I'm bored so I gonna try around a bit.
qsee functions in kernel confirmed.
echo 1 > /proc/sys/kernel/kptr_restrict
grep -i qsee /proc/kallsyms
I build the shared library now .. just seeing how to use it.
254|root@kodiak:/ # /data/local/wotw
[-] Failed to load Widevine: No such file or directory
strace was my friend
It wanted to open the widevine files in the wrong place - I just straced for the open call and put them where they should be - no need to to anything to the code that can be worked around otherwise.
254|root@kodiak:/ # /data/local/wotw
[+] Widevine load res: 0
[+] Trying to probe 0x0D62D000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D65A000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D687000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D6B4000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D6E1000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D70E000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D73B000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D768000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D795000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D7C2000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D7EF000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D81C000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D849000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D876000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D8A3000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D8D0000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D8FD000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D92A000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D957000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D984000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D9B1000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0D9DE000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0DA0B000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0DA38000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0DA65000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0DA92000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0DABF000
[+] Crashed, jumping ahead
[+] Trying to probe 0x0DAEC000
[+] Crashed, jumping ahead
[-] Failed to find application
: No such file or directory
Now I need to get the memory region right ..
Right now I am wondering how he found the memory regions ... I am reading back his blog but it doesn't explain that.
Enough for today.
What I gathered is that we somehow need to find that memory region.
Maybe I missed something but I can't find a hint on how to do that.
Back again ...
Now I need to somehow extract the correct values for the Safe-Memory-Area.
I try to understand how he came to that specific value.