ELF 4 ( UE hXMVf@ XVE]UE hXMVf@ YVE]UE hXMVf@ YVE]UWVSEPxpP HX $xpP HX [^_]Ív UWVSEUPhxpP HX l$hxpP HX ][^_]ÐUWVSEUPhxpP HX n$hxpP HX ][^_]ÐU E MPQj tRRPh 5 U1WV} I;Ms>AU= w u tftЍe^_]WPu VREPjUh h USPE] PEPESP9؉] ]ÐU1WVS u I1ۉMv }PP}WS1t"MQVWStЋUtU؍e[^_]ÉU EPE PEP]ÐUWVS uE t@1I YSEt w#ىtftEe[^_]ÉPSEVPv US ]h CPt]]ÐUEtE]]ÉUWSE ] S
t1tfte[_]Ív UWV1S ]u t{u4t SE Ee[^_]Ã j Ev ]9t܃ VEtɉ9r= w"}tft SRPESPUEj P]Ív U]v U1WU }tft_]ÐUWVE}u = wtft^_]ÐEu }^_]v U EM PUQR]ÐU# ]ÉUTEPEȣ` ]ÐU M])ЉЉЍAÍv UPPEt 1Ҹ ]Ív 1Ҹ U1҉E]U8 E, E 0 E4 ]ÐUWVS D!㍃J }h) Pp @ǃp @ % C $ G]ĉ]v G _u^EčUȉE̍GE E E ! G uFu
ÅuߋE UȋEG u GPPPG$j PUVS]C sC C @C(C$ C(@CC@j Sh| C0x&QP( RhP 1e[^]VP ( Shx USQ ] CZC$[]v U8 h, 2]ÉU8 h, ]ÉU ]ÉUPP !@u]ÐUPP1 u]Ív EPUWVS u@} ]Hte[^_]PjDj h } 5( =$ j h$ h) t@ $ E E2 e[^_]Uj h) XZ$ PhE ]UWME w-$ U_E]ËUfUfBUʃt2r!t
}f}f볍v }릉}뙐UMU t ǂ ]Ív UM t$ t ]ËE ۍv UVSlEuPEPEPh VËEPMQ3h @ h P UREPEPEPEPEPEPMQUREPEPEPEPEPEPMQUREPhL VeÉ[^]U]v U]v UPP1҅t B1w!$ v ]É 1 USPPjX]h S C C C ]]USh 1tPPh S؋]]ÉUUh R]US ]h S1CX C\ @ CT ]]ÐUVS1ۋuF~ v PPCj VI ;^\sNe[^]Ív 1v US]S $ t ]]ÉCT ]]] v USP]Ct@CtCTu>QQEPS C`~HC`t
]]Ív ECPRRPS Sc봉U]v U]v UMQHw E DBAH @ 1]ÐUVS1];sHrCH e[^]Ív DP @D F ;sHrv UWVS }E \xC\xPCE t v ÅttPPSWG@GPPEPWE ƅt.tPP]SWt MQe[^_]Ë U@ 1WLBWLڃ EP NjU A UWVS u H %s %s:%d Buffer too small 0x%x
linux vmmemctl <6>%s initialized
<6>%s unloaded
VMware memory control driver vmmemctl /build/mts/release/bora-844130/bora-vmsoft/lib/kernelStubs/kernelStubsLinux.c <7>%s: started kernel thread pid=%d
<4>%s: unable to create kernel thread (%d)
target: %8d pages
current: %8d pages
rateNoSleepAlloc: %8d pages/sec
rateSleepAlloc: %8d pages/sec
rateFree: %8d pages/sec
timer: %8u
start: %8u (%4u failed)
guestType: %8u (%4u failed)
lock: %8u (%4u failed)
unlock: %8u (%4u failed)
target: %8u (%4u failed)
primNoSleepAlloc: %8u (%4u failed)
primCanSleepAlloc: %8u (%4u failed)
primFree: %8u
errAlloc: %8u
errFree: %8u
kernel_version=2.4.21-138-athlon using_checksums=1 author=VMware, Inc. description=VMware Memory Control Driver license=GPL v2 version=1.0.1.0 supported=external GCC: (GNU) 3.2.3 20030502 (Red Hat Linux 3.2.3-14) GCC: (GNU) 3.2.3 20030502 (Red Hat Linux 3.2.3-14) GCC: (GNU) 3.2.3 20030502 (Red Hat Linux 3.2.3-14) GCC: (GNU) 3.2.3 20030502 (Red Hat Linux 3.2.3-14) GCC: (GNU) 3.2.3 20030502 (Red Hat Linux 3.2.3-14) .symtab .strtab .shstrtab .rel.text .rel.rodata .rodata.str1.1 .rodata.str1.4 .modinfo .data .bss .comment .note.GNU-stack 4 P
) 4 % H!
1 2 { @ 2 O @ X ^ < c l $ $ | # A + K 3 O m q , 1 G < F s B
c $ p [ q T F H 7 T T T F u ! H z Y g Q ) } 5 Q Y e m u b L a [ D ( | J W d x I y G A
G . n H Q h q e i $ ) r 1 < A K e j O q w | G 1 u F N f 9 A W G o v v
v B
V Z
P
k
M E M { ! Y K K R % K Z K Z K Y _ p } _ X S )
] 5
t - { 9 ^ h $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x |
/ 4 ! L ! e D r | % # 2 > ) R 4 A f x v $
0
<
G
2
3 @ A
= & 0 X ; m T b _ u x A ( 4 @ / p M p m m # $ < - U d h s P h 3 8 , / K 3 [ T 5 j 8 # \ = T ' +
% @
L a - p 2 ` $ A h + = \ ( H ^ d u e x ` ) ?
< / f 6 D " - D j 8 T l @ H ? backdoor.c backdoorGcc32.c kernelStubsLinux.c os.c __module_kernel_version __module_using_checksums global_state os_timer_thread_loop os_timer_thread_start os_timer_thread_stop os_proc_read initialized.0 __constant_c_and_count_memset global_proc_entry __module_license __mod_version677 __mod_supported684 vmballoon.c BalloonChunk_Insert BalloonChunk_Remove BalloonProcRead BalloonPrimAllocPage BalloonPrimFreePage BalloonGuestType globalBalloon BalloonChunk_Create BalloonChunk_Destroy Balloon_Init Balloon_Deallocate Balloon_FreePage Balloon_Reset Balloon_MonitorStart Balloon_MonitorGuestType Balloon_BH Balloon_MonitorGetTarget Balloon_AdjustSize Balloon_StartTimer Balloon_StopTimer Balloon_ErrorPagesAlloc Balloon_ErrorPagesFree Balloon_AllocPage Balloon_MonitorLockPage Balloon_MonitorUnlockPage BalloonDecreaseRateAlloc BalloonIncreaseRateAlloc BalloonInflate BalloonDeflate BalloonModuleInit BalloonModuleCleanup wait_for_completion_Rdc016488 vsnprintf_R57a6504e Backdoor_HbIn complete_R942613ad os_kfree _mmx_memcpy_R15670e2d printk_R1b7d4074 kmalloc_R93d4cfe6 complete_and_exit_R95deffb7 __module_author Backdoor_InOut flush_signals_Reefcec3d os_bzero cleanup_module remove_proc_entry_R448cb66c os_memcpy contig_page_data_R41e32c13 os_predict_max_balloon_pages os_timer_init malloc init_module os_identity schedule_timeout_R17d59d01 os_timer_hz si_meminfo_Rb3a307c6 os_addr_to_ppn reparent_to_init_Rec6158d0 Backdoor os_alloc_reserved_page os_timer_stop os_init calloc daemonize_Rd66a354a sprintf_R1d26aa98 realloc Backdoor_HbOut __HZ_R799069f6 __free_pages_Rd705b629 mem_map_Ra2dbbaa3 os_cleanup do_schedule_R26171012 strdup os_kmalloc_nosleep __module_description BackdoorHbIn __wake_up_Rb76c5f1e BalloonGetStats Str_Vsnprintf Str_Vasprintf create_proc_entry_R11ebb079 Panic os_free_reserved_page kfree_R037a0cba os_sprintf Str_Strcpy remove_wait_queue_R17c614fa kernel_thread_R7ca341af vsprintf_R954cbb26 os_timer_start add_wait_queue_R794cb9c3 __alloc_pages_R0808c439 Str_Asprintf BackdoorHbOut os_yield free