bazad / memctl

An iOS kernel introspection tool.
https://bazad.github.io/2017/09/live-kernel-introspection-ios/
MIT License
226 stars 29 forks source link

invalid kernelcache? #13

Open remixmaster34 opened 5 years ago

remixmaster34 commented 5 years ago

struggling here... i have iPhone 5S 10.3.3 jailbroken. when run memctl it replies:

Error: Mach-O invalid magic: c8a98330 error: not a valid kernelcache error: could not initialize kernel image

i guess it looks for feedfacf but i dont know how to fix it? i tried to dump anything but it just gives the same error so i cant troubleshoot.

thanks for help!

Tweaker177 commented 1 year ago

Are you accounting for the arch being armv7s and not armv7? They are similar, but at a kernel level fairly different, as armv7s has the addition of Thumb-2 in it's disassembled code/ instruction set.

Wait I'm thinking of 5C sorry 5S is the first of the arm64 devices. Are you treating it as 64 bit?