@malakudi: you're the big boss!
I'm using debian sid and during last compilation of filezilla ftp switched to auto (I didn't realize that).
After switching to binary all works as excepted.
But it's time for a little bit reverse engeneering.
In the meantime I've different versions auf the pau binary.
All of them uses
librt.so.1
libstdc++.so.6
libm.so.6libgcc_s.so.1
libc.so.6
One of them contains 550 unreadable bytes (I don't know to handle that).
The pau from the post up instead contains crypto calls:
0: 00000000 0 NOTYPE LOCAL DEFAULT UND
1: 00000001 0 SECTION GLOBAL DEFAULT ABS _DYNAMIC_LINKING
2: 00000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses
3: 00000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@GLIBC_2.0 (2)
4: 00408730 4 OBJECT GLOBAL DEFAULT 17 _IO_stdin_used
5: 0041b3b0 0 OBJECT GLOBAL DEFAULT 24 __RLD_MAP
6: 00402070 3100 FUNC GLOBAL DEFAULT 14 aes_setkey_enc
7: 00400998 0 FUNC GLOBAL DEFAULT 12 _init
8: 0040808c 1092 FUNC GLOBAL DEFAULT 14 B64Encode
9: 00407548 740 FUNC GLOBAL DEFAULT 14 md5_append
10: 004086d0 0 FUNC GLOBAL DEFAULT UND rand@GLIBC_2.0 (2)
11: 004086c0 0 FUNC GLOBAL DEFAULT UND puts@GLIBC_2.0 (2)
12: 00407abc 1408 FUNC GLOBAL DEFAULT 14 B64Decode
13: 00405558 276 FUNC GLOBAL DEFAULT 14 AesDecrypt
14: 0040152c 480 FUNC GLOBAL DEFAULT 14 Hex2Byte
15: 004079e0 220 FUNC GLOBAL DEFAULT 14 B64DecodeLength
16: 00401394 204 FUNC GLOBAL DEFAULT 14 RandomByte
17: 004086b0 0 FUNC GLOBAL DEFAULT UND time@GLIBC_2.0 (2)
18: 004086a0 0 FUNC GLOBAL DEFAULT UND clock_gettime@GLIBC_2.2 (3)
19: 00401a50 780 FUNC GLOBAL DEFAULT 14 B64Decrypt
20: 00408690 0 FUNC GLOBAL DEFAULT UND printf@GLIBC_2.0 (2)
21: 00401460 204 FUNC GLOBAL DEFAULT 14 Byte2Hex
22: 0040515c 744 FUNC GLOBAL DEFAULT 14 AesCtxInit
23: 00408680 0 FUNC GLOBAL DEFAULT UND strlen@GLIBC_2.0 (2)
24: 00408670 0 FUNC GLOBAL DEFAULT UND memcpy@GLIBC_2.0 (2)
25: 00401d5c 784 FUNC GLOBAL DEFAULT 14 B64Encrypt
26: 00408660 0 FUNC GLOBAL DEFAULT UND ioctl@GLIBC_2.0 (2)
27: 00408650 0 FUNC GLOBAL DEFAULT UND free@GLIBC_2.0 (2)
28: 00408640 0 FUNC GLOBAL DEFAULT UND perror@GLIBC_2.0 (2)
29: 004033c8 3780 FUNC GLOBAL DEFAULT 14 AesEncBlk
30: 00405444 276 FUNC GLOBAL DEFAULT 14 AesEncrypt
31: 00408630 0 FUNC GLOBAL DEFAULT UND memset@GLIBC_2.0 (2)
32: 0040803c 80 FUNC GLOBAL DEFAULT 14 B64EncodeLength
33: 00408620 0 FUNC GLOBAL DEFAULT UND putchar@GLIBC_2.0 (2)
34: 00408610 0 FUNC GLOBAL DEFAULT UND calloc@GLIBC_2.0 (2)
35: 00402c8c 1852 FUNC GLOBAL DEFAULT 14 AesGenKeySched
36: 00000000 0 FUNC WEAK DEFAULT UND __gmon_start__
37: 00401280 276 FUNC GLOBAL DEFAULT 14 GenRandomBytes
38: 00408600 0 FUNC GLOBAL DEFAULT UND open@GLIBC_2.0 (2)
39: 004085f0 0 FUNC GLOBAL DEFAULT UND srand@GLIBC_2.0 (2)
40: 004085e0 0 FUNC GLOBAL DEFAULT UND sprintf@GLIBC_2.0 (2)
41: 0040428c 3792 FUNC GLOBAL DEFAULT 14 AesDecBlk
42: 00000000 0 FUNC GLOBAL DEFAULT UND __gxx_personality_v0@CXXABI_1.3 (4)
and there are lots of .symtab and .dynsym entries.
Again you're wellcome for the "transfer option"....
Best regards
Mike