Skip to content

Instantly share code, notes, and snippets.

@Halo-Michael
Last active August 3, 2023 09:16
Show Gist options
  • Save Halo-Michael/ff9e6502144ea2c0201fb21e09b26d0e to your computer and use it in GitHub Desktop.
Save Halo-Michael/ff9e6502144ea2c0201fb21e09b26d0e to your computer and use it in GitHub Desktop.
const struct dynamic_info kern_versions[] = {
{
.kern_version = "Darwin Kernel Version 22.1.0: Thu Oct 6 19:32:38 PDT 2022; root:xnu-8792.42.7~1/RELEASE_ARM64_T8030",
.fileglob__fg_ops = 0x0028,
.fileglob__fg_data = 0x0038,
.fileops__fo_kqfilter = 0x0030,
// .fileproc__fp_iocount = 0x0000,
// .fileproc__fp_vflags = 0x0004,
// .fileproc__fp_flags = 0x0008,
// .fileproc__fp_guard_attrs = 0x000a,
// .fileproc__fp_glob = 0x0010,
// .fileproc__fp_guard = 0x0018,
// .fileproc__object_size = 0x0020,
.fileproc_guard__fpg_guard = 0x0008,
.kqworkloop__kqwl_state = 0x0010,
.kqworkloop__kqwl_p = 0x0018,
.kqworkloop__kqwl_owner = 0x00d0,
.kqworkloop__kqwl_dynamicid = 0x00e8,
.kqworkloop__object_size = 0x0108,
.pmap__tte = 0x0000,
.pmap__ttep = 0x0008,
.proc__p_list__le_next = 0x0000,
.proc__p_list__le_prev = 0x0008,
.proc__p_pid = 0x0060,
.proc__p_fd__fd_ofiles = 0x00f8,
.proc__object_size = 0x0530,
.pseminfo__psem_usecount = 0x0004,
.pseminfo__psem_uid = 0x000c,
.pseminfo__psem_gid = 0x0010,
.pseminfo__psem_name = 0x0014,
.pseminfo__psem_semobject = 0x0038,
// .psemnode__pinfo = 0x0000,
// .psemnode__padding = 0x0008,
// .psemnode__object_size = 0x0010,
.semaphore__owner = 0x0028,
.specinfo__si_rdev = 0x0018,
.task__map = 0x0028,
.task__threads__next = 0x0058,
.task__threads__prev = 0x0060,
.task__itk_space = 0x0300,
.task__object_size = 0x0628,
.thread__task_threads__next = 0x0360,
.thread__task_threads__prev = 0x0368,
.thread__map = 0x0378,
.thread__thread_id = 0x0410,
.thread__object_size = 0x04b8,
.uthread__object_size = 0x0200,
.vm_map_entry__links__prev = 0x0000,
.vm_map_entry__links__next = 0x0008,
.vm_map_entry__links__start = 0x0010,
.vm_map_entry__links__end = 0x0018,
.vm_map_entry__store__entry__rbe_left = 0x0020,
.vm_map_entry__store__entry__rbe_right = 0x0028,
.vm_map_entry__store__entry__rbe_parent = 0x0030,
.vnode__v_un__vu_specinfo = 0x0078,
._vm_map__hdr__links__prev = 0x0010,
._vm_map__hdr__links__next = 0x0018,
._vm_map__hdr__links__start = 0x0020,
._vm_map__hdr__links__end = 0x0028,
._vm_map__hdr__nentries = 0x0030,
._vm_map__hdr__rb_head_store__rbh_root = 0x0038,
._vm_map__pmap = 0x0040,
._vm_map__hint = 0x0098,
._vm_map__hole_hint = 0x00a0,
._vm_map__holes_list = 0x00a8,
._vm_map__object_size = 0x00c0,
.kernelcache__kernel_base = 0xfffffff007004000,
.kernelcache__cdevsw = 0xfffffff00a305150,
.kernelcache__gPhysBase = 0xfffffff00785b910,
.kernelcache__gPhysSize = 0xfffffff00785b918,
.kernelcache__gVirtBase = 0xfffffff007859af8,
.kernelcache__perfmon_devices = 0xfffffff00a3402f0,
.kernelcache__perfmon_dev_open = 0xfffffff007eb7fe4,
.kernelcache__ptov_table = 0xfffffff00780f8a8,
.kernelcache__vm_first_phys_ppnum = 0xfffffff00a33f780,
.kernelcache__vm_pages = 0xfffffff00780c6d0,
.kernelcache__vm_page_array_beginning_addr = 0xfffffff00780e858,
.kernelcache__vm_page_array_ending_addr = 0xfffffff00a33f778,
.kernelcache__vn_kqfilter = 0xfffffff007f0a210,
},
};
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment