Mickey Jin jhftss

macOS Internals

Understand your Mac and iPhone more deeply by tracing the evolution of Mac OS X from prelease to Swift. John Siracusa delivers the details.

You've got two main options:

You can extract even more artwork if you decrypt and mount an iOS firmware (.ipsw file).

	"use strict";

	// This script implements the !dump_vmcs command that displays values of the all
	// fields in the current VMCS. The processor must be in VMX-root operation with
	// an active VMCS.
	//
	// As a reference, there are some other implementations of the same concept. The
	// author is now aware of those two at least. Check them out as it may fit your
	// need better.
	// - https://github.com/ergot86/crap/blob/main/hyperv_stuff.js (Windbg JavaScript)

	private rule MachO
	{
	meta:
	description = "Mach-O executable"
	category = "macho"

	condition:
	(uint32(0) == 0xfeedface or uint32(0) == 0xcafebabe
	or uint32(0) == 0xbebafeca or uint32(0) == 0xcefaedfe
	or uint32(0) == 0xfeedfacf or uint32(0) == 0xcffaedfe)

	function sleep( sleepDuration ){
	var now = new Date().getTime();
	while(new Date().getTime() < now + sleepDuration){ /* do nothing */ }
	}
	function gc() {
	for (let i = 0; i < 0x10; i++) {
	new ArrayBuffer(0x1000000);
	}
	}
	let data_view = new DataView(new ArrayBuffer(8));

	Mute these words in your settings here: https://twitter.com/settings/muted_keywords

	ActivityTweet
	generic_activity_highlights
	generic_activity_momentsbreaking
	RankedOrganicTweet
	suggest_activity
	suggest_activity_feed
	suggest_activity_highlights
	suggest_activity_tweet