Function FindFunctionPattern

src/injectables/function-patterns.cpp:48–85

}

void* FindFunctionPattern(
  const std::vector<BytePattern>& allPatterns,
  void* _begin,
  void* _end) {
  auto begin = reinterpret_cast<uint64_t*>(_begin);
  auto end = reinterpret_cast<uint64_t*>(_end);
  dprint(
    "Code search range: {:#018x}-{:#018x}", (uint64_t)begin, (uint64_t)end);

  const uint64_t firstPattern = allPatterns.front().value,
                 firstMask = allPatterns.front().mask;
  auto patterns = allPatterns;
  patterns.erase(patterns.begin());
  // Stack entries (including functions) are always aligned on 16-byte
  // boundaries
  for (auto func = begin; func < end; func += (16 / sizeof(*func))) {
    auto it = func;
    if ((*it & firstMask) != firstPattern) {
      continue;
    }
    for (auto& pattern: patterns) {
      it++;
      if (it >= end) {
        return nullptr;
      }

      if ((*it & pattern.mask) != pattern.value) {
        goto FindFunctionPattern_NextBlock;
      }
    }
    return reinterpret_cast<void*>(func);

  FindFunctionPattern_NextBlock:
    continue;
  }

  return nullptr;
}

void* FindFunctionPatternInModule(
  const char* moduleName,