This patch allows function names to be filtered with a wildcard. For example, all the Rtl functions from ntdll.dll can be ignored by putting in the blacklist block: ntdll.dll!Rtl*.
Furthermore, all of a module's functions can be filtered at once by specifying the module's name on its own. For example, to only log calls to kernel32.dll, place KERNEL32.dll on a line on its own in the whitelist block. (This feature obsoletes the -only_to_lib feature, hence it is removed.)
This patch allows function names to be filtered with a wildcard. For example, all the Rtl functions from ntdll.dll can be ignored by putting in the blacklist block:
ntdll.dll!Rtl*.Furthermore, all of a module's functions can be filtered at once by specifying the module's name on its own. For example, to only log calls to kernel32.dll, place
KERNEL32.dllon a line on its own in the whitelist block. (This feature obsoletes the-only_to_libfeature, hence it is removed.)