Contribute
Register

Reversing a patched applehda?

Status
Not open for further replies.
Joined
Jul 30, 2012
Messages
445
Motherboard
Lenovo U310
CPU
i5-3317
Graphics
intel HD 4000
Mac
  1. 0
Classic Mac
  1. 0
Mobile Phone
  1. iOS
so I found a patched applehda kext that works on my machine, but I want to reverse it to learn what was done.

I was able to retrieve the layoutxx and platforms xml files, codec verbs and dsdt patch.
the last piece is the bin patching.
Is there a way I can find out what id was patched with the id from my machine? I used HexFiend to try to find the vendor and device id of my machine but search came up empty.
is there a list of ids available from the vanilla kext? I could use this list and search one by one to see what's no longer there and what it was replaced by.
 
on the web, I was able to find this list
Code:
[COLOR=#141414][FONT=Consolas]0x1aec87ff,[/FONT][/COLOR]    
0x15ad1974,
    0x8384767f,
    0x1002aa00,
    0x83847680,
    0x10134205,
    0x1002aa01,
    0x10de0006,
    0x10134206,
    0x10ec0261,
    0x10de003f,
    0x10ec0884,
    0x10ec0262,
    0x10ec0885,
    0x11d41984,
    0x11d4198b,
    0x15ad1975, [COLOR=#141414][FONT=Consolas]    
0x1aec8800,[/FONT][/COLOR]

now that I'm reading some more there's more codes to replace after vendor/device id
for instance, for ALC269
Code:
[LIST]
[*][COLOR=#000000]FF 87 EC 1A 0F 8F 53 01 00 00 With 69 02 EC 10 [B]0F 84 8F 02 00 00[/B][/COLOR]
[*][COLOR=#000000]FF 87 EC 1A 0F 8F 2F 01 00 00 With 69 02 EC 10 [B]0F 84 53 02 00 00[/B][/COLOR]
[/LIST]

what is the 0F848F020000 from the first line and 0F8453020000 from the second line stand for?
 
what is the 0F848F020000 from the first line and 0F8453020000 from the second line stand for?
Those are instructions and addresses. An OS X/Developer/disassembler tool is otool. OTX (3rd party) is a gui for otool. The output shows the assembly instruction and the address. Understand someone put work into making the patch and it is important to credit the source of the kext.
 
Those are instructions and addresses. An OS X/Developer/disassembler tool is otool. OTX (3rd party) is a gui for otool. The output shows the assembly instruction and the address. Understand someone put work into making the patch and it is important to credit the source of the kext.

Understood, In that example I was just using the values I found in a guide as an example and am trying to understanding the codes after vendor/device id. are these needed when bin patching applehda?
 
Status
Not open for further replies.
Back
Top