19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
.section .text
of_forward:
pushq %rbp
movq %rsp, %rbp
/* Save all arguments */
subq $0xC0, %rsp /* 16-byte alignment */
movq %rax, 0xA8(%rsp)
movq %rdi, 0xA0(%rsp)
movq %rsi, 0x98(%rsp)
movq %rdx, 0x90(%rsp)
movq %rcx, 0x88(%rsp)
movq %r8, 0x80(%rsp)
movq %r9, 0x78(%rsp)
movd %xmm0, 0x70(%rsp)
movd %xmm1, 0x60(%rsp)
movd %xmm2, 0x50(%rsp)
movd %xmm3, 0x40(%rsp)
movd %xmm4, 0x30(%rsp)
movd %xmm5, 0x20(%rsp)
movd %xmm6, 0x10(%rsp)
movd %xmm7, (%rsp)
leaq sel_forwardingTargetForSelector_(%rip), %rsi
call objc_msg_lookup@PLT
movq 0xA0(%rsp), %rdi
leaq sel_forwardingTargetForSelector_(%rip), %rsi
movq 0x98(%rsp), %rdx
call *%rax
movq %rax, 0xA0(%rsp)
movq %rax, %rdi
movq 0x98(%rsp), %rsi
call objc_msg_lookup@PLT
movq %rax, %r11
/* Restore all arguments */
movd (%rsp), %xmm7
movd 0x10(%rsp), %xmm6
movd 0x20(%rsp), %xmm5
movd 0x30(%rsp), %xmm4
movd 0x40(%rsp), %xmm3
movd 0x50(%rsp), %xmm2
movd 0x60(%rsp), %xmm1
movd 0x70(%rsp), %xmm0
movq 0x78(%rsp), %r9
movq 0x80(%rsp), %r8
movq 0x88(%rsp), %rcx
movq 0x90(%rsp), %rdx
movq 0x98(%rsp), %rsi
movq 0xA0(%rsp), %rdi
movq 0xA8(%rsp), %rax
movq %rbp, %rsp
popq %rbp
jmp *%r11
.type of_forward, %function
.size of_forward, .-of_forward
init:
leaq module(%rip), %rdi
jmp __objc_exec_class@PLT
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<
|
|
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
.section .text
of_forward:
pushq %rbp
movq %rsp, %rbp
/* Save all arguments */
subq $0xC0, %rsp /* 16-byte alignment */
movq %rax, -0x8(%rbp)
movq %rdi, -0x10(%rbp)
movq %rsi, -0x18(%rbp)
movq %rdx, -0x20(%rbp)
movq %rcx, -0x28(%rbp)
movq %r8, -0x30(%rbp)
movq %r9, -0x38(%rbp)
movdqa %xmm0, -0x50(%rbp)
movdqa %xmm1, -0x60(%rbp)
movdqa %xmm2, -0x70(%rbp)
movdqa %xmm3, -0x80(%rbp)
movdqa %xmm4, -0x90(%rbp)
movdqa %xmm5, -0xA0(%rbp)
movdqa %xmm6, -0xB0(%rbp)
movdqa %xmm7, -0xC0(%rbp)
leaq sel_forwardingTargetForSelector_(%rip), %rsi
call objc_msg_lookup@PLT
movq -0x10(%rbp), %rdi
leaq sel_forwardingTargetForSelector_(%rip), %rsi
movq -0x18(%rbp), %rdx
call *%rax
movq %rax, -0x10(%rbp)
movq %rax, %rdi
movq -0x18(%rbp), %rsi
call objc_msg_lookup@PLT
movq %rax, %r11
/* Restore all arguments */
movdqa -0xC0(%rbp), %xmm7
movdqa -0xB0(%rbp), %xmm6
movdqa -0xA0(%rbp), %xmm5
movdqa -0x90(%rbp), %xmm4
movdqa -0x80(%rbp), %xmm3
movdqa -0x70(%rbp), %xmm2
movdqa -0x60(%rbp), %xmm1
movdqa -0x50(%rbp), %xmm0
movq -0x38(%rbp), %r9
movq -0x30(%rbp), %r8
movq -0x28(%rbp), %rcx
movq -0x20(%rbp), %rdx
movq -0x10(%rbp), %rdi
movq -0x8(%rbp), %rax
movq %rbp, %rsp
popq %rbp
jmpq *%r11
.type of_forward, %function
.size of_forward, .-of_forward
init:
leaq module(%rip), %rdi
jmp __objc_exec_class@PLT
|