| JJ__text__TEXTt __data__DATAt __const__TEXT  __cstring__TEXT __picsymbolstub2__TEXT w'Z__la_sym_ptr2__DATA<__textcoal_nt__TEXTB @C(4 P## ,$UÐU(ED$D$E $uqD$ E $E}tEE EE8u*E8 t E8 tE܋E8#uE̋E8uwEEEEU(E8[uE$ E8]u EEEÐUS$EE$u E`ED$]E$ E}u E4EEE8 tE8[t E ED$]E$D E}u EEE D$E$ u E6 D$E$ u EEEuE8 tE8[t EYED$]E$ E}u E.ED$ED$E $ E$ EE$[]ÐUE8uAE8 u3E8-u(E8>uE8 uEEEE EEEÐUS$E D$:E$ E}u EEED$;E$ E}u EEE8!uED$E$ u E QD$E$ u E -D$E$ u E  EEEE$[]ÐUSEEDžED$D$$ D$D$$ D$D$$ D$D$$ EED$$HuD$$e DžD$E$ E}uDžtDED$D$E$uL}uD$$ED$D$$DžtD$D$$nDžDžD$E$0E}uE$tED$E$uOt$DžED$D$]$Džt8!uDž}uoDž$D$D$$OD$$4Dž%}DžDž$[t$>D$D$$D$D$$BD$$mDžf}u`D$D$$9D$$t"D$ $Džtt Dž Dž}u-D$: $tLDž@D$T $tt Dž Džt=D$D$E D$ n D$D$x$1D$E D$ D$D$x$RxD$$#}u0t$DžDžtE$ED$D$E$t%t$I}uD$$ED$D$$Džt}DžttĴ[]Ð  !"#$%&'*+,:;<=>?[\]^`{|}~allanyfrpossec-rootcheck%s(1253): Invalid rootdir (unable to retrieve).%s(1251): Invalid rk configuration name: '%s'.%s: DEBUG: Checking entry: '%s'.%s(1252): Invalid rk configuration value: '%s'.%s: DEBUG: Checking file: '%s'.%s: DEBUG: Checking registry: '%s'.%s: DEBUG: found registry.%s: DEBUG: Checking process: '%s'.%s: DEBUG: found process.%s: DEBUG: Condition ANY.%s: DEBUG: Condition ALL.%s %s. Reference: %s .%s %s.lr⍀rPXS]⍀]P?:H⍀HP&!3⍀3P ⍀P ⍀ P⍀P⍀P⍀P⍀Pwr⍀P^Y⍀PE@v⍀vP,'a⍀aPL⍀LP 2Kd}$Ë$> 6 ,        h R 8   q W  ld= Z #       rj ` J-  _W` M 6  z p c[ Q 6  z\>$   q D$ yn<  3 $ F-sB m>e>_# ZB T:L:F# AB ;636-# (B "22# B ..# B *u*u# B &\&\# B "C"C# B **# B ~# yB s k e# `B Z R L# GB A 9 3# .B (   # B   # 840,($  4:015/-32=?<>;.4:015/-32=?<>;.dd< DD4D5 %$R^n $D<D=DB7DCMDESDIYDM_DOiDQ{DRDTDVDWD`DbDeDhDi$<;; +T:qQ(cy?7$DpDqDsDuDv$po$<D}DDDD D$D:D@DLDRDXDkDwD}DDDDDDDDDDD DD'D-DCDIDRDXDrD$}|| |,~?STU$DDDDDDDDDV$o|$`DDDDDD)D/D5DKDQD]DcDkDoDDD D D DDD}$ $DDD%D(D*$D+BD,`D-~D/D2D3D5D;D>D@DA DCDGDI@DKIDMODPgDQDUDZD[D]D^D`DeDgDlDmDo#Dq,Dr:DtDDucDzrD|}D}DDDDDDDDDD#D7D@DTDvDDDDDDD D*D3D<DHDRDXDpDyDDDDDDDDD% DV Dl Dr D{ D D D D  D  D  D D D D D# DB DN DX D b $  3>_ o!"$%&( $  U V ;d e Zr [~          x  l N b $ &  A &R  0 dt B?F/Wj {b\4@rjM@*z__rkcl_getrootdir__rkcl_getfp__rkcl_is_name__rkcl_get_name___i686.get_pc_thunk.bx__rkcl_get_pattern__rkcl_get_value_rkcl_get_entry___local_name_rootcheck_rk_sys_file_rk_sys_name_rk_sys_count_total_ports_udp_total_ports_tcp___i686.get_pc_thunk.axdyld_stub_binding_helper_notify_rk_snprintf_is_process_is_registry_rk_check_file_free_debug2_merror_memset_strdup_strncpy_strcmp_strlen_strchr_fgets/mnt/gmirror/ports/security/ossec-hids-server/work/ossec-hids-1.3/src/rootcheck/common_rcl.cgcc2_compiled._hostname_map_rkcl_getrootdir:F(0,1)=*(0,2)=r(0,2);0;127;char:t(0,2)root_dir:p(0,1)dir_size:p(0,3)=r(0,3);-2147483648;2147483647;int:t(0,3)_rkcl_getfp:F(0,1)fp:p(0,4)=*(0,5)=(0,6)=xs__sFILE:buf:p(0,1)FILE:t(0,5)__sFILE:T(0,6)=s88_p:(0,7)=*(0,8)=@s8;r(0,8);0;255;,0,32;_r:(0,3),32,32;_w:(0,3),64,32;_flags:(0,9)=@s16;r(0,9);-32768;32767;,96,16;_file:(0,9),112,16;_bf:(0,10)=xs__sbuf:,128,64;_lbfsize:(0,3),192,32;_cookie:(0,11)=*(0,12)=(0,12),224,32;_close:(0,13)=*(0,14)=f(0,3),256,32;_read:(0,15)=*(0,16)=f(0,3),288,32;_seek:(0,17)=*(0,18)=f(0,19)=(0,20)=(0,21)=(0,22)=@s64;r(0,22);01000000000000000000000;0777777777777777777777;,320,32;_write:(0,23)=*(0,24)=f(0,3),352,32;_ub:(0,10),384,64;_extra:(0,25)=*(0,26)=xs__sFILEX:,448,32;_ur:(0,3),480,32;_ubuf:(0,27)=ar(0,28)=r(0,28);0000000000000;0037777777777;;0;2;(0,8),512,24;_nbuf:(0,29)=ar(0,28);0;0;(0,8),536,8;_lb:(0,10),544,64;_blksize:(0,3),608,32;_offset:(0,19),640,64;;unsigned char:t(0,8)short int:t(0,9)__sbuf:T(0,10)=s8_base:(0,7),0,32;_size:(0,3),32,32;;void:t(0,12)fpos_t:t(0,19)__darwin_off_t:t(0,20)__int64_t:t(0,21)long long int:t(0,22)long unsigned int:t(0,30)=r(0,30);0000000000000;0037777777777;nbuf:(0,1)_rkcl_is_name:F(0,3)buf:p(0,1)_rkcl_get_name:F(0,1)buf:p(0,1)ref:p(0,1)condition:p(0,31)=*(0,3)tmp_location:(0,1)tmp_location2:(0,1)_rkcl_get_pattern:F(0,1)value:p(0,1)_rkcl_get_value:F(0,1)buf:p(0,1)type:p(0,31)tmp_str:(0,1)value:(0,1)rkcl_get_entry:F(0,3)fp:p(0,4)msg:p(0,1)p_list_p:p(0,11)type:(0,3)condition:(0,3)root_dir_len:(0,3)nbuf:(0,1)buf:(0,32)=ar(0,28);0;1025;(0,2)root_dir:(0,32)final_file:(0,33)=ar(0,28);0;2048;(0,2)ref:(0,34)=ar(0,28);0;255;(0,2)value:(0,1)name:(0,1)tmp_str:(0,1)p_list:(0,35)=*(0,36)=(0,37)=xs_OSList:OSList:t(0,36)_OSList:T(0,37)=s24first_node:(0,38)=*(0,39)=(0,40)=xs_OSListNode:,0,32;last_node:(0,38),32,32;cur_node:(0,38),64,32;currently_size:(0,3),96,32;max_size:(0,3),128,32;free_data_function:(0,41)=*(0,42)=f(0,12),160,32;;OSListNode:t(0,39)_OSListNode:T(0,40)=s12next:(0,43)=*(0,40),0,32;prev:(0,43),32,32;data:(0,11),64,32;;g_found:(0,3)negate:(0,3)found:(0,3)pattern:(0,1)entry:(0,1)pattern:(0,1)op_msg:(0,44)=ar(0,28);0;1024;(0,2)__local_name:G(0,1)hostname_map:S(0,45)=ar(0,28);0;255;(0,46)=k(0,8)rootcheck:G(0,47)=(0,48)=xs_rkconfig:rkconfig:t(0,47)_rkconfig:T(0,48)=s60workdir:(0,1),0,32;basedir:(0,1),32,32;rootkit_files:(0,1),64,32;rootkit_trojans:(0,1),96,32;winaudit:(0,1),128,32;winmalware:(0,1),160,32;winapps:(0,1),192,32;fp:(0,4),224,32;daemon:(0,3),256,32;notify:(0,3),288,32;scanall:(0,3),320,32;readall:(0,3),352,32;disabled:(0,3),384,32;time:(0,3),416,32;queue:(0,3),448,32;;rk_sys_file:G(0,49)=*(0,1)rk_sys_name:G(0,49)rk_sys_count:G(0,3)total_ports_udp:G(0,50)=ar(0,28);0;65535;(0,2)total_ports_tcp:G(0,50)