fouldecrypt icon indicating copy to clipboard operation
fouldecrypt copied to clipboard

mremap_encrypted: Operation not permitted

Open yuzhouheike opened this issue 2 years ago • 0 comments

mremap_encrypted: Operation not permitted

iPhone:/tmp root# fouldecrypt -v /var/containers/Bundle/Application/5D9125CB-EFD0-4235-BF46-FF308E079B48/AppleSupport.app/AppleSupport ./AppleSupport_ok22
17:49:01.705168	mapping input file: /var/containers/Bundle/Application/5D9125CB-EFD0-4235-BF46-FF308E079B48/AppleSupport.app/AppleSupport
17:49:01.706061	mapping output file: ./AppleSupport_ok22
17:49:01.707180	copying original data of size 0xa764e0...
17:49:01.716459	    not fat binary, directly decrypting it!
17:49:01.716491	    finding encryption_info segment in slide...
17:49:01.716499	        found encryption_info segment at offset d30
17:49:01.716505	    decrypting encrypted data...
17:49:01.716511	        Going to decrypt crypt page: off 0x4000 size 0x894000 cryptid 1, cpuType 100000c cpuSubType 0
17:49:01.716549	        Already 16k aligned, directly go ahead :)
17:49:01.716561	-->> 16k-aligned mmaping(0x0, 0x894000, 5, 0x2, 3, 0x4000)
17:49:01.716612	<<-- 16k-aligned mmaping(0x0, 0x894000, 5, 0x2, 3, 0x4000) = 0x104584000
17:49:01.716622	<<-- unprotect mremap_encrypted(0x104584000, 0x894000, 1, 0x100000c, 0x0)
mremap_encrypted: Operation not permitted
17:49:01.724322	-->> unprotect mremap_encrypted(0x104584000, 0x894000, 1, 0x100000c, 0x0) = -1

yuzhouheike avatar Nov 15 '22 09:11 yuzhouheike