mirror of
https://github.com/jart/cosmopolitan.git
synced 2025-07-27 21:10:29 +00:00
Get --ftrace working on aarch64
This change implements a new approach to function call logging, that's based on the GCC flag: -fpatchable-function-entry. Read the commentary in build/config.mk to learn how it works.
This commit is contained in:
Justine Tunney
parent
5b908bc756
commit
eb40cb371d
934 changed files with 2259 additions and 1268 deletions
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp CsrClientCallServer,CsrClientCallServer
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
CsrClientCallServer:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_CsrClientCallServer(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp LdrGetDllHandle,LdrGetDllHandle
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
LdrGetDllHandle:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_LdrGetDllHandle(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp LdrGetProcedureAddress,LdrGetProcedureAddress
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
LdrGetProcedureAddress:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_LdrGetProcedureAddress(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp LdrLoadDll,LdrLoadDll
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
LdrLoadDll:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_LdrLoadDll(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp LdrUnloadDll,LdrUnloadDll
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
LdrUnloadDll:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_LdrUnloadDll(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtAllocateVirtualMemory,NtAllocateVirtualMemory
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtAllocateVirtualMemory:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtAllocateVirtualMemory(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCallbackReturn,NtCallbackReturn
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCallbackReturn:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCallbackReturn(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCancelIoFile,NtCancelIoFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCancelIoFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCancelIoFile(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCancelIoFileEx,NtCancelIoFileEx
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCancelIoFileEx:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCancelIoFileEx(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtClearEvent,NtClearEvent
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtClearEvent:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_NtClearEvent(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtClose,NtClose
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtClose:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_NtClose(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtContinue,NtContinue
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtContinue:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtContinue(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateDirectoryObject,NtCreateDirectoryObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateDirectoryObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateDirectoryObject(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateEvent,NtCreateEvent
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateEvent:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateEvent(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateFile,NtCreateFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateFile(%rip),%rax
|
||||
jmp __sysv2nt12
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateIoCompletion,NtCreateIoCompletion
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateIoCompletion:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateIoCompletion(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateKey,NtCreateKey
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateKey:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateKey(%rip),%rax
|
||||
jmp __sysv2nt8
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateKeyedEvent,NtCreateKeyedEvent
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateKeyedEvent:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateKeyedEvent(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateNamedPipeFile,NtCreateNamedPipeFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateNamedPipeFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateNamedPipeFile(%rip),%rax
|
||||
jmp __sysv2nt14
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateProcess,NtCreateProcess
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateProcess:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateProcess(%rip),%rax
|
||||
jmp __sysv2nt8
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateProfile,NtCreateProfile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateProfile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateProfile(%rip),%rax
|
||||
jmp __sysv2nt10
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateSection,NtCreateSection
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateSection:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateSection(%rip),%rax
|
||||
jmp __sysv2nt8
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateThread,NtCreateThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateThread(%rip),%rax
|
||||
jmp __sysv2nt8
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtCreateTimer,NtCreateTimer
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtCreateTimer:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtCreateTimer(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtDelayExecution,NtDelayExecution
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtDelayExecution:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtDelayExecution(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtDeleteFile,NtDeleteFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtDeleteFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_NtDeleteFile(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtDeleteKey,NtDeleteKey
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtDeleteKey:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_NtDeleteKey(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtDeviceIoControlFile,NtDeviceIoControlFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtDeviceIoControlFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtDeviceIoControlFile(%rip),%rax
|
||||
jmp __sysv2nt10
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtDuplicateObject,NtDuplicateObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtDuplicateObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtDuplicateObject(%rip),%rax
|
||||
jmp __sysv2nt8
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtEnumerateKey,NtEnumerateKey
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtEnumerateKey:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtEnumerateKey(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtEnumerateValueKey,NtEnumerateValueKey
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtEnumerateValueKey:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtEnumerateValueKey(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtFlushBuffersFile,NtFlushBuffersFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtFlushBuffersFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtFlushBuffersFile(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtFlushInstructionCache,NtFlushInstructionCache
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtFlushInstructionCache:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtFlushInstructionCache(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtFlushKey,NtFlushKey
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtFlushKey:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_NtFlushKey(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtFlushVirtualMemory,NtFlushVirtualMemory
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtFlushVirtualMemory:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtFlushVirtualMemory(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtFreeVirtualMemory,NtFreeVirtualMemory
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtFreeVirtualMemory:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtFreeVirtualMemory(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtFsControlFile,NtFsControlFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtFsControlFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtFsControlFile(%rip),%rax
|
||||
jmp __sysv2nt10
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtGetContextThread,NtGetContextThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtGetContextThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtGetContextThread(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtMapViewOfSection,NtMapViewOfSection
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtMapViewOfSection:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtMapViewOfSection(%rip),%rax
|
||||
jmp __sysv2nt10
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenDirectoryObject,NtOpenDirectoryObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenDirectoryObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenDirectoryObject(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenFile,NtOpenFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenFile(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenKey,NtOpenKey
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenKey:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenKey(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenProcess,NtOpenProcess
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenProcess:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenProcess(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenProcessToken,NtOpenProcessToken
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenProcessToken:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenProcessToken(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenSection,NtOpenSection
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenSection:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenSection(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenSymbolicLinkObject,NtOpenSymbolicLinkObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenSymbolicLinkObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenSymbolicLinkObject(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenThread,NtOpenThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenThread(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtOpenThreadToken,NtOpenThreadToken
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtOpenThreadToken:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtOpenThreadToken(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtProtectVirtualMemory,NtProtectVirtualMemory
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtProtectVirtualMemory:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtProtectVirtualMemory(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryAttributesFile,NtQueryAttributesFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryAttributesFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryAttributesFile(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryDirectoryFile,NtQueryDirectoryFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryDirectoryFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryDirectoryFile(%rip),%rax
|
||||
jmp __sysv2nt12
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryFullAttributesFile,NtQueryFullAttributesFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryFullAttributesFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryFullAttributesFile(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryInformationFile,NtQueryInformationFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryInformationFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryInformationFile(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryInformationJobObject,NtQueryInformationJobObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryInformationJobObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryInformationJobObject(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryInformationProcess,NtQueryInformationProcess
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryInformationProcess:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryInformationProcess(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryInformationThread,NtQueryInformationThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryInformationThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryInformationThread(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryInformationToken,NtQueryInformationToken
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryInformationToken:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryInformationToken(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryIntervalProfile,NtQueryIntervalProfile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryIntervalProfile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryIntervalProfile(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryObject,NtQueryObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryObject(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryPerformanceCounter,NtQueryPerformanceCounter
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryPerformanceCounter:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryPerformanceCounter(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQuerySection,NtQuerySection
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQuerySection:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQuerySection(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQuerySecurityObject,NtQuerySecurityObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQuerySecurityObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQuerySecurityObject(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQuerySymbolicLinkObject,NtQuerySymbolicLinkObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQuerySymbolicLinkObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQuerySymbolicLinkObject(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQuerySystemInformation,NtQuerySystemInformation
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQuerySystemInformation:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQuerySystemInformation(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQuerySystemTime,NtQuerySystemTime
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQuerySystemTime:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_NtQuerySystemTime(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryValueKey,NtQueryValueKey
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryValueKey:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryValueKey(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryVirtualMemory,NtQueryVirtualMemory
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryVirtualMemory:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryVirtualMemory(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueryVolumeInformationFile,NtQueryVolumeInformationFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueryVolumeInformationFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueryVolumeInformationFile(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtQueueApcThread,NtQueueApcThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtQueueApcThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtQueueApcThread(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtRaiseException,NtRaiseException
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtRaiseException:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtRaiseException(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtRaiseHardError,NtRaiseHardError
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtRaiseHardError:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtRaiseHardError(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtReadFile,NtReadFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtReadFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtReadFile(%rip),%rax
|
||||
jmp __sysv2nt10
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtReadVirtualMemory,NtReadVirtualMemory
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtReadVirtualMemory:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtReadVirtualMemory(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtReleaseKeyedEvent,NtReleaseKeyedEvent
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtReleaseKeyedEvent:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtReleaseKeyedEvent(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtResumeThread,NtResumeThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtResumeThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtResumeThread(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSetContextThread,NtSetContextThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSetContextThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSetContextThread(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSetEvent,NtSetEvent
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSetEvent:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSetEvent(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSetInformationFile,NtSetInformationFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSetInformationFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSetInformationFile(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSetInformationThread,NtSetInformationThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSetInformationThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSetInformationThread(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSetIntervalProfile,NtSetIntervalProfile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSetIntervalProfile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSetIntervalProfile(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSetTimer,NtSetTimer
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSetTimer:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSetTimer(%rip),%rax
|
||||
jmp __sysv2nt8
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSetValueKey,NtSetValueKey
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSetValueKey:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSetValueKey(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSignalAndWaitForSingleObject,NtSignalAndWaitForSingleObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSignalAndWaitForSingleObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSignalAndWaitForSingleObject(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtStartProfile,NtStartProfile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtStartProfile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_NtStartProfile(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtStopProfile,NtStopProfile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtStopProfile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov %rdi,%rcx
|
||||
sub $32,%rsp
|
||||
call *__imp_NtStopProfile(%rip)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtSuspendThread,NtSuspendThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtSuspendThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtSuspendThread(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtTerminateProcess,NtTerminateProcess
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtTerminateProcess:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtTerminateProcess(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtTerminateThread,NtTerminateThread
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtTerminateThread:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtTerminateThread(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtTestAlert,NtTestAlert
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtTestAlert:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
sub $32,%rsp
|
||||
call *__imp_NtTestAlert(%rip)
|
||||
leave
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtUnmapViewOfSection,NtUnmapViewOfSection
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtUnmapViewOfSection:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtUnmapViewOfSection(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtWaitForKeyedEvent,NtWaitForKeyedEvent
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtWaitForKeyedEvent:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtWaitForKeyedEvent(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtWaitForSingleObject,NtWaitForSingleObject
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtWaitForSingleObject:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtWaitForSingleObject(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtWriteFile,NtWriteFile
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtWriteFile:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtWriteFile(%rip),%rax
|
||||
jmp __sysv2nt10
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtWriteVirtualMemory,NtWriteVirtualMemory
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtWriteVirtualMemory:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_NtWriteVirtualMemory(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp NtYieldExecution,NtYieldExecution
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
NtYieldExecution:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
sub $32,%rsp
|
||||
call *__imp_NtYieldExecution(%rip)
|
||||
leave
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp RtlAllocateHeap,RtlAllocateHeap
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
RtlAllocateHeap:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_RtlAllocateHeap(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp RtlCloneUserProcess,RtlCloneUserProcess
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
RtlCloneUserProcess:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_RtlCloneUserProcess(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp RtlConvertSidToUnicodeString,RtlConvertSidToUnicodeString
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
RtlConvertSidToUnicodeString:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_RtlConvertSidToUnicodeString(%rip),%rax
|
||||
jmp __sysv2nt
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp RtlCreateHeap,RtlCreateHeap
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
RtlCreateHeap:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_RtlCreateHeap(%rip),%rax
|
||||
jmp __sysv2nt6
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
|
|
@ -2,11 +2,12 @@
|
|||
.ntimp RtlCreateProcessParameters,RtlCreateProcessParameters
|
||||
|
||||
.text.windows
|
||||
.ftrace1
|
||||
RtlCreateProcessParameters:
|
||||
.ftrace2
|
||||
#ifdef __x86_64__
|
||||
push %rbp
|
||||
mov %rsp,%rbp
|
||||
.profilable
|
||||
mov __imp_RtlCreateProcessParameters(%rip),%rax
|
||||
jmp __sysv2nt10
|
||||
#elif defined(__aarch64__)
|
||||
|
|
|
|||
Some files were not shown because too many files have changed in this diff Show more
Loading…
Add table
Add a link
Reference in a new issue