064e2f8b50dafe91bef63c727f instrumenting RETN instr at address 0x80063cc55 instrumenting RETN instr at address 0x80063cc7b instrumenting RETN instr at address 0x80063cc90 encrypting function PyMarshal_Init with key a7d98f1280575dc4d722b9a46017a710 instrumenting RETN instr at address 0x8006f1252 not encrypting function pthread_attr_init@@GLIBC_2.2.5 as it's not in .text not encrypting function flockfile@@GLIBC_2.2.5 as it's not in .text not encrypting function __sched_cpucount@@GLIBC_2.6 as it's not in .text encrypting function _Py_ReadyTypes with key 9720996d169087b938f58532320d270f instrumenting RETN instr at address 0x80065e94c encrypting function PyUnicode_GetLength with key 889a87ba884a9caf7e10d7d4d2ad292b instrumenting RETN instr at address 0x8006980cc instrumenting RETN instr at address 0x8006980e2 instrumenting RETN instr at address 0x8006980f0 encrypting function _PyFloat_Unpack2 with key 8ca9cd57098726464ab79c8471ef127e instrumenting RETN instr at address 0x80063394f instrumenting JMP instr at address 0x800633978 instrumenting JMP instr at address 0x800633981 encrypting function PySequence_SetItem with key fa0b58233cdadc5a88acba001c6525e6 instrumenting JMP instr at address 0x80060b95b instrumenting RETN instr at address 0x80060b987 encrypting function PySys_ResetWarnOptions with key c2efdb398cded5fbbee054e0bd718256 instrumenting RETN instr at address 0x800702739 instrumenting JMP instr at address 0x800702748 encrypting function PyInitheapq with key fec0d575f215a212f6b9806ee6adac24 instrumenting RETN instr at address 0x80072f0e0 encrypting function _PyCFunction_DebugMallocStats with key b12f5c52bdc416bda5b16174bdcf5545 instrumenting JMP instr at address 0x80065b522 not encrypting function XML_Parse as it's not in .text encrypting function _PyUnicode_ToFoldedFull with key a2f1a73c4e5dcc22d306979bc5a12878 instrumenting JMP instr at address 0x8006be0eb instrumenting RETN instr at address 0x8006be159 instrumenting RETN instr at address 0x8006be16e instrumenting RETN instr at address 0x8006be170 instrumenting RETN instr at address 0x8006be17f encrypting function _PyIO_trap_eintr with key 567c002a2bc42f310cd972ea8adbc2d0 instrumenting RETN instr at address 0x800764991 instrumenting RETN instr at address 0x800764a04 instrumenting RETN instr at address 0x800764a50 encrypting function PyObject_ASCII with key 7f792baf2b95d65c81eb7669854cec3a instrumenting RETN instr at address 0x80065d252 instrumenting RETN instr at address 0x80065d2ab instrumenting RETN instr at address 0x80065d2bb encrypting function _PySHA3_KeccakP1600_ExtractAndAddBytesInLane with key 4ed2f70d3c2bf1b8a348cd5d3d874392 instrumenting RETN instr at address 0x8007a609c instrumenting RETN instr at address 0x8007a60a0 encrypting function Py_GetPrefix with key cecd172433125581a8ccd8c890db5017 instrumenting RETN instr at address 0x800711ed1 instrumenting RETN instr at address 0x800711eec encrypting function _PyErr_BadInternalCall with key d65e26a322991e18824cb76edc003a5e instrumenting JMP instr at address 0x8006e20c8 not encrypting function localtime_r@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicode_AsUCS4 with key 0406d5c134a501a1673a472a3d0627dc instrumenting RETN instr at address 0x800696c09 instrumenting RETN instr at address 0x800696c30 not encrypting function lseek64@@GLIBC_2.2.5 as it's not in .text encrypting function PyInit_fcntl with key 9e7f68844194731835e44f2739b36a29 instrumenting RETN instr at address 0x800773456 encrypting function PyModule_GetNameObject with key bd4ab0261e334479d78d69e3441d69fa instrumenting RETN instr at address 0x80065bf89 instrumenting RETN instr at address 0x80065bfa9 instrumenting RETN instr at address 0x80065bfb8 encrypting function _Py_AsyncFor with key ebc887f04322611b3426915d0e34760c instrumenting RETN instr at address 0x8007e00a2 encrypting function PyUnicode_New with key 6522cdcd9820f7fbcae498453d9c4b7f instrumenting RETN instr at address 0x80067f3cc instrumenting JMP instr at address 0x80067f540 instrumenting RETN instr at address 0x80067f573 encrypting function Py_MakePendingCalls with key bbc8f5ecb5c5c8033c6c84ee484e57c0 instrumenting RETN instr at address 0x8006c81aa instrumenting RETN instr at address 0x8006c8288 instrumenting RETN instr at address 0x8006c82fd not encrypting function dlsym@@GLIBC_2.2.5 as it's not in .text encrypting function _PySHA3_KeccakP1600_AddLanes with key f3f654a9e04cfe2bf383799e853af10f instrumenting RETN instr at address 0x80079dea8 encrypting function PyCodeExtraState_Get with key c90e38f90f53b9c7cc0d1f7de014cb67 instrumenting RETN instr at address 0x8006f7c3b encrypting function PyImport_GetModuleDict with key cb68937ee8d72d053612c3c5c30022d1 instrumenting RETN instr at address 0x8006e9487 encrypting function PyCodec_IgnoreErrors with key 4c63bbdc0d82a392e0de82adb8b45d67 instrumenting RETN instr at address 0x8006dff6c instrumenting RETN instr at address 0x8006dffc7 encrypting function PyMapping_Items with key e0420b892b82cbad8dc9e3f9d25cfe9f instrumenting RETN instr at address 0x80060e304 instrumenting RETN instr at address 0x80060e321 instrumenting JMP instr at address 0x80060e328 instrumenting RETN instr at address 0x80060e337 encrypting function PyInit_errno with key b8ac5a70435ac0d38626b02e47d51f3d instrumenting RETN instr at address 0x80077072f instrumenting RETN instr at address 0x80077073a encrypting function PyModule_GetWarningsModule with key 4428a2cc3a17d02f34648179730af746 instrumenting JMP instr at address 0x8006f5827 encrypting function Py_SetPath with key acac38b4b83baf985b6a0b1266bd00f4 instrumenting JMP instr at address 0x800711e7a instrumenting RETN instr at address 0x800711e81 encrypting function PyImport_AppendInittab with key 7c0f4549835df10a1b4a2f403ba25a50 instrumenting RETN instr at address 0x8006ebbf5 encrypting function PySet_Discard with key 8f072fb533e39c291a61b03b40ea18ee instrumenting RETN instr at address 0x800669296 instrumenting RETN instr at address 0x8006692af instrumenting RETN instr at address 0x8006692db instrumenting RETN instr at address 0x8006692ea encrypting function PyMapping_SetItemString with key 1d00f47a05bbed8141005c27ed7553ae instrumenting RETN instr at address 0x80060c13f instrumenting RETN instr at address 0x80060c15a not encrypting function libc_current_sigrtmin@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicode_AsEncodedUnicode with key b74fd13c4be0a381dd55b46211e38a27 instrumenting RETN instr at address 0x80069859c instrumenting RETN instr at address 0x8006985d8 instrumenting RETN instr at address 0x8006985ee encrypting function PySet_Contains with key 7e9091124f993091c02eb5d033622f9f instrumenting RETN instr at address 0x8006691ac instrumenting RETN instr at address 0x8006691bb not encrypting function XML_GetBuffer as it's not in .text not encrypting function deflateSetDictionary as it's not in .text not encrypting function expm1@@GLIBC_2.2.5 as it's not in .text encrypting function _Py_bytes_endswith with key 828b99f38f75e490c2009e9f55498163 instrumenting JMP instr at address 0x8007d42d0 encrypting function _PyObject_CallMethodIdObjArgs with key e88da357ab9c74dd37c2bf371e4769aa instrumenting RETN instr at address 0x80060d493 not encrypting function unsetenv@@GLIBC_2.2.5 as it's not in .text encrypting function _PyIOBase_check_seekable with key 12d169aadd2a6096ab1a572ab9c820bd instrumenting RETN instr at address 0x800776a73 instrumenting RETN instr at address 0x800776aa9 encrypting function PyTuple_SetItem with key 82b47e30416fd0fb755f025d562293e2 instrumenting RETN instr at address 0x80066c53e encrypting function _PyGen_FetchStopIterationValue with key 582f0655a4034a5866c880fc941a4883 instrumenting RETN instr at address 0x80062e90c encrypting function _PyUnicode_IsTitlecase with key 8b77e9c45c1efef85bc4d1c1b2a02fcb instrumenting RETN instr at address 0x8006bdab3 encrypting function _PyUnicode_ClearStaticStrings with key 6088f3c168e613ee6910fa97ba4adc06 instrumenting RETN instr at address 0x80068ae7c encrypting function _PyObject_GC_Calloc with key 655aa38ea6006f42f50ef7e4f856f2ab instrumenting RETN instr at address 0x800713bc4 instrumenting RETN instr at address 0x800713bd3 not encrypting function bind_textdomain_codeset@@GLIBC_2.2.5 as it's not in .text encrypting function PyCode_Addr2Line with key 1c48310d5846bb8d39f09426e26881a4 instrumenting RETN instr at address 0x80062211c encrypting function _PyImport_FindBuiltin with key 336fd3852210d5d3c798544800ea95db instrumenting RETN instr at address 0x8006e9fc8 instrumenting RETN instr at address 0x8006e9fe9 instrumenting RETN instr at address 0x8006e9ff7 encrypting function _Py_ExtSlice with key 0da35a6acb4ad941464db58df59a640d instrumenting RETN instr at address 0x8007e1561 encrypting function PyFrame_ClearFreeList with key 5556bacf8e6c3c2d08f8c7875b06e8f7 instrumenting RETN instr at address 0x8006352be encrypting function _PySHA3_KeccakP1600_ExtractAndAddBytes with key ebc2cc1dabd6c7cf3e73b5d3156c5966 instrumenting RETN instr at address 0x8007a6222 instrumenting JMP instr at address 0x8007a625e encrypting function PyTuple_GetItem with key 0140be5e82808d866596b519a091387f instrumenting RETN instr at address 0x80066c4b5 instrumenting RETN instr at address 0x80066c4dc encrypting function PyObject_RichCompareBool with key a51467b86f9d0c7e9f0328dbccb60bb7 instrumenting RETN instr at address 0x80065e257 not encrypting function funlockfile@@GLIBC_2.2.5 as it's not in .text encrypting function PyLong_FromSsize_t with key e3c0621fa13f77f0cae35711d5010c5c instrumenting RETN instr at address 0x800648f3f instrumenting RETN instr at address 0x800648f68 encrypting function PyErr_WarnFormat with key 93be20cb3154a395794e49c670032181 instrumenting RETN instr at address 0x8006c299c instrumenting RETN instr at address 0x8006c29b7 encrypting function PyCodec_StreamWriter with key 01b1ed8908527a8334f4430cf21c1ee9 instrumenting RETN instr at address 0x8006dfa16 instrumenting RETN instr at address 0x8006dfa3c encrypting function PyErr_SetString with key 0dea47a7f207befc9b682e01d6a8894d instrumenting RETN instr at address 0x8006e1c80 instrumenting JMP instr at address 0x8006e1c99 encrypting function _PyMem_SetupAllocators with key 2310287c6abfa88272be399b99e8b220 instrumenting RETN instr at address 0x800660aa1 instrumenting RETN instr at address 0x800660ad9 not encrypting function closedir@@GLIBC_2.2.5 as it's not in .text not encrypting function XML_GetCurrentByteIndex as it's not in .text encrypting function PySequence_Contains with key 98bca86f5ef571bfab66ded249775bba instrumenting JMP instr at address 0x80060e8a6 instrumenting RETN instr at address 0x80060e8c2 not encrypting function mkfifo@@GLIBC_2.2.5 as it's not in .text not encrypting function sprintf_chk@@GLIBC_2.3.4 as it's not in .text encrypting function _PyDictView_New with key ab2150b2bd32b30cfe6da14744f2ce35 instrumenting RETN instr at address 0x800654982 instrumenting RETN instr at address 0x8006549ab instrumenting RETN instr at address 0x8006549c4 encrypting function PyNumber_TrueDivide with key 40c44a8e51aef06466e3057bfbaa8dd6 instrumenting RETN instr at address 0x8006097e5 instrumenting RETN instr at address 0x80060982d encrypting function _Py_dg_stdnan with key f733a034aa2974be107d1b82f990472f instrumenting RETN instr at address 0x800707385 encrypting function _PyImport_FindSharedFuncptr with key 75b2ca6cbf277b1bb36b6dbee2a5a0da instrumenting RETN instr at address 0x80070fcc6 encrypting function Py_FatalError with key 88bf9a5eee8dce7d0bbecba2b75ad724 encrypting function PyDictProxy_New with key 5ccfa352c938c624a7a3ee48d86b7a4d instrumenting RETN instr at address 0x80062669a instrumenting RETN instr at address 0x8006266bf encrypting function _PyFloat_DebugMallocStats with key e6737f7dcc9e124536c7616ec56d908a instrumenting JMP instr at address 0x800633122 encrypting function PyMarshal_ReadLastObjectFromFile with key 23e237c5bb63f13071c995e4f28ca3f1 instrumenting RETN instr at address 0x8006f0f4f instrumenting RETN instr at address 0x8006f0f63 encrypting function _PyThreadState_DeleteExcept with key bbc706723e13789ddae44d711406e9d5 instrumenting RETN instr at address 0x8006f7b88 encrypting function Py_GetCompiler with key ef3c69d897295f66c48906aa0685c382 instrumenting RETN instr at address 0x8007f9907 not encrypting function sched_get_priority_max@@GLIBC_2.2.5 as it's not in .text encrypting function _PyStack_UnpackDict with key 465f852e3b44ed103b03ddb54d462db4 instrumenting RETN instr at address 0x80060c972 instrumenting RETN instr at address 0x80060c99b encrypting function PyFloat_GetMin with key 82d014332f9483e744b494bb902eb28d instrumenting RETN instr at address 0x800630fb8 encrypting function PyThread_exit_thread with key b64eef6a95cd532def0669f26f928a68 not encrypting function sendfile64@@GLIBC_2.3 as it's not in .text encrypting function PyModuleDef_Init with key 66ccef180acbe650294d2234372d0b71 instrumenting RETN instr at address 0x80065ba5d instrumenting RETN instr at address 0x80065ba6b encrypting function _PyFunction_FastCallKeywords with key c9aa0fb0d700ff83f4e1ac1a30fd4835 instrumenting RETN instr at address 0x8006d1661 instrumenting JMP instr at address 0x8006d1762 encrypting function PyLong_GetInfo with key 5f7eca80168e21576f6b0de76cf7333d instrumenting RETN instr at address 0x80064d36f instrumenting RETN instr at address 0x80064d386 encrypting function PyImport_ImportFrozenModuleObject with key e9d1033ee96a169bfb2fcee86d74e1cf instrumenting RETN instr at address 0x8006ea9d2 instrumenting RETN instr at address 0x8006ea9e4 instrumenting RETN instr at address 0x8006eaae2 encrypting function PyImport_GetMagicNumber with key 2756a8026b382d9c3d43df0e7157e7df instrumenting RETN instr at address 0x8006e9b19 instrumenting RETN instr at address 0x8006e9b4a encrypting function PyToken_ThreeChars with key fc0c0cf3460c86523e2a4fe232e2f6e3 instrumenting JMP instr at address 0x8007d0b96 instrumenting RETN instr at address 0x8007d0baf instrumenting RETN instr at address 0x8007d0bbf instrumenting RETN instr at address 0x8007d0bcf instrumenting RETN instr at address 0x8007d0bdf instrumenting RETN instr at address 0x8007d0bef instrumenting RETN instr at address 0x8007d0bf5 not encrypting function __realpath_chk@@GLIBC_2.4 as it's not in .text not encrypting function round@@GLIBC_2.2.5 as it's not in .text encrypting function _Py_bytes_islower with key 358f6e10008cba601d3a53fd02645989 instrumenting JMP instr at address 0x8007d267b instrumenting RETN instr at address 0x8007d268b instrumenting JMP instr at address 0x8007d26a0 encrypting function _PyUnicode_IsLinebreak with key 94b8ccd52a3b37835a7020bb8c5bab42 instrumenting RETN instr at address 0x8006bd9d5 instrumenting RETN instr at address 0x8006bda02 instrumenting RETN instr at address 0x8006bda0d encrypting function PyCompile_OpcodeStackEffect with key dbbca76b2be1ba6dbd85e24c03841d06 instrumenting JMP instr at address 0x8006d449c instrumenting RETN instr at address 0x8006d44a2 instrumenting RETN instr at address 0x8006d44ad instrumenting RETN instr at address 0x8006d44b4 instrumenting RETN instr at address 0x8006d44bd instrumenting RETN instr at address 0x8006d44c5 instrumenting RETN instr at address 0x8006d44d7 instrumenting RETN instr at address 0x8006d44e5 instrumenting RETN instr at address 0x8006d44f8 instrumenting RETN instr at address 0x8006d450b instrumenting RETN instr at address 0x8006d4514 instrumenting RETN instr at address 0x8006d4520 instrumenting RETN instr at address 0x8006d452d instrumenting RETN instr at address 0x8006d4535 instrumenting RETN instr at address 0x8006d454b instrumenting RETN instr at address 0x8006d4574 instrumenting RETN instr at address 0x8006d457f instrumenting RETN instr at address 0x8006d4583 instrumenting RETN instr at address 0x8006d458d instrumenting RETN instr at address 0x8006d4595 encrypting function _PyThreadState_UncheckedGet with key 2d5c83e09d910c21fe997726ee39b562 instrumenting RETN instr at address 0x8006f7baa encrypting function PyInit_zlib with key 79b2110dd8018e3e005d01d6567d4ba3 instrumenting RETN instr at address 0x8007ccf92 instrumenting RETN instr at address 0x8007ccf9e encrypting function _PyEval_SignalAsyncExc with key 4f48fac72ec66477d1da10357a5465d1 instrumenting RETN instr at address 0x8006c7b04 not encrypting function clearerr@@GLIBC_2.2.5 as it's not in .text not encrypting function snprintf_chk@@GLIBC_2.3.4 as it's not in .text encrypting function _PyBytesWriter_Prepare with key e8b5fa1296577a24f49a0486b424a683 instrumenting RETN instr at address 0x80061ca6d instrumenting RETN instr at address 0x80061ca70 not encrypting function access@@GLIBC_2.2.5 as it's not in .text encrypting function _PyTime_AsSecondsDouble with key ad34de11a00779b46a25efc65a89f5d3 instrumenting RETN instr at address 0x8006fba2f instrumenting RETN instr at address 0x8006fba65 not encrypting function adler32 as it's not in .text not encrypting function fork@@GLIBC_2.2.5 as it's not in .text not encrypting function sigemptyset@@GLIBC_2.2.5 as it's not in .text encrypting function PyType_FromSpecWithBases with key 8f4a69ed666d3fc191a0b1e6111d8cf5 instrumenting RETN instr at address 0x800673ed9 not encrypting function modf@@GLIBC_2.2.5 as it's not in .text encrypting function _PyGen_SetStopIterationValue with key e4a0dbe0981ad62cf587283121364113 instrumenting RETN instr at address 0x80062db57 instrumenting RETN instr at address 0x80062dba6 encrypting function PyUnicode_Translate with key e36032c6937cfeb908643a61f4cb8f1c instrumenting JMP instr at address 0x8006aec73 instrumenting RETN instr at address 0x8006aeca2 not encrypting function getppid@@GLIBC_2.2.5 as it's not in .text encrypting function _PySHA3_KeccakWidth1600_SpongeAbsorbLastFewBits with key 6885e5455ea34b8fed145f117dbc4f59 instrumenting RETN instr at address 0x8007a2fcf instrumenting RETN instr at address 0x8007a2fdd encrypting function PyUnicode_DecodeRawUnicodeEscape with key 72717a7f8ac731c85d69b65dbfb42ccc instrumenting RETN instr at address 0x8006aba97 encrypting function PyList_SetItem with key 284b9cf28ad33a113e7cd464fff4a535 instrumenting RETN instr at address 0x80063c1db encrypting function PyObject_CallFunction with key f69a49812737f2210669c767db6bc327 instrumenting RETN instr at address 0x80060cb1b instrumenting RETN instr at address 0x80060cb9c instrumenting RETN instr at address 0x80060cbcb encrypting function _PyUnicode_ToUppercase with key 1b32b7fd95622cf90ed232864ba87d2d instrumenting RETN instr at address 0x8006bddbd instrumenting RETN instr at address 0x8006bddc4 encrypting function PyObject_Realloc with key 2ed69b7eb703ebd5099eccc75010fba5 instrumenting JMP instr at address 0x8006610c2 instrumenting RETN instr at address 0x8006610d2 encrypting function _PySequence_BytesToCharpArray with key 0d6a25dbf4e5cc00e656d9654140c88a instrumenting RETN instr at address 0x80060ea3e encrypting function PyStructSequence_NewType with key e5c349abbc3c75a62b1a342a5fdbef9b instrumenting RETN instr at address 0x80066b267 instrumenting RETN instr at address 0x80066b28b encrypting function _PyCode_SetExtra with key e0a278ad0b765ea5d4320fe10b00103a instrumenting RETN instr at address 0x8006222b9 not encrypting function pthread_sigmask@@GLIBC_2.2.5 as it's not in .text encrypting function PyAST_CompileEx with key 8d49ed5f8ccbcab9f0fab3db90ed1979 instrumenting RETN instr at address 0x8006dd13e instrumenting RETN instr at address 0x8006dd160 instrumenting RETN instr at address 0x8006dd176 not encrypting function unlinkat@@GLIBC_2.4 as it's not in .text encrypting function PyUnicode_EncodeASCII with key 77bf8bbbae60128fc763be1921847a7d instrumenting RETN instr at address 0x80069c6e2 instrumenting RETN instr at address 0x80069c702 instrumenting RETN instr at address 0x80069c710 encrypting function PyThread_delete_key_value with key 0f6c6979beedcc55c294a457f21a0dee instrumenting JMP instr at address 0x800710392 encrypting function _Py_hashtable_get_entry with key 90113f508a04dc1eeee41ccb97351fe2 instrumenting RETN instr at address 0x8007755f5 instrumenting RETN instr at address 0x80077560f encrypting function PyList_Reverse with key 1416835521dcfa593c6864b70f667f30 instrumenting RETN instr at address 0x80063c863 instrumenting RETN instr at address 0x80063c8a3 not encrypting function fopen64@@GLIBC_2.2.5 as it's not in .text encrypting function PyEval_EvalFrameEx with key 039afa59f36610a5e85cd0fb563ad48b instrumenting JMP instr at address 0x8006c83ae encrypting function PyCoro_New with key d647313c8d2243be4ce39bfcc1ffb230 instrumenting RETN instr at address 0x80062f9da encrypting function PyInitpickle with key db39c113c449d1d461b3900b19e7a330 instrumenting RETN instr at address 0x80074107b not encrypting function linkat@@GLIBC_2.4 as it's not in .text not encrypting function ctermid@@GLIBC_2.2.5 as it's not in .text not encrypting function sendto@@GLIBC_2.2.5 as it's not in .text encrypting function PySequence_Count with key fc3180bf157836b8b40a3f172cdcf8f5 instrumenting JMP instr at address 0x80060e885 encrypting function _PyCodecInfo_GetIncrementalEncoder with key ecd92d5249db95559f9d4cdc94630daa instrumenting RETN instr at address 0x8006df292 instrumenting RETN instr at address 0x8006df2b2 not encrypting function bind@@GLIBC_2.2.5 as it's not in .text encrypting function Py_CompileString with key d4d3eb2eb5727da98db91f5c225c6657 instrumenting JMP instr at address 0x8006faf28 encrypting function PyFunction_SetDefaults with key f03fc2a3e7caaa619d0f1b4f030fc70a instrumenting RETN instr at address 0x800636529 encrypting function _Py_Expression with key 7f3cacc128c641c49f5d32e4296330ea instrumenting RETN instr at address 0x8007dfa36 instrumenting RETN instr at address 0x8007dfa59 encrypting function PyInitsocket with key 7e92c780750ed480cf06f546b63ebb07 instrumenting RETN instr at address 0x8007bab61 instrumenting RETN instr at address 0x8007bab73 encrypting function _PyUnicodeWriter_WriteChar with key 9b13d32e5a3f60d1ba833c93bae0b0af instrumenting RETN instr at address 0x8006a4bc5 encrypting function _PyUnicode_AsKind with key 47b6d54197fca92963ff1e8b37600459 instrumenting RETN instr at address 0x80068d293 instrumenting JMP instr at address 0x80068d629 not encrypting function wcscmp@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicode_FromStringAndSize with key 0202aaa7890bc25ea89eb12234f44615 instrumenting JMP instr at address 0x8006a80ae instrumenting JMP instr at address 0x8006a80bb instrumenting RETN instr at address 0x8006a80e0 not encrypting function fwrite@@GLIBC_2.2.5 as it's not in .text encrypting function _PyUnicode_ToDecimalDigit with key 01560f0eaf1ec3632a7e0229b7c129e0 instrumenting RETN instr at address 0x8006bdb95 encrypting function PyList_ClearFreeList with key 3c74c38f4bc1366d697a25c7b70d05d4 instrumenting RETN instr at address 0x80063ab46 not encrypting function inet_aton@@GLIBC_2.2.5 as it's not in .text encrypting function _PyDict_NewPresized with key fef856f5221e269eeb67dab896777979 instrumenting RETN instr at address 0x800651da2 instrumenting RETN instr at address 0x800651ddf encrypting function PyEval_AcquireLock with key e6557eb247db7ad0f8e3f051d484dd00 instrumenting JMP instr at address 0x8006c7def encrypting function _PySHA3_KeccakP1600_OverwriteLanes with key d90282b35a37545e2e489e6ef8dfecf6 instrumenting RETN instr at address 0x80079e159 instrumenting RETN instr at address 0x80079e183 instrumenting RETN instr at address 0x80079e188 encrypting function PyOS_double_to_string with key a87b1e3fc112a17fd887531f25e5192e instrumenting JMP instr at address 0x800705a18 instrumenting RETN instr at address 0x800705b6d encrypting function PyStructSequence_SetItem with key 356050c5d68e3bfa9467263938e0621b instrumenting RETN instr at address 0x80066aeb5 not encrypting function pthread_mutex_lock@@GLIBC_2.2.5 as it's not in .text encrypting function PySymtable_BuildObject with key c562905535487d55b9281bce75e1ec28 instrumenting RETN instr at address 0x8007008b7 instrumenting RETN instr at address 0x8007009ac instrumenting RETN instr at address 0x8007009f4 encrypting function PyInitio with key f1742bbe5126d918e1a8f2382c2db69d instrumenting RETN instr at address 0x800730378 encrypting function PyUnicodeEncodeError_SetEnd with key 9d2960fdc8e82af591454e5784ba2065 instrumenting RETN instr at address 0x80062a536 encrypting function _PyGILState_Fini with key d757c8b9e9e95a5084d26b1976d52fab instrumenting RETN instr at address 0x8006f7f58 encrypting function PyUnicodeTranslateError_SetEnd with key 694978458a6cfb9ee0df61af7349e515 instrumenting RETN instr at address 0x80062a556 not encrypting function realloc@@GLIBC_2.2.5 as it's not in .text encrypting function PyGen_New with key a1de8ee18c596d7156ec65b9234b82ad instrumenting RETN instr at address 0x80062f76a encrypting function PyCapsule_IsValid with key 6f0fcc66a800eb4c02cf82c52524d8b2 instrumenting RETN instr at address 0x800662944 instrumenting RETN instr at address 0x800662972 instrumenting RETN instr at address 0x800662980 encrypting function PyUnicode_Count with key 87ba8d27f5e6f3308970f5cbed8b22b3 instrumenting RETN instr at address 0x80069ed93 encrypting function _PyType_Fini with key c25cca80bb1fcf9410245bd8ea7a78c0 instrumenting RETN instr at address 0x800670b53 encrypting function PyImport_Cleanup with key b32a624052cbe355d7cab22e0c8e1a01 instrumenting RETN instr at address 0x8006e99dc encrypting function PyErr_SetFromErrnoWithFilenameObjects with key 72046a76d3238182e2d6138195259aa5 instrumenting RETN instr at address 0x8006e1d95 instrumenting RETN instr at address 0x8006e1de4 encrypting function PyRun_SimpleString with key f75f8e45dfa669cd64acff896561b875 instrumenting JMP instr at address 0x8006faf12 encrypting function PyUnicode_Append with key 488ddf39a4e1a9b53db1f0d0503b82cf instrumenting RETN instr at address 0x8006a11ed instrumenting JMP instr at address 0x8006a1206 instrumenting JMP instr at address 0x8006a12b8 instrumenting JMP instr at address 0x8006a13c7 encrypting function PyMem_SetupDebugHooks with key bb934d5f6740e588bd1e28456a2c53b5 instrumenting RETN instr at address 0x80066095a encrypting function _PyImportHooks_Init with key 6acb2187cc0bf64f92665d692db17c9e instrumenting RETN instr at address 0x8006e91ce instrumenting JMP instr at address 0x8006e9201 not encrypting function setlocale@@GLIBC_2.2.5 as it's not in .text not encrypting function floor@@GLIBC_2.2.5 as it's not in .text encrypting function _PyBytes_FormatEx with key 91b07e719782e7234c937af81aa67103 instrumenting JMP instr at address 0x80061cf47 instrumenting RETN instr at address 0x80061d00f instrumenting JMP instr at address 0x80061d107 encrypting function _PyBytes_FromHex with key c9b6e9818b05e5a17ea4953e4454bcd1 instrumenting RETN instr at address 0x80061e52b encrypting function _PyIO_ConvertSsize_t with key 4aae229b8ce24aed9952d95a0e50e927 instrumenting RETN instr at address 0x80072fc05 instrumenting RETN instr at address 0x80072fc56 encrypting function _Py_bytes_capitalize with key 10d8378f62c2d99e17f58ba3d10f3186 instrumenting RETN instr at address 0x8007d2935 instrumenting RETN instr at address 0x8007d294e encrypting function _PyTuple_DebugMallocStats with key abe838f6c11c9903085b05307c3ac4da instrumenting RETN instr at address 0x80066bd9f not encrypting function perror@@GLIBC_2.2.5 as it's not in .text encrypting function PyTuple_ClearFreeList with key d42c4d8cdc732c532dec052b055a5e03 instrumenting RETN instr at address 0x80066ca8f encrypting function _PyFloat_Init with key 0c5a1e58bb794e2de4417495bc67ed79 instrumenting RETN instr at address 0x800633060 instrumenting RETN instr at address 0x8006330ac encrypting function Py_Exit with key 5b642e2adef93d3be65d7603fef67d8d encrypting function PyUnicode_Resize with key 761813f0796b5d52c740431fadf9986b instrumenting JMP instr at address 0x80068a5c7 instrumenting RETN instr at address 0x80068a5ea not encrypting function PySequence_Length due to first instruction being jmp/ret/call encrypting function PyRun_FileEx with key 83f62796987cbd5a3545ed278b500d53 instrumenting RETN instr at address 0x8006faebf encrypting function PyParser_ASTFromFile with key b32b8a3b7dfdc2f974a216fcedbc2790 instrumenting RETN instr at address 0x8006fac25 instrumenting RETN instr at address 0x8006fac52 instrumenting RETN instr at address 0x8006fac68 encrypting function _Py_c_sum with key a4a9cd050ca18fe04107bebc2e96d94e instrumenting RETN instr at address 0x800623345 encrypting function _PyDebugAllocatorStats with key 8c7c88d61e23f03cbf7b53c2c0cc6134 instrumenting RETN instr at address 0x8006611de encrypting function _PyUnicode_EncodeUTF32 with key 1e4c055bd25a4a4efdd40b32b4dbe01c instrumenting RETN instr at address 0x8006991cd instrumenting RETN instr at address 0x800699203 instrumenting RETN instr at address 0x800699295 instrumenting RETN instr at address 0x800699873 encrypting function _Py_Yield with key 426b4229cafa614b021ad31dd0819942 instrumenting RETN instr at address 0x8007e0ca1 encrypting function PyImport_ExecCodeModule with key c123b799164d500ede56659a8fc867df instrumenting JMP instr at address 0x8006ea724 not encrypting function gai_strerror@@GLIBC_2.2.5 as it's not in .text encrypting function PyDescr_NewGetSet with key 4d6c8f4077a12154ce6f804b9a6f458f instrumenting RETN instr at address 0x800626561 instrumenting RETN instr at address 0x800626587 not encrypting function getitimer@@GLIBC_2.2.5 as it's not in .text encrypting function _PyDict_LoadGlobal with key e5b8acf8b5ba43ba9a94da411b9a4187 instrumenting RETN instr at address 0x800652148 instrumenting RETN instr at address 0x80065217f instrumenting RETN instr at address 0x80065218e encrypting function PyFile_WriteString with key b5d58190d389c9d096209393e0fdee48 instrumenting RETN instr at address 0x8007d4e37 instrumenting RETN instr at address 0x8007d4e58 encrypting function PyArg_VaParseTupleAndKeywords with key 200540dd9f33361a31fee4d56698c038 instrumenting RETN instr at address 0x8006e81c6 instrumenting RETN instr at address 0x8006e81e7 encrypting function _PyAccu_Finish with key dc036bfad7ff44623bf261d77df32080 instrumenting RETN instr at address 0x8007d1f9a instrumenting RETN instr at address 0x8007d1fb1 not encrypting function pthread_key_create@@GLIBC_2.2.5 as it's not in .text encrypting function _PyArg_ParseTupleAndKeywords_SizeT with key d001730767b3f4400dc33798d23bbf2e instrumenting RETN instr at address 0x8006e8148 instrumenting RETN instr at address 0x8006e816a not encrypting function memmove_chk@@GLIBC_2.3.4 as it's not in .text encrypting function PyUnicode_CopyCharacters with key ff0d33ae7e71d646f245cd64d680bc37 instrumenting RETN instr at address 0x800682304 encrypting function _PyUnicode_IsLowercase with key 749d43d5464d97d59d242fab8ecd06fa instrumenting RETN instr at address 0x8006bdd13 encrypting function PyGrammar_AddAccelerators with key 8ae545c39f52278814450af8a2ca0982 instrumenting RETN instr at address 0x8007cd2e3 encrypting function _PyUnicode_IsNumeric with key aaa75f9128bc86c036778f4576ab898c instrumenting RETN instr at address 0x8006bdc73 encrypting function PySymtable_Build with key aac74dc7da476edeeb1691fc9c9f7e3f instrumenting RETN instr at address 0x800700aea instrumenting RETN instr at address 0x800700b0c instrumenting RETN instr at address 0x800700b1a encrypting function PyObject_HasAttrString with key 07660b46e6ae5f6b2bebd62d0ce12893 instrumenting RETN instr at address 0x80065d895 instrumenting RETN instr at address 0x80065d8aa instrumenting RETN instr at address 0x80065d8ba encrypting function PyComplex_FromCComplex with key 094fd17b13a54662d1c60196bddddbec instrumenting RETN instr at address 0x8006237f5 instrumenting JMP instr at address 0x800623805 encrypting function PyBuffer_Release with key d6ca3120eafbe57c5d87eb15c9497de9 instrumenting RETN instr at address 0x800608c67 instrumenting JMP instr at address 0x800608c81 encrypting function _Py_dg_freedtoa with key aa0d27fa6c26323fab94df2a26d2e888 instrumenting RETN instr at address 0x800709392 instrumenting JMP instr at address 0x80070939b encrypting function _Py_dg_infinity with key 790af5eeabcbaec6a6e6e0e3a0b874cb instrumenting RETN instr at address 0x8007073b1 instrumenting RETN instr at address 0x8007073b8 encrypting function _PyDict_KeysSize with key cb979b6701c5fb991a4355232abc394e instrumenting RETN instr at address 0x8006546ee encrypting function Py_ReprLeave with key 64fb82938ff8d72f2b925d14b925b4ad instrumenting RETN instr at address 0x80065edaf encrypting function Py_UNICODE_strncmp with key e3c2a5e57f2c1437fe8603f03ea449c8 instrumenting RETN instr at address 0x8006b264d instrumenting RETN instr at address 0x8006b265d encrypting function PyEval_ThreadsInitialized with key 7f7effef95c71003d831e528b60cb8ef instrumenting RETN instr at address 0x8006c79fb encrypting function _Py_RestoreSignals with key a5995a1e56ed91516d392309d76a671f instrumenting JMP instr at address 0x8006f6ccb encrypting function PySys_HasWarnOptions with key c363ddde699ba2fc929c080e4e8ce99d instrumenting RETN instr at address 0x800702802 instrumenting RETN instr at address 0x80070280a encrypting function _Py_log1p with key 4a3101424a9c1e5d26832a95d588ceb6 instrumenting RETN instr at address 0x8007f659c instrumenting JMP instr at address 0x8007f65a0 not encrypting function pthread_mutex_destroy@@GLIBC_2.2.5 as it's not in .text not encrypting function setgid@@GLIBC_2.2.5 as it's not in .text encrypting function PyBlake2_blake2b_init with key 9a195cfc0a2cb73203c65400dfd761ce instrumenting RETN instr at address 0x8007f8326 instrumenting RETN instr at address 0x8007f8335 not encrypting function posix_fallocate64@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicode_GetSize with key b7148deb4b36c240226337e3b1374241 instrumenting RETN instr at address 0x800698078 instrumenting RETN instr at address 0x800698085 instrumenting RETN instr at address 0x8006980a4 encrypting function _PyType_Lookup with key bdae35b47615ab82b77f5ccc4fb27af9 instrumenting RETN instr at address 0x8006740f3 encrypting function _PyUnicode_Ready with key 7df5f5e34ba08d43efa53f7ee44953a7 instrumenting RETN instr at address 0x800681b5c instrumenting RETN instr at address 0x8006821c1 encrypting function Py_SymtableStringObject with key 1776ba32e11b3a67e735191d3952c02a instrumenting RETN instr at address 0x8006f9c4b instrumenting RETN instr at address 0x8006f9c5f encrypting function PySequence_Repeat with key e8c1c92940f217296d3f085eedef9d81 instrumenting JMP instr at address 0x80060b281 instrumenting RETN instr at address 0x80060b2ca instrumenting RETN instr at address 0x80060b308 encrypting function PySymtable_Lookup with key cffb2178382a5338cf79bd71f562dd29 instrumenting RETN instr at address 0x800700b60 instrumenting RETN instr at address 0x800700b7b instrumenting RETN instr at address 0x800700b8b not encrypting function write@@GLIBC_2.2.5 as it's not in .text encrypting function _PyImportZip_Init with key a5091c26b91dd11c85f17208eccbacda instrumenting RETN instr at address 0x8006eb948 instrumenting JMP instr at address 0x8006eb97f instrumenting RETN instr at address 0x8006eb9be encrypting function _PyTime_FromNanoseconds with key 55ea6328e8237bfb320312f281c8bfa0 instrumenting RETN instr at address 0x8006fb6e3 not encrypting function listxattr@@GLIBC_2.3 as it's not in .text encrypting function PyRun_File with key 02715eb1621adf9e827c29926c8032ef instrumenting RETN instr at address 0x8006faea2 encrypting function _PyObject_CallMethodId with key 7650bbfeec85169c54b4f413005f374c instrumenting RETN instr at address 0x80060cf5c instrumenting RETN instr at address 0x80060cf7d instrumenting RETN instr at address 0x80060cf95 encrypting function PyUnicode_DecodeUTF8 with key 9589a9807480cddd2d9358f5670f96fd instrumenting JMP instr at address 0x8006a89e2 encrypting function _PyCFunction_FastCallKeywords with key 755150427ca44f5b63610e20a5a3d81a instrumenting JMP instr at address 0x80065b44e instrumenting RETN instr at address 0x80065b4b0 not encrypting function sched_get_priority_min@@GLIBC_2.2.5 as it's not in .text encrypting function _Py_Dict with key c6cd3386ead60a42c96bff5e8eb030e8 instrumenting RETN instr at address 0x8007e099c encrypting function PyParser_ParseStringFlags with key 691057c3ccc3ae5e7b463ed85cab6ad6 instrumenting JMP instr at address 0x8007ce4bd encrypting function _PyTraceMalloc_Fini with key 9dd98d59cf6ff021a3689a20d8fda8a1 instrumenting RETN instr at address 0x800758379 instrumenting RETN instr at address 0x8007584e1 instrumenting JMP instr at address 0x8007584f4 encrypting function _PyUnicode_IsCased with key 8be604be1b8e9d4f4229385a8d5cae77 instrumenting RETN instr at address 0x8006be1c3 encrypting function PyLong_AsUnsignedLongMask with key 78bce4175ff8c9898b6495afa30c4db1 instrumenting RETN instr at address 0x800647921 instrumenting RETN instr at address 0x8006479bf not encrypting function futimens@@GLIBC_2.6 as it's not in .text not encrypting function openpty@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicodeTranslateError_Create with key f0e64c7b8a4ff4e07469bdad13240af1 instrumenting RETN instr at address 0x80062a84e encrypting function _Py_get_387controlword with key b6f0eac5cdd849d46e1ae7beab1ef1c2 instrumenting RETN instr at address 0x8006f6cd9 encrypting function PyInit_array with key fd4746eed5f7feab6b7e0ddfaca20a93 instrumenting JMP instr at address 0x80075d6d7 encrypting function PyParser_ASTFromStringObject with key 7b8a811c7c9290b11ef3b3d2de466c18 instrumenting RETN instr at address 0x8006f98a4 instrumenting RETN instr at address 0x8006f98d6 encrypting function _PyObject_LookupSpecial with key 944d6c5883c9a4cd05d163ce4b044125 instrumenting JMP instr at address 0x80067464d instrumenting RETN instr at address 0x800674655 not encrypting function tcgetpgrp@@GLIBC_2.2.5 as it's not in .text not encrypting function XML_SetCharacterDataHandler as it's not in .text encrypting function PyOS_strtol with key de5ecad5d437f5a013f3d85cad0fdbc3 instrumenting RETN instr at address 0x8007f648f instrumenting RETN instr at address 0x8007f64b0 instrumenting RETN instr at address 0x8007f64d0 encrypting function PySlice_Fini with key e32ea845897f6d9aea5488bfba0f6671 instrumenting JMP instr at address 0x800669927 instrumenting RETN instr at address 0x800669930 not encrypting function fxstatat64@@GLIBC_2.4 as it's not in .text not encrypting function pathconf@@GLIBC_2.2.5 as it's not in .text encrypting function PyImport_GetImporter with key be3eb4ad5db0075f059d5737d6bd4629 instrumenting RETN instr at address 0x8006ea7e4 not encrypting function accept@@GLIBC_2.2.5 as it's not in .text encrypting function PyList_New with key 8cf901ec1321d2f6f6c02f359df2519c instrumenting RETN instr at address 0x80063ac21 instrumenting JMP instr at address 0x80063ac4a encrypting function PyHash_GetFuncDef with key 38c1537cac412b502639012e71b4a6f9 instrumenting RETN instr at address 0x8006f4c57 encrypting function PyErr_SetFromErrno with key 54abf081a4be4528e8f9ee0db436eb20 instrumenting JMP instr at address 0x8006e1ea4 encrypting function _Py_AnnAssign with key 7717a77aee1da4316572ce940394497b instrumenting RETN instr at address 0x8007dff0f not encrypting function sqrt@@GLIBC_2.2.5 as it's not in .text encrypting function PyType_GenericAlloc with key a9df403af2b395a77de470ec4c9308af instrumenting RETN instr at address 0x80066d0d3 instrumenting JMP instr at address 0x80066d105 encrypting function PyMem_Malloc with key ba4dd42141d880a317c47e1420b29d0d instrumenting JMP instr at address 0x800660f3f instrumenting RETN instr at address 0x800660f4a encrypting function PyObject_CheckReadBuffer with key 70193367b315b2f33c18ff6a0f19da56 instrumenting RETN instr at address 0x800608cce instrumenting RETN instr at address 0x800608cd2 instrumenting RETN instr at address 0x800608ce4 not encrypting function strtoul@@GLIBC_2.2.5 as it's not in .text encrypting function _PySHA3_KeccakP1600_Permute_12rounds with key fda6cc3e85819b2acb96e27d51ac552a instrumenting RETN instr at address 0x8007a5717 encrypting function PyCallable_Check with key 98333c264e43fc24a261f33981428ca3 instrumenting RETN instr at address 0x80065e337 instrumenting RETN instr at address 0x80065e342 not encrypting function sigaltstack@@GLIBC_2.2.5 as it's not in .text not encrypting function readv@@GLIBC_2.2.5 as it's not in .text not encrypting function pthread_mutex_unlock@@GLIBC_2.2.5 as it's not in .text encrypting function PyErr_PrintEx with key 38c53ce52f7f92f79bda7f408db3be05 instrumenting RETN instr at address 0x8006f957e instrumenting RETN instr at address 0x8006f95bb not encrypting function pthread_kill@@GLIBC_2.2.5 as it's not in .text not encrypting function inet_ntop@@GLIBC_2.2.5 as it's not in .text not encrypting function sigwait@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicode_AsUTF8String with key 1ebf45a90850ff27676a80e87208f978 instrumenting JMP instr at address 0x800698d22 not encrypting function sched_cpualloc@@GLIBC_2.7 as it's not in .text not encrypting function sched_cpufree@@GLIBC_2.7 as it's not in .text encrypting function PyUnicode_AsUTF8 with key 0a031b6284b826b8b934252e2d6741f3 instrumenting JMP instr at address 0x800698cb2 not encrypting function umask@@GLIBC_2.2.5 as it's not in .text not encrypting function memcpy@@GLIBC_2.14 as it's not in .text not encrypting function fcntl@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicode_InternInPlace with key 43b1623aa75fd8ee3fac12c17a585ff9 instrumenting RETN instr at address 0x8006b1ff2 instrumenting JMP instr at address 0x8006b2075 instrumenting JMP instr at address 0x8006b20bf encrypting function PyInitweakref with key a6f1631febb36c4070d08c1bee43a7d7 instrumenting RETN instr at address 0x8007589c1 encrypting function PyEval_ReInitThreads with key b18b88a32535f9839593f6f66ec6cbe0 instrumenting JMP instr at address 0x8006c7ee6 instrumenting RETN instr at address 0x8006c7ef6 instrumenting JMP instr at address 0x8006c7f16 encrypting function PyCapsule_GetPointer with key e2b209369ffaa34f6a35268ebbccbfbd instrumenting RETN instr at address 0x8006629bf encrypting function _PyObject_CallMethod_SizeT with key 1417baae4ee9115ac25689e41f2224f8 instrumenting RETN instr at address 0x80060d08f instrumenting RETN instr at address 0x80060d0ad instrumenting RETN instr at address 0x80060d0c5 not encrypting function setgroups@@GLIBC_2.2.5 as it's not in .text encrypting function Py_IsInitialized with key 05caa8713e02503d18428f6c078602f4 instrumenting RETN instr at address 0x8006f5836 not encrypting function fchown@@GLIBC_2.2.5 as it's not in .text encrypting function PyDict_Clear with key 3486c77614461a94cbd744390174d01c instrumenting RETN instr at address 0x800652a6e instrumenting RETN instr at address 0x800652a70 instrumenting JMP instr at address 0x800652a8c encrypting function PyObject_GC_Track with key f369319b26dd7f301a7cffea09b3e6d9 instrumenting RETN instr at address 0x8007139e2 encrypting function _PySys_GetSizeOf with key 846f9acb1dcd5977545f9a3ef25e24bc instrumenting RETN instr at address 0x8007025fb instrumenting RETN instr at address 0x800702637 encrypting function PyBlake2_blake2s with key 46e08ba48eefc189ee5dee77acab8226 instrumenting RETN instr at address 0x8007628bb instrumenting RETN instr at address 0x8007628df encrypting function PyUnicode_DecodeLatin1 with key b4fb1038ede690f6341763d0add97f13 instrumenting RETN instr at address 0x80069c495 instrumenting RETN instr at address 0x80069c4dd encrypting function _Py_Name with key a9f078f2460645ba4a458cec1e6ee150 instrumenting RETN instr at address 0x8007e139f instrumenting RETN instr at address 0x8007e13c2 not encrypting function dup3@@GLIBC_2.9 as it's not in .text encrypting function _Py_bytes_contains with key 924f78d55f9c664c9c49df5244b99fc8 instrumenting RETN instr at address 0x8007d40b4 encrypting function _PyImport_FindExtensionObject with key c02019c354dbba182b4476fc8814cbda instrumenting RETN instr at address 0x8006e9ef9 instrumenting RETN instr at address 0x8006e9f3f encrypting function _PyUnicode_XStrip with key 4955c36ebd93e707e4c0b53766e9aac1 instrumenting JMP instr at address 0x8006a182a instrumenting RETN instr at address 0x8006a1a3e encrypting function PyNumber_Index with key ace73a1367a78656e3938da6523b6855 instrumenting RETN instr at address 0x80060a57d instrumenting RETN instr at address 0x80060a596 instrumenting RETN instr at address 0x80060a5ab encrypting function _Py_Slice with key 3636314049d0f06934223c34b65fc036 instrumenting RETN instr at address 0x8007e1537 encrypting function PyThread_start_new_thread with key 345dc21e9309f94b8bf5990bc019a27a instrumenting RETN instr at address 0x80070ff72 encrypting function _PyTraceMalloc_Track with key 728d83f4b4a94cdaa009a41dd59a9ca0 instrumenting RETN instr at address 0x800758564 encrypting function PyDict_MergeFromSeq2 with key 1928529d67275d9451b8763a84b1190e instrumenting RETN instr at address 0x800653721 not encrypting function getpwnam@@GLIBC_2.2.5 as it's not in .text not encrypting function strncat_chk@@GLIBC_2.3.4 as it's not in .text not encrypting function sin@@GLIBC_2.2.5 as it's not in .text encrypting function _Py_DumpASCII with key 1fd918390516c4034236f6323055c8e6 instrumenting RETN instr at address 0x800704ef1 instrumenting RETN instr at address 0x800704ef8 encrypting function PyParser_Delete with key d4a7845ef94dd94aae2ffd9655d86872 instrumenting JMP instr at address 0x8007f9594 not encrypting function inflateCopy@@ZLIB_1.2.0 as it's not in .text not encrypting function log@@GLIBC_2.2.5 as it's not in .text not encrypting function rename@@GLIBC_2.2.5 as it's not in .text encrypting function PyDict_SetItem with key 613b063257a26dba77045fc38d705d8d instrumenting JMP instr at address 0x8006521f5 instrumenting RETN instr at address 0x800652226 encrypting function _PyBuiltin_Init with key 8d46af73145779a76d6a3a5eedb6a04d instrumenting RETN instr at address 0x8006c7049 not encrypting function XML_SetUnparsedEntityDeclHandler as it's not in .text not encrypting function sched_setaffinity@@GLIBC_2.3.4 as it's not in .text encrypting function PyObject_Repr with key 94910a4f1d8de4e253c1c8dba2adf408 instrumenting RETN instr at address 0x80065ccc9 instrumenting RETN instr at address 0x80065cd15 instrumenting JMP instr at address 0x80065cd44 instrumenting JMP instr at address 0x80065cd5b encrypting function _PyLong_FormatWriter with key d55c840fc0f936c88a7d8be5b883b2f7 instrumenting RETN instr at address 0x800649f4d instrumenting JMP instr at address 0x80064a03b encrypting function _Py_AsyncFunctionDef with key 988256182c403dd2a46dd6a1ae699f76 instrumenting RETN instr at address 0x8007dfbe9 encrypting function PySequence_SetSlice with key e5096da8d4a5003a6a264c9aa13f1d9a instrumenting RETN instr at address 0x80060bd8f instrumenting RETN instr at address 0x80060bdac encrypting function _Py_asdl_int_seq_new with key f3a4a56a5d227d546e2e501e6cc163a1 instrumenting RETN instr at address 0x8007ec50b instrumenting RETN instr at address 0x8007ec530 encrypting function _Py_BuildValue_SizeT with key 62fe1bf6fdf87330187c356053fd0ce1 instrumenting RETN instr at address 0x8006f2348 encrypting function _PyUnicode_IsDecimalDigit with key 66429a16d27247d1e97dddf936d39be9 instrumenting RETN instr at address 0x8006bdbb2 encrypting function _PyUnicode_ToLowerFull with key 7be313f9e8fde4c67f6d41e863a08b91 instrumenting RETN instr at address 0x8006bdea5 instrumenting RETN instr at address 0x8006bdebb instrumenting RETN instr at address 0x8006bdeee instrumenting RETN instr at address 0x8006bdeff encrypting function PyGen_NewWithQualName with key 72b7af0e6640b30e876a6fc94728e9eb instrumenting RETN instr at address 0x80062f67a encrypting function PyCapsule_Import with key 2d5c2c30523dbf7be938598ee0788e40 instrumenting RETN instr at address 0x800662df6 instrumenting JMP instr at address 0x800662e28 not encrypting function sethostname@@GLIBC_2.2.5 as it's not in .text encrypting function PyEval_GetFuncDesc with key 6fb7c14eff89c6c45fefafd113e57908 instrumenting RETN instr at address 0x8006c99dc instrumenting RETN instr at address 0x8006c99e7 encrypting function PyObject_GetArenaAllocator with key 8f1b3e9414ce69864d692c151bfc4f95 instrumenting RETN instr at address 0x800660c36 encrypting function _PyUnicode_IsDigit with key 85ee135230a15b013e90657180bf10f5 instrumenting RETN instr at address 0x8006bdc22 not encrypting function readdir64@@GLIBC_2.2.5 as it's not in .text encrypting function PySequence_List with key 21c4a198e5e081c2d702b8f8389da8df instrumenting RETN instr at address 0x80060beec instrumenting RETN instr at address 0x80060bf03 instrumenting RETN instr at address 0x80060bf23 not encrypting function fdelt_chk@@GLIBC_2.15 as it's not in .text not encrypting function hypot@@GLIBC_2.2.5 as it's not in .text encrypting function PyErr_SetInterrupt with key 914d3880cbee6c653a7c3a6bf2463a8c instrumenting RETN instr at address 0x8007b0e7f instrumenting RETN instr at address 0x8007b0eb1 encrypting function PyLong_AsUnsignedLong with key 207debbcac2af045dbbe7f0d9d795b05 instrumenting RETN instr at address 0x80064769b instrumenting RETN instr at address 0x8006476f1 instrumenting RETN instr at address 0x800647719 not encrypting function mkdir@@GLIBC_2.2.5 as it's not in .text encrypting function _PyDict_Next with key cfe0dff8cd36ebfce89bbe52e479df45 instrumenting RETN instr at address 0x800652b2e instrumenting RETN instr at address 0x800652b30 instrumenting RETN instr at address 0x800652b81 not encrypting function time@@GLIBC_2.2.5 as it's not in .text encrypting function _Py_DisplaySourceLine with key ffa7a9dc2045d02a6acba9f0793a5c43 instrumenting JMP instr at address 0x800704945 instrumenting RETN instr at address 0x800704952 encrypting function PyInit__sha1 with key 057c30f106868940971340f309f75936 instrumenting RETN instr at address 0x80079acbc encrypting function _Py_bytes_find with key e6dae2d8f1c74088b2ee4d86c5339a3f instrumenting RETN instr at address 0x8007d2db4 not encrypting function _init as it's not in .text encrypting function _PyUnicode_AsLatin1String with key 9d4ec7cc50fcf6e241099817056dd1a9 instrumenting JMP instr at address 0x80069c628 instrumenting JMP instr at address 0x80069c663 instrumenting JMP instr at address 0x80069c683 instrumenting RETN instr at address 0x80069c69c encrypting function PyTokenizer_FindEncodingFilename with key 1b361ca74d63b8a53b47901019058114 instrumenting RETN instr at address 0x8007d1d0e instrumenting RETN instr at address 0x8007d1d26 encrypting function _PyLong_FromBytes with key b4d21d282e60ab98949a3cd8489fe3d2 instrumenting RETN instr at address 0x80064b901 encrypting function PyDict_New with key 9794ec3317530fc794dd9a0c788efc49 instrumenting RETN instr at address 0x800651aa6 not encrypting function fflush@@GLIBC_2.2.5 as it's not in .text encrypting function Py_GetArgcArgv with key 78c60f3c6514fab05236bbd51dac20eb instrumenting RETN instr at address 0x8005d26b2 encrypting function PyToken_OneChar with key 141b842e2c0a5eabfa4c1bf8dcdff636 instrumenting RETN instr at address 0x8007d09f8 not encrypting function _PyBytes_Join due to first instruction being jmp/ret/call encrypting function _PyIOBase_finalize with key e17b3c9a7c4a74a52d5c29c34cc7c421 instrumenting JMP instr at address 0x800776b66 instrumenting RETN instr at address 0x800776b7f encrypting function _PyFaulthandler_Init with key af7c3bdf4f6fe262c682d5b810376279 instrumenting RETN instr at address 0x80077209f instrumenting RETN instr at address 0x800772101 encrypting function PyInit__blake2 with key 6f5f616679c27e0fe2b4a0a500861619 instrumenting RETN instr at address 0x8007602d7 instrumenting RETN instr at address 0x8007602fe encrypting function PyRun_SimpleFileEx with key 94a9c81015a41faad049cbe3ba0decb9 instrumenting JMP instr at address 0x8006faef2 not encrypting function sync@@GLIBC_2.2.5 as it's not in .text not encrypting function sinh@@GLIBC_2.2.5 as it's not in .text not encrypting function wcstombs@@GLIBC_2.2.5 as it's not in .text not encrypting function fdopendir@@GLIBC_2.4 as it's not in .text encrypting function PySys_SetObject with key b3e572f50a520acd356bfa29f43a3b1f instrumenting JMP instr at address 0x8007024ec instrumenting JMP instr at address 0x800702517 instrumenting RETN instr at address 0x800702528 encrypting function PyThread_acquire_lock with key a1555eef48d10e0565d54d018761d108 instrumenting JMP instr at address 0x80071031f encrypting function _Py_Module with key 2c84c037572b9cf78c66f1632288ac6c instrumenting RETN instr at address 0x8007df9d1 not encrypting function XML_SetHashSalt as it's not in .text not encrypting function getservbyname@@GLIBC_2.2.5 as it's not in .text encrypting function PyUnicodeTranslateError_SetStart with key e2bf60c61ab052c46d2ef96efe5986cd instrumenting RETN instr at address 0x80062a3b6 encrypting function PyCodec_Decode with key 99f94e5d17d2f0c854e79b3f284736b5 instrumenting JMP instr at address 0x8006df8ea instrumenting RETN instr at address 0x8006df8f6 encrypting function PyException_GetTraceback with key 60026480ee696c506ff40f4f59b185c5 instrumenting RETN instr at address 0x800629d8d injected runtime info into loader (old size: 14280 new size: 597820) stripping input binary applying outer encryption with key f22265221dec64c62b0212f8b9f8a2d6 output ELF has been written to _ecRuN

MyraBaba commented 2 years ago

@GunshipPenguin

final binary looks entering an infinite loop and not starting actual program.

GunshipPenguin commented 2 years ago

Based on those symbol names, it looks like you're trying to pack the python interpreter.

I've done that myself and it has worked, however it will be incredibly slow due to Kiteshield's overhead when packing something as complex as the Python interpreter.

As stated in the readme:

Kiteshield was written with obfuscation in mind, not speed. Trapping into the Kiteshield runtime on every function entrance and exit is very expensive. Programs packed with layer 2 encryption should expect a serious performance hit.

As I recall, it took several minutes for a packed Python interpreter to actually run a simple print("Hello World") on my machine. To actually verify the packed binary is doing work, build Kiteshield in debug mode and take a look at the output from the packed binary.

MyraBaba commented 2 years ago

@GunshipPenguin

Yes its really slow , after few hours I stopped it :)

Is it feasible to make c++ program just decrypt a file and run the file ? Is it also too slow or could be acceptable speed ? According to your experience

Best