forked from jonasmr/microprofile
-
Notifications
You must be signed in to change notification settings - Fork 0
/
patch_osx.s
212 lines (202 loc) · 2.72 KB
/
patch_osx.s
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
.intel_syntax noprefix
.text
.globl _microprofile_tramp_enter
.globl _microprofile_tramp_leave
.globl _microprofile_tramp_code_begin
.globl _microprofile_tramp_code_end
.globl _microprofile_tramp_end
.globl _microprofile_tramp_exit
.globl _microprofile_tramp_intercept0
.globl _microprofile_tramp_enter_patch
.globl _microprofile_tramp_get_rsp_loc
.globl _microprofile_tramp_arg0
.globl _microprofile_tramp_arg1
.globl _microprofile_tramp_call_patch_pop
.globl _microprofile_tramp_call_patch_push
.globl _microprofile_tramp_trunk
_microprofile_tramp_enter:
mov r12, [rsp]
# mov (%rsp), %(rax)
push rdi
push rsi
push rdx
push rcx
push r8
push r9
#sub $88h, %rsp
sub rsp, 0x88
movdqu 0x70[rsp], xmm7
movdqu 0x60[rsp], xmm6
movdqu 0x50[rsp], xmm5
movdqu 0x40[rsp], xmm4
movdqu 0x30[rsp], xmm3
movdqu 0x20[rsp], xmm2
movdqu 0x10[rsp], xmm1
movdqu [rsp], xmm0
# #call _microprofile_tramp_get_rsp_loc
mov rdi, r12
_microprofile_tramp_call_patch_push:
mov rax, 0x0102030405060708
call rax
test rax, rax
jz _microprofile_tramp_fail #if push fails, skip to call code, and dont patch return adress.
# ##todo check ret val
# # movq %r12, (%rax)
_microprofile_tramp_enter_patch:
# PATCH 1 TRAMP EXIT
mov rax, 0x0102030405060708 #patch to tramp_code_end
mov [rsp + 0xb8], rax
_microprofile_tramp_arg0:
mov rdi, 42
_microprofile_tramp_intercept0:
#PATCH 2 INTERCEPT0
mov rax, 0x0102030405060708
call rax
_microprofile_tramp_fail:
movdqu xmm7, [rsp + 0x70]
movdqu xmm6, [rsp + 0x60]
movdqu xmm5, [rsp + 0x50]
movdqu xmm4, [rsp + 0x40]
movdqu xmm3, [rsp + 0x30]
movdqu xmm2, [rsp + 0x20]
movdqu xmm1, [rsp + 0x10]
movdqu xmm0, [rsp]
add rsp, 0x88
pop r9
pop r8
pop rcx
pop rdx
pop rsi
pop rdi
_microprofile_tramp_code_begin:
##insert code here
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
_microprofile_tramp_code_end:
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
_microprofile_tramp_exit:
mov rdi, 117
push rax
push rdx
sub rsp, 0x18
movdqu [rsp], xmm0
_microprofile_tramp_leave:
#PATCH 3 INTERCEPT1
mov rax, 0x0102030405060708
call rax #jump to proxy
_microprofile_tramp_call_patch_pop:
mov rax, 0x0102030405060708
call rax
mov r11, rax
movdqu xmm0, [rsp]
add rsp, 0x18
pop rdx
pop rax
jmp r11
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
ret
int3
_microprofile_tramp_trunk: #used for moved constants.
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
_microprofile_tramp_end: