Copyright (c) 2026 thanhnndev and contributors. Licence text in LICENSES/BSD-3-Clause-Clear-itlmt7925.txt.
Adapted, not copied: the shape of src/MtkWlanNativeIf.cpp (interface start with a RegistrationInfo block, packet pool and
queues, the core-gate / work-queue split), the join completion sequence and the event payload layouts in
src/MtkWlanNativeReq.cpp (link status 0xd8, assoc 0x4e, join 0xd3, first beacon 0xd4, connect complete 0xd5), the
CoreCapture logger and fault reporter setup in src/MtkWlanNative.cpp and src/corecapture_min.h, and the idea of
generating the request-slot stubs from a dump. Every offset and slot number was re-read from the macOS 26.7.1 (25G241)
binaries; that project targets macOS 15.
The headers in abi/25G241/ are generated by tools/kcabi from the kernel collection of macOS 26.7.1: class names,
instance sizes, virtual slot order and method names of IO80211Family, IOSkywalkFamily and corecapture. They contain no
Apple code. src/skywalk_min.h and src/corecapture_min.h declare the handful of Apple factory functions this kext
calls, with their mangled names.
src/MtkCoreApi.h and src/MtkUserApi.h are copies of the core's public headers (same author, same licence).