blob: dfc5bc6fa5669d312c2774d406ccf7a0af93d40e (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
.code64
.section .data
.section .text
.global hook_sys_block
.type hook_sys_block,@function
hook_sys_block:
push %rax
push %rbx
push %rcx
push %rdx
push %rsi
push %rdi
push %rbp
push %r8
push %r9
push %r10
push %r11
push %r12
push %r13
push %r14
push %r15
call judgk_syscall_check
test %eax,%eax
pop %r15
pop %r14
pop %r13
pop %r12
pop %r11
pop %r10
pop %r9
pop %r8
pop %rbp
pop %rdi
pop %rsi
pop %rdx
pop %rcx
pop %rbx
pop %rax
jnz block
push %rdx
mov $8,%rdx
mul %rdx
pop %rdx
add judgk_syscall_ori_table,%rax
jmp *(%rax)
block:
call judgk_syscall_block
mov $-1,%rax
ret
|
