文件
paintfcp-fxplug/docs/analysis/rea-vface-evidence.json

1 行
17 KiB
JSON

{"artifacts":[{"architecture":"arm64","digest":{"sha256":"afc71d0d21fd3c1ca95ca745ddafcd729e36ad95f17d8638009f2e45d9b7e8df"},"format":"mach-o"}],"captures":[],"environments":[],"providers":[{"id":"ghidra","name":"Ghidra","version":"12.1.4"}],"records":[{"analysis_profile":{"digest":"20565088524a2d0359b9b96f46ac48e679d774c7b0092c56abc06de8fdbec11c","parameters":{"analyzer_preset":"ghidra-default","annotation_policy":"atomic-function-entry-metadata-v1","architecture":"arm64","available_architectures":["arm64"],"compiler_spec_id":"auto-default","decompiler_jump_loads":true,"function_body_evidence":"complete-inclusive-ranges-v1","function_boundary_observations":"ghidra-terminal-call-limitations-v1","function_references":"complete-body-and-entry-reference-manager-v2","import_mode":"ephemeral-source-immutable","instruction_flow_evidence":"decoded-return-pcode-v1","jump_table_evidence":"typed-case-default-blocks-v1","language_id":"auto-from-header","load_image_observations":"source-mappings-entry-context-v2","loader":"auto-from-header","location_resolution":"explicit-address-exact-entry-symbol-first-v3","no_return_repair":"returning-imports-decoded-return-v2","process_launch":"inspected-jvm-launch-support-v1","string_inventory_evidence":"defined-data-coverage-v1","target_format":"mach-o","target_kind":"executable"},"provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"}},"authority":"shipped-artifact","confidence":"observed","environment":null,"evidence_id":"ev_32b6ee46d4fb5eab563883ba73e35a458d5da21229b8977fddcb4df656517152","evidence_links":[],"limitations":["The session serves operations only after Ghidra reports default auto-analysis complete; incomplete analysis does not expose partial results.","The imported Program and temporary project are ephemeral and deleted on close. Annotation operations edit session database metadata; original executable bytes are never written.","Cancelling an active Ghidra request terminates its ephemeral database and discards session annotations. The selected target remains open; the next provider query imports the original artifact again.","Default-space addresses use lowercase 0x-prefixed hexadecimal; other address spaces use <percent-encoded-space>:0x<hex>.","Bytes reflect Ghidra's initialized memory, including loader fixups. Reads stop at an unmapped or uninitialized byte and report completeness explicitly.","macOS sessions require a matching executable Ghidra native decompiler; REA checks for it but does not build native components or change Gatekeeper quarantine state."],"locations":[],"normalized_result":{"address":"0x100085ea0","bytes_hex":"a4703d0ad7a3b03f9a9999999999a93f","complete":true,"requested_bytes":16,"returned_bytes":16},"operation":"read_bytes","parameters":{"address":"0x100085ea0","length":16},"predicate_type":"rea.analysis","provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"},"raw_result":{"address":"0x100085ea0","bytes_hex":"a4703d0ad7a3b03f9a9999999999a93f","complete":true,"requested_bytes":16,"returned_bytes":16},"subject":{"architecture":"arm64","digest":{"sha256":"afc71d0d21fd3c1ca95ca745ddafcd729e36ad95f17d8638009f2e45d9b7e8df"},"format":"mach-o","local_path":"/Users/dayu/Documents/PaintFCP/build/body-analysis/MSE18V2-arm64","name":"MSE18V2-arm64"}},{"analysis_profile":{"digest":"20565088524a2d0359b9b96f46ac48e679d774c7b0092c56abc06de8fdbec11c","parameters":{"analyzer_preset":"ghidra-default","annotation_policy":"atomic-function-entry-metadata-v1","architecture":"arm64","available_architectures":["arm64"],"compiler_spec_id":"auto-default","decompiler_jump_loads":true,"function_body_evidence":"complete-inclusive-ranges-v1","function_boundary_observations":"ghidra-terminal-call-limitations-v1","function_references":"complete-body-and-entry-reference-manager-v2","import_mode":"ephemeral-source-immutable","instruction_flow_evidence":"decoded-return-pcode-v1","jump_table_evidence":"typed-case-default-blocks-v1","language_id":"auto-from-header","load_image_observations":"source-mappings-entry-context-v2","loader":"auto-from-header","location_resolution":"explicit-address-exact-entry-symbol-first-v3","no_return_repair":"returning-imports-decoded-return-v2","process_launch":"inspected-jvm-launch-support-v1","string_inventory_evidence":"defined-data-coverage-v1","target_format":"mach-o","target_kind":"executable"},"provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"}},"authority":"shipped-artifact","confidence":"observed","environment":null,"evidence_id":"ev_6a88310573f4dfd2f23feef7d12c3f58eba366db1717861770656d55375e07a1","evidence_links":[],"limitations":["The session serves operations only after Ghidra reports default auto-analysis complete; incomplete analysis does not expose partial results.","The imported Program and temporary project are ephemeral and deleted on close. Annotation operations edit session database metadata; original executable bytes are never written.","Cancelling an active Ghidra request terminates its ephemeral database and discards session annotations. The selected target remains open; the next provider query imports the original artifact again.","Default-space addresses use lowercase 0x-prefixed hexadecimal; other address spaces use <percent-encoded-space>:0x<hex>.","Regex mode uses Java Pattern semantics. Matcher or compiler stack exhaustion returns a resource constraint without closing the session; literal mode avoids regex recursion and returns complete matching values.","macOS sessions require a matching executable Ghidra native decompiler; REA checks for it but does not build native components or change Gatekeeper quarantine state."],"locations":[],"normalized_result":[],"operation":"search_procedures","parameters":{"case_sensitive":false,"mode":"regex","pattern":"faceShape|shapeParams|ShapeParams|PinCoordinate"},"predicate_type":"rea.analysis","provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"},"raw_result":[],"subject":{"architecture":"arm64","digest":{"sha256":"afc71d0d21fd3c1ca95ca745ddafcd729e36ad95f17d8638009f2e45d9b7e8df"},"format":"mach-o","local_path":"/Users/dayu/Documents/PaintFCP/build/body-analysis/MSE18V2-arm64","name":"MSE18V2-arm64"}},{"analysis_profile":{"digest":"20565088524a2d0359b9b96f46ac48e679d774c7b0092c56abc06de8fdbec11c","parameters":{"analyzer_preset":"ghidra-default","annotation_policy":"atomic-function-entry-metadata-v1","architecture":"arm64","available_architectures":["arm64"],"compiler_spec_id":"auto-default","decompiler_jump_loads":true,"function_body_evidence":"complete-inclusive-ranges-v1","function_boundary_observations":"ghidra-terminal-call-limitations-v1","function_references":"complete-body-and-entry-reference-manager-v2","import_mode":"ephemeral-source-immutable","instruction_flow_evidence":"decoded-return-pcode-v1","jump_table_evidence":"typed-case-default-blocks-v1","language_id":"auto-from-header","load_image_observations":"source-mappings-entry-context-v2","loader":"auto-from-header","location_resolution":"explicit-address-exact-entry-symbol-first-v3","no_return_repair":"returning-imports-decoded-return-v2","process_launch":"inspected-jvm-launch-support-v1","string_inventory_evidence":"defined-data-coverage-v1","target_format":"mach-o","target_kind":"executable"},"provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"}},"authority":"shipped-artifact","confidence":"observed","environment":null,"evidence_id":"ev_ee55925daca270c67d312953f9ce9f3ca580e0851e3d12e19e0e26d1a2c8a97c","evidence_links":[],"limitations":["The session serves operations only after Ghidra reports default auto-analysis complete; incomplete analysis does not expose partial results.","The imported Program and temporary project are ephemeral and deleted on close. Annotation operations edit session database metadata; original executable bytes are never written.","Cancelling an active Ghidra request terminates its ephemeral database and discards session annotations. The selected target remains open; the next provider query imports the original artifact again.","Default-space addresses use lowercase 0x-prefixed hexadecimal; other address spaces use <percent-encoded-space>:0x<hex>.","Assembly is Ghidra Listing text and does not claim textual equivalence with Hopper output.","macOS sessions require a matching executable Ghidra native decompiler; REA checks for it but does not build native components or change Gatekeeper quarantine state."],"locations":[],"normalized_result":"0x10002fb74: stp d9, d8, [sp, #-0x30]!\n0x10002fb78: stp x20, x19, [sp, #0x10]\n0x10002fb7c: stp x29, x30, [sp, #0x20]\n0x10002fb80: add x29, sp, #0x20\n0x10002fb84: fmov d8, d0\n0x10002fb88: str xzr, [x8, #0x20]\n0x10002fb8c: movi v0.2D, #0x0\n0x10002fb90: stp q0, q0, [x8]\n0x10002fb94: cbz x0, 0x10002fd38\n0x10002fb98: mov x20, x0\n0x10002fb9c: mov x19, x8\n0x10002fba0: ldrb w8, [x0, #0x172]\n0x10002fba4: cmp w8, #0x1\n0x10002fba8: b.ne 0x10002fd38\n0x10002fbac: bl 0x1000500b0\n0x10002fbb0: cbz w0, 0x10002fd38\n0x10002fbb4: fmov d1, 0x3ff0000000000000\n0x10002fbb8: fcmp d8, d1\n0x10002fbbc: fcsel d2, d1, d8, gt\n0x10002fbc0: fcmp d8, #0.0\n0x10002fbc4: movi d0, #0x0\n0x10002fbc8: fcsel d2, d0, d2, mi\n0x10002fbcc: fcvt s2, d2\n0x10002fbd0: ldr d3, [x20, #0x88]\n0x10002fbd4: fcmp d3, d1\n0x10002fbd8: fcsel d4, d1, d3, gt\n0x10002fbdc: fmov d5, -0x4010000000000000\n0x10002fbe0: fcmp d3, d5\n0x10002fbe4: fcsel d4, d5, d4, mi\n0x10002fbe8: fcmp d4, #0.0\n0x10002fbec: cset w8, gt\n0x10002fbf0: fcvt d3, s2\n0x10002fbf4: ldp d5, d2, [x20, #0x68]\n0x10002fbf8: fcmp d2, d1\n0x10002fbfc: fcsel d6, d1, d2, gt\n0x10002fc00: adrp x9, 0x100086000\n0x10002fc04: ldr d7, [x9, #0xe0]\n0x10002fc08: fmul d6, d6, d7\n0x10002fc0c: fcmp d2, #0.0\n0x10002fc10: fcsel d2, d0, d6, mi\n0x10002fc14: fmul d2, d2, d3\n0x10002fc18: fcvt s2, d2\n0x10002fc1c: add x9, x20, #0x80\n0x10002fc20: ldr q6, [x20, #0x90]\n0x10002fc24: ld1 v5, x9, \n0x10002fc28: adrp x9, 0x100085000\n0x10002fc2c: ldr q7, [x9, #0xe80]\n0x10002fc30: fcmgt v7.2D, v7.2D, v5.2D\n0x10002fc34: fcmlt v16.2D, v6.2D\n0x10002fc38: fmov v17.2D, #0x3ff0000000000000\n0x10002fc3c: fcmgt v18.2D, v5.2D, v17.2D\n0x10002fc40: bit v5.16B, v17.16B, v18.16B\n0x10002fc44: fcmgt v18.2D, v6.2D, v17.2D\n0x10002fc48: bit v6.16B, v17.16B, v18.16B\n0x10002fc4c: adrp x9, 0x100085000\n0x10002fc50: ldr q18, [x9, #0xe90]\n0x10002fc54: fmul v5.2D, v5.2D, v18.2D\n0x10002fc58: adrp x9, 0x100085000\n0x10002fc5c: ldr q18, [x9, #0xea0]\n0x10002fc60: fmul v6.2D, v6.2D, v18.2D\n0x10002fc64: adrp x9, 0x100085000\n0x10002fc68: ldr q18, [x9, #0xeb0]\n0x10002fc6c: bit v5.16B, v18.16B, v7.16B\n0x10002fc70: bic v6.16B, v6.16B, v16.16B\n0x10002fc74: fmul v6.2D, v6.2D, v3.D[0x0]\n0x10002fc78: fmul v5.2D, v5.2D, v3.D[0x0]\n0x10002fc7c: fcvtn v5.2S, v5.2D\n0x10002fc80: fcvtn2 v5.4S, v6.2D\n0x10002fc84: ldr d6, [x20, #0xa0]\n0x10002fc88: fcmp d6, d1\n0x10002fc8c: fcsel d7, d1, d6, gt\n0x10002fc90: adrp x9, 0x100086000\n0x10002fc94: ldr d16, [x9, #0x4e8]\n0x10002fc98: fmul d7, d7, d16\n0x10002fc9c: fcmp d6, #0.0\n0x10002fca0: mov x9, #-0x8000000000000000\n0x10002fca4: fmov d6, x9\n0x10002fca8: adrp x9, 0x100085000\n0x10002fcac: add x9, x9, #0xec0\n0x10002fcb0: ldr d16, x9, w8, , uxtw, #3\n0x10002fcb4: fcsel d6, d6, d7, mi\n0x10002fcb8: fmul d4, d4, d16\n0x10002fcbc: ldr d7, [x20, #0x78]\n0x10002fcc0: add x8, x20, #0xa8\n0x10002fcc4: ld1 v7, x8, \n0x10002fcc8: adrp x8, 0x100085000\n0x10002fccc: ldr q16, [x8, #0xed0]\n0x10002fcd0: fcmgt v16.2D, v16.2D, v7.2D\n0x10002fcd4: fcmgt v18.2D, v7.2D, v17.2D\n0x10002fcd8: bit v7.16B, v17.16B, v18.16B\n0x10002fcdc: adrp x8, 0x100085000\n0x10002fce0: ldr q17, [x8, #0xee0]\n0x10002fce4: fmul v7.2D, v7.2D, v17.2D\n0x10002fce8: adrp x8, 0x100085000\n0x10002fcec: ldr q17, [x8, #0xef0]\n0x10002fcf0: mov v6.D[0x1], v4.D[0x0]\n0x10002fcf4: mov v4.16B, v16.16B\n0x10002fcf8: bsl v4.16B, v17.16B, v7.16B\n0x10002fcfc: fmul v6.2D, v6.2D, v3.D[0x0]\n0x10002fd00: fmul v3.2D, v4.2D, v3.D[0x0]\n0x10002fd04: fcvtn v4.2S, v6.2D\n0x10002fd08: fcvtn2 v4.4S, v3.2D\n0x10002fd0c: stp q5, q4, [x19]\n0x10002fd10: ldr d3, [x20, #0xb0]\n0x10002fd14: fcmp d3, d1\n0x10002fd18: fcsel d1, d1, d3, gt\n0x10002fd1c: adrp x8, 0x100086000\n0x10002fd20: ldr d4, [x8, #0x1a0]\n0x10002fd24: fmul d1, d1, d4\n0x10002fd28: fcmp d3, #0.0\n0x10002fd2c: fcsel d0, d0, d1, mi\n0x10002fd30: fcvt s0, d0\n0x10002fd34: stp s0, s2, [x19, #0x20]\n0x10002fd38: ldp x29, x30, [sp, #0x20]\n0x10002fd3c: ldp x20, x19, [sp, #0x10]\n0x10002fd40: ldp d9, d8, [sp], #0x30\n0x10002fd44: ret","operation":"procedure_assembly","parameters":{"procedure":"0x10002fb74"},"predicate_type":"rea.analysis","provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"},"raw_result":{"limitations":[],"value":"0x10002fb74: stp d9, d8, [sp, #-0x30]!\n0x10002fb78: stp x20, x19, [sp, #0x10]\n0x10002fb7c: stp x29, x30, [sp, #0x20]\n0x10002fb80: add x29, sp, #0x20\n0x10002fb84: fmov d8, d0\n0x10002fb88: str xzr, [x8, #0x20]\n0x10002fb8c: movi v0.2D, #0x0\n0x10002fb90: stp q0, q0, [x8]\n0x10002fb94: cbz x0, 0x10002fd38\n0x10002fb98: mov x20, x0\n0x10002fb9c: mov x19, x8\n0x10002fba0: ldrb w8, [x0, #0x172]\n0x10002fba4: cmp w8, #0x1\n0x10002fba8: b.ne 0x10002fd38\n0x10002fbac: bl 0x1000500b0\n0x10002fbb0: cbz w0, 0x10002fd38\n0x10002fbb4: fmov d1, 0x3ff0000000000000\n0x10002fbb8: fcmp d8, d1\n0x10002fbbc: fcsel d2, d1, d8, gt\n0x10002fbc0: fcmp d8, #0.0\n0x10002fbc4: movi d0, #0x0\n0x10002fbc8: fcsel d2, d0, d2, mi\n0x10002fbcc: fcvt s2, d2\n0x10002fbd0: ldr d3, [x20, #0x88]\n0x10002fbd4: fcmp d3, d1\n0x10002fbd8: fcsel d4, d1, d3, gt\n0x10002fbdc: fmov d5, -0x4010000000000000\n0x10002fbe0: fcmp d3, d5\n0x10002fbe4: fcsel d4, d5, d4, mi\n0x10002fbe8: fcmp d4, #0.0\n0x10002fbec: cset w8, gt\n0x10002fbf0: fcvt d3, s2\n0x10002fbf4: ldp d5, d2, [x20, #0x68]\n0x10002fbf8: fcmp d2, d1\n0x10002fbfc: fcsel d6, d1, d2, gt\n0x10002fc00: adrp x9, 0x100086000\n0x10002fc04: ldr d7, [x9, #0xe0]\n0x10002fc08: fmul d6, d6, d7\n0x10002fc0c: fcmp d2, #0.0\n0x10002fc10: fcsel d2, d0, d6, mi\n0x10002fc14: fmul d2, d2, d3\n0x10002fc18: fcvt s2, d2\n0x10002fc1c: add x9, x20, #0x80\n0x10002fc20: ldr q6, [x20, #0x90]\n0x10002fc24: ld1 v5, x9, \n0x10002fc28: adrp x9, 0x100085000\n0x10002fc2c: ldr q7, [x9, #0xe80]\n0x10002fc30: fcmgt v7.2D, v7.2D, v5.2D\n0x10002fc34: fcmlt v16.2D, v6.2D\n0x10002fc38: fmov v17.2D, #0x3ff0000000000000\n0x10002fc3c: fcmgt v18.2D, v5.2D, v17.2D\n0x10002fc40: bit v5.16B, v17.16B, v18.16B\n0x10002fc44: fcmgt v18.2D, v6.2D, v17.2D\n0x10002fc48: bit v6.16B, v17.16B, v18.16B\n0x10002fc4c: adrp x9, 0x100085000\n0x10002fc50: ldr q18, [x9, #0xe90]\n0x10002fc54: fmul v5.2D, v5.2D, v18.2D\n0x10002fc58: adrp x9, 0x100085000\n0x10002fc5c: ldr q18, [x9, #0xea0]\n0x10002fc60: fmul v6.2D, v6.2D, v18.2D\n0x10002fc64: adrp x9, 0x100085000\n0x10002fc68: ldr q18, [x9, #0xeb0]\n0x10002fc6c: bit v5.16B, v18.16B, v7.16B\n0x10002fc70: bic v6.16B, v6.16B, v16.16B\n0x10002fc74: fmul v6.2D, v6.2D, v3.D[0x0]\n0x10002fc78: fmul v5.2D, v5.2D, v3.D[0x0]\n0x10002fc7c: fcvtn v5.2S, v5.2D\n0x10002fc80: fcvtn2 v5.4S, v6.2D\n0x10002fc84: ldr d6, [x20, #0xa0]\n0x10002fc88: fcmp d6, d1\n0x10002fc8c: fcsel d7, d1, d6, gt\n0x10002fc90: adrp x9, 0x100086000\n0x10002fc94: ldr d16, [x9, #0x4e8]\n0x10002fc98: fmul d7, d7, d16\n0x10002fc9c: fcmp d6, #0.0\n0x10002fca0: mov x9, #-0x8000000000000000\n0x10002fca4: fmov d6, x9\n0x10002fca8: adrp x9, 0x100085000\n0x10002fcac: add x9, x9, #0xec0\n0x10002fcb0: ldr d16, x9, w8, , uxtw, #3\n0x10002fcb4: fcsel d6, d6, d7, mi\n0x10002fcb8: fmul d4, d4, d16\n0x10002fcbc: ldr d7, [x20, #0x78]\n0x10002fcc0: add x8, x20, #0xa8\n0x10002fcc4: ld1 v7, x8, \n0x10002fcc8: adrp x8, 0x100085000\n0x10002fccc: ldr q16, [x8, #0xed0]\n0x10002fcd0: fcmgt v16.2D, v16.2D, v7.2D\n0x10002fcd4: fcmgt v18.2D, v7.2D, v17.2D\n0x10002fcd8: bit v7.16B, v17.16B, v18.16B\n0x10002fcdc: adrp x8, 0x100085000\n0x10002fce0: ldr q17, [x8, #0xee0]\n0x10002fce4: fmul v7.2D, v7.2D, v17.2D\n0x10002fce8: adrp x8, 0x100085000\n0x10002fcec: ldr q17, [x8, #0xef0]\n0x10002fcf0: mov v6.D[0x1], v4.D[0x0]\n0x10002fcf4: mov v4.16B, v16.16B\n0x10002fcf8: bsl v4.16B, v17.16B, v7.16B\n0x10002fcfc: fmul v6.2D, v6.2D, v3.D[0x0]\n0x10002fd00: fmul v3.2D, v4.2D, v3.D[0x0]\n0x10002fd04: fcvtn v4.2S, v6.2D\n0x10002fd08: fcvtn2 v4.4S, v3.2D\n0x10002fd0c: stp q5, q4, [x19]\n0x10002fd10: ldr d3, [x20, #0xb0]\n0x10002fd14: fcmp d3, d1\n0x10002fd18: fcsel d1, d1, d3, gt\n0x10002fd1c: adrp x8, 0x100086000\n0x10002fd20: ldr d4, [x8, #0x1a0]\n0x10002fd24: fmul d1, d1, d4\n0x10002fd28: fcmp d3, #0.0\n0x10002fd2c: fcsel d0, d0, d1, mi\n0x10002fd30: fcvt s0, d0\n0x10002fd34: stp s0, s2, [x19, #0x20]\n0x10002fd38: ldp x29, x30, [sp, #0x20]\n0x10002fd3c: ldp x20, x19, [sp, #0x10]\n0x10002fd40: ldp d9, d8, [sp], #0x30\n0x10002fd44: ret"},"subject":{"architecture":"arm64","digest":{"sha256":"afc71d0d21fd3c1ca95ca745ddafcd729e36ad95f17d8638009f2e45d9b7e8df"},"format":"mach-o","local_path":"/Users/dayu/Documents/PaintFCP/build/body-analysis/MSE18V2-arm64","name":"MSE18V2-arm64"}}],"scenarios":[],"unknowns":[]}