Simple Proof of Implementation: Syscall Hijacking and Parameter Retrieval (GS2008) (I LIKE PIE!) 
 [name] : sys_newuname (122) [file] : kernel/sys.c
         EBX: bfaa209c
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : sys_brk (45) [file] : mm/mmap.c
         EBX: 00000000
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : old_mmap (90) [file] : arch/i386/kernel/sys_i386.c
         EBX: bfaa1e1c
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : sys_access (33) [file] : fs/open.c
         EBX: b7fa3e7b
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : old_mmap (90) [file] : arch/i386/kernel/sys_i386.c
         EBX: bfaa1e2c
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000


 [name] : sys_access (33) [file] : fs/open.c
         EBX: b7fa154d
         ECX: 00000004
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : sys_open (5) [file] : fs/open.c
         EBX: b7fa3e8e
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : old_mmap (90) [file] : arch/i386/kernel/sys_i386.c
         EBX: bfaa191c
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : sys_close (6) [file] : fs/open.c
         EBX: 00000003
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : sys_access (33) [file] : fs/open.c
         EBX: b7fa3e7b
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000

 [name] : sys_open (5) [file] : fs/open.c
         EBX: b7f8b280
         ECX: 00000000
         EDX: 00000000
         ESI: 00000000
         EDI: 00000000