aiaf Awesome. I actually saw a reference to some cryptography function in one of the TCON ones. Still not certain things have to be as complex as editing the memory directly or messing with the firmware. Could be possible to just load one of the libs and start toggling options.
When unpacking remember that some stuff is only available in the x86 cache, so both needs to be unpacked.
I found Binary Ninja to be the best for browsing around.
If anyone else wants to dig around this is roughly what I did:
brew install keith/formulae/dyld-shared-cache-extractor
dyld-shared-cache-extractor \
/System/Volumes/Preboot/Cryptexes/OS/System/Library/dyld/dyld_shared_cache_arm64e \
$HOME/Projects/dyld-cache-arm64e
dyld-shared-cache-extractor/System/Volumes/Preboot/Cryptexes/OS/System/Library/dyld/dyld_shared_cache_x86_64 \
$HOME/Projects/dyld-cache-x86_64
cd $HOME/Projects/
grep --recursive -i uniformity2D (find all libraries with some refernce to a certain string)
There is also another tool to see what a framework depends on that can be useful
brew install dylibtree
dylibtree --depth 3 \
--shared-cache-path /System/Volumes/Preboot/Cryptexes/OS/System/Library/dyld/dyld_shared_cache_arm64e \
$HOME/Projects/dyld-cache-arm64e/System/Library/PrivateFrameworks/AppleDisplayTCONControl.framework/Versions/A/AppleDisplayTCONControl