Lines Matching defs:pbFunction
446 uint8_t const *pbFunction = &pbBits[offSymbol];
460 if ( pbFunction[ 0] == 0x4c /* mov r10, rcx */
461 && pbFunction[ 1] == 0x8b
462 && pbFunction[ 2] == 0xd1
463 && pbFunction[ 3] == 0xb8 /* mov eax, 0000yyzzh */
464 //&& pbFunction[ 4] == 0xZZ
465 //&& pbFunction[ 5] == 0xYY
466 && pbFunction[ 6] == 0x00
467 && pbFunction[ 7] == 0x00
468 && pbFunction[ 8] == 0x0f /* syscall */
469 && pbFunction[ 9] == 0x05
470 && pbFunction[10] == 0xc3 /* ret */ )
472 *pSyscall->puApiNo = RT_MAKE_U16(pbFunction[4], pbFunction[5]);
499 if ( pbFunction[ 0] == 0xb8 /* mov eax, 0000yyzzh*/
500 //&& pbFunction[ 1] <= 0xZZ
501 //&& pbFunction[ 2] <= 0xYY
502 && pbFunction[ 3] == 0x00
503 && pbFunction[ 4] == 0x00)
505 *pSyscall->puApiNo = RT_MAKE_U16(pbFunction[1], pbFunction[2]);
506 if ( pbFunction[5] == 0xba /* mov edx, offset SharedUserData!SystemCallStub */
507 && pbFunction[ 6] == 0x00
508 && pbFunction[ 7] == 0x03
509 && pbFunction[ 8] == 0xfe
510 && pbFunction[ 9] == 0x7f
511 && pbFunction[10] == 0xff /* call [edx] */
512 && pbFunction[11] == 0x12
513 && ( ( pbFunction[12] == 0xc2 /* ret 1ch */
514 && pbFunction[13] == pSyscall->cbParams
515 && pbFunction[14] == 0x00)
516 || ( pbFunction[12] == 0xc3 /* ret */
525 if ( pbFunction[ 5] == 0xe8 /* call [$+3] */
526 && RT_ABS(*(int32_t *)&pbFunction[6]) < 0x10
527 && ( ( pbFunction[10] == 0xc2 /* ret 1ch */
528 && pbFunction[11] == pSyscall->cbParams
529 && pbFunction[12] == 0x00)
530 || ( pbFunction[10] == 0xc3 /* ret */
545 memcpy((void *)&abCopy[0], pbFunction, sizeof(abCopy));