ptrace on ia32

process trace

compat_sys_ptrace(long request, long pid, unsigned long addr, unsigned long data)
number26 (0x1a)
abii386
entry pointcompat_sys_ptrace
sinceLinux 3.3 or earlier (3.3 is the first release scanned for ia32)
man pageptrace(2)
sourceelixir.bootlin.com

Registers

registervalue
eax26, the syscall number
ebxlong request
ecxlong pid
edxunsigned long addr
esiunsigned long data
eaxthe return value

Then run int 0x80 to enter the kernel.

This compat ABI is only available when the kernel is built with CONFIG_IA32_EMULATION.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/ia32/ptrace