------------------------------------------------------------------------
     Nougat Trim Area PoC kernel image patcher by Munjeni @ 2017
------------------------------------------------------------------------

hash:0xB4582A45 calc_hash:0xB4582A45
hash:0xC5A7007D calc_hash:0xC5A7007D
hash:0x49473BAE calc_hash:0x49473BAE
hash:0x1BE3A3D2 calc_hash:0x1BE3A3D2
device: D5803
serial number: YT9111NXK6
drm key: 0001046B 0010 1D EA 85 89 D1 D3 7A 0A 35 DE 5D 58 CA DD E5 52
Trim area dump is a valid.
Locked bootloader.
Deleting old folder ramdisk if exist...
if exist ramdisk (rd ramdisk /s/q)
returned: 0.
New directory ramdisk created.
Created ouput folder "out"
opening ..\kernel_291_stock.elf
Extracting file ..\kernel_291_stock.elf
ELF magic found
Entry point          : 0x00008000
Class                : 32-bit objects
Program Header start : 0x34
Program Header size  : 0x20
Program Header count : 3
   PH[0], type=1, offset=0x00000094, virtual=0x00008000, phy=0x00008000, size=0x
0077B8F9
   PH[1], type=1, offset=0x0077B98D, virtual=0x02000000, phy=0x02000000, size=0x
0034518C
   PH[2], type=1, offset=0x00AC0B19, virtual=0x01E00000, phy=0x01E00000, size=0x
0003B800
0. Dumping out/boot.img-zImage
1. Dumping out/boot.img-ramdisk.gz
2. Dumping out/boot.img-dt
   Seeking to cmdline address = 0x00AFC321
3. Dumping cmdline to out/boot.img-cmdline
Done.
No file exist out/kernel_291_stock.elf.elf .
Gunziping...
setting up infflate...
infflating...
infflate returned: 0
gzpipe: ok.
unziped: ok.
Extracting ramdisk.cpio...
Searching for file_contexts...
Found plaintext file_contexts@0644
Patching file "ramdisk/init.sony-platform.rc@0750"
Patching file "ramdisk/init.sony-platform.rc@0750"
Patching file "ramdisk/ueventd.rc@0644"
Patching file "ramdisk/file_contexts@0644"
Create ta scipt.
Create busybox.
TA.img (..\ta_backups\TA.img) installed.
Making sepolicy backup: ramdisk/backupsepolicy@0644
Patching sepolicy...
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12682 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12682 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12683 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12684 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12684 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12685 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12686 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12686 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12687 rules, 0 cond rules

Success
libsepol.policydb_index_others: security:  1 users, 2 roles, 1159 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  87 classes, 12688 rules, 0 cond rules

Success
Runing user script...
this is output from the user example script "script.bat"
you can make your own script! See "script.bat" for idea!
Your ramdisk path is "ramdisk"
script must return 0 for success!
Pausing form script...
Aby kontynuować, naciśnij dowolny klawisz . . .
you are now in busybox, type help and press enter for list of busybox commands
to quit from busybox type exit 0 and press enter
d:/kernel_work/ta_poc_munjeni $ exit 0
script.bat ramdisk
returned: 0.
Repacking ramdisk...
ramdisk.cpio done.
Making ramdisk.gz
defflating...
defflate returned: 0
setting up infflate...
infflating...
infflate returned: 0
gzpipe: ok.
gzip: ok.
ramdisk.gz done.
Found kernel dt.
Found QCDT magic string.
Packing new_boot.img
cmdline="console=ttyHSL0,115200,n8 androidboot.hardware=qcom user_debug=23 msm_r
tb.filter=0x3b7 ehci-hcd.park=3 androidboot.bootdevice=msm_sdcc.1 vmalloc=300M d
wc3.maximum_speed=high dwc3_msm.prop_chg_detect=Y"
base="0x00000000"
pagesize="4096"
ramdiskoff="0x02000000"
tagsoff="0x01e00000"
making new_boot.img
new_boot.img created.
Done.

Aby kontynuować, naciśnij dowolny klawisz . . .