{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968784":[{"is_tail_call":false,"symbol":"fclose","target_va":4294971576},{"is_tail_call":false,"symbol":"fclose","target_va":4294971576},{"is_tail_call":false,"symbol":"fclose","target_va":4294971576},{"is_tail_call":false,"symbol":"fclose","target_va":4294971576},{"is_tail_call":false,"symbol":"lseek","target_va":4294971688},{"is_tail_call":false,"symbol":"openat","target_va":4294971736},{"is_tail_call":false,"symbol":"basename","target_va":4294971480},{"is_tail_call":false,"symbol":"lseek","target_va":4294971688},{"is_tail_call":false,"symbol":"fopen","target_va":4294971608},{"is_tail_call":false,"symbol":"__stack_chk_guard","target_va":4294971432},{"is_tail_call":false,"symbol":"feof","target_va":4294971592},{"is_tail_call":false,"symbol":"errx","target_va":4294971544},{"is_tail_call":false,"symbol":"fread","target_va":4294971624},{"is_tail_call":false,"symbol":"fread","target_va":4294971624},{"is_tail_call":false,"symbol":"BZ2_bzReadOpen","target_va":4294971400},{"is_tail_call":false,"symbol":"fread","target_va":4294971624},{"is_tail_call":false,"symbol":"BZ2_bzReadOpen","target_va":4294971400},{"is_tail_call":false,"symbol":"fread","target_va":4294971624},{"is_tail_call":false,"symbol":"BZ2_bzReadOpen","target_va":4294971400},{"is_tail_call":false,"symbol":"fseeko","target_va":4294971656},{"is_tail_call":false,"symbol":"fwrite","target_va":4294971672},{"is_tail_call":false,"symbol":"fseeko","target_va":4294971656},{"is_tail_call":false,"symbol":"open","target_va":4294971720},{"is_tail_call":false,"symbol":"atexit","target_va":4294971464},{"is_tail_call":false,"symbol":"fwrite","target_va":4294971672},{"is_tail_call":false,"symbol":"feof","target_va":4294971592},{"is_tail_call":false,"symbol":"BZ2_bzRead","target_va":4294971368},{"is_tail_call":false,"symbol":"feof","target_va":4294971592},{"is_tail_call":false,"symbol":"BZ2_bzRead","target_va":4294971368},{"is_tail_call":false,"symbol":"feof","target_va":4294971592},{"is_tail_call":false,"symbol":"BZ2_bzRead","target_va":4294971368},{"is_tail_call":false,"symbol":"BZ2_bzReadClose","target_va":4294971384},{"is_tail_call":false,"symbol":"BZ2_bzReadClose","target_va":4294971384},{"is_tail_call":false,"symbol":"BZ2_bzReadClose","target_va":4294971384},{"is_tail_call":false,"symbol":"errx","target_va":4294971544},{"is_tail_call":false,"symbol":"errx","target_va":4294971544},{"is_tail_call":false,"symbol":"errx","target_va":4294971544},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294971448},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294971704},{"is_tail_call":false,"symbol":"unlinkat","target_va":4294971784},{"is_tail_call":false,"symbol":"atexit","target_va":4294971464},{"is_tail_call":false,"symbol":"fopen","target_va":4294971608},{"is_tail_call":false,"symbol":"fopen","target_va":4294971608}],"4294970876":[{"is_tail_call":false,"symbol":"read","target_va":4294971752}],"4294970964":[{"is_tail_call":false,"symbol":"dirname","target_va":4294971512}],"4294970992":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}],"4294971032":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}],"4294971076":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}],"4294971116":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}],"4294971156":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}],"4294971184":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}],"4294971208":[{"is_tail_call":false,"symbol":"dirname","target_va":4294971512}],"4294971248":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}],"4294971288":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}],"4294971328":[{"is_tail_call":false,"symbol":"close","target_va":4294971496}]},"data_xrefs":{"by_data":{"4294970876":[4294968784],"4294971800":[4294968784],"4294971803":[4294971328],"4294971813":[4294971116],"4294971822":[4294971288],"4294971830":[4294970964],"4294971844":[4294971248],"4294971872":[4294970992],"4294971883":[4294971032],"4294971899":[4294971208],"4294971927":[4294971076],"4294971930":[4294971156],"4294983680":[4294968784,4294971328],"4294983688":[4294971328],"4294983696":[4294971328],"4294983704":[4294971328],"4294983712":[4294971328],"4294983720":[4294971328],"4294983728":[4294971328],"4294983736":[4294971328],"4294983744":[4294971328],"4294983752":[4294971328],"4294983760":[4294971328],"4294983768":[4294971328],"4294983776":[4294971328],"4294983784":[4294971328],"4294983792":[4294971328],"4294983800":[4294971328],"4294983808":[4294971328],"4294983816":[4294971328],"4294983824":[4294971328],"4294983832":[4294971328],"4294983840":[4294971328],"4294983848":[4294971328],"4294983856":[4294971328],"4294983864":[4294971328],"4294983872":[4294971328],"4294983880":[4294971328],"4294983888":[4294971328],"4294983896":[4294968784],"4295000064":[4294968784,4294970876],"4295000065":[4294968784],"4295000072":[4294970876],"4295000096":[4294968784]},"by_function":{"4294968784":[{"data_va":4294983896,"insn_va":4294968824,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968828,"kind":"Global","value":null},{"data_va":4294971800,"insn_va":4294968860,"kind":"CString","value":"rb"},{"data_va":4294971800,"insn_va":4294968884,"kind":"CString","value":"rb"},{"data_va":4294971800,"insn_va":4294968908,"kind":"CString","value":"rb"},{"data_va":4294971800,"insn_va":4294968936,"kind":"CString","value":"rb"},{"data_va":4294970876,"insn_va":4294969044,"kind":"Global","value":null},{"data_va":4295000096,"insn_va":4294969412,"kind":"Global","value":null},{"data_va":4295000065,"insn_va":4294970184,"kind":"Global","value":null},{"data_va":4295000064,"insn_va":4294970440,"kind":"Global","value":null},{"data_va":4294983896,"insn_va":4294970532,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970536,"kind":"Global","value":null}],"4294970876":[{"data_va":4295000064,"insn_va":4294970880,"kind":"Global","value":null},{"data_va":4295000072,"insn_va":4294970888,"kind":"Global","value":null}],"4294970964":[{"data_va":4294971830,"insn_va":4294970980,"kind":"CString","value":"Corrupt patch"}],"4294970992":[{"data_va":4294971872,"insn_va":4294971020,"kind":"CString","value":"fclose(%s)"}],"4294971032":[{"data_va":4294971883,"insn_va":4294971064,"kind":"CString","value":"fseeko(%s, %jd)"}],"4294971076":[{"data_va":4294971927,"insn_va":4294971104,"kind":"CString","value":"%s"}],"4294971116":[{"data_va":4294971813,"insn_va":4294971144,"kind":"CString","value":"open(%s)"}],"4294971156":[{"data_va":4294971930,"insn_va":4294971172,"kind":"CString","value":"basename"}],"4294971208":[{"data_va":4294971899,"insn_va":4294971236,"kind":"CString","value":"BZ2_bzReadOpen, bz2err = %d"}],"4294971248":[{"data_va":4294971844,"insn_va":4294971276,"kind":"CString","value":"fread(%s)"}],"4294971288":[{"data_va":4294971822,"insn_va":4294971316,"kind":"CString","value":"open %s"}],"4294971328":[{"data_va":4294971803,"insn_va":4294971356,"kind":"CString","value":"fopen(%s)"},{"data_va":4294983680,"insn_va":4294971372,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971376,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294971388,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971392,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294971404,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971408,"kind":"Global","value":null},{"data_va":4294983704,"insn_va":4294971420,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971424,"kind":"Global","value":null},{"data_va":4294983712,"insn_va":4294971436,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971440,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294971452,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971456,"kind":"Global","value":null},{"data_va":4294983728,"insn_va":4294971468,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971472,"kind":"Global","value":null},{"data_va":4294983736,"insn_va":4294971484,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971488,"kind":"Global","value":null},{"data_va":4294983744,"insn_va":4294971500,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971504,"kind":"Global","value":null},{"data_va":4294983752,"insn_va":4294971516,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971520,"kind":"Global","value":null},{"data_va":4294983760,"insn_va":4294971532,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971536,"kind":"Global","value":null},{"data_va":4294983768,"insn_va":4294971548,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971552,"kind":"Global","value":null},{"data_va":4294983776,"insn_va":4294971564,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971568,"kind":"Global","value":null},{"data_va":4294983784,"insn_va":4294971580,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971584,"kind":"Global","value":null},{"data_va":4294983792,"insn_va":4294971596,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971600,"kind":"Global","value":null},{"data_va":4294983800,"insn_va":4294971612,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971616,"kind":"Global","value":null},{"data_va":4294983808,"insn_va":4294971628,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971632,"kind":"Global","value":null},{"data_va":4294983816,"insn_va":4294971644,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971648,"kind":"Global","value":null},{"data_va":4294983824,"insn_va":4294971660,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971664,"kind":"Global","value":null},{"data_va":4294983832,"insn_va":4294971676,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971680,"kind":"Global","value":null},{"data_va":4294983840,"insn_va":4294971692,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971696,"kind":"Global","value":null},{"data_va":4294983848,"insn_va":4294971708,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971712,"kind":"Global","value":null},{"data_va":4294983856,"insn_va":4294971724,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971728,"kind":"Global","value":null},{"data_va":4294983864,"insn_va":4294971740,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971744,"kind":"Global","value":null},{"data_va":4294983872,"insn_va":4294971756,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971760,"kind":"Global","value":null},{"data_va":4294983880,"insn_va":4294971772,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971776,"kind":"Global","value":null},{"data_va":4294983888,"insn_va":4294971788,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971792,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968784":"sub_1000005d0","4294970876":"sub_100000dfc","4294970964":"sub_100000e54","4294970992":"sub_100000e70","4294971032":"sub_100000e98","4294971076":"sub_100000ec4","4294971116":"sub_100000eec","4294971156":"sub_100000f14","4294971184":"sub_100000f30","4294971208":"sub_100000f48","4294971248":"sub_100000f70","4294971288":"sub_100000f98","4294971328":"sub_100000fc0"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"76e8d177a334ce7a27d253f0b5c1922f373902295ae36bd9fe06c846d524bbfe","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.bspatch","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"03161767d87ba62f405348c9aba76accf6d1a394c3b4341d6c425cae39d90a57","imphash":"1662f0200abfd65111c703450e9129138f663d44fb0c5ec25ecc5c5f22b56db9","sha256_text":"02d7a9a74ecc4516b0ed7dd6ee111db75d786f2571237d385e4f1962d86e0aa8","symbolhash":"1662f0200abfd65111c703450e9129138f663d44fb0c5ec25ecc5c5f22b56db9"},"sets":{"apis_called":["BZ2_bzRead","BZ2_bzReadClose","BZ2_bzReadOpen","__stack_chk_guard","__stderrp","atexit","basename","close","dirname","errx","fclose","feof","fopen","fread","fseeko","fwrite","lseek","malloc_type_malloc","open","openat","read","unlinkat"],"bundle_ids":["com.apple.bspatch"],"cpp_classes":[],"entitlements":[],"frameworks":["libbz2.1.0.dylib","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":2,"iokit_constants":0,"library_functions":0,"nlist_functions":13,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":8,"size_log2":17.042002,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.019148683,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:16Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"76e8d177a334ce7a27d253f0b5c1922f373902295ae36bd9fe06c846d524bbfe","file_modified":"2026-04-06T11:44:16Z","file_size":134944,"is_arm64e":true,"min_os":"26.1.0","name":"bspatch","platform":"macOS","sdk":"26.1.0","sha256":"e049a1449a221e8569723ae1a47568173842084abec30b0036d9846355ede4ce","sha256_slice":"75ef77471393173aa9fe5b611109ba5766f288259197b9b7eee80c79c5a2c973","source_version":"12.0.0.0.0","team_id":null,"uuid":"AED4E817-3E34-3F10-8337-C3AC667A8946"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libbz2.1.0.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":13,"imports":[{"address":0,"dylib":"/usr/lib/libbz2.1.0.dylib","is_lazy":false,"is_weak":false,"name":"BZ2_bzRead"},{"address":0,"dylib":"/usr/lib/libbz2.1.0.dylib","is_lazy":false,"is_weak":false,"name":"BZ2_bzReadClose"},{"address":0,"dylib":"/usr/lib/libbz2.1.0.dylib","is_lazy":false,"is_weak":false,"name":"BZ2_bzReadOpen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"atexit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"basename"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"close"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"dirname"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"err"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"errx"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fclose"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"feof"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fopen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fread"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"free"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fseeko"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"lseek"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"malloc_type_malloc"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"open"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"openat"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"read"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strdup"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"unlinkat"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"warn"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"write"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"}],"interesting_strings":{"bundle_ids":["com.apple.bspatch"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":13,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1488,"protection":"r-x","segment":"__TEXT","size":2584},{"name":"__auth_stubs","offset":4072,"protection":"r-x","segment":"__TEXT","size":432},{"name":"__cstring","offset":4504,"protection":"r-x","segment":"__TEXT","size":190},{"name":"__unwind_info","offset":4696,"protection":"r-x","segment":"__TEXT","size":96},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":216},{"name":"__got","offset":16600,"protection":"rw-","segment":"__DATA_CONST","size":16},{"name":"__data","offset":32768,"protection":"rw-","segment":"__DATA","size":4},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":8}],"summary":"Executes system-level tasks with Apple's code signature. Contacts 6 network endpoints for configuration, telemetry, or data synchronization. Interacts with 1 bundle identifier and makes requests to 4 URLs. Runs as a background service with minimal user interaction. The 13 core functions perform standard operations for macOS system services.","swift_metadata":null,"title":"Apple service — communicates with remote endpoints for system functions","total_strings":184,"xpc_services":[]}