Joker Feedback

Used for discussing the various tools in the book as well as encouraging members to share tools

Joker Feedback

Postby Siguza » Thu May 12, 2016 7:22 am

I'm having a few issues with joker 2.3 and kexts on a 64bit iOS 8.4 kernel dump.

joker -k:
Code: Select all
This is a 64-bit kernel from iOS 8.x, or later (2784.30.7.0.0)
No Symtab - Something doesn't work.. Is your Mach-O corrupt?
Unable to get symbols from SYMTAB (fine for dumps)
Only 0 kexts figured out. This is a dump, isn't it? Trying method #2
Unable to get kexts from __PRELINK_INFO.. going straight for __PRELINK_TEXT
1: unhandledyet.Please.Report.Me at 0x536000 (2000 bytes)
2: Private Pseudoextension (com.apple.kpi.private) at 0x538000 (7000 bytes)
3: I/O Kit Pseudoextension at 0x53f000 (1b000 bytes)
4: Libkern Pseudoextension (com.apple.kpi.libkern) at 0x55a000 (9000 bytes)
5: BSD Kernel Pseudoextension (com.apple.kpi.bsd) at 0x563000 (8000 bytes)
6: com.apple.AppleFSCompression.AppleFSCompressionTypeZlib at 0x56b000 (5000 bytes)
7: Mach Kernel Pseudoextension (com.apple.kpi.mach) at 0x570000 (2000 bytes)
8: com.apple.iokit.IOStreamAudioFamily at 0x572000 (5000 bytes)
9: com.apple.AGXFirmwareKextG3 at 0x577000 (1b000 bytes)
10: Unsupported Pseudoextension (com.apple.kpi.unsupported) at 0x592000 (3000 bytes)
11: com.apple.driver.AppleUSBMergeNub at 0x595000 (3000 bytes)
12: com.apple.iokit.IOUSBUserClient at 0x598000 (3000 bytes)
13: com.apple.iokit.IOStorageFamily at 0x59b000 (1a000 bytes)
14: com.apple.driver.DiskImages at 0x5b5000 (e000 bytes)
15: com.apple.driver.DiskImages.KernelBacked at 0x5c3000 (b000 bytes)
16: com.apple.kec.corecrypto at 0x5ce000 (51000 bytes)
17: com.apple.driver.AppleMobileFileIntegrity at 0x61f000 (2b000 bytes)
18: com.apple.iokit.IOHIDFamily at 0x64a000 (32000 bytes)
19: com.apple.iokit.IOSlowAdaptiveClockingFamily at 0x67c000 (4000 bytes)
20: com.apple.iokit.IOReportFamily at 0x680000 (5000 bytes)
21: com.apple.driver.AppleARMPlatform at 0x685000 (56000 bytes)
22: com.apple.iokit.IOAudio2Family at 0x6db000 (d000 bytes)
23: com.apple.iokit.IOUSBDeviceFamily at 0x6e8000 (12000 bytes)
24: com.apple.iokit.IOSerialFamily at 0x6fa000 (c000 bytes)
25: com.apple.driver.AppleOnboardSerial at 0x706000 (17000 bytes)
26: com.apple.iokit.IOAccessoryManager at 0x71d000 (25000 bytes)
27: com.apple.iokit.IOMikeyBusFamily at 0x742000 (1b000 bytes)
28: com.apple.iokit.AppleARMIISAudio at 0x75d000 (a000 bytes)
29: com.apple.driver.AppleEmbeddedAudio at 0x767000 (21000 bytes)
30: com.apple.driver.AppleCS35L19Amp at 0x788000 (5000 bytes)
31: com.apple.driver.DiskImages.UDIFDiskImage at 0x78d000 (8000 bytes)
32: com.apple.iokit.IOCryptoAcceleratorFamily at 0x795000 (10000 bytes)
33: com.apple.driver.IOSlaveProcessor at 0x7a5000 (6000 bytes)
34: com.apple.driver.AppleA7IOP at 0x7ab000 (4000 bytes)
35: com.apple.driver.AppleS5L8960XSmartIO at 0x7af000 (a1000 bytes)
36: com.apple.driver.AppleUSBDeviceMux at 0x850000 (9000 bytes)
37: com.apple.nke.ppp at 0x859000 (c000 bytes)
38: com.apple.nke.l2tp at 0x865000 (8000 bytes)
39: com.apple.driver.IODARTFamily at 0x86d000 (10000 bytes)
40: com.apple.driver.AppleS5L8960XDART at 0x87d000 (7000 bytes)
41: com.apple.driver.AppleS5L8960XCLPC at 0x884000 (24000 bytes)
42: com.apple.iokit.IONetworkingFamily at 0x8a8000 (21000 bytes)
43: com.apple.driver.corecapture at 0x8c9000 (15000 bytes)
44: com.apple.iokit.IO80211Family at 0x8de000 (8c000 bytes)
45: com.apple.driver.AppleBCMWLANCore at 0x96a000 (e6000 bytes)
46: com.apple.driver.AppleSamsungSPI at 0xa50000 (4000 bytes)
47: com.apple.iokit.IOUSBFamily at 0xa54000 (33000 bytes)
48: com.apple.driver.AppleUSBComposite at 0xa87000 (5000 bytes)
49: com.apple.driver.AppleUSBHub at 0xa8c000 (a000 bytes)
50: com.apple.driver.AppleEmbeddedUSBHost at 0xa96000 (7000 bytes)
51: com.apple.driver.AppleUSBEthernetHost at 0xa9d000 (8000 bytes)
52: com.apple.kec.pthread at 0xaa5000 (b000 bytes)
53: com.apple.driver.AppleH6CameraInterface at 0xab0000 (17000 bytes)
54: com.apple.driver.FairPlayIOKit at 0xac7000 (7f000 bytes)
55: com.apple.IOTextEncryptionFamily at 0xb46000 (6000 bytes)
56: com.apple.iokit.IOSurface at 0xb4c000 (14000 bytes)
57: com.apple.driver.AppleM2ScalerCSCDriver at 0xb60000 (33000 bytes)
58: com.apple.iokit.IOCECFamily at 0xb93000 (6000 bytes)
59: com.apple.iokit.IOAVFamily at 0xb99000 (3f000 bytes)
60: com.apple.iokit.IOMobileGraphicsFamily at 0xbd8000 (1a000 bytes)
61: com.apple.iokit.IOAcceleratorFamily at 0xbf2000 (2c000 bytes)
62: com.apple.driver.AppleNANDConfigAccess at 0xc1e000 (3000 bytes)
63: com.apple.driver.AppleDiagnosticDataAccessReadOnly at 0xc21000 (3000 bytes)
64: com.apple.driver.AppleOscar at 0xc24000 (24000 bytes)
65: com.apple.kext.AppleMatch at 0xc48000 (5000 bytes)
66: com.apple.security.sandbox at 0xc4d000 (16000 bytes)
67: com.apple.driver.AppleSEPManager at 0xc63000 (1a000 bytes)
68: com.apple.driver.AppleBiometricSensor at 0xc7d000 (18000 bytes)
69: com.apple.driver.AppleMesaSEPDriver at 0xc95000 (16000 bytes)
70: com.apple.driver.AppleBiometricServices at 0xcab000 (3000 bytes)
71: com.apple.driver.DiskImages.RAMBackingStore at 0xcae000 (3000 bytes)
72: com.apple.iokit.IOUSBHIDDriver at 0xcb1000 (7000 bytes)
73: com.apple.driver.AppleEffaceableStorage at 0xcb8000 (8000 bytes)
74: com.apple.driver.AppleSEPKeyStore at 0xcc0000 (10000 bytes)
75: com.apple.driver.AppleBluetooth at 0xcd0000 (3000 bytes)
76: com.apple.driver.AppleS5L8940XI2C at 0xcd3000 (5000 bytes)
77: com.apple.driver.AppleARM64ErrorHandler at 0xcd8000 (4000 bytes)
78: com.apple.driver.LSKDIOKitMSE at 0xcdc000 (33000 bytes)
79: com.apple.driver.AppleChestnutDisplayPMU at 0xd0f000 (4000 bytes)
80: com.apple.driver.LSKDIOKit at 0xd13000 (3e000 bytes)
81: com.apple.driver.IOAudioCodecs at 0xd51000 (5f000 bytes)
82: com.apple.driver.AppleEmbeddedUSB at 0xdb0000 (b000 bytes)
83: com.apple.driver.AppleSynopsysOTGDevice at 0xdbb000 (12000 bytes)
84: com.apple.driver.AppleEmbeddedLightSensor at 0xdcd000 (18000 bytes)
85: com.apple.driver.AppleSamsungSerial at 0xde5000 (5000 bytes)
86: com.apple.driver.AppleUSBMike at 0xdea000 (5000 bytes)
87: com.apple.driver.AppleSamsungMIPIDSI at 0xdef000 (6000 bytes)
88: com.apple.driver.AppleBSDKextStarter at 0xdf5000 (3000 bytes)
89: com.apple.driver.AppleHIDKeyboard at 0xdf8000 (6000 bytes)
90: com.apple.driver.AppleTriStar at 0xdfe000 (b000 bytes)
91: com.apple.driver.AppleEmbeddedMikeyBus at 0xe09000 (1f000 bytes)
92: com.apple.driver.AppleCSEmbeddedAudio at 0xe28000 (11000 bytes)
93: com.apple.driver.AppleCS42L67Audio at 0xe39000 (d000 bytes)
94: com.apple.driver.AppleS5L8960X at 0xe46000 (12000 bytes)
95: com.apple.driver.AppleUSBNCM at 0xe58000 (9000 bytes)
96: com.apple.driver.AppleUSBEHCI at 0xe61000 (1c000 bytes)
97: com.apple.driver.AppleUSBHSIC at 0xe7d000 (a000 bytes)
98: com.apple.driver.AppleBasebandN51 at 0xe87000 (e000 bytes)
99: com.apple.iokit.IOUserEthernet at 0xe95000 (9000 bytes)
100: com.apple.driver.AppleLMBacklight at 0xe9e000 (3000 bytes)
101: com.apple.driver.AppleH6PDisplayPipe at 0xea1000 (1c000 bytes)
102: com.apple.driver.AppleH6ADBE0 at 0xebd000 (16000 bytes)
103: com.apple.driver.ApplePinotLCD at 0xed3000 (4000 bytes)
104: com.apple.driver.AppleBCMWLANBusInterfaceHSICShim at 0xed7000 (5000 bytes)
105: com.apple.driver.AppleBCMWLANBusInterfaceHSIC at 0xedc000 (24000 bytes)
106: com.apple.driver.AppleEmbeddedTempSensor at 0xf00000 (1a000 bytes)
107: com.apple.driver.AppleMultitouchSPI at 0xf1a000 (19000 bytes)
108: com.apple.platform.AppleKernelStorage at 0xf33000 (3000 bytes)
109: com.apple.driver.AppleM68Buttons at 0xf36000 (6000 bytes)
110: com.apple.driver.AppleS5L8960XWatchDogTimer at 0xf3c000 (4000 bytes)
111: com.apple.driver.AppleUSBEthernetDevice at 0xf40000 (6000 bytes)
112: com.apple.driver.AppleUSBHIDKeyboard at 0xf46000 (3000 bytes)
113: com.apple.iokit.EncryptedBlockStorage at 0xf49000 (9000 bytes)
114: com.apple.driver.LightweightVolumeManager at 0xf52000 (13000 bytes)
115: com.apple.driver.AppleEffaceableBlockDevice at 0xf65000 (3000 bytes)
116: com.apple.driver.AppleSEPCredentialManager at 0xf68000 (5000 bytes)
117: com.apple.driver.AppleUSBNetworking at 0xf6d000 (4000 bytes)
118: com.apple.embedded.AppleUSBEthernet at 0xf71000 (9000 bytes)
119: com.apple.driver.AppleMobileApNonce at 0xf7a000 (4000 bytes)
120: com.apple.driver.AppleIPAppender at 0xf7e000 (7000 bytes)
121: com.apple.driver.AppleUSBHSICCellular at 0xf85000 (15000 bytes)
122: com.apple.driver.DiskImages.FileBackingStore at 0xf9a000 (4000 bytes)
123: com.apple.driver.AppleAE2Audio at 0xf9e000 (8000 bytes)
124: com.apple.driver.AppleUSBAudio at 0xfa6000 (3f000 bytes)
125: com.apple.nke.tls at 0xfe5000 (9000 bytes)
126: com.apple.driver.AppleBCMWLANHSICDevice at 0xfee000 (3000 bytes)
127: com.apple.driver.AppleHDQGasGaugeControl at 0xff1000 (a000 bytes)
128: com.apple.driver.AppleDialogPMU at 0xffb000 (4000 bytes)
129: com.apple.driver.AppleD2045PMU at 0xfff000 (11000 bytes)
130: com.apple.driver.AppleAuthCP at 0x1010000 (7000 bytes)
131: com.apple.driver.AppleVXD393 at 0x1017000 (46000 bytes)
132: com.apple.driver.AppleCSI at 0x105d000 (17000 bytes)
133: com.apple.driver.AppleS5L8920XPWM at 0x1074000 (4000 bytes)
134: com.apple.driver.DiskImages.ReadWriteDiskImage at 0x1078000 (3000 bytes)
135: com.apple.driver.ASPSupportNodes at 0x107b000 (2b000 bytes)
136: com.apple.driver.AppleInterruptController at 0x10a6000 (5000 bytes)
137: com.apple.driver.AppleS5L8940XDWI at 0x10ab000 (4000 bytes)
138: com.apple.driver.AppleUSBOHCI at 0x10af000 (13000 bytes)
139: com.apple.driver.AppleUSBOHCIARM at 0x10c2000 (5000 bytes)
140: com.apple.driver.AppleUSBEHCIARM at 0x10c7000 (7000 bytes)
141: com.apple.driver.AppleS5L8960XUSBHSIC at 0x10ce000 (4000 bytes)
142: com.apple.driver.AppleS5L8960XUSBEHCI at 0x10d2000 (7000 bytes)
143: com.apple.driver.AppleS5L8960XUSBOHCI at 0x10d9000 (3000 bytes)
144: com.apple.driver.AppleS5L8960XGPIOIC at 0x10dc000 (5000 bytes)
145: com.apple.nke.pptp at 0x10e1000 (6000 bytes)
146: com.apple.driver.AppleJPEGDriver at 0x10e7000 (15000 bytes)
147: com.apple.driver.AppleSamsungI2S at 0x10fc000 (5000 bytes)
148: com.apple.driver.AppleEmbeddedAccelerometer at 0x1101000 (8000 bytes)
149: com.apple.iokit.IOAcceleratorFamily2 at 0x1109000 (38000 bytes)
150: com.apple.AGX at 0x1141000 (46000 bytes)
151: com.apple.driver.AppleUSBDeviceNCM at 0x1187000 (8000 bytes)
152: com.apple.iokit.IOStreamFamily at 0x118f000 (7000 bytes)
153: com.apple.driver.AppleSamsungPKE at 0x1196000 (4000 bytes)
154: com.apple.iokit.IOReportFamily</key><string IDREF="15"/></dict><key>UIDeviceFamily</key><array><integer IDREF="12"/><integer IDREF="18"/></array><key>_PrelinkBundlePath</key><string>/System/Library/Extensions/AGX.kext</string><key>DTPlatformBuild</key><string IDREF="13"/></dict><dict><key>CFBundleName</key><string>AppleUSBDeviceNCM</string><key>DTXcode</key><string>0630</string><key>DTSDKName</key><string>iphoneos8.4.internal</string><key>_PrelinkExecutableLoadAddr</key><integer ID="335" size="64">0xffffff80031f0000</integer><key>_PrelinkKmodInfo</key><integer size="64">0xffffff80031f50b0</integer><key>DTSDKBuild</key><string>12H120</string><key>_PrelinkExecutableSize</key><integer IDREF="85"/><key>CFBundleDevelopmentRegion</key><string IDREF="2"/><key>CFBundleVersion</key><string IDREF="15"/><key>BuildMachineOSBuild</key><string>13A603</string><key>DTPlatformName</key><string>iphoneos</string><key>CFBundlePackageType</key><string>KEXT</string><key>CFBundleShortVersionString</key><string IDREF="15"/><key>CFBundleSupportedPlatforms</key><array><string>iPhoneOS</string></array><key>_PrelinkExecutableSourceAddr</key><integer IDREF="335"/><key>_PrelinkExecutableRelativePath</key><string>AppleUSBDeviceNCM</str??????????????????????????????????????{?Z?????ڔ?????????????????J??ڼ?z?z?Y?Y?8?8???????????????޴޳޳ޓړڒړ?r?s?r?r?q?r?q?q?Q?Q?Q?Q?0?P?0?0Ҧ? at 0x119a000 (66000 bytes)
155: com.apple.driver.AppleS5L8960XUSB at 0x1200000 (5000 bytes)
Besides the hard-to-miss XML blob, also note the "unhandledyet.Please.Report.Me".

joker -K all:
Code: Select all
This is a 64-bit kernel from iOS 8.x, or later (2784.30.7.0.0)
No Symtab - Something doesn't work.. Is your Mach-O corrupt?
Unable to get symbols from SYMTAB (fine for dumps)
Attempting to kextract all
Only 0 kexts figured out. This is a dump, isn't it? Trying method #2
Unable to get kexts from __PRELINK_INFO.. going straight for __PRELINK_TEXT
Writing kext out to /tmp/1.unhandledyet.Please.Report.Me.kext
Writing kext out to /tmp/2.Private Pseudoextension.kext
Writing kext out to /tmp/3.I/O Kit Pseudoextension.kext
Writing kext out to /tmp/4.Libkern Pseudoextension.kext
Writing kext out to /tmp/5.BSD Kernel Pseudoextension.kext
Writing kext out to /tmp/6.com.apple.AppleFSCompression.AppleFSCompressionTypeZlib.kext
Writing kext out to /tmp/7.Mach Kernel Pseudoextension.kext
Writing kext out to /tmp/8.com.apple.iokit.IOStreamAudioFamily.kext
Writing kext out to /tmp/9.com.apple.AGXFirmwareKextG3.kext
Writing kext out to /tmp/10.Unsupported Pseudoextension.kext
Writing kext out to /tmp/11.com.apple.driver.AppleUSBMergeNub.kext
Writing kext out to /tmp/12.com.apple.iokit.IOUSBUserClient.kext
Writing kext out to /tmp/13.com.apple.iokit.IOStorageFamily.kext
Writing kext out to /tmp/14.com.apple.driver.DiskImages.kext
Writing kext out to /tmp/15.com.apple.driver.DiskImages.KernelBacked.kext
Writing kext out to /tmp/16.com.apple.kec.corecrypto.kext
Writing kext out to /tmp/17.com.apple.driver.AppleMobileFileIntegrity.kext
Writing kext out to /tmp/18.com.apple.iokit.IOHIDFamily.kext
Writing kext out to /tmp/19.com.apple.iokit.IOSlowAdaptiveClockingFamily.kext
Writing kext out to /tmp/20.com.apple.iokit.IOReportFamily.kext
Writing kext out to /tmp/21.com.apple.driver.AppleARMPlatform.kext
Writing kext out to /tmp/22.com.apple.iokit.IOAudio2Family.kext
Writing kext out to /tmp/23.com.apple.iokit.IOUSBDeviceFamily.kext
Writing kext out to /tmp/24.com.apple.iokit.IOSerialFamily.kext
Writing kext out to /tmp/25.com.apple.driver.AppleOnboardSerial.kext
Writing kext out to /tmp/26.com.apple.iokit.IOAccessoryManager.kext
Writing kext out to /tmp/27.com.apple.iokit.IOMikeyBusFamily.kext
Writing kext out to /tmp/28.com.apple.iokit.AppleARMIISAudio.kext
Writing kext out to /tmp/29.com.apple.driver.AppleEmbeddedAudio.kext
Writing kext out to /tmp/30.com.apple.driver.AppleCS35L19Amp.kext
Writing kext out to /tmp/31.com.apple.driver.DiskImages.UDIFDiskImage.kext
Writing kext out to /tmp/32.com.apple.iokit.IOCryptoAcceleratorFamily.kext
Writing kext out to /tmp/33.com.apple.driver.IOSlaveProcessor.kext
Writing kext out to /tmp/34.com.apple.driver.AppleA7IOP.kext
Writing kext out to /tmp/35.com.apple.driver.AppleS5L8960XSmartIO.kext
Writing kext out to /tmp/36.com.apple.driver.AppleUSBDeviceMux.kext
Writing kext out to /tmp/37.com.apple.nke.ppp.kext
Writing kext out to /tmp/38.com.apple.nke.l2tp.kext
Writing kext out to /tmp/39.com.apple.driver.IODARTFamily.kext
Writing kext out to /tmp/40.com.apple.driver.AppleS5L8960XDART.kext
Writing kext out to /tmp/41.com.apple.driver.AppleS5L8960XCLPC.kext
Writing kext out to /tmp/42.com.apple.iokit.IONetworkingFamily.kext
Writing kext out to /tmp/43.com.apple.driver.corecapture.kext
Writing kext out to /tmp/44.com.apple.iokit.IO80211Family.kext
Writing kext out to /tmp/45.com.apple.driver.AppleBCMWLANCore.kext
Writing kext out to /tmp/46.com.apple.driver.AppleSamsungSPI.kext
Writing kext out to /tmp/47.com.apple.iokit.IOUSBFamily.kext
Writing kext out to /tmp/48.com.apple.driver.AppleUSBComposite.kext
Writing kext out to /tmp/49.com.apple.driver.AppleUSBHub.kext
Writing kext out to /tmp/50.com.apple.driver.AppleEmbeddedUSBHost.kext
Writing kext out to /tmp/51.com.apple.driver.AppleUSBEthernetHost.kext
Writing kext out to /tmp/52.com.apple.kec.pthread.kext
Writing kext out to /tmp/53.com.apple.driver.AppleH6CameraInterface.kext
Writing kext out to /tmp/54.com.apple.driver.FairPlayIOKit.kext
Writing kext out to /tmp/55.com.apple.IOTextEncryptionFamily.kext
Writing kext out to /tmp/56.com.apple.iokit.IOSurface.kext
Writing kext out to /tmp/57.com.apple.driver.AppleM2ScalerCSCDriver.kext
Writing kext out to /tmp/58.com.apple.iokit.IOCECFamily.kext
Writing kext out to /tmp/59.com.apple.iokit.IOAVFamily.kext
Writing kext out to /tmp/60.com.apple.iokit.IOMobileGraphicsFamily.kext
Writing kext out to /tmp/61.com.apple.iokit.IOAcceleratorFamily.kext
Writing kext out to /tmp/62.com.apple.driver.AppleNANDConfigAccess.kext
Writing kext out to /tmp/63.com.apple.driver.AppleDiagnosticDataAccessReadOnly.kext
Writing kext out to /tmp/64.com.apple.driver.AppleOscar.kext
Writing kext out to /tmp/65.com.apple.kext.AppleMatch.kext
Writing kext out to /tmp/66.com.apple.security.sandbox.kext
Writing kext out to /tmp/67.com.apple.driver.AppleSEPManager.kext
Writing kext out to /tmp/68.com.apple.driver.AppleBiometricSensor.kext
Writing kext out to /tmp/69.com.apple.driver.AppleMesaSEPDriver.kext
Writing kext out to /tmp/70.com.apple.driver.AppleBiometricServices.kext
Writing kext out to /tmp/71.com.apple.driver.DiskImages.RAMBackingStore.kext
Writing kext out to /tmp/72.com.apple.iokit.IOUSBHIDDriver.kext
Writing kext out to /tmp/73.com.apple.driver.AppleEffaceableStorage.kext
Writing kext out to /tmp/74.com.apple.driver.AppleSEPKeyStore.kext
Writing kext out to /tmp/75.com.apple.driver.AppleBluetooth.kext
Writing kext out to /tmp/76.com.apple.driver.AppleS5L8940XI2C.kext
Writing kext out to /tmp/77.com.apple.driver.AppleARM64ErrorHandler.kext
Writing kext out to /tmp/78.com.apple.driver.LSKDIOKitMSE.kext
Writing kext out to /tmp/79.com.apple.driver.AppleChestnutDisplayPMU.kext
Writing kext out to /tmp/80.com.apple.driver.LSKDIOKit.kext
Writing kext out to /tmp/81.com.apple.driver.IOAudioCodecs.kext
Writing kext out to /tmp/82.com.apple.driver.AppleEmbeddedUSB.kext
Writing kext out to /tmp/83.com.apple.driver.AppleSynopsysOTGDevice.kext
Writing kext out to /tmp/84.com.apple.driver.AppleEmbeddedLightSensor.kext
Writing kext out to /tmp/85.com.apple.driver.AppleSamsungSerial.kext
Writing kext out to /tmp/86.com.apple.driver.AppleUSBMike.kext
Writing kext out to /tmp/87.com.apple.driver.AppleSamsungMIPIDSI.kext
Writing kext out to /tmp/88.com.apple.driver.AppleBSDKextStarter.kext
Writing kext out to /tmp/89.com.apple.driver.AppleHIDKeyboard.kext
Writing kext out to /tmp/90.com.apple.driver.AppleTriStar.kext
Writing kext out to /tmp/91.com.apple.driver.AppleEmbeddedMikeyBus.kext
Writing kext out to /tmp/92.com.apple.driver.AppleCSEmbeddedAudio.kext
Writing kext out to /tmp/93.com.apple.driver.AppleCS42L67Audio.kext
Writing kext out to /tmp/94.com.apple.driver.AppleS5L8960X.kext
Writing kext out to /tmp/95.com.apple.driver.AppleUSBNCM.kext
Writing kext out to /tmp/96.com.apple.driver.AppleUSBEHCI.kext
Writing kext out to /tmp/97.com.apple.driver.AppleUSBHSIC.kext
Writing kext out to /tmp/98.com.apple.driver.AppleBasebandN51.kext
Writing kext out to /tmp/99.com.apple.iokit.IOUserEthernet.kext
Writing kext out to /tmp/100.com.apple.driver.AppleLMBacklight.kext
Writing kext out to /tmp/101.com.apple.driver.AppleH6PDisplayPipe.kext
Writing kext out to /tmp/102.com.apple.driver.AppleH6ADBE0.kext
Writing kext out to /tmp/103.com.apple.driver.ApplePinotLCD.kext
Writing kext out to /tmp/104.com.apple.driver.AppleBCMWLANBusInterfaceHSICShim.kext
Writing kext out to /tmp/105.com.apple.driver.AppleBCMWLANBusInterfaceHSIC.kext
Writing kext out to /tmp/106.com.apple.driver.AppleEmbeddedTempSensor.kext
Writing kext out to /tmp/107.com.apple.driver.AppleMultitouchSPI.kext
Writing kext out to /tmp/108.com.apple.platform.AppleKernelStorage.kext
Writing kext out to /tmp/109.com.apple.driver.AppleM68Buttons.kext
Writing kext out to /tmp/110.com.apple.driver.AppleS5L8960XWatchDogTimer.kext
Writing kext out to /tmp/111.com.apple.driver.AppleUSBEthernetDevice.kext
Writing kext out to /tmp/112.com.apple.driver.AppleUSBHIDKeyboard.kext
Writing kext out to /tmp/113.com.apple.iokit.EncryptedBlockStorage.kext
Writing kext out to /tmp/114.com.apple.driver.LightweightVolumeManager.kext
Writing kext out to /tmp/115.com.apple.driver.AppleEffaceableBlockDevice.kext
Writing kext out to /tmp/116.com.apple.driver.AppleSEPCredentialManager.kext
Writing kext out to /tmp/117.com.apple.driver.AppleUSBNetworking.kext
Writing kext out to /tmp/118.com.apple.embedded.AppleUSBEthernet.kext
Writing kext out to /tmp/119.com.apple.driver.AppleMobileApNonce.kext
Writing kext out to /tmp/120.com.apple.driver.AppleIPAppender.kext
Writing kext out to /tmp/121.com.apple.driver.AppleUSBHSICCellular.kext
Writing kext out to /tmp/122.com.apple.driver.DiskImages.FileBackingStore.kext
Writing kext out to /tmp/123.com.apple.driver.AppleAE2Audio.kext
Writing kext out to /tmp/124.com.apple.driver.AppleUSBAudio.kext
Writing kext out to /tmp/125.com.apple.nke.tls.kext
Writing kext out to /tmp/126.com.apple.driver.AppleBCMWLANHSICDevice.kext
Writing kext out to /tmp/127.com.apple.driver.AppleHDQGasGaugeControl.kext
Writing kext out to /tmp/128.com.apple.driver.AppleDialogPMU.kext
Writing kext out to /tmp/129.com.apple.driver.AppleD2045PMU.kext
Writing kext out to /tmp/130.com.apple.driver.AppleAuthCP.kext
Writing kext out to /tmp/131.com.apple.driver.AppleVXD393.kext
Writing kext out to /tmp/132.com.apple.driver.AppleCSI.kext
Writing kext out to /tmp/133.com.apple.driver.AppleS5L8920XPWM.kext
Writing kext out to /tmp/134.com.apple.driver.DiskImages.ReadWriteDiskImage.kext
Writing kext out to /tmp/135.com.apple.driver.ASPSupportNodes.kext
Writing kext out to /tmp/136.com.apple.driver.AppleInterruptController.kext
Writing kext out to /tmp/137.com.apple.driver.AppleS5L8940XDWI.kext
Writing kext out to /tmp/138.com.apple.driver.AppleUSBOHCI.kext
Writing kext out to /tmp/139.com.apple.driver.AppleUSBOHCIARM.kext
Writing kext out to /tmp/140.com.apple.driver.AppleUSBEHCIARM.kext
Writing kext out to /tmp/141.com.apple.driver.AppleS5L8960XUSBHSIC.kext
Writing kext out to /tmp/142.com.apple.driver.AppleS5L8960XUSBEHCI.kext
Writing kext out to /tmp/143.com.apple.driver.AppleS5L8960XUSBOHCI.kext
Writing kext out to /tmp/144.com.apple.driver.AppleS5L8960XGPIOIC.kext
Writing kext out to /tmp/145.com.apple.nke.pptp.kext
Writing kext out to /tmp/146.com.apple.driver.AppleJPEGDriver.kext
Writing kext out to /tmp/147.com.apple.driver.AppleSamsungI2S.kext
Writing kext out to /tmp/148.com.apple.driver.AppleEmbeddedAccelerometer.kext
Writing kext out to /tmp/149.com.apple.iokit.IOAcceleratorFamily2.kext
Writing kext out to /tmp/150.com.apple.AGX.kext
Writing kext out to /tmp/151.com.apple.driver.AppleUSBDeviceNCM.kext
Writing kext out to /tmp/152.com.apple.iokit.IOStreamFamily.kext
Writing kext out to /tmp/153.com.apple.driver.AppleSamsungPKE.kext
Abort trap: 6
Again, besides the hard-to-miss crash (which gdb tells me is due to a segfault in memmem() called from identifyKextNew()), the file "/tmp/3.I/O Kit Pseudoextension.kext" is only created if I create /tmp/3.I manually, due to its rather unfortunate name.

And could you add an option to specify output directory please? :)
User avatar
Siguza
Unicorn
 
Posts: 159
Joined: Thu Jan 28, 2016 10:38 am

Re: Joker Feedback

Postby morpheus » Sat May 14, 2016 3:59 pm

Fixed. Should also be better on that memmem, though to do the actual debug I might need to ask you for a sample.

Go to download page for link, since it's a stable build

Code: Select all
bash-3.2# JOKER_DIR=/tmp/X ./joker -K all ~/Documents/iOS/9b/kernel.dump.9.3.0
This is a 64-bit kernel from iOS 9.x, or later (3248.41.3.0.0)
Attempting to kextract all
Only 0 kexts figured out. This is a dump, isn't it? Trying method #2
Unable to get kexts from __PRELINK_INFO.. going straight for __PRELINK_TEXT
Writing kext out to /tmp/X/1.BSD Kernel Pseudoextension.kext
Writing kext out to /tmp/X/2.Libkern Pseudoextension.kext
Writing kext out to /tmp/X/3.Mach Kernel Pseudoextension.kext
Writing kext out to /tmp/X/4.MAC Framework Pseudoextension.kext
Writing kext out to /tmp/X/5.Private Pseudoextension.kext
Writing kext out to /tmp/X/6.Unsupported Pseudoextension.kext
Writing kext out to /tmp/X/7.I/O Kit Pseudoextension.kext
Writing kext out to /tmp/X/8.com.apple.kec.corecrypto.kext
Writing kext out to /tmp/X/9.com.apple.driver.AppleMobileFileIntegrity.kext
Writing kext out to /tmp/X/10.com.apple.iokit.IOHIDFamily.kext
Writing kext out to /tmp/X/11.com.apple.iokit.IOSlowAdaptiveClockingFamily.kext
Writing kext out to /tmp/X/12.com.apple.iokit.IOReportFamily.kext
Writing kext out to /tmp/X/13.com.apple.driver.AppleARMPlatform.kext
Writing kext out to /tmp/X/14.com.apple.driver.AppleEmbeddedTempSensor.kext
Writing kext out to /tmp/X/15.com.apple.driver.AppleDialogPMU.kext
Writing kext out to /tmp/X/16.com.apple.driver.AppleD2186PMU.kext
Writing kext out to /tmp/X/17.com.apple.AppleFSCompression.AppleFSCompressionTypeZlib.kext
Writing kext out to /tmp/X/18.com.apple.iokit.IOStreamAudioFamily.kext
Writing kext out to /tmp/X/19.com.apple.iokit.IOStorageFamily.kext
Writing kext out to /tmp/X/20.com.apple.driver.DiskImages.kext
Writing kext out to /tmp/X/21.com.apple.driver.DiskImages.KernelBacked.kext
Writing kext out to /tmp/X/22.com.apple.iokit.IOAudio2Family.kext
Writing kext out to /tmp/X/23.com.apple.driver.AppleUSBHostMergeProperties.kext
Writing kext out to /tmp/X/24.com.apple.iokit.IOUSBDeviceFamily.kext
Writing kext out to /tmp/X/25.com.apple.iokit.IOSerialFamily.kext
Writing kext out to /tmp/X/26.com.apple.driver.AppleOnboardSerial.kext
Writing kext out to /tmp/X/27.com.apple.iokit.IOAccessoryManager.kext
Writing kext out to /tmp/X/28.com.apple.iokit.IOMikeyBusFamily.kext
Writing kext out to /tmp/X/29.com.apple.iokit.AppleARMIISAudio.kext
Writing kext out to /tmp/X/30.com.apple.driver.AppleEmbeddedAudio.kext
Writing kext out to /tmp/X/31.com.apple.driver.AppleCS35L19Amp.kext
Writing kext out to /tmp/X/32.com.apple.iokit.IOSCSIArchitectureModelFamily.kext
Writing kext out to /tmp/X/33.com.apple.driver.DiskImages.UDIFDiskImage.kext
Writing kext out to /tmp/X/34.com.apple.driver.AppleUSBDeviceMux.kext
Writing kext out to /tmp/X/35.com.apple.nke.ppp.kext
Writing kext out to /tmp/X/36.com.apple.nke.l2tp.kext
Writing kext out to /tmp/X/37.com.apple.driver.IODARTFamily.kext
Writing kext out to /tmp/X/38.com.apple.driver.AppleS5L8960XDART.kext
Writing kext out to /tmp/X/39.com.apple.iokit.IONetworkingFamily.kext
Writing kext out to /tmp/X/40.com.apple.driver.corecapture.kext
Writing kext out to /tmp/X/41.com.apple.iokit.IO80211Family.kext
Writing kext out to /tmp/X/42.com.apple.driver.AppleBCMWLANCore.kext
Writing kext out to /tmp/X/43.com.apple.driver.AppleSamsungSPI.kext
Writing kext out to /tmp/X/44.com.apple.iokit.IOUSBHostFamily.kext
Writing kext out to /tmp/X/45.com.apple.driver.usb.AppleUSBHub.kext
Writing kext out to /tmp/X/46.com.apple.driver.usb.AppleUSBHostCompositeDevice.kext
Writing kext out to /tmp/X/47.com.apple.driver.AppleEmbeddedUSBHost.kext
Writing kext out to /tmp/X/48.com.apple.driver.AppleUSBEthernetHost.kext
Writing kext out to /tmp/X/49.com.apple.driver.usb.networking.kext
Writing kext out to /tmp/X/50.com.apple.driver.usb.ethernet.asix.kext
Writing kext out to /tmp/X/51.com.apple.driver.AppleH6CameraInterface.kext
Writing kext out to /tmp/X/52.com.apple.driver.FairPlayIOKit.kext
Writing kext out to /tmp/X/53.com.apple.IOTextEncryptionFamily.kext
Writing kext out to /tmp/X/54.com.apple.kec.pthread.kext
Writing kext out to /tmp/X/55.com.apple.iokit.IOSurface.kext
Writing kext out to /tmp/X/56.com.apple.iokit.IOCECFamily.kext
Writing kext out to /tmp/X/57.com.apple.iokit.IOCECFamily.kext
Writing kext out to /tmp/X/58.com.apple.iokit.IOAVFamily.kext
Writing kext out to /tmp/X/59.com.apple.iokit.IOMobileGraphicsFamily.kext
Writing kext out to /tmp/X/60.com.apple.iokit.IOAcceleratorFamily.kext
Writing kext out to /tmp/X/61.com.apple.driver.AppleNANDConfigAccess.kext
Writing kext out to /tmp/X/62.com.apple.driver.AppleDiagnosticDataAccessReadOnly.kext
Writing kext out to /tmp/X/63.com.apple.driver.IOSlaveProcessor.kext
Writing kext out to /tmp/X/64.com.apple.driver.AppleOscar.kext
Writing kext out to /tmp/X/65.com.apple.AGXFirmwareKextG4P.kext
Writing kext out to /tmp/X/66.com.apple.driver.AppleCycloneErrorHandler.kext
Writing kext out to /tmp/X/67.com.apple.kext.AppleMatch.kext
Writing kext out to /tmp/X/68.com.apple.security.sandbox.kext
Writing kext out to /tmp/X/69.com.apple.driver.DiskImages.RAMBackingStore.kext
Writing kext out to /tmp/X/70.com.apple.iokit.IOPCIFamily.kext
Writing kext out to /tmp/X/71.com.apple.driver.AppleEmbeddedPCIE.kext
Writing kext out to /tmp/X/72.com.apple.driver.AppleBCMWLANBusInterfacePCIe.kext
Writing kext out to /tmp/X/73.com.apple.driver.AppleEffaceableStorage.kext
Writing kext out to /tmp/X/74.com.apple.iokit.IOCryptoAcceleratorFamily.kext
Writing kext out to /tmp/X/75.com.apple.driver.AppleA7IOP.kext
Writing kext out to /tmp/X/76.com.apple.driver.AppleSEPManager.kext
Writing kext out to /tmp/X/77.com.apple.driver.AppleSEPKeyStore.kext
Writing kext out to /tmp/X/78.com.apple.driver.AppleBluetooth.kext
Writing kext out to /tmp/X/79.com.apple.iokit.IOSCSIBlockCommandsDevice.kext
Writing kext out to /tmp/X/80.com.apple.driver.AppleS5L8940XI2C.kext
Writing kext out to /tmp/X/81.com.apple.driver.LSKDIOKitMSE.kext
Writing kext out to /tmp/X/82.com.apple.driver.AppleChestnutDisplayPMU.kext
Writing kext out to /tmp/X/83.com.apple.driver.LSKDIOKit.kext
Writing kext out to /tmp/X/84.com.apple.driver.IOAudioCodecs.kext
Writing kext out to /tmp/X/85.com.apple.driver.AppleEmbeddedUSB.kext
Writing kext out to /tmp/X/86.com.apple.driver.AppleSynopsysOTGDevice.kext
Writing kext out to /tmp/X/87.com.apple.driver.usb.cdc.kext
Writing kext out to /tmp/X/88.com.apple.driver.usb.cdc.ncm.kext
Writing kext out to /tmp/X/89.AppleEmbeddedLightSensor.kext
Writing kext out to /tmp/X/90.com.apple.driver.AppleSamsungSerial.kext
Writing kext out to /tmp/X/91.com.apple.driver.AppleUSBMike.kext
Writing kext out to /tmp/X/92.com.apple.driver.usb.cdc.ecm.kext
Writing kext out to /tmp/X/93.com.apple.driver.AppleBSDKextStarter.kext
Writing kext out to /tmp/X/94.com.apple.driver.ProvInfoIOKit.kext
Writing kext out to /tmp/X/95.com.apple.driver.AppleHIDKeyboard.kext
Writing kext out to /tmp/X/96.com.apple.driver.AppleTriStar.kext
Writing kext out to /tmp/X/97.com.apple.driver.AppleEmbeddedMikeyBus.kext
Writing kext out to /tmp/X/98.com.apple.iokit.IOUSBMassStorageDriver.kext
Writing kext out to /tmp/X/99.com.apple.driver.AppleUSBCardReader.kext
Writing kext out to /tmp/X/100.com.apple.driver.AppleCSEmbeddedAudio.kext
Writing kext out to /tmp/X/101.com.apple.driver.AppleCS42L81Audio.kext
Writing kext out to /tmp/X/102.com.apple.driver.AppleS5L8960X.kext
Writing kext out to /tmp/X/103.com.apple.driver.AppleT7000PCIe.kext
Writing kext out to /tmp/X/104.com.apple.iokit.IOUserEthernet.kext
Writing kext out to /tmp/X/105.com.apple.driver.AppleLMBacklight.kext
Writing kext out to /tmp/X/106.com.apple.driver.AppleIDAMInterface.kext
Writing kext out to /tmp/X/107.com.apple.driver.usb.AppleUSBEHCI.kext
Writing kext out to /tmp/X/108.com.apple.driver.usb.AppleUSBOHCI.kext
Writing kext out to /tmp/X/109.com.apple.driver.AppleUSBOHCIARM.kext
Writing kext out to /tmp/X/110.com.apple.driver.AppleT7000USBOHCI.kext
Writing kext out to /tmp/X/111.com.apple.driver.AppleUSBDeviceAudioController.kext
Writing kext out to /tmp/X/112.com.apple.driver.CoreCaptureResponder.kext
Writing kext out to /tmp/X/113.com.apple.driver.ApplePinotLCD.kext
Writing kext out to /tmp/X/114.com.apple.driver.ApplePMGR.kext
Writing kext out to /tmp/X/115.com.apple.driver.AppleT7000SOCTuner.kext
Writing kext out to /tmp/X/116.com.apple.driver.usb.IOUSBHostHIDDevice.kext
Writing kext out to /tmp/X/117.com.apple.driver.AppleM68Buttons.kext
Writing kext out to /tmp/X/118.com.apple.driver.AppleS5L8960XWatchDogTimer.kext
Writing kext out to /tmp/X/119.com.apple.driver.AppleUSBEthernetDevice.kext
Writing kext out to /tmp/X/120.com.apple.iokit.EncryptedBlockStorage.kext
Writing kext out to /tmp/X/121.com.apple.driver.LightweightVolumeManager.kext
Writing kext out to /tmp/X/122.com.apple.driver.AppleEffaceableBlockDevice.kext
Writing kext out to /tmp/X/123.com.apple.driver.AppleSEPCredentialManager.kext
Writing kext out to /tmp/X/124.com.apple.driver.AppleMobileApNonce.kext
Writing kext out to /tmp/X/125.com.apple.driver.AppleMobileApNonce.kext
Writing kext out to /tmp/X/126.com.apple.driver.DiskImages.FileBackingStore.kext
Writing kext out to /tmp/X/127.com.apple.driver.AppleAE2Audio.kext
Writing kext out to /tmp/X/128.com.apple.driver.AppleUSBAudio.kext
Writing kext out to /tmp/X/129.com.apple.nke.tls.kext
Writing kext out to /tmp/X/130.com.apple.driver.AppleAuthCP.kext
Writing kext out to /tmp/X/131.com.apple.driver.AppleVXD393.kext
Writing kext out to /tmp/X/132.com.apple.driver.AppleCSI.kext
Writing kext out to /tmp/X/133.com.apple.driver.AppleS5L8920XPWM.kext
Writing kext out to /tmp/X/134.com.apple.driver.DiskImages.ReadWriteDiskImage.kext
Writing kext out to /tmp/X/135.com.apple.driver.AppleT7000SmartIO.kext
Writing kext out to /tmp/X/136.com.apple.driver.ASPSupportNodes.kext
Writing kext out to /tmp/X/137.com.apple.driver.AppleInterruptController.kext
Writing kext out to /tmp/X/138.com.apple.driver.AppleMultitouchSPI.kext
Writing kext out to /tmp/X/139.com.apple.driver.AppleS5L8940XDWI.kext
Writing kext out to /tmp/X/140.com.apple.driver.AppleAVE.kext
Writing kext out to /tmp/X/141.com.apple.driver.AppleSSE.kext
Writing kext out to /tmp/X/142.com.apple.driver.AppleS5L8960XGPIOIC.kext
Writing kext out to /tmp/X/143.com.apple.driver.AppleT7000.kext
Writing kext out to /tmp/X/144.com.apple.driver.AppleUSBHSIC.kext
Writing kext out to /tmp/X/145.com.apple.driver.AppleUSBEHCIARM.kext
Writing kext out to /tmp/X/146.com.apple.driver.AppleS5L8960XUSBHSIC.kext
Writing kext out to /tmp/X/147.com.apple.driver.AppleS5L8960XUSBEHCI.kext
Writing kext out to /tmp/X/148.com.apple.driver.AppleT7000PMGR.kext
Writing kext out to /tmp/X/149.com.apple.driver.AppleJPEGDriver.kext
Writing kext out to /tmp/X/150.com.apple.driver.AppleSamsungI2S.kext
Writing kext out to /tmp/X/151.com.apple.driver.AppleEmbeddedAccelerometer.kext
Writing kext out to /tmp/X/152.com.apple.nke.pptp.kext
Writing kext out to /tmp/X/153.com.apple.driver.AppleSynopsysMIPIDSI.kext
Writing kext out to /tmp/X/154.com.apple.kec.Libm.kext
Writing kext out to /tmp/X/155.com.apple.driver.AppleT7000CLPC.kext
Writing kext out to /tmp/X/156.com.apple.iokit.IOAcceleratorFamily2.kext
morpheus
Site Admin
 
Posts: 532
Joined: Thu Apr 11, 2013 6:24 pm

Re: Joker Feedback

Postby rohitwas » Tue May 24, 2016 7:53 am

Hey J,
Sorry if this seems kind of irrelevant but i encountered a kind of trivial segfault when running joker on a directory instead of a file by accident.
Specifically instead of running joker against "/System/Library/Kernels/kernel"(OSX) i fat-fingered the command and ran it against "/System/Library/Kernels/" and it segfault.
Out of curiosity i checked the source and i think it seems like a simple issue of checking the return value of mmap.
Code: Select all
......
   mmapped = mmap(NULL,
             filesize,  // size_t len,
             PROT_READ, // int prot,
             MAP_SHARED | MAP_FILE,  // int flags,
             fd,        // int fd,
             0);        // off_t offset);

   if (!mmapped) { perror ("mmap"); exit(3);}    --->Here there is only a check for the above mmap returning null. No check on -1 return value(error) when mmap fails.

   // Examine first
   mh =  (struct mach_header *) (mmapped); //dereference -1 +4 OR 0xFFF....FF+4 causing a segfault.
......

I understand this is beyond the intended use of joker and its a pain making sure that mindless users like me don't crash the tool with stupid path/names. I still felt like pointing this out for the overall stability and the fact that this is a tool that i use quite a lot and am grateful for.

Thanks!
Rohit.

p.s -this is from the latest joker.universal compiled on may 14th 2016.unless i missed a newer release
rohitwas
 
Posts: 6
Joined: Thu Dec 17, 2015 11:06 pm

Re: Joker Feedback

Postby morpheus » Tue May 24, 2016 8:39 am

Thank you for pointing this out! It's a quick fix. Done. Will be available in next release.

Keep feedback coming - that's the only way I can improve the tools!
morpheus
Site Admin
 
Posts: 532
Joined: Thu Apr 11, 2013 6:24 pm

Re: Joker Feedback

Postby morpheus » Wed Jun 15, 2016 11:56 pm

Joker v3 is out. Bugs fixed, and great new features.

http://newosxbook.com/tools/joker.html#v3
morpheus
Site Admin
 
Posts: 532
Joined: Thu Apr 11, 2013 6:24 pm

Re: Joker Feedback

Postby Siguza » Fri Jun 17, 2016 5:43 pm

Once again, thanks for all your work. :)

I get some plist/xml blob on iOS 10 kernel for iPhone6,2 (OTA DL):

Code: Select all
$ joker -k kernel.n53
...
160: com.apple.driver.AppleEmbeddedUSB</key><string>1.0.0</string></dict><key>UIDeviceFamily</key><array><integer IDREF="18"/></array><key>_PrelinkBundlePath</key><string>/System/Library/Extensions/AppleS5L8960XUSB.kext</string><key>DTPlatformBuild</key><string IDREF="19"/></dict></array></dict>(424.1.0.0.0) at 0x1924000 (68000 bytes)
...

Tested with with iPad 6,4 too, doesn't happen there.
User avatar
Siguza
Unicorn
 
Posts: 159
Joined: Thu Jan 28, 2016 10:38 am

Re: Joker Feedback

Postby Siguza » Wed Jul 13, 2016 6:29 pm

Joker 3.0b, iPhone6,2 iOS 10.0b2 kernel:
I'm running into a segfault with kextraction on what is supposed to be the last kext.
Not sure if this is a result of split kexts or not, but here's the command I ran:

Code: Select all
bash$ JOKER_DIR=kext joker -K all kernel
This is a 64-bit kernel from iOS 10.x (b2+), or later This is a 64-bit kernel from iOS 10.x, or later (3757.0.0.0.0)
ARM Exception Vector is at file offset @0x7b000 (Addr: 0xfffffff00747f000)
Found com.apple.kpi.mach at load address: 6524000, offset: 58c000
Corrupt load command size for LC 2: 16777228 .. bailing
Writing kext out to kext/com.apple.kpi.mach.kext
Unable to find __TEXT.__stubs in kext com.apple.kpi.mach. Won't symbolicate
Found com.apple.kpi.private at load address: 6524080, offset: 58c080
Found com.apple.kpi.unsupported at load address: 6524100, offset: 58c100
Found com.apple.kpi.iokit at load address: 6524180, offset: 58c180
Found com.apple.kpi.libkern at load address: 6524200, offset: 58c200
Found com.apple.kpi.bsd at load address: 6524280, offset: 58c280
Found com.apple.iokit.IONetworkingFamily at load address: 6525000, offset: 58d000
Writing kext out to kext/com.apple.iokit.IONetworkingFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IONetworkingFamily. Won't symbolicate
Found com.apple.iokit.IOTimeSyncFamily at load address: 6527000, offset: 58f000
Writing kext out to kext/com.apple.iokit.IOTimeSyncFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOTimeSyncFamily. Won't symbolicate
Found com.apple.iokit.IOSlowAdaptiveClockingFamily at load address: 6529000, offset: 591000
Writing kext out to kext/com.apple.iokit.IOSlowAdaptiveClockingFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOSlowAdaptiveClockingFamily. Won't symbolicate
Found com.apple.iokit.IOStorageFamily at load address: 652a000, offset: 592000
Writing kext out to kext/com.apple.iokit.IOStorageFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOStorageFamily. Won't symbolicate
Found com.apple.iokit.IOReportFamily at load address: 652b000, offset: 593000
Writing kext out to kext/com.apple.iokit.IOReportFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOReportFamily. Won't symbolicate
Found com.apple.driver.AppleARMPlatform at load address: 652c000, offset: 594000
Writing kext out to kext/com.apple.driver.AppleARMPlatform.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleARMPlatform. Won't symbolicate
Found com.apple.driver.AppleSamsungSPI at load address: 6535000, offset: 59d000
Writing kext out to kext/com.apple.driver.AppleSamsungSPI.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSamsungSPI. Won't symbolicate
Found com.apple.kpi.dsep at load address: 6535ff7, offset: 59dff7
Found com.apple.kec.corecrypto at load address: 6537000, offset: 59f000
Writing kext out to kext/com.apple.kec.corecrypto.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.kec.corecrypto. Won't symbolicate
Found com.apple.driver.AppleMobileFileIntegrity at load address: 654b000, offset: 5b3000
Writing kext out to kext/com.apple.driver.AppleMobileFileIntegrity.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleMobileFileIntegrity. Won't symbolicate
Found com.apple.iokit.IOHIDFamily at load address: 6576000, offset: 5de000
Writing kext out to kext/com.apple.iokit.IOHIDFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOHIDFamily. Won't symbolicate
Found com.apple.driver.AppleEmbeddedLightSensor at load address: 6578000, offset: 5e0000
Writing kext out to kext/com.apple.driver.AppleEmbeddedLightSensor.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleEmbeddedLightSensor. Won't symbolicate
Found com.apple.driver.AppleS5L8920XPWM at load address: 657c000, offset: 5e4000
Writing kext out to kext/com.apple.driver.AppleS5L8920XPWM.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8920XPWM. Won't symbolicate
Found com.apple.driver.AppleMultitouchSPI at load address: 657d000, offset: 5e5000
Writing kext out to kext/com.apple.driver.AppleMultitouchSPI.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleMultitouchSPI. Won't symbolicate
Found com.apple.driver.IOSlaveProcessor at load address: 6582000, offset: 5ea000
Writing kext out to kext/com.apple.driver.IOSlaveProcessor.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.IOSlaveProcessor. Won't symbolicate
Found com.apple.driver.AppleA7IOP at load address: 6583000, offset: 5eb000
Writing kext out to kext/com.apple.driver.AppleA7IOP.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleA7IOP. Won't symbolicate
Found com.apple.driver.AppleSEPManager at load address: 6585000, offset: 5ed000
Writing kext out to kext/com.apple.driver.AppleSEPManager.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSEPManager. Won't symbolicate
Found com.apple.driver.AppleBiometricSensor at load address: 658b000, offset: 5f3000
Writing kext out to kext/com.apple.driver.AppleBiometricSensor.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBiometricSensor. Won't symbolicate
Found com.apple.driver.ProvInfoIOKit at load address: 658f000, offset: 5f7000
Writing kext out to kext/com.apple.driver.ProvInfoIOKit.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.ProvInfoIOKit. Won't symbolicate
Found com.apple.iokit.IOUSBHostFamily at load address: 6593000, offset: 5fb000
Writing kext out to kext/com.apple.iokit.IOUSBHostFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOUSBHostFamily. Won't symbolicate
Found com.apple.driver.usb.AppleUSBHostPacketFilter at load address: 659b000, offset: 603000
Writing kext out to kext/com.apple.driver.usb.AppleUSBHostPacketFilter.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.AppleUSBHostPacketFilter. Won't symbolicate
Found com.apple.driver.IODARTFamily at load address: 659c000, offset: 604000
Writing kext out to kext/com.apple.driver.IODARTFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.IODARTFamily. Won't symbolicate
Found com.apple.driver.AppleS5L8960XDART at load address: 659d000, offset: 605000
Writing kext out to kext/com.apple.driver.AppleS5L8960XDART.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XDART. Won't symbolicate
Found com.apple.driver.DiskImages at load address: 659f000, offset: 607000
Writing kext out to kext/com.apple.driver.DiskImages.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.DiskImages. Won't symbolicate
Found com.apple.driver.DiskImages.KernelBacked at load address: 65a0000, offset: 608000
Writing kext out to kext/com.apple.driver.DiskImages.KernelBacked.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.DiskImages.KernelBacked. Won't symbolicate
Found com.apple.driver.DiskImages.RAMBackingStore at load address: 65a1000, offset: 609000
Writing kext out to kext/com.apple.driver.DiskImages.RAMBackingStore.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.DiskImages.RAMBackingStore. Won't symbolicate
Found com.apple.driver.AppleJPEGDriver at load address: 65a2000, offset: 60a000
Writing kext out to kext/com.apple.driver.AppleJPEGDriver.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleJPEGDriver. Won't symbolicate
Found com.apple.driver.AppleUSBHostMergeProperties at load address: 65a8000, offset: 610000
Writing kext out to kext/com.apple.driver.AppleUSBHostMergeProperties.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBHostMergeProperties. Won't symbolicate
Found com.apple.iokit.IOUSBDeviceFamily at load address: 65a9000, offset: 611000
Writing kext out to kext/com.apple.iokit.IOUSBDeviceFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOUSBDeviceFamily. Won't symbolicate
Found com.apple.iokit.IOSerialFamily at load address: 65ab000, offset: 613000
Writing kext out to kext/com.apple.iokit.IOSerialFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOSerialFamily. Won't symbolicate
Found com.apple.iokit.IOSkywalkFamily at load address: 65ac000, offset: 614000
Writing kext out to kext/com.apple.iokit.IOSkywalkFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOSkywalkFamily. Won't symbolicate
Found com.apple.driver.AppleOnboardSerial at load address: 65ad000, offset: 615000
Writing kext out to kext/com.apple.driver.AppleOnboardSerial.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleOnboardSerial. Won't symbolicate
Found com.apple.iokit.IOAccessoryManager at load address: 65b0000, offset: 618000
Writing kext out to kext/com.apple.iokit.IOAccessoryManager.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOAccessoryManager. Won't symbolicate
Found com.apple.iokit.IOMikeyBusFamily at load address: 65b4000, offset: 61c000
Writing kext out to kext/com.apple.iokit.IOMikeyBusFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOMikeyBusFamily. Won't symbolicate
Found com.apple.iokit.IOStreamAudioFamily at load address: 65b5000, offset: 61d000
Writing kext out to kext/com.apple.iokit.IOStreamAudioFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOStreamAudioFamily. Won't symbolicate
Found com.apple.iokit.IOAudio2Family at load address: 65b6000, offset: 61e000
Writing kext out to kext/com.apple.iokit.IOAudio2Family.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOAudio2Family. Won't symbolicate
Found com.apple.iokit.AppleARMIISAudio at load address: 65b7000, offset: 61f000
Writing kext out to kext/com.apple.iokit.AppleARMIISAudio.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.AppleARMIISAudio. Won't symbolicate
Found com.apple.driver.AppleEmbeddedAudio at load address: 65b8000, offset: 620000
Writing kext out to kext/com.apple.driver.AppleEmbeddedAudio.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleEmbeddedAudio. Won't symbolicate
Found com.apple.driver.AppleCSEmbeddedAudio at load address: 65ba000, offset: 622000
Writing kext out to kext/com.apple.driver.AppleCSEmbeddedAudio.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleCSEmbeddedAudio. Won't symbolicate
Found com.apple.driver.AppleTriStar at load address: 65bb000, offset: 623000
Writing kext out to kext/com.apple.driver.AppleTriStar.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleTriStar. Won't symbolicate
Found com.apple.driver.AppleEmbeddedMikeyBus at load address: 65bd000, offset: 625000
Writing kext out to kext/com.apple.driver.AppleEmbeddedMikeyBus.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleEmbeddedMikeyBus. Won't symbolicate
Found com.apple.driver.AppleMikeyBusAudio at load address: 65bf000, offset: 627000
Writing kext out to kext/com.apple.driver.AppleMikeyBusAudio.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleMikeyBusAudio. Won't symbolicate
Found com.apple.driver.corecapture at load address: 65c0000, offset: 628000
Writing kext out to kext/com.apple.driver.corecapture.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.corecapture. Won't symbolicate
Found com.apple.iokit.IO80211Family at load address: 65c3000, offset: 62b000
Writing kext out to kext/com.apple.iokit.IO80211Family.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IO80211Family. Won't symbolicate
Found com.apple.driver.AppleBCMWLANCoreLegacy at load address: 65e1000, offset: 649000
Writing kext out to kext/com.apple.driver.AppleBCMWLANCoreLegacy.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBCMWLANCoreLegacy. Won't symbolicate
Found com.apple.driver.usb.AppleUSBEHCI at load address: 660d000, offset: 675000
Writing kext out to kext/com.apple.driver.usb.AppleUSBEHCI.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.AppleUSBEHCI. Won't symbolicate
Found com.apple.driver.AppleEmbeddedUSB at load address: 6612000, offset: 67a000
Writing kext out to kext/com.apple.driver.AppleEmbeddedUSB.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleEmbeddedUSB. Won't symbolicate
Found com.apple.driver.AppleUSBHSIC at load address: 6614000, offset: 67c000
Writing kext out to kext/com.apple.driver.AppleUSBHSIC.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBHSIC. Won't symbolicate
Found com.apple.driver.AppleBCMWLANBusInterfaceHSICShim at load address: 6616000, offset: 67e000
Writing kext out to kext/com.apple.driver.AppleBCMWLANBusInterfaceHSICShim.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBCMWLANBusInterfaceHSICShim. Won't symbolicate
Found com.apple.driver.AppleBCMWLANBusInterfaceHSIC at load address: 6617000, offset: 67f000
Writing kext out to kext/com.apple.driver.AppleBCMWLANBusInterfaceHSIC.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBCMWLANBusInterfaceHSIC. Won't symbolicate
Found com.apple.driver.AppleNANDConfigAccess at load address: 661d000, offset: 685000
Writing kext out to kext/com.apple.driver.AppleNANDConfigAccess.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleNANDConfigAccess. Won't symbolicate
Found com.apple.driver.RTBuddy at load address: 661e000, offset: 686000
Writing kext out to kext/com.apple.driver.RTBuddy.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.RTBuddy. Won't symbolicate
Found com.apple.iokit.IOCryptoAcceleratorFamily at load address: 6624000, offset: 68c000
Writing kext out to kext/com.apple.iokit.IOCryptoAcceleratorFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOCryptoAcceleratorFamily. Won't symbolicate
Found com.apple.iokit.EncryptedBlockStorage at load address: 6625000, offset: 68d000
Writing kext out to kext/com.apple.iokit.EncryptedBlockStorage.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.EncryptedBlockStorage. Won't symbolicate
Found com.apple.driver.ASPSupportNodes at load address: 6626000, offset: 68e000
Writing kext out to kext/com.apple.driver.ASPSupportNodes.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.ASPSupportNodes. Won't symbolicate
Found com.apple.driver.AppleCycloneErrorHandler at load address: 662d000, offset: 695000
Writing kext out to kext/com.apple.driver.AppleCycloneErrorHandler.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleCycloneErrorHandler. Won't symbolicate
Found com.apple.driver.AppleHIDKeyboardEmbedded at load address: 662e000, offset: 696000
Writing kext out to kext/com.apple.driver.AppleHIDKeyboardEmbedded.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleHIDKeyboardEmbedded. Won't symbolicate
Found com.apple.iokit.IOSurface at load address: 662e000, offset: 696000
Writing kext out to kext/com.apple.iokit.IOSurface.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOSurface. Won't symbolicate
Found com.apple.driver.AppleM2ScalerCSCDriver at load address: 6630000, offset: 698000
Writing kext out to kext/com.apple.driver.AppleM2ScalerCSCDriver.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleM2ScalerCSCDriver. Won't symbolicate
Found com.apple.driver.AppleS5L8940XI2C at load address: 6646000, offset: 6ae000
Writing kext out to kext/com.apple.driver.AppleS5L8940XI2C.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8940XI2C. Won't symbolicate
Found com.apple.driver.AppleEffaceableStorage at load address: 6647000, offset: 6af000
Writing kext out to kext/com.apple.driver.AppleEffaceableStorage.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleEffaceableStorage. Won't symbolicate
Found com.apple.driver.LightweightVolumeManager at load address: 6649000, offset: 6b1000
Writing kext out to kext/com.apple.driver.LightweightVolumeManager.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.LightweightVolumeManager. Won't symbolicate
Found com.apple.driver.usb.AppleUSBHostCompositeDevice at load address: 664c000, offset: 6b4000
Writing kext out to kext/com.apple.driver.usb.AppleUSBHostCompositeDevice.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.AppleUSBHostCompositeDevice. Won't symbolicate
Found com.apple.driver.AppleIPAppender at load address: 664d000, offset: 6b5000
Writing kext out to kext/com.apple.driver.AppleIPAppender.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleIPAppender. Won't symbolicate
Found com.apple.driver.usb.networking at load address: 664e000, offset: 6b6000
Writing kext out to kext/com.apple.driver.usb.networking.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.networking. Won't symbolicate
Found com.apple.driver.usb.hsic.cellular at load address: 664f000, offset: 6b7000
Writing kext out to kext/com.apple.driver.usb.hsic.cellular.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.hsic.cellular. Won't symbolicate
Found com.apple.driver.usb.cdc at load address: 6652000, offset: 6ba000
Writing kext out to kext/com.apple.driver.usb.cdc.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.cdc. Won't symbolicate
Found com.apple.driver.usb.cdc.ncm at load address: 6653000, offset: 6bb000
Writing kext out to kext/com.apple.driver.usb.cdc.ncm.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.cdc.ncm. Won't symbolicate
Found com.apple.driver.AppleUSBEthernetDevice at load address: 6654000, offset: 6bc000
Writing kext out to kext/com.apple.driver.AppleUSBEthernetDevice.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBEthernetDevice. Won't symbolicate
Found com.apple.plugin.IOgPTPPlugin at load address: 6656000, offset: 6be000
Writing kext out to kext/com.apple.plugin.IOgPTPPlugin.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.plugin.IOgPTPPlugin. Won't symbolicate
Found com.apple.driver.usb.AppleUSBOHCI at load address: 665c000, offset: 6c4000
Writing kext out to kext/com.apple.driver.usb.AppleUSBOHCI.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.AppleUSBOHCI. Won't symbolicate
Found com.apple.driver.usb.AppleUSBHub at load address: 665e000, offset: 6c6000
Writing kext out to kext/com.apple.driver.usb.AppleUSBHub.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.AppleUSBHub. Won't symbolicate
Found com.apple.driver.AppleEmbeddedUSBHost at load address: 6661000, offset: 6c9000
Writing kext out to kext/com.apple.driver.AppleEmbeddedUSBHost.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleEmbeddedUSBHost. Won't symbolicate
Found com.apple.driver.AppleUSBOHCIARM at load address: 6662000, offset: 6ca000
Writing kext out to kext/com.apple.driver.AppleUSBOHCIARM.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBOHCIARM. Won't symbolicate
Found com.apple.driver.AppleUSBEHCIARM at load address: 6663000, offset: 6cb000
Writing kext out to kext/com.apple.driver.AppleUSBEHCIARM.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBEHCIARM. Won't symbolicate
Found com.apple.driver.AppleS5L8960XUSBHSIC at load address: 6664000, offset: 6cc000
Writing kext out to kext/com.apple.driver.AppleS5L8960XUSBHSIC.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XUSBHSIC. Won't symbolicate
Found com.apple.driver.AppleS5L8960XUSBEHCI at load address: 6665000, offset: 6cd000
Writing kext out to kext/com.apple.driver.AppleS5L8960XUSBEHCI.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XUSBEHCI. Won't symbolicate
Found com.apple.driver.AppleS5L8960XUSBOHCI at load address: 6666000, offset: 6ce000
Writing kext out to kext/com.apple.driver.AppleS5L8960XUSBOHCI.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XUSBOHCI. Won't symbolicate
Found com.apple.iokit.IOCECFamily at load address: 6667000, offset: 6cf000
Writing kext out to kext/com.apple.iokit.IOCECFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOCECFamily. Won't symbolicate
Found com.apple.iokit.IOAVFamily at load address: 6668000, offset: 6d0000
Writing kext out to kext/com.apple.iokit.IOAVFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOAVFamily. Won't symbolicate
Found com.apple.driver.AppleCS35L19Amp at load address: 6676000, offset: 6de000
Writing kext out to kext/com.apple.driver.AppleCS35L19Amp.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleCS35L19Amp. Won't symbolicate
Found com.apple.iokit.IOUserEthernet at load address: 6677000, offset: 6df000
Writing kext out to kext/com.apple.iokit.IOUserEthernet.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOUserEthernet. Won't symbolicate
Found com.apple.iokit.IOMobileGraphicsFamily at load address: 6678000, offset: 6e0000
Writing kext out to kext/com.apple.iokit.IOMobileGraphicsFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOMobileGraphicsFamily. Won't symbolicate
Found com.apple.driver.AppleH6ADBE0 at load address: 667c000, offset: 6e4000
Writing kext out to kext/com.apple.driver.AppleH6ADBE0.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleH6ADBE0. Won't symbolicate
Found com.apple.driver.DiskImages.UDIFDiskImage at load address: 6689000, offset: 6f1000
Writing kext out to kext/com.apple.driver.DiskImages.UDIFDiskImage.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.DiskImages.UDIFDiskImage. Won't symbolicate
Found com.apple.driver.AppleLMBacklight at load address: 668a000, offset: 6f2000
Writing kext out to kext/com.apple.driver.AppleLMBacklight.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleLMBacklight. Won't symbolicate
Found com.apple.driver.AppleUSBDeviceAudioController at load address: 668b000, offset: 6f3000
Writing kext out to kext/com.apple.driver.AppleUSBDeviceAudioController.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBDeviceAudioController. Won't symbolicate
Found com.apple.driver.AppleUSBAudio at load address: 668c000, offset: 6f4000
Writing kext out to kext/com.apple.driver.AppleUSBAudio.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBAudio. Won't symbolicate
Found com.apple.iokit.IOSCSIArchitectureModelFamily at load address: 668f000, offset: 6f7000
Writing kext out to kext/com.apple.iokit.IOSCSIArchitectureModelFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOSCSIArchitectureModelFamily. Won't symbolicate
Found com.apple.iokit.IOSCSIBlockCommandsDevice at load address: 6690000, offset: 6f8000
Writing kext out to kext/com.apple.iokit.IOSCSIBlockCommandsDevice.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOSCSIBlockCommandsDevice. Won't symbolicate
Found com.apple.iokit.IOUSBMassStorageDriver at load address: 6691000, offset: 6f9000
Writing kext out to kext/com.apple.iokit.IOUSBMassStorageDriver.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOUSBMassStorageDriver. Won't symbolicate
Found com.apple.driver.AppleUSBCardReader at load address: 6693000, offset: 6fb000
Writing kext out to kext/com.apple.driver.AppleUSBCardReader.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBCardReader. Won't symbolicate
Found com.apple.driver.usb.IOUSBHostHIDDevice at load address: 6694000, offset: 6fc000
Writing kext out to kext/com.apple.driver.usb.IOUSBHostHIDDevice.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.IOUSBHostHIDDevice. Won't symbolicate
Found com.apple.driver.AppleS5L8960X at load address: 6695000, offset: 6fd000
Writing kext out to kext/com.apple.driver.AppleS5L8960X.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960X. Won't symbolicate
Found com.apple.nke.ppp at load address: 6698000, offset: 700000
Writing kext out to kext/com.apple.nke.ppp.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.nke.ppp. Won't symbolicate
Found com.apple.nke.l2tp at load address: 669a000, offset: 702000
Writing kext out to kext/com.apple.nke.l2tp.kext
Unable to find __TEXT.__stubs in kext com.apple.nke.l2tp. Won't symbolicate
Found com.apple.driver.AppleSynopsysOTGDevice at load address: 669b000, offset: 703000
Writing kext out to kext/com.apple.driver.AppleSynopsysOTGDevice.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSynopsysOTGDevice. Won't symbolicate
Found com.apple.driver.FairPlayIOKit at load address: 669f000, offset: 707000
Writing kext out to kext/com.apple.driver.FairPlayIOKit.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.FairPlayIOKit. Won't symbolicate
Found com.apple.IOTextEncryptionFamily at load address: 66b9000, offset: 721000
Writing kext out to kext/com.apple.IOTextEncryptionFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.IOTextEncryptionFamily. Won't symbolicate
Found com.apple.driver.LSKDIOKit at load address: 66ba000, offset: 722000
Writing kext out to kext/com.apple.driver.LSKDIOKit.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.LSKDIOKit. Won't symbolicate
Found com.apple.driver.AppleH6CameraInterface at load address: 66cd000, offset: 735000
Writing kext out to kext/com.apple.driver.AppleH6CameraInterface.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleH6CameraInterface. Won't symbolicate
Found com.apple.driver.AppleMobileApNonce at load address: 66d3000, offset: 73b000
Writing kext out to kext/com.apple.driver.AppleMobileApNonce.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleMobileApNonce. Won't symbolicate
Found com.apple.driver.AppleUSBMike at load address: 66d4000, offset: 73c000
Writing kext out to kext/com.apple.driver.AppleUSBMike.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBMike. Won't symbolicate
Found com.apple.driver.AppleS5L8960XSmartIO at load address: 66d6000, offset: 73e000
Writing kext out to kext/com.apple.driver.AppleS5L8960XSmartIO.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XSmartIO. Won't symbolicate
Found com.apple.driver.AppleOscar at load address: 66da000, offset: 742000
Writing kext out to kext/com.apple.driver.AppleOscar.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleOscar. Won't symbolicate
Found com.apple.driver.AppleSEPKeyStore at load address: 66dd000, offset: 745000
Writing kext out to kext/com.apple.driver.AppleSEPKeyStore.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSEPKeyStore. Won't symbolicate
Found com.apple.driver.DiskImages.FileBackingStore at load address: 66df000, offset: 747000
Writing kext out to kext/com.apple.driver.DiskImages.FileBackingStore.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.DiskImages.FileBackingStore. Won't symbolicate
Found com.apple.iokit.IOStreamFamily at load address: 66e0000, offset: 748000
Writing kext out to kext/com.apple.iokit.IOStreamFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOStreamFamily. Won't symbolicate
Found com.apple.driver.AppleEmbeddedTempSensor at load address: 66e1000, offset: 749000
Writing kext out to kext/com.apple.driver.AppleEmbeddedTempSensor.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleEmbeddedTempSensor. Won't symbolicate
Found com.apple.driver.AppleDialogPMU at load address: 66e3000, offset: 74b000
Writing kext out to kext/com.apple.driver.AppleDialogPMU.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleDialogPMU. Won't symbolicate
Found com.apple.driver.AppleD2045PMU at load address: 66e4000, offset: 74c000
Writing kext out to kext/com.apple.driver.AppleD2045PMU.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleD2045PMU. Won't symbolicate
Found com.apple.driver.AppleBCMWLANHSICDevice at load address: 66e6000, offset: 74e000
Writing kext out to kext/com.apple.driver.AppleBCMWLANHSICDevice.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBCMWLANHSICDevice. Won't symbolicate
Found com.apple.driver.AppleChestnutDisplayPMU at load address: 66e7000, offset: 74f000
Writing kext out to kext/com.apple.driver.AppleChestnutDisplayPMU.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleChestnutDisplayPMU. Won't symbolicate
Found com.apple.kec.pthread at load address: 66e8000, offset: 750000
Writing kext out to kext/com.apple.kec.pthread.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.kec.pthread. Won't symbolicate
Found com.apple.kec.Libm at load address: 66e9000, offset: 751000
Writing kext out to kext/com.apple.kec.Libm.kext
Unable to find __TEXT.__stubs in kext com.apple.kec.Libm. Won't symbolicate
Found com.apple.iokit.IOAcceleratorFamily2 at load address: 66ed000, offset: 755000
Writing kext out to kext/com.apple.iokit.IOAcceleratorFamily2.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOAcceleratorFamily2. Won't symbolicate
Found com.apple.AGX at load address: 66f4000, offset: 75c000
Writing kext out to kext/com.apple.AGX.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.AGX. Won't symbolicate
Found com.apple.driver.ApplePMGR at load address: 6703000, offset: 76b000
Writing kext out to kext/com.apple.driver.ApplePMGR.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.ApplePMGR. Won't symbolicate
Found com.apple.driver.AppleS5L8960XPMGR at load address: 6706000, offset: 76e000
Writing kext out to kext/com.apple.driver.AppleS5L8960XPMGR.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XPMGR. Won't symbolicate
Found com.apple.driver.AppleBasebandN51 at load address: 6707000, offset: 76f000
Writing kext out to kext/com.apple.driver.AppleBasebandN51.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBasebandN51. Won't symbolicate
Found com.apple.driver.AppleSamsungSerial at load address: 6709000, offset: 771000
Writing kext out to kext/com.apple.driver.AppleSamsungSerial.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSamsungSerial. Won't symbolicate
Found com.apple.driver.AppleBSDKextStarter at load address: 670a000, offset: 772000
Writing kext out to kext/com.apple.driver.AppleBSDKextStarter.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBSDKextStarter. Won't symbolicate
Found com.apple.driver.usb.cdc.ecm at load address: 670b000, offset: 773000
Writing kext out to kext/com.apple.driver.usb.cdc.ecm.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.cdc.ecm. Won't symbolicate
Found com.apple.driver.AppleSamsungMIPIDSI at load address: 670c000, offset: 774000
Writing kext out to kext/com.apple.driver.AppleSamsungMIPIDSI.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSamsungMIPIDSI. Won't symbolicate
Found com.apple.kext.AppleMatch at load address: 670d000, offset: 775000
Writing kext out to kext/com.apple.kext.AppleMatch.kext
Unable to find __TEXT.__stubs in kext com.apple.kext.AppleMatch. Won't symbolicate
Found com.apple.filesystems.apfs at load address: 670e000, offset: 776000
Writing kext out to kext/com.apple.filesystems.apfs.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.filesystems.apfs. Won't symbolicate
Found com.apple.driver.AppleEffaceableBlockDevice at load address: 671e000, offset: 786000
Writing kext out to kext/com.apple.driver.AppleEffaceableBlockDevice.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleEffaceableBlockDevice. Won't symbolicate
Found com.apple.driver.AppleMesaSEPDriver at load address: 671f000, offset: 787000
Writing kext out to kext/com.apple.driver.AppleMesaSEPDriver.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleMesaSEPDriver. Won't symbolicate
Found com.apple.driver.AppleBluetooth at load address: 6723000, offset: 78b000
Writing kext out to kext/com.apple.driver.AppleBluetooth.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBluetooth. Won't symbolicate
Found com.apple.driver.usb.ethernet.asix at load address: 6724000, offset: 78c000
Writing kext out to kext/com.apple.driver.usb.ethernet.asix.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.ethernet.asix. Won't symbolicate
Found com.apple.driver.AppleSEPCredentialManager at load address: 6725000, offset: 78d000
Writing kext out to kext/com.apple.driver.AppleSEPCredentialManager.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSEPCredentialManager. Won't symbolicate
Found com.apple.driver.AppleS5L8960XCLPC at load address: 6726000, offset: 78e000
Writing kext out to kext/com.apple.driver.AppleS5L8960XCLPC.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XCLPC. Won't symbolicate
Found com.apple.driver.AppleSamsungPKE at load address: 672a000, offset: 792000
Writing kext out to kext/com.apple.driver.AppleSamsungPKE.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSamsungPKE. Won't symbolicate
Found com.apple.driver.AppleInterruptController at load address: 672b000, offset: 793000
Writing kext out to kext/com.apple.driver.AppleInterruptController.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleInterruptController. Won't symbolicate
Found com.apple.driver.AppleAuthCP at load address: 672c000, offset: 794000
Writing kext out to kext/com.apple.driver.AppleAuthCP.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleAuthCP. Won't symbolicate
Found com.apple.driver.AppleS5L8960XGPIOIC at load address: 672d000, offset: 795000
Writing kext out to kext/com.apple.driver.AppleS5L8960XGPIOIC.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XGPIOIC. Won't symbolicate
Found com.apple.security.sandbox at load address: 672e000, offset: 796000
Writing kext out to kext/com.apple.security.sandbox.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.security.sandbox. Won't symbolicate
Found com.apple.driver.AppleHIDKeyboard at load address: 679a000, offset: 802000
Writing kext out to kext/com.apple.driver.AppleHIDKeyboard.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleHIDKeyboard. Won't symbolicate
Found com.apple.driver.LSKDIOKitMSE at load address: 679c000, offset: 804000
Writing kext out to kext/com.apple.driver.LSKDIOKitMSE.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.LSKDIOKitMSE. Won't symbolicate
Found com.apple.driver.AppleVXD393 at load address: 67b4000, offset: 81c000
Writing kext out to kext/com.apple.driver.AppleVXD393.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleVXD393. Won't symbolicate
Found com.apple.driver.AppleHDQGasGaugeControl at load address: 67ce000, offset: 836000
Writing kext out to kext/com.apple.driver.AppleHDQGasGaugeControl.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleHDQGasGaugeControl. Won't symbolicate
Found com.apple.driver.AppleTemperatureSensor at load address: 67d1000, offset: 839000
Writing kext out to kext/com.apple.driver.AppleTemperatureSensor.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleTemperatureSensor. Won't symbolicate
Found com.apple.driver.AppleAE2Audio at load address: 67d2000, offset: 83a000
Writing kext out to kext/com.apple.driver.AppleAE2Audio.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleAE2Audio. Won't symbolicate
Found com.apple.driver.AppleCS42L67Audio at load address: 67d4000, offset: 83c000
Writing kext out to kext/com.apple.driver.AppleCS42L67Audio.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleCS42L67Audio. Won't symbolicate
Found com.apple.iokit.IOHIDEventDriver at load address: 67d5000, offset: 83d000
Writing kext out to kext/com.apple.iokit.IOHIDEventDriver.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOHIDEventDriver. Won't symbolicate
Found com.apple.driver.USBStorageDeviceSpecifics at load address: 67d5000, offset: 83d000
Writing kext out to kext/com.apple.driver.USBStorageDeviceSpecifics.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.USBStorageDeviceSpecifics. Won't symbolicate
Found com.apple.driver.AppleMultitouchSPIC1F57 at load address: 67d5000, offset: 83d000
Writing kext out to kext/com.apple.driver.AppleMultitouchSPIC1F57.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleMultitouchSPIC1F57. Won't symbolicate
Found com.apple.driver.IOAudioCodecs at load address: 67d5000, offset: 83d000
Writing kext out to kext/com.apple.driver.IOAudioCodecs.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.IOAudioCodecs. Won't symbolicate
Found com.apple.driver.DiskImages.ReadWriteDiskImage at load address: 67da000, offset: 842000
Writing kext out to kext/com.apple.driver.DiskImages.ReadWriteDiskImage.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.DiskImages.ReadWriteDiskImage. Won't symbolicate
Found com.apple.AppleFSCompression.AppleFSCompressionTypeZlib at load address: 67db000, offset: 843000
Writing kext out to kext/com.apple.AppleFSCompression.AppleFSCompressionTypeZlib.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.AppleFSCompression.AppleFSCompressionTypeZlib. Won't symbolicate
Found com.apple.driver.AppleS5L8960XSOCTuner at load address: 67dc000, offset: 844000
Writing kext out to kext/com.apple.driver.AppleS5L8960XSOCTuner.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XSOCTuner. Won't symbolicate
Found com.apple.driver.AppleUSBDeviceNCM at load address: 67dd000, offset: 845000
Writing kext out to kext/com.apple.driver.AppleUSBDeviceNCM.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBDeviceNCM. Won't symbolicate
Found com.apple.driver.AppleBSDKextStarterVPN at load address: 67de000, offset: 846000
Writing kext out to kext/com.apple.driver.AppleBSDKextStarterVPN.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBSDKextStarterVPN. Won't symbolicate
Found com.apple.filesystems.hfs.kext at load address: 67de000, offset: 846000
Writing kext out to kext/com.apple.filesystems.hfs.kext.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.filesystems.hfs.kext. Won't symbolicate
Found com.apple.AGXFirmwareKextG3 at load address: 67ea000, offset: 852000
Writing kext out to kext/com.apple.AGXFirmwareKextG3.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.AGXFirmwareKextG3. Won't symbolicate
Found com.apple.driver.AppleSamsungI2S at load address: 6805000, offset: 86d000
Writing kext out to kext/com.apple.driver.AppleSamsungI2S.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleSamsungI2S. Won't symbolicate
Found com.apple.driver.usb.IOUSBHostHIDDeviceSafeBoot at load address: 6806000, offset: 86e000
Writing kext out to kext/com.apple.driver.usb.IOUSBHostHIDDeviceSafeBoot.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.usb.IOUSBHostHIDDeviceSafeBoot. Won't symbolicate
Found com.apple.driver.AppleM68Buttons at load address: 6806000, offset: 86e000
Writing kext out to kext/com.apple.driver.AppleM68Buttons.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleM68Buttons. Won't symbolicate
Found com.apple.driver.AppleUSBDeviceMux at load address: 6807000, offset: 86f000
Writing kext out to kext/com.apple.driver.AppleUSBDeviceMux.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBDeviceMux. Won't symbolicate
Found com.apple.nke.pptp at load address: 6809000, offset: 871000
Writing kext out to kext/com.apple.nke.pptp.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.nke.pptp. Won't symbolicate
Found com.apple.driver.AppleS5L8960XWatchDogTimer at load address: 680a000, offset: 872000
Writing kext out to kext/com.apple.driver.AppleS5L8960XWatchDogTimer.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8960XWatchDogTimer. Won't symbolicate
Found com.apple.driver.AppleVXE380 at load address: 680b000, offset: 873000
Writing kext out to kext/com.apple.driver.AppleVXE380.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleVXE380. Won't symbolicate
Found com.apple.driver.AppleStorageDrivers at load address: 6820000, offset: 888000
Writing kext out to kext/com.apple.driver.AppleStorageDrivers.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleStorageDrivers. Won't symbolicate
Found com.apple.driver.ApplePinotLCD at load address: 6820000, offset: 888000
Writing kext out to kext/com.apple.driver.ApplePinotLCD.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.ApplePinotLCD. Won't symbolicate
Found com.apple.iokit.IOAcceleratorFamily at load address: 6821000, offset: 889000
Writing kext out to kext/com.apple.iokit.IOAcceleratorFamily.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOAcceleratorFamily. Won't symbolicate
Found com.apple.iokit.usb.AppleUSBHostUserClient at load address: 6826000, offset: 88e000
Writing kext out to kext/com.apple.iokit.usb.AppleUSBHostUserClient.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.usb.AppleUSBHostUserClient. Won't symbolicate
Found com.apple.driver.AppleS5L8940XDWI at load address: 6826000, offset: 88e000
Writing kext out to kext/com.apple.driver.AppleS5L8940XDWI.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleS5L8940XDWI. Won't symbolicate
Found com.apple.driver.AppleUSBEthernetHost at load address: 6827000, offset: 88f000
Writing kext out to kext/com.apple.driver.AppleUSBEthernetHost.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleUSBEthernetHost. Won't symbolicate
Found com.apple.driver.AppleIDAMInterface at load address: 6829000, offset: 891000
Writing kext out to kext/com.apple.driver.AppleIDAMInterface.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleIDAMInterface. Won't symbolicate
Found com.apple.iokit.IOHIDEventDriverSafeBoot at load address: 682a000, offset: 892000
Writing kext out to kext/com.apple.iokit.IOHIDEventDriverSafeBoot.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.iokit.IOHIDEventDriverSafeBoot. Won't symbolicate
Found com.apple.driver.AppleDiagnosticDataAccessReadOnly at load address: 682a000, offset: 892000
Writing kext out to kext/com.apple.driver.AppleDiagnosticDataAccessReadOnly.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleDiagnosticDataAccessReadOnly. Won't symbolicate
Found com.apple.driver.AppleBiometricServices at load address: 682b000, offset: 893000
Writing kext out to kext/com.apple.driver.AppleBiometricServices.kext
This is a split kext. There's other parts, too:
Unable to find __TEXT.__stubs in kext com.apple.driver.AppleBiometricServices. Won't symbolicate
Found com.apple.driver.AppleS5L8960XUSB at load address: 682c000, offset: 894000
Segmentation fault: 11


Also, aesthetic bug: There are two "This is a ... kernel" statements.

Thanks again, and keep up the good work. :)
User avatar
Siguza
Unicorn
 
Posts: 159
Joined: Thu Jan 28, 2016 10:38 am

Re: Joker Feedback

Postby morpheus » Wed Jul 13, 2016 7:55 pm

10b2 is indeed split; I know about that segfault .. it's the last so I didnt fix it yet. That extra "this is" is because of a missing break :-P

Fixing both; thanks!
morpheus
Site Admin
 
Posts: 532
Joined: Thu Apr 11, 2013 6:24 pm

Re: Joker Feedback

Postby vega01 » Thu Jul 14, 2016 4:07 pm

Hi,

I got the following when trying to dump decrypted and decompressed 32-bit kernelcache from iOS 6.0 for iPhone 5,1 (build 10A405)
./joker.universal -k
Code: Select all
(2107.2.33.0.0)
Trying method #2
Unable to get kexts from __PRELINK_INFO.. going straight for __PRELINK_TEXT
1: built-in?(2107.2.33.0.0) at 0x355000 (8000 bytes)
2: built-in?(2107.2.33.0.0) at 0x35d000 (17000 bytes)
3: built-in?(2107.2.33.0.0) at 0x374000 (1000 bytes)
4: built-in?(2107.2.33.0.0) at 0x375000 (5000 bytes)
5: built-in?(2107.2.33.0.0) at 0x37a000 (2000 bytes)
6: built-in?(2107.2.33.0.0) at 0x37c000 (6000 bytes)
7: com.apple.driver.AppleARMPlatform(284.7.0.0.0) at 0x382000 (3a000 bytes)
8: com.apple.driver.IOSlaveProcessor(7.0.0.0.0) at 0x3bc000 (5000 bytes)
9: com.apple.driver.AppleA5AE2(43.1.0.0.0) at 0x3c1000 (5000 bytes)
10: com.apple.driver.LSKDIOKit(0.0.0.0.0) at 0x3c6000 (1d000 bytes)
11: com.apple.driver.IODARTFamily(31.0.0.0.0) at 0x3e3000 (b000 bytes)
12: com.apple.driver.AppleM2ScalerCSC(138.0.6.0.0) at 0x3ee000 (14000 bytes)
13: com.apple.driver.FairPlayIOKit(0.0.0.0.0) at 0x402000 (68000 bytes)
14: com.apple.driver.AppleVXD390(4.63.0.0.0) at 0x46a000 (27000 bytes)
15: com.apple.driver.AppleSamsungSPI(42.2.0.0.0) at 0x491000 (4000 bytes)
16: built-in?(42.2.0.0.0) at 0x495000 (1000 bytes)
17: com.apple.iokit.IOCryptoAcceleratorFamily(67.0.0.0.0) at 0x496000 (e000 bytes)
Segmentation fault: 11


joker version:
Code: Select all
3.0b with MACF Policies and (coming soon) IOUserClients!
Compiled on Jun 20 2016


Am I doing something wrong?

Edit: I got what I wanted by using the source. Thank you for sharing the tools and knowledge!
Last edited by vega01 on Wed Jul 20, 2016 2:59 pm, edited 1 time in total.
vega01
 
Posts: 19
Joined: Mon Sep 28, 2015 4:59 pm

Re: Joker Feedback

Postby backendbilly » Thu Jul 14, 2016 4:22 pm

Hey J,

Receiving segmentation fault on 10 beta 2. I see joker has support up to 10 beta 1 but thought should share:

Using latest joker:

Code: Select all
# joker
Usage: joker [-j] [-MmaSsKk] _filename_
 _filename_ should be a decrypted iOS kernelcache, or kernel dump. Tested on ARMv7/s 3.x-9.3, and ARM64 through 10.0b1

 -m: dump Mach Traps and MIG tables (NEW)
 -a: dump everything
 -k: dump kexts
 -K: kextract [kext_bundle_id_or_name_shown_in_-k|all] to JOKER_DIR or /tmp
 -S: dump sysctls
 -s: dump UNIX syscalls
 -j: Jtool compatible output (to companion file)

Kernels not included. Get your own dump or decrypted kernel from iPhoneWiki, or Apple itself (in the iOS 10b1 OTAs)

3.0b with MACF Policies and (coming soon) IOUserClients!
Compiled on Jun 15 2016


Segmentation fault:

Code: Select all
#joker -k kernelcache.release.n71.decompressed
This is a 64-bit kernel from iOS 10.x, or later (3757.0.0.0.0)
Trying method #2
Unable to get kexts from __PRELINK_INFO.. going straight for __PRELINK_TEXT
Corrupt load command size for LC 2: 16777228 .. bailing
1: built-in?(3757.0.0.0.0) at 0x588000 (1000 bytes)
Segmentation fault
#
backendbilly
Site Admin
 
Posts: 132
Joined: Fri May 29, 2015 5:58 pm

Next

Return to Tools

Who is online

Users browsing this forum: No registered users and 2 guests