792 ktrace RET ktrace 0 792 ktrace CALL execve(0xbfbfe820,0xbfbfed70,0xbfbfed78) 792 ktrace NAMI "/sbin/adduser" 792 ktrace RET execve -1 errno 2 No such file or directory 792 ktrace CALL execve(0xbfbfe820,0xbfbfed70,0xbfbfed78) 792 ktrace NAMI "/bin/adduser" 792 ktrace RET execve -1 errno 2 No such file or directory 792 ktrace CALL execve(0xbfbfe820,0xbfbfed70,0xbfbfed78) 792 ktrace NAMI "/usr/sbin/adduser" 792 ktrace NAMI "/bin/sh" 792 ktrace NAMI "/libexec/ld-elf.so.1" 792 sh RET execve 0 792 sh CALL mmap(0,0xf50,0x3,0x1000,0xffffffff,0,0,0) 792 sh RET mmap 403202048/0x18086000 792 sh CALL munmap(0x18086000,0xf50) 792 sh RET munmap 0 792 sh CALL __sysctl(0xbfbfeb10,0x2,0x18082c58,0xbfbfeb0c,0,0) 792 sh RET __sysctl 0 792 sh CALL mmap(0,0x8000,0x3,0x1002,0xffffffff,0,0,0) 792 sh RET mmap 403202048/0x18086000 792 sh CALL issetugid 792 sh RET issetugid 0 792 sh CALL open(0x1807e0c6,0,0x1b6) 792 sh NAMI "/etc/libmap.conf" 792 sh RET open 3 792 sh CALL fstat(0x3,0xbfbfe328) 792 sh RET fstat 0 792 sh CALL read(0x3,0x1808a000,0x2000) 792 sh GIO fd 3 read 79 bytes "[mysqld] libpthread.so.1 libthr.so.1 libpthread.so libthr.so " 792 sh RET read 79/0x4f 792 sh CALL read(0x3,0x1808a000,0x2000) 792 sh GIO fd 3 read 0 bytes "" 792 sh RET read 0 792 sh CALL close(0x3) 792 sh RET close 0 792 sh CALL open(0x1807db61,0,0) 792 sh NAMI "/var/run/ld-elf.so.hints" 792 sh RET open 3 792 sh CALL read(0x3,0xbfbfebb8,0x80) 792 sh GIO fd 3 read 128 bytes 0x0000 4568 6e74 0100 0000 8000 0000 4000 0000 |Ehnt........@...| 0x0010 0000 0000 3f00 0000 0000 0000 0000 0000 |....?...........| 0x0020 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0030 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0040 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0050 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0060 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0070 0000 0000 0000 0000 0000 0000 0000 0000 |................| 792 sh RET read 128/0x80 792 sh CALL lseek(0x3,0,0x80,0,0) 792 sh RET lseek 128/0x80 792 sh CALL read(0x3,0x1808d000,0x40) 792 sh GIO fd 3 read 64 bytes "/lib:/usr/lib:/usr/lib/compat:/usr/local/lib:/usr/local/db4/lib\0" 792 sh RET read 64/0x40 792 sh CALL close(0x3) 792 sh RET close 0 792 sh CALL mmap(0,0x9000,0x3,0x1002,0xffffffff,0,0,0) 792 sh RET mmap 403234816/0x1808e000 792 sh CALL access(0x1808f000,0) 792 sh NAMI "/lib/libedit.so.4" 792 sh RET access 0 792 sh CALL open(0x180870c0,0,0) 792 sh NAMI "/lib/libedit.so.4" 792 sh RET open 3 792 sh CALL fstat(0x3,0xbfbfec08) 792 sh RET fstat 0 792 sh CALL read(0x3,0x18081ba0,0x1000) 792 sh GIO fd 3 read 4096 bytes 0x0000 7f45 4c46 0101 0109 0000 0000 0000 0000 |.ELF............| 0x0010 0300 0300 0100 0000 a824 0000 3400 0000 |.........$..4...| 0x0020 2035 0100 0000 0000 3400 2000 0300 2800 | 5......4. ...(.| 0x0030 1500 1400 0100 0000 0000 0000 0000 0000 |................| 0x0040 0000 0000 5d1c 0100 5d1c 0100 0500 0000 |....]...].......| 0x0050 0010 0000 0100 0000 0020 0100 0020 0100 |......... ... ..| 0x0060 0020 0100 b40e 0000 dc0e 0000 0600 0000 |. ..............| 0x0070 0010 0000 0200 0000 ac2c 0100 ac2c 0100 |.........,...,..| 0x0080 ac2c 0100 b000 0000 b000 0000 0600 0000 |.,..............| 0x0090 0400 0000 6100 0000 7400 0000 3000 0000 |....a...t...0...| 0x00a0 0000 0000 5300 0000 4500 0000 0000 0000 |....S...E.......| 0x00b0 5900 0000 0000 0000 6300 0000 5b00 0000 |Y.......c...[...| 0x00c0 0000 0000 0000 0000 3200 0000 0000 0000 |........2.......| 0x00d0 6d00 0000 0000 0000 6c00 0000 6e00 0000 |m.......l...n...| 0x00e0 4400 0000 3300 0000 3600 0000 5e00 0000 |D...3...6...^...| 0x00f0 5800 0000 3800 0000 0000 0000 0000 0000 |X...8...........| 0x0100 2500 0000 0000 0000 6100 0000 5d00 0000 |%.......a...]...| 0x0110 2900 0000 3700 0000 0000 0000 5700 0000 |)...7.......W...| 0x0120 5000 0000 6b00 0000 0000 0000 4b00 0000 |P...k.......K...| 0x0130 2d00 0000 0000 0000 2600 0000 0000 0000 |-.......&.......| 0x0140 4300 0000 6f00 0000 6400 0000 5600 0000 |C...o...d...V...| 0x0150 3a00 0000 5c00 0000 5a00 0000 6000 0000 |:...\...Z...`...| 0x0160 2200 0000 0000 0000 6700 0000 1b00 0000 |".......g.......| 0x0170 0000 0000 5400 0000 0000 0000 0000 0000 |....T...........| 0x0180 4700 0000 2300 0000 0000 0000 4000 0000 |G...#.......@...| 0x0190 4600 0000 7300 0000 6800 0000 3900 0000 |F...s...h...9...| 0x01a0 0000 0000 6500 0000 0000 0000 7200 0000 |....e.......r...| 0x01b0 0000 0000 0000 0000 5f00 0000 3b00 0000 |........_...;...| 0x01c0 0000 0000 0000 0000 4c00 0000 0000 0000 |........L.......| 0x01d0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x01e0 6200 0000 3400 0000 3d00 0000 7100 0000 |b...4...=...q...| 0x01f0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0200 4f00 0000 4100 0000 7000 0000 0000 0000 |O...A...p.......| 0x0210 5200 0000 0000 0000 1f00 0000 0000 0000 |R...............| 0x0220 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0230 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0240 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0250 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0260 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0270 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0280 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0290 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x02a0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x02b0 0000 0000 0000 0000 1e00 0000 0000 0000 |................| 0x02c0 0000 0000 0000 0000 1800 0000 1500 0000 |................| 0x02d0 0000 0000 0000 0000 0000 0000 1900 0000 |................| 0x02e0 0000 0000 0000 0000 1c00 0000 2100 0000 |............!...| 0x02f0 2a00 0000 0000 0000 0000 0000 2800 0000 |*...........(...| 0x0300 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0310 0000 0000 0000 0000 2b00 0000 3c00 0000 |........+...<...| 0x0320 0000 0000 0000 0000 2400 0000 0000 0000 |........$.......| 0x0330 2c00 0000 3500 0000 0000 0000 2f00 0000 |,...5......./...| 0x0340 1a00 0000 0000 0000 0000 0000 0000 0000 |................| 0x0350 2700 0000 0000 0000 0000 0000 1400 0000 |'...............| 0x0360 0000 0000 0000 0000 3100 0000 5100 0000 |........1...Q...| 0x0370 0000 0000 4a00 0000 3f00 0000 0000 0000 |....J...?.......| 0x0380 0000 0000 1600 0000 2e00 0000 0000 0000 |................| 0x0390 0000 0000 5500 0000 4800 0000 3e00 0000 |....U...H...>...| 0x03a0 2000 0000 4900 0000 0000 0000 1700 0000 | ...I...........| 0x03b0 4200 0000 4d00 0000 0000 0000 0000 0000 |B...M...........| 0x03c0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x03d0 0000 0000 0000 0000 1d00 0000 6a00 0000 |............j...| 0x03e0 0000 0000 6600 0000 4e00 0000 6900 0000 |....f...N...i...| 0x03f0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0400 0000 0000 9400 0000 0000 0000 0300 0100 |................| 0x0410 0000 0000 f003 0000 0000 0000 0300 0200 |................| 0x0420 0000 0000 300b 0000 0000 0000 0300 0300 |....0...........| 0x0430 0000 0000 bc0e 0000 0000 0000 0300 0400 |................| 0x0440 0000 0000 e41d 0000 0000 0000 0300 0500 |................| 0x0450 0000 0000 1c20 0000 0000 0000 0300 0600 |..... ..........| 0x0460 0000 0000 2820 0000 0000 0000 0300 0700 |....( ..........| 0x0470 0000 0000 a824 0000 0000 0000 0300 0800 |.....$..........| 0x0480 0000 0000 d4f2 0000 0000 0000 0300 0900 |................| 0x0490 0000 0000 e0f2 0000 0000 0000 0300 0a00 |................| 0x04a0 0000 0000 0020 0100 0000 0000 0300 0b00 |..... ..........| 0x04b0 0000 0000 a82c 0100 0000 0000 0300 0c00 |.....,..........| 0x04c0 0000 0000 ac2c 0100 0000 0000 0300 0d00 |.....,..........| 0x04d0 0000 0000 5c2d 0100 0000 0000 0300 0e00 |....\-..........| 0x04e0 0000 0000 642d 0100 0000 0000 0300 0f00 |....d-..........| 0x04f0 0000 0000 6c2d 0100 0000 0000 0300 1000 |....l-..........| 0x0500 0000 0000 702d 0100 0000 0000 0300 1100 |....p-..........| 0x0510 0000 0000 b42e 0100 0000 0000 0300 1200 |................| 0x0520 0000 0000 0000 0000 0000 0000 0300 1300 |................| 0x0530 bd02 0000 0000 0000 0000 0000 1000 0000 |................| 0x0540 f102 0000 0000 0000 0000 0000 1000 0000 |................| 0x0550 e102 0000 0000 0000 a800 0000 1200 0000 |................| 0x0560 2103 0000 0000 0000 0000 0000 1000 0000 |!...............| 0x0570 f501 0000 0000 0000 0000 0000 1000 0000 |................| 0x0580 1f02 0000 0000 0000 0000 0000 1000 0000 |................| 0x0590 0100 0000 ac2c 0100 0000 0000 1100 f1ff |.....,..........| 0x05a0 c402 0000 0000 0000 5400 0000 1200 0000 |........T.......| 0x05b0 e401 0000 0000 0000 0000 0000 1000 0000 |................| 0x05c0 f500 0000 0000 0000 0000 0000 1000 0000 |................| 0x05d0 a901 0000 8c54 0000 9900 0000 1200 0800 |.....T..........| 0x05e0 1901 0000 0000 0000 0000 0000 1000 0000 |................| 0x05f0 2600 0000 0000 0000 0000 0000 2000 0000 |&........... ...| 0x0600 4502 0000 54ed 0000 ad00 0000 1200 0800 |E...T...........| 0x0610 4e02 0000 70ee 0000 3404 0000 1200 0800 |N...p...4.......| 0x0620 7700 0000 0000 0000 0000 0000 1000 0000 |w...............| 0x0630 1503 0000 0000 0000 0000 0000 1000 0000 |................| 0x0640 d802 0000 0000 0000 8e00 0000 1200 0000 |................| 0x0650 5702 0000 6c7e 0000 1801 0000 1200 0800 |W...l~..........| 0x0660 fd02 0000 0000 0000 0000 0000 1000 0000 |................| 0x0670 bc01 0000 3c55 0000 0e00 0000 1200 0800 |...............| 0x0200 8d01 0000 3a02 0000 0000 0000 0000 0000 |....:...........| 0x0210 c400 0000 0e02 0000 0000 0000 a701 0000 |................| 0x0220 1702 0000 0000 0000 a301 0000 7301 0000 |............s...| 0x0230 0000 0000 0000 0000 d001 0000 d401 0000 |................| 0x0240 cf01 0000 0b02 0000 2702 0000 0000 0000 |........'.......| 0x0250 0000 0000 cb00 0000 7800 0000 3e02 0000 |........x...>...| 0x0260 4700 0000 ea01 0000 b501 0000 8801 0000 |G...............| 0x0270 ce01 0000 0101 0000 cb01 0000 5901 0000 |............Y...| 0x0280 0000 0000 4c01 0000 f701 0000 0000 0000 |....L...........| 0x0290 b600 0000 1c02 0000 b701 0000 0000 0000 |................| 0x02a0 0000 0000 2001 0000 fc01 0000 f801 0000 |.... ...........| 0x02b0 f600 0000 0000 0000 2100 0000 ab01 0000 |........!.......| 0x02c0 7c01 0000 0000 0000 0000 0000 6701 0000 ||...........g...| 0x02d0 df00 0000 0000 0000 1600 0000 a501 0000 |................| 0x02e0 0000 0000 7900 0000 cc01 0000 8b00 0000 |....y...........| 0x02f0 bd01 0000 0000 0000 2202 0000 0000 0000 |........".......| 0x0300 dd01 0000 1501 0000 c000 0000 0000 0000 |................| 0x0310 3d01 0000 6501 0000 2802 0000 dc01 0000 |=...e...(.......| 0x0320 e801 0000 1502 0000 9301 0000 0000 0000 |................| 0x0330 0000 0000 ef01 0000 ff01 0000 0000 0000 |................| 0x0340 3f02 0000 8501 0000 1f02 0000 fd00 0000 |?...............| 0x0350 0000 0000 0000 0000 3000 0000 4f01 0000 |........0...O...| 0x0360 0a01 0000 4301 0000 1500 0000 e101 0000 |....C...........| 0x0370 a101 0000 0000 0000 e201 0000 0000 0000 |................| 0x0380 2e02 0000 3c02 0000 dc00 0000 0000 0000 |....<...........| 0x0390 3400 0000 0000 0000 0000 0000 0102 0000 |4...............| 0x03a0 0000 0000 a801 0000 0000 0000 3401 0000 |............4...| 0x03b0 3902 0000 a401 0000 b901 0000 c500 0000 |9...............| 0x03c0 d900 0000 6f00 0000 0000 0000 0000 0000 |....o...........| 0x03d0 0000 0000 0000 0000 9401 0000 0000 0000 |................| 0x03e0 ec01 0000 f601 0000 8500 0000 7601 0000 |............v...| 0x03f0 5301 0000 1401 0000 0000 0000 3802 0000 |S...........8...| 0x0400 5b00 0000 d301 0000 0000 0000 0000 0000 |[...............| 0x0410 c900 0000 0000 0000 0000 0000 0000 0000 |................| 0x0420 2f02 0000 3801 0000 1c00 0000 5f01 0000 |/...8......._...| 0x0430 3302 0000 1d02 0000 f301 0000 0000 0000 |3...............| 0x0440 2f01 0000 5e01 0000 0000 0000 0002 0000 |/...^...........| 0x0450 0000 0000 6801 0000 9101 0000 ff00 0000 |....h...........| 0x0460 0000 0000 0000 0000 0000 0000 2a02 0000 |............*...| 0x0470 2502 0000 0000 0000 b100 0000 0000 0000 |%...............| 0x0480 9701 0000 9e01 0000 3102 0000 0000 0000 |........1.......| 0x0490 2b01 0000 0000 0000 3900 0000 b400 0000 |+.......9.......| 0x04a0 4901 0000 0000 0000 0000 0000 0000 0000 |I...............| 0x04b0 0000 0000 e501 0000 0000 0000 3c01 0000 |............<...| 0x04c0 6001 0000 1002 0000 0000 0000 0000 0000 |`...............| 0x04d0 0901 0000 0000 0000 8a01 0000 0000 0000 |................| 0x04e0 0000 0000 2e01 0000 0000 0000 0000 0000 |................| 0x04f0 0000 0000 e100 0000 0000 0000 b601 0000 |................| 0x0500 1a02 0000 1402 0000 a001 0000 6101 0000 |............a...| 0x0510 0000 0000 4400 0000 f901 0000 8601 0000 |....D...........| 0x0520 0000 0000 0f02 0000 1202 0000 ed00 0000 |................| 0x0530 0000 0000 4701 0000 fb01 0000 1e02 0000 |....G...........| 0x0540 5c01 0000 0000 0000 0000 0000 d801 0000 |\...............| 0x0550 0000 0000 4800 0000 1201 0000 7300 0000 |....H.......s...| 0x0560 2902 0000 8b01 0000 0000 0000 d901 0000 |)...............| 0x0570 3202 0000 0000 0000 0000 0000 0000 0000 |2...............| 0x0580 0000 0000 0000 0000 7c00 0000 0e01 0000 |........|.......| 0x0590 6300 0000 0000 0000 6100 0000 5a01 0000 |c.......a...Z...| 0x05a0 ae00 0000 0000 0000 0000 0000 0000 0000 |................| 0x05b0 0000 0000 c300 0000 0000 0000 0000 0000 |................| 0x05c0 fd01 0000 0000 0000 8201 0000 c201 0000 |................| 0x05d0 2102 0000 fa00 0000 0000 0000 8c01 0000 |!...............| 0x05e0 0000 0000 0000 0000 6600 0000 da00 0000 |........f.......| 0x05f0 8001 0000 3701 0000 ee01 0000 f501 0000 |....7...........| 0x0600 bd00 0000 4100 0000 0000 0000 6e01 0000 |....A.......n...| 0x0610 cd01 0000 4200 0000 6b00 0000 0000 0000 |....B...k.......| 0x0620 4c00 0000 0000 0000 5001 0000 7a00 0000 |L.......P...z...| 0x0630 a400 0000 2501 0000 ad00 0000 6601 0000 |....%.......f...| 0x0640 6301 0000 0000 0000 0000 0000 1e01 0000 |c...............| 0x0650 0000 0000 3602 0000 5b01 0000 0000 0000 |....6...[.......| 0x0660 0000 0000 2c02 0000 e601 0000 6800 0000 |....,.......h...| 0x0670 0302 0000 4501 0000 2302 0000 3502 0000 |....E...#...5...| 0x0680 0000 0000 0000 0000 7701 0000 0000 0000 |........w.......| 0x0690 bb00 0000 3800 0000 0000 0000 bf00 0000 |....8...........| 0x06a0 8e00 0000 af01 0000 0000 0000 3901 0000 |............9...| 0x06b0 de01 0000 0000 0000 0000 0000 1302 0000 |................| 0x06c0 5501 0000 0000 0000 3d02 0000 3201 0000 |U.......=...2...| 0x06d0 3402 0000 1602 0000 2602 0000 0000 0000 |4.......&.......| 0x06e0 0000 0000 1102 0000 0000 0000 8900 0000 |................| 0x06f0 0000 0000 3002 0000 bf01 0000 b000 0000 |....0...........| 0x0700 0000 0000 b800 0000 9001 0000 5401 0000 |............T...| 0x0710 0d01 0000 de00 0000 a000 0000 0000 0000 |................| 0x0720 0a02 0000 0000 0000 0000 0000 0000 0000 |................| 0x0730 0000 0000 d101 0000 0000 0000 be01 0000 |................| 0x0740 0000 0000 2d02 0000 0602 0000 aa01 0000 |....-...........| 0x0750 0000 0000 0d02 0000 e800 0000 c701 0000 |................| 0x0760 2002 0000 3001 0000 db01 0000 0000 0000 | ...0...........| 0x0770 0000 0000 ed01 0000 0000 0000 7d01 0000 |............}...| 0x0780 0c02 0000 4a00 0000 0000 0000 9d01 0000 |....J...........| 0x0790 7b01 0000 0000 0000 0000 0000 0402 0000 |{...............| 0x07a0 0000 0000 0000 0000 8400 0000 9f00 0000 |................| 0x07b0 2500 0000 7f01 0000 0000 0000 0802 0000 |%...............| 0x07c0 0000 0000 a201 0000 4101 0000 0000 0000 |........A.......| 0x07d0 5d01 0000 0000 0000 0000 0000 ee00 0000 |]...............| 0x07e0 2601 0000 3501 0000 0000 0000 0000 0000 |&...5...........| 0x07f0 0301 0000 df01 0000 0000 0000 fc00 0000 |................| 0x0800 4d01 0000 0000 0000 2f00 0000 0000 0000 |M......./.......| 0x0810 3702 0000 2b02 0000 bc01 0000 fe01 0000 |7...+...........| 0x0820 0000 0000 d501 0000 0000 0000 c401 0000 |................| 0x0830 cc00 0000 0202 0000 f900 0000 1701 0000 |................| 0x0840 9900 0000 0000 0000 0000 0000 2402 0000 |............$...| 0x0850 0902 0000 0000 0000 0000 0000 0000 0000 |................| 0x0860 6500 0000 0000 0000 0000 0000 0000 0000 |e...............| 0x0870 6a01 0000 fa01 0000 2900 0000 0000 0000 |j.......).......| 0x0880 f700 0000 c801 0000 9600 0000 7400 0000 |............t...| 0x0890 0000 0000 b801 0000 d800 0000 3b02 0000 |............;...| 0x08a0 0000 0000 7001 0000 6200 0000 6901 0000 |....p...b...i...| 0x08b0 0000 0000 5201 0000 2201 0000 0001 0000 |....R...".......| 0x08c0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x08d0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x08e0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x08f0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0900 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0910 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0920 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0930 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0940 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0950 0000 0000 0000 0000 0000 0000 2300 0000 |............#...| 0x0960 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0970 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0980 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0990 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x09a0 2c00 0000 0000 0000 0000 0000 0000 0000 |,...............| 0x09b0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x09c0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x09d0 3c00 0000 0000 0000 0000 0000 0000 0000 |<...............| 0x09e0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x09f0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0a00 0000 0000 0000 0000 4000 0000 0000 0000 |........@.......| 0x0a10 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0a20 5700 0000 0000 0000 0000 0000 0000 0000 |W...............| 0x0a30 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0a40 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0a50 0000 0000 0000 0000 5c00 0000 0000 0000 |........\.......| 0x0a60 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0a70 0000 0000 3500 0000 0000 0000 0000 0000 |....5...........| 0x0a80 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0a90 3200 0000 0000 0000 0000 0000 4600 0000 |2...........F...| 0x0aa0 1a00 0000 0000 0000 0000 0000 6e00 0000 |............n...| 0x0ab0 0000 0000 0000 0000 0000 0000 7100 0000 |............q...| 0x0ac0 0000 0000 0000 0000 5d00 0000 0000 0000 |........].......| 0x0ad0 0000 0000 5500 0000 0000 0000 0000 0000 |....U...........| 0x0ae0 0000 0000 0000 0000 0000 0000 5800 0000 |............X...| 0x0af0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0b00 0000 0000 5200 0000 0000 0000 6a00 0000 |....R.......j...| 0x0b10 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0b20 0000 0000 1900 0000 0000 0000 3b00 0000 |............;...| 0x0b30 0000 0000 0000 0000 2700 0000 0000 0000 |........'.......| 0x0b40 0000 0000 0000 0000 0000 0000 7f00 0000 |................| 0x0b50 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0b60 5100 0000 0000 0000 0000 0000 3100 0000 |Q...........1...| 0x0b70 0000 0000 0000 0000 0000 0000 a700 0000 |................| 0x0b80 0000 0000 0000 0000 0000 0000 4d00 0000 |............M...| 0x0b90 0000 0000 2800 0000 8700 0000 0000 0000 |....(...........| 0x0ba0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0bb0 b500 0000 a800 0000 0000 0000 0000 0000 |................| 0x0bc0 0000 0000 0000 0000 9100 0000 0000 0000 |................| 0x0bd0 0000 0000 0000 0000 a100 0000 0000 0000 |................| 0x0be0 5900 0000 8600 0000 2600 0000 9b00 0000 |Y.......&.......| 0x0bf0 5000 0000 4b00 0000 0000 0000 0000 0000 |P...K...........| 0x0c00 0000 0000 3e00 0000 7700 0000 0000 0000 |....>...w.......| 0x0c10 0000 0000 0000 0000 6c00 0000 0000 0000 |........l.......| 0x0c20 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0c30 0000 0000 0000 0000 4f00 0000 0000 0000 |........O.......| 0x0c40 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0c50 0000 0000 0000 0000 0000 0000 dd00 0000 |................| 0x0c60 e300 0000 0000 0000 0000 0000 0000 0000 |................| 0x0c70 0000 0000 9300 0000 0000 0000 ac00 0000 |................| 0x0c80 1f00 0000 9800 0000 0000 0000 0000 0000 |................| 0x0c90 ec00 0000 0000 0000 0000 0000 0000 0000 |................| 0x0ca0 5400 0000 0000 0000 6400 0000 0000 0000 |T.......d.......| 0x0cb0 9e00 0000 ea00 0000 0000 0000 5f00 0000 |............_...| 0x0cc0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0cd0 f000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0ce0 0000 0000 0000 0000 3d00 0000 b900 0000 |........=.......| 0x0cf0 0000 0000 8000 0000 ab00 0000 ef00 0000 |................| 0x0d00 0000 0000 aa00 0000 0000 0000 0f01 0000 |................| 0x0d10 0000 0000 1301 0000 0000 0000 0000 0000 |................| 0x0d20 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0d30 e600 0000 3600 0000 0000 0000 0000 0000 |....6...........| 0x0d40 0000 0000 2e00 0000 0000 0000 5a00 0000 |............Z...| 0x0d50 2000 0000 0000 0000 0000 0000 0000 0000 | ...............| 0x0d60 0000 0000 0000 0000 ce00 0000 bc00 0000 |................| 0x0d70 0000 0000 0000 0000 6900 0000 d400 0000 |........i.......| 0x0d80 0000 0000 0000 0000 9200 0000 ca00 0000 |................| 0x0d90 8200 0000 0000 0000 1b00 0000 0000 0000 |................| 0x0da0 8800 0000 0000 0000 0000 0000 0000 0000 |................| 0x0db0 0000 0000 5e00 0000 3a01 0000 f100 0000 |....^...:.......| 0x0dc0 0000 0000 4300 0000 0000 0000 7d00 0000 |....C.......}...| 0x0dd0 0000 0000 0000 0000 0601 0000 2400 0000 |............$...| 0x0de0 db00 0000 0000 0000 0000 0000 0000 0000 |................| 0x0df0 f300 0000 0000 0000 1601 0000 0000 0000 |................| 0x0e00 4801 0000 c700 0000 0000 0000 0000 0000 |H...............| 0x0e10 0000 0000 0000 0000 0000 0000 1f01 0000 |................| 0x0e20 e500 0000 3f00 0000 cd00 0000 0000 0000 |....?...........| 0x0e30 0000 0000 d000 0000 0000 0000 0000 0000 |................| 0x0e40 2901 0000 9700 0000 0000 0000 e900 0000 |)...............| 0x0e50 7200 0000 2701 0000 0000 0000 6700 0000 |r...'.......g...| 0x0e60 0501 0000 0000 0000 0000 0000 f200 0000 |................| 0x0e70 9000 0000 cf00 0000 0000 0000 0000 0000 |................| 0x0e80 2a00 0000 9400 0000 0000 0000 af00 0000 |*...............| 0x0e90 0000 0000 5101 0000 0000 0000 0000 0000 |....Q...........| 0x0ea0 0000 0000 0201 0000 0000 0000 0000 0000 |................| 0x0eb0 eb00 0000 0000 0000 1d00 0000 d300 0000 |................| 0x0ec0 7201 0000 0000 0000 0000 0000 0000 0000 |r...............| 0x0ed0 0000 0000 1800 0000 0000 0000 a600 0000 |................| 0x0ee0 1001 0000 a900 0000 b200 0000 3601 0000 |............6...| 0x0ef0 0000 0000 4500 0000 0000 0000 8101 0000 |....E...........| 0x0f00 c600 0000 9a00 0000 8a00 0000 b300 0000 |................| 0x0f10 fb00 0000 d500 0000 0000 0000 a200 0000 |................| 0x0f20 f400 0000 c100 0000 0000 0000 7901 0000 |............y...| 0x0f30 2c01 0000 8c00 0000 7801 0000 0000 0000 |,.......x.......| 0x0f40 0000 0000 0000 0000 4401 0000 0000 0000 |........D.......| 0x0f50 0000 0000 0000 0000 6d00 0000 0000 0000 |........m.......| 0x0f60 0000 0000 0000 0000 7e01 0000 8f00 0000 |........~.......| 0x0f70 0b01 0000 3101 0000 5801 0000 0000 0000 |....1...X.......| 0x0f80 0000 0000 0000 0000 2301 0000 a500 0000 |........#.......| 0x0f90 0000 0000 8100 0000 ae01 0000 0701 0000 |................| 0x0fa0 0000 0000 2d00 0000 4e00 0000 3301 0000 |....-...N...3...| 0x0fb0 0000 0000 0000 0000 0000 0000 0000 0000 |................| 0x0fc0 1a01 0000 5600 0000 7e00 0000 9c00 0000 |....V...~.......| 0x0fd0 2a01 0000 0000 0000 0000 0000 7b00 0000 |*...........{...| 0x0fe0 9f01 0000 0000 0000 0000 0000 6f01 0000 |............o...| 0x0ff0 0000 0000 0000 0000 0000 0000 8701 0000 |................| 792 sh RET read 4096/0x1000 792 sh CALL mmap(0,0x3f000,0x5,0x20002,0x3,0,0,0) 792 sh RET mmap 403349504/0x180aa000 792 sh CALL mprotect(0x180df000,0x1000,0x7) 792 sh RET mprotect 0 792 sh CALL mprotect(0x180df000,0x1000,0x5) 792 sh RET mprotect 0 792 sh CALL mmap(0x180e0000,0x8000,0x3,0x12,0x3,0,0x36000,0) 792 sh RET mmap 403570688/0x180e0000 792 sh CALL mmap(0x180e8000,0x1000,0x3,0x1012,0xffffffff,0,0,0) 792 sh RET mmap 403603456/0x180e8000 792 sh CALL close(0x3) 792 sh RET close 0 792 sh CALL access(0x1808f000,0) 792 sh NAMI "/lib/libc.so.5" 792 sh RET access 0 792 sh CALL open(0x18087100,0,0xbfbfec08) 792 sh NAMI "/lib/libc.so.5" 792 sh RET open 3 792 sh CALL fstat(0x3,0xbfbfec08) 792 sh RET fstat 0 792 sh Events dropped. 792 sh GIO fd 3 read 2 bytes "sh" 792 sh Events dropped. 792 sh GIO fd 3 read 5 bytes " tcsh" 792 sh Events dropped. 792 sh GIO fd 0 read 1 byte "k" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe3f3,0x1) 792 sh GIO fd 0 read 1 byte "o" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe3f3,0x1) 792 sh GIO fd 0 read 1 byte "e" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe3f3,0x1) 792 sh GIO fd 0 read 1 byte "k" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe3f3,0x1) 792 sh GIO fd 0 read 1 byte "o" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe3f3,0x1) 792 sh GIO fd 0 read 1 byte "e" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe3f3,0x1) 792 sh GIO fd 0 read 1 byte "k" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe3f3,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0xb) 792 sh GIO fd 1 wrote 11 bytes "Full name: " 792 sh RET write 11/0xb 792 sh CALL read(0,0xbfbfe493,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x1f) 792 sh GIO fd 1 wrote 31 bytes "Uid (Leave empty for default): " 792 sh RET write 31/0x1f 792 sh CALL read(0,0xbfbfe473,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL pipe 792 sh RET pipe 3 792 sh CALL fork 792 sh RET fork 803/0x323 792 sh CALL close(0x4) 792 sh RET close 0 792 sh CALL read(0x3,0xbfbfe4f0,0x80) 792 sh GIO fd 3 read 5 bytes "1009 " 792 sh RET read 5 792 sh CALL read(0x3,0xbfbfe4f0,0x80) 792 sh GIO fd 3 read 0 bytes "" 792 sh RET read 0 792 sh CALL close(0x3) 792 sh RET close 0 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe468,0x2,0) 792 sh RET wait4 803/0x323 792 sh CALL write(0x1,0x8070c00,0x17) 792 sh GIO fd 1 wrote 23 bytes "Login group [koekoek]: " 792 sh RET write 23/0x17 792 sh CALL read(0,0xbfbfe453,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x26) 792 sh GIO fd 1 wrote 38 bytes "Login group is koekoek. Invite koekoek" 792 sh RET write 38/0x26 792 sh CALL write(0x1,0x8070c00,0x18) 792 sh GIO fd 1 wrote 24 bytes " into other groups? []: " 792 sh RET write 24/0x18 792 sh CALL read(0,0xbfbfe4b3,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x17) 792 sh GIO fd 1 wrote 23 bytes "Login class [default]: " 792 sh RET write 23/0x17 792 sh CALL read(0,0xbfbfe513,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL fork 792 sh RET fork 807/0x327 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe2c8,0x2,0) 792 sh RET wait4 807/0x327 792 sh CALL stat(0x8066b1c,0xbfbfe360) 792 sh NAMI "/bin/sh" 792 sh RET stat 0 792 sh CALL eaccess(0x8066b1c,0x1) 792 sh NAMI "/bin/sh" 792 sh RET eaccess 0 792 sh CALL geteuid 792 sh RET geteuid 0 792 sh CALL stat(0x8066b34,0xbfbfe340) 792 sh NAMI "/sbin/basename" 792 sh RET stat -1 errno 2 No such file or directory 792 sh CALL stat(0x8066b34,0xbfbfe340) 792 sh NAMI "/bin/basename" 792 sh RET stat -1 errno 2 No such file or directory 792 sh CALL stat(0x8066b34,0xbfbfe340) 792 sh NAMI "/usr/sbin/basename" 792 sh RET stat -1 errno 2 No such file or directory 792 sh CALL stat(0x8066b34,0xbfbfe340) 792 sh NAMI "/usr/bin/basename" 792 sh RET stat 0 792 sh CALL pipe 792 sh RET pipe 3 792 sh CALL fork 792 sh RET fork 808/0x328 792 sh CALL close(0x4) 792 sh RET close 0 792 sh CALL read(0x3,0xbfbfe530,0x80) 792 sh GIO fd 3 read 3 bytes "sh " 792 sh RET read 3 792 sh CALL read(0x3,0xbfbfe530,0x80) 792 sh GIO fd 3 read 0 bytes "" 792 sh RET read 0 792 sh CALL close(0x3) 792 sh RET close 0 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe4a8,0x2,0) 792 sh RET wait4 808/0x328 792 sh CALL write(0x1,0x8070c00,0x27) 792 sh GIO fd 1 wrote 39 bytes "Shell (sh csh tcsh bash nologin) [sh]: " 792 sh RET write 39/0x27 792 sh CALL read(0,0xbfbfe533,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x20) 792 sh GIO fd 1 wrote 32 bytes "Home directory [/home/koekoek]: " 792 sh RET write 32/0x20 792 sh CALL read(0,0xbfbfe553,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x2a) 792 sh GIO fd 1 wrote 42 bytes "Use password-based authentication? [yes]: " 792 sh RET write 42/0x2a 792 sh CALL read(0,0xbfbfe633,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x26) 792 sh GIO fd 1 wrote 38 bytes "Use an empty password? (yes/no) [no]: " 792 sh RET write 38/0x26 792 sh CALL read(0,0xbfbfe533,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x26) 792 sh GIO fd 1 wrote 38 bytes "Use a random password? (yes/no) [no]: " 792 sh RET write 38/0x26 792 sh CALL read(0,0xbfbfe333,0x1) 792 sh GIO fd 0 read 1 byte "y" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe333,0x1) 792 sh GIO fd 0 read 1 byte "e" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe333,0x1) 792 sh GIO fd 0 read 1 byte "s" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe333,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x2b) 792 sh GIO fd 1 wrote 43 bytes "Lock out the account after creation? [no]: " 792 sh RET write 43/0x2b 792 sh CALL read(0,0xbfbfe673,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL stat(0x8066b0c,0xbfbfe7e0) 792 sh NAMI "/sbin/printf" 792 sh RET stat -1 errno 2 No such file or directory 792 sh CALL stat(0x8066b0c,0xbfbfe7e0) 792 sh NAMI "/bin/printf" 792 sh RET stat -1 errno 2 No such file or directory 792 sh CALL stat(0x8066b0c,0xbfbfe7e0) 792 sh NAMI "/usr/sbin/printf" 792 sh RET stat -1 errno 2 No such file or directory 792 sh CALL stat(0x8066b0c,0xbfbfe7e0) 792 sh NAMI "/usr/bin/printf" 792 sh RET stat 0 792 sh CALL fork 792 sh RET fork 832/0x340 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe818,0x2,0) 792 sh RET wait4 832/0x340 792 sh CALL fork 792 sh RET fork 833/0x341 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe858,0x2,0) 792 sh RET wait4 833/0x341 792 sh CALL fork 792 sh RET fork 834/0x342 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe898,0x2,0) 792 sh RET wait4 834/0x342 792 sh CALL fork 792 sh RET fork 835/0x343 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe8b8,0x2,0) 792 sh RET wait4 835/0x343 792 sh CALL fork 792 sh RET fork 836/0x344 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe8f8,0x2,0) 792 sh RET wait4 836/0x344 792 sh CALL fork 792 sh RET fork 837/0x345 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe918,0x2,0) 792 sh RET wait4 837/0x345 792 sh CALL fork 792 sh RET fork 838/0x346 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe938,0x2,0) 792 sh RET wait4 838/0x346 792 sh CALL fork 792 sh RET fork 839/0x347 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe958,0x2,0) 792 sh RET wait4 839/0x347 792 sh CALL fork 792 sh RET fork 840/0x348 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe978,0x2,0) 792 sh RET wait4 840/0x348 792 sh CALL write(0x1,0x8070c00,0xe) 792 sh GIO fd 1 wrote 14 bytes "OK? (yes/no): " 792 sh RET write 14/0xe 792 sh CALL read(0,0xbfbfe833,0x1) 792 sh GIO fd 0 read 1 byte "y" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe833,0x1) 792 sh GIO fd 0 read 1 byte "e" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe833,0x1) 792 sh GIO fd 0 read 1 byte "s" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe833,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL pipe 792 sh RET pipe 3 792 sh CALL fork 792 sh RET fork 841/0x349 792 sh CALL close(0x4) 792 sh RET close 0 792 sh CALL read(0x3,0xbfbfe5f0,0x80) 792 sh GIO fd 3 read 16 bytes "EtKynarao93oPVJ " 792 sh RET read 16/0x10 792 sh CALL read(0x3,0xbfbfe5f0,0x80) 792 sh GIO fd 3 read 0 bytes "" 792 sh RET read 0 792 sh CALL close(0x3) 792 sh RET close 0 792 sh CALL getpgrp 792 sh RET getpgrp 792/0x318 792 sh CALL wait4(0xffffffff,0xbfbfe568,0x2,0) 792 sh RET wait4 841/0x349 792 sh CALL write(0x1,0x8070c00,0x42) 792 sh GIO fd 1 wrote 66 bytes "adduser: INFO: Successfully added (koekoek) to the user database. " 792 sh RET write 66/0x42 792 sh CALL write(0x1,0x8070c00,0x3a) 792 sh GIO fd 1 wrote 58 bytes "adduser: INFO: Password for (koekoek) is: EtKynarao93oPVJ " 792 sh RET write 58/0x3a 792 sh CALL write(0x1,0x8070c00,0x1c) 792 sh GIO fd 1 wrote 28 bytes "Add another user? (yes/no): " 792 sh RET write 28/0x1c 792 sh CALL read(0,0xbfbfe973,0x1) 792 sh GIO fd 0 read 1 byte "n" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe973,0x1) 792 sh GIO fd 0 read 1 byte "o" 792 sh RET read 1 792 sh CALL read(0,0xbfbfe973,0x1) 792 sh GIO fd 0 read 1 byte " " 792 sh RET read 1 792 sh CALL write(0x1,0x8070c00,0x9) 792 sh GIO fd 1 wrote 9 bytes "Goodbye! " 792 sh RET write 9 792 sh CALL read(0xa,0x8063580,0x3ff) 792 sh GIO fd 10 read 0 bytes "" 792 sh RET read 0 792 sh CALL exit(0)