Environment:
1. Mac OS X 10.9.2
2. Xcode 5.1.1
3. GCC 4.8
4, Redsn0w 0.9.15b3
Premise:
1. Get IOS 4.3.3 Kernelcache, and decrypt
Operation Steps:
1, modify the Datautils0/sandbox. S 19 Lines, change "movs R2, #19" to "Movs R2, #1"
2, compile Datautils0, can also download from here
3, the production kernel patch:./make_kernel_patchfile./kernel-ipod4,1-v4.3.3.decrypted./kernel-ipod4,1-v4.3.3.patch
4, application kernel patch:./apply_patchfile./kernel-ipod4,1-v4.3.3.decrypted./kernel-ipod4,1-v4.3.3.patch./kernel-iPod4,1- V4.3.3.patched
5. Boot the patch kernel with redsn0w:/applications/redsn0w.app/contents/macos/redsn0w-i ipod4,1_4.3.3_8j2_restore.ipsw-k Kernel-ipod4,1-v4.3.3.patched
6, write demo test, read Mobilesafari's Info.plist
1-(BOOL) Application: (UIApplication *) application didfinishlaunchingwithoptions: (Nsdictionary *) Launchoptions2 {3NSString *safariinfofilepath =@"/applications/mobilesafari.app/info.plist";4Nsdictionary *infocontent =[Nsdictionary Dictionarywithcontentsoffile:safariinfofilepath];5NSLog (@"-------->%@", infocontent);67Self.window =[[[UIWindow alloc] initwithframe:[[uiscreen mainscreen] bounds]] autorelease];8 //Override point for customization after application launch.9Self.window.backgroundColor =[Uicolor Whitecolor];Ten [Self.window makekeyandvisible]; One returnYES; A}
===========================================
Then find time to read Datatuils0 's code in detail.
.