31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
|
.section __TEXT, __text, regular, pure_instructions
_of_forward:
pushq %rbp
movq %rsp, %rbp
/* Save all arguments */
subq $0xC0, %rsp /* 16-byte alignment */
movq %rax, 0xA8(%rsp)
movq %rdi, 0xA0(%rsp)
movq %rsi, 0x98(%rsp)
movq %rdx, 0x90(%rsp)
movq %rcx, 0x88(%rsp)
movq %r8, 0x80(%rsp)
movq %r9, 0x78(%rsp)
movd %xmm0, 0x70(%rsp)
movd %xmm1, 0x60(%rsp)
movd %xmm2, 0x50(%rsp)
movd %xmm3, 0x40(%rsp)
movd %xmm4, 0x30(%rsp)
movd %xmm5, 0x20(%rsp)
movd %xmm6, 0x10(%rsp)
movd %xmm7, (%rsp)
call _object_getClass
movq %rax, %rdi
movq L_sel_forwardingTargetForSelector(%rip), %rsi
call _class_respondsToSelector
testq %rax, %rax
jz fail
movq 0xA0(%rsp), %rdi
movq L_sel_forwardingTargetForSelector(%rip), %rsi
movq 0x98(%rsp), %rdx
call _objc_msgSend
movq %rax, %rdi
testq %rdi, %rdi
jz fail
cmpq 0xA0(%rsp), %rdi
je fail
/* Restore all arguments, except %rdi */
movd (%rsp), %xmm7
movd 0x10(%rsp), %xmm6
movd 0x20(%rsp), %xmm5
movd 0x30(%rsp), %xmm4
movd 0x40(%rsp), %xmm3
movd 0x50(%rsp), %xmm2
movd 0x60(%rsp), %xmm1
movd 0x70(%rsp), %xmm0
movq 0x78(%rsp), %r9
movq 0x80(%rsp), %r8
movq 0x88(%rsp), %rcx
movq 0x90(%rsp), %rdx
movq 0x98(%rsp), %rsi
movq 0xA8(%rsp), %rax
movq %rbp, %rsp
popq %rbp
jmp _objc_msgSend
fail:
movq 0xA0(%rsp), %rdi
movq 0x98(%rsp), %rsi
movq %rbp, %rsp
popq %rbp
jmp _of_method_not_found
_of_forward_stret:
pushq %rbp
movq %rsp, %rbp
/* Save all arguments */
subq $0xC0, %rsp /* 16-byte alignment */
movq %rax, 0xA8(%rsp)
movq %rdi, 0xA0(%rsp)
movq %rsi, 0x98(%rsp)
movq %rdx, 0x90(%rsp)
movq %rcx, 0x88(%rsp)
movq %r8, 0x80(%rsp)
movq %r9, 0x78(%rsp)
movd %xmm0, 0x70(%rsp)
movd %xmm1, 0x60(%rsp)
movd %xmm2, 0x50(%rsp)
movd %xmm3, 0x40(%rsp)
movd %xmm4, 0x30(%rsp)
movd %xmm5, 0x20(%rsp)
movd %xmm6, 0x10(%rsp)
movd %xmm7, (%rsp)
movq %rsi, %rdi
call _object_getClass
movq %rax, %rdi
movq L_sel_forwardingTargetForSelector(%rip), %rsi
call _class_respondsToSelector
testq %rax, %rax
jz fail_stret
movq 0x98(%rsp), %rdi
movq L_sel_forwardingTargetForSelector(%rip), %rsi
movq 0x90(%rsp), %rdx
call _objc_msgSend
movq %rax, %rsi
testq %rsi, %rsi
jz fail_stret
cmpq 0x98(%rsp), %rsi
je fail_stret
/* Restore all arguments, except %rsi */
movd (%rsp), %xmm7
movd 0x10(%rsp), %xmm6
movd 0x20(%rsp), %xmm5
movd 0x30(%rsp), %xmm4
movd 0x40(%rsp), %xmm3
movd 0x50(%rsp), %xmm2
movd 0x60(%rsp), %xmm1
movd 0x70(%rsp), %xmm0
movq 0x78(%rsp), %r9
movq 0x80(%rsp), %r8
movq 0x88(%rsp), %rcx
movq 0x90(%rsp), %rdx
movq 0xA0(%rsp), %rdi
movq 0xA8(%rsp), %rax
movq %rbp, %rsp
popq %rbp
jmp _objc_msgSend_stret
fail_stret:
movq 0x98(%rsp), %rdi
movq 0x90(%rsp), %rsi
movq %rbp, %rsp
popq %rbp
jmp _of_method_not_found
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
|
.section __TEXT, __text, regular, pure_instructions
_of_forward:
pushq %rbp
movq %rsp, %rbp
/* Save all arguments */
subq $0xC0, %rsp /* 16-byte alignment */
movq %rax, -0x8(%rbp)
movq %rdi, -0x10(%rbp)
movq %rsi, -0x18(%rbp)
movq %rdx, -0x20(%rbp)
movq %rcx, -0x28(%rbp)
movq %r8, -0x30(%rbp)
movq %r9, -0x38(%rbp)
movdqa %xmm0, -0x50(%rbp)
movdqa %xmm1, -0x60(%rbp)
movdqa %xmm2, -0x70(%rbp)
movdqa %xmm3, -0x80(%rbp)
movdqa %xmm4, -0x90(%rbp)
movdqa %xmm5, -0xA0(%rbp)
movdqa %xmm6, -0xB0(%rbp)
movdqa %xmm7, -0xC0(%rbp)
call _object_getClass
movq %rax, %rdi
movq L_sel_forwardingTargetForSelector(%rip), %rsi
call _class_respondsToSelector
testq %rax, %rax
jz fail
movq -0x10(%rbp), %rdi
movq L_sel_forwardingTargetForSelector(%rip), %rsi
movq -0x18(%rbp), %rdx
call _objc_msgSend
movq %rax, %rdi
testq %rdi, %rdi
jz fail
cmpq -0x10(%rbp), %rdi
je fail
/* Restore all arguments, except %rdi */
movdqa -0xC0(%rbp), %xmm7
movdqa -0xB0(%rbp), %xmm6
movdqa -0xA0(%rbp), %xmm5
movdqa -0x90(%rbp), %xmm4
movdqa -0x80(%rbp), %xmm3
movdqa -0x70(%rbp), %xmm2
movdqa -0x60(%rbp), %xmm1
movdqa -0x50(%rbp), %xmm0
movq -0x38(%rbp), %r9
movq -0x30(%rbp), %r8
movq -0x28(%rbp), %rcx
movq -0x20(%rbp), %rdx
movq -0x18(%rbp), %rsi
movq -0x8(%rbp), %rax
movq %rbp, %rsp
popq %rbp
jmp _objc_msgSend
fail:
movq -0x10(%rbp), %rdi
movq -0x18(%rbp), %rsi
movq %rbp, %rsp
popq %rbp
jmp _of_method_not_found
_of_forward_stret:
pushq %rbp
movq %rsp, %rbp
/* Save all arguments */
subq $0xC0, %rsp /* 16-byte alignment */
movq %rax, -0x8(%rbp)
movq %rdi, -0x10(%rbp)
movq %rsi, -0x18(%rbp)
movq %rdx, -0x20(%rbp)
movq %rcx, -0x28(%rbp)
movq %r8, -0x30(%rbp)
movq %r9, -0x38(%rbp)
movdqa %xmm0, -0x50(%rbp)
movdqa %xmm1, -0x60(%rbp)
movdqa %xmm2, -0x70(%rbp)
movdqa %xmm3, -0x80(%rbp)
movdqa %xmm4, -0x90(%rbp)
movdqa %xmm5, -0xA0(%rbp)
movdqa %xmm6, -0xB0(%rbp)
movdqa %xmm7, -0xC0(%rbp)
movq %rsi, %rdi
call _object_getClass
movq %rax, %rdi
movq L_sel_forwardingTargetForSelector(%rip), %rsi
call _class_respondsToSelector
testq %rax, %rax
jz fail_stret
movq -0x18(%rbp), %rdi
movq L_sel_forwardingTargetForSelector(%rip), %rsi
movq -0x20(%rbp), %rdx
call _objc_msgSend
movq %rax, %rsi
testq %rsi, %rsi
jz fail_stret
cmpq -0x18(%rbp), %rsi
je fail_stret
/* Restore all arguments, except %rsi */
movdqa -0xC0(%rbp), %xmm7
movdqa -0xB0(%rbp), %xmm6
movdqa -0xA0(%rbp), %xmm5
movdqa -0x90(%rbp), %xmm4
movdqa -0x80(%rbp), %xmm3
movdqa -0x70(%rbp), %xmm2
movdqa -0x60(%rbp), %xmm1
movdqa -0x50(%rbp), %xmm0
movq -0x38(%rbp), %r9
movq -0x30(%rbp), %r8
movq -0x28(%rbp), %rcx
movq -0x20(%rbp), %rdx
movq -0x10(%rbp), %rdi
movq -0x8(%rbp), %rax
movq %rbp, %rsp
popq %rbp
jmp _objc_msgSend_stret
fail_stret:
movq -0x18(%rbp), %rdi
movq -0x20(%rbp), %rsi
movq %rbp, %rsp
popq %rbp
jmp _of_method_not_found
|