Jump to content

DarwinDumper

blackosx

By blackosx,
in Hackintosh Tools

 Share
519 posts in this topic

Recommended Posts

  • Popular Post
blackosx
blackosx
Posted
  • Popular Post
Posted (edited)

Do you want to quickly find your boot log, or ever wanted to know which version of bootloader is installed on your disk(s), had the need to dump your BIOS from OS X, just curious about your own system setup or been asked to provide your setup information to others when asking for assistance?
 
DarwinDumper is a useful collection of readily available tools, and scripts wrapped in an application framework giving you a convenient method to quickly gather a system overview of your hack or Mac. And rest assured that enabling the privacy option will mask sensitive data like the IOPlatformSerialNumber, IOPlatformUUID, IOMACAddress(s), USB Serial Number(s), SystemSerialNumber, serial-number, fmm-mobileme-token-FMM, MLB and ROM efi vars and CustomUUID in the dumped files and report.

Current Release Version: 3.1.1


Darwin-Dumper-310b7.png


The system dumps are saved to a folder or your choice, but defaulting to the same directory as the main application. You can choose to setup a symlink to make it simple to run DarwinDumper from the Terminal.
 
There is an option to create an html report showing a complete overview of the dumps. This report will mostly just contain the text dumps as you'll find in the main dump directory, but for some dumps there is extra processing to try to present the information in a better way. For example, the Disk Partitions and Unique ID's dump will show a visual map of the disk layout, and the DMI Tables (SMBIOS) dump will show the data split by table type.
 
dd-report-screenshot.png
 
Note: The html report does not contain all files from a complete dump so if seeking assistance for a problem and you wish to send someone a DarwinDump then you will want to send the complete dump directory and not just the .html report file.
 
The following can be read and dumped by DarwinDumper:
- ACPI tables.
- Audio codec and further info.
- Boot loaders and configuration files.
- CPU info.
- Device-properties.
- Disk partition structure / info.
- Disk sectors (hex).
- DMI (SMBIOS).
- EDID.
- I/O Kit Registry.
- EFI Memory Map.
- EFI vars (some).
- Kernel information
- Kexts - (list of currently loaded kexts).
- Memory.
- NVRAM (both Apple specific and UEFI firmware variables).
- SMC Keys.
- LSPCI (PCI vendor & device codes) dumps.
- Power (Sleep/Hibernate) settings.
- RTC.
- System Profiler.
- System BIOS.
- System Log(s).
- Video BIOS.
 
License:
DarwinDumper is licensed under GNU General Public License, version 3.0 (GPLv3).
 
Tools included:

AnalyseVBIOS

Copyright: Not Known.
License: Not known
 
AppleIntelInfo
Copyright: © 2012-2017 Pike R. Alpha. All rights reserved.
License: Creative Commons Attribution-NonCommercial
 
atomdis
Copyright: Michael Larabel @ Phoronix.com
License: GPL Version 2
 
bgrep
Copyright 2009 Felix Domke <tmbinc@elitedvb.net>. All rights reserved.
 
Redistribution and use in source and binary forms, with or without modification, are
permitted provided that the following conditions are met:
 
   1. Redistributions of source code must retain the above copyright notice, this list of
      conditions and the following disclaimer.
 
   2. Redistributions in binary form must reproduce the above copyright notice, this list
      of conditions and the following disclaimer in the documentation and/or other materials
      provided with the distribution.
 
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER ``AS IS'' AND ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> OR
CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
The views and conclusions contained in the software and documentation are those of the
authors and should not be interpreted as representing official policies, either expressed
or implied, of the copyright holder.
 
 
bdmesg
Copyright 2010 by Islam M. Ahmed Zaid. All rights reserved.
License: GPL Version 2
 
cmosDumperForOsx
Created by rafirafi, revised extensively by STLVNUB
License: Information not available
 
csrstat
Created by Piker-Alpha
Copyright: © 2015-2017) by Pike R. Alpha
License: Information not available
 
dmidecode
Original nongnu.org
License: GPL Version 2
Now updated and hosted by acidanthera
 
dumpACPI
Created by blackosx. Idea taken from PHPdev32's MacIASL.
 
edid-decode
Created by Adam Jackson, revised by Andy Vandijck
License: Information not available
 
fdisk440
Apple Computer, Inc.
License: APSL v2.0
Modified by Zef
 
FirmwareMemoryMap script
Amit Singh (showbootermemorymap)
Further development by bcc9 and dmazar
License: Information not available
 
flashrom
License: GPL Version 2
 
getcodecid
Copyright © 2012 AnV Software. All rights reserved.
License: Information not available
 
getdump
Created by fassl?, modifications by Slice and AutumnRain?
License: Information not available
 
gfxutil
Copyright 2008 mcmatrix. All rights reserved.
License: Information not available
Historic detail can be found at forum.netkas.org
 
iasl
Copyright © 2000 – 2014 Intel Corporation.
License: Information not available
Source for v20200110: https://www.acpica.org/node/176
 
ioregwv
Apple Computer, Inc.
License: APSL v2.0
Modified by blackosx
 
lzma
Copyright © 2013 Igor Pavlov.
License: GNU Lesser General Public License
 
lzvn
Copyright: © 2014 Apple Computer, Inc. All rights reserved.
License: APSL
Credit: Piker-Alpha, Andy Vandijck, MinusZwei.
 
MacGap2
Created by Tim Debo. All rights reserved.
License: MIT
 
Macpmem driver (Macpmem.kext)
Copyright © 2007-2011 Volatile Systems. Copyright 2013-2014 Google Inc. All Rights Reserved.
License: GPL Version 2
 
nvram
Apple Computer, Inc.
License: APSL v2.0
Modified by blackosx
 
oclinfo
Copyright © 2009 cmf
License: GPL Version 2
 
pciutils driver (DirectHW.kext)
DirectHW is Copyright © 2008-2010 coresystems GmbH
License: GPL Version 2
 
pciutils lspci
Copyright © 1997--2008 Martin Mares
License: GPL Version 2

RadeonDump
Created by Dong Luo. Copyright 2008. All rights reserved. Modified by Andy Vandijck
License: Information not available
 
radeon_bios_decode
Created by Dong Luo. Copyright 2008. All rights reserved.
License: Information not available
 
SMC_util_FansOnly
Copyright © 2006 devnull 
License: GPL Version 2
 
smcutil
Copyright © 2006 devnull 
License: GPL Version 2
 
VoodooHDA.kext
Created by fassl?, modifications by Slice and AutumnRain?
 
x86info
Written to succeed CPUID by Phil Karn (KA9Q). Contributed to by various people. OS X compatability by Slice
License: GPL Version 2

 

 

Running DarwinDumper from the command line:
From Terminal, you can initiate DarwinDumper by running the following script directly. 

/DarwinDumper.app/Contents/Resources/public/bash/script.sh

To help with this, the UI has a Symlink option which you can click to create a symbolic link which points to the above script. DarwinDumper can then be subsequently run from the command-line by loading a new Terminal window and typing darwindumper followed by return. 

$ darwindumper
usage: [-a zip,lzma,none] [-d acpi,appleintelinfo,audio,biosSystem,biosVideo,codecid,cpuinfo,devprop,diskLoaderConfigs,bootLoaderBootSectors,diskPartitionInfo,dmi,edid,bootlogF,bootlogK,firmmemmap,memory,ioreg,kernelinfo,kexts,lspci,rcscripts,nvram,opencl,power,rtc,sip,smc,sysprof] [-h] [-l] [-o html,private] [-p 1,2,3,4,5,6,7,8] [-v]

Example: 

$ darwindumper -l

Will re-run the last dump used options.

Credits (in alphabetical order):
acidanthera team, Adam Jackson, Amit Singh, Andy Vandijck, Apple Inc., arsradu, bcc9, blackosx, cmf, DieBuche, dmazar, Dong Luo, droplets, ErmaC, Felix Domke, Google Inc., Intel Corporation, InsanelyDeepak, JrCs, Kabyl, Kynnder, Martin Mareš, mcmatrix, Michael Larabel, Mickey1979, phcoder, Phil Karn, Piker-Alpha, rafirafi, гык-sse2, Slice ,sonotone, STLVNUB, THe KiNG, Trauma, Volatile Systems, xsmile, !Xabbu.
 
DarwinDumper was originally inspired as an open project by Trauma, it has remained an open project and please keep it an open project, so if you make any changes or additions to it then please share your work here.
 
Please report any feedback, requests or bugs.
 

Known issues: v3.1.0
1 - When SIP File Protection is enabled, dumping disk partition info of non-APFS containers and disks which are not APFS physical stores may fail when running from DarwinDumper via the graphical interface. However, it's been known to succeed when using DarwinDumper from the command line. Something to do with osascript.

2 - lzma archive option has been known to fail on macOS 10.15 when running dumps requiring root privileges.
 

macOS Version support:

- v2.9.9.2 is for older macOS versions

- v3.0.4 requires OS X 10.9 and newer to run in the Finder, though it should work from the command line okay on older OS versions.

- v3.1.0 was updated for newer macOS versions and has been tested on 10.13 and 10.15.

DarwinDumper Download

Edited by blackosx
  • Like 77
  • Thanks 4
Link to comment
Share on other sites
blackosx
blackosx
Posted
  • Author
Posted

I've attached a revised version of DarwinDumper to the opening post.

 

The changes from 2.3.4 -> 2.3.6 are:

 

- Added detection for the version of Clover 'boot' file and CloverXXX.efi file

- Changed bootloaders.txt and diskutil html layout to include UEFI files found.

- Added detection for Clover, Windows and ELILO when finding UEFI file named BootX64.efi.

- Added cmf's oclinfo for OpenCL info dump. (Thanks Slice).

- LPSCI html tables are now collapsable.

Link to comment
Share on other sites
blackosx
blackosx
Posted
  • Author
Posted

Revised version attached to the opening post.

 

Changes from 2.3.6 -> 2.3.8

 

- User can now choose which part they want from the previously multiple diskutil & loader routine.

- Added option to choose dump save path. Default is the DarwinDumper App folder.

- Fixed bug when archiving previous folders.

 

Please Note: When clicking the option to choose a new save location, the dialog window displays an 'Open' button. Ideally this should read 'Select' but until I find out how to do it that's how it is.

 

Please report back any bugs or issues. Thanks

  • Like 1
Link to comment
Share on other sites
blackosx
blackosx
Posted
  • Author
Posted

Revised version (v2.4.2) attached to the opening post.

 

I make changes gradually and post them to projectosx until the time comes when they've been tested. There have been a few additions and changes that I thought it time to post a revised version here. However, for now I can't report every change as they are listed at the projectosx thread and that's currently down. I will update these changes once projectosx is back up and running. EDIT: Done

 

Changes from 2.3.8 -> 2.3.9

 

- Changed privacy routine to mask from centre->outwards (as JrC's first had it), rather than from start to finish.

- Increased mask percentage from 60% to 80% of string.

- Included mask of fmm-mobileme-token-FMM (this used to be dropped from IOreg completely, now it's just masked).

- HTML report tables are now collapsed by default.

- Fixes an incorrect HTML anchor for SMC section.

- Included LSPCI extended hex dump (-nnvvbxxxx) in the HTML report.

- Added a Misc option to the app and a /Misc folder to the DarwinDumper dump folder.

- Misc option dumps gEfiAppleNvramGuid ROM and MLB vars dump to /Misc/gEfiAppleNvramGuid_Vars.txt

- Misc option dumps copies of rc.local and rc.shutdown.local to /Misc/Scripts

- Full path of any found UEFI loaders is retained in bootloaders.txt and HTML report.

 

Changes from 2.3.9 -> 2.4.0

 

- Some internal script housework.

- Shortened 'Sys Profiler' nav link to read 'Sys Prof'.

- Diskutil & Bootloaders report only prints Clover boot file revision, if found.

- Incorrect identification of RevoBoot removed when checking com.apple.Boot.plist.

 

Changes from 2.4.0 -> 2.4.1

 

- Added efivar BootCurrent, BootOptionSupport, BootOrder, Boot000*, FirmwareFeatures, FirmwareFeaturesMask (Thanks Slice and dmazar for suggestions).

- Added check for existence of previous save path (Thanks STLVNUB).

- Changed text label in GUI window for saving of the Report folder location.

- Bug fix in generateHTMLreport.sh.

 

Changes from 2.4.1 -> 2.4.2

 

- Fixed bug where efivar Boot 000X failed to be written.

- gEfiAppleNvramGuid_Var.txt file kept and HTML dump done only if file not empty.

Link to comment
Share on other sites
 Share
Go to topic listing
×
×
  • Create New...