CalvinBackup/coruna
1
0
Fork 0
mirror of https://github.com/khanhduytran0/coruna.git synced 2026-07-12 15:06:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

A

Browse Source
This commit is contained in:
khanhduytran0
2026-06-06 10:07:22 +07:00
parent 896f10550c
commit 3326ed0e07
5 changed files with 1248 additions and 1024 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/payload_377bed/Makefile
+1
View File
@@ -47,6 +47,7 @@ entry1_type0x09_INSTALL_PATH = /usr/local/lib
ifeq ($(RECOMP_TEMP_FAKE_OBJC_ARC),1)
entry1_type0x09_CFLAGS += -fobjc-arc
endif
entry1_type0x09_CFLAGS += -ferror-limit=0
TOOL_NAME = entry1_type0x09_test
entry1_type0x09_test_FILES = test.m
src/payload_377bed/defs.h
+50 -43
View File
@@ -63,50 +63,57 @@ struct struct_krwCtx
{
#else
@interface struct_krwCtx : NSObject
{
@public
{
@public
#endif
/* 00000000 */ uint32_t flags;
/* 00000004 */ uint8_t gap_0x4[168];
/* 000000AC */ uint32_t threadForKernelRead;
/* 000000B0 */ uint8_t gap_0xB0[144];
/* 00000140 */ int xnuMajorVersion;
/* 00000144 */ uint8_t gap_0x144[20];
/* 00000158 */ uint64_t xnuVersionPacked;
/* 00000160 */ uint8_t gap_0x160[8];
/* 00000168 */ int stride_0x168;
/* 0000016C */ int gap_0x16C[5];
/* 00000180 */ int pageSizeOrSomething;
/* 00000184 */ int gap_0x184;
/* 00000188 */ uint64_t pageMask;
/* 00000190 */ uint8_t gap_0x190[136];
/* 00000218 */ uint64_t gap_0x218;
/* 00000220 */ uint8_t gap_0x220[56];
/* 00000258 */ int isRW;
/* 0000025C */ struct mach_timebase_info timebase;
/* 00000264 */ mach_port_t semaphore;
/* 00000268 */ pthread_mutex_t someMutex;
/* 000002A8 */ uint32_t someInt1;
/* 000002AC */ uint32_t someInt2;
/* 000002B0 */ uint64_t gap_0x2B0[16];
/* 00000330 */ pthread_mutex_t someMutex2;
/* 00000370 */ uint64_t gap_0x370[695];
/* 00001928 */ uint32_t gap_0x1928;
/* 0000192C */ uint32_t gap_0x192C;
/* 00001930 */ uint32_t gap_0x1930[2];
/* 00001938 */ uint32_t gap_0x1938;
/* 0000193C */ uint32_t gap_0x193C;
/* 00001940 */ uint32_t gap_0x1940;
/* 00001944 */ uint32_t gap_0x1944;
/* 00001948 */ uint64_t gap_0x1948[16];
/* 000019C8 */ uint64_t machHeaderPlus0x8000;
/* 000019D0 */ uint64_t gap_0x19D0;
/* 000019D8 */ uint64_t gap_0x19D8;
/* 000019E0 */ uint64_t slideMaybe;
/* 000019E8 */ uint64_t gap_0x19E8[108];
/* 00001D48 */ uint64_t IOKitConnInfo;
/* 00001D50 */ // end
};
/* 00000000 */ uint32_t flags;
/* 00000004 */ uint8_t gap_0x4[168];
/* 000000AC */ uint32_t threadForKernelRead;
/* 000000B0 */ uint8_t gap_0xB0[0x90];
/* 00000140 */ int xnuMajorVersion;
/* 00000144 */ uint8_t gap_0x144[20];
/* 00000158 */ uint64_t xnuVersionPacked;
/* 00000160 */ uint8_t gap_0x160[8];
/* 00000168 */ int stride_0x168;
/* 0000016C */ int gap_0x16C[5];
/* 00000180 */ uint32_t pageSizeOrSomething;
/* 00000184 */ int gap_0x184;
/* 00000188 */ uint64_t pageMask;
/* 00000190 */ uint8_t gap_0x190[136];
/* 00000218 */ uint64_t gap_0x218;
/* 00000220 */ uint8_t gap_0x220[56];
/* 00000258 */ int isRW;
/* 0000025C */ struct mach_timebase_info timebase;
/* 00000264 */ mach_port_t semaphore;
/* 00000268 */ pthread_mutex_t someMutex;
/* 000002A8 */ uint32_t someInt1;
/* 000002AC */ uint32_t someInt2;
/* 000002B0 */ uint64_t gap_0x2B0[16];
/* 00000330 */ pthread_mutex_t someMutex2;
/* 00000370 */ uint64_t gap_0x370[695];
/* 00001928 */ uint32_t gap_0x1928;
/* 0000192C */ uint32_t gap_0x192C;
/* 00001930 */ uint32_t krw_pipe_0;
/* 00001934 */ uint32_t krw_pipe_1;
/* 00001938 */ uint32_t gap_0x1938;
/* 0000193C */ uint32_t gap_0x193C;
/* 00001940 */ uint32_t gap_0x1940;
/* 00001944 */ uint32_t gap_0x1944;
/* 00001948 */ uint64_t gap_0x1948[16];
/* 000019C8 */ uint64_t machHeaderPlus0x8000;
/* 000019D0 */ uint64_t gap_0x19D0;
/* 000019D8 */ uint64_t gap_0x19D8;
/* 000019E0 */ uint64_t slideMaybe;
/* 000019E8 */ uint64_t gap_0x19E8;
/* 000019F0 */ uint64_t gap_0x19F0;
/* 000019F8 */ uint64_t *gap_0x19F8;
/* 00001A00 */ uint64_t gap_0x1A00;
/* 00001A08 */ uint64_t gap_0x19E8[104];
/* 00001D48 */ uint64_t IOKitConnInfo;
/* 00001D50 */ uint64_t gap_0x1D50;
/* 00001D58 */ uint64_t gap_0x1D58;
/* 00001D60 */ // end
};
#if !RECOMP_TEMP_FAKE_OBJC_CLASS
typedef struct struct_krwCtx struct_krwCtx;
#define KRWCTX_FROM_UINTPTR(value) ((struct_krwCtx *)(uintptr_t)(value))
src/payload_377bed/entry1_type0x09.m
+959 -980
View File
File diff suppressed because it is too large Load Diff
src/payload_377bed/test.m
+1 -1
View File
@@ -45,7 +45,7 @@ typedef struct struct_krwCtx // sizeof=0x1D50
uint64_t gap_0x370[695];
uint32_t gap_0x1928;
uint32_t gap_0x192C;
uint32_t gap_0x1930[2];
uint32_t krw_pipe_0[2];
uint32_t gap_0x1938;
uint32_t gap_0x193C;
uint32_t gap_0x1940;
src/payload_377bed/tmp/tmp.c
+237
View File
@@ -0,0 +1,237 @@
bool __fastcall iosurface_physmap_setup(__int64 someStruct, int a2, __int64 a3, unsigned int a4)
{
bool result; // w0
__int64 v9; // x23
int *v10; // x9
__int64 v11; // x24
unsigned __int64 v12; // x10
unsigned __int64 v13; // x11
unsigned int v16; // w8
unsigned __int64 v17; // x14
int v18; // w16
unsigned int v19; // w15
unsigned __int64 v20; // x25
unsigned __int64 v21; // x24
__int64 v22; // x22
__int128 v23; // q0
__int128 v24; // q0
__int64 v25; // x8
int8x16_t *v26; // x8
int8x16_t *v27; // x27
__int64 v28; // x8
int8x16_t *v29; // x24
unsigned __int64 v30; // x26
int v31; // w22
int v32; // w23
unsigned __int64 v33; // x28
__int64 v34; // x8
unsigned __int64 v35; // x8
unsigned __int64 v36; // x8
__int64 v38; // x8
int8x16_t v39; // q1
unsigned __int64 v40; // x8
unsigned __int64 v41; // x9
bool v42; // cf
unsigned __int64 v43; // x9
void *segments; // x0
__int64 v44; // [xsp+0h] [xbp-70h]
uint64_t v45[3]; // [xsp+8h] [xbp-68h] BYREF
result = alloc_kernel_offset_table(someStruct, a3);
if ( !result )
return result;
*(uint32_t *)(someStruct + 216) = a2;
*(uint8_t *)(someStruct + 256) = 1;
v9 = **(uint64_t **)(someStruct + 208);
v10 = (int *)(v9 + 32);
v11 = *(unsigned int *)(v9 + 20);
v12 = v9 + 32 + v11;
v13 = v12 - 8;
if ( v9 + 32 >= v12 || v9 + 40 > v12 || (unsigned __int64)v10 > v13 )
return 0;
v16 = 0;
do
{
v17 = (unsigned int)v10[1];
if ( (unsigned int)v17 < 8 || v12 - (unsigned __int64)v10 < v17 )
break;
v18 = *v10;
v19 = 24;
if ( *v10 <= 10 )
{
switch ( v18 )
{
case -2147483617:
goto LABEL_26;
case -2147483614:
LABEL_24:
v19 = 48;
goto LABEL_26;
case 2:
goto LABEL_26;
}
}
else if ( v18 > 24 )
{
if ( v18 == 34 )
goto LABEL_24;
if ( v18 == 25 )
{
++v16;
v19 = 72;
goto LABEL_26;
}
}
else
{
if ( v18 == 11 )
{
v19 = 80;
LABEL_26:
if ( (unsigned int)v17 < v19 )
break;
goto LABEL_27;
}
if ( v18 == 13 )
goto LABEL_26;
}
LABEL_27:
v10 = (int *)((char *)v10 + v17);
}
while ( (unsigned __int64)v10 < v12 && (unsigned __int64)(v10 + 2) <= v12 && (unsigned __int64)v10 <= v13 );
if ( !v16 )
return 0;
*(uint32_t *)(someStruct + 8) = v16;
segments = malloc(56LL * v16);
*(uint64_t *)someStruct = (uint64_t)segments;
if ( !segments )
return false;
*(uint64_t *)(someStruct + 272) = "__TEXT";
v20 = v9 + 32;
v21 = v9 + 32 + v11;
if ( v9 + 32 < v21 )
{
v22 = (__int64)segments;
do
{
if ( *(uint32_t *)v20 == 25 )
{
if ( *(unsigned int *)(v20 + 64) > ((unsigned __int64)*(unsigned int *)(v20 + 4) - 72) / 0x50 )
return 0;
if ( !strcmp((const char *)(v20 + 8), "__TEXT_EXEC") )
*(uint64_t *)(someStruct + 272) = "__TEXT_EXEC";
v23 = *(__int128 *)(v20 + 40);
*(uint64_t *)v22 = someStruct;
*(__int128 *)(v22 + 8) = v23;
v24 = *(__int128 *)(v20 + 24);
*(uint64_t *)(v22 + 24) = someStruct;
*(__int128 *)(v22 + 32) = v24;
*(uint64_t *)(v22 + 48) = v20;
v22 += 56;
}
v20 += *(unsigned int *)(v20 + 4);
}
while ( v20 < v21 );
v9 = **(uint64_t **)(someStruct + 208);
}
*(int32x2_t *)(someStruct + 40) = vrev64_s32(*(int32x2_t *)(v9 + 4));
*(uint32_t *)(someStruct + 48) = *(uint32_t *)(v9 + 24);
if ( (a4 & 0x100) != 0 )
{
macho_getsectbyname("__TEXT", someStruct, "__thread_starts", v45);
if ( v45[2] )
*(uint8_t *)(someStruct + 156) = 1;
if ( (a4 & 0x400) != 0 )
{
if ( *(uint64_t *)someStruct )
{
v25 = *(uint64_t *)(*(uint64_t *)someStruct + 8LL);
if ( v25 )
*(uint64_t *)(someStruct + 160) = a3 - v25;
}
}
}
if ( (a4 & 0x40) != 0 )
return true;
v26 = **(int8x16_t ***)(someStruct + 208);
v27 = v26 + 2;
v28 = v26[1].u32[1];
v29 = (int8x16_t *)((char *)v27 + v28);
if ( v27 >= (int8x16_t *)&v27->i8[v28] )
return 0;
v30 = 0;
v31 = 0;
v44 = *(int *)(someStruct + 56) - 1LL;
v32 = a4 & 0x580;
v33 = a3;
while ( 2 )
{
if ( v27->i32[0] == 25 )
{
if ( !strcmp(&v27->i8[8], "__TEXT") )
{
*(uint64_t *)(someStruct + 248) = a3 - v27[1].i64[1];
if ( (a4 & 0x100) != 0 )
goto LABEL_54;
}
else if ( (a4 & 0x100) != 0 )
{
LABEL_54:
if ( !strcmp(&v27->i8[8], "__KLD") )
v31 = KRW_CTX_FLAG_CPU_someStruct2;
}
if ( v32 != 384 )
{
v34 = v27[2].i64[0];
if ( v34 )
{
v35 = v27[1].i64[1] + v34;
if ( v35 > v30 )
v30 = v35;
}
}
if ( (a4 & 0x400) != 0 && v27[2].i64[0] )
{
v36 = v27[1].u64[1];
if ( v36 < v33 && v36 != 0 )
v33 = v27[1].u64[1];
}
if ( !strcmp(&v27->i8[8], "__LINKEDIT") )
{
v38 = v27[1].i64[1];
v39 = vextq_s8(v27[2], v27[2], 8u);
if ( v32 == 384 )
v30 = v27[2].i64[0] + v38;
*(uint64_t *)(someStruct + 16) = v38;
*(int8x16_t *)(someStruct + 24) = v39;
}
}
v27 = (int8x16_t *)((char *)v27 + (unsigned int)v27->i32[1]);
if ( v27 < v29 )
continue;
break;
}
result = false;
if ( ((v31 == 0) & (a4 >> 8)) == 0 && v30 )
{
if ( (~a4 & 0x500) == 0 && *(uint64_t *)(someStruct + 160) )
v33 = *(uint64_t *)(someStruct + 160);
v40 = v33 & ~v44;
if ( v33 == a3 )
v40 = a3;
v41 = (v30 + v44) & ~v44;
v42 = v41 >= v40;
v43 = v41 - v40;
if ( v42 )
{
*(uint64_t *)(someStruct + 224) = v40;
*(uint64_t *)(someStruct + 232) = v43;
return map_macho_image_vm(someStruct) != 0;
}
else
{
return 0;
}
}
return result;
}