Contribute
Register

Reversing a patched applehda?

Status
Not open for further replies.
Joined
Jul 31, 2012
Messages
448
Motherboard
Lenovo U310
CPU
i5-3317
Graphics
intel HD 4000
Mac
Classic Mac
Mobile Phone
  1. iOS
so I found a patched applehda kext that works on my machine, but I want to reverse it to learn what was done.

I was able to retrieve the layoutxx and platforms xml files, codec verbs and dsdt patch.
the last piece is the bin patching.
Is there a way I can find out what id was patched with the id from my machine? I used HexFiend to try to find the vendor and device id of my machine but search came up empty.
is there a list of ids available from the vanilla kext? I could use this list and search one by one to see what's no longer there and what it was replaced by.
 
Joined
Jul 31, 2012
Messages
448
Motherboard
Lenovo U310
CPU
i5-3317
Graphics
intel HD 4000
Mac
Classic Mac
Mobile Phone
  1. iOS
on the web, I was able to find this list
Code:
[COLOR=#141414][FONT=Consolas]0x1aec87ff,[/FONT][/COLOR]    
0x15ad1974,
    0x8384767f,
    0x1002aa00,
    0x83847680,
    0x10134205,
    0x1002aa01,
    0x10de0006,
    0x10134206,
    0x10ec0261,
    0x10de003f,
    0x10ec0884,
    0x10ec0262,
    0x10ec0885,
    0x11d41984,
    0x11d4198b,
    0x15ad1975, [COLOR=#141414][FONT=Consolas]    
0x1aec8800,[/FONT][/COLOR]

now that I'm reading some more there's more codes to replace after vendor/device id
for instance, for ALC269
Code:
[LIST]
[*][COLOR=#000000]FF 87 EC 1A 0F 8F 53 01 00 00 With 69 02 EC 10 [B]0F 84 8F 02 00 00[/B][/COLOR]
[*][COLOR=#000000]FF 87 EC 1A 0F 8F 2F 01 00 00 With 69 02 EC 10 [B]0F 84 53 02 00 00[/B][/COLOR]
[/LIST]

what is the 0F848F020000 from the first line and 0F8453020000 from the second line stand for?
 

toleda

Moderator
Joined
May 20, 2010
Messages
24,090
Motherboard
Asus Maximus VII Impact
CPU
Core i7-4770K
Graphics
RX 560 + HD4600
Mac
  1. iMac
  2. MacBook Pro
  3. Mac mini
Classic Mac
  1. 512K
  2. LC
  3. Power Mac
Mobile Phone
  1. iOS
what is the 0F848F020000 from the first line and 0F8453020000 from the second line stand for?
Those are instructions and addresses. An OS X/Developer/disassembler tool is otool. OTX (3rd party) is a gui for otool. The output shows the assembly instruction and the address. Understand someone put work into making the patch and it is important to credit the source of the kext.
 
Joined
Jul 31, 2012
Messages
448
Motherboard
Lenovo U310
CPU
i5-3317
Graphics
intel HD 4000
Mac
Classic Mac
Mobile Phone
  1. iOS
Those are instructions and addresses. An OS X/Developer/disassembler tool is otool. OTX (3rd party) is a gui for otool. The output shows the assembly instruction and the address. Understand someone put work into making the patch and it is important to credit the source of the kext.

Understood, In that example I was just using the values I found in a guide as an example and am trying to understanding the codes after vendor/device id. are these needed when bin patching applehda?
 
Status
Not open for further replies.
Top