{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294969104":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294969248":[{"is_tail_call":false,"symbol":"fclose","target_va":4294978884}],"4294969480":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294969624":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294969768":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294969912":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294970056":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294970200":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294970344":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294970488":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294970632":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294970776":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294970920":[{"is_tail_call":false,"symbol":"sub_100000f9c","target_va":4294971292},{"is_tail_call":false,"symbol":"sub_1000007a0","target_va":4294969248}],"4294971064":[{"is_tail_call":false,"symbol":"auditd_set_evcmap","target_va":4294978324},{"is_tail_call":false,"symbol":"auditd_read_dirs","target_va":4294978308},{"is_tail_call":false,"symbol":"auditd_set_fsize","target_va":4294978340},{"is_tail_call":false,"symbol":"auditd_set_namask","target_va":4294978388},{"is_tail_call":false,"symbol":"auditd_set_fsize","target_va":4294978340},{"is_tail_call":false,"symbol":"fileno","target_va":4294978916},{"is_tail_call":false,"symbol":"auditd_set_host","target_va":4294978356}],"4294971304":[{"is_tail_call":false,"symbol":"auditd_set_minfree","target_va":4294978372}],"4294971372":[{"is_tail_call":false,"symbol":"auditd_set_minfree","target_va":4294978372}],"4294971456":[{"is_tail_call":false,"symbol":"auditd_set_minfree","target_va":4294978372}],"4294971540":[{"is_tail_call":false,"symbol":"auditd_set_minfree","target_va":4294978372}],"4294971624":[{"is_tail_call":false,"symbol":"sub_10000117c","target_va":4294971772},{"is_tail_call":false,"symbol":"mach_port_allocate","target_va":4294979220},{"is_tail_call":false,"symbol":"sub_100000fec","target_va":4294971372}],"4294971772":[{"is_tail_call":false,"symbol":"_NSConcreteGlobalBlock","target_va":4294978404},{"is_tail_call":false,"symbol":"auditd_gen_record","target_va":4294978244},{"is_tail_call":false,"symbol":"auditd_gen_record","target_va":4294978244},{"is_tail_call":false,"symbol":"notify_post","target_va":4294979316},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304}],"4294971892":[{"is_tail_call":false,"symbol":"sub_10000117c","target_va":4294971772},{"is_tail_call":false,"symbol":"mach_port_allocate","target_va":4294979220}],"4294971956":[{"is_tail_call":false,"symbol":"gmtime","target_va":4294979140},{"is_tail_call":false,"symbol":"gmtime","target_va":4294979140},{"is_tail_call":false,"symbol":"mach_host_self","target_va":4294979172},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304}],"4294972396":[{"is_tail_call":true,"symbol":"gettimeofday","target_va":4294979124}],"4294972432":[{"is_tail_call":false,"symbol":"auditd_prevent_audit","target_va":4294978276},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"sub_100002880","target_va":4294977664},{"is_tail_call":true,"symbol":"sub_100002994","target_va":4294977940},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"IONotificationPortDestroy","target_va":4294978164},{"is_tail_call":false,"symbol":"NDR_record","target_va":4294978228},{"is_tail_call":false,"symbol":"IONotificationPortSetDispatchQueue","target_va":4294978180},{"is_tail_call":false,"symbol":"sub_10000208c","target_va":4294975628},{"is_tail_call":false,"symbol":"sub_100001fec","target_va":4294975468},{"is_tail_call":false,"symbol":"sub_100001c20","target_va":4294974496}],"4294972756":[{"is_tail_call":false,"symbol":"sub_1000017c0","target_va":4294973376}],"4294972788":[{"is_tail_call":false,"symbol":"strlcpy","target_va":4294979444},{"is_tail_call":false,"symbol":"strlen","target_va":4294979460},{"is_tail_call":false,"symbol":"strlen","target_va":4294979460},{"is_tail_call":false,"symbol":"strlen","target_va":4294979460},{"is_tail_call":false,"symbol":"IOAllowPowerChange","target_va":4294978292},{"is_tail_call":false,"symbol":"strstr","target_va":4294979476}],"4294972964":[{"is_tail_call":false,"symbol":"getpid","target_va":4294979108}],"4294973056":[{"is_tail_call":false,"symbol":"bootstrap_port","target_va":4294978740},{"is_tail_call":true,"symbol":"auditd_swap_trail","target_va":4294978708}],"4294973124":[{"is_tail_call":false,"symbol":"IOServiceClose","target_va":4294978212},{"is_tail_call":true,"symbol":"sub_100000fec","target_va":4294971372},{"is_tail_call":true,"symbol":"IORegisterForSystemPower","target_va":4294978196}],"4294973376":[{"is_tail_call":false,"symbol":"getgid","target_va":4294979044},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"sub_1000011f4","target_va":4294971892},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"sub_100001e14","target_va":4294974996},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"alarm","target_va":4294978468},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fec","target_va":4294971372},{"is_tail_call":false,"symbol":"sub_100001a3c","target_va":4294974012},{"is_tail_call":true,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"sub_100001c20","target_va":4294974496},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":true,"symbol":"sub_100001f44","target_va":4294975300},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304}],"4294974012":[{"is_tail_call":false,"symbol":"asl_set","target_va":4294978532},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100000710","target_va":4294969104},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fec","target_va":4294971372},{"is_tail_call":false,"symbol":"sub_100000888","target_va":4294969480},{"is_tail_call":false,"symbol":"stat","target_va":4294979396},{"is_tail_call":false,"symbol":"getgrnam","target_va":4294979060},{"is_tail_call":false,"symbol":"readlink","target_va":4294979332},{"is_tail_call":false,"symbol":"auditd_expire_trails","target_va":4294978660},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_1000011f4","target_va":4294971892},{"is_tail_call":false,"symbol":"sub_100002574","target_va":4294976884},{"is_tail_call":false,"symbol":"sub_1000010e8","target_va":4294971624},{"is_tail_call":false,"symbol":"asl_new","target_va":4294978500},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100000fec","target_va":4294971372},{"is_tail_call":false,"symbol":"alarm","target_va":4294978468},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304}],"4294974496":[{"is_tail_call":false,"symbol":"__error","target_va":4294978420},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100001094","target_va":4294971540},{"is_tail_call":false,"symbol":"asl_set_filter","target_va":4294978548},{"is_tail_call":false,"symbol":"sub_100001094","target_va":4294971540},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"audit_get_ctlmode","target_va":4294978612},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100001094","target_va":4294971540},{"is_tail_call":false,"symbol":"audit_set_cond","target_va":4294978628},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100001094","target_va":4294971540},{"is_tail_call":false,"symbol":"asl_vlog","target_va":4294978564},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100001094","target_va":4294971540},{"is_tail_call":false,"symbol":"audit_get_cond","target_va":4294978596},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100001094","target_va":4294971540},{"is_tail_call":false,"symbol":"asprintf","target_va":4294978580},{"is_tail_call":false,"symbol":"sub_100000fec","target_va":4294971372},{"is_tail_call":false,"symbol":"sub_100001094","target_va":4294971540},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304}],"4294974996":[{"is_tail_call":false,"symbol":"analytics_send_event","target_va":4294978484},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294978436},{"is_tail_call":false,"symbol":"auditd_gen_record","target_va":4294978244},{"is_tail_call":false,"symbol":"notify_post","target_va":4294979316},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_1000010e8","target_va":4294971624},{"is_tail_call":false,"symbol":"stat","target_va":4294979396},{"is_tail_call":false,"symbol":"getgrnam","target_va":4294979060},{"is_tail_call":false,"symbol":"readlink","target_va":4294979332},{"is_tail_call":false,"symbol":"sub_100002574","target_va":4294976884},{"is_tail_call":false,"symbol":"fileno","target_va":4294978916},{"is_tail_call":false,"symbol":"sub_1000020bc","target_va":4294975676},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100000c78","target_va":4294970488},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456}],"4294975300":[{"is_tail_call":false,"symbol":"sub_100001a3c","target_va":4294974012},{"is_tail_call":false,"symbol":"analytics_send_event","target_va":4294978484},{"is_tail_call":false,"symbol":"auditd_close_dirs","target_va":4294978644},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100001c20","target_va":4294974496},{"is_tail_call":true,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":true,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100000be8","target_va":4294970344},{"is_tail_call":false,"symbol":"dispatch_barrier_async","target_va":4294978788}],"4294975468":[{"is_tail_call":false,"symbol":"strftime","target_va":4294979428},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"strftime","target_va":4294979428}],"4294975628":[{"is_tail_call":false,"symbol":"sub_100001fec","target_va":4294975468},{"is_tail_call":false,"symbol":"sub_1000020bc","target_va":4294975676},{"is_tail_call":false,"symbol":"dispatch_barrier_async","target_va":4294978788},{"is_tail_call":false,"symbol":"sub_100001e14","target_va":4294974996},{"is_tail_call":false,"symbol":"dispatch_barrier_async","target_va":4294978788}],"4294975676":[{"is_tail_call":false,"symbol":"__stderrp","target_va":4294978452},{"is_tail_call":false,"symbol":"strerror","target_va":4294979412},{"is_tail_call":false,"symbol":"auditd_gen_record","target_va":4294978244},{"is_tail_call":false,"symbol":"__stack_chk_guard","target_va":4294978756},{"is_tail_call":false,"symbol":"sub_1000013e4","target_va":4294972388},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304}],"4294975800":[{"is_tail_call":false,"symbol":"ftruncate","target_va":4294979012},{"is_tail_call":false,"symbol":"fork","target_va":4294978964},{"is_tail_call":false,"symbol":"fprintf","target_va":4294978980},{"is_tail_call":false,"symbol":"fopen","target_va":4294978948},{"is_tail_call":false,"symbol":"sub_100000eb8","target_va":4294971064},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"sub_100001040","target_va":4294971456},{"is_tail_call":false,"symbol":"auditd_strerror","target_va":4294978692},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294979284},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294979284},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294979284},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294979284},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100000be8","target_va":4294970344},{"is_tail_call":false,"symbol":"dispatch_barrier_async","target_va":4294978788},{"is_tail_call":false,"symbol":"exit","target_va":4294978868},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100000d98","target_va":4294970776},{"is_tail_call":false,"symbol":"endac","target_va":4294978836},{"is_tail_call":false,"symbol":"execv","target_va":4294978852},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100000a38","target_va":4294969912},{"is_tail_call":false,"symbol":"fwrite","target_va":4294979028},{"is_tail_call":false,"symbol":"flock","target_va":4294978932},{"is_tail_call":false,"symbol":"fflush","target_va":4294978900},{"is_tail_call":false,"symbol":"dispatch_queue_create","target_va":4294978820},{"is_tail_call":false,"symbol":"sub_1000023e4","target_va":4294976484},{"is_tail_call":false,"symbol":"sub_10000247c","target_va":4294976636},{"is_tail_call":false,"symbol":"sub_1000013ec","target_va":4294972396},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100001e14","target_va":4294974996},{"is_tail_call":false,"symbol":"dispatch_barrier_async","target_va":4294978788}],"4294976484":[{"is_tail_call":false,"symbol":"sub_100001234","target_va":4294971956},{"is_tail_call":false,"symbol":"asl_open","target_va":4294978516},{"is_tail_call":false,"symbol":"sub_1000010e8","target_va":4294971624}],"4294976636":[{"is_tail_call":false,"symbol":"exit","target_va":4294978868},{"is_tail_call":false,"symbol":"strlcpy","target_va":4294979444},{"is_tail_call":false,"symbol":"free","target_va":4294978996},{"is_tail_call":false,"symbol":"strlen","target_va":4294979460},{"is_tail_call":false,"symbol":"IOAllowPowerChange","target_va":4294978292},{"is_tail_call":false,"symbol":"dispatch_once","target_va":4294978804},{"is_tail_call":false,"symbol":"fileno","target_va":4294978916},{"is_tail_call":false,"symbol":"memchr","target_va":4294979300},{"is_tail_call":false,"symbol":"mach_task_self_","target_va":4294979268},{"is_tail_call":false,"symbol":"strerror","target_va":4294979412}],"4294976884":[{"is_tail_call":false,"symbol":"rmdir","target_va":4294979364},{"is_tail_call":false,"symbol":"mach_msg","target_va":4294979188},{"is_tail_call":false,"symbol":"rename","target_va":4294979348},{"is_tail_call":false,"symbol":"signal","target_va":4294979380},{"is_tail_call":false,"symbol":"mach_port_move_member","target_va":4294979252},{"is_tail_call":false,"symbol":"mach_msg","target_va":4294979188},{"is_tail_call":false,"symbol":"mach_port_extract_right","target_va":4294979236},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"sub_100000fa8","target_va":4294971304},{"is_tail_call":false,"symbol":"strerror","target_va":4294979412},{"is_tail_call":false,"symbol":"sub_100000fec","target_va":4294971372},{"is_tail_call":false,"symbol":"sub_1000009a8","target_va":4294969768},{"is_tail_call":false,"symbol":"fileno","target_va":4294978916},{"is_tail_call":false,"symbol":"fileno","target_va":4294978916}],"4294977288":[{"is_tail_call":false,"symbol":"sub_100001554","target_va":4294972756}],"4294977840":[{"is_tail_call":false,"symbol":"sub_100001554","target_va":4294972756}],"4294977940":[{"is_tail_call":false,"symbol":"sub_100001554","target_va":4294972756}]},"data_xrefs":{"by_data":{"4294970056":[4294974012],"4294970200":[4294974012],"4294970632":[4294974012],"4294970920":[4294973376,4294974012],"4294972432":[4294972396],"4294972964":[4294975800],"4294973288":[4294973124],"4294977840":[4294977812],"4294979492":[4294969104],"4294979500":[4294969104,4294969480,4294969624,4294969768,4294969912,4294970056,4294970200,4294970344,4294970488,4294970632,4294970776,4294970920],"4294979513":[4294969480],"4294979521":[4294969624],"4294979530":[4294969768],"4294979540":[4294969912],"4294979546":[4294970056],"4294979555":[4294970200],"4294979560":[4294970344],"4294979568":[4294970488],"4294979580":[4294970632],"4294979584":[4294974996],"4294979585":[4294970776],"4294979592":[4294971064,4294974996],"4294979593":[4294970920],"4294979601":[4294969248],"4294979604":[4294974996],"4294979608":[4294974012],"4294979609":[4294974996],"4294979616":[4294971772,4294974012,4294975300],"4294979632":[4294974496,4294975676],"4294979648":[4294971064,4294971956,4294972432,4294973376,4294976884],"4294979650":[4294971064],"4294979657":[4294971064],"4294979664":[4294974996],"4294979674":[4294971064],"4294979680":[4294974012],"4294979682":[4294971064],"4294979684":[4294971064],"4294979687":[4294971064],"4294979695":[4294971624,4294971892],"4294979718":[4294971624],"4294979753":[4294972788],"4294979768":[4294972788],"4294979776":[4294976636],"4294979777":[4294972788],"4294979789":[4294972788],"4294979799":[4294972788],"4294979831":[4294973056],"4294979851":[4294973124],"4294979888":[4294971772],"4294979919":[4294971956],"4294979949":[4294971956],"4294980195":[4294972432],"4294980214":[4294972432],"4294980245":[4294973376],"4294980278":[4294973376],"4294980300":[4294973376],"4294980326":[4294973376],"4294980347":[4294973376],"4294980376":[4294973376],"4294980383":[4294973376],"4294980388":[4294973376],"4294980410":[4294973376],"4294980439":[4294973376],"4294980481":[4294973376],"4294980510":[4294973376],"4294980542":[4294973376,4294974012],"4294980569":[4294973376],"4294980592":[4294975468],"4294980621":[4294975468],"4294980649":[4294975468],"4294980678":[4294974496],"4294980721":[4294974496],"4294980751":[4294974496],"4294980782":[4294974496],"4294980822":[4294974496],"4294980861":[4294974496],"4294980888":[4294974496],"4294980928":[4294974496],"4294980955":[4294974496],"4294980983":[4294974496],"4294981030":[4294974496],"4294981055":[4294974496],"4294981087":[4294974496],"4294981132":[4294974496],"4294981160":[4294974496],"4294981204":[4294974496],"4294981255":[4294974496],"4294981301":[4294974496],"4294981326":[4294974496],"4294981372":[4294975800],"4294981375":[4294975800],"4294981400":[4294975800],"4294981406":[4294975800],"4294981428":[4294975800],"4294981440":[4294975800],"4294981501":[4294975800],"4294981521":[4294975800],"4294981550":[4294975800],"4294981565":[4294974012],"4294981588":[4294974012,4294974996],"4294981601":[4294974012],"4294981608":[4294974012],"4294981648":[4294974012],"4294981669":[4294976884],"4294981684":[4294976884],"4294981714":[4294976884],"4294981733":[4294976884],"4294981750":[4294976884],"4294981776":[4294976884],"4294981794":[4294974996],"4294981839":[4294974996],"4294981868":[4294974996],"4294981889":[4294974996],"4294981898":[4294975300],"4294981930":[4294975300],"4294981974":[4294975300],"4294982005":[4294975300],"4294982032":[4294975676,4294975800],"4294982052":[4294975676],"4294982075":[4294975676],"4294982117":[4294975800],"4294982158":[4294975800],"4294982199":[4294975800],"4294982239":[4294975800],"4294982280":[4294975800],"4294982282":[4294975800],"4294982306":[4294975800],"4294982355":[4294975800],"4294982431":[4294976636],"4294982470":[4294976636],"4294982472":[4294976636],"4294982496":[4294976636],"4294983680":[4294969104,4294969248,4294969480,4294969624,4294969768,4294969912,4294970056,4294970200,4294970344,4294970488,4294970632,4294970776,4294970920,4294971956,4294974012,4294974996,4294975800,4294977288,4294977388,4294977840,4294977940,4294978128],"4294983688":[4294978128],"4294983696":[4294978128],"4294983704":[4294978128],"4294983712":[4294978128],"4294983720":[4294978128],"4294983728":[4294978128],"4294983736":[4294978128],"4294983744":[4294978128],"4294983752":[4294978128],"4294983760":[4294978128],"4294983768":[4294978128],"4294983776":[4294978128],"4294983784":[4294978128],"4294983792":[4294978128],"4294983800":[4294978128],"4294983808":[4294978128],"4294983816":[4294978128],"4294983824":[4294978128],"4294983832":[4294978128],"4294983840":[4294978128],"4294983848":[4294978128],"4294983856":[4294978128],"4294983864":[4294978128],"4294983872":[4294978128],"4294983880":[4294978128],"4294983888":[4294978128],"4294983896":[4294978128],"4294983904":[4294978128],"4294983912":[4294978128],"4294983920":[4294978128],"4294983928":[4294978128],"4294983936":[4294978128],"4294983944":[4294978128],"4294983952":[4294978128],"4294983960":[4294978128],"4294983968":[4294978128],"4294983976":[4294978128],"4294983984":[4294978128],"4294983992":[4294978128],"4294984000":[4294978128],"4294984008":[4294978128],"4294984016":[4294978128],"4294984024":[4294978128],"4294984032":[4294978128],"4294984040":[4294978128],"4294984048":[4294978128],"4294984056":[4294978128],"4294984064":[4294978128],"4294984072":[4294978128],"4294984080":[4294978128],"4294984088":[4294978128],"4294984096":[4294978128],"4294984104":[4294978128],"4294984112":[4294978128],"4294984120":[4294978128],"4294984128":[4294978128],"4294984136":[4294978128],"4294984144":[4294978128],"4294984152":[4294978128],"4294984160":[4294978128],"4294984168":[4294978128],"4294984176":[4294978128],"4294984184":[4294978128],"4294984192":[4294978128],"4294984200":[4294978128],"4294984208":[4294978128],"4294984216":[4294978128],"4294984224":[4294978128],"4294984232":[4294978128],"4294984240":[4294978128],"4294984248":[4294978128],"4294984256":[4294978128],"4294984264":[4294978128],"4294984272":[4294978128],"4294984280":[4294978128],"4294984288":[4294978128],"4294984296":[4294978128],"4294984304":[4294978128],"4294984312":[4294978128],"4294984320":[4294978128],"4294984328":[4294978128],"4294984336":[4294978128],"4294984344":[4294978128],"4294984352":[4294977288,4294977388,4294977840,4294977940],"4294984360":[4294969104,4294969248,4294969480,4294969624,4294969768,4294969912,4294970056,4294970200,4294970344,4294970488,4294970632,4294970776,4294970920,4294974012,4294974996],"4294984368":[4294975800],"4294984384":[4294971956],"4294984424":[4294978128],"4294984488":[4294973056],"4294984520":[4294977664],"4295000064":[4294971624,4294971892,4294973124],"4295000068":[4294974012,4294975800],"4295000072":[4294971064,4294971304,4294971372,4294971456,4294971540],"4295000080":[4294971064,4294971304,4294971372,4294971456,4294971540],"4295000092":[4294971956,4294972396],"4295000094":[4294973376],"4295000096":[4294971956,4294972432,4294972964],"4295000104":[4294971064,4294978128],"4295000112":[4294973124],"4295000120":[4294972432,4294973124],"4295000128":[4294972432,4294973124],"4295000132":[4294972432],"4295000136":[4294972432],"4295000144":[4294973376],"4295000152":[4294973376],"4295000168":[4294974996,4294976884]},"by_function":{"4294969104":[{"data_va":4294984360,"insn_va":4294969128,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969132,"kind":"Global","value":null},{"data_va":4294979492,"insn_va":4294969152,"kind":"CString","value":"allhard"},{"data_va":4294979500,"insn_va":4294969176,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294969212,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969216,"kind":"Global","value":null}],"4294969248":[{"data_va":4294984360,"insn_va":4294969272,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969276,"kind":"Global","value":null},{"data_va":4294979601,"insn_va":4294969308,"kind":"CString","value":"/etc/security/audit_warn"},{"data_va":4294984360,"insn_va":4294969408,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969412,"kind":"Global","value":null}],"4294969480":[{"data_va":4294984360,"insn_va":4294969504,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969508,"kind":"Global","value":null},{"data_va":4294979513,"insn_va":4294969528,"kind":"CString","value":"allsoft"},{"data_va":4294979500,"insn_va":4294969552,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294969588,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969592,"kind":"Global","value":null}],"4294969624":[{"data_va":4294984360,"insn_va":4294969648,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969652,"kind":"Global","value":null},{"data_va":4294979521,"insn_va":4294969672,"kind":"CString","value":"auditoff"},{"data_va":4294979500,"insn_va":4294969696,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294969732,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969736,"kind":"Global","value":null}],"4294969768":[{"data_va":4294984360,"insn_va":4294969792,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969796,"kind":"Global","value":null},{"data_va":4294979530,"insn_va":4294969816,"kind":"CString","value":"closefile"},{"data_va":4294979500,"insn_va":4294969840,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294969876,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969880,"kind":"Global","value":null}],"4294969912":[{"data_va":4294984360,"insn_va":4294969936,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969940,"kind":"Global","value":null},{"data_va":4294979540,"insn_va":4294969960,"kind":"CString","value":"ebusy"},{"data_va":4294979500,"insn_va":4294969984,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294970020,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970024,"kind":"Global","value":null}],"4294970056":[{"data_va":4294984360,"insn_va":4294970080,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970084,"kind":"Global","value":null},{"data_va":4294979546,"insn_va":4294970104,"kind":"CString","value":"getacdir"},{"data_va":4294979500,"insn_va":4294970128,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294970164,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970168,"kind":"Global","value":null}],"4294970200":[{"data_va":4294984360,"insn_va":4294970224,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970228,"kind":"Global","value":null},{"data_va":4294979555,"insn_va":4294970248,"kind":"CString","value":"hard"},{"data_va":4294979500,"insn_va":4294970272,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294970308,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970312,"kind":"Global","value":null}],"4294970344":[{"data_va":4294984360,"insn_va":4294970368,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970372,"kind":"Global","value":null},{"data_va":4294979560,"insn_va":4294970392,"kind":"CString","value":"nostart"},{"data_va":4294979500,"insn_va":4294970416,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294970452,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970456,"kind":"Global","value":null}],"4294970488":[{"data_va":4294984360,"insn_va":4294970512,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970516,"kind":"Global","value":null},{"data_va":4294979568,"insn_va":4294970536,"kind":"CString","value":"postsigterm"},{"data_va":4294979500,"insn_va":4294970560,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294970596,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970600,"kind":"Global","value":null}],"4294970632":[{"data_va":4294984360,"insn_va":4294970656,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970660,"kind":"Global","value":null},{"data_va":4294979580,"insn_va":4294970680,"kind":"CString","value":"soft"},{"data_va":4294979500,"insn_va":4294970704,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294970740,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970744,"kind":"Global","value":null}],"4294970776":[{"data_va":4294984360,"insn_va":4294970800,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970804,"kind":"Global","value":null},{"data_va":4294979585,"insn_va":4294970824,"kind":"CString","value":"tmpfile"},{"data_va":4294979500,"insn_va":4294970848,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294970884,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970888,"kind":"Global","value":null}],"4294970920":[{"data_va":4294984360,"insn_va":4294970944,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970948,"kind":"Global","value":null},{"data_va":4294979593,"insn_va":4294970968,"kind":"CString","value":"expired"},{"data_va":4294979500,"insn_va":4294970992,"kind":"CString","value":"--will-sleep"},{"data_va":4294984360,"insn_va":4294971028,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971032,"kind":"Global","value":null}],"4294971064":[{"data_va":4295000104,"insn_va":4294971104,"kind":"Global","value":null},{"data_va":4294979650,"insn_va":4294971128,"kind":"CString","value":"auditd"},{"data_va":4294979657,"insn_va":4294971136,"kind":"CString","value":"com.apple.auditd"},{"data_va":4294979674,"insn_va":4294971172,"kind":"CString","value":"ReadUID"},{"data_va":4294979682,"insn_va":4294971180,"kind":"CString","value":null},{"data_va":4294979684,"insn_va":4294971196,"kind":"CString","value":"%u"},{"data_va":4294979592,"insn_va":4294971200,"kind":"CString","value":null},{"data_va":4294979592,"insn_va":4294971208,"kind":"CString","value":null},{"data_va":4295000080,"insn_va":4294971216,"kind":"Global","value":null},{"data_va":4294979687,"insn_va":4294971224,"kind":"CString","value":"ReadGID"},{"data_va":4294979592,"insn_va":4294971232,"kind":"CString","value":null},{"data_va":4295000072,"insn_va":4294971240,"kind":"Global","value":null},{"data_va":4294979648,"insn_va":4294971276,"kind":"CString","value":null}],"4294971304":[{"data_va":4295000072,"insn_va":4294971336,"kind":"Global","value":null},{"data_va":4295000080,"insn_va":4294971344,"kind":"Global","value":null}],"4294971372":[{"data_va":4295000072,"insn_va":4294971416,"kind":"Global","value":null},{"data_va":4295000080,"insn_va":4294971424,"kind":"Global","value":null}],"4294971456":[{"data_va":4295000072,"insn_va":4294971500,"kind":"Global","value":null},{"data_va":4295000080,"insn_va":4294971508,"kind":"Global","value":null}],"4294971540":[{"data_va":4295000072,"insn_va":4294971584,"kind":"Global","value":null},{"data_va":4295000080,"insn_va":4294971592,"kind":"Global","value":null}],"4294971624":[{"data_va":4295000064,"insn_va":4294971644,"kind":"Global","value":null},{"data_va":4295000064,"insn_va":4294971668,"kind":"Global","value":null},{"data_va":4294979695,"insn_va":4294971684,"kind":"CString","value":"com.apple.audit.change"},{"data_va":4295000064,"insn_va":4294971692,"kind":"Global","value":null},{"data_va":4294979718,"insn_va":4294971708,"kind":"CString","value":"Auditing enabled"},{"data_va":4295000064,"insn_va":4294971716,"kind":"Global","value":null}],"4294971772":[{"data_va":4294979888,"insn_va":4294971860,"kind":"CString","value":"Audit status check failed (%s)"},{"data_va":4294979616,"insn_va":4294971884,"kind":"CString","value":null}],"4294971892":[{"data_va":4295000064,"insn_va":4294971912,"kind":"Global","value":null},{"data_va":4294979695,"insn_va":4294971932,"kind":"CString","value":"com.apple.audit.change"},{"data_va":4295000064,"insn_va":4294971940,"kind":"Global","value":null}],"4294971956":[{"data_va":4294984384,"insn_va":4294971988,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971992,"kind":"Global","value":null},{"data_va":4295000092,"insn_va":4294972000,"kind":"Global","value":null},{"data_va":4294979919,"insn_va":4294972020,"kind":"CString","value":"Allocation of port set failed"},{"data_va":4294983680,"insn_va":4294972028,"kind":"Global","value":null},{"data_va":4295000096,"insn_va":4294972036,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972052,"kind":"Global","value":null},{"data_va":4295000096,"insn_va":4294972060,"kind":"Global","value":null},{"data_va":4295000092,"insn_va":4294972068,"kind":"Global","value":null},{"data_va":4294979949,"insn_va":4294972084,"kind":"CString","value":"Allocation of signal port failed"},{"data_va":4294979648,"insn_va":4294972108,"kind":"CString","value":null}],"4294972396":[{"data_va":4295000092,"insn_va":4294972400,"kind":"Global","value":null},{"data_va":4294972432,"insn_va":4294972408,"kind":"Global","value":null}],"4294972432":[{"data_va":4295000096,"insn_va":4294972496,"kind":"Global","value":null},{"data_va":4294980195,"insn_va":4294972548,"kind":"CString","value":"Received signal %d"},{"data_va":4295000136,"insn_va":4294972564,"kind":"Global","value":null},{"data_va":4294979648,"insn_va":4294972612,"kind":"CString","value":null},{"data_va":4294980214,"insn_va":4294972644,"kind":"CString","value":"Recevied msg on bad port 0x%x."},{"data_va":4295000132,"insn_va":4294972664,"kind":"Global","value":null},{"data_va":4295000128,"insn_va":4294972676,"kind":"Global","value":null},{"data_va":4295000132,"insn_va":4294972684,"kind":"Global","value":null},{"data_va":4295000120,"insn_va":4294972700,"kind":"Global","value":null},{"data_va":4295000128,"insn_va":4294972748,"kind":"Global","value":null}],"4294972788":[{"data_va":4294979753,"insn_va":4294972848,"kind":"CString","value":"audit_api_name"},{"data_va":4294979768,"insn_va":4294972856,"kind":"CString","value":"audit(2)"},{"data_va":4294979777,"insn_va":4294972872,"kind":"CString","value":"caller_name"},{"data_va":4294979789,"insn_va":4294972896,"kind":"CString","value":"caller_id"},{"data_va":4294979799,"insn_va":4294972916,"kind":"CString","value":"com.apple.audit_api_usage"}],"4294972964":[{"data_va":4295000096,"insn_va":4294972996,"kind":"Global","value":null}],"4294973056":[{"data_va":4294979831,"insn_va":4294973072,"kind":"CString","value":"com.apple.auditd.pm"},{"data_va":4294984488,"insn_va":4294973096,"kind":"Global","value":null}],"4294973124":[{"data_va":4295000112,"insn_va":4294973144,"kind":"Global","value":null},{"data_va":4295000120,"insn_va":4294973152,"kind":"Global","value":null},{"data_va":4295000128,"insn_va":4294973160,"kind":"Global","value":null},{"data_va":4294973288,"insn_va":4294973168,"kind":"Global","value":null},{"data_va":4295000064,"insn_va":4294973204,"kind":"Global","value":null},{"data_va":4294979851,"insn_va":4294973224,"kind":"CString","value":"Registering for power changes failed"}],"4294973376":[{"data_va":4295000144,"insn_va":4294973448,"kind":"Global","value":null},{"data_va":4295000152,"insn_va":4294973460,"kind":"Global","value":null},{"data_va":4295000094,"insn_va":4294973484,"kind":"Global","value":null},{"data_va":4294980245,"insn_va":4294973504,"kind":"CString","value":"Suppressing duplicate trigger %d"},{"data_va":4294980383,"insn_va":4294973604,"kind":"CString","value":"user"},{"data_va":4294980376,"insn_va":4294973612,"kind":"CString","value":"kernel"},{"data_va":4294980347,"insn_va":4294973632,"kind":"CString","value":"Got open new trigger from %s"},{"data_va":4294980439,"insn_va":4294973672,"kind":"CString","value":"Got close and die trigger"},{"data_va":4294980510,"insn_va":4294973720,"kind":"CString","value":"Got audit expire trails trigger"},{"data_va":4294970920,"insn_va":4294973732,"kind":"Global","value":null},{"data_va":4294980542,"insn_va":4294973764,"kind":"CString","value":"auditd_expire_trails(): %s"},{"data_va":4294980278,"insn_va":4294973776,"kind":"CString","value":"Got low space trigger"},{"data_va":4294980326,"insn_va":4294973788,"kind":"CString","value":"Got no space trigger"},{"data_va":4294980300,"insn_va":4294973812,"kind":"CString","value":"Error swapping audit file"},{"data_va":4294979648,"insn_va":4294973824,"kind":"CString","value":null},{"data_va":4294980388,"insn_va":4294973852,"kind":"CString","value":"Got read file trigger"},{"data_va":4294980410,"insn_va":4294973884,"kind":"CString","value":"Error setting audit controls"},{"data_va":4294980481,"insn_va":4294973896,"kind":"CString","value":"Got audit initialize trigger"},{"data_va":4294979648,"insn_va":4294973916,"kind":"CString","value":null},{"data_va":4294980569,"insn_va":4294973948,"kind":"CString","value":"Got unknown trigger %d"},{"data_va":4294979648,"insn_va":4294973984,"kind":"CString","value":null}],"4294974012":[{"data_va":4294984360,"insn_va":4294974036,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294974040,"kind":"Global","value":null},{"data_va":4294970632,"insn_va":4294974052,"kind":"Global","value":null},{"data_va":4294970200,"insn_va":4294974068,"kind":"Global","value":null},{"data_va":4294981565,"insn_va":4294974116,"kind":"CString","value":"auditd_read_dirs(): %s"},{"data_va":4294981565,"insn_va":4294974152,"kind":"CString","value":"auditd_read_dirs(): %s"},{"data_va":4294979608,"insn_va":4294974188,"kind":"CString","value":null},{"data_va":4294981588,"insn_va":4294974204,"kind":"CString","value":"%Y%m%d%H%M%S"},{"data_va":4295000068,"insn_va":4294974228,"kind":"Global","value":null},{"data_va":4294970056,"insn_va":4294974236,"kind":"Global","value":null},{"data_va":4294979616,"insn_va":4294974252,"kind":"CString","value":null},{"data_va":4294981601,"insn_va":4294974284,"kind":"CString","value":"%s: %m"},{"data_va":4294979616,"insn_va":4294974328,"kind":"CString","value":null},{"data_va":4294979616,"insn_va":4294974340,"kind":"CString","value":null},{"data_va":4294981608,"insn_va":4294974360,"kind":"CString","value":"auditd_new_curlink(\"%s\") failed: %s: %m"},{"data_va":4294979616,"insn_va":4294974368,"kind":"CString","value":null},{"data_va":4294981648,"insn_va":4294974388,"kind":"CString","value":"New audit file is %s"},{"data_va":4294970920,"insn_va":4294974400,"kind":"Global","value":null},{"data_va":4294980542,"insn_va":4294974432,"kind":"CString","value":"auditd_expire_trails(): %s"},{"data_va":4294984360,"insn_va":4294974460,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294974464,"kind":"Global","value":null},{"data_va":4294979680,"insn_va":4294974484,"kind":"CString","value":null}],"4294974496":[{"data_va":4294980678,"insn_va":4294974552,"kind":"CString","value":"auditd failed to check control mode %s: %m"},{"data_va":4294980721,"insn_va":4294974568,"kind":"CString","value":"auditd verified control mode."},{"data_va":4294980822,"insn_va":4294974596,"kind":"CString","value":"Registered %d event to class mappings."},{"data_va":4294980751,"insn_va":4294974616,"kind":"CString","value":"auditd_set_evcmap() failed: %m"},{"data_va":4294980782,"insn_va":4294974628,"kind":"CString","value":"No events to class mappings registered."},{"data_va":4294980861,"insn_va":4294974660,"kind":"CString","value":"auditd_set_namask() %s: %m"},{"data_va":4294980888,"insn_va":4294974680,"kind":"CString","value":"Registered non-attributable event mask."},{"data_va":4294980928,"insn_va":4294974720,"kind":"CString","value":"auditd_set_policy() %s: %m"},{"data_va":4294980983,"insn_va":4294974740,"kind":"CString","value":"auditd can't set audit policy in external mode"},{"data_va":4294980955,"insn_va":4294974752,"kind":"CString","value":"Set audit policy in kernel."},{"data_va":4294981030,"insn_va":4294974792,"kind":"CString","value":"audit_set_fsize() %s: %m"},{"data_va":4294981087,"insn_va":4294974812,"kind":"CString","value":"auditd can't set trail size in external mode"},{"data_va":4294981055,"insn_va":4294974824,"kind":"CString","value":"Set audit trail size in kernel."},{"data_va":4294981132,"insn_va":4294974864,"kind":"CString","value":"auditd_set_minfree() %s: %m"},{"data_va":4294981204,"insn_va":4294974884,"kind":"CString","value":"auditd can't set trail min free percent in kernel."},{"data_va":4294981160,"insn_va":4294974896,"kind":"CString","value":"Set audit trail min free percent in kernel."},{"data_va":4294981255,"insn_va":4294974924,"kind":"CString","value":"audit_control(5) may be missing 'host:' field"},{"data_va":4294981326,"insn_va":4294974940,"kind":"CString","value":"Set audit host address information in kernel."},{"data_va":4294981301,"insn_va":4294974964,"kind":"CString","value":"auditd_set_host() %s: %m"},{"data_va":4294979632,"insn_va":4294974988,"kind":"CString","value":null}],"4294974996":[{"data_va":4294984360,"insn_va":4294975020,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294975024,"kind":"Global","value":null},{"data_va":4294981794,"insn_va":4294975060,"kind":"CString","value":"auditd_gen_record(AUE_audit_shutdown) %s: %m"},{"data_va":4294979604,"insn_va":4294975076,"kind":"CString","value":null},{"data_va":4294979584,"insn_va":4294975092,"kind":"CString","value":null},{"data_va":4294981839,"insn_va":4294975108,"kind":"CString","value":"Disabling audit failed! : %s"},{"data_va":4294979592,"insn_va":4294975156,"kind":"CString","value":null},{"data_va":4294981588,"insn_va":4294975172,"kind":"CString","value":"%Y%m%d%H%M%S"},{"data_va":4294979609,"insn_va":4294975176,"kind":"CString","value":null},{"data_va":4294979609,"insn_va":4294975188,"kind":"CString","value":null},{"data_va":4295000168,"insn_va":4294975200,"kind":"Global","value":null},{"data_va":4294981868,"insn_va":4294975228,"kind":"CString","value":"Could not unregister"},{"data_va":4294981889,"insn_va":4294975244,"kind":"CString","value":"Finished"},{"data_va":4294984360,"insn_va":4294975260,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294975264,"kind":"Global","value":null},{"data_va":4294979664,"insn_va":4294975288,"kind":"CString","value":null}],"4294975300":[{"data_va":4294981930,"insn_va":4294975356,"kind":"CString","value":"auditd_gen_record(AUE_audit_startup) %s: %m"},{"data_va":4294982005,"insn_va":4294975376,"kind":"CString","value":"Audit controls init failed"},{"data_va":4294979616,"insn_va":4294975384,"kind":"CString","value":null},{"data_va":4294981974,"insn_va":4294975412,"kind":"CString","value":"Audit controls init successful"},{"data_va":4294979616,"insn_va":4294975420,"kind":"CString","value":null},{"data_va":4294981898,"insn_va":4294975448,"kind":"CString","value":"Error creating audit trail file"}],"4294975468":[{"data_va":4294980649,"insn_va":4294975524,"kind":"CString","value":"exited as a result of signal"},{"data_va":4294980621,"insn_va":4294975532,"kind":"CString","value":"exited with non-zero status"},{"data_va":4294980592,"insn_va":4294975540,"kind":"CString","value":"warn process [pid=%d] %s %d."}],"4294975676":[{"data_va":4294982032,"insn_va":4294975704,"kind":"CString","value":"/var/run/auditd.pid"},{"data_va":4294982075,"insn_va":4294975756,"kind":"CString","value":"Error closing trigger messaging mechanism"},{"data_va":4294982052,"insn_va":4294975772,"kind":"CString","value":"Couldn't remove %s: %m"},{"data_va":4294979632,"insn_va":4294975792,"kind":"CString","value":null}],"4294975800":[{"data_va":4294981372,"insn_va":4294975852,"kind":"CString","value":"dl"},{"data_va":4294981400,"insn_va":4294975928,"kind":"CString","value":"audit"},{"data_va":4295000068,"insn_va":4294975948,"kind":"Global","value":null},{"data_va":4294984368,"insn_va":4294975960,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294975964,"kind":"Global","value":null},{"data_va":4294981375,"insn_va":4294975972,"kind":"CString","value":"usage: auditd [-d] [-l]\n"},{"data_va":4294981428,"insn_va":4294976016,"kind":"CString","value":"starting..."},{"data_va":4294981406,"insn_va":4294976024,"kind":"CString","value":"started by launchd..."},{"data_va":4295000068,"insn_va":4294976044,"kind":"Global","value":null},{"data_va":4294981440,"insn_va":4294976056,"kind":"CString","value":"Audit review group '%s' not available, using daemon gid (%d)"},{"data_va":4294981501,"insn_va":4294976100,"kind":"CString","value":"Failed to daemonize"},{"data_va":4294972964,"insn_va":4294976116,"kind":"Global","value":null},{"data_va":4294982117,"insn_va":4294976148,"kind":"CString","value":"Could not set signal handler for SIGTERM"},{"data_va":4294972964,"insn_va":4294976160,"kind":"Global","value":null},{"data_va":4294982158,"insn_va":4294976192,"kind":"CString","value":"Could not set signal handler for SIGCHLD"},{"data_va":4294972964,"insn_va":4294976204,"kind":"Global","value":null},{"data_va":4294982199,"insn_va":4294976236,"kind":"CString","value":"Could not set signal handler for SIGHUP"},{"data_va":4294972964,"insn_va":4294976248,"kind":"Global","value":null},{"data_va":4294982239,"insn_va":4294976280,"kind":"CString","value":"Could not set signal handler for SIGALRM"},{"data_va":4294982032,"insn_va":4294976304,"kind":"CString","value":"/var/run/auditd.pid"},{"data_va":4294982280,"insn_va":4294976312,"kind":"CString","value":null},{"data_va":4294982282,"insn_va":4294976328,"kind":"CString","value":"Could not open PID file"},{"data_va":4294982306,"insn_va":4294976372,"kind":"CString","value":"PID file is locked (is another auditd running?)."},{"data_va":4294981521,"insn_va":4294976388,"kind":"CString","value":"Could not register as daemon"},{"data_va":4294982355,"insn_va":4294976424,"kind":"CString","value":"%u\n"},{"data_va":4294981550,"insn_va":4294976464,"kind":"CString","value":"abnormal exit."}],"4294976636":[{"data_va":4294982431,"insn_va":4294976688,"kind":"CString","value":"/var/audit/audit_quick_start_error.log"},{"data_va":4294982470,"insn_va":4294976696,"kind":"CString","value":null},{"data_va":4294982472,"insn_va":4294976764,"kind":"CString","value":"audit_quick_start_error"},{"data_va":4294982496,"insn_va":4294976780,"kind":"CString","value":"com.apple.audit.quick-start-error"},{"data_va":4294982431,"insn_va":4294976816,"kind":"CString","value":"/var/audit/audit_quick_start_error.log"},{"data_va":4294982431,"insn_va":4294976844,"kind":"CString","value":"/var/audit/audit_quick_start_error.log"},{"data_va":4294979776,"insn_va":4294976876,"kind":"CString","value":null}],"4294976884":[{"data_va":4295000168,"insn_va":4294976916,"kind":"Global","value":null},{"data_va":4295000168,"insn_va":4294976968,"kind":"Global","value":null},{"data_va":4295000168,"insn_va":4294976980,"kind":"Global","value":null},{"data_va":4294981669,"insn_va":4294976988,"kind":"CString","value":"not_terminated"},{"data_va":4295000168,"insn_va":4294977036,"kind":"Global","value":null},{"data_va":4294981684,"insn_va":4294977048,"kind":"CString","value":"Could not rename %s to %s: %m"},{"data_va":4294981714,"insn_va":4294977084,"kind":"CString","value":"/var/audit/current"},{"data_va":4294981750,"insn_va":4294977128,"kind":"CString","value":"Could not rename %s to %s"},{"data_va":4294981776,"insn_va":4294977144,"kind":"CString","value":"malloc failed: %m"},{"data_va":4294981714,"insn_va":4294977160,"kind":"CString","value":"/var/audit/current"},{"data_va":4295000168,"insn_va":4294977168,"kind":"Global","value":null},{"data_va":4294981733,"insn_va":4294977180,"kind":"CString","value":"renamed %s to %s"},{"data_va":4295000168,"insn_va":4294977188,"kind":"Global","value":null},{"data_va":4295000168,"insn_va":4294977196,"kind":"Global","value":null},{"data_va":4294979648,"insn_va":4294977228,"kind":"CString","value":null}],"4294977288":[{"data_va":4294984352,"insn_va":4294977364,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294977368,"kind":"Global","value":null}],"4294977388":[{"data_va":4294984352,"insn_va":4294977536,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294977540,"kind":"Global","value":null}],"4294977664":[{"data_va":4294984520,"insn_va":4294977728,"kind":"Global","value":null}],"4294977812":[{"data_va":4294977840,"insn_va":4294977824,"kind":"Global","value":null}],"4294977840":[{"data_va":4294984352,"insn_va":4294977916,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294977920,"kind":"Global","value":null}],"4294977940":[{"data_va":4294984352,"insn_va":4294978064,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978068,"kind":"Global","value":null},{"data_va":4294984352,"insn_va":4294978100,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978104,"kind":"Global","value":null}],"4294978128":[{"data_va":4295000104,"insn_va":4294978132,"kind":"Global","value":null},{"data_va":4294984424,"insn_va":4294978140,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294978152,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978156,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294978168,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978172,"kind":"Global","value":null},{"data_va":4294983704,"insn_va":4294978184,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978188,"kind":"Global","value":null},{"data_va":4294983712,"insn_va":4294978200,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978204,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294978216,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978220,"kind":"Global","value":null},{"data_va":4294983728,"insn_va":4294978232,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978236,"kind":"Global","value":null},{"data_va":4294983880,"insn_va":4294978248,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978252,"kind":"Global","value":null},{"data_va":4294983888,"insn_va":4294978264,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978268,"kind":"Global","value":null},{"data_va":4294983896,"insn_va":4294978280,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978284,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978296,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978300,"kind":"Global","value":null},{"data_va":4294983904,"insn_va":4294978312,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978316,"kind":"Global","value":null},{"data_va":4294983912,"insn_va":4294978328,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978332,"kind":"Global","value":null},{"data_va":4294983920,"insn_va":4294978344,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978348,"kind":"Global","value":null},{"data_va":4294983928,"insn_va":4294978360,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978364,"kind":"Global","value":null},{"data_va":4294983936,"insn_va":4294978376,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978380,"kind":"Global","value":null},{"data_va":4294983944,"insn_va":4294978392,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978396,"kind":"Global","value":null},{"data_va":4294983736,"insn_va":4294978408,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978412,"kind":"Global","value":null},{"data_va":4294983744,"insn_va":4294978424,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978428,"kind":"Global","value":null},{"data_va":4294983752,"insn_va":4294978440,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978444,"kind":"Global","value":null},{"data_va":4294983768,"insn_va":4294978456,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978460,"kind":"Global","value":null},{"data_va":4294983776,"insn_va":4294978472,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978476,"kind":"Global","value":null},{"data_va":4294983784,"insn_va":4294978488,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978492,"kind":"Global","value":null},{"data_va":4294983792,"insn_va":4294978504,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978508,"kind":"Global","value":null},{"data_va":4294983800,"insn_va":4294978520,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978524,"kind":"Global","value":null},{"data_va":4294983808,"insn_va":4294978536,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978540,"kind":"Global","value":null},{"data_va":4294983816,"insn_va":4294978552,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978556,"kind":"Global","value":null},{"data_va":4294983824,"insn_va":4294978568,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978572,"kind":"Global","value":null},{"data_va":4294983832,"insn_va":4294978584,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978588,"kind":"Global","value":null},{"data_va":4294983840,"insn_va":4294978600,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978604,"kind":"Global","value":null},{"data_va":4294983848,"insn_va":4294978616,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978620,"kind":"Global","value":null},{"data_va":4294983856,"insn_va":4294978632,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978636,"kind":"Global","value":null},{"data_va":4294983864,"insn_va":4294978648,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978652,"kind":"Global","value":null},{"data_va":4294983872,"insn_va":4294978664,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978668,"kind":"Global","value":null},{"data_va":4294983952,"insn_va":4294978680,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978684,"kind":"Global","value":null},{"data_va":4294983960,"insn_va":4294978696,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978700,"kind":"Global","value":null},{"data_va":4294983968,"insn_va":4294978712,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978716,"kind":"Global","value":null},{"data_va":4294983976,"insn_va":4294978728,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978732,"kind":"Global","value":null},{"data_va":4294983984,"insn_va":4294978744,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978748,"kind":"Global","value":null},{"data_va":4294983760,"insn_va":4294978760,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978764,"kind":"Global","value":null},{"data_va":4294983992,"insn_va":4294978776,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978780,"kind":"Global","value":null},{"data_va":4294984000,"insn_va":4294978792,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978796,"kind":"Global","value":null},{"data_va":4294984008,"insn_va":4294978808,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978812,"kind":"Global","value":null},{"data_va":4294984016,"insn_va":4294978824,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978828,"kind":"Global","value":null},{"data_va":4294984024,"insn_va":4294978840,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978844,"kind":"Global","value":null},{"data_va":4294984032,"insn_va":4294978856,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978860,"kind":"Global","value":null},{"data_va":4294984040,"insn_va":4294978872,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978876,"kind":"Global","value":null},{"data_va":4294984048,"insn_va":4294978888,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978892,"kind":"Global","value":null},{"data_va":4294984056,"insn_va":4294978904,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978908,"kind":"Global","value":null},{"data_va":4294984064,"insn_va":4294978920,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978924,"kind":"Global","value":null},{"data_va":4294984072,"insn_va":4294978936,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978940,"kind":"Global","value":null},{"data_va":4294984080,"insn_va":4294978952,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978956,"kind":"Global","value":null},{"data_va":4294984088,"insn_va":4294978968,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978972,"kind":"Global","value":null},{"data_va":4294984096,"insn_va":4294978984,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294978988,"kind":"Global","value":null},{"data_va":4294984104,"insn_va":4294979000,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979004,"kind":"Global","value":null},{"data_va":4294984112,"insn_va":4294979016,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979020,"kind":"Global","value":null},{"data_va":4294984120,"insn_va":4294979032,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979036,"kind":"Global","value":null},{"data_va":4294984128,"insn_va":4294979048,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979052,"kind":"Global","value":null},{"data_va":4294984136,"insn_va":4294979064,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979068,"kind":"Global","value":null},{"data_va":4294984144,"insn_va":4294979080,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979084,"kind":"Global","value":null},{"data_va":4294984152,"insn_va":4294979096,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979100,"kind":"Global","value":null},{"data_va":4294984160,"insn_va":4294979112,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979116,"kind":"Global","value":null},{"data_va":4294984168,"insn_va":4294979128,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979132,"kind":"Global","value":null},{"data_va":4294984176,"insn_va":4294979144,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979148,"kind":"Global","value":null},{"data_va":4294984184,"insn_va":4294979160,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979164,"kind":"Global","value":null},{"data_va":4294984192,"insn_va":4294979176,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979180,"kind":"Global","value":null},{"data_va":4294984200,"insn_va":4294979192,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979196,"kind":"Global","value":null},{"data_va":4294984208,"insn_va":4294979208,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979212,"kind":"Global","value":null},{"data_va":4294984216,"insn_va":4294979224,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979228,"kind":"Global","value":null},{"data_va":4294984224,"insn_va":4294979240,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979244,"kind":"Global","value":null},{"data_va":4294984232,"insn_va":4294979256,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979260,"kind":"Global","value":null},{"data_va":4294984240,"insn_va":4294979272,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979276,"kind":"Global","value":null},{"data_va":4294984248,"insn_va":4294979288,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979292,"kind":"Global","value":null},{"data_va":4294984256,"insn_va":4294979304,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979308,"kind":"Global","value":null},{"data_va":4294984264,"insn_va":4294979320,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979324,"kind":"Global","value":null},{"data_va":4294984272,"insn_va":4294979336,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979340,"kind":"Global","value":null},{"data_va":4294984280,"insn_va":4294979352,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979356,"kind":"Global","value":null},{"data_va":4294984288,"insn_va":4294979368,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979372,"kind":"Global","value":null},{"data_va":4294984296,"insn_va":4294979384,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979388,"kind":"Global","value":null},{"data_va":4294984304,"insn_va":4294979400,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979404,"kind":"Global","value":null},{"data_va":4294984312,"insn_va":4294979416,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979420,"kind":"Global","value":null},{"data_va":4294984320,"insn_va":4294979432,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979436,"kind":"Global","value":null},{"data_va":4294984328,"insn_va":4294979448,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979452,"kind":"Global","value":null},{"data_va":4294984336,"insn_va":4294979464,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979468,"kind":"Global","value":null},{"data_va":4294984344,"insn_va":4294979480,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294979484,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294969104":"sub_100000710","4294969248":"sub_1000007a0","4294969480":"sub_100000888","4294969624":"sub_100000918","4294969768":"sub_1000009a8","4294969912":"sub_100000a38","4294970056":"sub_100000ac8","4294970200":"sub_100000b58","4294970344":"sub_100000be8","4294970488":"sub_100000c78","4294970632":"sub_100000d08","4294970776":"sub_100000d98","4294970920":"sub_100000e28","4294971064":"sub_100000eb8","4294971292":"sub_100000f9c","4294971304":"sub_100000fa8","4294971372":"sub_100000fec","4294971456":"sub_100001040","4294971540":"sub_100001094","4294971624":"sub_1000010e8","4294971772":"sub_10000117c","4294971892":"sub_1000011f4","4294971956":"sub_100001234","4294972388":"sub_1000013e4","4294972396":"sub_1000013ec","4294972432":"sub_100001410","4294972756":"sub_100001554","4294972788":"sub_100001574","4294972964":"sub_100001624","4294973056":"sub_100001680","4294973124":"sub_1000016c4","4294973288":"sub_100001768","4294973376":"sub_1000017c0","4294974012":"sub_100001a3c","4294974496":"sub_100001c20","4294974996":"sub_100001e14","4294975300":"sub_100001f44","4294975468":"sub_100001fec","4294975628":"sub_10000208c","4294975676":"sub_1000020bc","4294975800":"sub_100002138","4294976484":"sub_1000023e4","4294976636":"sub_10000247c","4294976884":"sub_100002574","4294977236":"sub_1000026d4","4294977288":"sub_100002708","4294977388":"sub_10000276c","4294977664":"sub_100002880","4294977812":"sub_100002914","4294977840":"sub_100002930","4294977940":"sub_100002994","4294978128":"sub_100002a50"}},"capabilities":[{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.auditd","value":{"Bool":true}},{"category":"Hardware","description":"Direct hardware/driver communication","imported_functions":["IOAllowPowerChange","IODeregisterForSystemPower","IONotificationPortDestroy","IONotificationPortSetDispatchQueue","IORegisterForSystemPower","IOServiceClose"],"source":"/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit","value":null},{"category":"Analytics","description":"Apple unified analytics submission","imported_functions":["analytics_send_event"],"source":"/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics","value":null}],"code_signature":{"code_directory":{"cdhash":"4869f6b29e27c9b86ff177c8ccfaea5b6291a88e8ca9744f60f3c39ada334b2f","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.auditd","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"3d59ef8bd6ac096c782bac711f3a7a26e7445b4abf1c872423e490311f746bba","frameworkhash":"c277d71d3c831c103af0920fe3a4401522f437098c1938d598be3ee650bc1d98","imphash":"f4452e81a52ae70bc3d83b6d0b37033a9eb6af28aeea042137429f82ccfcd388","sha256_text":"42e1941c153830dc54004e32821697318ac89254753975b206ecf78ae4ac2a46","symbolhash":"f4452e81a52ae70bc3d83b6d0b37033a9eb6af28aeea042137429f82ccfcd388"},"sets":{"apis_called":["IOAllowPowerChange","IONotificationPortDestroy","IONotificationPortSetDispatchQueue","IORegisterForSystemPower","IOServiceClose","NDR_record","_NSConcreteGlobalBlock","__error","__stack_chk_fail","__stack_chk_guard","__stderrp","alarm","analytics_send_event","asl_new","asl_open","asl_set","asl_set_filter","asl_vlog","asprintf","audit_get_cond","audit_get_ctlmode","audit_set_cond","auditd_close_dirs","auditd_expire_trails","auditd_gen_record","auditd_prevent_audit","auditd_read_dirs","auditd_set_evcmap","auditd_set_fsize","auditd_set_host","auditd_set_minfree","auditd_set_namask","auditd_strerror","auditd_swap_trail","bootstrap_port","dispatch_barrier_async","dispatch_once","dispatch_queue_create","endac","execv","exit","fclose","fflush","fileno","flock","fopen","fork","fprintf","free","ftruncate","fwrite","getgid","getgrnam","getpid","gettimeofday","gmtime","mach_host_self","mach_msg","mach_port_allocate","mach_port_extract_right","mach_port_move_member","mach_task_self_","malloc_type_malloc","memchr","notify_post","readlink","rename","rmdir","signal","stat","strerror","strftime","strlcpy","strlen","strstr","sub_100000710","sub_1000007a0","sub_100000888","sub_1000009a8","sub_100000a38","sub_100000be8","sub_100000c78","sub_100000d98","sub_100000eb8","sub_100000f9c","sub_100000fa8","sub_100000fec","sub_100001040","sub_100001094","sub_1000010e8","sub_10000117c","sub_1000011f4","sub_100001234","sub_1000013e4","sub_1000013ec","sub_100001554","sub_1000017c0","sub_100001a3c","sub_100001c20","sub_100001e14","sub_100001f44","sub_100001fec","sub_10000208c","sub_1000020bc","sub_1000023e4","sub_10000247c","sub_100002574","sub_100002880","sub_100002994"],"bundle_ids":[")com.apple.private.protected-audit-control",")com.apple.private.security.storage.auditd","<key>com.apple.private.protected-audit-control</key>","<key>com.apple.private.security.storage.auditd</key>","com.apple.audit.change","com.apple.audit.quick-start-error","com.apple.audit_api_usage","com.apple.auditd","com.apple.auditd.pm"],"cpp_classes":[],"entitlements":["com.apple.private.protected-audit-control","com.apple.private.security.storage.auditd"],"frameworks":["CoreAnalytics","IOKit","libbsm.0.dylib","libauditd.0.dylib","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":["CoreAnalytics"],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":["com.apple.auditd"]},"vector":{"bundle_ids":9,"cap_analytics":1,"cap_hardware":1,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":1,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":2,"file_paths":5,"frameworks_private":1,"frameworks_total":5,"iokit_constants":0,"library_functions":0,"nlist_functions":52,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":9,"size_log2":17.088789,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":2,"text_ratio":0.06488177,"url_endpoints":4,"xpc_provides":1}},"dwarf_metadata":null,"entitlements":{"entries":{"com.apple.private.protected-audit-control":{"Bool":true},"com.apple.private.security.storage.auditd":{"Bool":true}},"raw_plist":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>com.apple.private.protected-audit-control</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.auditd</key>\n\t<true/>\n</dict>\n</plist>\n"},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:12Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"4869f6b29e27c9b86ff177c8ccfaea5b6291a88e8ca9744f60f3c39ada334b2f","file_modified":"2026-04-06T12:08:22Z","file_size":139392,"is_arm64e":true,"min_os":"26.1.0","name":"auditd","platform":"macOS","sdk":"26.1.0","sha256":"4fd7229505d03162e4eeda5198e4cdd6be4c66094064ca5a29a0bcd87179d919","sha256_slice":"32d4d8c7ffc6f6d6af2e306f1d23f4c4dac7653e63729e74f304d71a965d7477","source_version":"90.0.0.0.0","team_id":null,"uuid":"24AC0A51-09CC-370C-9CEF-64516689DAED"},"frameworks":[{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics"},{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libbsm.0.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libauditd.0.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":52,"imports":[{"address":0,"dylib":"/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics","is_lazy":false,"is_weak":false,"name":"analytics_send_event"},{"address":0,"dylib":"/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit","is_lazy":false,"is_weak":false,"name":"IOAllowPowerChange"},{"address":0,"dylib":"/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit","is_lazy":false,"is_weak":false,"name":"IODeregisterForSystemPower"},{"address":0,"dylib":"/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit","is_lazy":false,"is_weak":false,"name":"IONotificationPortDestroy"},{"address":0,"dylib":"/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit","is_lazy":false,"is_weak":false,"name":"IONotificationPortSetDispatchQueue"},{"address":0,"dylib":"/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit","is_lazy":false,"is_weak":false,"name":"IORegisterForSystemPower"},{"address":0,"dylib":"/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit","is_lazy":false,"is_weak":false,"name":"IOServiceClose"},{"address":0,"dylib":"/usr/lib/libbsm.0.dylib","is_lazy":false,"is_weak":false,"name":"audit_get_cond"},{"address":0,"dylib":"/usr/lib/libbsm.0.dylib","is_lazy":false,"is_weak":false,"name":"audit_get_ctlmode"},{"address":0,"dylib":"/usr/lib/libbsm.0.dylib","is_lazy":false,"is_weak":false,"name":"audit_set_cond"},{"address":0,"dylib":"/usr/lib/libbsm.0.dylib","is_lazy":false,"is_weak":false,"name":"endac"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_close_dirs"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_expire_trails"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_gen_record"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_new_curlink"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_prevent_audit"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_read_dirs"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_set_evcmap"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_set_fsize"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_set_host"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_set_minfree"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_set_namask"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_set_policy"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_strerror"},{"address":0,"dylib":"/usr/lib/libauditd.0.dylib","is_lazy":false,"is_weak":false,"name":"auditd_swap_trail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__error"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"alarm"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"asl_new"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"asl_open"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"asl_set"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"asl_set_filter"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"asl_vlog"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"asprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"bootstrap_check_in"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"daemon"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"dispatch_barrier_async"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"dispatch_once"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"dispatch_queue_create"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"execv"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fclose"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fflush"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fileno"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"flock"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fopen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fork"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"free"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"ftruncate"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getgid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getgrnam"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getline"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getpid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"gettimeofday"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"gmtime"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"host_set_special_port"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mach_host_self"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mach_msg"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mach_msg_server"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mach_port_allocate"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mach_port_extract_right"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mach_port_move_member"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"malloc_type_malloc"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"memchr"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"notify_post"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"readlink"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"rename"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"rmdir"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"signal"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"stat"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strerror"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strftime"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strlcpy"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strlen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strstr"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"time"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"unlink"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"waitpid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"xpc_dictionary_create"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"xpc_dictionary_set_string"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"xpc_release"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"NDR_record"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"bootstrap_port"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mach_task_self_"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"_NSConcreteGlobalBlock"}],"interesting_strings":{"bundle_ids":[")com.apple.private.protected-audit-control",")com.apple.private.security.storage.auditd","<key>com.apple.private.protected-audit-control</key>","<key>com.apple.private.security.storage.auditd</key>","com.apple.audit.change","com.apple.audit.quick-start-error","com.apple.audit_api_usage","com.apple.auditd","com.apple.auditd.pm"],"file_paths":["/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit","/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics","/var/audit/audit_quick_start_error.log","/var/audit/current","/var/run/auditd.pid"],"telemetry":["/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics","_analytics_send_event"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":52,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1808,"protection":"r-x","segment":"__TEXT","size":9044},{"name":"__auth_stubs","offset":10852,"protection":"r-x","segment":"__TEXT","size":1344},{"name":"__cstring","offset":12196,"protection":"r-x","segment":"__TEXT","size":3038},{"name":"__unwind_info","offset":15236,"protection":"r-x","segment":"__TEXT","size":216},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":672},{"name":"__got","offset":17056,"protection":"rw-","segment":"__DATA_CONST","size":40},{"name":"__const","offset":17096,"protection":"rw-","segment":"__DATA_CONST","size":312},{"name":"__data","offset":32768,"protection":"rw-","segment":"__DATA","size":8},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":104}],"summary":"Communicates directly with hardware and drivers to collect system diagnostics and health metrics. Submits collected data to Apple's unified analytics infrastructure via network endpoints. Maintains private storage for diagnostic data and logs. Exposes an XPC service for other system components to request diagnostics or health status. Runs continuously as a system daemon to monitor device state and performance.","swift_metadata":null,"title":"Hardware diagnostics and telemetry daemon — monitors device health and submits analytics","total_strings":425,"xpc_services":["com.apple.auditd"]}