Jump to content

Different solutions


Andy Vandijck
 Share

925 posts in this topic

Recommended Posts

Hi Andy,

 

there is a possibility to extract the kernel from the decompressed kernelcache or unlink the PRELINKED kexts?

Thanks

There can be an extraction of the kernel alone but it would need some kind of tool which removes the prelink segment from the binary and realigns it with PAGE_SIZE.

Then it would get recognized (and it would work) as a kernel alone.

The prelink segment preincludes some binaries and plists of the drivers (bare minimum per driver).

XNU sources contain info on which segment.

EDIT: Some more info:

      cmd LC_SEGMENT_64
  cmdsize 152
  segname __PRELINK_TEXT
   vmaddr 0xffffff8000c47000
   vmsize 0x000000000240c000
  fileoff 0xa22000
 filesize 37797888
  maxprot 0x00000007
 initprot 0x00000003
   nsects 1
    flags 0x0
Section
  sectname __text
   segname __PRELINK_TEXT
      addr 0xffffff8000c47000
      size 0x000000000240c000
    offset 0xa22000
     align 2^0 (1)
    reloff 0x0
    nreloc 0
     flags 0x00000000
 reserved1 0
 reserved2 0
Load command 8
      cmd LC_SEGMENT_64
  cmdsize 232
  segname __PRELINK_STATE
   vmaddr 0xffffff8000b2f000
   vmsize 0x0000000000000000
  fileoff 0x8ba000
 filesize 0
  maxprot 0x00000007
 initprot 0x00000003
   nsects 2
    flags 0x0
Section
  sectname __kernel
   segname __PRELINK_STATE
      addr 0xffffff8000b2f000
      size 0x0000000000000000
    offset 0x8ba000
     align 2^0 (1)
    reloff 0x0
    nreloc 0
     flags 0x00000000
 reserved1 0
 reserved2 0
Section
  sectname __kexts
   segname __PRELINK_STATE
      addr 0xffffff8000b2f000
      size 0x0000000000000000
    offset 0x8ba000
     align 2^0 (1)
    reloff 0x0
    nreloc 0
     flags 0x00000000
 reserved1 0
 reserved2 0
Load command 9
      cmd LC_SEGMENT_64
  cmdsize 152
  segname __PRELINK_INFO
   vmaddr 0xffffff8003053000
   vmsize 0x0000000000279000
  fileoff 0x2e2e000
 filesize 2592291
  maxprot 0x00000007
 initprot 0x00000003
   nsects 1
    flags 0x0
Section
  sectname __info
   segname __PRELINK_INFO
      addr 0xffffff8003053000
      size 0x0000000000278e23
    offset 0x2e2e000
     align 2^0 (1)
    reloff 0x0
    nreloc 0
     flags 0x00000000
 reserved1 0
 reserved2 0

Link to comment
Share on other sites

I'v found a simply method do reduce the linked kexts to only one from the kernelcache decompressed with your tool. can be intrestering?

Sorry but now I'm away from Home..

Segments and sections and sizes and count adjusted?

Cool!

Link to comment
Share on other sites

Hi Andy,

I need zlib - 32bit. How to configure it?

It has an Xcode project so not so hard...

Open project and edit settings to match the architectures you want...

It by default has 32+64 bit built.

  • Like 1
Link to comment
Share on other sites

I recently updated GDB for full trace possibilities.

It fully can trace anything...

 

Download:

https://www.dropbox.com/s/7nol1cvwkvj3ha9/gdb-2831-AnV.zip?dl=0

 

Enjoy :D

I used it to hack a lot... it works neatly but does require root access ;)

  • Like 4
Link to comment
Share on other sites

Added support for pre 10.6 decryption and improved performance.

Can decrypt any Apple protected binary now...

Link to comment
Share on other sites

I managed to obtain most of AMD's documents.

There are related to the AMD CPU, GPU, APU, north bridge and south bridge parts.

Enjoy :D

AMD Tech Docs.zip

  • Like 9
Link to comment
Share on other sites

I decided to upgrade SuperVIAATA for Yosemite.

Not more deprecation / warnings during build so totally optimized.

Fully 64-bit capable too.

BTW: It's my 30th birthday today so you could call this the birthday edition :D

Gonna have a little beer now... Gordon Platinum (12%)... the best ;)

Enjoy... :D


I'll even give the secret behind these...

Diff between AppleIntelPIIXATA 10.5.8 and 10.6.8.

Notice the differences between the code...

You can upgrade any ATA driver this way and make it SL (and above) compliant.

 

EDIT: New version, fixed some mistakes.

EDIT2: Added Github repo.

https://github.com/andyvand/SuperVIAATA

AppleIntelPIIXATAUpgrade.diff.zip

SuperVIAATA.zip

  • Like 8
Link to comment
Share on other sites

 Share

×
×
  • Create New...