blob: 03ff960cbb916c854294895c5024b19b5700356b (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
.code64
.section .text
.global judgk_syscall_block
.extern judgk_syscall_check
judgk_syscall_block:
push %rax
push %rbx
push %rcx
push %rdx
push %rsi
push %rdi
push %rbp
push %r8
push %r9
push %r10
push %r11
push %r12
push %r13
push %r14
push %r15
pushfq
call judgk_syscall_check
popfq
pop %r15
pop %r14
pop %r13
pop %r12
pop %r11
pop %r10
pop %r9
pop %r8
pop %rbp
pop %rdi
pop %rsi
pop %rdx
pop %rcx
pop %rbx
test %rax,%rax
pop %rax
jnz .block
push %rdx //use rdx, because mul rax => rdx:rax, kill two birds with one stone
mov $8,%rdx
mul %rdx
pop %rdx
add judgk_syscall_ori_table,%rax
jmp *(%rax)
.block:
ret
|
