forked from UberDriver2029/KFD-Offsets
-
Notifications
You must be signed in to change notification settings - Fork 0
/
iPad11,3 16.5 20F66.h
188 lines (184 loc) · 6.44 KB
/
iPad11,3 16.5 20F66.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
/*
* Copyright (c) 2023 Félix Poulin-Bélanger. All rights reserved.
*/
#ifndef dynamic_info_h
#define dynamic_info_h
struct dynamic_info {
const char* kern_version;
// struct fileglob
u64 fileglob__fg_ops;
u64 fileglob__fg_data;
// struct fileops
u64 fileops__fo_kqfilter;
// struct fileproc
// u64 fileproc__fp_iocount;
// u64 fileproc__fp_vflags;
// u64 fileproc__fp_flags;
// u64 fileproc__fp_guard_attrs;
// u64 fileproc__fp_glob;
// u64 fileproc__fp_guard;
// u64 fileproc__object_size;
// struct fileproc_guard
u64 fileproc_guard__fpg_guard;
// struct kqworkloop
u64 kqworkloop__kqwl_state;
u64 kqworkloop__kqwl_p;
u64 kqworkloop__kqwl_owner;
u64 kqworkloop__kqwl_dynamicid;
u64 kqworkloop__object_size;
// struct pmap
u64 pmap__tte;
u64 pmap__ttep;
// struct proc
u64 proc__p_list__le_next;
u64 proc__p_list__le_prev;
u64 proc__p_pid;
u64 proc__p_fd__fd_ofiles;
u64 proc__object_size;
// struct pseminfo
u64 pseminfo__psem_usecount;
u64 pseminfo__psem_uid;
u64 pseminfo__psem_gid;
u64 pseminfo__psem_name;
u64 pseminfo__psem_semobject;
// struct psemnode
// u64 psemnode__pinfo;
// u64 psemnode__padding;
// u64 psemnode__object_size;
// struct semaphore
u64 semaphore__owner;
// struct specinfo
u64 specinfo__si_rdev;
// struct task
u64 task__map;
u64 task__threads__next;
u64 task__threads__prev;
u64 task__itk_space;
u64 task__object_size;
// struct thread
u64 thread__task_threads__next;
u64 thread__task_threads__prev;
u64 thread__map;
u64 thread__thread_id;
u64 thread__object_size;
// struct uthread
u64 uthread__object_size;
// struct vm_map_entry
u64 vm_map_entry__links__prev;
u64 vm_map_entry__links__next;
u64 vm_map_entry__links__start;
u64 vm_map_entry__links__end;
u64 vm_map_entry__store__entry__rbe_left;
u64 vm_map_entry__store__entry__rbe_right;
u64 vm_map_entry__store__entry__rbe_parent;
// struct vnode
u64 vnode__v_un__vu_specinfo;
// struct _vm_map
u64 _vm_map__hdr__links__prev;
u64 _vm_map__hdr__links__next;
u64 _vm_map__hdr__links__start;
u64 _vm_map__hdr__links__end;
u64 _vm_map__hdr__nentries;
u64 _vm_map__hdr__rb_head_store__rbh_root;
u64 _vm_map__pmap;
u64 _vm_map__hint;
u64 _vm_map__hole_hint;
u64 _vm_map__holes_list;
u64 _vm_map__object_size;
// kernelcache static addresses
u64 kernelcache__kernel_base;
u64 kernelcache__cdevsw;
u64 kernelcache__gPhysBase;
u64 kernelcache__gPhysSize;
u64 kernelcache__gVirtBase;
u64 kernelcache__perfmon_devices;
u64 kernelcache__perfmon_dev_open;
u64 kernelcache__ptov_table;
u64 kernelcache__vm_first_phys_ppnum;
u64 kernelcache__vm_pages;
u64 kernelcache__vm_page_array_beginning_addr;
u64 kernelcache__vm_page_array_ending_addr;
u64 kernelcache__vn_kqfilter;
};
const struct dynamic_info kern_versions[] = {
{
.kern_version = "Darwin Kernel Version 22.5.0: Mon Apr 24 21:10:51 PDT 2023; root:xnu-8796.122.4~1/RELEASE_ARM64_T8020",
.fileglob__fg_ops = 0x28,
.fileglob__fg_data = 0x40 - 8,
.fileops__fo_kqfilter = 0x30,
// .fileproc__fp_iocount = 0x0000,
// .fileproc__fp_vflags = 0x0004,
// .fileproc__fp_flags = 0x0008,
// .fileproc__fp_guard_attrs = 0x000a,
// .fileproc__fp_glob = 0x0010,
// .fileproc__fp_guard = 0x0018,
// .fileproc__object_size = 0x0020,
.fileproc_guard__fpg_guard = 0x8,
.kqworkloop__kqwl_state = 0x10,
.kqworkloop__kqwl_p = 0x18,
.kqworkloop__kqwl_owner = 0xd0,
.kqworkloop__kqwl_dynamicid = 0xd0 + 0x18,
.kqworkloop__object_size = 0x108,
.pmap__tte = 0x0,
.pmap__ttep = 0x8,
.proc__p_list__le_next = 0x0,
.proc__p_list__le_prev = 0x8,
.proc__p_pid = 0x60,
.proc__p_fd__fd_ofiles = 0xf8,
.proc__object_size = 0x730,
.pseminfo__psem_usecount = 0x04,
.pseminfo__psem_uid = 0x0c,
.pseminfo__psem_gid = 0x10,
.pseminfo__psem_name = 0x14,
.pseminfo__psem_semobject = 0x38,
// .psemnode__pinfo = 0x0000,
// .psemnode__padding = 0x0008,
// .psemnode__object_size = 0x0010,
.semaphore__owner = 0x28,
.specinfo__si_rdev = 0x18,
.task__map = 0x28,
.task__threads__next = 0x80 - 0x28,
.task__threads__prev = 0x80 - 0x28 + 8,
.task__itk_space = 0x300,
.task__object_size = 0x628,
.thread__task_threads__next = 0x368 - 0x18,
.thread__task_threads__prev = 0x368 - 0x18 + 8,
.thread__map = 0x368,
.thread__thread_id = 0x400,
.thread__object_size = 0x4a8,
.uthread__object_size = 0x200,
.vm_map_entry__links__prev = 0x00,
.vm_map_entry__links__next = 0x08,
.vm_map_entry__links__start = 0x10,
.vm_map_entry__links__end = 0x18,
.vm_map_entry__store__entry__rbe_left = 0x20,
.vm_map_entry__store__entry__rbe_right = 0x28,
.vm_map_entry__store__entry__rbe_parent = 0x30,
.vnode__v_un__vu_specinfo = 0x78,
._vm_map__hdr__links__prev = 0x00 + 0x8,
._vm_map__hdr__links__next = 0x08 + 0x8,
._vm_map__hdr__links__start = 0x10 + 0x8,
._vm_map__hdr__links__end = 0x18 + 0x8,
._vm_map__hdr__nentries = 0x30,
._vm_map__hdr__rb_head_store__rbh_root = 0x38,
._vm_map__pmap = 0x40,
._vm_map__hint = 0x90 + 0x08,
._vm_map__hole_hint = 0x90 + 0x10,
._vm_map__holes_list = 0x90 + 0x18,
._vm_map__object_size = 0xc0,
.kernelcache__kernel_base = 0xfffffff007004000,
.kernelcache__cdevsw = 0xfffffff00a2f1288,
.kernelcache__gPhysBase = 0xfffffff0078f80e0,
.kernelcache__gPhysSize = 0xfffffff0078f80e0 + 8,
.kernelcache__gVirtBase = 0xfffffff0078f62b8,
.kernelcache__perfmon_devices = 0xfffffff00a32f500,
.kernelcache__perfmon_dev_open = 0xfffffff007ea9c8c,
.kernelcache__ptov_table = 0xfffffff0078ab160,
.kernelcache__vm_first_phys_ppnum = 0xfffffff00a32e990,
.kernelcache__vm_pages = 0xfffffff0078a7ea8,
.kernelcache__vm_page_array_beginning_addr = 0xfffffff0078aa110,
.kernelcache__vm_page_array_ending_addr = 0xfffffff00a32e988,
.kernelcache__vn_kqfilter = 0xfffffff007ef8ad8,
},
};
#endif /* dynamic_info_h */