Skip to content

Instantly share code, notes, and snippets.

@Proteas
Created May 20, 2022 04:29
Show Gist options
  • Select an option

  • Save Proteas/ece3fe3801d945f0d5e924560a7faac1 to your computer and use it in GitHub Desktop.

Select an option

Save Proteas/ece3fe3801d945f0d5e924560a7faac1 to your computer and use it in GitHub Desktop.

Revisions

  1. Proteas created this gist May 20, 2022.
    2,039 changes: 2,039 additions & 0 deletions diff-xnu-8020.140.20.0.4.md
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,2039 @@
    ## kernel
    * xnu-8020.140.20.0.4~14

    ### My Conclusion
    1. kernel heap hardening: `tag`, `type hash`
    * `kmem_alloc_guard`
    * `kmem_apply_security_policy`
    2. codesign, protecting the members with `DA Key`
    * csfg_get_*

    ### Deleted Functions
    * Count: 3

    ```
    0xFFFFFE00073508D0, _vm_page_validate_cs_mapped_slow
    0xFFFFFE0007391380, _vm_page_remove_from_backgroundq
    0xFFFFFE00073D0704, _cpu_stack_alloc
    ```

    ### Added Functions
    * Count: 15

    ```
    0xFFFFFE00072C06EC, _lck_ticket_lock_nopreempt
    0xFFFFFE00073539E8, _kmem_apply_security_policy
    0xFFFFFE0007353F4C, _kmem_addr_get_range
    0xFFFFFE0007353FF0, _kmem_entry_validate_guard
    0xFFFFFE0007A12FB4, IONVRAMCHRPHandler::~IONVRAMCHRPHandler()
    0xFFFFFE0007ACC8A0, _kalloc_hash_adjust
    0xFFFFFE0007ACD480, _kalloc_type_set_type_hash
    0xFFFFFE0007ACD538, _kalloc_type_set_type_hash_var
    0xFFFFFE0007AD27A4, ___kmem_failed_panic
    0xFFFFFE0007AD27E0, ___kmem_entry_validate_panic
    0xFFFFFE0007AD28A8, ___kmem_entry_not_found_panic
    0xFFFFFE0007AD291C, ___kmem_invalid_arguments_panic
    0xFFFFFE0007AD2960, ___kmem_entry_validate_object_panic
    0xFFFFFE0007AD2A0C, ___kmem_realloc_invalid_object_size_panic
    0xFFFFFE0007AD2F6C, ___vm_map_delete_misaligned_panic
    ```

    ### Changed Functions
    * Count: 990

    ```
    _mach_gss_init_sec_context
    _mach_gss_accept_sec_context
    _mach_gss_log_error
    _UNDExecute_rpc
    _UNDDisplayCustomFromBundle_rpc
    _UNDDisplayNoticeSimple_rpc
    _UNDDisplayAlertSimple_rpc
    _kern_stack_snapshot_internal
    _do_kern_dump
    _kdp_core_handle_new_encryption_key
    _kdp_core_polled_io_polled_file_available
    _kdp_core_init
    _aea_stage_initialize
    _aea_stage_free
    _buffer_stage_initialize
    _buffer_stage_free
    _disk_stage_free
    _progress_notify_stage_initialize
    _progress_notify_stage_free
    _shmem_stage_initialize
    _shmem_stage_free
    _zlib_stage_initialize
    _zlib_stage_free
    _memory_backing_aware_buffer_stage_initialize
    _memory_backing_aware_buffer_stage_free
    _ipc_entry_grow_table
    _ipc_kmsg_alloc
    _ipc_kmsg_alloc_uext_reply
    _ipc_kmsg_get_from_user
    _ipc_kmsg_get_from_kernel
    _ipc_kmsg_copyin_from_user
    _ipc_kmsg_clean_partial
    _ipc_port_request_grow
    _ipc_space_create
    _ipc_service_port_label_alloc
    _user_data_get_value
    _ivac_alloc
    _ivace_reference_by_value
    _mach_port_space_info
    _host_create_mach_voucher_trap
    _mach_voucher_extract_attr_recipe_trap
    _mach_port_names
    _mach_port_get_set_status
    _arcade_ast
    _ast_taken_user
    ___btlib_init
    ___btlib_grow
    ___btlib_rehash_and_lock
    _core_analytics_allocate_event
    _exception_deliver
    _hazard_retire
    _host_processors
    _host_processor_info
    _mig_user_allocate
    _mach_ports_lookup
    _kalloc_ext
    _kalloc_large
    _kalloc_external
    _kalloc_data_external
    _kalloc_type_impl_external
    _kfree_ext
    _kfree_large
    _vm_map_lookup_kalloc_entry_locked
    _kfree_addr_ext
    _krealloc_ext
    _kfree_data_addr_external
    _krealloc_data_external
    _kern_os_malloc_external
    _kern_os_free_external
    _kern_os_realloc_external
    _ledger_template_create
    _ledger_template_copy
    _ledger_entry_add_with_flags
    _ledger_template_info
    _ledger_get_task_entry_info_multiple
    _hw_lock_try_nopreempt
    _host_lockgroup_info
    _lck_ticket_lock
    _processor_set_things
    _sched_clutch_init_with_thread_group
    _stack_alloc
    _stack_collect
    _kernel_bootstrap
    _task_create_internal
    _task_get_vm_shared_region_id_and_jop_pid
    _task_collect_crash_info
    _task_duplicate_map_and_threads
    _task_threads_internal
    _task_add_turnstile_watchports
    _task_transfer_turnstile_watchports
    _task_dyld_process_info_notify_register
    _task_policy_update_complete_unlocked
    _thread_create_internal
    _turnstiles_init
    __zalloc_permanent
    _zone_expand_locked
    _zone_create_ext
    _zalloc_item
    _zalloc_item_slow
    _zalloc_item_fast
    _zone_unlock
    _zalloc_cached_slow
    _zalloc_cached_import
    _zfree_cached_slow
    _zfree_item
    _zone_reclaim
    _zone_defrag
    _zone_expand_async
    _zone_fill_initially
    _compute_zone_working_set_size
    _mach_memory_info
    _get_zone_info
    _zdestroy
    _get_vmmap_entries
    _get_vmsubmap_entries
    _exception_raise_state
    _exception_raise_state_identity
    __Xhost_processor_sets
    _mach_exception_raise_state
    _mach_exception_raise_state_identity
    _send_cpu_usage_violation
    _send_cpu_wakes_violation
    _send_disk_writes_violation
    _audit_analytics
    _send_nspace_resolve_path
    _send_vfs_resolve_file
    _send_vfs_resolve_dir
    _memory_object_control_uiomove
    _fill_procregioninfo
    _fill_vnodeinfoforaddr
    _fill_procregioninfo_onlymappedvnodes
    _find_region_details
    _find_vnode_object
    _vm_compressor_init
    _c_seg_alloc_nextslot
    _compressor_memory_object_create
    _vm_swap_reclaim
    _vm_swap_create_file
    _vm_compaction_swapper_do_init
    _vm_object_update
    _vm_fault_internal
    _vm_fault_enter
    _vm_fault_enter_prepare
    _vm_fault_attempt_pmap_enter
    _vm_fault_pmap_enter_with_object_lock
    _vm_fault_page
    _vm_fault_cleanup
    _vm_fault_zero_page
    _vm_page_validate_cs_fast
    _vm_page_map_and_validate_cs
    ___kheap_alloc
    _vm_fault_wire
    _vm_fault_unwire
    _vm_fault_copy
    _vm_fault_copy_dst_cleanup
    _vm_fault_copy_cleanup
    _kdp_lightweight_fault
    _vm_page_validate_cs
    _vm_page_validate_cs_mapped_chunk
    _revalidate_text_page
    _kernel_memory_allocate
    _kernel_memory_populate_object_and_unlock
    _kmem_alloc_contig
    _kmem_realloc
    _kmem_alloc_pages
    _kmem_free
    _kmem_realloc_down
    _kmem_alloc_external
    _kmem_alloc_kobject_external
    _kmem_alloc_pageable_external
    _kmem_suballoc
    _vm_map_set_cache_attr
    _vm_map_apple_protected
    _vm_map_clip_start
    _vm_map_clip_end
    _vm_map_enter_mem_object_helper
    _vm_map_enter
    _vm_map_destroy
    _vm_map_copy_adjust_to_target
    _vm_map_copy_discard
    _vm_map_enter_fourk
    _vm_map_entry_insert
    _vm_map_wire_nested
    _vm_map_delete
    _vm_map_unwire_nested
    _vm_map_submap_pmap_clean
    _vm_map_simplify_entry
    _vm_map_lookup_locked
    _vm_map_copy_adjust_get_target_copy_map
    _vm_map_copy_trim
    _vm_map_copyout_internal
    _vm_map_copyout_kernel_buffer
    _vm_map_copy_remap
    _vm_map_remove_and_unlock
    __vm_map_clip_start
    __vm_map_clip_end
    _vm_map_clip_unnest
    _vm_map_find_space
    _vm_map_protect
    _vm_map_remap
    _vm_map_remap_extract
    _vm_map_inherit
    _vm_map_terminate
    _vm_map_remove_flags
    _vm_map_copy_overwrite
    _vm_map_copy_overwrite_nested
    _vm_map_overwrite_submap_recurse
    _vm_map_copyin_internal
    _vm_map_fork
    _vm_map_corpse_footprint_collect
    _vm_map_footprint_query_page_info
    _vm_map_region_recurse_64
    _vm_map_region_walk
    _vm_map_region
    _vm_map_region_top_walk
    _vm_map_machine_attribute
    _vm_map_behavior_set
    _vm_map_msync
    _vm_map_purgable_control
    _vm_map_page_range_info_internal
    _vm_named_entry_associate_vm_object
    _vm_named_entry_to_vm_object
    _vm_map_partial_reap
    _vm_map_entry_should_cow_for_true_share
    _vm_map_query_volatile
    _vm_map_entry_cs_associate
    _vm_decmp_upl_reprioritize
    _vm_object_copy_slowly
    _vm_pageout_throttle_up
    _vm_pageout_initialize_page
    _vm_pageout_cluster
    _vm_pageout_scan
    _vm_pageout_compress_page
    _vm_pageout_iothread_external_continue
    _vm_pageout_internal_start
    _vm_object_upl_request
    _upl_create
    _vm_map_create_upl
    _vm_object_iopl_request
    _vm_map_enter_upl_range
    _vm_map_remove_upl_range
    _upl_commit_range
    _vm_paging_map_object
    _vm_paging_unmap_object
    _vector_upl_create
    _vector_upl_set_pagelist
    _vm_purgeable_token_add
    _vm_page_insert_internal
    _vm_page_deactivate_internal
    _vm_page_queues_remove
    _vm_page_speculate
    _vm_page_enqueue_inactive
    _vm_page_add_to_backgroundq
    _vm_page_replace
    _vm_page_free_prepare_queues
    _vm_page_remove
    _vm_page_remove_internal
    _vm_page_lookup
    _vm_page_rename
    _vm_page_activate
    _vm_page_enqueue_active
    _vm_page_update_background_state
    _cpm_allocate
    _vm_page_wire
    _vm_page_unwire
    _vm_page_check_pageable_safe
    _vm_page_enqueue_cleaned
    _vm_page_reactivate_all_throttled
    _vm_page_reactivate_local
    _vm_page_copy
    _hibernate_flush_queue
    _hibernate_consider_discard
    _hibernate_discard_page
    _hibernate_rebuild_vm_structs
    _kern_allocation_name_allocate
    _vm_page_diagnose
    _vm_shared_region_auth_remap
    _find_mapping_to_slide
    _vm_shared_region_map_file
    _vm_shared_region_map_file_setup
    _vm_shared_region_slide
    _vm_shared_region_map_file_final
    _shared_region_pager_data_request
    _shared_region_key_alloc
    _swapfile_pager_data_request
    _mach_vm_deallocate
    _vm_deallocate
    _mach_vm_page_range_query
    _mach_make_memory_entry_internal
    _vm_map_get_phys_page
    _kperf_action_set_count
    _kppet_thread
    _kptimer_set_count
    _kpc_register_cpu
    _perfmon_config_create
    _console_init
    _vc_progress_set
    _internal_enable_progressmeter
    _initialize_screen
    _gc_enable
    _telemetry_init
    _telemetry_process_sample
    _telemetry_ast
    _telemetry_macf_mark_curthread
    _bootprofile_init
    _apple_protect_pager_data_request
    _fourk_pager_data_request
    _rorgn_lockdown
    _cpu_data_free
    _arm_vm_prot_finalize
    _io_map_with_prot
    _ml_processor_register
    _hibernate_page_list_allocate
    _ppl_hmac_init
    _hv_vcpu_destroy
    _hv_trap_vcpu_create
    _hv_trap_vcpu_destroy
    _nfs4_init_clientid
    _nfs4_parsefattr
    _nfsm_chain_add_fattr4_f
    _nfs4_reopen
    _nfs4_open_rpc_internal
    _nfs4_claim_delegated_open_rpc
    _nfs4_open
    _nfs4_open_reclaim_rpc
    _nfs4_named_attr_dir_get
    _nfs4_named_attr_get
    _nfs_buf_release
    _nfs_buf_get
    _nfs_gss_clnt_ctx_find_principal
    _nfs_gss_clnt_ctx_copy
    _nfs_gss_clnt_ctx_init_retry
    _nfs_gss_mach_alloc_buffer
    _nfs_gss_clnt_verf_get
    _nfs_gss_clnt_ctx_get_principal
    _nfs_gss_svc_cred_get
    _nfs_gss_svc_ctx_init
    _nfs_nget
    _nfsrv_readdirplus
    _nfsrv_readdir
    _nfsrv_symlink
    _nfsrv_write
    _nfsrv_read
    _nfsrv_readlink
    _nfsrv_init
    _nfsrv_writegather
    _nfs_socket_create
    _nfs_connect
    _nfs_request_finish
    _xb_add_bytes
    _nfs_loadattrcache
    _nfs_getattrcache
    _nfsrv_hang_addrlist
    _nfsrv_export
    _nfs_vfs_sysctl
    _nfs_vfs_mount
    _mountnfs
    _nfs4_mount
    _nfs4_mount_update_path_with_symlink
    _nfs_refresh_fh
    _nfs_lookitup
    _nfs_dulookup_init
    _nfs_vnop_ioctl
    _mbuf_walk
    _krb5_mic
    _cc_key_schedule_create
    _krb5_key_derivation
    _krb5_mic_mbuf
    _krb5_crypt_mbuf
    _krb5_3des_key_derivation
    _gss_krb5_cfx_get_mic
    _gss_krb5_cfx_get_mic_mbuf
    _krb5_cfx_crypt_mbuf
    _gss_krb5_cfx_wrap_mbuf
    _gss_krb5_3des_token_put
    _gss_krb5_3des_wrap_mbuf
    _gss_krb5_make_context
    _netboot_mountroot
    _dtrace_register
    _dtrace_strref
    _dtrace_ecb_create_enable
    _dtrace_hash_add
    _dtrace_probe_create
    _dtrace_meta_register
    _dtrace_proc_fork
    _dtrace_lazy_dofs_process
    _dtrace_helper_slurp
    _dtrace_dof_slurp
    _dtrace_dof_difo
    _dtrace_difo_init
    _dtrace_state_create
    __dtrace_ioctl
    _dtrace_dof_copyin
    _dtrace_state_go
    _dtrace_state_buffer
    _helper_ioctl
    _dtrace_init
    _dtrace_postinit
    _dtrace_module_loaded
    _dtrace_toxrange_add
    _dtrace_helpers_duplicate
    _dtrace_difo_duplicate
    _cyclic_add_omni
    _dt_kmem_zalloc_tag
    _blist_create
    _fbt_provide_module
    _fbt_init
    _sdt_load_machsect
    _sdt_init
    _sdt_provide_module
    ___sdt_provide_module
    _machtrace_provide
    _systrace_provide
    _profile_create
    _fasttrap_tracepoint_retire
    _fasttrap_init
    _fasttrap_provider_lookup
    _fasttrap_meta_create_probe
    __fasttrap_ioctl
    _bsd_startupearly
    _perfmon_dev_open
    _vfs_attr_pack_internal
    _getvolattrlist
    _readdirattr
    _get_direntry
    _setattrlist_internal
    _allocbuf
    _grab_memory_for_meta_buf
    _bcleanbuf
    _buf_brelse
    _buffer_cache_gc
    _add_name_internal
    _nchinit
    _round_page.10963
    _cluster_write_direct
    _sparse_cluster_push
    _vfs_drt_alloc_map
    _cluster_push_err
    _cluster_release
    _vfs_opv_init
    _vfsinit
    _sysctl_vfs_vfslist
    _vfs_iterate
    _set_package_extensions_table
    _rmdir_remove_orphaned_appleDouble
    ___mac_mount
    _dounmount_submounts
    ___mac_getfsstat
    _openbyid_np
    _access_extended
    _vnode_readdir64
    _searchfs
    _fsctl_internal
    _setxattr
    _fsgetpath_extended
    _utf8_normalizestr
    _vn_read_swapfile
    _vn_stat_noauth
    _open_xattrfile
    _get_xattrinfo
    _shift_data_down
    _shift_data_up
    _vnode_getnamedstream
    _vnode_flushnamedstream
    _vfs_fsadd
    _vnode_getattr
    _vnode_get_filesec
    _VNOP_SETATTR
    _xattrfile_remove
    _vn_rename
    _fseventsioctl
    _fseventsf_ioctl
    _devfs_fdesc_init
    _dev_add_node
    _devfs_remove
    _devfs_make_node_internal
    _decmpfs_fetch_compressed_header
    _decmpfs_decompress_file
    _bpf_make_dev_t
    _bpf_setf
    _bpf_setif
    _bridge_clone_create
    _bridge_ioctl_gmnelist
    _bridge_ioctl_gifsstp64
    _bridge_rthash_delayed_resize
    _bridge_ioctl_rts64
    _bridge_ioctl_gifs64
    _bridge_ioctl_gifsstp32
    _bridge_ioctl_rts32
    _bridge_ioctl_gifs32
    _if_next_index
    _if_clone_attach
    _if_add_netagent_locked
    _ifioctl
    _ifioctl_iforder
    _ifioctl_get_protolist
    _copy_and_normalize
    _dlil_event_internal
    _dlil_if_acquire
    _ether_add_proto
    _bond_ioctl
    _ndrv_sockaddr
    _ndrv_peeraddr
    _ndrv_connect
    _ndrv_ctloutput
    _rn_init
    _raw_usockaddr
    _raw_upeeraddr
    _rt_setgate
    _sysctl_rtsock
    _rt_msg2
    _route_output
    _nstat_control_send
    _nstat_sysinfo_send_data
    _nstat_route_connect_attempt
    _nstat_route_connect_success
    _nstat_route_tx
    _nstat_route_rx
    _nstat_route_rtt
    _nstat_route_update
    _nstat_userland_get_snapshot
    _nstat_userland_list_snapshot
    _gif_ioctl
    _sysctl_get_ports_used
    _ifnet_allocate_extended
    _ifnet_get_address_list_family_internal
    _ifnet_get_multicast_list
    _ifnet_list_get_common
    _sysctl_if_family_ids
    _net_str_id_find_internal
    _utun_ctl_send
    _necp_policy_apply_all
    _necp_policy_apply
    _necp_session_action
    _necp_init
    _necp_application_find_policy_match_internal
    _necp_create_nexus_assign_message
    _necp_client_update_observer_add_internal
    _necp_client_update_observer_update_internal
    _necp_destroy_client
    _necp_client_add
    _necp_client_list
    _necp_client_add_flow
    _necp_client_agent_action
    _necp_client_sign
    _necp_client_add_interface_option_if_needed
    _necp_match_policy
    _necp_set_socket_attributes
    _necp_set_socket_attribute
    _necp_get_socket_attributes
    _necp_set_socket_domain_attributes
    _netagent_ctl_setopt
    _netagent_ctl_send
    _netagent_send_success_response
    _netagent_send_error_response
    _netagent_register
    _netagent_ioctl
    _netagent_send_trigger
    _netagent_client_message_with_params
    _netagent_send_tokens_needed
    _pfi_initialize
    _pfi_address_add
    _pfioctl
    _pf_setup_pfsync_matching
    _pf_find_or_create_ruleset
    _pf_anchor_setup
    _pf_anchor_copyout
    _lltable_allocate_htbl
    _restricted_in_port_init
    _netem_config
    _dhcpol_parse_buffer
    _dhcpol_parse_packet
    _inp_findmoptions
    _imo_grow
    _inp_getmoptions
    _inp_setmoptions
    _in_getsockaddr
    _in_getpeeraddr
    _get_pcblist_n
    _heap_insert
    _ip_dn_ctl
    _set_fs_parms
    _ip_init
    _rip_pcblist
    _rip_pcblist64
    _rip_init
    _tcp_cache_init
    _tcp_pcblist
    _tcp_pcblist64
    _udp_pcblist
    _udp_pcblist64
    _udp_init
    _udp_ctloutput
    _flow_divert_connect_out_internal
    _flow_divert_find_proc_by_uuid_filter
    _flow_divert_input
    _flow_divert_kctl_connect
    _mp_getsockaddr
    _mp_getpeeraddr
    _mptcp_session_necp_cb
    _mptcp_pcblist
    _mptcp_subflow_add
    _ah_hmac_sha2_512_init
    _ah_hmac_sha2_384_init
    _ah_hmac_sha2_256_init
    _ah_keyed_sha1_init
    _ah_keyed_md5_init
    _ah_hmac_sha1_init
    _ah_hmac_md5_init
    _ah4_input
    _ah6_input
    _esp_cbc_encrypt
    _esp_cbc_decrypt
    _esp_schedule
    _in6_sin_2_v4mapsin6_in_sock
    _in6_cga_start
    _ip6_init
    _ip6_setpktopt
    _copypktopts
    _ip6_getmoptions
    _ip6_setmoptions
    _in6p_findmoptions
    _in6_sockaddr
    _sysctl_cga_parameters
    _key_timehandler
    _key_getsastat
    _key_spddump
    _key_dump
    _key_newsav
    _key_setsaval
    _keydb_newsecreplay
    _audit_arg_opaque
    _audit_arg_data
    _audit_arg_argv
    _audit_arg_envv
    _audit_identity_info_construct
    _kaudit_to_bsm
    _au_to_arg32
    _au_to_arg64
    _au_to_attr32
    _au_to_data
    _au_to_ipc_perm
    _au_to_text
    _au_to_path
    _au_to_process32_ex
    _au_to_socket_ex
    _au_to_sock_unix
    _au_to_sock_inet128
    _au_to_sock_inet
    _au_to_subject32
    _au_to_subject32_ex
    _au_to_exec_args
    _au_to_exec_env
    _au_to_identity
    _au_to_header32_ex_tm
    _audit_arg_mac_string
    _audit_pipe_append
    _audit_sdev_submit
    _audit
    _bsd_init
    _create_buffers
    _delete_buffers
    _kernel_triage_extract
    _kdbg_control
    _kdbg_thrmap_init
    _kdbg_write_thread_map
    __copyout_cpu_map
    __copy_cpu_map
    _kdebug_trace_start
    _aio_suspend_nocancel
    _kauth_acl_inherit
    _kauth_acl_alloc
    _kauth_copyinfilesec
    _kauth_filesec_alloc
    _coredump
    _csfg_get_platform_binary
    _csfg_get_supplement_platform_binary
    _csfg_get_signer_type
    _csfg_get_supplement_signer_type
    _csfg_get_teamid
    _csfg_get_supplement_teamid
    _csfg_get_prod_signed
    _csfg_get_supplement_prod_signed
    _fdt_fork
    _fdalloc
    _sys_fcntl_nocancel
    _kevt_pcblist
    _kevent_register
    _kqworkloop_hash_init
    _kevent_copyout_proc_dynkqids
    _pid_kqueue_extinfo
    _kctl_reg_list
    _kctl_pcblist
    _ctl_peeraddr
    _ctl_ctloutput
    _ctl_register
    _exec_mach_imgact
    _posix_spawn
    _proc_prepareexit
    __MALLOC_external
    _STRDUP_external
    _OSMalloc_external
    _OSMalloc_nowait
    _OSFree_external
    _mincore
    _build_userspace_exit_reason
    _hashinit
    _uio_create
    _uio_duplicate
    _sysctl_handle_kern_threadname
    _sysctl_sched_stats
    _sysctl_procargsx
    _sysctl_get_owned_vmobjects
    _sysctl_sysctl_name2oid
    _sysctl
    _sys_sysctlbyname
    _memorystatus_init
    _memorystatus_control
    _sysctl_set_osenvironment
    _sysctl_kern_msgbuf
    _oslog_streamopen
    _oslog_stream
    _log_dmesg
    _sbuf_new
    _sbuf_ensure_capacity
    _sysctl_coredump_encryption_key_update
    _ioctl
    _select_internal
    _poll_nocancel
    _log_data
    _pipe
    _pipe_write
    _persona
    _ulock_initialize
    _ttymalloc
    _ptmx_get_ioctl
    _clalloc
    _putc
    _b_to_q
    _csblob_register_profile
    _cs_blob_cleanup
    _ubc_cs_blob_allocate
    _ubc_cs_blob_add
    _ubc_cs_blob_add_supplement
    _mbuf_drain_locked
    _mbinit
    _m_clalloc
    _soreceive_addr
    _bind
    _connect_nocancel
    _connectx
    _sendit
    _sendmsg_x
    _recvmsg_x
    _uipc_sockaddr
    _unp_connect
    _uipc_peeraddr
    _uipc_bind
    _uipc_accept
    _unp_pcblist
    _unp_pcblist64
    _unp_gc
    _unp_externalize
    _vsock_sockaddr
    _vsock_peeraddr
    _vsock_accept
    _shminit
    _shm_delete_mapping
    _shmsys
    _shmfork
    _semsys
    _semundo_adjust
    _msginit
    _parse_machfile
    _map_segment
    _pshm_mmap
    _sock_bind
    _sock_connect
    _sock_send_internal
    _proc_listpids
    _proc_pidinfo
    _proc_listcoalitions
    _bsd_setthreadname
    _proc_pidfdlist
    _proc_pidlistthreads
    _proc_pidpathinfo
    _proc_pidfileportlist
    _proc_pidlistuptrs
    _bsd_copythreadname
    _os_reason_alloc_buffer_internal
    _tracker_action
    _tracker_dump
    _soflow_get_flow
    _shared_region_map_and_slide_np
    _shared_region_map_and_slide_setup
    _shared_region_map_and_slide_2_np
    _kas_info
    _vnode_trim_list
    _imageboot_read_file_internal
    _imageboot_setup
    _kpc_sysctl
    _sysctl_getset_bigarray
    _grab_pgo_data
    _protons_stats_sysctl
    ___channel_open
    _cuckoo_hashtable_create
    _skmem_arena_mib_get_sysctl
    _skmem_cache_mib_get_sysctl
    _skmem_cache_create
    _skmem_cache_update_func
    _skmem_region_mib_get_sysctl
    _skmem_region_update_func
    _skmem_region_create
    _nexus_provider_list_sysctl
    _nexus_channel_list_sysctl
    _nexus_mib_get_sysctl
    _nxctl_nexus_bind
    _nxctl_get_nexus_prov_list
    _nxctl_get_nexus_list
    _nxctl_get_channel_list
    _nx_port_grow
    _na_rings_mem_setup
    _fsw_flow_add
    _flow_owner_buckets_alloc
    _flow_route_buckets_alloc
    _flow_route_id_buckets_alloc
    _nx_mon_na_activate_common
    _nx_netif_get_llink_info
    _nx_netif_na_activate
    _nx_netif_compat_na_activate
    _nx_netif_netagent_flow_bind
    _nx_netif_netagent_fill_port_info
    _nx_netif_qset_create
    _nx_netif_default_llink_config
    _nx_upipe_na_find
    OSMetaClass::OSMetaClass(char const*,OSMetaClass const*,uint)
    OSMetaClass::preModLoad(char const*)
    OSObject::operator new(ulong)
    _OSObject_typed_operator_new
    OSArray::initWithCapacity(uint)
    OSArray::ensureCapacity(uint)
    OSArray::MetaClass::alloc(void)
    OSArray::operator new(ulong)
    OSCollectionIterator::initializeIteratorStorage(void)
    OSData::ensureCapacity(uint)
    OSData::initWithCapacity(uint)
    OSData::free(void)
    OSData::MetaClass::alloc(void)
    OSData::operator new(ulong)
    OSData::clipForCopyout(void)
    OSDictionary::initWithCapacity(uint)
    OSDictionary::flushCollection(void)
    OSDictionary::ensureCapacity(uint)
    OSDictionary::MetaClass::alloc(void)
    OSDictionary::operator new(ulong)
    _OSKextVLog
    OSKext::getPropertyForHostArch(char const*)
    OSKext::copyInfo(OSArray *)
    OSKext::loadExecutable(void)
    OSKext::saveLoadedKextPanicList(void)
    OSKext::updateLoadedKextSummaries(void)
    __ZN25OSKextSavedMutableSegment11withSegmentEP18segment_command_64
    OSKextSavedMutableSegment::free(void)
    OSKext::serializeLogInfo(OSArray *,char **,uint *)
    OSKext::handleRequest(host *,uint,char *,uint,char **,uint *,char **,uint *)
    OSNumber::MetaClass::alloc(void)
    OSNumber::operator new(ulong)
    OSOrderedSet::initWithCapacity(uint,int (*)(OSMetaClassBase const*,OSMetaClassBase const*,void *),void *)
    OSOrderedSet::ensureCapacity(uint)
    operator new(ulong)
    operator new[](ulong)
    OSSerialize::ensureCapacity(uint)
    OSSerialize::initWithCapacity(uint)
    OSSerialize::free(void)
    OSSet::MetaClass::alloc(void)
    OSSet::operator new(ulong)
    OSString::initWithCString(char const*)
    OSString::MetaClass::alloc(void)
    OSString::operator new(ulong)
    OSString::initWithStringOfLength(char const*,ulong)
    OSSymbolPool::removeSymbol(OSSymbol *)
    OSSymbolPool::reconstructSymbols(bool)
    OSSymbolPool::insertSymbol(OSSymbol *)
    OSSymbol::MetaClass::alloc(void)
    OSSymbol::initialize(void)
    OSSymbol::operator new(ulong)
    OSUnserializeparse(void)
    OSUnserializeXMLparse(void *)
    getString(parser_state *,int *)
    OSUnserializeBinary(char const*,ulong,OSString **)
    _kext_request
    __os_log_with_args_internal
    _log_queue_memory_handler
    __Block_copy
    __Block_object_assign
    _IOHibernateSystemSleep
    IOHibernateDone(IOHibernateVars *)
    _IOLibInit
    _IOMalloc_internal
    _IOMalloc_external
    _IOMallocZero_external
    _IOMallocAligned_internal
    _IOFreeAligned_internal
    _IOKernelFreePhysical
    _IOKernelAllocateWithPhysicalRestrict
    _IOMallocContiguous
    _IOMallocTypeImpl
    IOMallocPageableCallback(_vm_map *,void *)
    _IOFreePageable
    _IOMallocData_external
    _IOMallocZeroData_external
    _IOMallocTypeVarImpl
    IODeviceTreeAlloc(void *)
    IODTSetResolving(IORegistryEntry *,long long (*)(uint,uint *,uint *),void (*)(IORegistryEntry *,uchar *,uchar *,uchar *))
    IORegistryIterator::iterateOver(IORegistryEntry *,IORegistryPlane const*,uint)
    IORegistryEntry::setIndexedProperty(uint,OSObject *)
    IOService::resolveInterrupt(IOService*,int)
    IOServicePH::systemHalt(int)
    IOService::addInterruptStatistics(IOInterruptAccountingData *,int)
    IOService::notifyControllingDriver(void)
    IOService::notifyInterestedDrivers(void)
    IOCommandGate::MetaClass::alloc(void)
    IOCommandGate::operator new(ulong)
    IOBufferMemoryDescriptor::initWithPhysicalMask(task *,uint,ulong long,ulong long,ulong long)
    IOBufferMemoryDescriptor::free(void)
    IOBufferMemoryDescriptor::MetaClass::alloc(void)
    IOBufferMemoryDescriptor::operator new(ulong)
    IODMACommand::MetaClass::alloc(void)
    IODMACommand::operator new(ulong)
    IOInterleavedMemoryDescriptor::initWithCapacity(ulong long,uint)
    IOMemoryDescriptor::createMappingInTask(task *,ulong long,uint,ulong long,ulong long)
    IOGeneralMemoryDescriptor::memoryReferenceMap(IOMemoryReference *,_vm_map *,ulong long,ulong long,uint,ulong long *)
    IOGeneralMemoryDescriptor::memoryReferenceMapNew(IOMemoryReference *,_vm_map *,ulong long,ulong long,uint,ulong long *)
    IOGeneralMemoryDescriptor::initWithOptions(void *,uint,uint,task *,uint,IOMapper *)
    IOGeneralMemoryDescriptor::MetaClass::alloc(void)
    IOMemoryMap::MetaClass::alloc(void)
    IOGeneralMemoryDescriptor::operator new(ulong)
    IOMemoryMap::operator new(ulong)
    IOMultiMemoryDescriptor::initWithDescriptors(IOMemoryDescriptor **,uint,uint,bool)
    IOGuardPageMemoryDescriptor::MetaClass::alloc(void)
    IOGuardPageMemoryDescriptor::operator new(ulong)
    IOCPUInterruptController::initCPUInterruptController(int,int)
    IOSharedInterruptController::initInterruptController(IOInterruptController *,OSData *)
    IOMachPort::MetaClass::alloc(void)
    IOMachPort::withObjectAndType(OSObject *,uint)
    IODataQueue::initWithCapacity(uint)
    IODataQueue::free(void)
    IOSharedDataQueue::initWithCapacity(uint)
    IOSharedDataQueue::free(void)
    IOStatistics::getStatistics(sysctl_req *)
    IOStatistics::getWorkLoopStatistics(sysctl_req *)
    IOStatistics::getUserClientStatistics(sysctl_req *)
    IODataQueueDispatchSource::init(void)
    OSActionCreateWithTypeNameInternal(OSObject *,ulong long,ulong long,ulong,OSString *,bool,OSAction **)
    IOUserServer::copyInObjects(IORPCMessageMach *,IORPCMessage *,ulong,bool,bool)
    IOUserServer::objectInstantiate(OSObject *,IORPC,IORPCMessage *)
    _IOVnodeGetEntitlement
    IOPerfControlClient::init(IOService *,ulong long)
    IOSKMemoryBuffer::MetaClass::alloc(void)
    IOSKMapper::initWithTask(task *,IOSKArena *)
    _IOSKMemoryBufferCreate
    _IOSKRegionCreate
    IOUnifiedAddressTranslator::doMap(IOMemoryDescriptor *,ulong long,ulong long,uint)
    IOPMrootDomain::setPMSetting(OSSymbol const*,OSObject *)
    cpu_boot_thread(void *,int)
    _mac_policy_register
    _mac_externalize
    _mac_do_get
    _mac_do_set
    _kalloc_type_view_copy
    _kalloc_type_view_init_fixed
    _kalloc_type_views_init
    _kalloc_zones_init
    _kheap_startup_init
    _waitq_bootstrap
    _zone_cram_early
    _zone_lock_was_contended
    _vm_rtfault_record_init
    _kmem_range_init
    _kmem_scramble_ranges
    ___kma_failed_panic
    _vm_map_relocate_early_elem
    ___vm_map_delete_loose_atomic_panic
    _vm_paging_map_init
    _panic_kernel
    _oslog_init_firehose
    _skmem_dump
    _sysctl_load_brand_string
    _oslog_init_logmem
    _log_queue_init_memory
    ```

    #### `kalloc_ext` & `krealloc_ext`
    * changes caused by the arg type changing of `kalloc_ext` & `krealloc_ext`

    * Count: 670
    ```
    _mach_gss_init_sec_context
    _mach_gss_accept_sec_context
    _mach_gss_log_error
    _UNDExecute_rpc
    _UNDDisplayCustomFromBundle_rpc
    _UNDDisplayNoticeSimple_rpc
    _UNDDisplayAlertSimple_rpc
    _kdp_core_handle_new_encryption_key
    _kdp_core_polled_io_polled_file_available
    _ipc_entry_grow_table
    _ipc_kmsg_alloc
    _ipc_kmsg_alloc_uext_reply
    _ipc_kmsg_get_from_user
    _ipc_kmsg_get_from_kernel
    _ipc_kmsg_copyin_from_user
    _ipc_port_request_grow
    _ipc_space_create
    _ipc_service_port_label_alloc
    _user_data_get_value
    _ivac_alloc
    _ivace_reference_by_value
    _host_create_mach_voucher_trap
    _mach_voucher_extract_attr_recipe_trap
    _arcade_ast
    _ast_taken_user
    ___btlib_init
    ___btlib_rehash_and_lock
    _core_analytics_allocate_event
    _exception_deliver
    _hazard_retire
    _host_processors
    _mig_user_allocate
    _mach_ports_lookup
    _kalloc_external
    _kalloc_data_external
    _kalloc_type_impl_external
    _krealloc_data_external
    _kern_os_malloc_external
    _kern_os_realloc_external
    _ledger_template_create
    _ledger_template_copy
    _ledger_entry_add_with_flags
    _ledger_template_info
    _ledger_get_task_entry_info_multiple
    _processor_set_things
    _sched_clutch_init_with_thread_group
    _kernel_bootstrap
    _task_create_internal
    _task_get_vm_shared_region_id_and_jop_pid
    _task_collect_crash_info
    _task_duplicate_map_and_threads
    _task_threads_internal
    _task_add_turnstile_watchports
    _task_transfer_turnstile_watchports
    _task_dyld_process_info_notify_register
    _task_policy_update_complete_unlocked
    _thread_create_internal
    _exception_raise_state
    _exception_raise_state_identity
    __Xhost_processor_sets
    _mach_exception_raise_state
    _mach_exception_raise_state_identity
    _send_cpu_usage_violation
    _send_cpu_wakes_violation
    _send_disk_writes_violation
    _audit_analytics
    _send_nspace_resolve_path
    _send_vfs_resolve_file
    _send_vfs_resolve_dir
    _c_seg_alloc_nextslot
    _compressor_memory_object_create
    _vm_swap_create_file
    _vm_compaction_swapper_do_init
    _vm_fault_enter_prepare
    ___kheap_alloc
    _revalidate_text_page
    _vm_map_copy_adjust_to_target
    _vm_map_copyin_internal
    _vm_decmp_upl_reprioritize
    _upl_create
    _vector_upl_create
    _vector_upl_set_pagelist
    _kern_allocation_name_allocate
    _vm_shared_region_map_file
    _vm_shared_region_slide
    _vm_shared_region_map_file_final
    _shared_region_key_alloc
    _mach_vm_page_range_query
    _kperf_action_set_count
    _kppet_thread
    _kpc_register_cpu
    _perfmon_config_create
    _vc_progress_set
    _internal_enable_progressmeter
    _gc_enable
    _telemetry_process_sample
    _telemetry_ast
    _hibernate_page_list_allocate
    _nfs4_init_clientid
    _nfs4_parsefattr
    _nfsm_chain_add_fattr4_f
    _nfs4_reopen
    _nfs4_open_rpc_internal
    _nfs4_claim_delegated_open_rpc
    _nfs4_open
    _nfs4_open_reclaim_rpc
    _nfs4_named_attr_dir_get
    _nfs4_named_attr_get
    _nfs_buf_get
    _nfs_gss_clnt_ctx_find_principal
    _nfs_gss_clnt_ctx_copy
    _nfs_gss_clnt_ctx_init_retry
    _nfs_gss_clnt_verf_get
    _nfs_gss_clnt_ctx_get_principal
    _nfs_gss_svc_cred_get
    _nfs_gss_svc_ctx_init
    _nfs_nget
    _nfsrv_readdirplus
    _nfsrv_readdir
    _nfsrv_symlink
    _nfsrv_write
    _nfsrv_read
    _nfsrv_readlink
    _nfsrv_init
    _nfsrv_writegather
    _nfs_socket_create
    _nfs_connect
    _nfs_request_finish
    _xb_add_bytes
    _nfs_loadattrcache
    _nfs_getattrcache
    _nfsrv_hang_addrlist
    _nfsrv_export
    _nfs_vfs_sysctl
    _nfs_vfs_mount
    _mountnfs
    _nfs4_mount
    _nfs4_mount_update_path_with_symlink
    _nfs_refresh_fh
    _nfs_lookitup
    _nfs_dulookup_init
    _nfs_vnop_ioctl
    _mbuf_walk
    _krb5_mic
    _cc_key_schedule_create
    _krb5_key_derivation
    _krb5_mic_mbuf
    _krb5_crypt_mbuf
    _krb5_3des_key_derivation
    _gss_krb5_cfx_get_mic
    _gss_krb5_cfx_get_mic_mbuf
    _krb5_cfx_crypt_mbuf
    _gss_krb5_cfx_wrap_mbuf
    _gss_krb5_3des_token_put
    _gss_krb5_3des_wrap_mbuf
    _gss_krb5_make_context
    _netboot_mountroot
    _dtrace_register
    _dtrace_strref
    _dtrace_ecb_create_enable
    _dtrace_hash_add
    _dtrace_probe_create
    _dtrace_meta_register
    _dtrace_proc_fork
    _dtrace_lazy_dofs_process
    _dtrace_helper_slurp
    _dtrace_dof_slurp
    _dtrace_dof_difo
    _dtrace_difo_init
    _dtrace_state_create
    __dtrace_ioctl
    _dtrace_dof_copyin
    _dtrace_state_go
    _dtrace_state_buffer
    _helper_ioctl
    _dtrace_init
    _dtrace_postinit
    _dtrace_module_loaded
    _dtrace_toxrange_add
    _dtrace_helpers_duplicate
    _dtrace_difo_duplicate
    _cyclic_add_omni
    _dt_kmem_zalloc_tag
    _blist_create
    _fbt_provide_module
    _fbt_init
    _sdt_load_machsect
    _sdt_init
    _sdt_provide_module
    ___sdt_provide_module
    _machtrace_provide
    _systrace_provide
    _profile_create
    _fasttrap_tracepoint_retire
    _fasttrap_init
    _fasttrap_provider_lookup
    _fasttrap_meta_create_probe
    __fasttrap_ioctl
    _perfmon_dev_open
    _vfs_attr_pack_internal
    _getvolattrlist
    _readdirattr
    _get_direntry
    _setattrlist_internal
    _grab_memory_for_meta_buf
    _add_name_internal
    _nchinit
    _vfsinit
    _sysctl_vfs_vfslist
    _vfs_iterate
    _set_package_extensions_table
    _rmdir_remove_orphaned_appleDouble
    ___mac_mount
    _dounmount_submounts
    ___mac_getfsstat
    _openbyid_np
    _access_extended
    _vnode_readdir64
    _searchfs
    _fsctl_internal
    _setxattr
    _fsgetpath_extended
    _utf8_normalizestr
    _vn_read_swapfile
    _vn_stat_noauth
    _open_xattrfile
    _get_xattrinfo
    _shift_data_down
    _shift_data_up
    _vnode_getnamedstream
    _vnode_flushnamedstream
    _vfs_fsadd
    _vnode_getattr
    _vnode_get_filesec
    _VNOP_SETATTR
    _xattrfile_remove
    _vn_rename
    _fseventsioctl
    _fseventsf_ioctl
    _devfs_fdesc_init
    _dev_add_node
    _devfs_remove
    _devfs_make_node_internal
    _decmpfs_fetch_compressed_header
    _decmpfs_decompress_file
    _bpf_make_dev_t
    _bpf_setf
    _bpf_setif
    _bridge_clone_create
    _bridge_ioctl_gmnelist
    _bridge_ioctl_gifsstp64
    _bridge_rthash_delayed_resize
    _bridge_ioctl_rts64
    _bridge_ioctl_gifs64
    _bridge_ioctl_gifsstp32
    _bridge_ioctl_rts32
    _bridge_ioctl_gifs32
    _if_next_index
    _if_clone_attach
    _if_add_netagent_locked
    _ifioctl
    _ifioctl_iforder
    _ifioctl_get_protolist
    _copy_and_normalize
    _dlil_event_internal
    _dlil_if_acquire
    _ether_add_proto
    _bond_ioctl
    _ndrv_sockaddr
    _ndrv_peeraddr
    _ndrv_connect
    _ndrv_ctloutput
    _raw_usockaddr
    _raw_upeeraddr
    _rt_setgate
    _sysctl_rtsock
    _rt_msg2
    _route_output
    _nstat_control_send
    _nstat_sysinfo_send_data
    _nstat_route_connect_attempt
    _nstat_route_connect_success
    _nstat_route_tx
    _nstat_route_rx
    _nstat_route_rtt
    _nstat_route_update
    _nstat_userland_get_snapshot
    _nstat_userland_list_snapshot
    _gif_ioctl
    _sysctl_get_ports_used
    _ifnet_allocate_extended
    _ifnet_get_address_list_family_internal
    _ifnet_get_multicast_list
    _ifnet_list_get_common
    _sysctl_if_family_ids
    _necp_policy_apply_all
    _necp_policy_apply
    _necp_session_action
    _necp_init
    _necp_create_nexus_assign_message
    _necp_client_update_observer_add_internal
    _necp_client_update_observer_update_internal
    _necp_destroy_client
    _necp_client_add
    _necp_client_list
    _necp_client_add_flow
    _necp_client_agent_action
    _necp_client_sign
    _necp_client_add_interface_option_if_needed
    _necp_match_policy
    _necp_set_socket_attributes
    _necp_set_socket_attribute
    _necp_get_socket_attributes
    _necp_set_socket_domain_attributes
    _netagent_ctl_setopt
    _netagent_ctl_send
    _netagent_send_success_response
    _netagent_send_error_response
    _netagent_register
    _netagent_ioctl
    _netagent_send_trigger
    _netagent_client_message_with_params
    _netagent_send_tokens_needed
    _pfi_initialize
    _pfi_address_add
    _pfioctl
    _pf_setup_pfsync_matching
    _pf_find_or_create_ruleset
    _pf_anchor_setup
    _pf_anchor_copyout
    _lltable_allocate_htbl
    _restricted_in_port_init
    _dhcpol_parse_buffer
    _dhcpol_parse_packet
    _inp_findmoptions
    _imo_grow
    _inp_getmoptions
    _inp_setmoptions
    _in_getsockaddr
    _in_getpeeraddr
    _get_pcblist_n
    _heap_insert
    _ip_dn_ctl
    _set_fs_parms
    _rip_pcblist
    _rip_pcblist64
    _rip_init
    _tcp_pcblist
    _tcp_pcblist64
    _udp_pcblist
    _udp_pcblist64
    _udp_init
    _udp_ctloutput
    _flow_divert_connect_out_internal
    _flow_divert_find_proc_by_uuid_filter
    _flow_divert_input
    _flow_divert_kctl_connect
    _mp_getsockaddr
    _mp_getpeeraddr
    _mptcp_session_necp_cb
    _mptcp_pcblist
    _mptcp_subflow_add
    _ah_hmac_sha2_512_init
    _ah_hmac_sha2_384_init
    _ah_hmac_sha2_256_init
    _ah_keyed_sha1_init
    _ah_keyed_md5_init
    _ah_hmac_sha1_init
    _ah_hmac_md5_init
    _ah4_input
    _ah6_input
    _esp_cbc_encrypt
    _esp_cbc_decrypt
    _esp_schedule
    _in6_sin_2_v4mapsin6_in_sock
    _in6_cga_start
    _ip6_setpktopt
    _copypktopts
    _ip6_getmoptions
    _ip6_setmoptions
    _in6p_findmoptions
    _in6_sockaddr
    _sysctl_cga_parameters
    _key_timehandler
    _key_getsastat
    _key_spddump
    _key_dump
    _key_newsav
    _key_setsaval
    _keydb_newsecreplay
    _audit_arg_opaque
    _audit_arg_data
    _audit_arg_argv
    _audit_arg_envv
    _audit_identity_info_construct
    _kaudit_to_bsm
    _au_to_arg32
    _au_to_arg64
    _au_to_attr32
    _au_to_data
    _au_to_ipc_perm
    _au_to_text
    _au_to_path
    _au_to_process32_ex
    _au_to_socket_ex
    _au_to_sock_unix
    _au_to_sock_inet128
    _au_to_sock_inet
    _au_to_subject32
    _au_to_subject32_ex
    _au_to_exec_args
    _au_to_exec_env
    _au_to_identity
    _au_to_header32_ex_tm
    _audit_arg_mac_string
    _audit_pipe_append
    _audit_sdev_submit
    _audit
    _bsd_init
    _create_buffers
    _kernel_triage_extract
    _kdbg_control
    _kdbg_thrmap_init
    _kdbg_write_thread_map
    _aio_suspend_nocancel
    _kauth_acl_inherit
    _kauth_acl_alloc
    _kauth_copyinfilesec
    _kauth_filesec_alloc
    _fdt_fork
    _fdalloc
    _sys_fcntl_nocancel
    _kevt_pcblist
    _kevent_register
    _kqworkloop_hash_init
    _kevent_copyout_proc_dynkqids
    _pid_kqueue_extinfo
    _kctl_reg_list
    _kctl_pcblist
    _ctl_peeraddr
    _ctl_ctloutput
    _ctl_register
    _exec_mach_imgact
    _posix_spawn
    _proc_prepareexit
    __MALLOC_external
    _STRDUP_external
    _OSMalloc_external
    _OSMalloc_nowait
    _mincore
    _build_userspace_exit_reason
    _hashinit
    _uio_create
    _uio_duplicate
    _sysctl_handle_kern_threadname
    _sysctl_sched_stats
    _sysctl_get_owned_vmobjects
    _sysctl_sysctl_name2oid
    _sysctl
    _sys_sysctlbyname
    _memorystatus_init
    _memorystatus_control
    _sysctl_kern_msgbuf
    _oslog_streamopen
    _oslog_stream
    _log_dmesg
    _sbuf_new
    _sysctl_coredump_encryption_key_update
    _ioctl
    _select_internal
    _poll_nocancel
    _log_data
    _pipe
    _pipe_write
    _persona
    _ttymalloc
    _ptmx_get_ioctl
    _clalloc
    _putc
    _b_to_q
    _ubc_cs_blob_allocate
    _ubc_cs_blob_add_supplement
    _soreceive_addr
    _bind
    _connect_nocancel
    _connectx
    _sendit
    _sendmsg_x
    _recvmsg_x
    _uipc_sockaddr
    _unp_connect
    _uipc_peeraddr
    _uipc_bind
    _uipc_accept
    _unp_pcblist
    _unp_pcblist64
    _unp_gc
    _unp_externalize
    _vsock_sockaddr
    _vsock_peeraddr
    _vsock_accept
    _shmsys
    _shmfork
    _semsys
    _semundo_adjust
    _msginit
    _parse_machfile
    _sock_bind
    _sock_connect
    _sock_send_internal
    _proc_listpids
    _proc_pidinfo
    _proc_listcoalitions
    _bsd_setthreadname
    _proc_pidfdlist
    _proc_pidlistthreads
    _proc_pidpathinfo
    _proc_pidfileportlist
    _proc_pidlistuptrs
    _bsd_copythreadname
    _os_reason_alloc_buffer_internal
    _tracker_action
    _tracker_dump
    _soflow_get_flow
    _shared_region_map_and_slide_np
    _shared_region_map_and_slide_setup
    _shared_region_map_and_slide_2_np
    _kas_info
    _vnode_trim_list
    _imageboot_read_file_internal
    _imageboot_setup
    _kpc_sysctl
    _sysctl_getset_bigarray
    _grab_pgo_data
    _protons_stats_sysctl
    ___channel_open
    _cuckoo_hashtable_create
    _skmem_arena_mib_get_sysctl
    _skmem_cache_mib_get_sysctl
    _skmem_cache_create
    _skmem_cache_update_func
    _skmem_region_mib_get_sysctl
    _skmem_region_update_func
    _skmem_region_create
    _nexus_provider_list_sysctl
    _nexus_channel_list_sysctl
    _nexus_mib_get_sysctl
    _nxctl_nexus_bind
    _nxctl_get_nexus_prov_list
    _nxctl_get_nexus_list
    _nxctl_get_channel_list
    _nx_port_grow
    _na_rings_mem_setup
    _fsw_flow_add
    _flow_owner_buckets_alloc
    _flow_route_buckets_alloc
    _flow_route_id_buckets_alloc
    _nx_mon_na_activate_common
    _nx_netif_get_llink_info
    _nx_netif_na_activate
    _nx_netif_compat_na_activate
    _nx_netif_netagent_flow_bind
    _nx_netif_netagent_fill_port_info
    _nx_netif_qset_create
    _nx_netif_default_llink_config
    _nx_upipe_na_find
    OSMetaClass::OSMetaClass(char const*,OSMetaClass const*,uint)
    OSMetaClass::preModLoad(char const*)
    OSObject::operator new(ulong)
    _OSObject_typed_operator_new
    OSArray::initWithCapacity(uint)
    OSArray::ensureCapacity(uint)
    OSArray::MetaClass::alloc(void)
    OSArray::operator new(ulong)
    OSCollectionIterator::initializeIteratorStorage(void)
    OSData::MetaClass::alloc(void)
    OSData::operator new(ulong)
    OSDictionary::initWithCapacity(uint)
    OSDictionary::ensureCapacity(uint)
    OSDictionary::MetaClass::alloc(void)
    OSDictionary::operator new(ulong)
    _OSKextVLog
    OSKext::getPropertyForHostArch(char const*)
    OSKext::copyInfo(OSArray *)
    OSKext::loadExecutable(void)
    OSKext::saveLoadedKextPanicList(void)
    OSKext::updateLoadedKextSummaries(void)
    OSNumber::MetaClass::alloc(void)
    OSNumber::operator new(ulong)
    OSOrderedSet::initWithCapacity(uint,int (*)(OSMetaClassBase const*,OSMetaClassBase const*,void *),void *)
    OSOrderedSet::ensureCapacity(uint)
    operator new(ulong)
    operator new[](ulong)
    OSSet::MetaClass::alloc(void)
    OSSet::operator new(ulong)
    OSString::initWithCString(char const*)
    OSString::MetaClass::alloc(void)
    OSString::operator new(ulong)
    OSString::initWithStringOfLength(char const*,ulong)
    OSSymbolPool::removeSymbol(OSSymbol *)
    OSSymbolPool::reconstructSymbols(bool)
    OSSymbolPool::insertSymbol(OSSymbol *)
    OSSymbol::MetaClass::alloc(void)
    OSSymbol::initialize(void)
    OSSymbol::operator new(ulong)
    OSUnserializeparse(void)
    OSUnserializeXMLparse(void *)
    getString(parser_state *,int *)
    OSUnserializeBinary(char const*,ulong,OSString **)
    __os_log_with_args_internal
    _log_queue_memory_handler
    __Block_copy
    __Block_object_assign
    _IOMalloc_internal
    _IOMalloc_external
    _IOMallocZero_external
    _IOMallocAligned_internal
    _IOKernelAllocateWithPhysicalRestrict
    _IOMallocContiguous
    _IOMallocTypeImpl
    _IOMallocData_external
    _IOMallocZeroData_external
    _IOMallocTypeVarImpl
    IODeviceTreeAlloc(void *)
    IODTSetResolving(IORegistryEntry *,long long (*)(uint,uint *,uint *),void (*)(IORegistryEntry *,uchar *,uchar *,uchar *))
    IORegistryIterator::iterateOver(IORegistryEntry *,IORegistryPlane const*,uint)
    IORegistryEntry::setIndexedProperty(uint,OSObject *)
    IOService::resolveInterrupt(IOService*,int)
    IOService::addInterruptStatistics(IOInterruptAccountingData *,int)
    IOService::notifyControllingDriver(void)
    IOService::notifyInterestedDrivers(void)
    IOCommandGate::MetaClass::alloc(void)
    IOCommandGate::operator new(ulong)
    IOBufferMemoryDescriptor::MetaClass::alloc(void)
    IOBufferMemoryDescriptor::operator new(ulong)
    IODMACommand::MetaClass::alloc(void)
    IODMACommand::operator new(ulong)
    IOInterleavedMemoryDescriptor::initWithCapacity(ulong long,uint)
    IOMemoryDescriptor::createMappingInTask(task *,ulong long,uint,ulong long,ulong long)
    IOGeneralMemoryDescriptor::initWithOptions(void *,uint,uint,task *,uint,IOMapper *)
    IOGeneralMemoryDescriptor::MetaClass::alloc(void)
    IOMemoryMap::MetaClass::alloc(void)
    IOGeneralMemoryDescriptor::operator new(ulong)
    IOMemoryMap::operator new(ulong)
    IOMultiMemoryDescriptor::initWithDescriptors(IOMemoryDescriptor **,uint,uint,bool)
    IOGuardPageMemoryDescriptor::MetaClass::alloc(void)
    IOGuardPageMemoryDescriptor::operator new(ulong)
    IOSharedInterruptController::initInterruptController(IOInterruptController *,OSData *)
    IOMachPort::MetaClass::alloc(void)
    IOMachPort::withObjectAndType(OSObject *,uint)
    IOStatistics::getStatistics(sysctl_req *)
    IOStatistics::getWorkLoopStatistics(sysctl_req *)
    IOStatistics::getUserClientStatistics(sysctl_req *)
    IODataQueueDispatchSource::init(void)
    OSActionCreateWithTypeNameInternal(OSObject *,ulong long,ulong long,ulong,OSString *,bool,OSAction **)
    IOUserServer::objectInstantiate(OSObject *,IORPC,IORPCMessage *)
    _IOVnodeGetEntitlement
    IOPerfControlClient::init(IOService *,ulong long)
    IOSKMemoryBuffer::MetaClass::alloc(void)
    IOSKMapper::initWithTask(task *,IOSKArena *)
    _IOSKMemoryBufferCreate
    _IOSKRegionCreate
    IOUnifiedAddressTranslator::doMap(IOMemoryDescriptor *,ulong long,ulong long,uint)
    IOPMrootDomain::setPMSetting(OSSymbol const*,OSObject *)
    _mac_policy_register
    _mac_externalize
    _mac_do_get
    _mac_do_set
    _skmem_dump
    _log_queue_init_memory
    ```

    #### `kmem_alloc_guard` & `kmem_alloc_guard`
    * changes caused by function renaming:
    1. `kernel_memory_allocate` -> `kmem_alloc_guard`
    2. `kmem_free` -> `kmem_free_guard`
    3. `kmem_realloc` -> `kmem_realloc_guard`

    * Count: 122
    ```
    _kern_stack_snapshot_internal
    _kdp_core_polled_io_polled_file_available
    _kdp_core_init
    _aea_stage_initialize
    _aea_stage_free
    _buffer_stage_initialize
    _buffer_stage_free
    _disk_stage_free
    _progress_notify_stage_initialize
    _progress_notify_stage_free
    _shmem_stage_initialize
    _shmem_stage_free
    _zlib_stage_initialize
    _zlib_stage_free
    _memory_backing_aware_buffer_stage_initialize
    _memory_backing_aware_buffer_stage_free
    _ipc_kmsg_clean_partial
    _mach_port_space_info
    _mach_port_names
    _mach_port_get_set_status
    ___btlib_init
    ___btlib_grow
    _host_processor_info
    _kalloc_large
    _host_lockgroup_info
    _stack_alloc
    _stack_collect
    _turnstiles_init
    _zone_expand_locked
    _zone_reclaim
    _zone_fill_initially
    _mach_memory_info
    _zdestroy
    _vm_compressor_init
    _vm_swap_reclaim
    _revalidate_text_page
    _vm_map_corpse_footprint_collect
    _vm_pageout_internal_start
    _vm_purgeable_token_add
    _swapfile_pager_data_request
    _kptimer_set_count
    _console_init
    _initialize_screen
    _telemetry_init
    _telemetry_macf_mark_curthread
    _bootprofile_init
    _rorgn_lockdown
    _arm_vm_prot_finalize
    _io_map_with_prot
    _ml_processor_register
    _hv_trap_vcpu_create
    _nfs_gss_mach_alloc_buffer
    _bsd_startupearly
    _allocbuf
    _bcleanbuf
    _buf_brelse
    _buffer_cache_gc
    _sparse_cluster_push
    _vfs_drt_alloc_map
    _cluster_push_err
    _cluster_release
    _vfs_opv_init
    _rn_init
    _net_str_id_find_internal
    _ip_init
    _tcp_cache_init
    _ip6_init
    _create_buffers
    _delete_buffers
    _kdbg_control
    __copyout_cpu_map
    __copy_cpu_map
    _kdebug_trace_start
    _coredump
    _OSMalloc_external
    _OSFree_external
    _sysctl_procargsx
    _memorystatus_init
    _sysctl_set_osenvironment
    _ulock_initialize
    _csblob_register_profile
    _cs_blob_cleanup
    _ubc_cs_blob_allocate
    _ubc_cs_blob_add
    _mbuf_drain_locked
    _mbinit
    _m_clalloc
    _shminit
    _parse_machfile
    _imageboot_read_file_internal
    _imageboot_setup
    OSKext::updateLoadedKextSummaries(void)
    __ZN25OSKextSavedMutableSegment11withSegmentEP18segment_command_64
    OSKextSavedMutableSegment::free(void)
    OSKext::serializeLogInfo(OSArray *,char **,uint *)
    OSKext::handleRequest(host *,uint,char *,uint,char **,uint *,char **,uint *)
    OSSerialize::initWithCapacity(uint)
    _kext_request
    _IOHibernateSystemSleep
    IOHibernateDone(IOHibernateVars *)
    _IOMallocAligned_internal
    _IOFreeAligned_internal
    _IOKernelFreePhysical
    _IOKernelAllocateWithPhysicalRestrict
    IOMallocPageableCallback(_vm_map *,void *)
    IOBufferMemoryDescriptor::initWithPhysicalMask(task *,uint,ulong long,ulong long,ulong long)
    IOBufferMemoryDescriptor::free(void)
    IOCPUInterruptController::initCPUInterruptController(int,int)
    IODataQueue::initWithCapacity(uint)
    IODataQueue::free(void)
    IOSharedDataQueue::initWithCapacity(uint)
    IOSharedDataQueue::free(void)
    cpu_boot_thread(void *,int)
    _kalloc_type_views_init
    _waitq_bootstrap
    _vm_rtfault_record_init
    _kmem_scramble_ranges
    _vm_paging_map_init
    _panic_kernel
    _oslog_init_firehose
    _sysctl_load_brand_string
    _oslog_init_logmem
    ```

    #### zone
    * seems that only code changes caused by data structure changing.
    ```
    __zalloc_permanent
    _zone_create_ext
    _zalloc_item
    _zalloc_item_slow
    _zalloc_item_fast
    _zone_unlock
    _zalloc_cached_slow
    _zalloc_cached_import
    _zfree_cached_slow
    _zfree_item
    _zone_defrag
    _zone_expand_async
    _compute_zone_working_set_size
    _get_zone_info
    _zone_cram_early
    _zone_lock_was_contended
    ```

    #### vm
    ```
    _vm_map_lookup_kalloc_entry_locked
    _get_vmmap_entries
    _get_vmsubmap_entries
    _vm_object_update
    _vm_fault_internal
    _vm_fault_enter
    _vm_fault_attempt_pmap_enter
    _vm_fault_pmap_enter_with_object_lock
    _vm_fault_page
    _vm_fault_cleanup
    _vm_fault_zero_page
    _vm_page_validate_cs_fast
    _vm_page_map_and_validate_cs
    _vm_fault_wire
    _vm_fault_unwire
    _vm_fault_copy
    _vm_fault_copy_dst_cleanup
    _vm_fault_copy_cleanup
    _vm_page_validate_cs
    _vm_page_validate_cs_mapped_chunk
    _vm_map_set_cache_attr
    _vm_map_apple_protected
    _vm_map_clip_start
    _vm_map_clip_end
    _vm_map_enter
    _vm_map_destroy
    _vm_map_copy_discard
    _vm_map_enter_fourk
    _vm_map_entry_insert
    _vm_map_wire_nested
    _vm_map_delete
    _vm_map_unwire_nested
    _vm_map_submap_pmap_clean
    _vm_map_simplify_entry
    _vm_map_lookup_locked
    _vm_map_copy_adjust_get_target_copy_map
    _vm_map_copy_trim
    _vm_map_copyout_internal
    _vm_map_copy_remap
    _vm_map_remove_and_unlock
    __vm_map_clip_start
    __vm_map_clip_end
    _vm_map_clip_unnest
    _vm_map_find_space
    _vm_map_protect
    _vm_map_remap
    _vm_map_remap_extract
    _vm_map_inherit
    _vm_map_remove_flags
    _vm_map_copy_overwrite
    _vm_map_copy_overwrite_nested
    _vm_map_overwrite_submap_recurse
    _vm_map_fork
    _vm_map_footprint_query_page_info
    _vm_map_region_recurse_64
    _vm_map_region_walk
    _vm_map_region
    _vm_map_region_top_walk
    _vm_map_machine_attribute
    _vm_map_behavior_set
    _vm_map_msync
    _vm_map_purgable_control
    _vm_map_page_range_info_internal
    _vm_named_entry_associate_vm_object
    _vm_named_entry_to_vm_object
    _vm_map_partial_reap
    _vm_map_entry_should_cow_for_true_share
    _vm_map_query_volatile
    _vm_map_entry_cs_associate
    _vm_object_copy_slowly
    _vm_pageout_throttle_up
    _vm_pageout_initialize_page
    _vm_pageout_cluster
    _vm_pageout_scan
    _vm_pageout_compress_page
    _vm_pageout_iothread_external_continue
    _vm_object_upl_request
    _vm_map_create_upl
    _vm_object_iopl_request
    _vm_map_enter_upl_range
    _vm_page_insert_internal
    _vm_page_deactivate_internal
    _vm_page_queues_remove
    _vm_page_speculate
    _vm_page_enqueue_inactive
    _vm_page_add_to_backgroundq
    _vm_page_replace
    _vm_page_free_prepare_queues
    _vm_page_remove
    _vm_page_remove_internal
    _vm_page_lookup
    _vm_page_rename
    _vm_page_activate
    _vm_page_enqueue_active
    _vm_page_update_background_state
    _vm_page_wire
    _vm_page_unwire
    _vm_page_check_pageable_safe
    _vm_page_enqueue_cleaned
    _vm_page_reactivate_all_throttled
    _vm_page_reactivate_local
    _vm_page_copy
    _vm_page_diagnose
    _vm_shared_region_auth_remap
    _vm_shared_region_map_file_setup
    _vm_map_get_phys_page
    _vm_map_relocate_early_elem
    ```

    #### IOKit
    ```
    OSData::free
    OSData::clipForCopyout
    OSDictionary::flushCollection
    IOServicePH::systemHalt
    IOGeneralMemoryDescriptor::memoryReferenceMap
    IOGeneralMemoryDescriptor::memoryReferenceMapNew
    ```

    #### codesign
    * protect codesign identities with `Data Key A`
    ```
    _csfg_get_platform_binary
    _csfg_get_supplement_platform_binary
    _csfg_get_signer_type
    _csfg_get_supplement_signer_type
    _csfg_get_teamid
    _csfg_get_supplement_teamid
    _csfg_get_prod_signed
    _csfg_get_supplement_prod_signed
    ```

    #### `kheap_startup_init`
    * random

    ## others
    ```
    _hw_lock_try_nopreempt
    _lck_ticket_lock
    _memory_object_control_uiomove
    _fill_procregioninfo
    _fill_vnodeinfoforaddr
    _fill_procregioninfo_onlymappedvnodes
    _find_region_details
    _find_vnode_object
    _upl_commit_range
    _cpm_allocate
    _hibernate_flush_queue
    _hibernate_consider_discard
    _hibernate_discard_page
    _hibernate_rebuild_vm_structs
    _find_mapping_to_slide
    _shared_region_pager_data_request
    _mach_make_memory_entry_internal
    _apple_protect_pager_data_request
    _fourk_pager_data_request
    _nfs_buf_release
    _round_page.10963
    _cluster_write_direct
    _utun_ctl_send
    _necp_application_find_policy_match_internal
    _map_segment
    _pshm_mmap
    _IOLibInit
    _IOFreePageable
    _kmem_range_init
    ```