Add "mov $imm, %eax" to the known instructions. This is needed to

work on 'write' on 32 OS X 10.7.
yuzhenyang · May 3, 2012 · c4b26ad · c4b26ad
1 parent 9c76565
commit c4b26ad
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/mach_override/mach_override.c b/mach_override/mach_override.c
@@ -583,6 +583,7 @@ static AsmInstructionMatch possibleInstructions[] = {
 	{ 0x3, {0xFF, 0x4F, 0x00}, {0x8B, 0x45, 0x00} },  // mov $imm(%ebp), %reg
 	{ 0x3, {0xFF, 0x4C, 0x00}, {0x8B, 0x40, 0x00} },  // mov $imm(%eax-%edx), %reg
 	{ 0x4, {0xFF, 0xFF, 0xFF, 0x00}, {0x8B, 0x4C, 0x24, 0x00} },  // mov $imm(%esp), %ecx
+	{ 0x5, {0xFF, 0x00, 0x00, 0x00, 0x00}, {0xB8, 0x00, 0x00, 0x00, 0x00} },	// mov $imm, %eax
 	{ 0x0 }
 };
 #elif defined(__x86_64__)