Enhancements - x86 support (WoW64 + native), ability to change function prefix #9
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
bugproof
changed the title
bugproof
changed the title
bugproof
changed the title
|
Great stuff, I will have a look soon (not much time really) :) |
|
I tried since this morning to make the code compatible, and now I just saw this PR, I hate my life but thanks a lot @bugproof |
|
I have a variation that generates separate ASM files fro x86 and x64 as well as some changes to shave off some redundant code. Should I make a new pull request? |
I did the same thing on my side but not tested it, I just waited this PR but do not worry, I will let you create a new PR ;) Here is my changes if you want to take a look and maybe improve your version: https://github.com/Sh0ckFR/SysWhispers2 |
xenoscr
added a commit
to xenoscr/SysWhispers2
that referenced
this pull request
Feb 27, 2022
…milar to jthuraisamy#9 and some inspiration from https://github.com/mai1zhi2/SysWhispers2_x86/blob/main/SysWhispers2_x86_WOW64Gate/SyscallsStubs.asm. Updated README.md with instructions to support both x86 and x64 targets. Updated base.c to support x86 registers Updated syswhispers.py to add x86 and x64 stubs to support a refactored version that uses fewer redundant instructions.
This was referenced Feb 27, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Seems to work. Please check if 32 bit version asm is correct.
I was wondering if a separate .asm file should be generated for this. Now the generated .asm will build on both architectures using
IFDEF RAX.Some ideas worth mentioning to improve this even further:
-x86/-32bitargument to optionally enable 32-bit supportCustom function prefix only works with
Ntfunctions. I don't know if it's needed forRtlas well.Closes #7