[Acer PT14-51 Laptop] HowTo

[jalavoui]

so many questions. but this is the right place to help you. start by uploading oc config and ioreg so we can check what is loading on your system

 

asus i think you miss delete some vars here. (check my config or the 1 i send to ben)

 

Edited November 1, 2024 by jalavoui

[benmacfreak]

56 minutes ago, jalavoui said:

so many questions. but this is the right place to help you. start by uploading oc config and ioreg so we can check what is loading on your system

ok here's my oc config plist and my IOreg file 

config.plist bennji’s MacBook Pro.ioreg and a link to my full EFI https://download1503.mediafire.com/fxjvfhg84xkg_Ln6dftTS904XILAm6qG3JW34MYT4FMOs1e_d6QUASeBtLYw3JKr3wmzxzG0n0VcZwye3-wqAAo5iaNIvcLR2ogPTH0z0VLwed5lLHJSD91HEWeUSiO4OXyMmzBBpTWEH8oLNDtXE06crg0dEAvqH48Ov5X_ZaHAgw/xtbn5d2o4xvk1ox/EFI-OC-Ben-ASUS-TGL.zip

Edited October 31, 2024 by benmacfreak

[jalavoui]

nice you can boot. get macial and attach dsdt.aml

 

you just need small fixs and soon can try igpu

 

hope you can read this thread and do the fixing youself.

 

you and asus and kinda on same hardware

 

try start with this config based on yours. check you have the match OpenCore Configurator for your opencore version or you will get oc errors at boot.

i'm using this old version but you can try with a more recent OC. just open this config and save using your OpenCore Configurator

 

 

- test this on a usb pen

- open this config use OpenCore Configurator and save it. check for errors or it won't boot

- check if this devices path are correct

- add the .aml files to oc/acpi folder

- if you get a boot screen try old nbue or wahtevergreen releases from other thread (for wg add back some properties for igpu)

- if all good get xcode and try new nblue

 

Arquivo.zip

 

Edited November 1, 2024 by jalavoui

[ArtikDiamond]

On 10/27/2024 at 4:24 PM, jalavoui said:

wlc ben you're in the right thread

Me too I guess?

[jalavoui]

better ask asus

[Stezza88]

in oc verbose i got this strange message.. this is the cause why my nvram doesn't give me a sip disabled

00:398 00:011 OCVAR: Setting NVRAM 7C436110-AB2A-4BBB-A880-FE41995C9F82:csr-active-config - ignored, exists

can't reset because sip is in unknown state... and if I modify car-active-config it doesn't came modified because of this verb.

 

Not showing anything .. can't see picker selection menu either in dos way or Syrah.. but it boots fortunately directly in macOS APFS partition

05:820 00:009 OCB: Adding custom entry CleanNvram.efi (tool|B:0) -> CleanNvram.efi
05:828 00:008 OCB: Registering entry CleanNvram.efi [Auto] (T:128|F:0|G:0|E:0|B:0) - <nil>
05:837 00:009 OCB: Adding custom entry OpenShell.efi (tool|B:0) -> OpenShell.efi
05:846 00:008 OCB: Registering entry OpenShell.efi [OpenShell:UEFIShell:Shell] (T:128|F:0|G:0|E:0|B:0) - <nil>
05:855 00:009 BEP: Reset NVRAM entry, preserve boot 0, apple 0
05:865 00:009 OCB: Adding custom entry Reset NVRAM (action|B:1) -> <null string>
05:875 00:009 OCB: Registering entry Reset NVRAM [ResetNVRAM:NVRAMTool] (T:256|F:0|G:0|E:0|B:1) - <nil>
05:883 00:008 OCB: Showing menu... 
05:892 00:009 OCHK: InitHotKeys
05:901 00:008 OCKM: Allocated key repeat context 274A6218 274A6298 2748AE18
05:910 00:009 OCAE: Set screen resolution to 2560x1600 - Success
05:919 00:008 OCTY: Registered handler
05:928 00:009 OCAE: Set screen resolution to 2560x1600 - Success
05:937 00:008 OCUI: Console attributes: 0
05:946 00:009 OCUI: UseDiskLabel: 0, UseGenericLabel: 0
05:956 00:009 OCB: Get volume icon for Windows <null string> - Not Found
05:966 00:010 OCUI: Using flavour icon, custom: 0
05:975 00:008 OCUI: Console attributes: 0
05:984 00:009 OCUI: UseDiskLabel: 0, UseGenericLabel: 0
05:993 00:008 OCB: Get volume icon for MacOSX D6F62EB5-0852-4CD3-A22B-DC9D3DCA8C73\ - Not Found
06:002 00:009 OCUI: Using flavour icon, custom: 0
06:011 00:008 OCUI: Console attributes: 0
06:020 00:009 OCUI: UseDiskLabel: 0, UseGenericLabel: 0
06:029 00:008 OCB: Get volume icon for Recovery 14.7.1 D6F62EB5-0852-4CD3-A22B-DC9D3DCA8C73\ - Not Found
06:038 00:009 OCUI: Using flavour icon, custom: 0
06:046 00:008 OCUI: Console attributes: 0
06:056 00:009 OCUI: UseDiskLabel: 0, UseGenericLabel: 0
06:066 00:009 OCUI: Console attributes: 0
06:075 00:009 OCUI: UseDiskLabel: 0, UseGenericLabel: 0
06:084 00:008 OCUI: Using flavour icon, custom: 0
06:093 00:009 OCUI: Console attributes: 0
06:102 00:008 OCUI: UseDiskLabel: 0, UseGenericLabel: 0
06:111 00:009 OCUI: Using flavour icon, custom: 0
11:137 05:025 OCHK: FreeHotKeys
11:148 00:011 OCTY: Unregistered handler
11:159 00:010 OCKM: Freeing key repeat context 274A6218 274A6298 2748AE18
11:167 00:008 OCB: Should boot from 2. MacOSX (T:2|F:0|G:0|E:0|DEF:0)
11:177 00:009 OCB: Saved mode 0/0/0 - Success
11:185 00:008 OCB: Perform boot MacOSX

 

opencore-2024-11-01-233752.txt

Edited November 2, 2024 by ASUS Vivobook

[jalavoui]

you need to delete the vars you create in nvram

this is your config - check agains mine

fix it and do clear nvram with console tool

 

 

csr unknow msg is fine for 0xFFFFFFFF

 

do you have opencore configurator for this OpenCore DBG-102-2024-10-08  ?? otherwise you can get config errors

 

idk if you really need lilucpu=17 slide=0

 

idk if you need this resetnvram as driver. maybe use console tool?

 

no SSDT-OSYS.aml enabled OMFG!! review all i think you miss others

 

this is invalid - check my config

Edited November 1, 2024 by jalavoui

[Stezza88]

2 hours ago, jalavoui said:

you need to delete the vars you create in nvram

this is your config - check agains mine

fix it and do clear nvram with console tool

 

 

csr unknow msg is fine for 0xFFFFFFFF

 

do you have opencore configurator for this OpenCore DBG-102-2024-10-08  ?? otherwise you can get config errors

 

idk if you really need lilucpu=17 slide=0

 

Can't have access to console tool because oc picker is not showing... and I can't undestand why... I think I must insert acpi disable gpu.aml 

 

P.S. I need lilucpu=17 because it sets my cpu gen to raptor lake gen... I see in weg source code that 17 represent my gen.. because exploring weg in detail I saw that my cpu is set to gen 0 or unknown and modified forked weg doesn't work

Edited November 2, 2024 by ASUS Vivobook

[jalavoui]

access to console tool because oc picker is not showing. it's some config flag not shure which. check in my config

 

ok for lilucpu then

[Stezza88]

Just added this to NVRAM settings

Delete
	7C436110-AB2A-4BBB-A880-FE41995C9F82
		csr-active-config

and it worked!! Now I've got SIP disabled... finally!!

 

P.S. with secure bootmodel set to default my system won't boot

 

Now, I can go to the night club happy

Edited November 2, 2024 by ASUS Vivobook

[jalavoui]

check you have reset tool display at boot logo so you can reset nvram

[Stezza88]

Uefi -> output -> provideconsolegop set to false resolved my problems!!

[Stezza88]

Got it !!! It is strange how can someone be happy to have a kernel panic! XD

Kernel-2024-11-02-095354.panic

 

I think i've found the exact point : in 0x3ed (i think line 1005 of com.apple.driver.AppleIntelICLGraphics binary) and after in 0x51 (i think line 81 of WhateverGreen binary)

0xffffff7f94e37e8b com.apple.driver.AppleIntelICLGraphics : __ZN16IntelAccelerator10getGPUInfoEv + 0x3ed
0xfffffff4130a3b20 : 0xffffff800586d4c1 as.vit9696.WhateverGreen : __ZN4IGFX10getGPUInfoEPv + 0x51
0xfffffff4130a3b80 : 0xffffff7f94e37a71 com.apple.driver.AppleIntelICLGraphics : __ZN16IntelAccelerator15configureDeviceEP11IOPCIDevice + 0x31
0xfffffff4130a3ba0 : 0xffffff7f954e4e3d com.apple.iokit.IOAcceleratorFamily2 : __ZN22IOGraphicsAccelerator25startEP9IOService + 0x2d5

And voilà.. it is the commit that lshBluesky did to bypass ICL SKU kp which generates a kp to me (https://github.com/lshbluesky/WhateverGreen/commit/54257ca01f9475c163e1693a981b7968474d8d09)

KernelPatcher::RouteRequest request("__ZN16IntelAccelerator10getGPUInfoEv", getGPUInfo, ogetGPUInfo);
		patcher.routeMultiple(index, &request, 1, address, size);

 

Him talking about it at page 6 :

 

Edited November 2, 2024 by ASUS Vivobook

[Stezza88]

Just a try : by commenting these two lines in wet source code

KernelPatcher::RouteRequest request("__ZN16IntelAccelerator10getGPUInfoEv", getGPUInfo, ogetGPUInfo);
		patcher.routeMultiple(index, &request, 1, address, size);

and adding -igfxdvmt to boot args result is the same, kp always 0x3ed problem 

0xffffff7f94e37e8b com.apple.driver.AppleIntelICLGraphics : __ZN16IntelAccelerator10getGPUInfoEv + 0x3ed

Kernel-2024-11-02-121950.panic

Edited November 2, 2024 by ASUS Vivobook

[Stezza88]

Can't find kext extract tool.. and.. the kext inside /System/Library/Extensions if I look manually has no binary file inside..

 

[EDIT] Found here : 

 

Edited November 2, 2024 by ASUS Vivobook

[jalavoui]

nice. give me a sec

 

i've added gen7icl back to nblue info.plist (was disabled cause i went focus on tgl)

 

 

the iclgraph patches start here

 

 

mostly ventura patches. note that the patches have a syslog_cond. so if they fail to apply you won't be noticed

better change to panic_cond after changing them. why? cause if the patch fails to apply you get a nice kp warn msg

 

 

as for kext extract go check decompkernelcache on

 

or load /System/Library/KernelCollections/SystemKernelExtensions.kc on ida pro (takes long time)

 

you can copy nblue patches to wg if you want

 

let's say this patch is for ventura

 

if you're on sonoma just check the function Intelaccelerator::init and try guess the bytes offset

 

Edited November 2, 2024 by jalavoui

[Stezza88]

$ sudo ./decompkernelcache /System/Library/Extensions/AppleIntelICLGraphics.kext -kexts

 

ERROR: Read too few bytes from file /System/Library/Extensions/AppleIntelICLGraphics.kext, 96 bytes wanted but 0 bytes read!

Edited November 2, 2024 by ASUS Vivobook

[jalavoui]

u miss the destination folder. note the "x" its a folder that will be created

 

usage:

./decompkernelcache /System/Library/KernelCollections/SystemKernelExtensions.kc x -kexts

 

i think you dont need sudo cause then you get root permissions on files error

 

if this doesnt work for the os x version you have u might need to check with xcode decompkernelcache src code.

 

btw now that you finally have a working system do you wanna publish it so others can copy your configs, etc?

oh w8 better when you have working trackpad,etc then publish it

 

this are from ventura. i just used the tool to extract. you can check then for nblue patched bytes

dam this are latest ventura and i'm using an old ventura release. i'mi not sure if nblue bytes will match

Arquivo.zip

a good idea is install

 

kdk depends on os x version and sometimes as usefull kexts inside. but care cause those kexts dont have the same bytes as the ones from /S/L/E

theyre good to read the code cause all offsets are fixed and they load fine on ghidra,etc

 

i think youi should focus on framebuffer 1st cause linux shows you have a display family 13 and also an edp connector

Edited November 2, 2024 by jalavoui

[Stezza88]

Thanks!!! decompkernelcache is working now

Edited November 2, 2024 by ASUS Vivobook

[jalavoui]

u miss the parameter (sys.kc or boot.kc)

 

 

btw i use this to debug decompkernelcache. guess pass the parameter should work

anyway to step debug comment fopen and choose sys or kc fopen

 

don't hack my hack

Edited November 2, 2024 by jalavoui

[Stezza88]

One question... but if i patch the AppleIntelICLGraphics driver.. how can i restore it in system/Library/Extensions the patched one?

[Stezza88]

Got this situation in ghidra... so bad... 0x3ed .. variable __data i think..

Edited November 2, 2024 by ASUS Vivobook

[jalavoui]

you dont patch the binary directly use wg or nblue todo it.

 

did u make ghidra analyse the binary 1st?

 

just testing for this

 

 

if i try this in the ventura binary from decompkernelcachede

 

 

ghidra failed to decompile the code and i get this

 

 

 

this is bad luck but you can load on ida pro

 

[jalavoui]

when you create the patch (new bytes) add to nblue or wg like this

f2 are original bytes

r2 is the patch (new hex bytes copyed from ghidra or ida pro)

 

so you don't mess with the binary files. you just create patches to use on nblue or wg

[jalavoui]

i you find code that you just can't decompile better (china code) like this (**(code **)(*in_RDI + 0x178))();

ask on the other thread - maybe visual helps you