Difference between revisions of "LwVM"

From The iPhone Wiki
Jump to: navigation, search
(Created page with "'''LwVM''' (Lightweight Volume Manager) - partition table, which is used by iOS since 5.0. == Structure == <pre> typedef struct _LwVMPartitionRecord { uint64_t type[...")
 
(Structure)
Line 5: Line 5:
 
<pre>
 
<pre>
 
typedef struct _LwVMPartitionRecord {
 
typedef struct _LwVMPartitionRecord {
uint64_t type[2];
+
uint64_t type[2]; //Should be equal to LwVMPartitionTypeHFS (see below) on an unmodified device.
uint64_t guid[2];
+
uint64_t guid[2]; //Random.
uint64_t begin;
+
uint64_t begin; //Partitions begin in bytes.
uint64_t end;
+
uint64_t end; //End.
 
uint64_t attribute; // 0 == unencrypted; 0x1000000000000 == encrypted
 
uint64_t attribute; // 0 == unencrypted; 0x1000000000000 == encrypted
char partitionName[0x48];
+
char partitionName[0x48]; //For an unknown reason every char is separated by null.
 
} __attribute__ ((packed)) LwVMPartitionRecord;
 
} __attribute__ ((packed)) LwVMPartitionRecord;
   
 
typedef struct _LwVM {
 
typedef struct _LwVM {
uint64_t type[2];
+
uint64_t type[2]; //Should be LwVMType or LwVMType_noCRC.
uint64_t guid[2];
+
uint64_t guid[2]; //Random.
uint64_t mediaSize;
+
uint64_t mediaSize; //Size in bytes.
uint32_t numPartitions;
+
uint32_t numPartitions; //Number of partitions.
 
uint32_t crc32;
 
uint32_t crc32;
uint8_t unkn[464];
+
uint8_t unkn[464]; //Some unknown bytes, usually nulls.
 
LwVMPartitionRecord partitions[12];
 
LwVMPartitionRecord partitions[12];
 
uint16_t chunks[1024]; // chunks[0] should be 0xF000
 
uint16_t chunks[1024]; // chunks[0] should be 0xF000

Revision as of 17:33, 15 September 2014

LwVM (Lightweight Volume Manager) - partition table, which is used by iOS since 5.0.


Structure

typedef struct _LwVMPartitionRecord {
        uint64_t type[2]; //Should be equal to LwVMPartitionTypeHFS (see below) on an unmodified device.
        uint64_t guid[2]; //Random.
        uint64_t begin; //Partitions begin in bytes.
        uint64_t end; //End.
        uint64_t attribute; // 0 == unencrypted; 0x1000000000000 == encrypted
        char partitionName[0x48]; //For an unknown reason every char is separated by null.
} __attribute__ ((packed)) LwVMPartitionRecord;

typedef struct _LwVM {
        uint64_t type[2]; //Should be LwVMType or LwVMType_noCRC.
        uint64_t guid[2]; //Random.
        uint64_t mediaSize; //Size in bytes.
        uint32_t numPartitions; //Number of partitions.
        uint32_t crc32;
        uint8_t unkn[464]; //Some unknown bytes, usually nulls.
        LwVMPartitionRecord partitions[12];
        uint16_t chunks[1024]; // chunks[0] should be 0xF000
} __attribute__ ((packed)) LwVM;

static const char LwVMType[] = { 0x6A, 0x90, 0x88, 0xCF, 0x8A, 0xFD, 0x63, 0x0A, 0xE3, 0x51, 0xE2, 0x48, 0x87, 0xE0, 0xB9, 0x8B };

static const char LwVMType_noCRC[] = { 0xB1, 0x89, 0xA5, 0x19, 0x4F, 0x59, 0x4B, 0x1D, 0xAD, 0x44, 0x1E, 0x12, 0x7A, 0xAF, 0x45, 0x39 };

static const char LwVMPartitionTypeHFS[] = { 0x48, 0x46, 0x53, 0x00, 0x00, 0x00, 0x11, 0xAA, 0xAA, 0x11, 0x00, 0x30, 0x65, 0x43, 0xEC, 0xAC };

Tools

lwvmedit