|
|
|
|
module |
caller |
description |
calls... |
| DRAC1CAL |
C compiled code in application program |
intercepts "calloc" at EDCV+484 |
|
| DRAC1FRE |
C compiled code in application program |
intercepts "free" at EDCV+488 |
|
| DRAC1MAL |
C compiled code in application program |
intercepts "malloc" at EDCV+492 |
|
| DRAC1REA |
C compiled code in application program |
intercepts "realloc" at EDCV+496 |
|
| DRAC2THR |
C++ compiled code in application program |
intercepts "throw" at EDCV+1708 |
|
| DRAC2CAT |
C++ compiled code in application program |
intercepts "catch" at EDCV+1716 |
|
| DRADLL10 |
DRAL275 |
intercepts DLL load (CEEPTLOR) when called via CEEPTLC |
DRADLL11 |
| DRADLL11 |
DRAL271 DRADLL10 DRADLL20 DRADLL30 |
option DLL: detemines if the DLL should be analyzed |
|
| DRADLL20 |
DRAL275 |
intercepts DLL load (CEEPTLOR) when called via @@TRGLOC |
DRADLL11 DRADLL21 |
| DRADLL21 |
DRADLL20 DRADLL30 |
dumps the Import/Export Table (IET) of the DLL |
|
| DRADLL30 |
DRAL275 |
intercepts DLL load (CEEPTLOR) when called via @@TRGLOR |
DRADLL11 DRADLL21 |
| DRAINIT |
DRAPH123 |
Installs Virtual Storage Management |
DRAVSM31 |
| DRAINST |
DRAPH118 |
Installs interceptors |
DRAINSTC DRAINSTE DRAINSTH DRAINSTL DRAINSTM |
| DRAINSTC |
DRAINST |
Installs EDC interceptors |
|
| DRAINSTE |
DRAINST |
Installs member language specific EVENT interceptors |
|
| DRAINSTH |
DRAINST |
Installs HOOK interceptors |
|
| DRAINSTL |
DRAINST |
Installs CEL interceptors |
|
| DRAINSTM |
DRAINST |
Installs MAIN interceptors |
|
| DRALCRHP |
application program |
intercepts CEEVCRHP (create heap) at CELV+164 |
|
| DRALCZST |
application program |
intercepts CEECZST (reallocate storage) at CELV+2820 |
|
| DRALDSHP |
application program |
intercepts CEEVDSHP (discard heap) at CELV+168 |
|
| DRALFRST |
application program |
intercepts CEEVFRST (free storage) at CELV+132 |
|
| DRALGTSB |
application program |
intercepts CEEVGTSB (allocate storage below 16MB) at CELV+2936 |
|
| DRALGTST |
application program |
intercepts CEEVGTST (allocate storage) at CELV+144 |
|
| DRALPGTS |
application program |
intercepts ZGETST (allocate storage on PROCESS level) at CEEPCB_ZGETST |
|
| DRALPFRS |
application program |
intercepts ZFREEST (free storage on PROCESS level) at CEEPCB_ZFREEST |
|
| DRALRGTS |
application program |
intercepts CEEV#GTS (allocate storage) at CELV+124 |
|
| DRALRFRS |
application program |
intercepts CEEV#FRS (free storage) at CELV+3452 |
|
| DRALSGL |
application program |
intercepts CEEHSGL (raise condition) at CELV+28 |
|
| DRALXD |
non-xplink program calling an xplink routine |
intercepts CEEVROND (run on Downward stack) at CELV+3408 |
|
| DRALXO |
xplink program calling an OS_STACK routine |
intercepts CEEVH2OS (run on Upward stack) at CELV+3444 |
|
| DRALP10 |
CEELOAD macro via CELV+3500 |
intercepts CEEPDLOD (old LOAD service) |
|
| DRALP11 |
CEEFETCH macro ia CELV+3988 |
intercepts CEEBFTCH (FETCH) |
|
| DRALP12 |
CEERELES macro via CELV+3992 |
intercepts CEEBRELS (RELEASE) |
|
| DRALP13 |
CEEBFTCH via CELV+3948 |
intercepts CEEPLOD2 (enclave load service) |
|
| DRALP14 |
CEEBRELS via CELV+3952 |
intercepts CEEPDEL2 (enclave delete service) |
|
| DRALP23 |
via CELV+0096 |
intercepts CEEPLOD (enclave level load service) |
|
| DRALP24 |
via CELV+0084 |
intercepts CEEPDEL (enclave level delete service) |
|
| DRALP33 |
via CELV+3492 |
intercepts CEEPLODT (thread level load service) |
|
| DRALP34 |
via CELV+3496 |
intercepts CEEPDELT (thread level delete service) |
|
| DRALP43 |
via CEEPCB_ZLOD |
intercepts ZLOD (system dependent load service) |
|
| DRALP44 |
via CEEPCB_ZDEL |
intercepts ZDEL (system dependent delete service) |
|
| DRAL251 |
application program |
intercepts CEEPLOD2 (load module) at CELV+3948 |
|
| DRAL252 |
application program |
intercepts CEEPDEL2 (delete module) at CELV+3952 |
|
| DRAL262 |
application program |
intercepts CEERELES (release module) at CELV+3992 |
|
| DRAL271 |
application program |
intercepts CEEPLDE (explicitly load DLL) at CELV+4016 |
|
| DRAL272 |
application program |
intercepts CEEPFDE (explicitly free DLL) at CELV+4020 |
|
| DRAL273 |
application program |
intercepts CEEPQDF (explicitly query DLL function) at CELV+4024 |
|
| DRAL274 |
application program |
intercepts CEEPGTFN (call DLL function) at CELV+4012 and CEECAAGETFN |
|
| DRAL275 |
application program |
intercepts CEEPTLOR (implicitly load DLL on call) at CELV+4008 |
DRADLL10 DRADLL20 DRADLL30 |
| DRAPH |
Language Environment |
main entry point of DRA. Routes to other modules depending on event code. |
DRAPH123 DRAPH118 DRAPH120 DRAPH101 DRAPH127 DRAPH103 DRAPH133 DRAPH122 DRAPH119 |
| DRAPH101 |
DRAPH |
called when the event code is 101. This is event "condition raised". It is fired by Language Environment during execution of the application program when a Condition is raised. |
|
| DRAPH103 |
DRAPH |
called when the event code is 103. This is event "unhandled condition". It is fired by Language Environment during execution of the application program when a previously raised condition (event 101) was not handled by a Condition handler. This leads to abnormal termination of the Enclave. |
|
| DRAPH118 |
DRAPH |
called when the event code is 118. This is event "enclave init". This event is fired by Language environment when the Enclave is Initialized and the application is ready to start execution. |
DRAINST |
| DRAPH119 |
DRAPH |
called when the event code is 119. This is event "enclave term". It is fired by Language Environment after execution of the application when the enclave is being terminated. |
DRAUNST DRASUM DRATERM |
| DRAPH120 |
DRAPH |
called when the event code is 120. This is event "thread init". |
|
| DRAPH122 |
DRAPH |
called when the event code is 122. This is event "thread term". |
|
| DRAPH123 |
DRAPH |
called when the event code is 123. This is event "external entry". It is the first event fired by Language Environment immediately after the Profile tool (DRA) is loaded. |
DRAINIT DRAPRF00 |
| DRAPH127 |
DRAPH |
called when the event code is 127. This is event "condition promote". It is fired by Language Environment during execution of the application program when a previously raised condition (event 101) was handled by a Condition handler who changed it into another Condition. |
|
| DRAPH133 |
DRAPH |
called when the event code is 133. This is event "execution hook invocation". It is fired by Language Environment during execution of the application program when a "hook" is encountered. |
|
| DRAPRF00 |
DRAPH123 |
Parses the Profile string |
|
| DRASUM |
DRAPH119 |
writes the report after termination of the application program |
DRASUM10 DRASUM20 DRASUM30 DRASUM40 |
| DRASUM10 |
DRASUM |
writes the TRACE report |
|
| DRASUM20 |
DRASUM |
writes the COUNT report |
|
| DRASUM30 |
DRASUM |
writes the TIME report |
|
| DRASUM40 |
DRASUM |
writes the TREE report |
DRASUM41 |
| DRASUM41 |
DRASUM40 |
writes the TREE report |
|
| DRATERM |
DRAPH119 |
Uninstalls Virtual Storage Management |
DRAVSM32 |
| DRAUNST |
DRAPH119 |
Uninstalls interceptors |
|
| DRAUNSTC |
DRAUNST |
Uninstalls EDC interceptors |
|
| DRAUNSTE |
DRAUNST |
Uninstalls EVENT interceptors |
|
| DRAUNSTL |
DRAUNST |
Uninstalls CEL interceptors |
|
| DRAQNAME |
DRAL250 DRAL251 DRAL261 DRAL273 DRADLL11 |
puts a name in the NAME queue |
|