com.github.unidbg.ios.patch.LibDispatchPatcher Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of unidbg-ios Show documentation
The newest version!
package com.github.unidbg.ios.patch;

import com.github.unidbg.Emulator;
import com.github.unidbg.Module;
import com.github.unidbg.pointer.UnidbgPointer;
import com.github.unidbg.spi.ModulePatcher;
import com.sun.jna.Pointer;

public class LibDispatchPatcher extends ModulePatcher {

    public LibDispatchPatcher() {
        super("/usr/lib/system/libdispatch.dylib");
    }

    protected void patch32(Emulator emulator, Module module) {
        Pointer pointer = UnidbgPointer.pointer(emulator, module.base + 0x211b4); // dispatch_semaphore_wait
        assert pointer != null;
        int code = pointer.getInt(0);
        if (code != 0xe59fc004) {
            throw new IllegalStateException("code=0x" + Integer.toHexString(code));
        }
        pointer.setInt(0, 0xe12fff1e); // bx lr
    }

    @Override
    protected void patch64(Emulator emulator, Module module) {
        {
            Pointer pointer = UnidbgPointer.pointer(emulator, module.base + 0x9908); // dispatch_barrier_sync_f
            assert pointer != null;
            int code = pointer.getInt(0);
            if (code != 0xf9402008) {
                throw new IllegalStateException("code=0x" + Integer.toHexString(code));
            }
            pointer.setInt(0, 0xd2800008); // movz x8, #0
        }

        {
            Pointer pointer = UnidbgPointer.pointer(emulator, module.base + 0x72e0); // dispatch_sync_f
            assert pointer != null;
            int code = pointer.getInt(0);
            if (code != 0xf9402008) {
                throw new IllegalStateException("code=0x" + Integer.toHexString(code));
            }
            pointer.setInt(0, 0xd2800008); // movz x8, #0
        }

        {
            Pointer pointer = UnidbgPointer.pointer(emulator, module.base + 0x9928); // dispatch_barrier_sync_f
            assert pointer != null;
            int code = pointer.getInt(0);
            if (code != 0x350000ea) {
                throw new IllegalStateException("code=0x" + Integer.toHexString(code));
            }
            pointer.setInt(0, 0x5280000a); // movz w10, #0
        }

        Pointer pointer = UnidbgPointer.pointer(emulator, module.base + 0xa830); // _dispatch_runloop_root_queue_perform_4CF
        assert pointer != null;
        int code = pointer.getInt(0);
        if (code != 0x91336129) {
            throw new IllegalStateException("code=0x" + Integer.toHexString(code));
        }
        pointer.setInt(0, 0xaa0803e9); // mov x9, x8
    }

}