Page 1 of 1

img4tool - tool to decompress kernelcache in iOS10.x (win32)

PostPosted: Sun Dec 18, 2016 9:30 pm
by backendbilly
I've compiled img4tool as a Windows 32-bit binary. Img4tool is from https://github.com/xerub/img4tool, which is used to decompress kernelcache from iOS 10.x. The kernelcache container has changed in iOS 10.x which appears to use IM4P instead of the old img3

https://drive.google.com/open?id=0B5LHH ... HN2ZjN1X3M

Billy

Re: img4tool - tool to decompress kernelcache in iOS10.x (wi

PostPosted: Tue Dec 20, 2016 1:15 pm
by Siguza
Correction:

The kernelcache container has not changed in 10.x.
32-bit devices still use Img3, and 64-bit devices still do and always have used IM4P.

What has changed, however is that
a) kernelcaches (and disk images, and 32-bit bootloaders) are no longer encrypted, and
b) the iPhone 7 and 7 Plus (iPhone9,[1234]) have moved from lzss compression to lzfse.

Re: img4tool - tool to decompress kernelcache in iOS10.x (wi

PostPosted: Tue Dec 20, 2016 3:00 pm
by morpheus
You guys do know that joker can now handle compressed kernel caches too, right? It auto-separates the KPP portion and decompresses automatically.

Re: img4tool - tool to decompress kernelcache in iOS10.x (wi

PostPosted: Tue Dec 20, 2016 3:42 pm
by backendbilly
Siguza wrote:Correction:

The kernelcache container has not changed in 10.x.
32-bit devices still use Img3, and 64-bit devices still do and always have used IM4P.

What has changed, however is that
a) kernelcaches (and disk images, and 32-bit bootloaders) are no longer encrypted, and
b) the iPhone 7 and 7 Plus (iPhone9,[1234]) have moved from lzss compression to lzfse.


Thanks for the corrections Siguza. I hardly touch 32-bit devices ever since 64-bit came out as I require working on the latest and greatest

Administrator wrote:You guys do know that joker can now handle compressed kernel caches too, right? It auto-separates the KPP portion and decompresses automatically.


Good to know that joker has such capability now. I think we should have a way to list release notes for new updates to your tools J ;)

Billy

Re: img4tool - tool to decompress kernelcache in iOS10.x (wi

PostPosted: Fri Dec 23, 2016 10:31 pm
by Domo
Good to know that joker has such capability now. I think we should have a way to list release notes for new updates to your tools J


He does have an RSS feed, and joker was in the news:
http://www.newosxbook.com/index.php?page=news

What would be awesome is if someone maintained a github of J's source code AND a Cydia repo of all the utilities!