Continuing with our analysis, we'll take a look at the execve system call instructions in GDB while examining the stack and registers, much like we have done in the past two recipes. I intentionally broke dynamic analysis into three recipes so that we could go through it thoroughly and in digestible chunks.
Analyzing the execve system call
Getting ready
If VirtualBox and the 64-bit Ubuntu virtual machine aren't running, go ahead and start them now, and then go through the preceding two recipes before going through this one. Make sure you pause execution on the 0x400e8 <start+104> instruction, which should be a syscall following the third dup2 block.
