Open yuzhouheike opened 1 year ago
iPhone:/tmp root# fouldecrypt -v /var/containers/Bundle/Application/5D9125CB-EFD0-4235-BF46-FF308E079B48/AppleSupport.app/AppleSupport ./AppleSupport_ok22 17:49:01.705168 mapping input file: /var/containers/Bundle/Application/5D9125CB-EFD0-4235-BF46-FF308E079B48/AppleSupport.app/AppleSupport 17:49:01.706061 mapping output file: ./AppleSupport_ok22 17:49:01.707180 copying original data of size 0xa764e0... 17:49:01.716459 not fat binary, directly decrypting it! 17:49:01.716491 finding encryption_info segment in slide... 17:49:01.716499 found encryption_info segment at offset d30 17:49:01.716505 decrypting encrypted data... 17:49:01.716511 Going to decrypt crypt page: off 0x4000 size 0x894000 cryptid 1, cpuType 100000c cpuSubType 0 17:49:01.716549 Already 16k aligned, directly go ahead :) 17:49:01.716561 -->> 16k-aligned mmaping(0x0, 0x894000, 5, 0x2, 3, 0x4000) 17:49:01.716612 <<-- 16k-aligned mmaping(0x0, 0x894000, 5, 0x2, 3, 0x4000) = 0x104584000 17:49:01.716622 <<-- unprotect mremap_encrypted(0x104584000, 0x894000, 1, 0x100000c, 0x0) mremap_encrypted: Operation not permitted 17:49:01.724322 -->> unprotect mremap_encrypted(0x104584000, 0x894000, 1, 0x100000c, 0x0) = -1
mremap_encrypted: Operation not permitted