{ "date": "2026-10-27", "target": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "counts": { "new_records": 134, "pseudocode_records": 126, "failed": 1, "assembly": 7, "unique_pseudocode_addresses": 126, "reused_native": 10 }, "businesses": [ { "id": "ai-sidebar", "category": "ai", "title": "AI 侧栏与 Glic 会话入口", "mode": "新增 API 与界面控制", "depth": "原生入口已恢复", "summary": "Tabbit 用 tabChatExt 扩展 API 连接浏览器侧栏与 Glic 服务。已恢复 showTabSidePanel 的工厂、对象虚表和处理函数。", "flow": [ "tabChatExt.showTabSidePanel 的表项指向工厂 0x183988ee0；工厂分配对象、调用公共基类构造器并写入虚表。", "虚表 +0x8 指向 0x183aa1c70。处理函数解析参数，寻找活动浏览器，检查 GLIC 可用状态，再调用面板对象的方法。", "分别返回无活动浏览器、GLIC 不可用、已显示、显示成功等结果。" ], "integration": "工厂链与 Chromium ExtensionFunction 的结构相符，行为也体现对已有浏览器/Glic 对象的调用。属于产品 API 和 UI 控制入口；尚未取得注册表消费者与全部面板虚调用的类型。不能据此宣称 Glic 被整体替换。", "unknowns": [ "云端聊天请求、模型选择与完整对话状态机未从此函数恢复。", "showGlicSessionForTab、技能弹窗等其他 schema 方法尚未逐项反编译。" ], "labels": [ "p-factory-tabChatExt-showTabSidePanel", "p-sidebar-run", "p-extension-base-ctor" ], "schemas": [ "tabChatExt", "tabGlic", "tabWindowExt" ], "upstream": [ "extensions/browser/extension_function.h", "extensions/browser/extension_function_registry.h", "chrome/browser/glic/widget/glic_widget.h" ], "path": "chrome/browser/extensions API → Glic/侧栏对象", "attribution": { "kind": "adapt", "baseline": "上游 Glic 已有会话、侧栏及窗口设施；ExtensionFunction 是通用扩展入口机制。", "delta": "增加 tabChatExt.showTabSidePanel API，解析产品参数、检查活动浏览器与 Glic 状态，再调用面板对象。", "proof": "工厂 0x183988ee0 → 虚表处理函数 0x183aa1c70，包含状态分支与面板调用。", "scope": "确认 API 包装与控制入口；未证明侧栏/Glic 主体由 Tabbit 重写。" }, "technical": { "number": "AI-01", "entry": "JSAPI · tabChatExt", "communication": "扩展函数分发 → Glic 对象调用", "execution": "Native 浏览器 C++ · 面板控制", "route": "JSAPI → ExtensionFunction → Glic 面板", "steps": [ { "title": "调用产品 API", "description": "tabChatExt.showTabSidePanel 的表项进入原生工厂，构造扩展函数对象。", "status": "已恢复" }, { "title": "校验浏览器状态", "description": "原生处理函数解析参数，寻找活动浏览器并检查 Glic 可用性。", "status": "已恢复" }, { "title": "调用面板对象", "description": "符合条件时经对象方法显示侧栏，具体虚调用类型尚未全部认证。", "status": "已恢复" }, { "title": "返回结果", "description": "区分无浏览器、不可用、已显示和显示成功等结果。", "status": "已恢复" } ], "caveat": "JSAPI 是入口；已确认的执行部分位于浏览器原生层，完整侧栏前端和会话实现未恢复。" } }, { "id": "b-ai-gateway", "category": "ai", "title": "本地 Agent 推理网关", "mode": "新增本地推理网关", "depth": "代表性原生路径已恢复", "summary": "浏览器进程提供带凭据的 loopback 网关，校验模型与请求，再向远端 Responses 业务 API 发起流式请求。", "flow": [ "本地 HTTP 路由函数读取 Host 和 authorization，比较 127.0.0.1:端口及 Bearer 凭据，失败返回 local_agent_access_denied。", "模型目录分支使用 ETag、X-Tabbit-Applied-Catalog-Revision 和 private,no-cache；推理分支检查模型是否已发布、JSON 对象、stream、parallel_tool_calls 和 tools 数组。", "Responses 分支有 0x2000001 边界（32 MiB 以内）和同一 loopback 连接不可重叠请求的检查；还调用请求隐私过滤路径，但过滤 helper 内部未恢复。", "令牌响应只在请求成功/HTTP 200/有正文条件满足后解析 accessToken、tokenType、expiresIn、scope、tokenJti，显式拒绝非法 JSON、字段或 scope 不完整。", "签名后的请求构造 /api/v1/local-agent-runtime/responses，Content-Type:application/json、Accept:text/event-stream、Accept-Encoding:identity、Idempotency-Key、X-Client-Request-Id、目录 revision/etag 头，并接入异步网络对象和回调。" ], "integration": "新增浏览器进程业务网关和 localhost HTTP 适配层。本地路由、凭据、模型契约、独立服务关闭及远端请求构造均有函数级证据。 没有证据证明替换 Chromium 网络栈；复用了异步网络/回调形状，但具体 URLLoader 类型仍是推断。", "unknowns": [ "启动服务器的监听 socket/线程具体类型未在本次函数中命名恢复", "安装密钥 PoP 算法和挑战签名 helper 未恢复", "BYOK 路由的完整远端认证路径未恢复", "目录和隐私过滤 helper 的全部语义及运行成功情况未知" ], "labels": [ "b-agent-loopback-router", "b-agent-gateway-2", "b-agent-gateway-3", "b-agent-gateway-1" ], "schemas": [ "tabLocalAgent" ], "upstream": [], "path": "codex_local_agent.gateway", "extra": [ "evidence/b-business-analysis.md", "evidence/b-business-findings.json" ], "attribution": { "kind": "module", "baseline": "Chromium 提供网络与异步回调基础设施；没有做全部上游 Agent 网关的同版本差分。", "delta": "增加 loopback 推理路由、Host/Bearer 校验、模型目录与 revision 契约，并构造 Tabbit 远端 Responses 请求。", "proof": "独立路由和请求函数恢复了 access_denied、模型校验、SSE 头与 /api/v1/local-agent-runtime/responses。", "scope": "确认安装产物中的产品网关逻辑；底层 URLLoader 精确类型及线上执行仍未验证。" }, "technical": { "number": "AI-02", "entry": "本地 HTTP · loopback", "communication": "HTTP / JSON → 远端 Responses SSE", "execution": "Native C++ 网关 · 远端推理", "route": "本地 HTTP → 原生校验 → 远端 SSE", "steps": [ { "title": "接收本地请求", "description": "网关接收 loopback HTTP，请求路由核对 Host 与 Bearer 凭据。", "status": "已恢复" }, { "title": "校验模型与负载", "description": "核对模型目录、请求 JSON、stream/tools、大小和重叠请求限制。", "status": "已恢复" }, { "title": "准备远端请求", "description": "解析令牌字段，构造 Responses URL、签名及业务头。", "status": "已恢复" }, { "title": "接入流式通道", "description": "以 Accept:text/event-stream 配置异步网络对象与回调；完整响应消费链未展开。", "status": "已恢复" } ], "caveat": "请求构造已恢复；SSE 线上返回与远端模型内部实现未运行验证。" } }, { "id": "b-ai-providers", "category": "ai", "title": "用户提供者、凭据与模型配置", "mode": "新增 Profile 模型与凭据配置", "depth": "持久化回调已恢复；Action 分发失败", "summary": "提供者凭据回调 → Profile 配置/选中模型；网关路由中识别 byok/ 模型。", "flow": [ "成功回调处理 credential 与 models，具有 credential_encryption_unavailable、invalid_credential、provider_auth_required、credential_encryption_failed 错误分支。", "读写 tabbit.local_agent.providers 内的 encryptedCredential/credentialLabel，并关联 tabbit.local_agent.model、byok/ 模型命名与 defaultReset。", "Action 候选 0x18379a130 的 afij/datarefs 包含 list/save/delete/test/login 等操作和 baseUrl/api/enabledModels，但 stderr 的 Illegal op in iblock 使其不计为成功伪代码。" ], "integration": "新增 Profile 提供者配置与凭据适配模块。成功持久化回调与失败/加密字段、首选项键绑定。 没有 Chromium 默认实现被替换的直接证据；不能将错误字符串当作已证明的全部操作执行。", "unknowns": [ "凭据底层加密是否 OSCrypt/DPAPI、密钥生命周期和存储格式未证明", "完整 Action 分发失败", "供应商 URL 的 HTTPS/loopback 限制本次仅数据引用线索，不升级成已恢复控制流" ], "labels": [ "b-agent-provider-persist" ], "schemas": [ "tabLocalAgent" ], "upstream": [], "path": "codex_local_agent.model_providers", "extra": [ "evidence/b-business-analysis.md", "evidence/b-business-findings.json" ], "attribution": { "kind": "module", "baseline": "Profile 与偏好存储是上游设施；凭据加密的全部底层实现未展开。", "delta": "增加 tabbit.local_agent.providers/model 配置，在成功回调中保存 encryptedCredential、模型与 byok/ 状态。", "proof": "成功凭据持久化回调恢复了配置读写及加密失败分支。", "scope": "只确认成功回调；list/save/delete/test/login 的完整 Action 分发反编译失败。" }, "technical": { "number": "AI-03", "entry": "提供者凭据完成回调", "communication": "回调 → Profile 偏好读写", "execution": "Native C++ · 凭据/模型配置", "route": "原生回调 → Profile 配置 → byok 模型", "steps": [ { "title": "取得提供者结果", "description": "成功回调处理 credential 与 models，检查错误或加密不可用情况。", "status": "已恢复" }, { "title": "保存产品配置", "description": "写入 tabbit.local_agent.providers 的 encryptedCredential/credentialLabel。", "status": "已恢复" }, { "title": "更新模型状态", "description": "关联选中模型、byok/ 命名及 defaultReset 状态。", "status": "已恢复" }, { "title": "分发入口仍有缺口", "description": "list/save/delete/test/login 候选 Action 反编译失败，不能把该入口当作已恢复执行链。", "status": "未恢复" } ], "caveat": "接口 schema 不等于完整分发实现；这里只确认凭据持久化回调。" } }, { "id": "b-ai-runtime", "category": "ai", "title": "复用：Node 运行时私有命名管道和协议通道", "mode": "新增 Native↔Node 私有协议", "depth": "代表性原生路径已恢复", "summary": "原生宿主管理 Node 进程、Windows 命名管道与版本化会话；JS 任务逻辑在这条浏览器自有通道上运行。", "flow": [ "旧原生 host 启动路径准备 state root、私有 transport、--browser-transport= descriptor、Windows job 与进程监视；启动错误是独立业务状态。", "旧私有 transport 创建 \\.\\pipe\\tabbit-runtime- 前缀的 Windows 命名管道。帧分发解析 version/kind/payload/generation/requestId/browserSessionId 和 hello/ready，拒绝超过 64 MiB、未知 kind 和缺少会话标识。", "打包 JS BrowserServiceChannel 使用协议版本 1、4 字节大端长度前缀、64 MiB 限制、hello/hello_ack 和 generation，并按 session/requestId 关联请求和 CDP。", "JS browser-runtime-service 从 --browser-transport= 创建 private stream，握手取得 configuration.stateRoot 后创建服务；这些是静态文件事实，本次没有启动。" ], "integration": "新增浏览器宿主 + 随包 Node 服务 + 私有版本化协议。复用原生 transport/host/channel 与本次打包 JS 对齐。 没有 Chromium IPC/Mojo 系统被整体替换的证据；这里有专属 transport，但 Chromium 其他 IPC 是否改动未调查。", "unknowns": [ "旧失败 extra-parts 与 transport-frame-read 不作为成功伪代码", "协议所有 kind 的 handler 和启动主循环注册未全部恢复", "frame-write 旧输出只有 callback wrapper，不能声称已恢复完整写帧实现" ], "labels": [ "reuse-channel-dispatch", "reuse-extra-init", "reuse-host-launch", "reuse-private-transport", "reuse-transport-create", "reuse-transport-read", "reuse-transport-write" ], "schemas": [ "tabLocalAgent", "tabLocalAgents" ], "upstream": [], "path": "local_agent.browser_runtime_service", "extra": [ "evidence/b-business-analysis.md", "evidence/b-business-findings.json" ], "attribution": { "kind": "module", "baseline": "Chromium 已有 IPC/Mojo 与进程设施；Node 也不是 Tabbit 发明。", "delta": "增加 Node 宿主、tabbit-runtime 命名管道及专属 version/kind/generation/session 协议，连接随包任务服务。", "proof": "原生 host/transport 与随包 BrowserServiceChannel 的长度帧、握手和会话字段相互对应。", "scope": "确认新增的产品通信边界；未证明 Chromium 其他 IPC 被替换或未修改。" }, "technical": { "number": "AI-04", "entry": "Native 宿主启动 Node", "communication": "Windows 命名管道 · 长度帧 JSON", "execution": "Native C++ 宿主 + Node.js 服务", "route": "C++ 宿主 ↔ 命名管道 ↔ Node.js", "steps": [ { "title": "准备并启动运行时", "description": "原生 host 准备 state root、进程监视及 browser-transport descriptor。", "status": "已恢复" }, { "title": "建立私有管道", "description": "创建 tabbit-runtime 前缀的命名管道；随包 JS 从启动参数连接 stream。", "status": "已恢复" }, { "title": "版本握手", "description": "协议携带 version/kind，JS 使用 hello/hello_ack 并接收运行配置。", "status": "已恢复" }, { "title": "分派会话消息", "description": "按 generation/requestId/browserSessionId 关联会话、请求和 CDP，限制帧长。", "status": "已恢复" } ], "caveat": "这是专属 Native↔Node 通信，不应写成已证明通过 WebUI/Mojo 传递。" } }, { "id": "b-ai-cdp", "category": "ai", "title": "私有 CDP 桥与任务所有权策略", "mode": "新增策略拦截与协议代答", "depth": "代表性原生路径已恢复", "summary": "CDP 私有帧 → 会话 dispatcher → 所有权/前台策略 → 合成或转发；JS LogicalBrowserTransport 使用 browserSessionId/generation 与 pendingCdp 关联。", "flow": [ "CDP 分发 0x1837cb3c0 在 0x1837cbc99 直接调用 0x1837c88d0，并按返回值 1/2/3 分流；对齐汇编证明是实际 CALL，不是只有路径或字符串关联。", "策略读取任务/目标上下文：未拥有目标以 target_not_owned 拒绝；Page.bringToFront 在 preserve 模式出现 foreground_policy_preserve 拒绝。", "按命令长度和字节比较做 Browser/Target 命令限制，有 Browser.close 等禁止项、browser_command_denied 和 browser_command_not_allowlisted。完整 allowlist 不在这里重建，其他返回值可能用于合成命令。", "分发处理 targetId/sessionId 和 flat session；不支持非 flat，拒绝未知目标、已分离会话以及 raw 会话的 Browser/Target 命令；页面导航有目标 URL/导航 URL 校验分支。", "桥内部有 Synthetic command unavailable、protocolVersion/product/revision/userAgent/jsVersion 与窗口 bounds 构造，显示部分协议响应由桥合成；其 Chrome/154.0.8037.58 文本不能当作真实运行 Chromium revision 的独立验证。", "拒绝函数将 event=tabbit_dance.cdp_command_rejected、method/reason 和可选 taskId/targetId 序列化输出。" ], "integration": "新增私有自动化 CDP 桥、前置策略与部分协议响应代答。直接 caller→policy CALL、分支返回值、会话处理和合成响应均在函数输出中。 在自定义桥边界对部分命令做拦截/代答，不等于替换 Chromium DevTools 后端或浏览器引擎。", "unknowns": [ "全部允许命令名单/合成分支未逐项恢复", "最终 DevToolsAgentHost/浏览器对象虚调用尚未类型恢复", "tabCDPBridge extension API 与 runtime 私有 CDP 桥虽契约相近，但其注册函数和同一对象身份未证明", "不能用这里的硬编码协议版本回答全局 Chromium 是否被改动" ], "labels": [ "b-agent-cdp-dispatch", "b-agent-cdp-policy-check", "b-agent-cdp-policy", "b-agent-caller-seams-aligned" ], "schemas": [ "tabCDP", "tabCDPBridge" ], "upstream": [], "path": "local_agent.cdp_policy_and_dispatch", "extra": [ "evidence/b-business-analysis.md", "evidence/b-business-findings.json" ], "attribution": { "kind": "module", "baseline": "DevTools/CDP 与 Browser、Target、Page 命令是上游能力。", "delta": "在私有 CDP 桥前增加目标所有权、前台保护、命令拒绝策略，并为部分命令合成响应。", "proof": "dispatcher 直接 CALL policy；target_not_owned、foreground_policy_preserve 与 synthetic reply 分支已恢复。", "scope": "增量是桥的策略与代答层；完整 allowlist 及 DevTools 后端差异尚未恢复。" }, "technical": { "number": "AI-05", "entry": "私有 transport 的 CDP 帧", "communication": "JSON / flat session · 策略分发", "execution": "Native C++ 桥 · 转发/合成响应", "route": "私有 CDP → C++ 策略 → 转发 / 代答", "steps": [ { "title": "解析请求和会话", "description": "读取 targetId/sessionId 与 flat session，排除未知目标或失效会话。", "status": "已恢复" }, { "title": "调用前置策略", "description": "dispatcher 直接调用 policy，判断目标所有权、前台保护和命令限制。", "status": "已恢复" }, { "title": "按策略结果处理", "description": "拒绝违规命令；部分命令由桥合成响应，其他进入后续转发路径。", "status": "已恢复" }, { "title": "关联响应与诊断", "description": "随包 LogicalBrowserTransport 关联 pending CDP；原生拒绝路径输出 method/reason 等事件。", "status": "已恢复" } ], "caveat": "转发后端及所有允许命令未全量展开；CDP 后端自身属于上游设施。" } }, { "id": "b-ai-observer", "category": "ai", "title": "页所有权管理与标签栏观察接入", "mode": "新增服务持有标签观察者", "depth": "代表性原生路径已恢复", "summary": "Profile/context → LocalAgent 服务 → owned observer；标签分组变化 → task 工作队列 → 释放页所有权。", "flow": [ "Agent 服务构造 0x1837dfd50 在 Profile/context 非空时分配 0x90 字节观察者，在 0x1837dfe0b 调用其构造 0x1837f9d30，并将观察者保存于服务对象 +0x120。", "观察者构造取得浏览器/Profile 关联对象，调用观察注册形状的 0x184948ed0 与浏览器枚举形状的 0x1812baa60；输出 tabbit_dance.tab_strip_observer_ready。原始 C++ 方法名未恢复。", "TabGroupedStateChanged 回调查询页记录，比较已有和新分组的 16 字节标识；当记录是受管页且组发生变化时，安排带上下文的异步工作 0x1837fb720。", "分组工作在 0x1837fb8a4 调用 ReleaseWebContentsInternal 0x1837e8aa0；后者查询/删除页记录、移除映射、释放受管内容对象，并更新关联任务/观察状态。" ], "integration": "新增服务持有观察者，通过浏览器/标签模型回调接入。服务直接创建持有观察者、分组回调和释放链有调用地址证据。 支持 observer 插入，未证明替换 Chromium TabStripModel/标签栏实现；上游类型名称只能用于解释接缝。", "unknowns": [ "构造函数的 factory 注册 caller 尚未恢复", "BrowserList/TabStripModel 等虚表类型没有 PDB 证明", "从主循环 AddParts 到此服务的完整初始化链尚未连通", "用户实际拖拽分组触发行为没有执行观察" ], "labels": [ "b-agent-observer-owner", "b-agent-tab-observer-1", "b-agent-tab-observer-2", "b-agent-service", "b-agent-caller-seams-aligned" ], "schemas": [], "upstream": [ "chrome/browser/ui/tabs/tab_strip_model_observer.h" ], "path": "local_agent.service_and_tab_strip_observer", "extra": [ "evidence/b-business-analysis.md", "evidence/b-business-findings.json" ], "attribution": { "kind": "module", "baseline": "TabStripModel 的观察者与标签分组通知是上游设施。", "delta": "新增 Agent 服务持有的标签观察者，把分组变化转成任务工作，并释放受管 WebContents 所有权。", "proof": "服务构造保存 observer，分组回调经 worker 直接调用 ReleaseWebContentsInternal。", "scope": "确认服务、状态和回调接入；未证明替换标签模型或标签栏。" }, "technical": { "number": "AI-06", "entry": "标签模型回调 · observer", "communication": "浏览器内观察回调 → 异步任务", "execution": "Native C++ · 页所有权服务", "route": "TabStrip observer → 任务队列 → 释放页", "steps": [ { "title": "服务创建观察者", "description": "LocalAgent 服务构造 observer 并保存在服务对象中。", "status": "已恢复" }, { "title": "接收分组变化", "description": "TabGroupedStateChanged 比较受管页已有和新分组标识。", "status": "已恢复" }, { "title": "投递异步工作", "description": "分组变化触发带上下文的任务工作，不把 UI 事件直接当作模型执行。", "status": "已恢复" }, { "title": "释放所有权", "description": "worker 调用 ReleaseWebContentsInternal，清理页记录与映射并更新状态。", "status": "已恢复" } ], "caveat": "" } }, { "id": "ai-automation", "category": "ai", "title": "Agent 网页自动化与输入", "mode": "新增 CDP 适配入口", "depth": "点击实现已恢复", "summary": "tabAutomationInput.click 在原生侧验证参数并构造 CDP 鼠标事件命令，产品层无需为这一步重写 Blink 输入系统。", "flow": [ "API 表项 → 工厂 0x18398a740 → 构造器 0x1836c8430 → 虚表 0x19006e8a8 → 处理函数 0x1836c85c0。", "解析 tabId、坐标和点击次数，检查参数类型、数值有限性、坐标范围及允许的点击次数。", "构造 type/x/y 等字段，以及 Input.dispatchMouseEvent、mouseMoved、mousePressed、mouseReleased；存在事件序列与时序参数计算。", "0x1836d1410 将命令参数转换为内部序列结构。完整后续发送和事件确认链仍未穷尽。" ], "integration": "可确认新增扩展 API 与 CDP 命令适配。点击路径不是操作系统鼠标注入的直接证据，也不能推广为所有 drag/pressKey 方法的实现。浏览器自动化宿主、会话和权限策略在另一条 local_agent 链路分析。", "unknowns": [ "命令最终投递、成功确认及所有输入类型的路径尚未逐条验证。", "随机数和时序计算可见，但没有证据证明其产品目的。" ], "labels": [ "p-factory-tabAutomationInput-click", "p-automation-ctor", "p-automation-click-run", "p-automation-command-build" ], "schemas": [ "tabAutomationInput", "tabCDP", "tabCDPBridge" ], "upstream": [ "extensions/browser/extension_function.h" ], "path": "chrome/browser/extensions/api/tab_automation_input → CDP Input", "attribution": { "kind": "adapt", "baseline": "CDP Input.dispatchMouseEvent 和 Chromium 输入系统已有。", "delta": "新增 tabAutomationInput.click 参数校验、事件序列与时序转换，把产品点击请求适配到 CDP。", "proof": "工厂、构造器和处理函数链恢复了坐标/次数校验及 mouseMoved/Pressed/Released 命令构造。", "scope": "增量是 API 适配与校验；后续完整发送、确认链及其他输入方法未穷尽。" }, "technical": { "number": "AI-07", "entry": "JSAPI · tabAutomationInput.click", "communication": "扩展分发 → CDP Input 命令", "execution": "Native C++ · 参数校验/事件编排", "route": "JSAPI → C++ 校验 → CDP 鼠标事件", "steps": [ { "title": "调用 click API", "description": "工厂、构造器和虚表把产品请求接到原生处理函数。", "status": "已恢复" }, { "title": "检查点击参数", "description": "验证 tabId、坐标有限性/范围和点击次数。", "status": "已恢复" }, { "title": "生成事件序列", "description": "构造 mouseMoved、mousePressed、mouseReleased 及 Input.dispatchMouseEvent 参数。", "status": "已恢复" }, { "title": "转换为内部发送结构", "description": "已恢复序列转换；完整发送和事件确认链尚未穷尽。", "status": "已恢复" } ], "caveat": "" } }, { "id": "ai-voice", "category": "ai", "title": "语音输入：实时 ASR → LLM 改写 → 网页提交", "mode": "新增服务与 Windows 输入接缝", "depth": "请求、热键与提交链已恢复", "summary": "语音业务包含远端实时识别、独立改写阶段和浏览器输入目标管理。Windows 文件路径不代表使用 Windows 本地识别引擎。", "integration": "可确认云端协议、浏览器控制器、Windows 键盘 hook 以及 frame/widget 提交接缝。模型推理在远端服务中，浏览器负责录入和业务状态。未建立替换 Chromium Web Speech API 的证明；widget 最终虚函数名称仍未知。", "path": "tab/browser/voice_input + win + llm_refiner", "upstream": [ "content/public/browser/render_widget_host.h", "content/public/browser/render_frame_host.h" ], "flow": [ "0x183676c50 构造 /api/v0/asr/realtime_recognize?voice_format=pcm&engine_type=，按语言选择 16k_en/16k_zh 并追加 language。", "构造 start JSON：type=start、sample_rate=16000、channels=1、language、hotword_list；序列化后交给实时客户端发送函数。", "0x18367b8c0 处理 WebSocket 数据帧组装及 JSON type/text/message；0x18367a260 是连接完成回调。", "文件路径 speech_recognition_engine_win.cc 不能证明使用 Windows SAPI/WinRT 本地 ASR；本次恢复的识别路径显式连接远端服务。", "0x18366c5a0 从配置构造 /api/v0/asr/rewrite URL；0x18366d3e0 配置 application/json 和 Bearer Authorization。", "发送 text、mode=chat_input、language；空语言回退 zh-CN。", "OnRefined（0x183673330）选择非空成功改写结果，否则保留原文字；热键路径随后调用 0x183673ae0 收尾。", "SetWindowsHookExW(WH_KEYBOARD_LL=0x0d, callback=0x183675cf0)；排除空/隐身 profile 和重复安装。", "hook 检查前台窗口属于当前进程，处理左右 Alt，500000 微秒内第二次按键启动听写；活动听写再按 Alt 停止。", "0x18366fbc0 查询 tabbit.voice_input.enabled 并调用 0x183674860 捕获网页目标。捕获器验证 browser、WebContents、可编辑元素、存活 frame、网页 scheme 和 widget，保存 GlobalRenderFrameHostId。", "0x183670ec0 处理识别结果、流式替换和气泡队列；原种子标签 start 并非真实角色。", "收尾函数 0x183673ae0 调用 0x183675390；提交函数重新解析 frame ID，取 widget，转 UTF16 后调用 widget 虚表 +0x40，随后清理目标。汇编 0x183675768..0x183675775 恢复了实际虚表取址，不能把 CFG 桩 0x185f59da0 当作提交实现。" ], "unknowns": [ "麦克风设备创建及 PCM 转换的最终底层 API/媒体函数名未恢复。", "真实服务 origin、ASR 后端供应商、认证握手内容及在线效果未知。", "没有完成 Chromium Web Speech API 实现的比较，不能排除其他共存路径。", "rewritten_text 只在邻近字符串中出现；响应解析函数本轮未反编译，不能把字段消费当作已证明。", "具体模型名称、提示词、后端 provider 未建立。", "widget +0x40 的原始函数名和最终 IPC/renderer 处理未认证；不能断言 ImeCommitText、SendInput 或 DOM JavaScript 注入。", "只核对本轮可见静态调用及回调绑定，不代表所有入口已恢复。" ], "labels": [ "a-voice-speech-init", "a-voice-asr-parser", "a-voice-speech-result", "a-voice-capture-device", "a-voice-refiner", "a-voice-refiner-endpoint", "a-voice-controller-result", "a-voice-controller-finish", "a-voice-hotkey-install", "a-voice-hotkey", "a-voice-controller-toggle", "a-voice-injector", "a-voice-inject-commit", "a-voice-frame-id-resolver", "a-voice-controller-start", "a-voice-controller-state", "a-voice-callers-check" ], "schemas": [], "extra": [ "evidence/a-business-analysis.md", "evidence/a-business-findings.json" ], "attribution": { "kind": "module", "baseline": "Chromium 有 frame/widget、网页输入与语音相关设施；Windows 键盘 hook 是系统能力。", "delta": "新增双 Alt 热键、网页输入目标管理，以及远端实时 ASR → 独立 rewrite → 文本提交的业务链。", "proof": "SetWindowsHookExW、ASR/rewrite 请求、frame 捕获和最终 widget 虚调用均有函数/汇编证据。", "scope": "确认录入和编排逻辑；远端模型、最终 widget 方法名和 Web Speech 替换关系未确认。" }, "technical": { "number": "AI-08", "entry": "Windows 双 Alt 热键", "communication": "WebSocket ASR + HTTP rewrite + widget 调用", "execution": "Native C++ · 输入管理 / 云端模型", "route": "键盘 hook → 远端 ASR → 改写 → 网页提交", "steps": [ { "title": "捕获输入目标", "description": "键盘 hook 判定当前进程前台窗口和双 Alt 时序，检查可编辑 frame/widget。", "status": "已恢复" }, { "title": "实时识别", "description": "构造 16k PCM、语言和 hotword 的 start 请求，通过实时客户端处理 ASR WebSocket 文本。", "status": "已恢复" }, { "title": "请求改写", "description": "独立 rewrite 请求发送 text/mode/language；成功采用改写结果，失败保留原文。", "status": "已恢复" }, { "title": "提交文本", "description": "重新解析 frame ID，取 widget，转 UTF16 并调用其虚表方法，随后清理目标。", "status": "已恢复" } ], "caveat": "最终 widget 方法名未认证；远端推理不在本地浏览器“内核”中执行。" } }, { "id": "ai-selection", "category": "ai", "title": "选中文本与 AI 上下文输入", "mode": "新增 controller 与 Mojo 接口", "depth": "浏览器调度与绑定已恢复", "summary": "浏览器控制器通过 tab.mojom.TabTextSelectionAgent 向页面 frame 请求选择文本，并用 generation 管理异步请求生命周期。", "path": "tab/browser/text_selection → tab.mojom.TabTextSelectionAgent", "schemas": [ "tabChatExt", "tabReadingSpace" ], "upstream": [ "content/public/browser/render_frame_host.h" ], "flow": [ "0x183597050 在 keyboard selection 分支查询 ExtensionRegistry 和扩展 ID iobiajbbjgoiehijaledajjiainhmafb，并有 /newtab 判断。此 ID 在函数中出现，不等于已证明是最终接收方。", "RequestPendingSelection（0x183598130）调度选择请求并进入 0x183598700；后者建立新 remote、安装 disconnect/代次回调并调用 0x18340d080。", "0x183599ff0 实际绑定 tab.mojom.TabTextSelectionAgent，通过 interface provider 对接 frame 的 remote；这是业务新增协议接缝的具体证据。", "0x183598a30 的 arg2 与 +0x178 generation 相等才清理 remote/状态并递增 generation；它是清理回调，不是已恢复的 selectedText payload 回调。" ], "integration": "新增浏览器选择控制器及业务 Mojo 接口，插入 frame/renderer 通信接缝；归 AI 章作为上下文输入支撑。未建立对 Chromium 原实现的替换证明。", "unknowns": [ "本轮未恢复 renderer 侧 TabTextSelectionAgent 的实现及 binding 注册函数；是否使用 Blink Selection、DOM Range、AX 获取文本未知。", "未追到 AI 对话最终消费；本章归类来自报告业务分类，不等于本函数调用模型。" ], "labels": [ "a-selection-controller", "a-selection-update", "a-selection-request", "a-selection-mojo-binding", "a-selection-result-callback" ], "extra": [ "evidence/a-business-analysis.md", "evidence/a-business-findings.json" ], "attribution": { "kind": "module", "baseline": "frame/renderer、Mojo interface provider 与选择文本基础能力属于上游。", "delta": "新增 tab.mojom.TabTextSelectionAgent 协议及浏览器请求控制器，用 generation 管理断连和请求清理。", "proof": "绑定函数实际请求业务 Mojo 接口；remote、代次回调与清理控制流已恢复。", "scope": "确认新协议与调度接入；renderer 端提取主体和 selectedText 回调仍有缺口。" }, "technical": { "number": "AI-09", "entry": "Native 选择文本控制器", "communication": "Mojo · tab.mojom.TabTextSelectionAgent", "execution": "Native browser 调度 · renderer remote", "route": "C++ 控制器 → Mojo → frame remote", "steps": [ { "title": "调度选择请求", "description": "控制器进入 pending selection 路径，准备新 remote。", "status": "已恢复" }, { "title": "绑定 frame 接口", "description": "通过 interface provider 绑定 tab.mojom.TabTextSelectionAgent。", "status": "已恢复" }, { "title": "管理异步生命周期", "description": "安装 disconnect/generation 回调，防止旧代次清理新请求。", "status": "已恢复" }, { "title": "文本返回主体未知", "description": "renderer 提取主体和 selectedText payload 回调未恢复，不能将清理函数解释成文本回调。", "status": "未恢复" } ], "caveat": "" } }, { "id": "ai-content", "category": "ai", "title": "网页上下文、PDF 提取与翻译覆盖层", "mode": "新增提取与 Viewer 适配", "depth": "原生提取入口已恢复", "summary": "内容提取 API 区分本地文件和网页；PDF 路径接入现有 Chromium PDF 文档与 Viewer/Previewer frame，并为内置翻译扩展提供受限脚本入口。", "flow": [ "extractContent 检查 URL；file:// 解析为本地路径并投递 ReadLocalFileTask。非 file URL 要求 tabId 且请求 URL 与页面当前 URL 一致。", "extractPdfText 工厂 → 0x1836dd870 验证提取限制 → 0x1836dbb70 保存限制、寻找 tab 和 Chromium PDF 文档、安排超时及异步继续/回调。", "PDF 覆盖层 0x1836dfce0 检查调用者为内置 Tab Translation 扩展，检查脚本长度及 frame 选择条件，再向 Viewer/Previewer 的 OOPIF 或 guest frame 注入脚本。" ], "integration": "已有 PDF 文档对象和 Viewer frame 是明确的协作对象。可判断产品提取、翻译适配层被加入；无法确认 PDFium 内部是否另有改动，更没有证明 PDF 引擎被整体替换。此项按服务于 AI 上下文/翻译的用途归入 AI 业务，核心机制是原生适配。", "unknowns": [ "OCR 的模型、调用协议和完整识别实现尚未恢复；schema 中有 extractPdfTextWithOcr 不能当作已验证技术方案。", "网页正文提取算法、完整 PDF 文本返回和快照生成仍有未恢复的回调/渲染路径。" ], "labels": [ "p-content-run", "p-factory-tabContentExtractor-extractPdfText", "p-pdf-text-run", "p-pdf-text-adapter", "p-content-pdf-overlay" ], "schemas": [ "tabContentExtractor" ], "upstream": [ "extensions/browser/extension_function.h" ], "path": "chrome/browser/extensions/api/tab_content_extractor → PDF 文档/frame", "attribution": { "kind": "adapt", "baseline": "Chromium 已有 PDF 文档、Viewer frame 与 PDFium；读取本地文件和网页内容不是新的引擎能力。", "delta": "增加提取 API 的 file/tab 分流、URL 与限额校验、超时编排，以及内置翻译扩展的受限 Viewer 脚本入口。", "proof": "extractContent/extractPdfText 与 overlay 函数恢复了分流、PDF 对象协作和调用者限制。", "scope": "增量是内容与翻译适配；最终 PDF/OCR 算法及 PDFium 内部改动未恢复。" }, "technical": { "number": "AI-10", "entry": "JSAPI · extractContent / extractPdfText", "communication": "扩展分发 + 异步 callback / Viewer 脚本", "execution": "Native C++ · 内容与 PDF 适配", "route": "JSAPI → URL/限额检查 → 文件 / PDF frame", "steps": [ { "title": "区分内容来源", "description": "file:// 转本地文件任务；网页请求核对 tabId 与当前 URL。", "status": "已恢复" }, { "title": "安排 PDF 提取", "description": "PDF API 校验限制、获取 PDF 文档对象并安装超时和继续回调。", "status": "已恢复" }, { "title": "翻译覆盖层分支", "description": "单独检查内置翻译扩展与脚本限额，选择 Viewer/Previewer OOPIF 或 guest frame 注入。", "status": "已恢复" }, { "title": "回调/提取仍有缺口", "description": "已恢复异步编排；最终提取/OCR 算法及全部成功响应路径未展开。", "status": "已恢复" } ], "caveat": "提取与翻译是两个相关分支，并非每次 PDF 提取都会执行翻译脚本。" } }, { "id": "ai-organize", "category": "ai", "title": "AI 标签整理结果接回浏览器", "mode": "新增控制器与异步回调", "depth": "结果处理已恢复", "summary": "tabOrganize 把扩展侧整理结果送回 TabOrganizeController；原生侧保留活动请求与状态检查。", "flow": [ "handleExtensionOrganizeResult 的工厂 0x18398a9c0 指向处理函数 0x18383d0f0。", "处理函数验证结果参数与活动整理控制器；失败分支保留扩展的错误文本，成功分支转换名称及 tabId 分组结构。", "调用 0x1835fe440；该函数关联 tab_organize_controller.cc，检查状态并具有 stale_response_ignored request_id 分支，再接收成功状态、分组和错误结果。" ], "integration": "观察到浏览器扩展 API → 产品标签整理控制器的回调边界。模型计算可以在扩展/服务侧完成，但本次没有恢复它的算法或网络调用；不是 Chromium TabStripModel 整体替换的证据。", "unknowns": [ "整理请求如何触发、模型服务和分组最终写入 TabStripModel 的完整链尚未穷尽。" ], "labels": [ "p-factory-tabOrganize-handleExtensionOrganizeResult", "p-organize-run", "p-organize-controller-result" ], "schemas": [ "tabOrganize" ], "upstream": [ "chrome/browser/ui/tabs/tab_strip_model_observer.h" ], "path": "chrome/browser/extensions/api/tab_organize → chrome/browser/ui/tabs/tab_organize_controller.cc", "attribution": { "kind": "adapt", "baseline": "Chromium 已有标签/分组及 AI 相关设施；本次未证明“AI 标签整理”概念本身为 Tabbit 独有。", "delta": "增加 tabOrganize 扩展结果入口，将分组名称/tabId 接回产品控制器，并检查状态与 stale request_id。", "proof": "handleExtensionOrganizeResult 工厂/处理函数 → TabOrganizeController 结果接收链已恢复。", "scope": "只确认结果桥与状态管理；模型计算、排序算法及与上游整理模块的差异未取得。" }, "technical": { "number": "AI-11", "entry": "JSAPI · tabOrganize 结果回调", "communication": "扩展 API → controller 直接调用", "execution": "Native C++ · 整理结果接收", "route": "JSAPI 结果 → C++ 校验 → 标签控制器", "steps": [ { "title": "接收整理结果", "description": "扩展调用 handleExtensionOrganizeResult；原生函数解析结果参数。", "status": "已恢复" }, { "title": "转换数据", "description": "成功转换名称/tabId 分组，失败保留错误信息。", "status": "已恢复" }, { "title": "检查活动请求", "description": "产品控制器核对状态和 request_id，忽略过期响应。", "status": "已恢复" }, { "title": "接回控制器", "description": "向控制器传入分组、成功状态和错误；模型算法/网络链未恢复。", "status": "已恢复" } ], "caveat": "" } }, { "id": "b-ai-dependencies", "category": "ai", "title": "工作区运行库与官方技能依赖安装", "mode": "新增工作区依赖安装状态机", "depth": "代表性原生路径已恢复", "summary": "异步下载状态 → 安装任务 → 归档提取/元数据验证 → runtime/skills 发布；二进制残留有 load_workspace_dependencies JSON-RPC/MCP 接口，但其 handler 没有在本次展开。", "flow": [ "服务在失败时清理请求并写 failed 状态；DownloadAsset 回调衔接 installing / Install，状态机在函数中可见。", "安装读取 workspace-dependencies/installed.json 的 version/runtimeRoot/pluginsRoot；缺字段拒绝，另有 scoped_dir/installed.json.tmp/skill-bundles/tabbit-official 遗留路径回收。", "提交函数检查归档处于管理的 downloads/.part 路径、SHA-256 匹配；异常返回明确错误，创建暂存目录并分别处理 codex-primary-runtime 与 tabbit-official 两类归档。", "调用提取 helper 0x1837b33a0 后再调用元数据/路径验证 helper 0x1837ad980，验证失败不发布。之后有运行库与技能发布、暂存保留和安装提交的错误分支。", "写入 runtimeSha256/skillsSha256 等安装元数据，先形成 installed.json.tmp，再调用移动/替换形状的 helper 发布为 installed.json；这是事务式提交形状，原子性 syscall helper 未恢复。" ], "integration": "新增下载/安装状态机与受管依赖发布模块。安装路径、归档身份验证、暂存/发布/提交控制流均可见。 不是 Chromium 更新器替换的证据；当前恢复的是 Agent 工作区依赖业务。", "unknowns": [ "manifest 请求和 Range 分块下载候选只有定位线索，本次未恢复", "提取 helper 的防 zip-slip/symlink 实现未恢复，错误文案不等于已完成安全审计", "installed.json rename helper 的原子性和文件系统失败恢复未知", "来源清单版本等静态字符串不表示实际网络下载过" ], "labels": [ "b-agent-dependencies", "b-agent-dependencies-resolve", "b-agent-installer", "b-agent-installer-commit" ], "schemas": [ "tabLocalAgent" ], "upstream": [], "path": "codex_local_agent.workspace_dependencies", "extra": [ "evidence/b-business-analysis.md", "evidence/b-business-findings.json" ], "attribution": { "kind": "module", "baseline": "下载、归档和文件设施可复用；Chromium 更新器属于另一条业务链。", "delta": "增加 Agent 工作区 runtime/skills 下载、SHA-256 校验、暂存目录、元数据验证及 installed.json 发布状态机。", "proof": "下载回调 → Install → 提取/验证 → 发布/提交分支与目录字段已恢复。", "scope": "确认依赖安装业务；helper 的系统调用原子性与 MCP handler 未展开。" }, "technical": { "number": "AI-12", "entry": "Native 依赖服务的下载回调", "communication": "异步下载 → 文件任务 / 发布回调", "execution": "Native C++ · 安装状态机", "route": "下载 → SHA-256 校验 → 暂存安装 → 发布", "steps": [ { "title": "下载完成转安装", "description": "完成回调推进 installing/Install，失败清理请求并写 failed 状态。", "status": "已恢复" }, { "title": "校验安装输入", "description": "检查下载管理路径、归档 SHA-256 和 installed.json 元数据。", "status": "已恢复" }, { "title": "提取并验证", "description": "创建暂存目录，提取 runtime/skills 后校验路径和元数据。", "status": "已恢复" }, { "title": "发布安装状态", "description": "发布依赖目录并形成 installed.json.tmp，调用移动/替换 helper 提交。", "status": "已恢复" } ], "caveat": "具体系统调用原子性与 load_workspace_dependencies handler 未恢复。" } }, { "id": "b-ai-images", "category": "ai", "title": "图像附件准备与解析/上传缓存", "mode": "新增图像附件缓存", "depth": "代表性原生路径已恢复", "summary": "请求准备 → 解析已有资源或转上传 → 缓存 URL/期限。", "flow": [ "Prepare 查找按请求键管理的树形状态、构造请求对象和回调；不是 Chromium 图片解码器或 HTTP 全局缓存的恢复。", "响应匹配请求键和任务/请求对象，HTTP 200 且有正文时解析 uploadRequired、url、expiresIn。", "uploadRequired 为真且尚未上传时调用准备 helper 0x183795130 进入上传路径；URL 分支要求有效 URL、https 并检查 myqcloud.com 域名后缀边界。", "expiresIn 以整数有效性和区间检查约束；缓存状态中保留 URL/期限及上传状态，并形成 local_agent_image_cache 的 resolve/upload、body_bytes/status/elapsed_ms 日志。" ], "integration": "新增 Agent 附件缓存及对象存储上传适配。独立请求状态及图像业务响应字段与控制分支。 没有替换 Chromium 图像缓存/解码/渲染实现的证据。", "unknowns": [ "上传 helper 和二进制 payload 处理未恢复", "缓存淘汰、磁盘持久化/内容哈希算法及并发行为未知", "对象存储域名约束不是实际访问记录" ], "labels": [ "b-agent-image-cache", "b-agent-image-response" ], "schemas": [ "tabLocalAgent" ], "upstream": [], "path": "codex_local_agent.image_cache", "extra": [ "evidence/b-business-analysis.md", "evidence/b-business-findings.json" ], "attribution": { "kind": "module", "baseline": "Chromium 已有图像解码、网络与缓存设施。", "delta": "增加 Agent 附件请求状态、uploadRequired/url/expiresIn 响应解析，以及 HTTPS 域名校验和 URL 有效期缓存。", "proof": "请求键匹配、上传分支、myqcloud.com 边界校验及期限处理均有函数输出。", "scope": "增量是附件业务缓存；实际上传后续和图像底层改动未完整恢复。" }, "technical": { "number": "AI-13", "entry": "Native 附件 Prepare 请求", "communication": "HTTP 业务响应 → 异步状态回调", "execution": "Native C++ · 附件 URL / 期限缓存", "route": "附件键 → 解析资源 / 上传分支 → URL 缓存", "steps": [ { "title": "准备附件状态", "description": "按请求键查找状态、建立请求对象与完成回调。", "status": "已恢复" }, { "title": "解析服务响应", "description": "匹配请求与任务，解析 uploadRequired/url/expiresIn。", "status": "已恢复" }, { "title": "分流资源或上传", "description": "需要上传时进入上传准备 helper；URL 分支校验 HTTPS 和域名后缀边界。", "status": "已恢复" }, { "title": "保存缓存结果", "description": "限制有效期并保存 URL、期限和上传状态；完整上传后续未恢复。", "status": "已恢复" } ], "caveat": "" } }, { "id": "b-ai-dsh", "category": "ai", "title": "DSH 本地工作服务基础设施", "mode": "新增本地服务与子进程管理", "depth": "代表性原生路径已恢复", "summary": "浏览器 service → process 管理 → Node preload + DSH web；stdin shutdown / EOF → lifecycle → SIGTERM disposal。", "flow": [ "DSH 有浏览器侧独立 service、process 状态和异步初始化/停止路径；最后 Profile 关闭清理待处理任务、重置服务状态并调用 process Stop。", "启动准备工作目录 workspace、logs、process.log/process.previous.log 和 DSH_HOME 环境，构造启动选项；具体 OS CreateProcess helper 类型本次未恢复。", "启动函数 0x183681bf0 在 0x1836821bb 调用命令构造 0x18a89a160；后者加入 --import 、web、--no-open、--host 127.0.0.1、--port 0。", "打包 lifecycle preload 监听 stdin 文本行 shutdown 或 EOF，幂等地输出 shutdown 日志并 process.emit(SIGTERM)。本次只读该 JS，不运行它。", "公开 Tabbit-Browser/dsh-tabbit 仓库 README 自称 DeepSeek Harness 官方插件；固定提交 3d09e22587cbfec0826c0223ea13bddefceca888 已保存。它只补充名称来源，没有认证本机 DSH 的版本或二进制身份。" ], "integration": "新增 DSH 子进程/服务管理及生命周期 preload。命令参数、环境/日志、最后 Profile 关闭与 preload 脚本语义相互对应。 没有 Chromium 进程服务或 DSH 内部实现被替换的直接证据；preload 注释声称不 patch 内部，仅能证明脚本本身未导入那些内部，不能证明所有 DSH 代码未改。", "unknowns": [ "DSH 软件全名和版本未由 artifact metadata 确认", "安装/更新函数和下载协议仅候选线索，本次未展开", "Stop 工作 callback 内部 Windows 句柄写/关闭和超时强杀 helper 未恢复", "不将 DSH 按 Windows SCM 系统服务解释" ], "labels": [ "b-dsh-service", "b-dsh-launch", "b-dsh-command-builder", "b-dsh-process", "b-dsh-transport", "b-agent-caller-seams-aligned" ], "schemas": [], "upstream": [], "path": "dsh.process_and_service", "extra": [ "evidence/b-business-analysis.md", "evidence/runtime-js/tabbit-dsh-lifecycle.mjs", "evidence/dsh-public-source.json", "evidence/dsh-public-readme.md" ], "attribution": { "kind": "module", "baseline": "Node、系统子进程和 DSH 软件本身是依赖；不是 Tabbit 自研基础运行时的证明。", "delta": "增加浏览器内 DSH 服务/进程管理、DSH_HOME、日志目录及 --import 生命周期脚本和关闭衔接。", "proof": "原生启动 CALL 命令构造函数；参数与随包 shutdown/EOF → SIGTERM 脚本相符。", "scope": "确认产品宿主与生命周期 glue；未认证 DSH 二进制版本或其内部修改。" }, "technical": { "number": "AI-14", "entry": "Native DSH service / process", "communication": "子进程启动参数 + stdin shutdown/EOF", "execution": "C++ 宿主 + Node lifecycle preload", "route": "C++ 服务 → Node preload / DSH → SIGTERM", "steps": [ { "title": "准备工作环境", "description": "设置 workspace、日志和 DSH_HOME 等启动选项。", "status": "已恢复" }, { "title": "构造本地服务命令", "description": "原生启动链加入 --import lifecycle.mjs、web、127.0.0.1 与随机端口参数。", "status": "已恢复" }, { "title": "管理启动和状态", "description": "浏览器 service 管理 process 状态、初始化与待处理任务。", "status": "已恢复" }, { "title": "关闭服务", "description": "Profile 清理调用 Stop；随包 preload 收到 shutdown 或 EOF 后幂等触发 SIGTERM。", "status": "已恢复" } ], "caveat": "生命周期脚本可静态复核，DSH 内部工作实现与二进制版本未验证。" } }, { "id": "ai-external-agent", "category": "ai", "title": "外部 Agent 适配器与任务执行层", "mode": "随包 JS 适配器／协议边界", "depth": "第一方打包代码复用", "summary": "TabbitDance 将任务 Worker、Playwright 与外部 Agent 适配器放入随包 Node 层。此条为文件静态阅读，用来补充原生反编译，不计作新的 REA 函数。", "flow": [ "agent-bridge-main 读取 stdin JSON；agent-bridge 的固定 provider 表注册 codex/claude/workbuddy/cursor，并按 providers/list/read/send 契约分派。", "Codex 适配器通过 app-server --listen stdio:// 使用 JSON 行；Claude/WorkBuddy 适配器组装各自固定 CLI 参数。renderer 不供应任意模块、可执行路径或 shell 命令。", "任务通过 worker_threads 与自定义 Playwright/CDP transport 协作。Worker 内存限额不等于独立 OS 进程沙箱；固定 Playwright 私有 targetId 结构也是兼容性维护点。" ], "integration": "这是新增包装层与固定适配器的直接静态证据。原生 transport/host 在独立业务条目中已有反编译。能够减少上层逻辑直接触碰 Chromium 的范围，但未证明独立热更新或所有功能都无需原生改动。", "unknowns": [ "外部 CLI 版本、实际连接效果以及全部桌面适配器实现未运行验证。", "包装层的原始发布/构建流水线未取得。" ], "labels": [], "schemas": [ "tabLocalAgents" ], "upstream": [], "path": "TabbitDance/runtime/src", "extra": [ "evidence/reused/dance-analysis.md", "evidence/reused/dance-static-excerpts.json", "evidence/runtime-js/agent-bridge.mjs", "evidence/runtime-js/agent-provider-codex.mjs", "evidence/runtime-js/isolated-task-session.mjs" ], "attribution": { "kind": "module", "baseline": "Node worker_threads、Playwright 和外部 Agent CLI 是已有组件。", "delta": "随包增加固定 provider 表、统一 list/read/send 契约与任务 transport，连接多个外部 CLI。", "proof": "第一方 JS 静态代码可见适配器、固定命令参数、Worker 与私有 CDP transport。", "scope": "这是随包 JS 证据，未作为新原生反编译记录；没有运行验证或证明作者原创所有依赖。" }, "technical": { "number": "AI-15", "entry": "随包 Node.js · agent bridge", "communication": "JSON stdin/stdout + 私有 CDP transport", "execution": "JS 适配器 / Worker + 外部 CLI", "route": "Node bridge → 固定 provider → CLI / Worker", "steps": [ { "title": "读取桥接请求", "description": "agent-bridge 读取 stdin JSON，按统一 list/read/send 契约分派。", "status": "已恢复" }, { "title": "选择固定适配器", "description": "固定 provider 表连接 Codex、Claude、WorkBuddy 等已有 CLI。", "status": "已恢复" }, { "title": "使用 provider 协议", "description": "Codex app-server 使用 JSON 行；其他适配器组装各自固定 CLI 参数。", "status": "已恢复" }, { "title": "协作任务执行", "description": "任务 Worker 与 Playwright/私有 CDP transport 配合；不是独立 OS 沙箱的证明。", "status": "已恢复" } ], "caveat": "随包 JS 的直接静态证据；未启动外部 CLI 或 Agent 任务。" } }, { "id": "ai-privacy", "category": "ai", "title": "AI 隐私 URL 列表与策略接口", "mode": "新增 API；执行点待恢复", "depth": "事件派发与接口声明", "summary": "原生代码已恢复 URL 列表变化的事件派发，schema 声明用户阻止列表、策略列表和证书检查接口。", "flow": [ "0x1836bdb90 根据新增/移除/列表变化构造并发送 tabAiPrivacy.onBlockedUrlsAdded、onBlockedUrlsRemoved、onBlockedUrlListChanged 事件。", "schema 暴露 getPolicyBlockedUrlList、add/remove/clearBlockedUrls 与 checkMoaCertificate；这只确认接口声明。" ], "integration": "可以确认产品隐私 API 和事件层。没有恢复上下文采集或模型请求之前的强制执行点，因此不能声称所有 AI 功能都会被这个列表拦截，也不能称为 Chromium 网络栈替换。", "unknowns": [ "URL 匹配规则、企业策略合并、证书检查与所有 AI 出口的强制执行调用链未恢复。" ], "labels": [ "p-privacy-url-events", "p-extension-dispatch" ], "schemas": [ "tabAiPrivacy" ], "upstream": [ "extensions/browser/extension_function.h" ], "path": "tabAiPrivacy 扩展 API / 事件路由", "attribution": { "kind": "partial", "baseline": "URL、证书和策略设施属于浏览器已有领域；本次未做完整上游隐私策略比较。", "delta": "已确认 tabAiPrivacy 阻止列表变化事件和接口声明；实际采集/推理前的强制拦截逻辑尚未恢复。", "proof": "事件派发函数恢复了 Added/Removed/ListChanged；其他方法主要来自 schema。", "scope": "不能把接口名称当作“所有 AI 请求都被拦截”的实现证据。" }, "technical": { "number": "AI-16", "entry": "JSAPI 声明 · tabAiPrivacy", "communication": "Native 事件 → 扩展事件派发", "execution": "C++ 事件层已恢复 · 强制拦截未知", "route": "列表变化 → 原生事件 → API 通知", "steps": [ { "title": "接口契约", "description": "schema 声明用户/策略阻止列表、增删清空及证书检查。", "status": "仅声明" }, { "title": "派发变化事件", "description": "原生函数构造 Added/Removed/ListChanged 事件并发送。", "status": "已恢复" }, { "title": "强制执行未知", "description": "没有恢复上下文采集或模型请求前的阻止列表检查主体。", "status": "未恢复" } ], "caveat": "" } }, { "id": "native-reading", "category": "native", "title": "阅读空间：文档、笔记、本地状态与同步", "mode": "新增数据模型、sync bridge 与 UI 接缝", "depth": "存储、catalog、合并与导航已恢复", "summary": "Tabbit 阅读空间有自有 Page catalog、账户存储、加密可用性门控、同步合并和阅读器导航委托。它比一个阅读按钮包含更多原生业务。", "integration": "已恢复自有业务数据结构、异步存储包装、同步元数据/merge 路径及导航/UI 委托。其模式与 Chromium Sync 和页面观察设施相容，准确的注册点和基类仍有缺口。没有证明其整体替换 Chromium reading-list 或 Read Anything。", "path": "tab/browser/reading_space", "schemas": [ "tabReadingSpace" ], "upstream": [ "components/sync/model/data_type_store_impl.cc", "components/sync/model/data_type_sync_bridge.h", "content/public/browser/navigation_handle.h" ], "flow": [ "CreateStore（0x18336d6a0）只接受类型数值 0x3f，分后台任务与 reply callback；成功回调 0x18336d9c0 构造 0x18134a090 所代表的存储适配对象。", "对象保留 type/storage 字段、后台对象及序列 runner；引用 base/task/sequenced_task_runner.h。这与固定上游 DataTypeStoreImpl 的后台序列/前台回复结构相容，但不作原始符号认证。", "0x183382320 明确检查加密上下文，含 local initialization blocked: encryption unavailable 分支；这是可用性门控，未证明具体加密算法。", "service 启动转发包含 session 序号和状态防重入；完整 delegate 虚调用名称未恢复。", "0x183384070 读完 sync metadata 后生成 control:page-catalog-v1:%02x 的 256 桶键及 control:page-local-state-v1，加载本地业务控制记录。", "0x183392e00 在 local mutation commit 完成后更新 catalog/generation、pending Page 状态；page: 是业务实体键前缀。", "0x183398220 处理远端 merge 所需的本地 Page 读取/核验，异常走 StoreError，成功构造合并状态并转入后续提交。", "tabReadingSpace schema 同时声明 Document、Note、TextAnchor、generation、expectedGeneration、contextToken/sourceToken、pending/synced/local_only_* 和 onAuthContextChanged/onSyncStatusChanged。schema 证明契约，不自动证明每个方法已实现。", "导航 observer 针对目标 navigation 完成状态决定是否异步回调；page-action 的 DidFinishNavigation 路径也投递更新。", "库文档打开逻辑尝试 reader，就绪检查失败后记录 Reader was not ready after library document navigation 并投递 OpenLibraryReaderForTarget；目标失效气泡回调单独处理。", "tabReadingSpace.Extractor 契约列出 chromium-read-anything/custom；仅是契约及适配意图，本轮没有建立 Chromium Read Anything/DOM distillation 的实际调用。" ], "unknowns": [ "0x3f 未认证为原始 DataType 枚举；不能仅用数值认定扩展了 Chromium enum。", "数据库文件名、后端 LevelDB/SQLite、每记录加密算法未认证。", "没有逐函数 diff 原 Chromium reading-list 实现，不能声称“替换 Chromium 阅读列表”。", "同步 type 注册、EntitySpecifics 私有字段、协议服务器、冲突规则及配额值未恢复。", "邻近一致性修复日志是下一步线索，本轮未把它当成已经反编译的完整修复算法。", "阅读按钮 View 构造、side panel 注册、真实正文抽取器/渲染入口未追到。", "DidFinishNavigation 中几个虚调用不能未经核对命名为某个具体 NavigationHandle 方法。" ], "labels": [ "a-reading-account-store", "a-reading-store-backend", "a-reading-store-adapter", "a-reading-sync-init", "a-reading-service", "a-reading-sync-read-metadata", "a-reading-sync-local-commit", "a-reading-sync-apply", "a-reading-bubble", "a-reading-page-action", "a-reading-navigation", "a-reading-ui-delegate" ], "extra": [ "evidence/a-business-analysis.md", "evidence/a-business-findings.json" ], "attribution": { "kind": "module", "baseline": "上游已有阅读列表/阅读视图、Sync 数据存储与导航设施；阅读概念和 Sync 框架不是 Tabbit 新增。", "delta": "增加阅读空间的 Page catalog、文档/笔记状态、controlpage 元数据合并，以及阅读器导航委托。", "proof": "自有 catalog 与 local-state key、CreateStore、远端 merge 和导航 observer 路径已恢复。", "scope": "确认产品数据层与协作链；Sync 基类/注册点、最终抽取器及 reading-list 替换关系未确认。" }, "technical": { "number": "N-01", "entry": "tabReadingSpace JSAPI 契约 / 导航观察", "communication": "异步 store/merge callback · 导航 observer", "execution": "Native C++ · 文档状态 / Sync 适配", "route": "存储初始化 → catalog 合并 → 阅读器导航", "steps": [ { "title": "初始化存储", "description": "按类型创建后台 store/reply，建立存储适配对象并检查加密上下文。", "status": "已恢复" }, { "title": "加载文档控制状态", "description": "读取 sync metadata、Page catalog 桶与本地状态键。", "status": "已恢复" }, { "title": "提交和合并", "description": "本地 mutation 更新 generation/pending；远端 merge 读取核验 Page 后衔接提交。", "status": "已恢复" }, { "title": "接入阅读导航", "description": "导航 observer 投递更新；打开库文档时检查 reader 就绪并安排后续打开。", "status": "已恢复" } ], "caveat": "这些是分别恢复的代表性子路径，不是一个完整请求的全链追踪；JSAPI 到每个服务 handler 未逐项关联。" } }, { "id": "native-pet", "category": "native", "title": "桌宠窗口与 WebUI", "mode": "新增控制器与 WebUI", "depth": "窗口与 API 链已恢复", "summary": "Tabbit 新增桌宠控制与独立窗口页面；底层借用 Glic 周边窗口及 WebUI 设施。已确认窗口/API 控制链，完整 Mojo 服务注册未恢复。", "flow": [ "desktopPetGoOut 工厂 → 0x1836f0b70；验证 Profile 和方向 up/down/left/right，调用 0x1834ac3d0。", "GoOut 读取 glic.desktop_pet.enabled 和上次位置、尺寸偏好，进入显示路径；GoHome 0x1834ad100 也读取启用状态并执行回收/返回路径。", "ShowPetWindow 0x1834aa5d0 分配窗口相关对象、设置虚表并加载 chrome://tabbit-desktop-pet/，窗口标识为 TabbitDesktopPetWidget。" ], "integration": "产品控制器位于 chrome/browser/glic/widget，行为体现新增窗口/WebUI。源码路径与对象协作支持 Glic 周边接入判断，不能仅凭目录断言整个 Glic 实现被替换。桌宠若呈现 AI 内容，也不改变这里恢复的原生窗口机制。", "unknowns": [ "完整动画、内容来源及全部 Mojo 服务注册链未逐项反编译。" ], "labels": [ "p-factory-tabInstance-desktopPetGoOut", "p-pet-api-run", "p-pet-show", "p-pet-widget", "p-pet-controller" ], "schemas": [ "tabInstance" ], "upstream": [ "chrome/browser/glic/widget/glic_widget.h", "chrome/browser/glic/BUILD.gn" ], "path": "chrome/browser/glic/widget/tabbit_desktop_pet_controller.cc + chrome://tabbit-desktop-pet/", "attribution": { "kind": "module", "baseline": "上游已有 Glic 窗口、floating UI、Views/WebUI/Mojo。固定 tag 的 Glic widget 目录及 BUILD.gn 未列出 Tabbit 桌宠控制器（有界对照）。", "delta": "新增桌宠 GoOut/GoHome 控制、方向参数、启用与位置/尺寸状态，以及独立 TabbitDesktopPetWidget 和 chrome://tabbit-desktop-pet/ 页面。", "proof": "0x1836f0b70 → 0x1834ac3d0；0x1834aa5d0 创建窗口并引用桌宠 URL。官方公告另确认产品新增桌宠系统。", "scope": "确认桌宠产品窗口与控制增量；不推断整个 Glic 被重写，动画/内容/全部 Mojo 注册仍未恢复。" }, "extra": [ "evidence/attribution-review/review-ledger.json", "evidence/attribution-review/glic-widget-tree.json", "evidence/attribution-review/tabbit-desktop-pet-release.html" ], "technical": { "number": "N-02", "entry": "JSAPI · desktopPetGoOut + WebUI 页面", "communication": "原生控制调用 · Mojo 接口线索", "execution": "Native C++ 控制器 / widget + WebUI", "route": "JSAPI → C++ 桌宠控制 → 独立 WebUI", "steps": [ { "title": "接收外出请求", "description": "desktopPetGoOut 原生处理函数校验 Profile 和方向 up/down/left/right。", "status": "已恢复" }, { "title": "读取桌宠状态", "description": "GoOut 检查启用偏好、位置和尺寸，进入显示路径。", "status": "已恢复" }, { "title": "创建独立窗口", "description": "ShowPetWindow 建立 TabbitDesktopPetWidget 并加载 chrome://tabbit-desktop-pet/。", "status": "已恢复" }, { "title": "返回/收回分支", "description": "独立 GoHome 路径检查启用状态并执行返回/回收。", "status": "已恢复" }, { "title": "Mojo 链尚未闭合", "description": "存在桌宠 Page/PageHandlerFactory 接口线索，完整绑定/注册和页面往返调用未恢复。", "status": "接口线索" } ], "caveat": "确认 WebUI 页面与原生窗口链；不能把 Mojo 名称线索写成已完整恢复的通信实现。" } }, { "id": "b-native-files", "category": "native", "title": "来源绑定的本地文件操作 API", "mode": "新增本地文件 API 与异步 I/O", "depth": "代表性原生路径已恢复", "summary": "extension/web-page API 声明 → 原生 ExtensionFunction 形状 → Profile 服务 → callback worker；权限 feature 声明中 web_page 需 delegated availability check，但其实际 allowlist 此范围未恢复。", "flow": [ "Schema tabLocalFS 提供 mount/unmount/getattr/access/statfs 及类 FUSE 的 open/create/read/write/fsync/readdir 等契约；这个命名不证明存在 FUSE 驱动或替换 OS 文件系统。", "read 原生 API 0x183812280 解析参数、取 BrowserContext/Profile 服务、安排异步响应，并在 0x183812422 直接调用 FuseRead 0x183823560。", "FuseRead/FuseWrite 校验 mount handle 与 origin，错误为 Invalid mount handle or origin；构造封装工作函数指针的异步 callback。读桥在 0x183823940 写入 worker 0x183823ad0。", "read worker 按文件句柄 fh 查找本地文件对象，按 offset 调用底层 helper，读取 size 最多 0x100000（1 MiB），返回实际字节数/errno；坏 fh=9，读错误=5 的结果字段可见。", "write worker 查 fh 和传入 buffer、offset，调用 0x185a5a820 文件写 helper；成功和 errno 映射可见，但该 helper 原始名称/系统调用尚未恢复。", "ValidatePath 拒绝绝对路径、NUL、traversal/escape；getattr 工作进一步检查规范化/符号链接目标是否仍在 mount 边界，拒绝 symlink escapes mount。", "Shutdown 清理 active_mounts/tracked_mount_handles；unmount 原生 API 与 FuseMkdir 也是本次已恢复路径，初始 seed 标签已经纠正。" ], "integration": "新增 browser extension API + Profile 文件服务 + 异步本地 I/O 工作模块。native API → service → worker 的直接调用/函数指针及校验边界均可见。 没有替换 Chromium File System Access、network file loader 或 OS 文件系统实现的证据；是另一套 tabLocalFS 契约。", "unknowns": [ "mount picker/drag/drop/token/RenderFrameHost 全部授权链未展开", "read/write 下层 base::File/Windows API helper 未逐项类型恢复", "符号链接 TOCTOU 与全部 reparse 类型保护未审计", "feature 注册实际 binder/provider caller 未恢复，不能宣称任意网页都可调用" ], "labels": [ "b-fs-api-read-real", "b-fs-api-read", "b-fs-read-bridge", "b-fs-read-worker", "b-fs-write-bridge", "b-fs-write-worker", "b-fs-read", "b-fs-mount", "b-fs-path", "b-fs-write", "b-agent-caller-seams-aligned" ], "schemas": [ "tabLocalFS", "tabLocalWorkspace" ], "upstream": [], "path": "local_fs", "extra": [ "evidence/b-business-analysis.md", "evidence/b-business-findings.json" ], "attribution": { "kind": "module", "baseline": "上游 ExtensionFunction、Profile 和异步文件 I/O 已有；文件读写原语不是自研引擎。", "delta": "新增 tabLocalFS/tabLocalWorkspace API 与 Profile 服务，把来源上下文和参数接入异步文件 worker。", "proof": "读/写等代表函数恢复了 ExtensionFunction 形状、服务取得和 callback worker 分发。", "scope": "确认产品文件桥；实际 delegated availability allowlist、全部路径权限检查未恢复。" }, "technical": { "number": "N-03", "entry": "JSAPI · tabLocalFS / tabLocalWorkspace", "communication": "ExtensionFunction → Profile service → worker", "execution": "Native C++ · 异步文件 I/O", "route": "JSAPI → mount/origin 校验 → C++ 文件 worker", "steps": [ { "title": "解析文件请求", "description": "原生 read API 解析参数，取得 BrowserContext/Profile 服务并安排异步响应。", "status": "已恢复" }, { "title": "校验挂载与来源", "description": "FuseRead/FuseWrite 校验 mount handle 和 origin，建立 worker callback。", "status": "已恢复" }, { "title": "后台执行文件 I/O", "description": "worker 查 fh、offset、size/buffer 后调用底层读写 helper，形成字节数/errno 结果。", "status": "已恢复" }, { "title": "边界与回收分支", "description": "独立路径校验拒绝 traversal/symlink escape；Shutdown 清理挂载记录。", "status": "已恢复" } ], "caveat": "JSAPI 后端为浏览器 C++ 服务；类 FUSE 的方法名不证明存在系统内核 FUSE 驱动。" } }, { "id": "b-native-preview", "category": "native", "title": "本地文件预览数据源与系统默认打开入口", "mode": "新增预览数据源与系统设置入口", "depth": "代表性原生路径已恢复", "summary": "自定义数据源 StartDataRequest → Profile 预览服务 → callback；本地文件设置页面 → tabLocalFilePreview 系统打开 API。", "flow": [ "StartDataRequest 0x183696610 先调用请求分类/解析 helper 0x183696cd0/0x183696de0；失败通过 callback 返回空结果，成功获取 Profile 关联服务后进行分发。", "特殊 index.html 分支返回数据，其他路径构造异步请求/读取 callback；数据源具体 token/路径解析语义依赖未恢复 helper。", "Schema tabLocalFilePreview 有 token 下的 getFileInfo/readFile/writeFile/releaseToken，以及 getSystemOpenInfo/requestSetSystemDefault。", "PAK 60467 manifest 声明 tabLocalFilePreview 权限和 tab_local_file_preview 扩展名范围；PAK 60476 的设置 JS 确实调用 getSystemOpenInfo 和 requestSetSystemDefault、处理 lastError/状态。" ], "integration": "新增本地预览数据源及 extension API/设置 UI 接入。数据请求分发、API schema 和实际打包设置调用；URLDataSource 具体类型为语义推断。 没有替换 Chromium file:// 网络加载器、PDF renderer 或文档渲染引擎的证据。", "unknowns": [ "chrome:// URLDataSource 的 Add/注册 caller 未恢复", "token 来源/期限/跨页权限检查 helper 未恢复", "不同扩展名实际转换或渲染实现未由 manifest 证明", "默认应用实际 Windows registry/系统 UI 操作未恢复或执行" ], "labels": [ "b-fs-preview-source" ], "schemas": [ "tabLocalFilePreview" ], "upstream": [], "path": "tab_local_preview", "extra": [ "evidence/b-business-analysis.md", "evidence/b-pak-60467.txt", "evidence/b-pak-60476.txt" ], "attribution": { "kind": "module", "baseline": "浏览器已有 URL 数据源、PDF/file 加载和系统默认应用设施。", "delta": "新增本地预览数据请求分发、tabLocalFilePreview token API，以及设置页的 getSystemOpenInfo/requestSetSystemDefault 调用。", "proof": "StartDataRequest 与打包设置 JS 相互对应；schema 补充 token 契约。", "scope": "确认预览服务/设置入口；token helper、各格式转换和 Windows 默认应用实际操作未恢复。" }, "technical": { "number": "N-04", "entry": "预览数据源 + 设置页 JSAPI", "communication": "StartDataRequest callback；JSAPI 为另一入口", "execution": "Native C++ 预览分发 + 打包设置 JS", "route": "数据源 → C++ 预览服务；设置 JS → JSAPI", "steps": [ { "title": "预览请求入口", "description": "StartDataRequest 对请求分类/解析；失败通过 callback 返回空结果。", "status": "已恢复" }, { "title": "分派内容读取", "description": "成功取得 Profile 预览服务；index.html 与其他路径走不同数据/异步读取分支。", "status": "已恢复" }, { "title": "设置页独立入口", "description": "打包设置 JS 调用 getSystemOpenInfo/requestSetSystemDefault 并处理 lastError/状态。", "status": "已恢复" }, { "title": "token 契约与缺口", "description": "schema 声明 token 文件访问；token helper、格式渲染和默认应用系统操作尚未恢复。", "status": "部分恢复" } ], "caveat": "数据源精确 URLDataSource 类型为推断；没有 Mojo 通信链证据。设置 JSAPI 与预览数据源是并列入口。" } }, { "id": "native-omnibox", "category": "native", "title": "地址栏建议：请求、结果、删除与默认搜索引擎", "mode": "新增 tabOmnibox 包装层 · 复用 AutocompleteController", "depth": "请求、结果阶段、删除和默认引擎路径已恢复", "summary": "Tabbit 通过 tabOmnibox 包装地址栏建议：请求进入 AutocompleteController，结果回传 sync/async/final 阶段；删除建议单独调用 HistoryService::DeleteURLs。", "flow": [ "0x183835800 解析输入、request_id、当前 URL、page classification、zero_suggest、omit_async，创建产品请求。", "直接调用 0x182ea6560；该函数具有 AutocompleteController::Start 字符串和 Omnibox.ProviderTime2/QueryTime2 指标，构成明确的上游控制器接入证据。", "0x18382d630 处理本地/异步阶段，取消或 debounce 异步结果，过滤 TILE_MOST_VISITED_SITE、部分 SEARCH_SUGGEST/ENTITY，去重并标记/加入已打开标签。", "0x1832869d0 实际是搜索引擎 favicon 映射，引用 Google/Bing/Baidu 等 IDR_TAB_SEARCH_ENGINE_* 和缺图标日志。", "不得因为路径邻近 reading_space 字符串就把它当成阅读入口；本轮阅读相关 location_bar view 接缝仍未解决。", "deleteSuggestion 解析 URL 后构造单元素 vector，直接调用 HistoryService::DeleteURLs；0x18b83ff20 捕获 history service 并绑定 0x18b8497e0 的回调，再安排异步任务。", "scheduled 回调出现 HistoryBackend::DeleteURLs 标识；只确认删除任务被安排，不能把日志中的 success=true 当作数据库删除已经完成。", "getDefaultSearchEngine 取得 Profile 的 TemplateURLService，读取默认 provider 并返回 name/keyword/searchUrl/favicon 等结果；不证明搜索排名被改写。", "onSuggestionUpdate 通过扩展事件路由发送 requestId、phase、hasMore 和建议数量；完整 address bar UI、布局和所有 provider 排序未恢复。", "a-reading-location-icon 实际是搜索引擎图标的 Google/Bing/Baidu 资源映射，不是阅读空间逻辑；p-location-icon-view 只是类型元数据注册。" ], "integration": "AutocompleteController、TemplateURLService 和 HistoryService 属于上游基础设施。产品增量集中在 tab_omnibox_api.cc 的请求、结果、删除和默认引擎适配；provider 排序与 UI 布局仍未完成差异分析。", "unknowns": [ "deleteSuggestion 的 scheduled callback 类型和数据库完成语义仍未精确认证；success 日志只表示已安排删除。", "Autocomplete provider 排序、Tabbit 地址栏完整布局与 UI 展示差异未逐项比较。", "默认搜索引擎读取路径已恢复，但不证明搜索质量或建议排序算法被重写。", "0x18a0722e0 等历史页记录是构造/初始化路径，不能当作 QueryHistory 主体。" ], "labels": [ "p-omnibox-request", "p-omnibox-controller-start", "p-omnibox-results", "a-reading-location-icon", "p-omnibox-delete", "p-omnibox-search-engine", "p-omnibox-event-response", "p-location-icon-view", "p-omnibox-history-deleteurls", "p-omnibox-history-scheduled", "p-omnibox-history-delete-asm" ], "schemas": [ "tabOmnibox" ], "upstream": [ "components/omnibox/browser/autocomplete_controller.h" ], "path": "chrome/browser/extensions/api/tab_omnibox → components/omnibox AutocompleteController", "attribution": { "kind": "adapt", "baseline": "AutocompleteController、TemplateURLService、HistoryService 与 Omnibox provider 均已存在；筛选、去重和打开标签行为也可能与上游重叠。", "delta": "增加 tabOmnibox 请求/结果事件层，处理 sync/async/final、requestId、hasMore、open-tab 建议与 URL→搜索；deleteSuggestion 接入 HistoryService::DeleteURLs，默认引擎读取 TemplateURLService，并增加搜索引擎图标映射。", "proof": "0x183835800→0x182ea6560；0x18382d630 处理结果；0x183837b50→0x18b83ff20→0x18b8497e0；0x183838900 读取默认引擎。", "scope": "确认产品 API/加工/删除/默认引擎路径；success=true 只是调度结果，provider 排序、UI 布局和数据库删除完成语义仍未确认。" }, "technical": { "number": "N-05", "entry": "JSAPI · tabOmnibox", "communication": "扩展 API → Autocomplete / HistoryService / TemplateURLService", "execution": "Native C++ 包装层 + 上游 controller", "route": "getSuggestions → AutocompleteController；deleteSuggestion → HistoryService", "steps": [ { "title": "建立请求", "description": "getSuggestions 解析 input、request_id、current_url、zero_suggest 和 omit_async，再调用 AutocompleteController::Start。", "status": "已恢复" }, { "title": "加工异步结果", "description": "ProcessResults 处理 sync/async/final、取消、debounce、类型筛选、去重、打开标签建议和 URL→搜索转换。", "status": "已恢复" }, { "title": "返回事件与默认引擎", "description": "onSuggestionUpdate 回传 requestId、phase、hasMore；getDefaultSearchEngine 读取 TemplateURLService，图标类另有 Google/Bing/Baidu 映射。", "status": "已恢复" }, { "title": "删除单条建议", "description": "deleteSuggestion 构造 URL 列表并直接调用 HistoryService::DeleteURLs，随后绑定 scheduled backend callback。", "status": "已恢复" }, { "title": "保留证据边界", "description": "success=true 只表示删除任务已安排；provider 排序、完整 UI 布局和数据库完成语义未恢复。", "status": "已恢复" } ], "caveat": "scheduled 回调出现 HistoryBackend::DeleteURLs 标识，但未把调度返回等同于数据库删除完成；p-location-icon-view 只是类型元数据，不是布局算法。" } }, { "id": "native-memory", "category": "native", "title": "内存监控、主动压力触发与预热", "mode": "新增服务并修改生命周期接入", "depth": "主循环调用链已恢复", "summary": "BrowserProcessImpl::PreMainMessageLoopRun 中出现 Tabbit 内存监控服务创建/启动；主动触发路径使用现有内存压力通知设施。", "flow": [ "0x18334eb30 关联 browser_process_impl.cc/PreMainMessageLoopRun。条件分支分配监控服务、保存到浏览器对象并直接调用 Start 0x183887d90。", "服务启动记录 last_session.session_id 并调用主动触发器 0x18388a750；它检查 proactive_trigger_enabled、浏览器对象与阈值，并安装回调 0x18388abe0。", "Tick 路径具有 free_mb < threshold 日志和 proactive 原因，调用 0x18adb6860；后者出现 MemoryPressureListenerRegistry::SetMemoryPressureLevel，表明压力通知层被复用。", "0x18388ae40 聚合标签丢弃原因和内存/运行时指标；它是统计路径，不能作为实际丢弃算法的证据。GetShouldPrewarmAsync 仅恢复策略分派和 BrowserWriteOk 指标。" ], "integration": "这是最具体的上游流程插入证据之一：浏览器生命周期方法接入 tab/browser 新服务，再调用上游压力设施。不能推导为替换 Chromium 内存管理器；也不能把监控、触发、丢弃、预热四件事当作同一函数。", "unknowns": [ "触发阈值的来源、后续实际淘汰策略、所有压力监听器和完整磁盘预热/预取机制未恢复。", "单个安装样本不能量化对 Chromium 的补丁规模。" ], "labels": [ "p-browser-start-services", "p-memory-service", "p-memory-pressure", "p-memory-trigger-tick", "p-memory-pressure-signal", "p-memory-discard", "p-prewarm" ], "schemas": [], "upstream": [ "chrome/browser/browser_process_impl.cc", "base/memory/memory_pressure_listener.cc" ], "path": "chrome/browser/browser_process_impl.cc → tab/browser/memory_monitor + prewarm", "attribution": { "kind": "module", "baseline": "Chromium 已有 MemoryPressureListenerRegistry、内存压力通知及标签丢弃设施。", "delta": "在 BrowserProcessImpl::PreMainMessageLoopRun 接入 Tabbit 监控服务，增加主动阈值触发、会话状态与统计采集。", "proof": "主循环分配并 CALL Start；Tick 出现 free_mb < threshold，后续调用上游压力通知层。", "scope": "确认新服务与生命周期插入；真正淘汰/回收/预热算法尚未恢复，不能宣称内存管理器重写。" }, "technical": { "number": "N-06", "entry": "BrowserProcessImpl 生命周期 / Tick", "communication": "浏览器内直接 CALL + 压力通知", "execution": "Native C++ · 监控 / 阈值触发", "route": "主循环 → 监控服务 → 阈值 Tick → 上游压力信号", "steps": [ { "title": "主循环接入服务", "description": "PreMainMessageLoopRun 条件分支创建监控服务并直接调用 Start。", "status": "已恢复" }, { "title": "安装主动触发", "description": "读取会话/启用状态和阈值，安装周期性回调。", "status": "已恢复" }, { "title": "发送内存压力信号", "description": "Tick 检查 free_mb < threshold，调用 MemoryPressureListenerRegistry 路径。", "status": "已恢复" }, { "title": "统计与预热分支", "description": "另有丢弃原因统计和预热策略分派；实际淘汰/预取算法未恢复。", "status": "已恢复" } ], "caveat": "这是 native 浏览器层服务插入，不是操作系统内核或 Blink/V8 内存管理器重写证据。" } }, { "id": "native-diagnostics", "category": "native", "title": "性能录制与诊断报告", "mode": "新增诊断服务与上传适配", "depth": "录制配置、采集与请求构造已恢复", "summary": "产品诊断模块编排 tracing、系统和浏览器状态采集，并为诊断 ZIP 请求预签名上传地址。", "flow": [ "0x183506850 使用 record-continuously 和 toplevel/cc/viz/gpu/blink/v8/mojom/ipc/net 等类别；已有 tracing 活动冲突时返回错误。", "0x1835079f0 分阶段构造 system_info、GPU、窗口/标签及扩展信息；实际 IAT 调用包括 GlobalMemoryStatusEx。", "0x183509f10 检查打包 ZIP 与 network loader，构造 file_category=feedback、original_filename、content_type=application/zip JSON，并构造 POST /proxy/v0/cos/presigned-upload-url。", "FieldTrace 上传入口 0x1834b6b60 检查 payload 非空和 network loader，安排异步后续。" ], "integration": "tab/browser/tracing 的产品服务编排现有 tracing、扩展与网络设施。静态代码确认采集字段和请求构造，不能当作已观察到真实上传。", "unknowns": [ "ZIP 打包全部内容、预签名响应处理、对象存储 PUT 和保留策略未完整恢复。", "这不是遥测实际触发频率、远端可用性或隐私政策审计。" ], "labels": [ "p-trace-recording", "p-diagnostic-collect", "p-diagnostic-upload", "p-field-trace" ], "schemas": [], "upstream": [], "path": "tab/browser/tracing + perf_diagnostic WebUI", "attribution": { "kind": "module", "baseline": "上游 tracing、系统/GPU/扩展状态以及网络设施已有。", "delta": "新增产品诊断编排与 ZIP 上传入口，组装 system_info 等字段并请求 /proxy/v0/cos/presigned-upload-url。", "proof": "录制配置、系统采集和 presigned-upload-url POST 构造均有函数输出。", "scope": "确认产品配置、编排和请求；tracing 引擎并非新增，ZIP 全内容与实际上传未验证。" }, "technical": { "number": "N-07", "entry": "Native 诊断服务 · WebUI 路径线索", "communication": "tracing / 系统调用 + 异步 HTTP", "execution": "Native C++ · 采集与上传编排", "route": "诊断服务 → tracing/状态 → 预签名请求", "steps": [ { "title": "配置录制", "description": "设置 record-continuously 与类别，已有录制冲突时返回错误。", "status": "已恢复" }, { "title": "分阶段采集", "description": "汇集 system_info、GPU、窗口/标签和扩展信息，调用系统内存查询。", "status": "已恢复" }, { "title": "检查诊断负载", "description": "上传函数检查 ZIP 与 network loader，组装反馈文件元数据。", "status": "已恢复" }, { "title": "请求预签名 URL", "description": "构造 presigned-upload-url POST；实际对象存储 PUT 与完整 ZIP 打包未展开。", "status": "已恢复" } ], "caveat": "WebUI 只提供入口路径线索，页面到服务的 JSAPI/Mojo 具体绑定未恢复。" } }, { "id": "native-analytics", "category": "native", "title": "应用/扩展清单与产品埋点", "mode": "新增统计服务", "depth": "调度与条件判断已恢复", "summary": "安装应用清单服务包含上报开关、campaign、条数和启动延迟控制；扩展清单入口恢复到启动调度。", "flow": [ "0x183429060 检查 user_experience_metrics.reporting_enabled，读取 campaign_id、completed_campaign_id、max_apps、startup_delay。", "维护 attempted、attempt_time、attempt_count 等状态并安排后续任务。", "0x1834270f0 为扩展清单 reporter 的 Start 调度入口；tabAnalytics.recordEvent 只在 schema/feature 定义中确认。" ], "integration": "可确认产品统计服务和偏好控制；不能从 Start 路径推断完整清单数据来源、具体上传字段或发送成功。", "unknowns": [ "应用枚举和扩展清单主体、完整请求、真实触发条件及 recordEvent 原生实现未恢复。" ], "labels": [ "p-metrics-apps", "p-metrics-extensions" ], "schemas": [ "tabAnalytics" ], "upstream": [], "path": "tab/browser/analytics", "attribution": { "kind": "module", "baseline": "浏览器偏好、任务调度和统计设施已有；本次未做遥测子系统全量差分。", "delta": "新增应用/扩展清单上报服务的 reporting_enabled、campaign、max_apps、startup_delay 和尝试状态管理。", "proof": "Start/调度函数可见偏好、完成 campaign、计数及延时任务分支。", "scope": "确认产品上报状态与调度；枚举主体、完整上传和 recordEvent 实现仍未恢复。" }, "technical": { "number": "N-08", "entry": "Native reporter Start · recordEvent 声明", "communication": "浏览器内异步调度 / 事件契约", "execution": "Native C++ · 上报状态与调度", "route": "Start → 偏好/活动检查 → 延时上报任务", "steps": [ { "title": "启动 reporter", "description": "应用/扩展清单服务进入 Start/调度入口。", "status": "已恢复" }, { "title": "检查产品条件", "description": "读取 reporting_enabled、campaign、max_apps 与 startup_delay。", "status": "已恢复" }, { "title": "记录尝试状态", "description": "维护 attempted/time/count，投递后续任务。", "status": "已恢复" }, { "title": "实际采集上传未知", "description": "应用枚举、完整请求和 tabAnalytics.recordEvent handler 未恢复。", "status": "未恢复" } ], "caveat": "" } }, { "id": "native-theme", "category": "native", "title": "深色模式、主题与个性化", "mode": "新增 API 调用现有 ThemeService", "depth": "深色模式链已恢复", "summary": "tabThemeColor.setDarkMode 解析参数并取得 Theme service；后续 setter 修改现有 browser.theme.color_scheme2 偏好。", "flow": [ "工厂 0x18398ac00 → 0x183842c70；检查参数、Profile 与 Theme service。", "0x183842c70 直接调用 0x1893211b0 并传入色彩方案参数。", "setter 写 browser.theme.color_scheme2 并触发后续更新；与参考上游 ThemeService 的色彩方案设置行为对应。" ], "integration": "深色模式是产品 API 包装上游主题服务的具体例子。其他自定义面板和颜色 API 尚未逐条恢复，不能据此认定整个主题系统重写。", "unknowns": [ "全部主题颜色生成、自定义面板、Board 主题和用户色事件链尚未恢复。" ], "labels": [ "p-factory-tabThemeColor-setDarkMode", "p-theme-run", "p-theme-mode-setter" ], "schemas": [ "tabThemeColor", "tabUserPrefs" ], "upstream": [ "chrome/browser/themes/theme_service.cc" ], "path": "tabThemeColor API → ThemeService / browser.theme.color_scheme2", "attribution": { "kind": "adapt", "baseline": "深色模式与 ThemeService::SetBrowserColorScheme 已存在于固定上游；browser.theme.color_scheme2 是其偏好。", "delta": "新增 tabThemeColor.setDarkMode 扩展 API，校验参数/Profile 并调用上游 ThemeService setter。", "proof": "工厂 → 0x183842c70 → 0x1893211b0；写入 color_scheme2，与固定上游 setter 相符。", "scope": "这里只确认 API 包装；深色模式本身不算 Tabbit 新功能，其他个性化实现未展开。" }, "technical": { "number": "N-09", "entry": "JSAPI · tabThemeColor.setDarkMode", "communication": "ExtensionFunction → ThemeService setter", "execution": "Native C++ 包装层 + 上游主题服务", "route": "JSAPI → C++ 校验 → ThemeService 偏好", "steps": [ { "title": "进入主题 API", "description": "工厂构造扩展函数对象，原生 handler 检查参数和 Profile。", "status": "已恢复" }, { "title": "取得主题服务", "description": "获取 Theme service 并传入色彩方案参数。", "status": "已恢复" }, { "title": "修改已有偏好", "description": "调用上游 setter 修改 browser.theme.color_scheme2 并触发更新。", "status": "已恢复" } ], "caveat": "JSAPI 是 Tabbit 包装；深色模式能力及 setter 属于上游设施。" } }, { "id": "native-tabs", "category": "native", "title": "标签/分组、窗口与其他浏览器界面", "mode": "接口扩展；部分事件已恢复", "depth": "接口声明为主", "summary": "上游已有 createSplit；Tabbit 增加 5 个 tabs 方法名、2 个事件名及 OverlayOptions 声明，具体新增方法实现待恢复。", "flow": [ "参考 Chromium 154.0.8037.58 已有 TabsCreateSplitFunction 和 tabs.createSplit。Tabbit schema 还声明 getGlicTabId、标签动画、overlay 和产品事件；这些需要逐项区分上游能力与扩展。", "tabGroupsExt 声明缩略图缓存、固定分组和 ID 转换；tabWindowExt 声明侧栏窗口和普通窗口创建。", "0x1834069a0 的 TabAgentEventRouter 对活动标签变化构造 window_id、reason、user_gesture、is_tab_group_home、url 等产品事件。" ], "integration": "可以确认命名空间和产品事件扩展；对照参考源码，createSplit 是上游已存在能力，不能归因于 Tabbit 自研。其他缩略图、固定、overlay 和窗口主体尚未逐项恢复。", "unknowns": [ "不能把接口声明或源路径当作完整标签栏/窗口实现，更无法证明整个 UI 替换。" ], "labels": [ "p-agent-event-router", "p-extension-dispatch" ], "schemas": [ "tabs", "tabGroups", "tabGroupsExt", "tabWindowExt", "tabInstance" ], "upstream": [ "chrome/browser/extensions/api/tabs/tabs_api.cc", "chrome/browser/ui/tabs/tab_strip_model_observer.h" ], "path": "tabs/tabGroups 的 API 与事件扩展", "attribution": { "kind": "partial", "baseline": "固定上游 tabs schema 已有 createSplit，tabs_api.cc 也有 TabsCreateSplitFunction；其他通用 tabs 方法亦已有。", "delta": "tabs schema 比较确认新增 5 个方法名、2 个事件名和 OverlayOptions；另有产品事件路由，但这些方法主体尚未逐项恢复。", "proof": "精确名称对照：getGlicTabId、enable/disableTabAnimation、enable/disableOverlay；onTabModelUpdated/onActiveTabChanged。", "scope": "名称差集只证明接口声明差异；不证明实现/效果。createSplit 不计为 Tabbit 新增，也不宣称其实现没有改动。" }, "extra": [ "evidence/attribution-review/review-ledger.json", "evidence/attribution-review/tabs-upstream.jsonc" ], "technical": { "number": "N-10", "entry": "tabs JSAPI 声明 + 原生事件路由", "communication": "扩展事件已恢复 · 方法 dispatch 未逐项恢复", "execution": "接口层差异 · 新方法 C++ 主体未知", "route": "接口声明 →（方法主体未知）；原生事件 → 扩展", "steps": [ { "title": "核对上游接口", "description": "固定 tabs schema 已有 createSplit；不把它计为 Tabbit 新增。", "status": "源码对照" }, { "title": "识别声明差异", "description": "新增 5 个方法名、2 个事件名及 OverlayOptions，仅证明契约差异。", "status": "仅声明" }, { "title": "原生事件独立路径", "description": "TabAgentEventRouter 构造活动标签变化的产品事件字段。", "status": "已恢复" }, { "title": "方法实现待恢复", "description": "动画、overlay、getGlicTabId 等方法 handler 和最终效果尚未逐项恢复。", "status": "未恢复" } ], "caveat": "" } }, { "id": "native-auth", "category": "native", "title": "登录、Cookie 同步与设置", "mode": "接口已定位；实现待恢复", "depth": "schema / feature 定义", "summary": "接口声明覆盖账户状态、Token、Cookie 同步、用户偏好和设备/默认浏览器信息。", "flow": [ "tabSignin 声明 getToken、getLoginState、getPrimaryAccountInfo、logout；tabAuth 声明 syncCookies。", "tabUserPrefs 声明偏好读写、同步就绪事件；tabInstance 声明默认浏览器、开关与设备信息。", "SimpleFeature 构造路径中可见这些命名空间，与上游和其他产品 API 共同进入 feature 定义。" ], "integration": "可确认浏览器提供了产品账户/设置接口表面。当前未恢复身份提供者、Cookie 写入或同步执行函数，无法判断是否替换上游登录体系，或仅为产品账号提供桥接。", "unknowns": [ "认证协议、加密存储、Cookie 同步边界、上游 Signin/Sync 的替换关系尚未确认。" ], "labels": [ "p-extension-dispatch" ], "schemas": [ "tabSignin", "tabAuth", "tabUserPrefs", "tabInstance", "tabChannel", "tabMessaging" ], "upstream": [ "extensions/browser/extension_function.h" ], "path": "产品账户、消息与设置 API", "attribution": { "kind": "partial", "baseline": "上游已有 Signin、Cookie、Sync 和偏好设施；产品账号与浏览器同步需要分别核对。", "delta": "只定位到 tabSignin/tabAuth/tabUserPrefs 等产品账户、Cookie 同步和设置接口表面。", "proof": "schema/feature 定义中确认命名空间与方法；仅有通用分发构造证据。", "scope": "主体尚未恢复；不能把登录、Cookie 同步或设置全套能力计为已确认的 Tabbit 实现改动。" }, "technical": { "number": "N-11", "entry": "JSAPI 声明 · tabSignin / tabAuth / prefs", "communication": "feature/API 契约 · 实际通信未知", "execution": "原生 handler / 同步主体未恢复", "route": "JSAPI 契约 → feature 定义 →（handler 未知）", "steps": [ { "title": "读取账户契约", "description": "schema 声明 getToken/getLoginState/account/logout 和 syncCookies。", "status": "仅声明" }, { "title": "核对设置与 feature", "description": "用户偏好、同步就绪和设备接口进入通用 feature 定义。", "status": "仅声明" }, { "title": "主体无法闭合", "description": "认证协议、Cookie 写入、同步执行和具体 handler 没有恢复。", "status": "未恢复" } ], "caveat": "" } }, { "id": "native-bookmarks-open", "category": "native", "title": "书签打开：新标签页策略与旧域名迁移", "mode": "复用导航设施 · 插入产品分支", "depth": "函数级分支已恢复", "summary": "Tabbit 在书签打开 helper 中调整标签页 disposition，并把旧书签 host 解析到当前产品 host；书签模型和导航系统仍复用 Chromium。", "flow": [ "书签节点和调用方 disposition 进入 bookmark_utils_desktop.cc 的产品 helper。", "函数记录 is_newtab、disposition，并用 :// 与 /newtab 判断当前页是否为 Tabbit 新标签页。", "当前页是新标签页时保留 CURRENT_TAB；其他页面改为 NEW_FOREGROUND_TAB，并写入对应日志。", "旧书签 host/scheme 经产品映射解析后，再交给上游导航设施；另有 browser-test 测试分支与 Chrome Bookmark Manager 开关。", "最终仍构造 NavigateParams 并调用上游导航 helper，没有证据表明书签树或数据库被 Tabbit 重写。" ], "integration": "书签节点、窗口打开和导航设施属于固定上游；产品增量集中在 bookmark_utils_desktop.cc 的新标签页 disposition、旧 host 迁移和测试开关。", "unknowns": [ "没有同版本 Tabbit 源码，无法给出该函数相对上游的逐行 patch。", "旧 host 映射表的完整取值、失效策略和迁移覆盖范围未恢复。", "测试开关只说明测试分支存在，不能代表普通用户的默认行为。" ], "labels": [ "p-bookmark-ui-entry" ], "schemas": [], "upstream": [ "chrome/browser/ui/bookmarks/bookmark_utils_desktop.cc" ], "path": "chrome/browser/ui/bookmarks/bookmark_utils_desktop.cc", "extra": [ "evidence/bookmark-history-review/coverage.json", "evidence/bookmark-history-review/relevant-source-paths.json" ], "attribution": { "kind": "adapt", "baseline": "书签节点、窗口 disposition 与导航 helper 已在 Chromium；书签树和数据库不是本次新发现的 Tabbit 模块。", "delta": "在 bookmark_utils_desktop.cc 增加 Tabbit newtab 判断：新标签页保持 CURRENT_TAB，其他页改为 NEW_FOREGROUND_TAB；旧书签 host 解析到当前产品 host，另有测试用 Bookmark Manager 开关。", "proof": "0x1835841e0 的数据引用直接出现 [BookmarkUtils] is_newtab、keeping CURRENT_TAB、changed to NEW_FOREGROUND_TAB、Resolved legacy bookmark host 与 /newtab。", "scope": "确认产品分支和导航输入；未取得逐行 patch、完整 host 映射表或用户真实点击运行结果。" }, "technical": { "number": "N-12", "entry": "Native C++ · bookmark_utils_desktop", "communication": "直接调用 · 调用方上下文", "execution": "Native C++ · 书签导航", "route": "书签节点 → Tabbit newtab/host 判定 → NavigateTo", "steps": [ { "title": "取得打开上下文", "description": "书签节点、disposition 和当前页进入书签打开 helper。", "status": "已恢复" }, { "title": "判断产品新标签页", "description": "用 :// 与 /newtab 识别 Tabbit newtab；是新标签页则保持 CURRENT_TAB。", "status": "已恢复" }, { "title": "调整打开方式", "description": "非新标签页改为 NEW_FOREGROUND_TAB，并记录 disposition 分支。", "status": "已恢复" }, { "title": "迁移旧 host 并导航", "description": "解析旧书签 host/scheme，再构造上游 NavigateParams；browser-test 分支仅用于测试开关。", "status": "已恢复" } ], "caveat": "确认产品分支和导航输入；完整旧 host 映射表及相对上游的逐行 patch 未恢复。" } }, { "id": "native-bookmarks-api", "category": "native", "title": "书签扩展 API：GUID、元数据与使用记录", "mode": "扩展 API 契约扩展", "depth": "声明差集已确认；handler 主体未逐项恢复", "summary": "Tabbit 内嵌的 chrome.bookmarks schema 比固定上游多出 GUID、metaInfo、打开/使用记录、导入导出与选择性变化事件，供扩展实现云书签和 AI 摘要。", "flow": [ "扩展侧调用标准或扩展的 chrome.bookmarks 方法，参数中包含书签 id、metadata key/value 或导入数据。", "内嵌 schema 声明 guid、openCount、lastOpenedAt、metaInfo 和 preserveLastUsed，并增加 getRootChildId、recordOpen、setMetaInfo、deleteMetaInfo。", "新增 importData/exportData、getFavicon 与 onChangedSelective、onUsageChanged、onMetaInfoChanged 事件。", "扩展后台使用这些字段做根目录定位、摘要元数据 ext.summary、书签打开状态和云书签开关判断。", "native handler 如何持久化 metadata、是否复用书签模型或另建存储，尚未逐项恢复。" ], "integration": "标准书签 CRUD 与通用事件是上游基础；Tabbit 增加的字段、方法和事件构成可复核的 API 契约增量，尚不等于完整书签服务重写。", "unknowns": [ "未逐个反编译 setMetaInfo/deleteMetaInfo/recordOpen/importData/exportData 的 native handler。", "未确认 metadata 的存储介质、清理策略和多 Profile 隔离方式。", "schema 声明不能证明任意网页或任意扩展都能调用这些接口。" ], "labels": [], "schemas": [], "upstream": [], "path": "chrome/common/extensions/api/bookmarks.json → native bookmarks API/service", "extra": [ "evidence/bookmark-history-review/bookmarks-api-delta.json", "evidence/omnibox-review/chrome__common__extensions__api__bookmarks.json.txt", "evidence/bookmark-history-review/bookmark-extension-findings.json" ], "attribution": { "kind": "module", "baseline": "标准 bookmarks CRUD、通用扩展分发与书签模型属于固定上游；本次只比较了声明的名称和字段。", "delta": "内嵌 chrome.bookmarks schema 增加 GUID、openCount/lastOpenedAt/metaInfo、preserveLastUsed、metadata 方法、import/export、favicon 和 selective/usage 事件。", "proof": "DLL 中嵌入 schema 与固定上游差集：8 个新增函数、3 个新增事件、4 个节点字段、1 个创建字段。", "scope": "这是声明级硬证据；metadata 的 native 持久化、权限和每个 handler 仍未逐项恢复。" }, "technical": { "number": "N-13", "entry": "JSAPI · chrome.bookmarks 扩展", "communication": "Extension API → native bookmarks service", "execution": "Native C++ · schema + service", "route": "扩展 JS → chrome.bookmarks custom API → native bookmarks", "steps": [ { "title": "调用扩展方法", "description": "扩展调用标准 CRUD 或 Tabbit 新增的 get/set/deleteMetaInfo、getRootChildId、recordOpen、import/export。", "status": "已恢复" }, { "title": "校验声明字段", "description": "内嵌 schema 接受 guid、openCount、lastOpenedAt、metaInfo、preserveLastUsed。", "status": "已恢复" }, { "title": "派发新增事件", "description": "onChangedSelective、onUsageChanged、onMetaInfoChanged 进入扩展事件层。", "status": "已恢复" }, { "title": "连接产品业务", "description": "扩展后台以 ext.summary、GUID 和根目录定位连接云书签和 AI 摘要。", "status": "已恢复" }, { "title": "handler 主体待补", "description": "具体 metadata 持久化、权限和 Profile 隔离尚未逐方法恢复。", "status": "部分恢复" } ], "caveat": "schema 差集是硬证据；它证明契约扩展，不证明每个新增 handler 或整个书签服务重写。" } }, { "id": "native-bookmarks-cloud", "category": "native", "title": "书签 WebUI、云书签与 AI 摘要队列", "mode": "WebUI + 扩展 JS + 产品业务", "depth": "数据源、事件链和摘要队列已恢复", "summary": "书签管理页保留 Chromium WebUI，同时 Tabbit 扩展监听书签事件，把偏好/云开关、AI 摘要任务和本地收藏连接起来。", "flow": [ "书签 WebUI 数据源注册 bookmarks、undoDescription、addBookmarkTitle、menuSimplification 和 isIsolatedModeEnabled，并带有 WebUI 刷新资源。", "后台扩展监听 chrome.bookmarks.onCreated、onChangedSelective、onRemoved；新建或批量导入书签进入摘要队列。", "摘要队列调用远端 createSummary/linkSummary 业务接口，写入 metadata key ext.summary，并可能用返回标题更新书签。", "cloud_bookmarks 开关和登录状态控制云收藏/登录更新；文字、链接和图片收藏的本地路径最终调用 chrome.bookmarks.create。", "WebUI 页面到 native handler 的完整路由、云端同步协议和摘要后端内部实现仍未全部恢复。" ], "integration": "Chromium 提供书签页、书签模型、事件和扩展 API；Tabbit 增量是 WebUI 数据字段、云书签开关、AISummary 队列与本地收藏业务编排。", "unknowns": [ "不能确认整个 Bookmark Manager 页面被 Tabbit 替换；当前只恢复数据源字段和资源线索。", "云书签的服务器协议、冲突合并和失败重试顺序未恢复。", "AI 摘要后端请求格式、权限校验和摘要模型算法不在本地静态证据内。", "WebUI 到具体 Mojo handler 的绑定没有完全闭合。" ], "labels": [ "p-bookmark-webui-choice", "p-bookmark-star-check" ], "schemas": [], "upstream": [ "chrome/browser/ui/webui/bookmarks/bookmarks_ui.cc" ], "path": "resources.pak bookmarks WebUI → extension background → chrome.bookmarks / summary backend", "extra": [ "evidence/bookmark-history-review/bookmark-extension-findings.json", "evidence/bookmark-history-review/resources.json", "evidence/bookmark-history-review/pak-60031.txt", "evidence/bookmark-history-review/pak-22973.txt", "evidence/bookmark-history-review/pak-22992.txt" ], "attribution": { "kind": "module", "baseline": "Bookmark Manager WebUI、chrome.bookmarks 事件和书签模型已有；扩展与远端摘要服务是产品新增层。", "delta": "书签 WebUI 数据源增加产品字段；扩展监听书签变化，执行云书签开关、登录联动、收藏创建和 AI 摘要队列，写入 ext.summary。", "proof": "0x1834c06d0 恢复数据源字段；resources.pak 60031 保留 onCreated/onChangedSelective/onRemoved、createSummary/linkSummary 与 ext.summary 调用。", "scope": "确认扩展产品编排和 WebUI 数据源线索；云端协议、摘要后端、完整页面 diff 和 Mojo 路由仍未闭合。" }, "technical": { "number": "N-14", "entry": "WebUI + 扩展 background", "communication": "WebUI data source · chrome.bookmarks JSAPI · backend HTTP", "execution": "JS + Native C++ / 远端摘要", "route": "书签事件 → AI summary → ext.summary；云开关 → 本地/云端收藏", "steps": [ { "title": "注册书签页数据", "description": "WebUI 数据源提供 bookmarks、undoDescription、addBookmarkTitle、menuSimplification 等字段。", "status": "已恢复" }, { "title": "监听书签变化", "description": "扩展监听 onCreated/onChangedSelective/onRemoved，新建或批量导入进入摘要队列。", "status": "已恢复" }, { "title": "连接摘要服务", "description": "队列调用 createSummary/linkSummary，写 ext.summary，并可按返回标题更新书签。", "status": "已恢复" }, { "title": "执行本地/云业务", "description": "cloud_bookmarks 与登录状态参与云收藏；文字、链接、图片收藏最终走 chrome.bookmarks.create。", "status": "已恢复" }, { "title": "页面与同步主体待补", "description": "WebUI handler 路由、云同步协议和摘要后端内部未闭合。", "status": "部分恢复" } ], "caveat": "可以确认书签产品编排和事件队列；不能据此说 Bookmark Manager 页面或云同步整体被重写。" } }, { "id": "native-history-migration", "category": "native", "title": "浏览器数据迁移：书签 HTML 与历史 JSON 导入", "mode": "新增迁移解析与导入业务流程", "depth": "解析器、schema 门控和导入编排已恢复", "summary": "Tabbit 的 tab_data_migration 原生路径能预处理书签 HTML、解析带 schema_version 的历史 JSON，并编排书签/历史/Profile 数据导入。", "flow": [ "迁移服务接收源 Profile/归档路径，创建导入任务并准备日志、结果和异步 callback。", "书签 HTML delegate 重写或移除 ICON/ICON_URI 相关片段，持久化 HTML 后调用异步 ParseBookmarksFile，并处理准备失败、超时、解析失败和空结果。", "历史 JSON 解析器先读取 metadata.schema_version；值为 1 才继续，随后接受 history、History、historyItems、HistoryItems 或 items/HistoryEntries，并读取 url/title/visitCount/time_usec/source_time_usec 等字段。", "ImportHistory 编排函数引用 ImportOpenTabsFromProfilePath、ImportDeviceBoundSessions、disable-sync、credentials_enable_service 等 Profile/迁移数据。", "导入完成回调处理失败字符串与对象清理；具体 HistoryBackend/BookmarkModel 写入、去重和事务边界尚未恢复。" ], "integration": "Chromium 已有书签解析接口和 Profile 导入设施；Tabbit 增加 tab_data_migration 目录、历史 JSON schema 适配与迁移服务编排，不能据此认定历史查询或存储引擎被重写。", "unknowns": [ "历史 JSON 的精确时间单位换算、URL 校验和去重策略仍需补充。", "ImportHistory 的 SQL/backend 调用、批量大小、失败回滚与进度更新未完整恢复。", "书签 HTML 解析器是否通过 Mojo、直接调用或另一异步接口传递，仍需逐条确认。", "导入结果的两个 bounded 记录仍被优化器合并为大范围，只用于证明错误字符串与清理分支，不作为函数大小或完整导入完成证明。" ], "labels": [ "p-bookmark-file-parse", "p-history-json-parse", "p-import-history", "p-bookmark-import-result-bounded", "p-history-import-result-bounded" ], "schemas": [], "upstream": [ "components/user_data_importer/utility/bookmark_parser.h", "chrome/browser/ui/webui/history/browsing_history_handler.cc" ], "path": "chrome/browser/tab_data_migration/tab_data_migration_archive_read_delegate.cc → tab_data_migration_service.cc", "extra": [ "evidence/bookmark-history-review/coverage.json", "evidence/bookmark-history-review/history-webui-evidence.json", "evidence/bookmark-history-review/relevant-source-paths.json" ], "attribution": { "kind": "module", "baseline": "Chromium 有书签 HTML 解析接口、Profile 导入和 HistoryService；tab_data_migration 是安装产物中恢复出的产品目录。", "delta": "新增书签 HTML 预处理与异步解析、schema_version=1 的历史 JSON 解析，以及 ImportHistory 对历史、打开标签、设备绑定会话和 Profile 偏好的编排。", "proof": "0x18342d200 出现 ParseBookmarksFile/ICON_URI；0x18342dba0 出现 schema_version/historyItems/visitCount/time_usec；0x183449a10 引用 ImportHistory/ImportOpenTabsFromProfilePath/ImportDeviceBoundSessions。", "scope": "确认解析和编排路径；SQL/backend 写入、去重、事务和完整导入结果未恢复。" }, "technical": { "number": "N-15", "entry": "Native 迁移服务 · tab_data_migration", "communication": "本地 HTML/JSON 解析 → 异步 callback → import service", "execution": "Native C++ · 迁移/导入", "route": "源 Profile → 书签/历史解析 → ImportHistory → 导入回调", "steps": [ { "title": "启动导入任务", "description": "迁移服务接收源 Profile/归档路径，准备任务状态和异步 callback。", "status": "已恢复" }, { "title": "解析书签 HTML", "description": "重写 ICON/ICON_URI 片段，持久化后调用异步 ParseBookmarksFile，并处理超时、失败和空结果。", "status": "已恢复" }, { "title": "解析历史 JSON", "description": "要求 metadata.schema_version==1；接受 history/historyItems 等别名并读取 url/title/访问次数/时间字段。", "status": "已恢复" }, { "title": "编排历史与 Profile 导入", "description": "ImportHistory 引用 ImportOpenTabsFromProfilePath、ImportDeviceBoundSessions 及 sync/credential 偏好。", "status": "已恢复" }, { "title": "写入与回滚待补", "description": "具体 BookmarkModel/HistoryBackend 写入、去重和事务边界未恢复。", "status": "部分恢复" } ], "caveat": "书签和历史解析器有代表性路径；优化器把两个结果函数合并成大范围，不能把 afij 大小当作完整实现证据。" } }, { "id": "native-history-webui", "category": "native", "title": "历史页与历史服务：WebUI/Mojo 复用边界", "mode": "复用 WebUI + Mojo + HistoryService", "depth": "页面契约已核对；查询主体仍有缺口", "summary": "历史页保留 history.mojom PageHandler 查询/删除接口，部分接口和固定上游一致；本次没有找到查询/排序算法被重写的证据。", "flow": [ "历史页 bundle 调用 history.mojom PageHandler.QueryHistory、QueryHistoryContinuation、RemoveVisits 和 RemoveBookmark。", "浏览器侧 BrowsingHistoryHandler 构造函数接收 Profile/HistoryService 等对象，但恢复的 0x18a0722e0 是构造/初始化路径，不是 QueryHistory 主体。", "固定上游 history.mojom 同样包含 includeActorVisits、isActorVisit、criticalActions 等结构，因此这些名称不能直接归因于 Tabbit。", "地址栏建议删除另行进入 tabOmnibox，并调用 HistoryService::DeleteURLs；它与历史页查询是两条不同入口。", "查询排名、历史页视觉 diff、scheduled backend callback 的精确类型和数据库完成语义仍未知。" ], "integration": "历史页 WebUI/Mojo 基础属于上游；本轮可确认的历史产品改动主要在 tab_data_migration 导入和地址栏建议删除的接入，未见完整查询引擎重写证据。", "unknowns": [ "没有恢复 BrowsingHistoryHandler::QueryHistory 的真实函数边界和 SQL/索引调用。", "p-history-webui-query 的 0x18a071390 探针实际构造颜色数据，标签错误，已拒绝作为查询行为证据。", "固定上游 history.mojom 与本地生成的 Mojo JS 名称高度一致，但没有做逐字节整个资源包 diff。", "历史页 UI 是否增加 Tabbit 样式、入口或产品筛选仍未确认。" ], "labels": [ "p-history-handler-query", "p-history-webui-query" ], "schemas": [], "upstream": [ "ui/webui/resources/cr_components/history/history.mojom", "chrome/browser/ui/webui/history/browsing_history_handler.cc", "chrome/browser/resources/history/history.ts" ], "path": "chrome/browser/ui/webui/history → history.mojom.PageHandler → HistoryService", "extra": [ "evidence/bookmark-history-review/history-webui-evidence.json", "evidence/bookmark-history-review/pak-19973.txt", "evidence/bookmark-history-review/pak-52435.txt", "evidence/bookmark-history-review/coverage.json" ], "attribution": { "kind": "adapt", "baseline": "history.mojom PageHandler、BrowsingHistoryHandler、HistoryService 及历史页资源属于固定上游；actor visits 和 critical actions 也在上游契约中。", "delta": "本轮未发现历史查询/展示算法被重写；可确认的产品历史增量是迁移导入与地址栏建议删除。历史页继续走 WebUI/Mojo 查询和删除接口。", "proof": "resources.pak 19973/52435 保留 16 个 PageHandler/Page 方法；0x18a0722e0 是 BrowsingHistoryHandler 构造路径；固定上游 history.mojom 方法名与结构高度对应。", "scope": "页面接口复用边界已确认；QueryHistory 主体、排序/SQL 和视觉 diff 仍未知，不能把历史页整体归因于 Tabbit。" }, "technical": { "number": "N-16", "entry": "WebUI + Mojo · history.mojom", "communication": "PageHandler → HistoryService", "execution": "Native C++ · HistoryService / WebUI", "route": "history page → PageHandler → HistoryService", "steps": [ { "title": "页面发起请求", "description": "历史页调用 history.mojom.PageHandler.QueryHistory、QueryHistoryContinuation 和 RemoveVisits。", "status": "已恢复" }, { "title": "浏览器侧初始化", "description": "BrowsingHistoryHandler 构造函数接收 Profile/HistoryService；已恢复入口不是查询主体。", "status": "已恢复" }, { "title": "核对上游契约", "description": "固定上游 history.mojom 也包含 actor visits 与 critical actions，不能把这些字段直接归因于 Tabbit。", "status": "已恢复" }, { "title": "分开地址栏删除", "description": "建议删除走 tabOmnibox → HistoryService::DeleteURLs，并与页面查询分开记录。", "status": "已恢复" }, { "title": "查询主体仍未恢复", "description": "排序、SQL/索引、完整视觉 diff 和数据库完成语义仍未确认。", "status": "未恢复" } ], "caveat": "本轮只确认页面契约和构造路径；没有足够的 native 证据支持“历史查询引擎被 Tabbit 重写”。" } } ], "sources": [ { "path": "extensions/browser/extension_function.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/extensions/browser/extension_function.h?format=TEXT", "status": 200, "file": "evidence/upstream/extensions__browser__extension_function.h.txt", "sha256": "b7d21adba7e74da120ead3ea1136e5a03046f29009a6ba92965f670c4b3b0b3a" }, { "path": "extensions/browser/extension_function_registry.cc", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/extensions/browser/extension_function_registry.cc?format=TEXT", "status": 200, "file": "evidence/upstream/extensions__browser__extension_function_registry.cc.txt", "sha256": "5043e0bd2bb6fd2458d39496b28aa4b9cf1a9c3cc42d3b3214191af2ebc0dc6b" }, { "path": "chrome/browser/glic/BUILD.gn", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/glic/BUILD.gn?format=TEXT", "status": 200, "file": "evidence/upstream/chrome__browser__glic__BUILD.gn.txt", "sha256": "64783e72148d469ae5d211e1d0400402bf356a030a598b8440d7cb0661ac7b0e" }, { "path": "chrome/browser/glic/widget/glic_widget.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/glic/widget/glic_widget.h?format=TEXT", "status": 200, "file": "evidence/upstream/chrome__browser__glic__widget__glic_widget.h.txt", "sha256": "223ff8dc079f07797650c4c7445a03cebbe4bc5d32225f5e06326fc95edad54e" }, { "path": "chrome/browser/extensions/api/tabs/tabs_api.cc", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/extensions/api/tabs/tabs_api.cc?format=TEXT", "status": 200, "file": "evidence/upstream/chrome__browser__extensions__api__tabs__tabs_api.cc.txt", "sha256": "2922364b1076f401ed020f877f3b750eba96e1d05d4c28c17d1126c28eef172e" }, { "path": "chrome/browser/ui/tabs/tab_strip_model_observer.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/ui/tabs/tab_strip_model_observer.h?format=TEXT", "status": 200, "file": "evidence/upstream/chrome__browser__ui__tabs__tab_strip_model_observer.h.txt", "sha256": "22b74b788b1aaef0937d6afe665f145bba9230f5c4cf6fe66c13daf51edc9ba2" }, { "path": "components/omnibox/browser/autocomplete_controller.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/components/omnibox/browser/autocomplete_controller.h?format=TEXT", "status": 200, "file": "evidence/upstream/components__omnibox__browser__autocomplete_controller.h.txt", "sha256": "d56d8cbaa525206a90cb6251f0950429d19e379fdafe5b715cb61039172ddd99" }, { "path": "chrome/browser/themes/theme_service.cc", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/themes/theme_service.cc?format=TEXT", "status": 200, "file": "evidence/upstream/chrome__browser__themes__theme_service.cc.txt", "sha256": "83a42e3d5c62d055e93089547f1a465ab575d341cab561959e7c745ff1611fbc" }, { "path": "chrome/browser/browser_process_impl.cc", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/browser_process_impl.cc?format=TEXT", "status": 200, "file": "evidence/upstream/chrome__browser__browser_process_impl.cc.txt", "sha256": "ede54fa4100d408948443c598e0357b519a35abcce452892fdfe5975b96e16cb" }, { "path": "base/memory/memory_pressure_listener.cc", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/base/memory/memory_pressure_listener.cc?format=TEXT", "status": 200, "file": "evidence/upstream/base__memory__memory_pressure_listener.cc.txt", "sha256": "722e835e64b8641d15b7e7a9eab9df12b2bf33b3969e1756bb66f362fbf0de32" }, { "path": "extensions/browser/extension_function_registry.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/extensions/browser/extension_function_registry.h?format=TEXT", "status": 200, "file": "evidence/upstream/extensions__browser__extension_function_registry.h.txt", "sha256": "d7c04f4d9c5d41ea5f8da8435611c1c2c6bf5b0decbf2dcb03617385959d95e3" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "content/public/browser/render_widget_host.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/content/public/browser/render_widget_host.h?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:51:59.054Z", "file": "evidence/a-upstream/content/public/browser/render_widget_host.h", "sha256": "0bca9c2f89103b48e66686433a9216ab072fd55ae2fbf39a480666e2dab18bfe", "bytes": 19684, "path": "content/public/browser/render_widget_host.h" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "content/public/browser/navigation_handle.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/content/public/browser/navigation_handle.h?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:52:00.704Z", "file": "evidence/a-upstream/content/public/browser/navigation_handle.h", "sha256": "c708f46d896af459d1299f1bdd55c100571b3a3823f8c4f1c7ff7f6415beb7c1", "bytes": 47744, "path": "content/public/browser/navigation_handle.h" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "content/public/browser/render_frame_host.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/content/public/browser/render_frame_host.h?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:52:01.631Z", "file": "evidence/a-upstream/content/public/browser/render_frame_host.h", "sha256": "69af80d257998008c91858f4c04600df41333e04b69b58effca7c1ebb304fa91", "bytes": 63659, "path": "content/public/browser/render_frame_host.h" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "components/sync/base/data_type.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/components/sync/base/data_type.h?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:52:02.526Z", "file": "evidence/a-upstream/components/sync/base/data_type.h", "sha256": "0a43bb55bffd8308478bbebdf26e6f5f6ec36cce0f6a5df8cc963cfe84c9fd31", "bytes": 17650, "path": "components/sync/base/data_type.h" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "components/sync/model/data_type_store.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/components/sync/model/data_type_store.h?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:52:03.252Z", "file": "evidence/a-upstream/components/sync/model/data_type_store.h", "sha256": "bd1b4c9b5d0fb62bb7e19d10a46846059b782fbb543c21ee4e7317f4d4a95364", "bytes": 6750, "path": "components/sync/model/data_type_store.h" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "components/sync/model/blocking_data_type_store_impl.cc", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/components/sync/model/blocking_data_type_store_impl.cc?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:52:03.894Z", "file": "evidence/a-upstream/components/sync/model/blocking_data_type_store_impl.cc", "sha256": "50fe81e1e8a40333ba48d29225e36da0c04f605a75dbcb3f33ecab762a962400", "bytes": 11024, "path": "components/sync/model/blocking_data_type_store_impl.cc" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "components/sync/model/data_type_store_impl.cc", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/components/sync/model/data_type_store_impl.cc?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:52:05.215Z", "file": "evidence/a-upstream/components/sync/model/data_type_store_impl.cc", "sha256": "5a6be4e32ae8e669294800822be447a31d8479cb375ab75fd614f49c1c6559d6", "bytes": 11637, "path": "components/sync/model/data_type_store_impl.cc" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "components/sync/model/data_type_sync_bridge.h", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/components/sync/model/data_type_sync_bridge.h?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:52:05.791Z", "file": "evidence/a-upstream/components/sync/model/data_type_sync_bridge.h", "sha256": "3a81dddf8aae92890d0c8b1ed22abfa465c9bd28566af9bf857dcb7927ea71a7", "bytes": 13551, "path": "components/sync/model/data_type_sync_bridge.h" }, { "repository": "chromium", "revision": "refs/tags/154.0.8037.58", "source_path": "third_party/blink/public/mojom/input/input_handler.mojom", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/third_party/blink/public/mojom/input/input_handler.mojom?format=TEXT", "status": 200, "accessed_utc": "2026-10-27T02:52:09.835Z", "file": "evidence/a-upstream/third_party/blink/public/mojom/input/input_handler.mojom", "sha256": "11f5dad3f10b46bfa69b2a710948d5735467063735ac7fb8fb7664510fb96e8e", "bytes": 23548, "path": "third_party/blink/public/mojom/input/input_handler.mojom" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/chrome__browser__ui__bookmarks__bookmark_utils_desktop.cc.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/ui/bookmarks/bookmark_utils_desktop.cc?format=TEXT", "status": "reused", "bytes": 22260, "sha256": "f612c6f175f2a4438ca37791f229a525025214d0093c2c9266acf160de67bedb", "path": "chrome/browser/ui/bookmarks/bookmark_utils_desktop.cc" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/chrome__browser__ui__webui__bookmarks__bookmarks_ui.cc.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/ui/webui/bookmarks/bookmarks_ui.cc?format=TEXT", "status": "reused", "bytes": 11189, "sha256": "3a0c310fa9a96ede865d8b1e19013f9192d2755e42d5ec4baa8abe0e876dab65", "path": "chrome/browser/ui/webui/bookmarks/bookmarks_ui.cc" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/chrome__browser__ui__webui__history__browsing_history_handler.cc.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/ui/webui/history/browsing_history_handler.cc?format=TEXT", "status": "reused", "bytes": 38920, "sha256": "d7af1b436994c092880a1ffed613e382d2d5826fb4c1eb04dac5cd860c2476cc", "path": "chrome/browser/ui/webui/history/browsing_history_handler.cc" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/chrome__browser__ui__webui__history__browsing_history_handler.h.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/ui/webui/history/browsing_history_handler.h?format=TEXT", "status": "reused", "bytes": 7602, "sha256": "daa7c4e4de675020fdf59ca79cf718675b88f30735937f6de561acd24db61f07", "path": "chrome/browser/ui/webui/history/browsing_history_handler.h" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/chrome__browser__ui__webui__history__history_ui.cc.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/ui/webui/history/history_ui.cc?format=TEXT", "status": "reused", "bytes": 20661, "sha256": "7d2734b91be92b59c4643b0a48e0e9c2f53f2d2b2ac7712d5e22e55897b3a6dc", "path": "chrome/browser/ui/webui/history/history_ui.cc" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/chrome__browser__resources__history__history.ts.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/chrome/browser/resources/history/history.ts?format=TEXT", "status": "reused", "bytes": 3924, "sha256": "9f388c3ccfa65cde5075037482decf5f7e4e604f48b0640bc694f73c22ac3d09", "path": "chrome/browser/resources/history/history.ts" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/ui__webui__resources__cr_components__history__history.mojom.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/ui/webui/resources/cr_components/history/history.mojom?format=TEXT", "http_status": 200, "status": "fetched", "bytes": 6942, "sha256": "b68f295fd46241d62231f32b512be83042f83c943a2fb95bcc1400053bd727cc", "path": "ui/webui/resources/cr_components/history/history.mojom" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/components__user_data_importer__utility__bookmark_parser.cc.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/components/user_data_importer/utility/bookmark_parser.cc?format=TEXT", "status": "reused", "bytes": 611, "sha256": "3965ffe95d48be1c8829a46058b1902fc5ce4b722963202b0e143b067bf6ca4d", "path": "components/user_data_importer/utility/bookmark_parser.cc" }, { "revision": "refs/tags/154.0.8037.58", "file": "evidence/bookmark-history-review/upstream/components__user_data_importer__utility__bookmark_parser.h.txt", "url": "https://chromium.googlesource.com/chromium/src/+/refs/tags/154.0.8037.58/components/user_data_importer/utility/bookmark_parser.h?format=TEXT", "status": "reused", "bytes": 3012, "sha256": "0547a1dda8d522285375f1d31c590e585b9946579618e676d3ac9f77b89bdbe2", "path": "components/user_data_importer/utility/bookmark_parser.h" }, { "path": "chrome/common/extensions/api/bookmarks.json", "file": "evidence/omnibox-review/chrome__common__extensions__api__bookmarks.json.txt", "sha256": "a7c3baa648467c8b83d0fd57ed785f31f9c31769f6ff6bf12790c20a51bcc98b", "revision": "154.0.8037.58" } ], "evidence": [ { "label": "a-reading-account-store", "file": "rea-a-reading-account-store.json", "file_sha256": "327cf75d4fbf581d557b6640c9a43af24d991f9829936fee7a105bf4cc9c9963", "status": "completed", "evidence_id": "ev_2dd29f5ed28d2bc9ec785f47d8a1547dfecb8382497c9982775c06e575a86c17", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18336d6a0;pdgo @ 0x18336d6a0;afij @ 0x18336d6a0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18336d6a0", "size": 573, "nargs": 3, "signature": "fcn.18336d6a0(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6496376533, "to": 6542067384, "type": "CALL" }, { "from": 6496376647, "to": 6542067384, "type": "CALL" }, { "from": 6496376765, "to": 6512942288, "type": "CALL" }, { "from": 6496376775, "to": 6542067384, "type": "CALL" }, { "from": 6496376795, "to": 6542067384, "type": "CALL" }, { "from": 6496376862, "to": 6542067384, "type": "CALL" }, { "from": 6496376938, "to": 6511423872, "type": "CALL" }, { "from": 6496376968, "to": 6531880336, "type": "CALL" }, { "from": 6496377025, "to": 6740346544, "type": "CALL" }, { "from": 6496377031, "to": 6496376981, "type": "CODE" }, { "from": 6496377041, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6496376494, "to": 6740709440, "type": "DATA" }, { "from": 6496376547, "to": 6496380080, "type": "DATA" }, { "from": 6496376558, "to": 6496380272, "type": "DATA" }, { "from": 6496376569, "to": 6511490512, "type": "DATA" }, { "from": 6496376580, "to": 6496377280, "type": "DATA" }, { "from": 6496376661, "to": 6496380368, "type": "DATA" }, { "from": 6496376672, "to": 6496380400, "type": "DATA" }, { "from": 6496376687, "to": 6496377856, "type": "DATA" }, { "from": 6496376740, "to": 6719846872, "type": "DATA" }, { "from": 6496376747, "to": 6719846800, "type": "DATA" }, { "from": 6496376807, "to": 6462662976, "type": "DATA" }, { "from": 6496376818, "to": 6496379648, "type": "DATA" }, { "from": 6496376833, "to": 6496378752, "type": "DATA" }, { "from": 6496376872, "to": 6443185472, "type": "DATA" }, { "from": 6496376883, "to": 6496379968, "type": "DATA" }, { "from": 6496376898, "to": 6496379104, "type": "DATA" }, { "from": 6496376926, "to": 6741126408, "type": "DATA" }, { "from": 6496376989, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x19088b9d8", "offset": 277392856, "ascii": "CreateStore", "wide": null }, { "va": "0x19088b990", "offset": 277392784, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_account_store.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5675 }, { "label": "a-reading-bubble", "file": "rea-a-reading-bubble.json", "file_sha256": "c6fdcb867d94b3f25ec64cfd18ec5264bfb1b26a177cdefb7ad4cc95e9a6e3fd", "status": "completed", "evidence_id": "ev_4cb77bfbb684cc7c7a8b8141ca1766bdac210f7e651c76f336650eb7d46e9805", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183281410;pdgo @ 0x183281410;afij @ 0x183281410", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183281410", "size": 314, "nargs": 1, "signature": "fcn.183281410(int64_t arg1);", "callrefs": [ { "from": 6495409297, "to": 6542067384, "type": "CALL" }, { "from": 6495409398, "to": 6512942288, "type": "CALL" }, { "from": 6495409426, "to": 6740346544, "type": "CALL" }, { "from": 6495409470, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6495409177, "to": 6740709440, "type": "DATA" }, { "from": 6495409205, "to": 6741832416, "type": "DATA" }, { "from": 6495409311, "to": 6495410400, "type": "DATA" }, { "from": 6495409322, "to": 6488509552, "type": "DATA" }, { "from": 6495409333, "to": 6495410336, "type": "DATA" }, { "from": 6495409344, "to": 6495405648, "type": "DATA" }, { "from": 6495409370, "to": 6712084952, "type": "DATA" }, { "from": 6495409377, "to": 6712084880, "type": "DATA" }, { "from": 6495409440, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x1901249d8", "offset": 269630936, "ascii": "OnTargetInvalidated", "wide": null }, { "va": "0x190124990", "offset": 269630864, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_bubble_coordinator.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 3202 }, { "label": "a-reading-location-icon", "file": "rea-a-reading-location-icon.json", "file_sha256": "c3b82b87f2ca33e81461b81a3fe532727ee80d5c332a9265e6f0419bc17523d3", "status": "completed", "evidence_id": "ev_ef93bfe86574d9f5ab63ce98b595a060c762f06b37a580f77236dda7bb127890", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1832869d0;pdgo @ 0x1832869d0;afij @ 0x1832869d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1832869d0", "size": 6281, "nargs": 1, "signature": "fcn.1832869d0(int64_t arg1);", "callrefs": [ { "from": 6495431167, "to": 6511730640, "type": "CALL" }, { "from": 6495431183, "to": 6511730640, "type": "CALL" }, { "from": 6495431199, "to": 6495431208, "type": "CODE" }, { "from": 6495431235, "to": 6451511776, "type": "CALL" }, { "from": 6495431258, "to": 6740346544, "type": "CALL" }, { "from": 6495431267, "to": 6521456768, "type": "CALL" }, { "from": 6495431293, "to": 6453617184, "type": "CALL" }, { "from": 6495431317, "to": 6511512544, "type": "CALL" }, { "from": 6495431325, "to": 6535856096, "type": "CALL" }, { "from": 6495431380, "to": 6527001952, "type": "CALL" }, { "from": 6495431391, "to": 6449453024, "type": "CALL" }, { "from": 6495431485, "to": 6495431423, "type": "CODE" }, { "from": 6495431490, "to": 6459600352, "type": "CALL" }, { "from": 6495431511, "to": 6453617184, "type": "CALL" }, { "from": 6495431519, "to": 6535856096, "type": "CALL" }, { "from": 6495431530, "to": 6459600352, "type": "CALL" }, { "from": 6495431570, "to": 6495431599, "type": "CODE" }, { "from": 6495431594, "to": 6511681872, "type": "CALL" }, { "from": 6495431610, "to": 6449453024, "type": "CALL" }, { "from": 6495431649, "to": 6459600352, "type": "CALL" }, { "from": 6495431660, "to": 6459600352, "type": "CALL" }, { "from": 6495431690, "to": 6546103296, "type": "CALL" }, { "from": 6495431715, "to": 6495431731, "type": "CODE" }, { "from": 6495431876, "to": 6542436672, "type": "CALL" }, { "from": 6495432010, "to": 6534927440, "type": "CALL" }, { "from": 6495432064, "to": 6524287056, "type": "CALL" }, { "from": 6495432099, "to": 6511512544, "type": "CALL" }, { "from": 6495432133, "to": 6511512544, "type": "CALL" }, { "from": 6495432167, "to": 6511512544, "type": "CALL" }, { "from": 6495432226, "to": 6542434272, "type": "CALL" }, { "from": 6495432306, "to": 6542434272, "type": "CALL" }, { "from": 6495432346, "to": 6495432366, "type": "CODE" }, { "from": 6495432399, "to": 6542434272, "type": "CALL" }, { "from": 6495432446, "to": 6495433399, "type": "CODE" }, { "from": 6495432478, "to": 6542067384, "type": "CALL" }, { "from": 6495432571, "to": 6495432693, "type": "CODE" }, { "from": 6495432600, "to": 6542067384, "type": "CALL" }, { "from": 6495432728, "to": 6511512544, "type": "CALL" }, { "from": 6495432774, "to": 6595375584, "type": "CALL" }, { "from": 6495432805, "to": 6458301792, "type": "CALL" }, { "from": 6495432836, "to": 6453850768, "type": "CALL" }, { "from": 6495432930, "to": 6626848320, "type": "CALL" }, { "from": 6495432964, "to": 6447960832, "type": "CALL" }, { "from": 6495433054, "to": 6740346544, "type": "CALL" }, { "from": 6495433063, "to": 6521456768, "type": "CALL" }, { "from": 6495433151, "to": 6511512544, "type": "CALL" }, { "from": 6495433156, "to": 6495431431, "type": "CODE" }, { "from": 6495433210, "to": 6445650832, "type": "CALL" }, { "from": 6495433233, "to": 6524031184, "type": "CALL" }, { "from": 6495433244, "to": 6459600352, "type": "CALL" }, { "from": 6495433268, "to": 6495433284, "type": "CODE" }, { "from": 6495433307, "to": 6534927440, "type": "CALL" }, { "from": 6495433344, "to": 6524031184, "type": "CALL" }, { "from": 6495433379, "to": 6511512544, "type": "CALL" }, { "from": 6495433389, "to": 6447366432, "type": "CALL" }, { "from": 6495433394, "to": 6495433114, "type": "CODE" }, { "from": 6495433422, "to": 6542434272, "type": "CALL" }, { "from": 6495433462, "to": 6495433482, "type": "CODE" }, { "from": 6495433510, "to": 6542434272, "type": "CALL" }, { "from": 6495433560, "to": 6495433696, "type": "CODE" }, { "from": 6495433584, "to": 6542067384, "type": "CALL" }, { "from": 6495433691, "to": 6495432707, "type": "CODE" }, { "from": 6495433726, "to": 6542434272, "type": "CALL" }, { "from": 6495433778, "to": 6495433830, "type": "CODE" }, { "from": 6495433806, "to": 6495433579, "type": "CODE" }, { "from": 6495433842, "to": 6542434272, "type": "CALL" }, { "from": 6495433896, "to": 6542067384, "type": "CALL" }, { "from": 6495434003, "to": 6495432707, "type": "CODE" }, { "from": 6495434042, "to": 6542434272, "type": "CALL" }, { "from": 6495434079, "to": 6495434215, "type": "CODE" }, { "from": 6495434103, "to": 6542067384, "type": "CALL" }, { "from": 6495434210, "to": 6495432707, "type": "CODE" }, { "from": 6495434253, "to": 6542434272, "type": "CALL" }, { "from": 6495434304, "to": 6495434448, "type": "CODE" }, { "from": 6495434332, "to": 6542067384, "type": "CALL" }, { "from": 6495434443, "to": 6495432707, "type": "CODE" }, { "from": 6495434487, "to": 6542434272, "type": "CALL" }, { "from": 6495434531, "to": 6495434723, "type": "CODE" }, { "from": 6495434541, "to": 6457283824, "type": "CALL" }, { "from": 6495434546, "to": 6495433114, "type": "CODE" }, { "from": 6495434556, "to": 6457283824, "type": "CALL" }, { "from": 6495434561, "to": 6495433091, "type": "CODE" }, { "from": 6495434574, "to": 6495431802, "type": "CODE" }, { "from": 6495434591, "to": 6495431906, "type": "CODE" }, { "from": 6495434601, "to": 6495433031, "type": "CODE" }, { "from": 6495434625, "to": 6542067384, "type": "CALL" }, { "from": 6495434718, "to": 6495432693, "type": "CODE" }, { "from": 6495434762, "to": 6542434272, "type": "CALL" }, { "from": 6495434809, "to": 6495434951, "type": "CODE" }, { "from": 6495434853, "to": 6542067384, "type": "CALL" }, { "from": 6495434946, "to": 6495433989, "type": "CODE" }, { "from": 6495434957, "to": 6495434978, "type": "CODE" }, { "from": 6495434987, "to": 6542434272, "type": "CALL" }, { "from": 6495435064, "to": 6542067384, "type": "CALL" }, { "from": 6495435157, "to": 6495433989, "type": "CODE" }, { "from": 6495435168, "to": 6495435189, "type": "CODE" }, { "from": 6495435201, "to": 6542434272, "type": "CALL" }, { "from": 6495435272, "to": 6542067384, "type": "CALL" }, { "from": 6495435365, "to": 6495432693, "type": "CODE" }, { "from": 6495435376, "to": 6495435397, "type": "CODE" }, { "from": 6495435406, "to": 6542434272, "type": "CALL" }, { "from": 6495435460, "to": 6542067384, "type": "CALL" }, { "from": 6495435553, "to": 6495432693, "type": "CODE" }, { "from": 6495435609, "to": 6542434272, "type": "CALL" }, { "from": 6495435659, "to": 6495435821, "type": "CODE" }, { "from": 6495435703, "to": 6542067384, "type": "CALL" }, { "from": 6495435816, "to": 6495432707, "type": "CODE" }, { "from": 6495435827, "to": 6495435848, "type": "CODE" }, { "from": 6495435860, "to": 6542434272, "type": "CALL" }, { "from": 6495435914, "to": 6542067384, "type": "CALL" }, { "from": 6495436007, "to": 6495433677, "type": "CODE" }, { "from": 6495436050, "to": 6542434272, "type": "CALL" }, { "from": 6495436098, "to": 6495436234, "type": "CODE" }, { "from": 6495436122, "to": 6542067384, "type": "CALL" }, { "from": 6495436229, "to": 6495432707, "type": "CODE" }, { "from": 6495436273, "to": 6542434272, "type": "CALL" }, { "from": 6495436316, "to": 6495436452, "type": "CODE" }, { "from": 6495436340, "to": 6542067384, "type": "CALL" }, { "from": 6495436447, "to": 6495432707, "type": "CODE" }, { "from": 6495436485, "to": 6542434272, "type": "CALL" }, { "from": 6495436529, "to": 6495436648, "type": "CODE" }, { "from": 6495436550, "to": 6542067384, "type": "CALL" }, { "from": 6495436643, "to": 6495432693, "type": "CODE" }, { "from": 6495436676, "to": 6542434272, "type": "CALL" }, { "from": 6495436713, "to": 6495436832, "type": "CODE" }, { "from": 6495436734, "to": 6542067384, "type": "CALL" }, { "from": 6495436827, "to": 6495434196, "type": "CODE" }, { "from": 6495436862, "to": 6542434272, "type": "CALL" }, { "from": 6495436912, "to": 6495437034, "type": "CODE" }, { "from": 6495436936, "to": 6542067384, "type": "CALL" }, { "from": 6495437029, "to": 6495433989, "type": "CODE" }, { "from": 6495437037, "to": 6495437058, "type": "CODE" }, { "from": 6495437073, "to": 6542434272, "type": "CALL" }, { "from": 6495437127, "to": 6542067384, "type": "CALL" }, { "from": 6495437220, "to": 6495433989, "type": "CODE" }, { "from": 6495437252, "to": 6495432707, "type": "CODE" }, { "from": 6495437276, "to": 6462559152, "type": "CALL" }, { "from": 6495437289, "to": 6511512544, "type": "CALL" }, { "from": 6495437294, "to": 6495433031, "type": "CODE" }, { "from": 6495437343, "to": 6522365600, "type": "CALL" }, { "from": 6495437348, "to": 6495431913, "type": "CODE" }, { "from": 6495437364, "to": 6542089024, "type": "CALL" }, { "from": 6495437386, "to": 6495433091, "type": "CODE" } ], "datarefs": [ { "from": 6495431142, "to": 6740709440, "type": "DATA" }, { "from": 6495431160, "to": 6741141072, "type": "DATA" }, { "from": 6495431176, "to": 6741141104, "type": "DATA" }, { "from": 6495431192, "to": 6726743272, "type": "DATA" }, { "from": 6495431201, "to": 6726743200, "type": "DATA" }, { "from": 6495431330, "to": 6742256144, "type": "DATA" }, { "from": 6495431442, "to": 6740709440, "type": "DATA" }, { "from": 6495431672, "to": 6712086520, "type": "DATA" }, { "from": 6495432524, "to": 6712085824, "type": "DATA" }, { "from": 6495432553, "to": 6712085835, "type": "DATA" }, { "from": 6495432564, "to": 6712085824, "type": "DATA" }, { "from": 6495432646, "to": 6712085792, "type": "DATA" }, { "from": 6495432675, "to": 6712085803, "type": "DATA" }, { "from": 6495432686, "to": 6712085792, "type": "DATA" }, { "from": 6495432787, "to": 6742256144, "type": "DATA" }, { "from": 6495433161, "to": 6742246848, "type": "DATA" }, { "from": 6495433170, "to": 6741126112, "type": "DATA" }, { "from": 6495433179, "to": 6742246856, "type": "DATA" }, { "from": 6495433189, "to": 6712085632, "type": "DATA" }, { "from": 6495433220, "to": 6712085704, "type": "DATA" }, { "from": 6495433630, "to": 6712085856, "type": "DATA" }, { "from": 6495433659, "to": 6712085865, "type": "DATA" }, { "from": 6495433670, "to": 6712085856, "type": "DATA" }, { "from": 6495433942, "to": 6712085896, "type": "DATA" }, { "from": 6495433971, "to": 6712085908, "type": "DATA" }, { "from": 6495433982, "to": 6712085896, "type": "DATA" }, { "from": 6495434149, "to": 6712085928, "type": "DATA" }, { "from": 6495434178, "to": 6712085938, "type": "DATA" }, { "from": 6495434189, "to": 6712085928, "type": "DATA" }, { "from": 6495434382, "to": 6712085960, "type": "DATA" }, { "from": 6495434411, "to": 6712085976, "type": "DATA" }, { "from": 6495434422, "to": 6712085960, "type": "DATA" }, { "from": 6495434671, "to": 6712086008, "type": "DATA" }, { "from": 6495434700, "to": 6712086019, "type": "DATA" }, { "from": 6495434711, "to": 6712086008, "type": "DATA" }, { "from": 6495434899, "to": 6712086040, "type": "DATA" }, { "from": 6495434928, "to": 6712086052, "type": "DATA" }, { "from": 6495434939, "to": 6712086040, "type": "DATA" }, { "from": 6495435110, "to": 6712086072, "type": "DATA" }, { "from": 6495435139, "to": 6712086084, "type": "DATA" }, { "from": 6495435150, "to": 6712086072, "type": "DATA" }, { "from": 6495435318, "to": 6712086104, "type": "DATA" }, { "from": 6495435347, "to": 6712086115, "type": "DATA" }, { "from": 6495435358, "to": 6712086104, "type": "DATA" }, { "from": 6495435506, "to": 6712086136, "type": "DATA" }, { "from": 6495435535, "to": 6712086147, "type": "DATA" }, { "from": 6495435546, "to": 6712086136, "type": "DATA" }, { "from": 6495435753, "to": 6712086168, "type": "DATA" }, { "from": 6495435782, "to": 6712086184, "type": "DATA" }, { "from": 6495435793, "to": 6712086168, "type": "DATA" }, { "from": 6495435960, "to": 6712086208, "type": "DATA" }, { "from": 6495435989, "to": 6712086217, "type": "DATA" }, { "from": 6495436000, "to": 6712086208, "type": "DATA" }, { "from": 6495436168, "to": 6712086240, "type": "DATA" }, { "from": 6495436197, "to": 6712086255, "type": "DATA" }, { "from": 6495436208, "to": 6712086240, "type": "DATA" }, { "from": 6495436386, "to": 6712086280, "type": "DATA" }, { "from": 6495436415, "to": 6712086293, "type": "DATA" }, { "from": 6495436426, "to": 6712086280, "type": "DATA" }, { "from": 6495436596, "to": 6712086312, "type": "DATA" }, { "from": 6495436625, "to": 6712086323, "type": "DATA" }, { "from": 6495436636, "to": 6712086312, "type": "DATA" }, { "from": 6495436780, "to": 6712086344, "type": "DATA" }, { "from": 6495436809, "to": 6712086354, "type": "DATA" }, { "from": 6495436820, "to": 6712086344, "type": "DATA" }, { "from": 6495436982, "to": 6712086376, "type": "DATA" }, { "from": 6495437011, "to": 6712086388, "type": "DATA" }, { "from": 6495437022, "to": 6712086376, "type": "DATA" }, { "from": 6495437173, "to": 6712086408, "type": "DATA" }, { "from": 6495437202, "to": 6712086420, "type": "DATA" }, { "from": 6495437213, "to": 6712086408, "type": "DATA" } ] }, "strings": [ { "va": "0x190124d40", "offset": 269631808, "ascii": "IDR_TAB_SEARCH_ENGINE_SOGOU", "wide": null }, { "va": "0x190124d4b", "offset": 269631819, "ascii": "RCH_ENGINE_SOGOU", "wide": null }, { "va": "0x190124d20", "offset": 269631776, "ascii": "IDR_TAB_SEARCH_ENGINE_BAIDU", "wide": null }, { "va": "0x190124d2b", "offset": 269631787, "ascii": "RCH_ENGINE_BAIDU", "wide": null }, { "va": "0x190124c80", "offset": 269631616, "ascii": "..\\..\\tab\\browser\\ui\\views\\location_bar\\tab_search_engine_icon_view.cc", "wide": null }, { "va": "0x190124cc8", "offset": 269631688, "ascii": "[TabSearchEngineFavicon] built_in_icon_missing engine=", "wide": null }, { "va": "0x190124d60", "offset": 269631840, "ascii": "IDR_TAB_SEARCH_ENGINE_360", "wide": null }, { "va": "0x190124d69", "offset": 269631849, "ascii": "EARCH_ENGINE_360", "wide": null }, { "va": "0x190124d88", "offset": 269631880, "ascii": "IDR_TAB_SEARCH_ENGINE_GOOGLE", "wide": null }, { "va": "0x190124d94", "offset": 269631892, "ascii": "CH_ENGINE_GOOGLE", "wide": null }, { "va": "0x190124da8", "offset": 269631912, "ascii": "IDR_TAB_SEARCH_ENGINE_BING", "wide": null }, { "va": "0x190124db2", "offset": 269631922, "ascii": "ARCH_ENGINE_BING", "wide": null }, { "va": "0x190124dc8", "offset": 269631944, "ascii": "IDR_TAB_SEARCH_ENGINE_DUCKDUCKGO", "wide": null }, { "va": "0x190124dd8", "offset": 269631960, "ascii": "NGINE_DUCKDUCKGO", "wide": null }, { "va": "0x190124df8", "offset": 269631992, "ascii": "IDR_TAB_SEARCH_ENGINE_YAHOO", "wide": null }, { "va": "0x190124e03", "offset": 269632003, "ascii": "RCH_ENGINE_YAHOO", "wide": null }, { "va": "0x190124e18", "offset": 269632024, "ascii": "IDR_TAB_SEARCH_ENGINE_YANDEX", "wide": null }, { "va": "0x190124e24", "offset": 269632036, "ascii": "CH_ENGINE_YANDEX", "wide": null }, { "va": "0x190124e38", "offset": 269632056, "ascii": "IDR_TAB_SEARCH_ENGINE_ECOSIA", "wide": null }, { "va": "0x190124e44", "offset": 269632068, "ascii": "CH_ENGINE_ECOSIA", "wide": null }, { "va": "0x190124e58", "offset": 269632088, "ascii": "IDR_TAB_SEARCH_ENGINE_BRAVE", "wide": null }, { "va": "0x190124e63", "offset": 269632099, "ascii": "RCH_ENGINE_BRAVE", "wide": null }, { "va": "0x190124e78", "offset": 269632120, "ascii": "IDR_TAB_SEARCH_ENGINE_QWANT", "wide": null }, { "va": "0x190124e83", "offset": 269632131, "ascii": "RCH_ENGINE_QWANT", "wide": null }, { "va": "0x190124e98", "offset": 269632152, "ascii": "IDR_TAB_SEARCH_ENGINE_PRIVACYWALL", "wide": null }, { "va": "0x190124ea8", "offset": 269632168, "ascii": "NGINE_PRIVACYWALL", "wide": null }, { "va": "0x190124ec0", "offset": 269632192, "ascii": "IDR_TAB_SEARCH_ENGINE_YEP", "wide": null }, { "va": "0x190124ec9", "offset": 269632201, "ascii": "EARCH_ENGINE_YEP", "wide": null }, { "va": "0x190124ee0", "offset": 269632224, "ascii": "IDR_TAB_SEARCH_ENGINE_STARTPAGE", "wide": null }, { "va": "0x190124eef", "offset": 269632239, "ascii": "ENGINE_STARTPAGE", "wide": null }, { "va": "0x190124f08", "offset": 269632264, "ascii": "IDR_TAB_SEARCH_ENGINE_MAIL_RU", "wide": null }, { "va": "0x190124f15", "offset": 269632277, "ascii": "H_ENGINE_MAIL_RU", "wide": null }, { "va": "0x190124f28", "offset": 269632296, "ascii": "IDR_TAB_SEARCH_ENGINE_NAVER", "wide": null }, { "va": "0x190124f33", "offset": 269632307, "ascii": "RCH_ENGINE_NAVER", "wide": null }, { "va": "0x190124f48", "offset": 269632328, "ascii": "IDR_TAB_SEARCH_ENGINE_DAUM", "wide": null }, { "va": "0x190124f52", "offset": 269632338, "ascii": "ARCH_ENGINE_DAUM", "wide": null }, { "va": "0x190124f68", "offset": 269632360, "ascii": "IDR_TAB_SEARCH_ENGINE_COCCOC", "wide": null }, { "va": "0x190124f74", "offset": 269632372, "ascii": "CH_ENGINE_COCCOC", "wide": null }, { "va": "0x190124f88", "offset": 269632392, "ascii": "IDR_TAB_SEARCH_ENGINE_SEZNAM", "wide": null }, { "va": "0x190124f94", "offset": 269632404, "ascii": "CH_ENGINE_SEZNAM", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 62485 }, { "label": "a-reading-navigation", "file": "rea-a-reading-navigation.json", "file_sha256": "4e8487fe5e0164c66effd4f6115a0608893f67dd65cd86e74a140bfa90d64f33", "status": "completed", "evidence_id": "ev_1b592964cec52b2d61b0e9777afa6f11841622ee056ec32ba1fed6fc10991079", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18336e860;pdgo @ 0x18336e860;afij @ 0x18336e860", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18336e860", "size": 476, "nargs": 2, "signature": "fcn.18336e860(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6496381062, "to": 6740346544, "type": "CALL" }, { "from": 6496381088, "to": 6740346544, "type": "CALL" }, { "from": 6496381111, "to": 6740346544, "type": "CALL" }, { "from": 6496381134, "to": 6740346544, "type": "CALL" }, { "from": 6496381154, "to": 6740346544, "type": "CALL" }, { "from": 6496381163, "to": 6528656752, "type": "CALL" }, { "from": 6496381170, "to": 6496381174, "type": "CODE" }, { "from": 6496381199, "to": 6740346544, "type": "CALL" }, { "from": 6496381227, "to": 6458504880, "type": "CALL" }, { "from": 6496381246, "to": 6520594992, "type": "CALL" }, { "from": 6496381318, "to": 6511512544, "type": "CALL" }, { "from": 6496381323, "to": 6496381276, "type": "CODE" }, { "from": 6496381334, "to": 6740346544, "type": "CALL" }, { "from": 6496381340, "to": 6496381266, "type": "CODE" }, { "from": 6496381386, "to": 6542067384, "type": "CALL" }, { "from": 6496381414, "to": 6597121264, "type": "CALL" }, { "from": 6496381447, "to": 6512942288, "type": "CALL" }, { "from": 6496381475, "to": 6740346544, "type": "CALL" }, { "from": 6496381481, "to": 6496381256, "type": "CODE" }, { "from": 6496381494, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6496381037, "to": 6740709440, "type": "DATA" }, { "from": 6496381236, "to": 6719847196, "type": "DATA" }, { "from": 6496381284, "to": 6740709440, "type": "DATA" }, { "from": 6496381342, "to": 6741832416, "type": "DATA" }, { "from": 6496381394, "to": 6597121152, "type": "DATA" }, { "from": 6496381419, "to": 6712085120, "type": "DATA" }, { "from": 6496381426, "to": 6719847120, "type": "DATA" } ] }, "strings": [ { "va": "0x190124a80", "offset": 269631104, "ascii": "DidFinishNavigation", "wide": null }, { "va": "0x19088bad0", "offset": 277393104, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_navigation_observer.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 4259 }, { "label": "a-reading-page-action", "file": "rea-a-reading-page-action.json", "file_sha256": "9976a1bbc8f1a7e04163883bc0fef284c7d074ecf8606fe5b5f0975af2a9e6ce", "status": "completed", "evidence_id": "ev_240faba52e44a605ae0af381a0f17ef87fddc5da32994bab41dc016d787f07d5", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183283a90;pdgo @ 0x183283a90;afij @ 0x183283a90", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183283a90", "size": 333, "nargs": 2, "signature": "fcn.183283a90(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6495419061, "to": 6740346544, "type": "CALL" }, { "from": 6495419078, "to": 6495413792, "type": "CALL" }, { "from": 6495419175, "to": 6542067384, "type": "CALL" }, { "from": 6495419276, "to": 6512942288, "type": "CALL" }, { "from": 6495419304, "to": 6740346544, "type": "CALL" }, { "from": 6495419348, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6495419036, "to": 6740709440, "type": "DATA" }, { "from": 6495419083, "to": 6741832416, "type": "DATA" }, { "from": 6495419189, "to": 6495410400, "type": "DATA" }, { "from": 6495419200, "to": 6488509552, "type": "DATA" }, { "from": 6495419211, "to": 6495410336, "type": "DATA" }, { "from": 6495419222, "to": 6495413792, "type": "DATA" }, { "from": 6495419248, "to": 6712085120, "type": "DATA" }, { "from": 6495419255, "to": 6712085040, "type": "DATA" }, { "from": 6495419318, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190124a80", "offset": 269631104, "ascii": "DidFinishNavigation", "wide": null }, { "va": "0x190124a30", "offset": 269631024, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_page_action_controller.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 3446 }, { "label": "a-reading-service", "file": "rea-a-reading-service.json", "file_sha256": "980b4494b971958a8639c704fbae0a9f1ba612868b9b272b628e996e878ae5c8", "status": "completed", "evidence_id": "ev_eb4b24a40e08a177ad8a6f4553238c877aa6aa681a3c1d1e7fdfd43963031945", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18337c280;pdgo @ 0x18337c280;afij @ 0x18337c280", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18337c280", "size": 1266, "nargs": 3, "signature": "fcn.18337c280(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6496436981, "to": 6496436987, "type": "CODE" }, { "from": 6496436998, "to": 6496437007, "type": "CODE" }, { "from": 6496437007, "to": 6542434064, "type": "CALL" }, { "from": 6496437087, "to": 6740346544, "type": "CALL" }, { "from": 6496437179, "to": 6633229008, "type": "CALL" }, { "from": 6496437230, "to": 6542067384, "type": "CALL" }, { "from": 6496437442, "to": 6445650832, "type": "CALL" }, { "from": 6496437471, "to": 6524031184, "type": "CALL" }, { "from": 6496437482, "to": 6462379168, "type": "CALL" }, { "from": 6496437501, "to": 6445656528, "type": "CALL" }, { "from": 6496437572, "to": 6511512544, "type": "CALL" }, { "from": 6496437626, "to": 6511975280, "type": "CALL" }, { "from": 6496437634, "to": 6518967168, "type": "CALL" }, { "from": 6496437702, "to": 6740346544, "type": "CALL" }, { "from": 6496437784, "to": 6511512544, "type": "CALL" }, { "from": 6496437789, "to": 6496437749, "type": "CODE" }, { "from": 6496437800, "to": 6740346544, "type": "CALL" }, { "from": 6496437806, "to": 6496437757, "type": "CODE" }, { "from": 6496437817, "to": 6740346544, "type": "CALL" }, { "from": 6496437823, "to": 6496437739, "type": "CODE" }, { "from": 6496437830, "to": 6542067384, "type": "CALL" }, { "from": 6496437843, "to": 6480162640, "type": "CALL" }, { "from": 6496437874, "to": 6597121456, "type": "CALL" }, { "from": 6496437879, "to": 6496437739, "type": "CODE" }, { "from": 6496437913, "to": 6740346544, "type": "CALL" }, { "from": 6496437919, "to": 6496437364, "type": "CODE" }, { "from": 6496437941, "to": 6511512544, "type": "CALL" }, { "from": 6496437946, "to": 6496437364, "type": "CODE" }, { "from": 6496437961, "to": 6511512544, "type": "CALL" }, { "from": 6496437966, "to": 6496437933, "type": "CODE" }, { "from": 6496437978, "to": 6496436922, "type": "CODE" }, { "from": 6496438018, "to": 6511512544, "type": "CALL" }, { "from": 6496438023, "to": 6496437718, "type": "CODE" }, { "from": 6496438048, "to": 6511512544, "type": "CALL" }, { "from": 6496438053, "to": 6496437729, "type": "CODE" }, { "from": 6496438084, "to": 6642723488, "type": "CALL" }, { "from": 6496438089, "to": 6496437404, "type": "CODE" }, { "from": 6496438119, "to": 6740346544, "type": "CALL" }, { "from": 6496438125, "to": 6496437615, "type": "CODE" } ], "datarefs": [ { "from": 6496437241, "to": 6496458832, "type": "DATA" }, { "from": 6496437252, "to": 6496458960, "type": "DATA" }, { "from": 6496437263, "to": 6495410336, "type": "DATA" }, { "from": 6496437274, "to": 6496441824, "type": "DATA" }, { "from": 6496437373, "to": 6742246872, "type": "DATA" }, { "from": 6496437391, "to": 6742246848, "type": "DATA" }, { "from": 6496437412, "to": 6719847320, "type": "DATA" }, { "from": 6496437455, "to": 6719847464, "type": "DATA" }, { "from": 6496437487, "to": 6710367816, "type": "DATA" }, { "from": 6496437513, "to": 6708900496, "type": "DATA" }, { "from": 6496437528, "to": 6708923712, "type": "DATA" }, { "from": 6496437585, "to": 6708923824, "type": "DATA" }, { "from": 6496437599, "to": 6742217808, "type": "DATA" }, { "from": 6496437898, "to": 6488537248, "type": "DATA" }, { "from": 6496438058, "to": 6719847320, "type": "DATA" } ] }, "strings": [ { "va": "0x19088bb98", "offset": 277393304, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_service.cc", "wide": null }, { "va": "0x19088bc28", "offset": 277393448, "ascii": "[ReadingSpace] Sync controller start forwarded: session=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 16202 }, { "label": "a-reading-store-adapter", "file": "rea-a-reading-store-adapter.json", "file_sha256": "0800c92dd1e1cdbcfcba342a340de90a768076a966ae0c4c1f4a84cb0983ceec", "status": "completed", "evidence_id": "ev_aaa681c12bb6596b80a9f5617c31c10eb87eba8f2e09b90b16464517d525764d", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18134a090;pdgo @ 0x18134a090;afij @ 0x18134a090", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18134a090", "size": 293, "nargs": 5, "signature": "fcn.18134a090(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h);", "callrefs": [ { "from": 6462677226, "to": 6542067384, "type": "CALL" }, { "from": 6462677372, "to": 6512942288, "type": "CALL" }, { "from": 6462677400, "to": 6740346544, "type": "CALL" }, { "from": 6462677406, "to": 6462677290, "type": "CODE" }, { "from": 6462677408, "to": 6532074304, "type": "CALL" }, { "from": 6462677413, "to": 6462677305, "type": "CODE" }, { "from": 6462677423, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6462677161, "to": 6740709440, "type": "DATA" }, { "from": 6462677176, "to": 6708183984, "type": "DATA" }, { "from": 6462677313, "to": 6740709440, "type": "DATA" }, { "from": 6462677344, "to": 6712083856, "type": "DATA" }, { "from": 6462677351, "to": 6712695152, "type": "DATA" }, { "from": 6462677384, "to": 6496379952, "type": "DATA" } ] }, "strings": [ { "va": "0x190124590", "offset": 269629840, "ascii": "operator()", "wide": null }, { "va": "0x1901b9970", "offset": 270241136, "ascii": "..\\..\\base\\task\\sequenced_task_runner.h", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 3085 }, { "label": "a-reading-store-backend", "file": "rea-a-reading-store-backend.json", "file_sha256": "c6832517c8c6768fd844507f3f5ad122cfb4eea0c35189b7832b550d91667991", "status": "completed", "evidence_id": "ev_188ec411ada4a30deff3aab9a30d76075ae6b00ca843793ef5ffe3530952faf2", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18336d9c0;pdgo @ 0x18336d9c0;afij @ 0x18336d9c0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18336d9c0", "size": 571, "nargs": 4, "signature": "fcn.18336d9c0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6496377370, "to": 6740346544, "type": "CALL" }, { "from": 6496377389, "to": 6740346544, "type": "CALL" }, { "from": 6496377440, "to": 6532074304, "type": "CALL" }, { "from": 6496377445, "to": 6496377624, "type": "CODE" }, { "from": 6496377470, "to": 6542067384, "type": "CALL" }, { "from": 6496377524, "to": 6462677136, "type": "CALL" }, { "from": 6496377577, "to": 6740346544, "type": "CALL" }, { "from": 6496377595, "to": 6740346544, "type": "CALL" }, { "from": 6496377710, "to": 6740346544, "type": "CALL" }, { "from": 6496377716, "to": 6496377632, "type": "CODE" }, { "from": 6496377750, "to": 6512942288, "type": "CALL" }, { "from": 6496377778, "to": 6740346544, "type": "CALL" }, { "from": 6496377784, "to": 6496377649, "type": "CODE" }, { "from": 6496377789, "to": 6532074304, "type": "CALL" }, { "from": 6496377794, "to": 6496377664, "type": "CODE" }, { "from": 6496377807, "to": 6542089024, "type": "CALL" }, { "from": 6496377826, "to": 6461651024, "type": "CALL" }, { "from": 6496377831, "to": 6496377418, "type": "CODE" }, { "from": 6496377841, "to": 6461651024, "type": "CALL" }, { "from": 6496377846, "to": 6496377624, "type": "CODE" } ], "datarefs": [ { "from": 6496377305, "to": 6740709440, "type": "DATA" }, { "from": 6496377672, "to": 6740709440, "type": "DATA" }, { "from": 6496377722, "to": 6712083856, "type": "DATA" }, { "from": 6496377729, "to": 6712695152, "type": "DATA" }, { "from": 6496377762, "to": 6496379952, "type": "DATA" } ] }, "strings": [ { "va": "0x190124590", "offset": 269629840, "ascii": "operator()", "wide": null }, { "va": "0x1901b9970", "offset": 270241136, "ascii": "..\\..\\base\\task\\sequenced_task_runner.h", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5714 }, { "label": "a-reading-sync-apply", "file": "rea-a-reading-sync-apply.json", "file_sha256": "056ca14338b4cd4db53ea1a5d705542643a21e3bbace3d761c1e8c6777cad18b", "status": "completed", "evidence_id": "ev_c53fc585ebf99133aa734069fb709ab95d924965d7cca4585cb4c0bd0b6ac4c3", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183398220;pdgo @ 0x183398220;afij @ 0x183398220", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183398220", "size": 2742, "nargs": 7, "signature": "fcn.183398220(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h);", "callrefs": [ { "from": 6496551643, "to": 6496552768, "type": "CODE" }, { "from": 6496551734, "to": 6496542672, "type": "CALL" }, { "from": 6496551747, "to": 6496572816, "type": "CALL" }, { "from": 6496551760, "to": 6496551923, "type": "CODE" }, { "from": 6496551830, "to": 6512942288, "type": "CALL" }, { "from": 6496551918, "to": 6496489584, "type": "CALL" }, { "from": 6496551954, "to": 6740346544, "type": "CALL" }, { "from": 6496551976, "to": 6585956880, "type": "CALL" }, { "from": 6496552090, "to": 6511512544, "type": "CALL" }, { "from": 6496552103, "to": 6511512544, "type": "CALL" }, { "from": 6496552143, "to": 6511512544, "type": "CALL" }, { "from": 6496552302, "to": 6511512544, "type": "CALL" }, { "from": 6496552307, "to": 6496551998, "type": "CODE" }, { "from": 6496552324, "to": 6511512544, "type": "CALL" }, { "from": 6496552334, "to": 6496552256, "type": "CODE" }, { "from": 6496552436, "to": 6511512544, "type": "CALL" }, { "from": 6496552441, "to": 6496552135, "type": "CODE" }, { "from": 6496552458, "to": 6511512544, "type": "CALL" }, { "from": 6496552463, "to": 6496552390, "type": "CODE" }, { "from": 6496552504, "to": 6496485872, "type": "CALL" }, { "from": 6496552595, "to": 6512942288, "type": "CALL" }, { "from": 6496552676, "to": 6496489584, "type": "CALL" }, { "from": 6496552718, "to": 6511512544, "type": "CALL" }, { "from": 6496552741, "to": 6502116128, "type": "CALL" }, { "from": 6496552858, "to": 6496552469, "type": "CODE" }, { "from": 6496552898, "to": 6597125488, "type": "CALL" }, { "from": 6496553037, "to": 6467163600, "type": "CALL" }, { "from": 6496553051, "to": 6448249024, "type": "CALL" }, { "from": 6496553074, "to": 6529012272, "type": "CALL" }, { "from": 6496553103, "to": 6542067384, "type": "CALL" }, { "from": 6496553240, "to": 6511512544, "type": "CALL" }, { "from": 6496553245, "to": 6496553256, "type": "CODE" }, { "from": 6496553348, "to": 6496553363, "type": "CODE" }, { "from": 6496553352, "to": 6496553470, "type": "CODE" }, { "from": 6496553377, "to": 6496553387, "type": "CODE" }, { "from": 6496553405, "to": 6542434064, "type": "CALL" }, { "from": 6496553441, "to": 6496553358, "type": "CODE" }, { "from": 6496553590, "to": 6511483504, "type": "CALL" }, { "from": 6496553680, "to": 6542434064, "type": "CALL" }, { "from": 6496553751, "to": 6496553757, "type": "CODE" }, { "from": 6496553763, "to": 6542434064, "type": "CALL" }, { "from": 6496553816, "to": 6511512544, "type": "CALL" }, { "from": 6496553879, "to": 6496700672, "type": "CALL" }, { "from": 6496553886, "to": 6496552684, "type": "CODE" }, { "from": 6496553969, "to": 6496551667, "type": "CODE" }, { "from": 6496554001, "to": 6496553354, "type": "CODE" }, { "from": 6496554015, "to": 6496554089, "type": "CODE" }, { "from": 6496554128, "to": 6542434064, "type": "CALL" }, { "from": 6496554150, "to": 6496553779, "type": "CODE" }, { "from": 6496554166, "to": 6542089024, "type": "CALL" }, { "from": 6496554179, "to": 6546283440, "type": "CALL" }, { "from": 6496554193, "to": 6496552053, "type": "CODE" } ], "datarefs": [ { "from": 6496551517, "to": 6740709440, "type": "DATA" }, { "from": 6496551773, "to": 6719849952, "type": "DATA" }, { "from": 6496551799, "to": 6719850744, "type": "DATA" }, { "from": 6496551806, "to": 6719847824, "type": "DATA" }, { "from": 6496552159, "to": 6740709440, "type": "DATA" }, { "from": 6496552540, "to": 6719849992, "type": "DATA" }, { "from": 6496552575, "to": 6719850744, "type": "DATA" }, { "from": 6496552582, "to": 6719847824, "type": "DATA" }, { "from": 6496553511, "to": 6719850756, "type": "DATA" }, { "from": 6496554041, "to": 6741263568, "type": "DATA" } ] }, "strings": [ { "va": "0x19088c5e0", "offset": 277395936, "ascii": "read local Page for remote merge", "wide": null }, { "va": "0x19088c8f8", "offset": 277396728, "ascii": "StoreError", "wide": null }, { "va": "0x19088bd90", "offset": 277393808, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_sync_bridge.cc", "wide": null }, { "va": "0x19088c608", "offset": 277395976, "ascii": "verify local Page for remote merge", "wide": null }, { "va": "0x19088c904", "offset": 277396740, "ascii": "page:", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 30635 }, { "label": "a-reading-sync-init", "file": "rea-a-reading-sync-init.json", "file_sha256": "6077abb48725f4c305a16339bb2af1d973386a17adf1a81a8000c1e59500aa09", "status": "completed", "evidence_id": "ev_74ee9037bdef843155e15ae4272cd3ef29404316b338bb04d8255fbbf713580e", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183382320;pdgo @ 0x183382320;afij @ 0x183382320", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183382320", "size": 511, "nargs": 2, "signature": "fcn.183382320(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6496461643, "to": 6491075136, "type": "CALL" }, { "from": 6496461713, "to": 6496461719, "type": "CODE" }, { "from": 6496461723, "to": 6496461767, "type": "CODE" }, { "from": 6496461728, "to": 6496461652, "type": "CODE" }, { "from": 6496461747, "to": 6542434064, "type": "CALL" }, { "from": 6496461785, "to": 6496461734, "type": "CODE" }, { "from": 6496461792, "to": 6496461762, "type": "CODE" }, { "from": 6496461823, "to": 6496462047, "type": "CODE" }, { "from": 6496461875, "to": 6445650832, "type": "CALL" }, { "from": 6496461901, "to": 6524031184, "type": "CALL" }, { "from": 6496461920, "to": 6445656528, "type": "CALL" }, { "from": 6496461987, "to": 6511512544, "type": "CALL" }, { "from": 6496462034, "to": 6511975280, "type": "CALL" }, { "from": 6496462042, "to": 6518967168, "type": "CALL" }, { "from": 6496462050, "to": 6496462112, "type": "CALL" }, { "from": 6496462077, "to": 6496461678, "type": "CODE" }, { "from": 6496462103, "to": 6740346544, "type": "CALL" }, { "from": 6496462109, "to": 6496462023, "type": "CODE" } ], "datarefs": [ { "from": 6496461835, "to": 6742246848, "type": "DATA" }, { "from": 6496461848, "to": 6719847824, "type": "DATA" }, { "from": 6496461885, "to": 6719847936, "type": "DATA" }, { "from": 6496461906, "to": 6710367816, "type": "DATA" }, { "from": 6496461932, "to": 6708900496, "type": "DATA" }, { "from": 6496461944, "to": 6708923712, "type": "DATA" }, { "from": 6496461997, "to": 6708923824, "type": "DATA" }, { "from": 6496462011, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x19088bd90", "offset": 277393808, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_sync_bridge.cc", "wide": null }, { "va": "0x19088be00", "offset": 277393920, "ascii": "Reading Space local initialization blocked: encryption unavailable", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5948 }, { "label": "a-reading-sync-local-commit", "file": "rea-a-reading-sync-local-commit.json", "file_sha256": "bab274c0eb445ddb7d3d4b9e9c8e234522406c855dd32087bebb090126f5b21b", "status": "completed", "evidence_id": "ev_6895279c4edc0fdfcc570f1db7ebc6e6ce92d2862049113b093a40f0ca5cda13", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183392e00;pdgo @ 0x183392e00;afij @ 0x183392e00", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183392e00", "size": 1906, "nargs": 5, "signature": "fcn.183392e00(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h);", "callrefs": [ { "from": 6496530029, "to": 6496530144, "type": "CODE" }, { "from": 6496530057, "to": 6496489584, "type": "CALL" }, { "from": 6496530098, "to": 6740346544, "type": "CALL" }, { "from": 6496530121, "to": 6740346544, "type": "CALL" }, { "from": 6496530127, "to": 6496531283, "type": "CODE" }, { "from": 6496530160, "to": 6496530172, "type": "CODE" }, { "from": 6496530185, "to": 6542434064, "type": "CALL" }, { "from": 6496530200, "to": 6496530139, "type": "CODE" }, { "from": 6496530205, "to": 6496530304, "type": "CODE" }, { "from": 6496530210, "to": 6496530308, "type": "CODE" }, { "from": 6496530222, "to": 6542434064, "type": "CALL" }, { "from": 6496530246, "to": 6496532816, "type": "CALL" }, { "from": 6496530290, "to": 6496530511, "type": "CODE" }, { "from": 6496530425, "to": 6496530431, "type": "CODE" }, { "from": 6496530443, "to": 6496530453, "type": "CODE" }, { "from": 6496530453, "to": 6542434064, "type": "CALL" }, { "from": 6496530480, "to": 6496532816, "type": "CALL" }, { "from": 6496530574, "to": 6496530592, "type": "CODE" }, { "from": 6496530613, "to": 6496530620, "type": "CODE" }, { "from": 6496530633, "to": 6542434064, "type": "CALL" }, { "from": 6496530648, "to": 6496530583, "type": "CODE" }, { "from": 6496530731, "to": 6445650832, "type": "CALL" }, { "from": 6496530757, "to": 6524031184, "type": "CALL" }, { "from": 6496530767, "to": 6446762512, "type": "CALL" }, { "from": 6496530788, "to": 6524031184, "type": "CALL" }, { "from": 6496530800, "to": 6462379168, "type": "CALL" }, { "from": 6496530821, "to": 6524031184, "type": "CALL" }, { "from": 6496530833, "to": 6462379168, "type": "CALL" }, { "from": 6496530852, "to": 6445656528, "type": "CALL" }, { "from": 6496530920, "to": 6511512544, "type": "CALL" }, { "from": 6496530974, "to": 6511975280, "type": "CALL" }, { "from": 6496530982, "to": 6518967168, "type": "CALL" }, { "from": 6496531083, "to": 6511483504, "type": "CALL" }, { "from": 6496531101, "to": 6740346544, "type": "CALL" }, { "from": 6496531135, "to": 6511512544, "type": "CALL" }, { "from": 6496531177, "to": 6740346544, "type": "CALL" }, { "from": 6496531196, "to": 6740346544, "type": "CALL" }, { "from": 6496531259, "to": 6740346544, "type": "CALL" }, { "from": 6496531278, "to": 6496467488, "type": "CALL" }, { "from": 6496531332, "to": 6511512544, "type": "CALL" }, { "from": 6496531340, "to": 6502116128, "type": "CALL" }, { "from": 6496531375, "to": 6511512544, "type": "CALL" }, { "from": 6496531404, "to": 6511512544, "type": "CALL" }, { "from": 6496531433, "to": 6511512544, "type": "CALL" }, { "from": 6496531451, "to": 6536267936, "type": "CALL" }, { "from": 6496531490, "to": 6740346544, "type": "CALL" }, { "from": 6496531496, "to": 6496531296, "type": "CODE" }, { "from": 6496531514, "to": 6740346544, "type": "CALL" }, { "from": 6496531520, "to": 6496531309, "type": "CODE" }, { "from": 6496531529, "to": 6544256288, "type": "CALL" }, { "from": 6496531534, "to": 6496531444, "type": "CODE" }, { "from": 6496531601, "to": 6496531607, "type": "CODE" }, { "from": 6496531623, "to": 6496530219, "type": "CODE" }, { "from": 6496531635, "to": 6543545728, "type": "CALL" }, { "from": 6496531675, "to": 6642723488, "type": "CALL" }, { "from": 6496531680, "to": 6496530691, "type": "CODE" }, { "from": 6496531712, "to": 6740346544, "type": "CALL" }, { "from": 6496531718, "to": 6496531780, "type": "CODE" }, { "from": 6496531762, "to": 6442840976, "type": "CALL" }, { "from": 6496531775, "to": 6511512544, "type": "CALL" }, { "from": 6496531785, "to": 6496531275, "type": "CODE" }, { "from": 6496531815, "to": 6740346544, "type": "CALL" }, { "from": 6496531821, "to": 6496530963, "type": "CODE" } ], "datarefs": [ { "from": 6496530031, "to": 6719849624, "type": "DATA" }, { "from": 6496530660, "to": 6742246872, "type": "DATA" }, { "from": 6496530678, "to": 6742246848, "type": "DATA" }, { "from": 6496530704, "to": 6719847824, "type": "DATA" }, { "from": 6496530741, "to": 6719849648, "type": "DATA" }, { "from": 6496530772, "to": 6719849704, "type": "DATA" }, { "from": 6496530805, "to": 6719849208, "type": "DATA" }, { "from": 6496530838, "to": 6710367816, "type": "DATA" }, { "from": 6496530864, "to": 6708900496, "type": "DATA" }, { "from": 6496530876, "to": 6708923712, "type": "DATA" }, { "from": 6496530933, "to": 6708923824, "type": "DATA" }, { "from": 6496530947, "to": 6742217808, "type": "DATA" }, { "from": 6496531028, "to": 6719850756, "type": "DATA" }, { "from": 6496531628, "to": 6713890248, "type": "DATA" }, { "from": 6496531652, "to": 6719847824, "type": "DATA" }, { "from": 6496531685, "to": 6488537376, "type": "DATA" }, { "from": 6496531697, "to": 6488537376, "type": "DATA" }, { "from": 6496531724, "to": 6537935408, "type": "DATA" }, { "from": 6496531753, "to": 6741126408, "type": "DATA" } ] }, "strings": [ { "va": "0x19088c498", "offset": 277395608, "ascii": "commit local mutation", "wide": null }, { "va": "0x19088bd90", "offset": 277393808, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_sync_bridge.cc", "wide": null }, { "va": "0x19088c4b0", "offset": 277395632, "ascii": "[ReadingSpace] Local mutation persisted: sync_state=", "wide": null }, { "va": "0x19088c4e8", "offset": 277395688, "ascii": ", documents=", "wide": null }, { "va": "0x19088c2f8", "offset": 277395192, "ascii": ", pending_pages=", "wide": null }, { "va": "0x19088c904", "offset": 277396740, "ascii": "page:", "wide": null }, { "va": "0x1902dd5c8", "offset": 271436232, "ascii": "map::at: key not found", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 21292 }, { "label": "a-reading-sync-read-metadata", "file": "rea-a-reading-sync-read-metadata.json", "file_sha256": "616d53a8a595e5540acb44e400493a44a557e3901a0be195e54181486c8d6cb1", "status": "completed", "evidence_id": "ev_b8db6e098ab07fa7854a8714982ad98b47a8015ef5b3ebdcfdd56fac3ccdd339", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183384070;pdgo @ 0x183384070;afij @ 0x183384070", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183384070", "size": 1635, "nargs": 3, "signature": "fcn.183384070(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6496469194, "to": 6496468496, "type": "CALL" }, { "from": 6496469220, "to": 6462293216, "type": "CALL" }, { "from": 6496469240, "to": 6452404992, "type": "CALL" }, { "from": 6496469253, "to": 6511512544, "type": "CALL" }, { "from": 6496469336, "to": 6542067384, "type": "CALL" }, { "from": 6496469417, "to": 6496469463, "type": "CODE" }, { "from": 6496469442, "to": 6511512544, "type": "CALL" }, { "from": 6496469566, "to": 6512842352, "type": "CALL" }, { "from": 6496469682, "to": 6496469419, "type": "CODE" }, { "from": 6496469768, "to": 6542067384, "type": "CALL" }, { "from": 6496469855, "to": 6542436672, "type": "CALL" }, { "from": 6496469918, "to": 6511512544, "type": "CALL" }, { "from": 6496469929, "to": 6496469626, "type": "CODE" }, { "from": 6496469957, "to": 6542067384, "type": "CALL" }, { "from": 6496470169, "to": 6542067384, "type": "CALL" }, { "from": 6496470269, "to": 6633223120, "type": "CALL" }, { "from": 6496470358, "to": 6511512544, "type": "CALL" }, { "from": 6496470363, "to": 6496469199, "type": "CODE" }, { "from": 6496470390, "to": 6511512544, "type": "CALL" }, { "from": 6496470395, "to": 6496470328, "type": "CODE" }, { "from": 6496470486, "to": 6542067384, "type": "CALL" }, { "from": 6496470494, "to": 6496470499, "type": "CODE" }, { "from": 6496470512, "to": 6542067384, "type": "CALL" }, { "from": 6496470635, "to": 6542436672, "type": "CALL" }, { "from": 6496470692, "to": 6511512544, "type": "CALL" }, { "from": 6496470700, "to": 6496470069, "type": "CODE" }, { "from": 6496470716, "to": 6542089024, "type": "CALL" }, { "from": 6496470721, "to": 6545792064, "type": "CALL" }, { "from": 6496470726, "to": 6543271376, "type": "CALL" }, { "from": 6496470733, "to": 6496469773, "type": "CODE" } ], "datarefs": [ { "from": 6496469143, "to": 6740709440, "type": "DATA" }, { "from": 6496469171, "to": 6719848104, "type": "DATA" }, { "from": 6496469269, "to": 6740709440, "type": "DATA" }, { "from": 6496469375, "to": 6537600880, "type": "DATA" }, { "from": 6496469387, "to": 6719850704, "type": "DATA" }, { "from": 6496469480, "to": 6473672048, "type": "DATA" }, { "from": 6496469523, "to": 6719850732, "type": "DATA" }, { "from": 6496470007, "to": 6719848128, "type": "DATA" }, { "from": 6496470036, "to": 6719848139, "type": "DATA" }, { "from": 6496470180, "to": 6496570896, "type": "DATA" }, { "from": 6496470191, "to": 6496571088, "type": "DATA" }, { "from": 6496470202, "to": 6496570832, "type": "DATA" }, { "from": 6496470213, "to": 6496470752, "type": "DATA" }, { "from": 6496470559, "to": 6719848128, "type": "DATA" }, { "from": 6496470588, "to": 6719848139, "type": "DATA" } ] }, "strings": [ { "va": "0x19088bea8", "offset": 277394088, "ascii": "read sync metadata", "wide": null }, { "va": "0x19088c8d0", "offset": 277396688, "ascii": "control:page-catalog-v1:", "wide": null }, { "va": "0x19088c8ec", "offset": 277396716, "ascii": "%s%02x", "wide": null }, { "va": "0x19088bec0", "offset": 277394112, "ascii": "control:page-local-state-v1", "wide": null }, { "va": "0x19088becb", "offset": 277394123, "ascii": "e-local-state-v1", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 18402 }, { "label": "a-reading-ui-delegate", "file": "rea-a-reading-ui-delegate.json", "file_sha256": "60caf7303b6ffdaefb6a191ec740acaefdaa4c4c5a7c35352c93b0ecf2096386", "status": "completed", "evidence_id": "ev_d1b7b2d0eca2777cd56463e23751000963f2054f7c1d86768bf3b51f9f2831df", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183285440;pdgo @ 0x183285440;afij @ 0x183285440", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183285440", "size": 982, "nargs": 4, "signature": "fcn.183285440(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6495425708, "to": 6495425647, "type": "CODE" }, { "from": 6495425720, "to": 6511512544, "type": "CALL" }, { "from": 6495425725, "to": 6495425686, "type": "CODE" }, { "from": 6495425737, "to": 6511512544, "type": "CALL" }, { "from": 6495425742, "to": 6495425670, "type": "CODE" }, { "from": 6495425754, "to": 6511512544, "type": "CALL" }, { "from": 6495425759, "to": 6495425678, "type": "CODE" }, { "from": 6495425877, "to": 6740346544, "type": "CALL" }, { "from": 6495425957, "to": 6495423968, "type": "CALL" }, { "from": 6495425987, "to": 6532013296, "type": "CALL" }, { "from": 6495426001, "to": 6495426015, "type": "CODE" }, { "from": 6495426007, "to": 6495425952, "type": "CODE" }, { "from": 6495426013, "to": 6495425987, "type": "CODE" }, { "from": 6495426031, "to": 6740346544, "type": "CALL" }, { "from": 6495426135, "to": 6445650832, "type": "CALL" }, { "from": 6495426161, "to": 6524031184, "type": "CALL" }, { "from": 6495426180, "to": 6445656528, "type": "CALL" }, { "from": 6495426248, "to": 6511512544, "type": "CALL" }, { "from": 6495426299, "to": 6511975280, "type": "CALL" }, { "from": 6495426307, "to": 6518967168, "type": "CALL" }, { "from": 6495426312, "to": 6495425662, "type": "CODE" }, { "from": 6495426371, "to": 6542067384, "type": "CALL" }, { "from": 6495426497, "to": 6512942288, "type": "CALL" }, { "from": 6495426523, "to": 6740346544, "type": "CALL" }, { "from": 6495426529, "to": 6495425662, "type": "CODE" }, { "from": 6495426571, "to": 6740346544, "type": "CALL" }, { "from": 6495426577, "to": 6495426288, "type": "CODE" } ], "datarefs": [ { "from": 6495426072, "to": 6742246848, "type": "DATA" }, { "from": 6495426085, "to": 6741126112, "type": "DATA" }, { "from": 6495426094, "to": 6742246856, "type": "DATA" }, { "from": 6495426108, "to": 6712085280, "type": "DATA" }, { "from": 6495426145, "to": 6712085360, "type": "DATA" }, { "from": 6495426166, "to": 6710367816, "type": "DATA" }, { "from": 6495426192, "to": 6708900496, "type": "DATA" }, { "from": 6495426204, "to": 6708923712, "type": "DATA" }, { "from": 6495426258, "to": 6708923824, "type": "DATA" }, { "from": 6495426272, "to": 6742217808, "type": "DATA" }, { "from": 6495426317, "to": 6741832416, "type": "DATA" }, { "from": 6495426382, "to": 6495426592, "type": "DATA" }, { "from": 6495426393, "to": 6495426720, "type": "DATA" }, { "from": 6495426404, "to": 6511490512, "type": "DATA" }, { "from": 6495426415, "to": 6495425600, "type": "DATA" }, { "from": 6495426469, "to": 6712085432, "type": "DATA" }, { "from": 6495426476, "to": 6712085280, "type": "DATA" } ] }, "strings": [ { "va": "0x190124b20", "offset": 269631264, "ascii": "..\\..\\tab\\browser\\reading_space\\tab_reading_space_ui_delegate.cc", "wide": null }, { "va": "0x190124b70", "offset": 269631344, "ascii": "[ReadingSpace] Reader was not ready after library document navigation", "wide": null }, { "va": "0x190124bb8", "offset": 269631416, "ascii": "OpenLibraryReaderForTarget", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 12609 }, { "label": "a-selection-controller", "file": "rea-a-selection-controller.json", "file_sha256": "da4e77b1230d37c4df2b953fe0f1a930380c7e512960f24aa3dae830cd7c1e59", "status": "completed", "evidence_id": "ev_d8ed5f062bc4c55ba0da0822c86102849d0696b50c00082e2c170a181abca7c5", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183597050;pdgo @ 0x183597050;afij @ 0x183597050", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183597050", "size": 2112, "nargs": 3, "signature": "fcn.183597050(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6498644122, "to": 6498649552, "type": "CALL" }, { "from": 6498644155, "to": 6740346544, "type": "CALL" }, { "from": 6498644214, "to": 6512708384, "type": "CALL" }, { "from": 6498644246, "to": 6542067384, "type": "CALL" }, { "from": 6498644358, "to": 6445292608, "type": "CALL" }, { "from": 6498644386, "to": 6511512544, "type": "CALL" }, { "from": 6498644407, "to": 6522894224, "type": "CALL" }, { "from": 6498644419, "to": 6522894224, "type": "CALL" }, { "from": 6498644501, "to": 6461021888, "type": "CALL" }, { "from": 6498644576, "to": 6517391216, "type": "CALL" }, { "from": 6498644581, "to": 6498644511, "type": "CODE" }, { "from": 6498644587, "to": 6498644892, "type": "CODE" }, { "from": 6498644596, "to": 6498644724, "type": "CODE" }, { "from": 6498644609, "to": 6740346544, "type": "CALL" }, { "from": 6498644636, "to": 6449417312, "type": "CALL" }, { "from": 6498644739, "to": 6542434064, "type": "CALL" }, { "from": 6498644797, "to": 6449418864, "type": "CALL" }, { "from": 6498644903, "to": 6542434064, "type": "CALL" }, { "from": 6498644937, "to": 6511512544, "type": "CALL" }, { "from": 6498644972, "to": 6511512544, "type": "CALL" }, { "from": 6498645066, "to": 6522894224, "type": "CALL" }, { "from": 6498645128, "to": 6461021888, "type": "CALL" }, { "from": 6498645166, "to": 6740346544, "type": "CALL" }, { "from": 6498645214, "to": 6498645250, "type": "CODE" }, { "from": 6498645224, "to": 6517391216, "type": "CALL" }, { "from": 6498645229, "to": 6498645138, "type": "CODE" }, { "from": 6498645315, "to": 6542067384, "type": "CALL" }, { "from": 6498645413, "to": 6512942288, "type": "CALL" }, { "from": 6498645495, "to": 6517399712, "type": "CALL" }, { "from": 6498645500, "to": 6498644527, "type": "CODE" }, { "from": 6498645512, "to": 6498645552, "type": "CODE" }, { "from": 6498645588, "to": 6498645048, "type": "CODE" }, { "from": 6498645704, "to": 6522894224, "type": "CALL" }, { "from": 6498645716, "to": 6522894224, "type": "CALL" }, { "from": 6498645798, "to": 6461021888, "type": "CALL" }, { "from": 6498645822, "to": 6498649552, "type": "CALL" }, { "from": 6498645873, "to": 6498655504, "type": "CALL" }, { "from": 6498645878, "to": 6498644527, "type": "CODE" }, { "from": 6498645891, "to": 6517391216, "type": "CALL" }, { "from": 6498645896, "to": 6498645808, "type": "CODE" }, { "from": 6498645926, "to": 6740346544, "type": "CALL" }, { "from": 6498645932, "to": 6498645441, "type": "CODE" }, { "from": 6498645954, "to": 6511512544, "type": "CALL" }, { "from": 6498645959, "to": 6498645441, "type": "CODE" }, { "from": 6498645974, "to": 6511512544, "type": "CALL" }, { "from": 6498645979, "to": 6498645946, "type": "CODE" }, { "from": 6498645990, "to": 6542069736, "type": "CALL" }, { "from": 6498646008, "to": 6445291680, "type": "CALL" }, { "from": 6498646033, "to": 6465229872, "type": "CALL" }, { "from": 6498646082, "to": 6542069628, "type": "CALL" }, { "from": 6498646087, "to": 6498644201, "type": "CODE" }, { "from": 6498646100, "to": 6542089024, "type": "CALL" }, { "from": 6498646112, "to": 6543545728, "type": "CALL" }, { "from": 6498646124, "to": 6542069736, "type": "CALL" }, { "from": 6498646149, "to": 6542069628, "type": "CALL" }, { "from": 6498646154, "to": 6498644789, "type": "CODE" } ], "datarefs": [ { "from": 6498644064, "to": 6740709440, "type": "DATA" }, { "from": 6498644164, "to": 6742087912, "type": "DATA" }, { "from": 6498644170, "to": 6741832416, "type": "DATA" }, { "from": 6498644201, "to": 6742087856, "type": "DATA" }, { "from": 6498644287, "to": 6718109184, "type": "DATA" }, { "from": 6498644320, "to": 6718109200, "type": "DATA" }, { "from": 6498644535, "to": 6740709440, "type": "DATA" }, { "from": 6498644752, "to": 6742235372, "type": "DATA" }, { "from": 6498644758, "to": 6741832416, "type": "DATA" }, { "from": 6498645329, "to": 6495410400, "type": "DATA" }, { "from": 6498645340, "to": 6488509552, "type": "DATA" }, { "from": 6498645351, "to": 6495410336, "type": "DATA" }, { "from": 6498645362, "to": 6498648368, "type": "DATA" }, { "from": 6498645388, "to": 6723045656, "type": "DATA" }, { "from": 6498645395, "to": 6723045584, "type": "DATA" }, { "from": 6498645525, "to": 6723028792, "type": "DATA" }, { "from": 6498645536, "to": 6723028795, "type": "DATA" }, { "from": 6498645911, "to": 6488537248, "type": "DATA" }, { "from": 6498645983, "to": 6742087912, "type": "DATA" }, { "from": 6498645995, "to": 6742087912, "type": "DATA" }, { "from": 6498646013, "to": 6742087856, "type": "DATA" }, { "from": 6498646020, "to": 6718019168, "type": "DATA" }, { "from": 6498646050, "to": 6742087904, "type": "DATA" }, { "from": 6498646061, "to": 6706597696, "type": "DATA" }, { "from": 6498646068, "to": 6742087856, "type": "DATA" }, { "from": 6498646075, "to": 6742087912, "type": "DATA" }, { "from": 6498646105, "to": 6712088560, "type": "DATA" }, { "from": 6498646117, "to": 6742235372, "type": "DATA" }, { "from": 6498646129, "to": 6742235372, "type": "DATA" }, { "from": 6498646142, "to": 6742235372, "type": "DATA" } ] }, "strings": [ { "va": "0x1906e3600", "offset": 275655168, "ascii": "iobiajbbjgoiehijaledajjiainhmafb", "wide": null }, { "va": "0x1906e3610", "offset": 275655184, "ascii": "aledajjiainhmafb", "wide": null }, { "va": "0x190b98918", "offset": 280591640, "ascii": "ScheduleKeyboardSelection", "wide": null }, { "va": "0x190b988d0", "offset": 280591568, "ascii": "..\\..\\tab\\browser\\text_selection\\tab_text_selection_controller.cc", "wide": null }, { "va": "0x190b94738", "offset": 280574776, "ascii": "/newtab", "wide": null }, { "va": "0x190b9473b", "offset": 280574779, "ascii": "wtab", "wide": null }, { "va": "0x1906cd660", "offset": 275565152, "ascii": "ExtensionRegistry", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 29210 }, { "label": "a-selection-mojo-binding", "file": "rea-a-selection-mojo-binding.json", "file_sha256": "e79ab5e96ee47f6ba4f42c8c2e25d930b19e161ca2ac9b2d50d20223eee5c69f", "status": "completed", "evidence_id": "ev_1eca38de0ac7d025cba590d11f5db8d594d3adcd1d42ec027be3121e69d6d8a2", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183599ff0;pdgo @ 0x183599ff0;afij @ 0x183599ff0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183599ff0", "size": 320, "nargs": 3, "signature": "fcn.183599ff0(int64_t arg1, int64_t arg2, int64_t arg_38h);", "callrefs": [ { "from": 6498656275, "to": 6542067384, "type": "CALL" }, { "from": 6498656369, "to": 6542067384, "type": "CALL" }, { "from": 6498656476, "to": 6461186704, "type": "CALL" }, { "from": 6498656501, "to": 6511512544, "type": "CALL" }, { "from": 6498656509, "to": 6523211216, "type": "CALL" }, { "from": 6498656552, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6498656255, "to": 6740709440, "type": "DATA" }, { "from": 6498656410, "to": 6720266016, "type": "DATA" }, { "from": 6498656435, "to": 6720266031, "type": "DATA" }, { "from": 6498656446, "to": 6720266016, "type": "DATA" }, { "from": 6498656522, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x1908f1f20", "offset": 277812000, "ascii": "tab.mojom.TabTextSelectionAgent", "wide": null }, { "va": "0x1908f1f2f", "offset": 277812015, "ascii": "xtSelectionAgent", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 4323 }, { "label": "a-selection-request", "file": "rea-a-selection-request.json", "file_sha256": "b7121a9a52c877a18d86c8913167b36b90843ffb0adfac72ac7cc87aa3983ee7", "status": "completed", "evidence_id": "ev_922b5b054d0630e1071f14b92e881255ebc4daeae4c44a41edfb25f23f6e0e8d", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183598700;pdgo @ 0x183598700;pdf @ 0x183598700;afij @ 0x183598700", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183598700", "size": 450, "nargs": 3, "signature": "fcn.183598700(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6498649941, "to": 6461021888, "type": "CALL" }, { "from": 6498649968, "to": 6740346544, "type": "CALL" }, { "from": 6498650026, "to": 6498656576, "type": "CALL" }, { "from": 6498650037, "to": 6498656240, "type": "CALL" }, { "from": 6498650087, "to": 6542067384, "type": "CALL" }, { "from": 6498650179, "to": 6498650320, "type": "CALL" }, { "from": 6498650209, "to": 6497030272, "type": "CALL" }, { "from": 6498650262, "to": 6517391216, "type": "CALL" }, { "from": 6498650267, "to": 6498649955, "type": "CODE" }, { "from": 6498650281, "to": 6740346544, "type": "CALL" }, { "from": 6498650287, "to": 6498650222, "type": "CODE" }, { "from": 6498650297, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6498649876, "to": 6740709440, "type": "DATA" }, { "from": 6498650098, "to": 6498655824, "type": "DATA" }, { "from": 6498650109, "to": 6488537248, "type": "DATA" }, { "from": 6498650120, "to": 6495410336, "type": "DATA" }, { "from": 6498650131, "to": 6498650672, "type": "DATA" }, { "from": 6498650230, "to": 6740709440, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 10559 }, { "label": "a-selection-result-callback", "file": "rea-a-selection-result-callback.json", "file_sha256": "79b9876eaf275603884323b428f003f9669706aa69f899c0c9b100edb2fc8ef4", "status": "completed", "evidence_id": "ev_f435ede65b39c6a1e99a9e77d57d0a6aba605f82318d778da113021c0321ee09", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183598a30;pdgo @ 0x183598a30;afij @ 0x183598a30", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183598a30", "size": 264, "nargs": 2, "signature": "fcn.183598a30(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6498650716, "to": 6522894224, "type": "CALL" }, { "from": 6498650778, "to": 6461021888, "type": "CALL" }, { "from": 6498650812, "to": 6498649552, "type": "CALL" }, { "from": 6498650837, "to": 6498650895, "type": "CODE" }, { "from": 6498650847, "to": 6517391216, "type": "CALL" }, { "from": 6498650852, "to": 6498650788, "type": "CODE" }, { "from": 6498650890, "to": 6498655504, "type": "CALL" }, { "from": 6498650930, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6498650678, "to": 6740709440, "type": "DATA" }, { "from": 6498650903, "to": 6740709440, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 2879 }, { "label": "a-selection-update", "file": "rea-a-selection-update.json", "file_sha256": "5936a049cad0fe445c86cf0ba12b593c48d269a0086b3c7f916b28c44c0f424b", "status": "completed", "evidence_id": "ev_cdb090f95d3173735fe6f8cbdf9d3cddccc8ed210531fc287ad5eda5516017cc", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183598130;pdgo @ 0x183598130;afij @ 0x183598130", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183598130", "size": 1167, "nargs": 1, "signature": "fcn.183598130(int64_t arg1);", "callrefs": [ { "from": 6498648409, "to": 6522894224, "type": "CALL" }, { "from": 6498648434, "to": 6465190320, "type": "CALL" }, { "from": 6498648481, "to": 6740346544, "type": "CALL" }, { "from": 6498648509, "to": 6498649552, "type": "CALL" }, { "from": 6498648591, "to": 6542067384, "type": "CALL" }, { "from": 6498648694, "to": 6512942288, "type": "CALL" }, { "from": 6498648773, "to": 6517399712, "type": "CALL" }, { "from": 6498648794, "to": 6740346544, "type": "CALL" }, { "from": 6498648840, "to": 6498648859, "type": "CODE" }, { "from": 6498648904, "to": 6542067384, "type": "CALL" }, { "from": 6498648992, "to": 6498649856, "type": "CALL" }, { "from": 6498649058, "to": 6740346544, "type": "CALL" }, { "from": 6498649117, "to": 6512708384, "type": "CALL" }, { "from": 6498649149, "to": 6542067384, "type": "CALL" }, { "from": 6498649259, "to": 6445292608, "type": "CALL" }, { "from": 6498649286, "to": 6511512544, "type": "CALL" }, { "from": 6498649320, "to": 6498648997, "type": "CODE" }, { "from": 6498649354, "to": 6740346544, "type": "CALL" }, { "from": 6498649360, "to": 6498648722, "type": "CODE" }, { "from": 6498649382, "to": 6511512544, "type": "CALL" }, { "from": 6498649387, "to": 6498648722, "type": "CODE" }, { "from": 6498649402, "to": 6511512544, "type": "CALL" }, { "from": 6498649407, "to": 6498649374, "type": "CODE" }, { "from": 6498649418, "to": 6542069736, "type": "CALL" }, { "from": 6498649436, "to": 6445291680, "type": "CALL" }, { "from": 6498649461, "to": 6465229872, "type": "CALL" }, { "from": 6498649508, "to": 6542069628, "type": "CALL" }, { "from": 6498649513, "to": 6498649104, "type": "CODE" }, { "from": 6498649526, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6498648387, "to": 6740709440, "type": "DATA" }, { "from": 6498648605, "to": 6498655824, "type": "DATA" }, { "from": 6498648616, "to": 6488537248, "type": "DATA" }, { "from": 6498648627, "to": 6495410336, "type": "DATA" }, { "from": 6498648638, "to": 6498650672, "type": "DATA" }, { "from": 6498648669, "to": 6723045712, "type": "DATA" }, { "from": 6498648676, "to": 6723045584, "type": "DATA" }, { "from": 6498648915, "to": 6498655904, "type": "DATA" }, { "from": 6498648926, "to": 6488537248, "type": "DATA" }, { "from": 6498648937, "to": 6495410336, "type": "DATA" }, { "from": 6498648948, "to": 6498651648, "type": "DATA" }, { "from": 6498649005, "to": 6740709440, "type": "DATA" }, { "from": 6498649067, "to": 6742087912, "type": "DATA" }, { "from": 6498649073, "to": 6741832416, "type": "DATA" }, { "from": 6498649104, "to": 6742087856, "type": "DATA" }, { "from": 6498649190, "to": 6718109184, "type": "DATA" }, { "from": 6498649223, "to": 6718109200, "type": "DATA" }, { "from": 6498649234, "to": 6718109184, "type": "DATA" }, { "from": 6498649339, "to": 6488537248, "type": "DATA" }, { "from": 6498649411, "to": 6742087912, "type": "DATA" }, { "from": 6498649423, "to": 6742087912, "type": "DATA" }, { "from": 6498649441, "to": 6742087856, "type": "DATA" }, { "from": 6498649448, "to": 6718019168, "type": "DATA" }, { "from": 6498649469, "to": 6742087888, "type": "DATA" }, { "from": 6498649476, "to": 6742087904, "type": "DATA" }, { "from": 6498649487, "to": 6706597696, "type": "DATA" }, { "from": 6498649494, "to": 6742087856, "type": "DATA" }, { "from": 6498649501, "to": 6742087912, "type": "DATA" } ] }, "strings": [ { "va": "0x190b98950", "offset": 280591696, "ascii": "RequestPendingSelection", "wide": null }, { "va": "0x190b988d0", "offset": 280591568, "ascii": "..\\..\\tab\\browser\\text_selection\\tab_text_selection_controller.cc", "wide": null }, { "va": "0x1906e3600", "offset": 275655168, "ascii": "iobiajbbjgoiehijaledajjiainhmafb", "wide": null }, { "va": "0x1906e3610", "offset": 275655184, "ascii": "aledajjiainhmafb", "wide": null }, { "va": "0x1906cd660", "offset": 275565152, "ascii": "ExtensionRegistry", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 13509 }, { "label": "a-voice-asr-parser", "file": "rea-a-voice-asr-parser.json", "file_sha256": "35a9e4e8cb22cd383009c422031a81be8217a08a77101b21378e9141ce98ec2e", "status": "completed", "evidence_id": "ev_fb7380290e592c6d5fbc38340420f3691ce34aa18b06348b808e88a9dbec3f7c", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18367b8c0;pdgo @ 0x18367b8c0;afij @ 0x18367b8c0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18367b8c0", "size": 2870, "nargs": 1, "signature": "fcn.18367b8c0(int64_t arg1);", "callrefs": [ { "from": 6499580257, "to": 6499580696, "type": "CODE" }, { "from": 6499580287, "to": 6524603600, "type": "CALL" }, { "from": 6499580333, "to": 6511512544, "type": "CALL" }, { "from": 6499580338, "to": 6499580628, "type": "CODE" }, { "from": 6499580419, "to": 6499580655, "type": "CODE" }, { "from": 6499580431, "to": 6499580716, "type": "CODE" }, { "from": 6499580441, "to": 6542067384, "type": "CALL" }, { "from": 6499580562, "to": 6499571488, "type": "CALL" }, { "from": 6499580596, "to": 6511512544, "type": "CALL" }, { "from": 6499580675, "to": 6511512544, "type": "CALL" }, { "from": 6499580826, "to": 6511512544, "type": "CALL" }, { "from": 6499580976, "to": 6542436672, "type": "CALL" }, { "from": 6499581010, "to": 6519187136, "type": "CALL" }, { "from": 6499581091, "to": 6511733920, "type": "CALL" }, { "from": 6499581199, "to": 6446103440, "type": "CALL" }, { "from": 6499581256, "to": 6447834288, "type": "CALL" }, { "from": 6499581369, "to": 6499581599, "type": "CODE" }, { "from": 6499581386, "to": 6542067384, "type": "CALL" }, { "from": 6499581422, "to": 6499580938, "type": "CODE" }, { "from": 6499581448, "to": 6499581057, "type": "CODE" }, { "from": 6499581458, "to": 6542067384, "type": "CALL" }, { "from": 6499581564, "to": 6499580547, "type": "CODE" }, { "from": 6499581664, "to": 6447834288, "type": "CALL" }, { "from": 6499581805, "to": 6549322352, "type": "CALL" }, { "from": 6499581836, "to": 6499582784, "type": "CODE" }, { "from": 6499581898, "to": 6447834288, "type": "CALL" }, { "from": 6499581937, "to": 6499580551, "type": "CODE" }, { "from": 6499581957, "to": 6511513840, "type": "CALL" }, { "from": 6499581962, "to": 6499580551, "type": "CODE" }, { "from": 6499581972, "to": 6542067384, "type": "CALL" }, { "from": 6499582089, "to": 6499580551, "type": "CODE" }, { "from": 6499582097, "to": 6740346544, "type": "CALL" }, { "from": 6499582103, "to": 6499582278, "type": "CODE" }, { "from": 6499582127, "to": 6522361440, "type": "CALL" }, { "from": 6499582237, "to": 6740346544, "type": "CALL" }, { "from": 6499582265, "to": 6740346544, "type": "CALL" }, { "from": 6499582436, "to": 6499582459, "type": "CODE" }, { "from": 6499582491, "to": 6511512544, "type": "CALL" }, { "from": 6499582551, "to": 6499582558, "type": "CODE" }, { "from": 6499582666, "to": 6549322352, "type": "CALL" }, { "from": 6499582713, "to": 6577823312, "type": "CALL" }, { "from": 6499582757, "to": 6560937152, "type": "CALL" }, { "from": 6499582762, "to": 6499580567, "type": "CODE" }, { "from": 6499582776, "to": 6740346544, "type": "CALL" }, { "from": 6499582782, "to": 6499582684, "type": "CODE" }, { "from": 6499582788, "to": 6740346544, "type": "CALL" }, { "from": 6499582794, "to": 6499580601, "type": "CODE" }, { "from": 6499582811, "to": 6511512544, "type": "CALL" }, { "from": 6499582819, "to": 6499582388, "type": "CODE" }, { "from": 6499582835, "to": 6542089024, "type": "CALL" }, { "from": 6499582847, "to": 6542069736, "type": "CALL" }, { "from": 6499582886, "to": 6542069628, "type": "CALL" }, { "from": 6499582891, "to": 6499582217, "type": "CODE" }, { "from": 6499582896, "to": 6542702416, "type": "CALL" }, { "from": 6499582912, "to": 6499582931, "type": "CODE" }, { "from": 6499582939, "to": 6499581015, "type": "CODE" }, { "from": 6499582956, "to": 6625251072, "type": "CALL" }, { "from": 6499582961, "to": 6499582278, "type": "CODE" } ], "datarefs": [ { "from": 6499580123, "to": 6740709440, "type": "DATA" }, { "from": 6499580201, "to": 6741832416, "type": "DATA" }, { "from": 6499580354, "to": 6740709440, "type": "DATA" }, { "from": 6499580492, "to": 6723474960, "type": "DATA" }, { "from": 6499580519, "to": 6723474976, "type": "DATA" }, { "from": 6499580530, "to": 6723474960, "type": "DATA" }, { "from": 6499581218, "to": 6712085576, "type": "DATA" }, { "from": 6499581323, "to": 6712192108, "type": "DATA" }, { "from": 6499581332, "to": 6712192112, "type": "DATA" }, { "from": 6499581351, "to": 6713609268, "type": "DATA" }, { "from": 6499581360, "to": 6713609272, "type": "DATA" }, { "from": 6499581509, "to": 6723475000, "type": "DATA" }, { "from": 6499581536, "to": 6723475016, "type": "DATA" }, { "from": 6499581547, "to": 6723475000, "type": "DATA" }, { "from": 6499581629, "to": 6714960280, "type": "DATA" }, { "from": 6499581715, "to": 6713609268, "type": "DATA" }, { "from": 6499581724, "to": 6713609272, "type": "DATA" }, { "from": 6499581855, "to": 6712262000, "type": "DATA" }, { "from": 6499582023, "to": 6723475040, "type": "DATA" }, { "from": 6499582050, "to": 6723475056, "type": "DATA" }, { "from": 6499582061, "to": 6723475040, "type": "DATA" }, { "from": 6499582148, "to": 6742251808, "type": "DATA" }, { "from": 6499582161, "to": 6742251832, "type": "DATA" }, { "from": 6499582168, "to": 6537719152, "type": "DATA" }, { "from": 6499582180, "to": 6741841128, "type": "DATA" }, { "from": 6499582186, "to": 6741832416, "type": "DATA" }, { "from": 6499582840, "to": 6741841128, "type": "DATA" }, { "from": 6499582852, "to": 6741841128, "type": "DATA" }, { "from": 6499582865, "to": 6706346848, "type": "DATA" }, { "from": 6499582872, "to": 6741841120, "type": "DATA" }, { "from": 6499582879, "to": 6741841128, "type": "DATA" } ] }, "strings": [ { "va": "0x190c01610", "offset": 281020944, "ascii": "Realtime ASR returned invalid JSON.", "wide": null }, { "va": "0x190c01620", "offset": 281020960, "ascii": "urned invalid JSON.", "wide": null }, { "va": "0x190124c48", "offset": 269631560, "ascii": "type", "wide": null }, { "va": "0x19013ec6c", "offset": 269738092, "ascii": "error", "wide": null }, { "va": "0x190298c34", "offset": 271155252, "ascii": "final", "wide": null }, { "va": "0x190c01638", "offset": 281020984, "ascii": "Realtime ASR response missing type.", "wide": null }, { "va": "0x190c01648", "offset": 281021000, "ascii": "ponse missing type.", "wide": null }, { "va": "0x1903e2998", "offset": 272506264, "ascii": "text", "wide": null }, { "va": "0x19014fd70", "offset": 269807984, "ascii": "message", "wide": null }, { "va": "0x190c01660", "offset": 281021024, "ascii": "Realtime ASR provider returned an error.", "wide": null }, { "va": "0x190c01670", "offset": 281021040, "ascii": "vider returned an error.", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 30825 }, { "label": "a-voice-callers-check", "file": "rea-a-voice-callers-check.json", "file_sha256": "66e5160f11e1cf5f12ebdf04460c92733b55ef940b1a1b27c255208764ac4c03", "status": "completed", "evidence_id": "ev_fede8f1cc07f0a9c098321072fa3d31626fb456df1b4a156ba3209a5927ffdf9", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;pd 12 @ 0x18366ff80;pd 12 @ 0x183673d38;pd 12 @ 0x1836761e5;pd 12 @ 0x1836755ba;pd 12 @ 0x183675763;pd 12 @ 0x183598840;pd 12 @ 0x1836734a1", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": null, "strings": [], "imports": [], "status_display": "汇编核对（排除误对齐片段）", "record_kind": "assembly", "pseudocode_chars": 4582 }, { "label": "a-voice-capture-device", "file": "rea-a-voice-capture-device.json", "file_sha256": "6bc7d74109d769e1d7151f246f9e62afac205e083b0fc6d8298d9bd834652449", "status": "completed", "evidence_id": "ev_5bf0db5c2aa0e061dafdd813022428b4cda739a1c8dd90378f8a5333abb4ec68", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18565fc70;pdgo @ 0x18565fc70;afij @ 0x18565fc70", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18565fc70", "size": 415, "nargs": 1, "signature": "fcn.18565fc70(int64_t arg1);", "callrefs": [ { "from": 6533020816, "to": 6740346544, "type": "CALL" }, { "from": 6533020875, "to": 6740346544, "type": "CALL" }, { "from": 6533020912, "to": 6533021360, "type": "CALL" }, { "from": 6533020994, "to": 6542067384, "type": "CALL" }, { "from": 6533021040, "to": 6511423872, "type": "CALL" }, { "from": 6533021067, "to": 6453059232, "type": "CALL" }, { "from": 6533021112, "to": 6473932992, "type": "CALL" }, { "from": 6533021121, "to": 6533020898, "type": "CODE" }, { "from": 6533021134, "to": 6542089024, "type": "CALL" }, { "from": 6533021159, "to": 6511512544, "type": "CALL" }, { "from": 6533021164, "to": 6533020930, "type": "CODE" }, { "from": 6533021189, "to": 6511512544, "type": "CALL" }, { "from": 6533021194, "to": 6533020941, "type": "CODE" } ], "datarefs": [ { "from": 6533020794, "to": 6740709440, "type": "DATA" }, { "from": 6533020860, "to": 6533021200, "type": "DATA" }, { "from": 6533020949, "to": 6740709440, "type": "DATA" }, { "from": 6533021005, "to": 6706548024, "type": "DATA" }, { "from": 6533021028, "to": 6741126408, "type": "DATA" }, { "from": 6533021053, "to": 6742242256, "type": "DATA" }, { "from": 6533021060, "to": 6717632464, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 4421 }, { "label": "a-voice-controller-finish", "file": "rea-a-voice-controller-finish.json", "file_sha256": "031d2acd83f7622c8d69f3fd19a58e4707d43c3b12a19e3d505b2c913d0896cf", "status": "completed", "evidence_id": "ev_77dde321d16dbbff6bf5f3abe5107d8c83d8ed0e27cdfd04426f5608ccf877f2", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183673ae0;pdgo @ 0x183673ae0;afij @ 0x183673ae0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183673ae0", "size": 1072, "nargs": 2, "signature": "fcn.183673ae0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499547958, "to": 6445650832, "type": "CALL" }, { "from": 6499547981, "to": 6524031184, "type": "CALL" }, { "from": 6499548003, "to": 6462379168, "type": "CALL" }, { "from": 6499548024, "to": 6524031184, "type": "CALL" }, { "from": 6499548038, "to": 6451143232, "type": "CALL" }, { "from": 6499548059, "to": 6524031184, "type": "CALL" }, { "from": 6499548073, "to": 6451143232, "type": "CALL" }, { "from": 6499548094, "to": 6524031184, "type": "CALL" }, { "from": 6499548113, "to": 6451143232, "type": "CALL" }, { "from": 6499548123, "to": 6447366432, "type": "CALL" }, { "from": 6499548161, "to": 6741827296, "type": "CALL" }, { "from": 6499548197, "to": 6499548863, "type": "CODE" }, { "from": 6499548217, "to": 6499548863, "type": "CODE" }, { "from": 6499548259, "to": 6549322352, "type": "CALL" }, { "from": 6499548264, "to": 6499548863, "type": "CODE" }, { "from": 6499548286, "to": 6499548575, "type": "CODE" }, { "from": 6499548306, "to": 6499548555, "type": "CODE" }, { "from": 6499548326, "to": 6499548525, "type": "CODE" }, { "from": 6499548377, "to": 6445650832, "type": "CALL" }, { "from": 6499548400, "to": 6524031184, "type": "CALL" }, { "from": 6499548422, "to": 6462379168, "type": "CALL" }, { "from": 6499548443, "to": 6524031184, "type": "CALL" }, { "from": 6499548465, "to": 6462379168, "type": "CALL" }, { "from": 6499548475, "to": 6447366432, "type": "CALL" }, { "from": 6499548495, "to": 6499554192, "type": "CALL" }, { "from": 6499548532, "to": 6522894224, "type": "CALL" }, { "from": 6499548629, "to": 6741827296, "type": "CALL" }, { "from": 6499548735, "to": 6542067384, "type": "CALL" }, { "from": 6499548829, "to": 6512942288, "type": "CALL" }, { "from": 6499548857, "to": 6740346544, "type": "CALL" }, { "from": 6499548919, "to": 6499548601, "type": "CODE" }, { "from": 6499548935, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499547890, "to": 6740709440, "type": "DATA" }, { "from": 6499547921, "to": 6742246848, "type": "DATA" }, { "from": 6499547934, "to": 6723469232, "type": "DATA" }, { "from": 6499547968, "to": 6723471928, "type": "DATA" }, { "from": 6499548008, "to": 6723471552, "type": "DATA" }, { "from": 6499548043, "to": 6723469648, "type": "DATA" }, { "from": 6499548078, "to": 6723471984, "type": "DATA" }, { "from": 6499548344, "to": 6742246848, "type": "DATA" }, { "from": 6499548353, "to": 6723469232, "type": "DATA" }, { "from": 6499548387, "to": 6723471264, "type": "DATA" }, { "from": 6499548427, "to": 6723471312, "type": "DATA" }, { "from": 6499548643, "to": 6741832416, "type": "DATA" }, { "from": 6499548749, "to": 6496572928, "type": "DATA" }, { "from": 6499548760, "to": 6488510160, "type": "DATA" }, { "from": 6499548771, "to": 6496570832, "type": "DATA" }, { "from": 6499548782, "to": 6499545200, "type": "DATA" }, { "from": 6499548801, "to": 6719898672, "type": "DATA" }, { "from": 6499548808, "to": 6723469232, "type": "DATA" }, { "from": 6499548874, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190bfffb0", "offset": 281015216, "ascii": "..\\..\\tab\\browser\\voice_input\\voice_input_controller.cc", "wide": null }, { "va": "0x190c00a38", "offset": 281017912, "ascii": "Tabbit voice input InjectAndDismiss text_length=", "wide": null }, { "va": "0x190c008c0", "offset": 281017536, "ascii": " from_js=", "wide": null }, { "va": "0x190c00150", "offset": 281015632, "ascii": " from_hotkey=", "wide": null }, { "va": "0x190c00a70", "offset": 281017968, "ascii": " has_hotkey_injector=", "wide": null }, { "va": "0x190c007a0", "offset": 281017248, "ascii": "Tabbit voice input hotkey commit text_length=", "wide": null }, { "va": "0x190c007d0", "offset": 281017296, "ascii": " streamed_length=", "wide": null }, { "va": "0x190898430", "offset": 277444656, "ascii": "Finalize", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 9221 }, { "label": "a-voice-controller-result", "file": "rea-a-voice-controller-result.json", "file_sha256": "94a32b2994b2f25fe191492449fe922e4dd095b096ef6c00ad715e72d051539c", "status": "completed", "evidence_id": "ev_8370cea805119f685ea13e5a9f097c06997ed3a4256b8ea16e2fcd9e7d69f76e", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183673330;pdgo @ 0x183673330;afij @ 0x183673330", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183673330", "size": 1964, "nargs": 3, "signature": "fcn.183673330(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6499546006, "to": 6499546033, "type": "CODE" }, { "from": 6499546023, "to": 6511513840, "type": "CALL" }, { "from": 6499546028, "to": 6499546062, "type": "CODE" }, { "from": 6499546112, "to": 6445650832, "type": "CALL" }, { "from": 6499546135, "to": 6524031184, "type": "CALL" }, { "from": 6499546145, "to": 6451143232, "type": "CALL" }, { "from": 6499546166, "to": 6524031184, "type": "CALL" }, { "from": 6499546242, "to": 6499546252, "type": "CODE" }, { "from": 6499546255, "to": 6542434064, "type": "CALL" }, { "from": 6499546268, "to": 6451143232, "type": "CALL" }, { "from": 6499546278, "to": 6447366432, "type": "CALL" }, { "from": 6499546294, "to": 6499547872, "type": "CALL" }, { "from": 6499546335, "to": 6511512544, "type": "CALL" }, { "from": 6499546343, "to": 6499502752, "type": "CALL" }, { "from": 6499546435, "to": 6445650832, "type": "CALL" }, { "from": 6499546458, "to": 6524031184, "type": "CALL" }, { "from": 6499546477, "to": 6499546487, "type": "CODE" }, { "from": 6499546490, "to": 6524031184, "type": "CALL" }, { "from": 6499546498, "to": 6447366432, "type": "CALL" }, { "from": 6499546523, "to": 6499539424, "type": "CALL" }, { "from": 6499546534, "to": 6499588192, "type": "CALL" }, { "from": 6499546566, "to": 6511512544, "type": "CALL" }, { "from": 6499546616, "to": 6542067384, "type": "CALL" }, { "from": 6499546755, "to": 6512942288, "type": "CALL" }, { "from": 6499546831, "to": 6517399712, "type": "CALL" }, { "from": 6499546836, "to": 6499546299, "type": "CODE" }, { "from": 6499546860, "to": 6511513840, "type": "CALL" }, { "from": 6499546865, "to": 6499546723, "type": "CODE" }, { "from": 6499546936, "to": 6499546946, "type": "CODE" }, { "from": 6499546949, "to": 6542434064, "type": "CALL" }, { "from": 6499547033, "to": 6499547041, "type": "CODE" }, { "from": 6499547067, "to": 6512724096, "type": "CALL" }, { "from": 6499547175, "to": 6511733920, "type": "CALL" }, { "from": 6499547238, "to": 6511512544, "type": "CALL" }, { "from": 6499547254, "to": 6499588192, "type": "CALL" }, { "from": 6499547286, "to": 6511512544, "type": "CALL" }, { "from": 6499547336, "to": 6542067384, "type": "CALL" }, { "from": 6499547475, "to": 6512942288, "type": "CALL" }, { "from": 6499547544, "to": 6499546828, "type": "CODE" }, { "from": 6499547568, "to": 6511513840, "type": "CALL" }, { "from": 6499547573, "to": 6499547443, "type": "CODE" }, { "from": 6499547607, "to": 6740346544, "type": "CALL" }, { "from": 6499547613, "to": 6499547499, "type": "CODE" }, { "from": 6499547663, "to": 6530673136, "type": "CALL" }, { "from": 6499547681, "to": 6626266336, "type": "CALL" }, { "from": 6499547710, "to": 6499547238, "type": "CODE" }, { "from": 6499547744, "to": 6740346544, "type": "CALL" }, { "from": 6499547750, "to": 6499546783, "type": "CODE" }, { "from": 6499547772, "to": 6511512544, "type": "CALL" }, { "from": 6499547777, "to": 6499546783, "type": "CODE" }, { "from": 6499547799, "to": 6511512544, "type": "CALL" }, { "from": 6499547804, "to": 6499547499, "type": "CODE" }, { "from": 6499547819, "to": 6511512544, "type": "CALL" }, { "from": 6499547824, "to": 6499547791, "type": "CODE" }, { "from": 6499547836, "to": 6511512544, "type": "CALL" }, { "from": 6499547841, "to": 6499547764, "type": "CODE" }, { "from": 6499547854, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499545921, "to": 6740709440, "type": "DATA" }, { "from": 6499546075, "to": 6742246848, "type": "DATA" }, { "from": 6499546088, "to": 6723469232, "type": "DATA" }, { "from": 6499546122, "to": 6723472008, "type": "DATA" }, { "from": 6499546150, "to": 6723472056, "type": "DATA" }, { "from": 6499546359, "to": 6740709440, "type": "DATA" }, { "from": 6499546399, "to": 6742246848, "type": "DATA" }, { "from": 6499546408, "to": 6723469232, "type": "DATA" }, { "from": 6499546445, "to": 6723472072, "type": "DATA" }, { "from": 6499546630, "to": 6489322160, "type": "DATA" }, { "from": 6499546641, "to": 6496449792, "type": "DATA" }, { "from": 6499546652, "to": 6496570832, "type": "DATA" }, { "from": 6499546663, "to": 6499547872, "type": "DATA" }, { "from": 6499546730, "to": 6723472112, "type": "DATA" }, { "from": 6499546737, "to": 6723469232, "type": "DATA" }, { "from": 6499546969, "to": 6717892640, "type": "DATA" }, { "from": 6499546990, "to": 6742256144, "type": "DATA" }, { "from": 6499547089, "to": 6723472568, "type": "DATA" }, { "from": 6499547350, "to": 6489322160, "type": "DATA" }, { "from": 6499547361, "to": 6496449792, "type": "DATA" }, { "from": 6499547372, "to": 6496570832, "type": "DATA" }, { "from": 6499547383, "to": 6499547872, "type": "DATA" }, { "from": 6499547450, "to": 6723472112, "type": "DATA" }, { "from": 6499547457, "to": 6723469232, "type": "DATA" }, { "from": 6499547588, "to": 6488537248, "type": "DATA" }, { "from": 6499547729, "to": 6488537248, "type": "DATA" } ] }, "strings": [ { "va": "0x190bfffb0", "offset": 281015216, "ascii": "..\\..\\tab\\browser\\voice_input\\voice_input_controller.cc", "wide": null }, { "va": "0x190c00a88", "offset": 281017992, "ascii": "Tabbit voice input hotkey refined success=", "wide": null }, { "va": "0x190c00ab8", "offset": 281018040, "ascii": " changed=", "wide": null }, { "va": "0x190c00ac8", "offset": 281018056, "ascii": "Tabbit voice input refine failed: ", "wide": null }, { "va": "0x190c00af0", "offset": 281018096, "ascii": "OnRefined", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 20866 }, { "label": "a-voice-controller-start", "file": "rea-a-voice-controller-start.json", "file_sha256": "02bbd44c710274c1da16498104a197620ae978c1a489b206d4cf6b82220ca249", "status": "completed", "evidence_id": "ev_12b142a0878cce9354272e4cb6c6fc100e3305041b0f03f440b6840f2879ebef", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183670ec0;pdgo @ 0x183670ec0;afij @ 0x183670ec0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183670ec0", "size": 2562, "nargs": 3, "signature": "fcn.183670ec0(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6499536684, "to": 6445650832, "type": "CALL" }, { "from": 6499536710, "to": 6524031184, "type": "CALL" }, { "from": 6499536732, "to": 6462379168, "type": "CALL" }, { "from": 6499536753, "to": 6524031184, "type": "CALL" }, { "from": 6499536763, "to": 6451143232, "type": "CALL" }, { "from": 6499536776, "to": 6447366432, "type": "CALL" }, { "from": 6499536882, "to": 6530673136, "type": "CALL" }, { "from": 6499536937, "to": 6530673136, "type": "CALL" }, { "from": 6499537046, "to": 6499537068, "type": "CODE" }, { "from": 6499537058, "to": 6511729936, "type": "CALL" }, { "from": 6499537063, "to": 6499537108, "type": "CODE" }, { "from": 6499537155, "to": 6499537176, "type": "CODE" }, { "from": 6499537169, "to": 6499537251, "type": "CODE" }, { "from": 6499537211, "to": 6542067384, "type": "CALL" }, { "from": 6499537289, "to": 6542436672, "type": "CALL" }, { "from": 6499537445, "to": 6542436672, "type": "CALL" }, { "from": 6499537498, "to": 6511512544, "type": "CALL" }, { "from": 6499537548, "to": 6445650832, "type": "CALL" }, { "from": 6499537574, "to": 6524031184, "type": "CALL" }, { "from": 6499537601, "to": 6462379168, "type": "CALL" }, { "from": 6499537622, "to": 6524031184, "type": "CALL" }, { "from": 6499537644, "to": 6462379168, "type": "CALL" }, { "from": 6499537665, "to": 6524031184, "type": "CALL" }, { "from": 6499537693, "to": 6462379168, "type": "CALL" }, { "from": 6499537706, "to": 6447366432, "type": "CALL" }, { "from": 6499537850, "to": 6542067384, "type": "CALL" }, { "from": 6499537950, "to": 6512942288, "type": "CALL" }, { "from": 6499538035, "to": 6517399712, "type": "CALL" }, { "from": 6499538040, "to": 6499538065, "type": "CODE" }, { "from": 6499538042, "to": 6740346544, "type": "CALL" }, { "from": 6499538052, "to": 6499537798, "type": "CODE" }, { "from": 6499538060, "to": 6499543168, "type": "CALL" }, { "from": 6499538085, "to": 6511512544, "type": "CALL" }, { "from": 6499538119, "to": 6511512544, "type": "CALL" }, { "from": 6499538124, "to": 6499538215, "type": "CODE" }, { "from": 6499538139, "to": 6549322352, "type": "CALL" }, { "from": 6499538144, "to": 6499538289, "type": "CODE" }, { "from": 6499538162, "to": 6499538223, "type": "CODE" }, { "from": 6499538183, "to": 6499588192, "type": "CALL" }, { "from": 6499538188, "to": 6499538215, "type": "CODE" }, { "from": 6499538197, "to": 6511729936, "type": "CALL" }, { "from": 6499538202, "to": 6499538266, "type": "CODE" }, { "from": 6499538210, "to": 6499539152, "type": "CALL" }, { "from": 6499538218, "to": 6499540016, "type": "CALL" }, { "from": 6499538381, "to": 6542434064, "type": "CALL" }, { "from": 6499538434, "to": 6445650832, "type": "CALL" }, { "from": 6499538460, "to": 6524031184, "type": "CALL" }, { "from": 6499538482, "to": 6462379168, "type": "CALL" }, { "from": 6499538503, "to": 6524031184, "type": "CALL" }, { "from": 6499538525, "to": 6462379168, "type": "CALL" }, { "from": 6499538538, "to": 6447366432, "type": "CALL" }, { "from": 6499538556, "to": 6499553216, "type": "CALL" }, { "from": 6499538617, "to": 6522894224, "type": "CALL" }, { "from": 6499538625, "to": 6499540384, "type": "CALL" }, { "from": 6499538630, "to": 6499538793, "type": "CODE" }, { "from": 6499538645, "to": 6511729936, "type": "CALL" }, { "from": 6499538650, "to": 6499538601, "type": "CODE" }, { "from": 6499538664, "to": 6445650832, "type": "CALL" }, { "from": 6499538690, "to": 6524031184, "type": "CALL" }, { "from": 6499538701, "to": 6446762512, "type": "CALL" }, { "from": 6499538722, "to": 6524031184, "type": "CALL" }, { "from": 6499538744, "to": 6462379168, "type": "CALL" }, { "from": 6499538765, "to": 6524031184, "type": "CALL" }, { "from": 6499538775, "to": 6451143232, "type": "CALL" }, { "from": 6499538788, "to": 6447366432, "type": "CALL" }, { "from": 6499538863, "to": 6511730288, "type": "CALL" }, { "from": 6499538868, "to": 6499538266, "type": "CODE" }, { "from": 6499538891, "to": 6511730288, "type": "CALL" }, { "from": 6499538896, "to": 6499537108, "type": "CODE" }, { "from": 6499538919, "to": 6511730288, "type": "CALL" }, { "from": 6499538924, "to": 6499538601, "type": "CODE" }, { "from": 6499538938, "to": 6499537378, "type": "CODE" }, { "from": 6499538972, "to": 6740346544, "type": "CALL" }, { "from": 6499538978, "to": 6499537978, "type": "CODE" }, { "from": 6499539000, "to": 6511512544, "type": "CALL" }, { "from": 6499539005, "to": 6499537978, "type": "CODE" }, { "from": 6499539020, "to": 6511512544, "type": "CALL" }, { "from": 6499539025, "to": 6499538992, "type": "CODE" }, { "from": 6499539035, "to": 6499537467, "type": "CODE" }, { "from": 6499539082, "to": 6522365600, "type": "CALL" }, { "from": 6499539095, "to": 6499537474, "type": "CODE" }, { "from": 6499539111, "to": 6542089024, "type": "CALL" }, { "from": 6499539125, "to": 6499538793, "type": "CODE" }, { "from": 6499539132, "to": 6542702416, "type": "CALL" } ], "datarefs": [ { "from": 6499536612, "to": 6740709440, "type": "DATA" }, { "from": 6499536635, "to": 6742246848, "type": "DATA" }, { "from": 6499536648, "to": 6723469232, "type": "DATA" }, { "from": 6499536697, "to": 6723470552, "type": "DATA" }, { "from": 6499536737, "to": 6723470536, "type": "DATA" }, { "from": 6499537503, "to": 6742246848, "type": "DATA" }, { "from": 6499537521, "to": 6723469232, "type": "DATA" }, { "from": 6499537561, "to": 6723470824, "type": "DATA" }, { "from": 6499537606, "to": 6723470872, "type": "DATA" }, { "from": 6499537649, "to": 6723470896, "type": "DATA" }, { "from": 6499537760, "to": 6541904336, "type": "DATA" }, { "from": 6499537864, "to": 6496572928, "type": "DATA" }, { "from": 6499537876, "to": 6488510160, "type": "DATA" }, { "from": 6499537888, "to": 6496570832, "type": "DATA" }, { "from": 6499537900, "to": 6499543168, "type": "DATA" }, { "from": 6499537922, "to": 6723470912, "type": "DATA" }, { "from": 6499537929, "to": 6723469232, "type": "DATA" }, { "from": 6499538394, "to": 6742246848, "type": "DATA" }, { "from": 6499538407, "to": 6723469232, "type": "DATA" }, { "from": 6499538447, "to": 6723471192, "type": "DATA" }, { "from": 6499538487, "to": 6723471248, "type": "DATA" }, { "from": 6499538677, "to": 6723470480, "type": "DATA" }, { "from": 6499538706, "to": 6723472584, "type": "DATA" }, { "from": 6499538749, "to": 6723470536, "type": "DATA" }, { "from": 6499538804, "to": 6740709440, "type": "DATA" }, { "from": 6499538957, "to": 6488537248, "type": "DATA" } ] }, "strings": [ { "va": "0x190bfffb0", "offset": 281015216, "ascii": "..\\..\\tab\\browser\\voice_input\\voice_input_controller.cc", "wide": null }, { "va": "0x190c004d8", "offset": 281016536, "ascii": "Tabbit voice input speech result text_length=", "wide": null }, { "va": "0x190c004c8", "offset": 281016520, "ascii": " is_final=", "wide": null }, { "va": "0x190c005e8", "offset": 281016808, "ascii": "Tabbit voice input bubble queued delta_length=", "wide": null }, { "va": "0x190c00618", "offset": 281016856, "ascii": " pending_length=", "wide": null }, { "va": "0x190c00630", "offset": 281016880, "ascii": " window_length=", "wide": null }, { "va": "0x190c00640", "offset": 281016896, "ascii": "EnqueueHotkeyBubbleText", "wide": null }, { "va": "0x190c00758", "offset": 281017176, "ascii": "Tabbit voice input streaming replace previous_length=", "wide": null }, { "va": "0x190c00790", "offset": 281017232, "ascii": " new_length=", "wide": null }, { "va": "0x190c00490", "offset": 281016464, "ascii": "Tabbit voice input speech result ignored: state=", "wide": null }, { "va": "0x190c00cc8", "offset": 281018568, "ascii": " text_length=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 29028 }, { "label": "a-voice-controller-state", "file": "rea-a-voice-controller-state.json", "file_sha256": "80dd7bba65e42fbf681a14c78c98b2524f302fcbe1666bc1a2063fe66c27048e", "status": "completed", "evidence_id": "ev_3e72f38a959ce82cc62b14d9eea115226de383e6f4ffaaec56330eb2f23b682c", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836718d0;pdgo @ 0x1836718d0;afij @ 0x1836718d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836718d0", "size": 269, "nargs": 2, "signature": "fcn.1836718d0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499539222, "to": 6445650832, "type": "CALL" }, { "from": 6499539245, "to": 6524031184, "type": "CALL" }, { "from": 6499539267, "to": 6462379168, "type": "CALL" }, { "from": 6499539288, "to": 6524031184, "type": "CALL" }, { "from": 6499539299, "to": 6446762512, "type": "CALL" }, { "from": 6499539320, "to": 6524031184, "type": "CALL" }, { "from": 6499539334, "to": 6451143232, "type": "CALL" }, { "from": 6499539344, "to": 6447366432, "type": "CALL" }, { "from": 6499539366, "to": 6499587744, "type": "CALL" }, { "from": 6499539415, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499539167, "to": 6740709440, "type": "DATA" }, { "from": 6499539185, "to": 6742246848, "type": "DATA" }, { "from": 6499539198, "to": 6723469232, "type": "DATA" }, { "from": 6499539232, "to": 6723470760, "type": "DATA" }, { "from": 6499539272, "to": 6723255008, "type": "DATA" }, { "from": 6499539304, "to": 6723470808, "type": "DATA" }, { "from": 6499539382, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190bfffb0", "offset": 281015216, "ascii": "..\\..\\tab\\browser\\voice_input\\voice_input_controller.cc", "wide": null }, { "va": "0x190c005a8", "offset": 281016744, "ascii": "Tabbit voice input bubble show text_length=", "wide": null }, { "va": "0x190bcbae0", "offset": 280800992, "ascii": " state=", "wide": null }, { "va": "0x190c005d8", "offset": 281016792, "ascii": " was_visible=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 1997 }, { "label": "a-voice-controller-toggle", "file": "rea-a-voice-controller-toggle.json", "file_sha256": "6787c0dc6596d928e2f45c772cd1508bcdbf124151a924e931346f02a5fd84d4", "status": "completed", "evidence_id": "ev_bf26f2d79840304a9605dd759e6b9117bba1e69f7769b145511f7134eac2b009", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18366fbc0;pdgo @ 0x18366fbc0;afij @ 0x18366fbc0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18366fbc0", "size": 1272, "nargs": 2, "signature": "fcn.18366fbc0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499531781, "to": 6445650832, "type": "CALL" }, { "from": 6499531804, "to": 6524031184, "type": "CALL" }, { "from": 6499531814, "to": 6451143232, "type": "CALL" }, { "from": 6499531835, "to": 6524031184, "type": "CALL" }, { "from": 6499531846, "to": 6444093040, "type": "CALL" }, { "from": 6499531854, "to": 6447366432, "type": "CALL" }, { "from": 6499531870, "to": 6499529536, "type": "CALL" }, { "from": 6499531944, "to": 6445650832, "type": "CALL" }, { "from": 6499531967, "to": 6524031184, "type": "CALL" }, { "from": 6499531988, "to": 6524031184, "type": "CALL" }, { "from": 6499531999, "to": 6446762512, "type": "CALL" }, { "from": 6499532020, "to": 6524031184, "type": "CALL" }, { "from": 6499532034, "to": 6451143232, "type": "CALL" }, { "from": 6499532055, "to": 6524031184, "type": "CALL" }, { "from": 6499532069, "to": 6451143232, "type": "CALL" }, { "from": 6499532090, "to": 6524031184, "type": "CALL" }, { "from": 6499532112, "to": 6462379168, "type": "CALL" }, { "from": 6499532122, "to": 6499532549, "type": "CODE" }, { "from": 6499532158, "to": 6524006080, "type": "CALL" }, { "from": 6499532207, "to": 6445650832, "type": "CALL" }, { "from": 6499532230, "to": 6524031184, "type": "CALL" }, { "from": 6499532238, "to": 6447366432, "type": "CALL" }, { "from": 6499532250, "to": 6499532388, "type": "CODE" }, { "from": 6499532291, "to": 6445650832, "type": "CALL" }, { "from": 6499532314, "to": 6499532375, "type": "CODE" }, { "from": 6499532352, "to": 6445650832, "type": "CALL" }, { "from": 6499532375, "to": 6524031184, "type": "CALL" }, { "from": 6499532383, "to": 6447366432, "type": "CALL" }, { "from": 6499532390, "to": 6499532554, "type": "CODE" }, { "from": 6499532472, "to": 6445650832, "type": "CALL" }, { "from": 6499532495, "to": 6524031184, "type": "CALL" }, { "from": 6499532506, "to": 6446762512, "type": "CALL" }, { "from": 6499532527, "to": 6524031184, "type": "CALL" }, { "from": 6499532541, "to": 6451143232, "type": "CALL" }, { "from": 6499532549, "to": 6447366432, "type": "CALL" }, { "from": 6499532597, "to": 6499532992, "type": "CALL" }, { "from": 6499532641, "to": 6445650832, "type": "CALL" }, { "from": 6499532664, "to": 6524031184, "type": "CALL" }, { "from": 6499532672, "to": 6499532549, "type": "CODE" }, { "from": 6499532693, "to": 6499551328, "type": "CALL" }, { "from": 6499532730, "to": 6499533584, "type": "CALL" }, { "from": 6499532778, "to": 6445650832, "type": "CALL" }, { "from": 6499532801, "to": 6499532664, "type": "CODE" }, { "from": 6499532821, "to": 6499532727, "type": "CODE" }, { "from": 6499532863, "to": 6445650832, "type": "CALL" }, { "from": 6499532886, "to": 6524031184, "type": "CALL" }, { "from": 6499532894, "to": 6447366432, "type": "CALL" }, { "from": 6499532939, "to": 6445650832, "type": "CALL" }, { "from": 6499532962, "to": 6499532230, "type": "CODE" }, { "from": 6499532978, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499531727, "to": 6740709440, "type": "DATA" }, { "from": 6499531745, "to": 6742246848, "type": "DATA" }, { "from": 6499531754, "to": 6723469232, "type": "DATA" }, { "from": 6499531791, "to": 6723469384, "type": "DATA" }, { "from": 6499531819, "to": 6723469432, "type": "DATA" }, { "from": 6499531907, "to": 6742246848, "type": "DATA" }, { "from": 6499531920, "to": 6723469232, "type": "DATA" }, { "from": 6499531954, "to": 6723469728, "type": "DATA" }, { "from": 6499531972, "to": 6723469784, "type": "DATA" }, { "from": 6499532004, "to": 6723469792, "type": "DATA" }, { "from": 6499532039, "to": 6723469648, "type": "DATA" }, { "from": 6499532074, "to": 6723469816, "type": "DATA" }, { "from": 6499532135, "to": 6719672992, "type": "DATA" }, { "from": 6499532171, "to": 6742246848, "type": "DATA" }, { "from": 6499532180, "to": 6723469232, "type": "DATA" }, { "from": 6499532217, "to": 6723469840, "type": "DATA" }, { "from": 6499532255, "to": 6742246848, "type": "DATA" }, { "from": 6499532264, "to": 6723469232, "type": "DATA" }, { "from": 6499532301, "to": 6723469664, "type": "DATA" }, { "from": 6499532316, "to": 6742246848, "type": "DATA" }, { "from": 6499532325, "to": 6723469232, "type": "DATA" }, { "from": 6499532362, "to": 6723469456, "type": "DATA" }, { "from": 6499532395, "to": 6742178232, "type": "DATA" }, { "from": 6499532436, "to": 6742246848, "type": "DATA" }, { "from": 6499532445, "to": 6723469232, "type": "DATA" }, { "from": 6499532482, "to": 6723469584, "type": "DATA" }, { "from": 6499532511, "to": 6723469648, "type": "DATA" }, { "from": 6499532565, "to": 6740709440, "type": "DATA" }, { "from": 6499532605, "to": 6742246848, "type": "DATA" }, { "from": 6499532614, "to": 6723469232, "type": "DATA" }, { "from": 6499532651, "to": 6723469528, "type": "DATA" }, { "from": 6499532738, "to": 6742246848, "type": "DATA" }, { "from": 6499532751, "to": 6723469232, "type": "DATA" }, { "from": 6499532788, "to": 6723470008, "type": "DATA" }, { "from": 6499532823, "to": 6742246848, "type": "DATA" }, { "from": 6499532836, "to": 6723469232, "type": "DATA" }, { "from": 6499532873, "to": 6723471120, "type": "DATA" }, { "from": 6499532899, "to": 6742246848, "type": "DATA" }, { "from": 6499532912, "to": 6723469232, "type": "DATA" }, { "from": 6499532949, "to": 6723469920, "type": "DATA" } ] }, "strings": [ { "va": "0x190bfffb0", "offset": 281015216, "ascii": "..\\..\\tab\\browser\\voice_input\\voice_input_controller.cc", "wide": null }, { "va": "0x190c00048", "offset": 281015368, "ascii": "Tabbit voice input browser hotkey pressed=", "wide": null }, { "va": "0x190c00078", "offset": 281015416, "ascii": " profile=", "wide": null }, { "va": "0x190c001a0", "offset": 281015712, "ascii": "Tabbit voice input browser hotkey press already active ", "wide": null }, { "va": "0x190c001d8", "offset": 281015768, "ascii": "state=", "wide": null }, { "va": "0x190c001e0", "offset": 281015776, "ascii": " bubble_visible=", "wide": null }, { "va": "0x190c00150", "offset": 281015632, "ascii": " from_hotkey=", "wide": null }, { "va": "0x190c001f8", "offset": 281015800, "ascii": " last_partial_length=", "wide": null }, { "va": "0x1908612a0", "offset": 277218976, "ascii": "tabbit.voice_input.enabled", "wide": null }, { "va": "0x190c00210", "offset": 281015824, "ascii": "Tabbit voice input browser hotkey press rejected: prefs disabled or unavailable", "wide": null }, { "va": "0x190c00160", "offset": 281015648, "ascii": "Tabbit voice input browser hotkey press rejected: no controller", "wide": null }, { "va": "0x190c00090", "offset": 281015440, "ascii": "Tabbit voice input browser hotkey release ignored: no controller", "wide": null }, { "va": "0x190c00110", "offset": 281015568, "ascii": "Tabbit voice input browser hotkey release recorded state=", "wide": null }, { "va": "0x190c000d8", "offset": 281015512, "ascii": "Tabbit voice input browser hotkey release stopped", "wide": null }, { "va": "0x190c002b8", "offset": 281015992, "ascii": "Tabbit voice input browser hotkey press started", "wide": null }, { "va": "0x190c00710", "offset": 281017104, "ascii": "Tabbit voice input hotkey target capture failed: no text injector", "wide": null }, { "va": "0x190c00260", "offset": 281015904, "ascii": "Tabbit voice input browser hotkey press rejected: no focused web editable target", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 9888 }, { "label": "a-voice-frame-id-resolver", "file": "rea-a-voice-frame-id-resolver.json", "file_sha256": "c5649fc1b4bf7d70352604c1ab32e51c320b977540a0f7cb488dcc4eec83b443", "status": "completed", "evidence_id": "ev_915f41c11974d8bf43ad5bb82029bd810385c6647d56f8ea3781c700fb929372", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x184770e70;pdgo @ 0x184770e70;afij @ 0x184770e70", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x184770e70", "size": 1134, "nargs": 1, "signature": "fcn.184770e70(int64_t arg1);", "callrefs": [ { "from": 6517362402, "to": 6740378168, "type": "CALL" }, { "from": 6517362721, "to": 6740346544, "type": "CALL" }, { "from": 6517362735, "to": 6517362852, "type": "CODE" }, { "from": 6517362774, "to": 6542633200, "type": "CALL" }, { "from": 6517362873, "to": 6542683472, "type": "CALL" }, { "from": 6517362902, "to": 6542683616, "type": "CALL" }, { "from": 6517362912, "to": 6542683808, "type": "CALL" }, { "from": 6517362920, "to": 6542683456, "type": "CALL" }, { "from": 6517362951, "to": 6524031184, "type": "CALL" }, { "from": 6517362983, "to": 6511512544, "type": "CALL" }, { "from": 6517362993, "to": 6542683504, "type": "CALL" }, { "from": 6517362998, "to": 6517362437, "type": "CODE" }, { "from": 6517363044, "to": 6517362656, "type": "CODE" }, { "from": 6517363087, "to": 6517362683, "type": "CODE" }, { "from": 6517363153, "to": 6455176000, "type": "CALL" }, { "from": 6517363158, "to": 6517362461, "type": "CODE" }, { "from": 6517363170, "to": 6542069736, "type": "CALL" }, { "from": 6517363218, "to": 6542069628, "type": "CALL" }, { "from": 6517363223, "to": 6517362353, "type": "CODE" }, { "from": 6517363250, "to": 6517362833, "type": "CODE" }, { "from": 6517363263, "to": 6542089024, "type": "CALL" }, { "from": 6517363293, "to": 6517362461, "type": "CODE" }, { "from": 6517363310, "to": 6517325904, "type": "CALL" }, { "from": 6517363330, "to": 6517363350, "type": "CODE" }, { "from": 6517363332, "to": 6624386464, "type": "CALL" }, { "from": 6517363353, "to": 6517325904, "type": "CALL" }, { "from": 6517363399, "to": 6624386480, "type": "CALL" }, { "from": 6517363404, "to": 6517363337, "type": "CODE" }, { "from": 6517363417, "to": 6517362570, "type": "CODE" } ], "datarefs": [ { "from": 6517362301, "to": 6740709440, "type": "DATA" }, { "from": 6517362316, "to": 6742063528, "type": "DATA" }, { "from": 6517362322, "to": 6741832416, "type": "DATA" }, { "from": 6517362353, "to": 6742063504, "type": "DATA" }, { "from": 6517362376, "to": 6511533376, "type": "DATA" }, { "from": 6517362444, "to": 6742070912, "type": "DATA" }, { "from": 6517362656, "to": 6741838692, "type": "DATA" }, { "from": 6517362691, "to": 6740709440, "type": "DATA" }, { "from": 6517362737, "to": 6712467056, "type": "DATA" }, { "from": 6517362749, "to": 6712467221, "type": "DATA" }, { "from": 6517362756, "to": 6712467240, "type": "DATA" }, { "from": 6517362799, "to": 6741832416, "type": "DATA" }, { "from": 6517362852, "to": 6717301112, "type": "DATA" }, { "from": 6517362878, "to": 6717301568, "type": "DATA" }, { "from": 6517363037, "to": 6712116080, "type": "DATA" }, { "from": 6517363114, "to": 6742070920, "type": "DATA" }, { "from": 6517363125, "to": 6742070912, "type": "DATA" }, { "from": 6517363132, "to": 6742070920, "type": "DATA" }, { "from": 6517363139, "to": 6742070912, "type": "DATA" }, { "from": 6517363146, "to": 6489361856, "type": "DATA" }, { "from": 6517363163, "to": 6742063528, "type": "DATA" }, { "from": 6517363175, "to": 6742063528, "type": "DATA" }, { "from": 6517363200, "to": 6742063520, "type": "DATA" }, { "from": 6517363211, "to": 6742063528, "type": "DATA" }, { "from": 6517363273, "to": 6742070912, "type": "DATA" }, { "from": 6517363286, "to": 6742070912, "type": "DATA" }, { "from": 6517363337, "to": 6742070912, "type": "DATA" } ] }, "strings": [ { "va": "0x190181e70", "offset": 270013040, "ascii": "Comparing default-constructed hashtable iterator with a non-default-constructed hashtable iterator.", "wide": null }, { "va": "0x190181f15", "offset": 270013205, "ascii": "raw_hash_set.h", "wide": null }, { "va": "0x190181f28", "offset": 270013224, "ascii": "Invalid iterator comparison. %s", "wide": null }, { "va": "0x19061e178", "offset": 274847096, "ascii": "..\\..\\content\\browser\\browser_thread_impl.cc", "wide": null }, { "va": "0x19061e340", "offset": 274847552, "ascii": "checker.CalledOnValidBrowserThread(thread_identifier)", "wide": null } ], "imports": [ { "at": "0x184770ee2", "target": "0x191c20238", "api": { "va": 6740378168, "lib": "KERNEL32.dll", "sym": "GetCurrentThreadId" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 16638 }, { "label": "a-voice-hotkey-install", "file": "rea-a-voice-hotkey-install.json", "file_sha256": "d6ff67d51a0bd9e60203978bb8e9a043c94e7dba835cc36f2aa0811c0d573add", "status": "completed", "evidence_id": "ev_a3b27f8c034940a083372bc8a4e36710aec9a190e56cddd1bb08d8ed2714f416", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836759d0;pdgo @ 0x1836759d0;afij @ 0x1836759d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836759d0", "size": 790, "nargs": 2, "signature": "fcn.1836759d0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499555855, "to": 6511423872, "type": "CALL" }, { "from": 6499555878, "to": 6442840976, "type": "CALL" }, { "from": 6499555937, "to": 6445650832, "type": "CALL" }, { "from": 6499555963, "to": 6524031184, "type": "CALL" }, { "from": 6499555982, "to": 6445656528, "type": "CALL" }, { "from": 6499556027, "to": 6499556237, "type": "CODE" }, { "from": 6499556069, "to": 6445650832, "type": "CALL" }, { "from": 6499556092, "to": 6524031184, "type": "CALL" }, { "from": 6499556103, "to": 6444093040, "type": "CALL" }, { "from": 6499556124, "to": 6524031184, "type": "CALL" }, { "from": 6499556144, "to": 6451143232, "type": "CALL" }, { "from": 6499556167, "to": 6445656528, "type": "CALL" }, { "from": 6499556232, "to": 6511512544, "type": "CALL" }, { "from": 6499556283, "to": 6511975280, "type": "CALL" }, { "from": 6499556291, "to": 6518967168, "type": "CALL" }, { "from": 6499556310, "to": 6499556141, "type": "CODE" }, { "from": 6499556340, "to": 6741827280, "type": "CALL" }, { "from": 6499556364, "to": 6511423872, "type": "CALL" }, { "from": 6499556385, "to": 6442840976, "type": "CALL" }, { "from": 6499556439, "to": 6445650832, "type": "CALL" }, { "from": 6499556465, "to": 6524031184, "type": "CALL" }, { "from": 6499556476, "to": 6444093040, "type": "CALL" }, { "from": 6499556495, "to": 6445656528, "type": "CALL" }, { "from": 6499556540, "to": 6499556237, "type": "CODE" }, { "from": 6499556570, "to": 6740346544, "type": "CALL" }, { "from": 6499556576, "to": 6499556272, "type": "CODE" } ], "datarefs": [ { "from": 6499555843, "to": 6741126408, "type": "DATA" }, { "from": 6499555869, "to": 6741126408, "type": "DATA" }, { "from": 6499555897, "to": 6742246848, "type": "DATA" }, { "from": 6499555910, "to": 6723473536, "type": "DATA" }, { "from": 6499555947, "to": 6723473664, "type": "DATA" }, { "from": 6499555968, "to": 6710367816, "type": "DATA" }, { "from": 6499555994, "to": 6708900496, "type": "DATA" }, { "from": 6499556006, "to": 6708923712, "type": "DATA" }, { "from": 6499556032, "to": 6742246848, "type": "DATA" }, { "from": 6499556045, "to": 6723473536, "type": "DATA" }, { "from": 6499556079, "to": 6723473600, "type": "DATA" }, { "from": 6499556108, "to": 6723470112, "type": "DATA" }, { "from": 6499556149, "to": 6710367816, "type": "DATA" }, { "from": 6499556180, "to": 6708900496, "type": "DATA" }, { "from": 6499556192, "to": 6708923712, "type": "DATA" }, { "from": 6499556242, "to": 6708923824, "type": "DATA" }, { "from": 6499556256, "to": 6742217808, "type": "DATA" }, { "from": 6499556315, "to": 6742178240, "type": "DATA" }, { "from": 6499556322, "to": 6499556592, "type": "DATA" }, { "from": 6499556352, "to": 6741126408, "type": "DATA" }, { "from": 6499556376, "to": 6741126408, "type": "DATA" }, { "from": 6499556403, "to": 6742246848, "type": "DATA" }, { "from": 6499556412, "to": 6723473536, "type": "DATA" }, { "from": 6499556449, "to": 6723473720, "type": "DATA" }, { "from": 6499556481, "to": 6710367816, "type": "DATA" }, { "from": 6499556507, "to": 6708900496, "type": "DATA" }, { "from": 6499556519, "to": 6708923712, "type": "DATA" } ] }, "strings": [ { "va": "0x190c01080", "offset": 281019520, "ascii": "..\\..\\tab\\browser\\voice_input\\win\\browser_hotkey_monitor_win.cc", "wide": null }, { "va": "0x190c01100", "offset": 281019648, "ascii": "Tabbit voice input Windows monitor already installed", "wide": null }, { "va": "0x190c010c0", "offset": 281019584, "ascii": "Tabbit voice input Windows monitor not started: profile=", "wide": null }, { "va": "0x190c00320", "offset": 281016096, "ascii": " off_the_record=", "wide": null }, { "va": "0x190c01138", "offset": 281019704, "ascii": "Tabbit voice input Windows monitor installed for profile=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5422 }, { "label": "a-voice-hotkey", "file": "rea-a-voice-hotkey.json", "file_sha256": "2e314deed810a42bfc6f7f2b9d9706f2d3a8fb3d69b106d917cc1cc1e0121a39", "status": "completed", "evidence_id": "ev_a6161a19a5a380c7c54009cc3a908cc2264b96c737aba74bd5d527804d05e49a", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183675cf0;pdgo @ 0x183675cf0;afij @ 0x183675cf0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183675cf0", "size": 1663, "nargs": 4, "signature": "fcn.183675cf0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg_30h);", "callrefs": [ { "from": 6499556641, "to": 6741826192, "type": "CALL" }, { "from": 6499556674, "to": 6741826568, "type": "CALL" }, { "from": 6499556683, "to": 6740378144, "type": "CALL" }, { "from": 6499556807, "to": 6445650832, "type": "CALL" }, { "from": 6499556833, "to": 6524031184, "type": "CALL" }, { "from": 6499556843, "to": 6445672384, "type": "CALL" }, { "from": 6499556864, "to": 6524031184, "type": "CALL" }, { "from": 6499556875, "to": 6451143232, "type": "CALL" }, { "from": 6499556896, "to": 6524031184, "type": "CALL" }, { "from": 6499556917, "to": 6451143232, "type": "CALL" }, { "from": 6499556938, "to": 6524031184, "type": "CALL" }, { "from": 6499556948, "to": 6451143232, "type": "CALL" }, { "from": 6499556967, "to": 6445656528, "type": "CALL" }, { "from": 6499557028, "to": 6511512544, "type": "CALL" }, { "from": 6499557079, "to": 6511975280, "type": "CALL" }, { "from": 6499557087, "to": 6518967168, "type": "CALL" }, { "from": 6499557135, "to": 6499557178, "type": "CODE" }, { "from": 6499557171, "to": 6741825592, "type": "CALL" }, { "from": 6499557273, "to": 6499557178, "type": "CODE" }, { "from": 6499557328, "to": 6499531712, "type": "CALL" }, { "from": 6499557373, "to": 6445650832, "type": "CALL" }, { "from": 6499557396, "to": 6499557955, "type": "CODE" }, { "from": 6499557441, "to": 6445650832, "type": "CALL" }, { "from": 6499557467, "to": 6524031184, "type": "CALL" }, { "from": 6499557479, "to": 6444093040, "type": "CALL" }, { "from": 6499557499, "to": 6445656528, "type": "CALL" }, { "from": 6499557563, "to": 6511512544, "type": "CALL" }, { "from": 6499557614, "to": 6511975280, "type": "CALL" }, { "from": 6499557622, "to": 6518967168, "type": "CALL" }, { "from": 6499557632, "to": 6499557161, "type": "CODE" }, { "from": 6499557677, "to": 6445650832, "type": "CALL" }, { "from": 6499557703, "to": 6524031184, "type": "CALL" }, { "from": 6499557708, "to": 6499557484, "type": "CODE" }, { "from": 6499557721, "to": 6740346544, "type": "CALL" }, { "from": 6499557730, "to": 6499557824, "type": "CODE" }, { "from": 6499557775, "to": 6740379656, "type": "CALL" }, { "from": 6499557887, "to": 6499531712, "type": "CALL" }, { "from": 6499557932, "to": 6445650832, "type": "CALL" }, { "from": 6499557958, "to": 6524031184, "type": "CALL" }, { "from": 6499557977, "to": 6445656528, "type": "CALL" }, { "from": 6499558037, "to": 6511512544, "type": "CALL" }, { "from": 6499558084, "to": 6511975280, "type": "CALL" }, { "from": 6499558092, "to": 6518967168, "type": "CALL" }, { "from": 6499558107, "to": 6499557178, "type": "CODE" }, { "from": 6499558137, "to": 6740346544, "type": "CALL" }, { "from": 6499558143, "to": 6499557068, "type": "CODE" }, { "from": 6499558173, "to": 6740346544, "type": "CALL" }, { "from": 6499558179, "to": 6499557603, "type": "CODE" }, { "from": 6499558205, "to": 6740346544, "type": "CALL" }, { "from": 6499558211, "to": 6499558073, "type": "CODE" }, { "from": 6499558250, "to": 6499557819, "type": "CODE" } ], "datarefs": [ { "from": 6499556627, "to": 6742178240, "type": "DATA" }, { "from": 6499556735, "to": 6742246848, "type": "DATA" }, { "from": 6499556780, "to": 6723473536, "type": "DATA" }, { "from": 6499556817, "to": 6723474064, "type": "DATA" }, { "from": 6499556848, "to": 6723474112, "type": "DATA" }, { "from": 6499556880, "to": 6723474128, "type": "DATA" }, { "from": 6499556922, "to": 6723474144, "type": "DATA" }, { "from": 6499556953, "to": 6710367816, "type": "DATA" }, { "from": 6499556979, "to": 6708900496, "type": "DATA" }, { "from": 6499556991, "to": 6708923712, "type": "DATA" }, { "from": 6499557038, "to": 6708923824, "type": "DATA" }, { "from": 6499557052, "to": 6742217808, "type": "DATA" }, { "from": 6499557105, "to": 6742178240, "type": "DATA" }, { "from": 6499557146, "to": 6742178240, "type": "DATA" }, { "from": 6499557227, "to": 6741825592, "type": "DATA" }, { "from": 6499557243, "to": 6742178240, "type": "DATA" }, { "from": 6499557289, "to": 6742178232, "type": "DATA" }, { "from": 6499557333, "to": 6742246848, "type": "DATA" }, { "from": 6499557346, "to": 6723473536, "type": "DATA" }, { "from": 6499557383, "to": 6723473896, "type": "DATA" }, { "from": 6499557401, "to": 6742246848, "type": "DATA" }, { "from": 6499557414, "to": 6723473536, "type": "DATA" }, { "from": 6499557451, "to": 6723473840, "type": "DATA" }, { "from": 6499557484, "to": 6710367816, "type": "DATA" }, { "from": 6499557512, "to": 6708900496, "type": "DATA" }, { "from": 6499557524, "to": 6708923712, "type": "DATA" }, { "from": 6499557573, "to": 6708923824, "type": "DATA" }, { "from": 6499557587, "to": 6742217808, "type": "DATA" }, { "from": 6499557641, "to": 6742246848, "type": "DATA" }, { "from": 6499557650, "to": 6723473536, "type": "DATA" }, { "from": 6499557687, "to": 6723474016, "type": "DATA" }, { "from": 6499557741, "to": 6741125872, "type": "DATA" }, { "from": 6499557748, "to": 6537033840, "type": "DATA" }, { "from": 6499557892, "to": 6742246848, "type": "DATA" }, { "from": 6499557905, "to": 6723473536, "type": "DATA" }, { "from": 6499557942, "to": 6723473952, "type": "DATA" }, { "from": 6499557963, "to": 6710367816, "type": "DATA" }, { "from": 6499557989, "to": 6708900496, "type": "DATA" }, { "from": 6499558001, "to": 6708923712, "type": "DATA" }, { "from": 6499558047, "to": 6708923824, "type": "DATA" }, { "from": 6499558061, "to": 6742217808, "type": "DATA" }, { "from": 6499558216, "to": 6742234664, "type": "DATA" } ] }, "strings": [ { "va": "0x190c01080", "offset": 281019520, "ascii": "..\\..\\tab\\browser\\voice_input\\win\\browser_hotkey_monitor_win.cc", "wide": null }, { "va": "0x190c01290", "offset": 281020048, "ascii": "Tabbit voice input Windows alt event vk=", "wide": null }, { "va": "0x190c012c0", "offset": 281020096, "ascii": " key_down=", "wide": null }, { "va": "0x190c012d0", "offset": 281020112, "ascii": " key_up=", "wide": null }, { "va": "0x190c012e0", "offset": 281020128, "ascii": " foreground=", "wide": null }, { "va": "0x190c011e8", "offset": 281019880, "ascii": "Tabbit voice input Windows alt stopped dictation", "wide": null }, { "va": "0x190c011b0", "offset": 281019824, "ascii": "Tabbit voice input Windows alt down ignored profile=", "wide": null }, { "va": "0x190c01260", "offset": 281020000, "ascii": "Tabbit voice input Windows alt first tap armed", "wide": null }, { "va": "0x190c01220", "offset": 281019936, "ascii": "Tabbit voice input Windows alt double tap started dictation", "wide": null } ], "imports": [ { "at": "0x183675d4b", "target": "0x191c20220", "api": { "va": 6740378144, "lib": "KERNEL32.dll", "sym": "GetCurrentProcessId" } }, { "at": "0x18367618f", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 13994 }, { "label": "a-voice-inject-commit", "file": "rea-a-voice-inject-commit.json", "file_sha256": "acb44f8c68aaacacb81bb72a5256c944cd1dbb073ac74afa3ed568cf6bfc6fac", "status": "completed", "evidence_id": "ev_9d352001b0503b3dfbc8397bf4810944e628f4faad9b1123f8ae6b92580ec31f", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183675390;pdgo @ 0x183675390;pdf @ 0x183675390;afij @ 0x183675390", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183675390", "size": 1117, "nargs": 2, "signature": "fcn.183675390(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499554270, "to": 6445650832, "type": "CALL" }, { "from": 6499554293, "to": 6524031184, "type": "CALL" }, { "from": 6499554303, "to": 6451143232, "type": "CALL" }, { "from": 6499554324, "to": 6524031184, "type": "CALL" }, { "from": 6499554352, "to": 6451143232, "type": "CALL" }, { "from": 6499554375, "to": 6445656528, "type": "CALL" }, { "from": 6499554443, "to": 6511512544, "type": "CALL" }, { "from": 6499554494, "to": 6511975280, "type": "CALL" }, { "from": 6499554502, "to": 6518967168, "type": "CALL" }, { "from": 6499554583, "to": 6499554547, "type": "CODE" }, { "from": 6499554588, "to": 6517362288, "type": "CALL" }, { "from": 6499554614, "to": 6740346544, "type": "CALL" }, { "from": 6499554637, "to": 6740346544, "type": "CALL" }, { "from": 6499554675, "to": 6740346544, "type": "CALL" }, { "from": 6499554681, "to": 6499554518, "type": "CODE" }, { "from": 6499554688, "to": 6499554233, "type": "CODE" }, { "from": 6499554697, "to": 6499554790, "type": "CODE" }, { "from": 6499554702, "to": 6517362288, "type": "CALL" }, { "from": 6499554732, "to": 6740346544, "type": "CALL" }, { "from": 6499554759, "to": 6740346544, "type": "CALL" }, { "from": 6499554832, "to": 6445650832, "type": "CALL" }, { "from": 6499554855, "to": 6524031184, "type": "CALL" }, { "from": 6499554879, "to": 6524031184, "type": "CALL" }, { "from": 6499554889, "to": 6446762512, "type": "CALL" }, { "from": 6499554910, "to": 6524031184, "type": "CALL" }, { "from": 6499554921, "to": 6446762512, "type": "CALL" }, { "from": 6499554942, "to": 6524031184, "type": "CALL" }, { "from": 6499554963, "to": 6524031184, "type": "CALL" }, { "from": 6499554985, "to": 6462379168, "type": "CALL" }, { "from": 6499555008, "to": 6445656528, "type": "CALL" }, { "from": 6499555077, "to": 6511512544, "type": "CALL" }, { "from": 6499555128, "to": 6511975280, "type": "CALL" }, { "from": 6499555136, "to": 6518967168, "type": "CALL" }, { "from": 6499555171, "to": 6530673136, "type": "CALL" }, { "from": 6499555189, "to": 6740346544, "type": "CALL" }, { "from": 6499555214, "to": 6511512544, "type": "CALL" }, { "from": 6499555223, "to": 6499554507, "type": "CODE" }, { "from": 6499555235, "to": 6499555151, "type": "CODE" }, { "from": 6499555262, "to": 6740346544, "type": "CALL" }, { "from": 6499555268, "to": 6499554483, "type": "CODE" }, { "from": 6499555298, "to": 6740346544, "type": "CALL" }, { "from": 6499555304, "to": 6499555117, "type": "CODE" } ], "datarefs": [ { "from": 6499554233, "to": 6742246848, "type": "DATA" }, { "from": 6499554246, "to": 6723472600, "type": "DATA" }, { "from": 6499554280, "to": 6723473456, "type": "DATA" }, { "from": 6499554308, "to": 6723473512, "type": "DATA" }, { "from": 6499554357, "to": 6710367816, "type": "DATA" }, { "from": 6499554388, "to": 6708900496, "type": "DATA" }, { "from": 6499554400, "to": 6708923712, "type": "DATA" }, { "from": 6499554453, "to": 6708923824, "type": "DATA" }, { "from": 6499554467, "to": 6742217808, "type": "DATA" }, { "from": 6499554795, "to": 6742246848, "type": "DATA" }, { "from": 6499554808, "to": 6723472600, "type": "DATA" }, { "from": 6499554842, "to": 6723473400, "type": "DATA" }, { "from": 6499554863, "to": 6723046400, "type": "DATA" }, { "from": 6499554894, "to": 6712107188, "type": "DATA" }, { "from": 6499554926, "to": 6712087560, "type": "DATA" }, { "from": 6499554947, "to": 6723472584, "type": "DATA" }, { "from": 6499554990, "to": 6710367816, "type": "DATA" }, { "from": 6499555021, "to": 6708900496, "type": "DATA" }, { "from": 6499555033, "to": 6708923712, "type": "DATA" }, { "from": 6499555087, "to": 6708923824, "type": "DATA" }, { "from": 6499555101, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190c00cd8", "offset": 281018584, "ascii": "..\\..\\tab\\browser\\voice_input\\browser_hotkey_text_injector.cc", "wide": null }, { "va": "0x190c01030", "offset": 281019440, "ascii": "Tabbit voice input hotkey finish without commit widget=", "wide": null }, { "va": "0x190c01068", "offset": 281019496, "ascii": " text_empty=", "wide": null }, { "va": "0x190c00ff8", "offset": 281019384, "ascii": "Tabbit voice input hotkey finish commit target_frame=", "wide": null }, { "va": "0x190b98c00", "offset": 280592384, "ascii": "GlobalRenderFrameHostId(", "wide": null }, { "va": "0x190c00cc8", "offset": 281018568, "ascii": " text_length=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 23209 }, { "label": "a-voice-injector", "file": "rea-a-voice-injector.json", "file_sha256": "fc1c79e78479ac50d492fb76892fbece5a695c79c74272d9cc15efa929fc7dbf", "status": "completed", "evidence_id": "ev_6ba30e34597b59368c3f672d9e09468c9932831895067d2b916ad423ec9fe1ad", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183674860;pdgo @ 0x183674860;afij @ 0x183674860", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183674860", "size": 1705, "nargs": 2, "signature": "fcn.183674860(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499551406, "to": 6456889328, "type": "CALL" }, { "from": 6499551420, "to": 6512708384, "type": "CALL" }, { "from": 6499551436, "to": 6467226304, "type": "CALL" }, { "from": 6499551528, "to": 6740346544, "type": "CALL" }, { "from": 6499551555, "to": 6740346544, "type": "CALL" }, { "from": 6499551582, "to": 6740346544, "type": "CALL" }, { "from": 6499551636, "to": 6445650832, "type": "CALL" }, { "from": 6499551653, "to": 6499551860, "type": "CODE" }, { "from": 6499551675, "to": 6499551402, "type": "CODE" }, { "from": 6499551683, "to": 6517362288, "type": "CALL" }, { "from": 6499551713, "to": 6740346544, "type": "CALL" }, { "from": 6499551740, "to": 6740346544, "type": "CALL" }, { "from": 6499551778, "to": 6740346544, "type": "CALL" }, { "from": 6499551784, "to": 6499551369, "type": "CODE" }, { "from": 6499551789, "to": 6740346544, "type": "CALL" }, { "from": 6499551798, "to": 6499551506, "type": "CODE" }, { "from": 6499551843, "to": 6445650832, "type": "CALL" }, { "from": 6499551866, "to": 6499551999, "type": "CODE" }, { "from": 6499551911, "to": 6445650832, "type": "CALL" }, { "from": 6499551934, "to": 6499551999, "type": "CODE" }, { "from": 6499551976, "to": 6445650832, "type": "CALL" }, { "from": 6499552002, "to": 6524031184, "type": "CALL" }, { "from": 6499552021, "to": 6445656528, "type": "CALL" }, { "from": 6499552088, "to": 6511512544, "type": "CALL" }, { "from": 6499552139, "to": 6511975280, "type": "CALL" }, { "from": 6499552147, "to": 6518967168, "type": "CALL" }, { "from": 6499552186, "to": 6740346544, "type": "CALL" }, { "from": 6499552198, "to": 6528656752, "type": "CALL" }, { "from": 6499552244, "to": 6445650832, "type": "CALL" }, { "from": 6499552267, "to": 6524031184, "type": "CALL" }, { "from": 6499552339, "to": 6524031184, "type": "CALL" }, { "from": 6499552362, "to": 6445656528, "type": "CALL" }, { "from": 6499552408, "to": 6499552093, "type": "CODE" }, { "from": 6499552418, "to": 6499552333, "type": "CODE" }, { "from": 6499552460, "to": 6445650832, "type": "CALL" }, { "from": 6499552483, "to": 6499551999, "type": "CODE" }, { "from": 6499552501, "to": 6740346544, "type": "CALL" }, { "from": 6499552530, "to": 6740346544, "type": "CALL" }, { "from": 6499552585, "to": 6445650832, "type": "CALL" }, { "from": 6499552608, "to": 6524031184, "type": "CALL" }, { "from": 6499552632, "to": 6524031184, "type": "CALL" }, { "from": 6499552642, "to": 6446762512, "type": "CALL" }, { "from": 6499552663, "to": 6524031184, "type": "CALL" }, { "from": 6499552674, "to": 6446762512, "type": "CALL" }, { "from": 6499552695, "to": 6524031184, "type": "CALL" }, { "from": 6499552716, "to": 6524031184, "type": "CALL" }, { "from": 6499552744, "to": 6524031184, "type": "CALL" }, { "from": 6499552765, "to": 6524031184, "type": "CALL" }, { "from": 6499552786, "to": 6740346544, "type": "CALL" }, { "from": 6499552797, "to": 6451143232, "type": "CALL" }, { "from": 6499552817, "to": 6445656528, "type": "CALL" }, { "from": 6499552891, "to": 6511512544, "type": "CALL" }, { "from": 6499552938, "to": 6511975280, "type": "CALL" }, { "from": 6499552946, "to": 6518967168, "type": "CALL" }, { "from": 6499552951, "to": 6499552154, "type": "CODE" }, { "from": 6499552963, "to": 6543545728, "type": "CALL" }, { "from": 6499552993, "to": 6740346544, "type": "CALL" }, { "from": 6499552999, "to": 6499552128, "type": "CODE" }, { "from": 6499553025, "to": 6740346544, "type": "CALL" }, { "from": 6499553031, "to": 6499552927, "type": "CODE" } ], "datarefs": [ { "from": 6499551486, "to": 6523219744, "type": "DATA" }, { "from": 6499551596, "to": 6742246848, "type": "DATA" }, { "from": 6499551609, "to": 6723472600, "type": "DATA" }, { "from": 6499551646, "to": 6723472928, "type": "DATA" }, { "from": 6499551803, "to": 6742246848, "type": "DATA" }, { "from": 6499551816, "to": 6723472600, "type": "DATA" }, { "from": 6499551853, "to": 6723472752, "type": "DATA" }, { "from": 6499551871, "to": 6742246848, "type": "DATA" }, { "from": 6499551884, "to": 6723472600, "type": "DATA" }, { "from": 6499551921, "to": 6723472832, "type": "DATA" }, { "from": 6499551936, "to": 6742246848, "type": "DATA" }, { "from": 6499551949, "to": 6723472600, "type": "DATA" }, { "from": 6499551986, "to": 6723472672, "type": "DATA" }, { "from": 6499552007, "to": 6710367816, "type": "DATA" }, { "from": 6499552033, "to": 6708900496, "type": "DATA" }, { "from": 6499552045, "to": 6708923712, "type": "DATA" }, { "from": 6499552098, "to": 6708923824, "type": "DATA" }, { "from": 6499552112, "to": 6742217808, "type": "DATA" }, { "from": 6499552211, "to": 6742246848, "type": "DATA" }, { "from": 6499552220, "to": 6723472600, "type": "DATA" }, { "from": 6499552254, "to": 6723473008, "type": "DATA" }, { "from": 6499552344, "to": 6710367816, "type": "DATA" }, { "from": 6499552375, "to": 6708900496, "type": "DATA" }, { "from": 6499552387, "to": 6708923712, "type": "DATA" }, { "from": 6499552420, "to": 6742246848, "type": "DATA" }, { "from": 6499552433, "to": 6723472600, "type": "DATA" }, { "from": 6499552470, "to": 6723473088, "type": "DATA" }, { "from": 6499552545, "to": 6742246848, "type": "DATA" }, { "from": 6499552558, "to": 6723472600, "type": "DATA" }, { "from": 6499552595, "to": 6723473184, "type": "DATA" }, { "from": 6499552616, "to": 6723046400, "type": "DATA" }, { "from": 6499552647, "to": 6712107188, "type": "DATA" }, { "from": 6499552679, "to": 6712087560, "type": "DATA" }, { "from": 6499552700, "to": 6720260796, "type": "DATA" }, { "from": 6499552749, "to": 6723473240, "type": "DATA" }, { "from": 6499552802, "to": 6710367816, "type": "DATA" }, { "from": 6499552831, "to": 6708900496, "type": "DATA" }, { "from": 6499552843, "to": 6708923712, "type": "DATA" }, { "from": 6499552901, "to": 6708923824, "type": "DATA" }, { "from": 6499552915, "to": 6742217808, "type": "DATA" }, { "from": 6499552956, "to": 6712088560, "type": "DATA" } ] }, "strings": [ { "va": "0x190c00cd8", "offset": 281018584, "ascii": "..\\..\\tab\\browser\\voice_input\\browser_hotkey_text_injector.cc", "wide": null }, { "va": "0x190c00e20", "offset": 281018912, "ascii": "Tabbit voice input hotkey target capture failed: no live focused frame", "wide": null }, { "va": "0x190c00d70", "offset": 281018736, "ascii": "Tabbit voice input hotkey target capture failed: no active WebContents", "wide": null }, { "va": "0x190c00dc0", "offset": 281018816, "ascii": "Tabbit voice input hotkey target capture failed: focused element is not a web editable field", "wide": null }, { "va": "0x190c00d20", "offset": 281018656, "ascii": "Tabbit voice input hotkey target capture failed: no active browser", "wide": null }, { "va": "0x190c00e70", "offset": 281018992, "ascii": "Tabbit voice input hotkey target capture failed: non-web scheme ", "wide": null }, { "va": "0x190c00ec0", "offset": 281019072, "ascii": "Tabbit voice input hotkey target capture failed: focused frame has no render widget host", "wide": null }, { "va": "0x190c00f20", "offset": 281019168, "ascii": "Tabbit voice input hotkey target captured frame=", "wide": null }, { "va": "0x190b98c00", "offset": 280592384, "ascii": "GlobalRenderFrameHostId(", "wide": null }, { "va": "0x1908f0abc", "offset": 277806780, "ascii": " url=", "wide": null }, { "va": "0x190c00f58", "offset": 281019224, "ascii": " focused_editable=", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 13245 }, { "label": "a-voice-refiner-endpoint", "file": "rea-a-voice-refiner-endpoint.json", "file_sha256": "3c94d77253c3eef092386bb4b4cd2899b215996e5581b2dcd859ee6ff1e5dcf2", "status": "completed", "evidence_id": "ev_8e5dc5e7181bc3607cdf2a2bd04703af4f2407810a038ec22946779716402a54", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18366c5a0;pdgo @ 0x18366c5a0;afij @ 0x18366c5a0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18366c5a0", "size": 567, "nargs": 2, "signature": "fcn.18366c5a0(int64_t arg1, int64_t arg_40h);", "callrefs": [ { "from": 6499517897, "to": 6449417312, "type": "CALL" }, { "from": 6499518010, "to": 6449418864, "type": "CALL" }, { "from": 6499518088, "to": 6511483504, "type": "CALL" }, { "from": 6499518113, "to": 6511512544, "type": "CALL" }, { "from": 6499518138, "to": 6511512544, "type": "CALL" }, { "from": 6499518231, "to": 6511483504, "type": "CALL" }, { "from": 6499518271, "to": 6515567520, "type": "CALL" }, { "from": 6499518296, "to": 6511512544, "type": "CALL" }, { "from": 6499518321, "to": 6511512544, "type": "CALL" }, { "from": 6499518376, "to": 6542089024, "type": "CALL" }, { "from": 6499518388, "to": 6542069736, "type": "CALL" }, { "from": 6499518413, "to": 6542069628, "type": "CALL" }, { "from": 6499518418, "to": 6499518002, "type": "CODE" } ], "datarefs": [ { "from": 6499517871, "to": 6740709440, "type": "DATA" }, { "from": 6499517938, "to": 6717673432, "type": "DATA" }, { "from": 6499517965, "to": 6742235372, "type": "DATA" }, { "from": 6499517971, "to": 6741832416, "type": "DATA" }, { "from": 6499518180, "to": 6723468984, "type": "DATA" }, { "from": 6499518337, "to": 6740709440, "type": "DATA" }, { "from": 6499518381, "to": 6742235372, "type": "DATA" }, { "from": 6499518393, "to": 6742235372, "type": "DATA" }, { "from": 6499518406, "to": 6742235372, "type": "DATA" } ] }, "strings": [ { "va": "0x190678fd8", "offset": 275219416, "ascii": "://", "wide": null }, { "va": "0x190bffeb8", "offset": 281014968, "ascii": "/api/v0/asr/rewrite", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5203 }, { "label": "a-voice-refiner", "file": "rea-a-voice-refiner.json", "file_sha256": "4448a0b666ed86c1f924463d9ab23d26aca6e28559c80d2900d69734ca247fe9", "status": "completed", "evidence_id": "ev_da080f15f715b3453ba298bc6c19d0481149573c399d751d26524af6aad088eb", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18366d3e0;pdgo @ 0x18366d3e0;afij @ 0x18366d3e0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18366d3e0", "size": 3474, "nargs": 29, "signature": "fcn.18366d3e0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h, int64_t arg_3fh, int64_t arg_40h, int64_t arg_50h, int64_t arg_90h, int64_t arg_98h, int64_t arg_a8h, int64_t arg_afh, int64_t arg_b0h, int64_t arg_c0h, int64_t arg_c7h, int64_t arg_c8h, int64_t arg_d8h, int64_t arg_e0h, int64_t arg_f0h, int64_t arg_f8h, int64_t arg_108h, int64_t arg_110h, int64_t arg_120h, int64_t arg_128h, int64_t arg_138h, int64_t arg_140h, int64_t arg_288h);", "callrefs": [ { "from": 6499521583, "to": 6488918096, "type": "CALL" }, { "from": 6499521655, "to": 6740346544, "type": "CALL" }, { "from": 6499521746, "to": 6526594288, "type": "CALL" }, { "from": 6499521949, "to": 6740346544, "type": "CALL" }, { "from": 6499521968, "to": 6740346544, "type": "CALL" }, { "from": 6499522003, "to": 6511512544, "type": "CALL" }, { "from": 6499522037, "to": 6511512544, "type": "CALL" }, { "from": 6499522068, "to": 6511512544, "type": "CALL" }, { "from": 6499522093, "to": 6511512544, "type": "CALL" }, { "from": 6499522127, "to": 6511512544, "type": "CALL" }, { "from": 6499522161, "to": 6511512544, "type": "CALL" }, { "from": 6499522195, "to": 6511512544, "type": "CALL" }, { "from": 6499522229, "to": 6511512544, "type": "CALL" }, { "from": 6499522252, "to": 6511512544, "type": "CALL" }, { "from": 6499522303, "to": 6740346544, "type": "CALL" }, { "from": 6499522331, "to": 6511512544, "type": "CALL" }, { "from": 6499522354, "to": 6511512544, "type": "CALL" }, { "from": 6499522422, "to": 6511513840, "type": "CALL" }, { "from": 6499522427, "to": 6499521918, "type": "CODE" }, { "from": 6499522448, "to": 6511513840, "type": "CALL" }, { "from": 6499522453, "to": 6499521837, "type": "CODE" }, { "from": 6499522474, "to": 6511513840, "type": "CALL" }, { "from": 6499522479, "to": 6499521796, "type": "CODE" }, { "from": 6499522500, "to": 6511513840, "type": "CALL" }, { "from": 6499522505, "to": 6499521881, "type": "CODE" }, { "from": 6499522523, "to": 6740346544, "type": "CALL" }, { "from": 6499522529, "to": 6499522269, "type": "CODE" }, { "from": 6499522585, "to": 6499522600, "type": "CODE" }, { "from": 6499522595, "to": 6511513840, "type": "CALL" }, { "from": 6499522605, "to": 6542067384, "type": "CALL" }, { "from": 6499522616, "to": 6525600096, "type": "CALL" }, { "from": 6499522629, "to": 6499517856, "type": "CALL" }, { "from": 6499522646, "to": 6514577840, "type": "CALL" }, { "from": 6499522659, "to": 6511396000, "type": "CALL" }, { "from": 6499522677, "to": 6499522691, "type": "CODE" }, { "from": 6499522723, "to": 6456634672, "type": "CALL" }, { "from": 6499522922, "to": 6515563504, "type": "CALL" }, { "from": 6499523112, "to": 6499523277, "type": "CODE" }, { "from": 6499523358, "to": 6515344192, "type": "CALL" }, { "from": 6499523453, "to": 6511483504, "type": "CALL" }, { "from": 6499523497, "to": 6529293504, "type": "CALL" }, { "from": 6499523535, "to": 6511512544, "type": "CALL" }, { "from": 6499523568, "to": 6512942288, "type": "CALL" }, { "from": 6499523618, "to": 6453036096, "type": "CALL" }, { "from": 6499523653, "to": 6464561680, "type": "CALL" }, { "from": 6499523688, "to": 6464561680, "type": "CALL" }, { "from": 6499523848, "to": 6456090784, "type": "CALL" }, { "from": 6499523890, "to": 6457891536, "type": "CALL" }, { "from": 6499523925, "to": 6511513840, "type": "CALL" }, { "from": 6499523930, "to": 6499524037, "type": "CODE" }, { "from": 6499523962, "to": 6499524037, "type": "CODE" }, { "from": 6499524119, "to": 6456090784, "type": "CALL" }, { "from": 6499524153, "to": 6511512544, "type": "CALL" }, { "from": 6499524205, "to": 6471067168, "type": "CALL" }, { "from": 6499524251, "to": 6628789088, "type": "CALL" }, { "from": 6499524283, "to": 6511512544, "type": "CALL" }, { "from": 6499524337, "to": 6542067384, "type": "CALL" }, { "from": 6499524434, "to": 6474418992, "type": "CALL" }, { "from": 6499524463, "to": 6499522229, "type": "CODE" }, { "from": 6499524494, "to": 6524603600, "type": "CALL" }, { "from": 6499524540, "to": 6511512544, "type": "CALL" }, { "from": 6499524545, "to": 6499524227, "type": "CODE" }, { "from": 6499524583, "to": 6499523270, "type": "CODE" }, { "from": 6499524616, "to": 6499522883, "type": "CODE" }, { "from": 6499524649, "to": 6499523277, "type": "CODE" }, { "from": 6499524690, "to": 6499522883, "type": "CODE" }, { "from": 6499524712, "to": 6511512544, "type": "CALL" }, { "from": 6499524732, "to": 6499522766, "type": "CODE" }, { "from": 6499524754, "to": 6511512544, "type": "CALL" }, { "from": 6499524774, "to": 6499522816, "type": "CODE" }, { "from": 6499524811, "to": 6499523277, "type": "CODE" }, { "from": 6499524833, "to": 6511512544, "type": "CALL" }, { "from": 6499524845, "to": 6499522975, "type": "CODE" }, { "from": 6499524867, "to": 6511512544, "type": "CALL" }, { "from": 6499524879, "to": 6499523033, "type": "CODE" }, { "from": 6499524897, "to": 6542089024, "type": "CALL" }, { "from": 6499524909, "to": 6542753360, "type": "CALL" }, { "from": 6499524939, "to": 6511512544, "type": "CALL" }, { "from": 6499524944, "to": 6499522910, "type": "CODE" }, { "from": 6499524968, "to": 6511512544, "type": "CALL" }, { "from": 6499524973, "to": 6499523291, "type": "CODE" } ], "datarefs": [ { "from": 6499521543, "to": 6740709440, "type": "DATA" }, { "from": 6499521641, "to": 6725895160, "type": "DATA" }, { "from": 6499521736, "to": 6723469024, "type": "DATA" }, { "from": 6499522281, "to": 6725894896, "type": "DATA" }, { "from": 6499522370, "to": 6740709440, "type": "DATA" }, { "from": 6499523301, "to": 6715434912, "type": "DATA" }, { "from": 6499523327, "to": 6712688112, "type": "DATA" }, { "from": 6499523371, "to": 6717200800, "type": "DATA" }, { "from": 6499523458, "to": 6715508808, "type": "DATA" }, { "from": 6499523540, "to": 6723469104, "type": "DATA" }, { "from": 6499523547, "to": 6723469056, "type": "DATA" }, { "from": 6499523725, "to": 6715434912, "type": "DATA" }, { "from": 6499523810, "to": 6714960280, "type": "DATA" }, { "from": 6499523853, "to": 6712261744, "type": "DATA" }, { "from": 6499523880, "to": 6723469008, "type": "DATA" }, { "from": 6499523976, "to": 6718224124, "type": "DATA" }, { "from": 6499524003, "to": 6718224128, "type": "DATA" }, { "from": 6499524016, "to": 6718224124, "type": "DATA" }, { "from": 6499524082, "to": 6715078912, "type": "DATA" }, { "from": 6499524348, "to": 6499528288, "type": "DATA" }, { "from": 6499524359, "to": 6496660576, "type": "DATA" }, { "from": 6499524370, "to": 6496570832, "type": "DATA" }, { "from": 6499524381, "to": 6499524992, "type": "DATA" }, { "from": 6499524902, "to": 6712116352, "type": "DATA" } ] }, "strings": [ { "va": "0x190bffee0", "offset": 281015008, "ascii": "Failed to fetch access token", "wide": null }, { "va": "0x1904567a0", "offset": 272980896, "ascii": "application/json", "wide": null }, { "va": "0x1901b7df0", "offset": 270234096, "ascii": "Content-Type", "wide": null }, { "va": "0x1906059a0", "offset": 274746784, "ascii": "Bearer ", "wide": null }, { "va": "0x190468848", "offset": 273054792, "ascii": "Authorization", "wide": null }, { "va": "0x190bfff30", "offset": 281015088, "ascii": "StartRewriteRequest", "wide": null }, { "va": "0x190bfff00", "offset": 281015040, "ascii": "..\\..\\tab\\browser\\voice_input\\llm_refiner.cc", "wide": null }, { "va": "0x1903e2998", "offset": 272506264, "ascii": "text", "wide": null }, { "va": "0x19014fc70", "offset": 269807728, "ascii": "mode", "wide": null }, { "va": "0x190bffed0", "offset": 281014992, "ascii": "chat_input", "wide": null }, { "va": "0x1906ff6fc", "offset": 275770108, "ascii": "zh-CN", "wide": null }, { "va": "0x1903ff900", "offset": 272624896, "ascii": "language", "wide": null }, { "va": "0x19012c480", "offset": 269662336, "ascii": "std::visit: variant is valueless", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 33519 }, { "label": "a-voice-speech-init", "file": "rea-a-voice-speech-init.json", "file_sha256": "159dc0b520ab248b27e96129c8e4bcb7332df3182a1bdc9579e67bb4ca3d8c45", "status": "completed", "evidence_id": "ev_e85aaf88168e74de5f1d6e1af99d93996fbd2969956cd2d5dddc6f0ca9767ef0", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183676c50;pdgo @ 0x183676c50;afij @ 0x183676c50", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183676c50", "size": 6028, "nargs": 1, "signature": "fcn.183676c50(int64_t arg1);", "callrefs": [ { "from": 6499560611, "to": 6445650832, "type": "CALL" }, { "from": 6499560640, "to": 6524031184, "type": "CALL" }, { "from": 6499560659, "to": 6445656528, "type": "CALL" }, { "from": 6499560723, "to": 6511512544, "type": "CALL" }, { "from": 6499560777, "to": 6511975280, "type": "CALL" }, { "from": 6499560785, "to": 6518967168, "type": "CALL" }, { "from": 6499560793, "to": 6499559696, "type": "CALL" }, { "from": 6499560838, "to": 6740346544, "type": "CALL" }, { "from": 6499560893, "to": 6532074304, "type": "CALL" }, { "from": 6499560906, "to": 6542067384, "type": "CALL" }, { "from": 6499561063, "to": 6511423872, "type": "CALL" }, { "from": 6499561124, "to": 6499561195, "type": "CODE" }, { "from": 6499561130, "to": 6511513840, "type": "CALL" }, { "from": 6499561135, "to": 6499561195, "type": "CODE" }, { "from": 6499561289, "to": 6542067384, "type": "CALL" }, { "from": 6499561373, "to": 6542067384, "type": "CALL" }, { "from": 6499561615, "to": 6512942288, "type": "CALL" }, { "from": 6499561649, "to": 6527502544, "type": "CALL" }, { "from": 6499561672, "to": 6542434496, "type": "CALL" }, { "from": 6499561682, "to": 6542067384, "type": "CALL" }, { "from": 6499561751, "to": 6499578320, "type": "CALL" }, { "from": 6499561764, "to": 6511512544, "type": "CALL" }, { "from": 6499561965, "to": 6449417312, "type": "CALL" }, { "from": 6499562019, "to": 6499562421, "type": "CODE" }, { "from": 6499562035, "to": 6511513840, "type": "CALL" }, { "from": 6499562040, "to": 6499561931, "type": "CODE" }, { "from": 6499562123, "to": 6499561931, "type": "CODE" }, { "from": 6499562133, "to": 6542067384, "type": "CALL" }, { "from": 6499562268, "to": 6499571488, "type": "CALL" }, { "from": 6499562302, "to": 6511512544, "type": "CALL" }, { "from": 6499562307, "to": 6499563524, "type": "CODE" }, { "from": 6499562329, "to": 6542067384, "type": "CALL" }, { "from": 6499562374, "to": 6499562499, "type": "CODE" }, { "from": 6499562432, "to": 6542435920, "type": "CALL" }, { "from": 6499562534, "to": 6542436672, "type": "CALL" }, { "from": 6499562578, "to": 6511512544, "type": "CALL" }, { "from": 6499562715, "to": 6449418864, "type": "CALL" }, { "from": 6499562875, "to": 6512724096, "type": "CALL" }, { "from": 6499563086, "to": 6511483504, "type": "CALL" }, { "from": 6499563144, "to": 6515567520, "type": "CALL" }, { "from": 6499563178, "to": 6511512544, "type": "CALL" }, { "from": 6499563212, "to": 6511512544, "type": "CALL" }, { "from": 6499563246, "to": 6511512544, "type": "CALL" }, { "from": 6499563280, "to": 6511512544, "type": "CALL" }, { "from": 6499563314, "to": 6511512544, "type": "CALL" }, { "from": 6499563338, "to": 6542067384, "type": "CALL" }, { "from": 6499563476, "to": 6499571488, "type": "CALL" }, { "from": 6499563506, "to": 6511512544, "type": "CALL" }, { "from": 6499563519, "to": 6511396000, "type": "CALL" }, { "from": 6499563551, "to": 6499578320, "type": "CALL" }, { "from": 6499563561, "to": 6499563838, "type": "CODE" }, { "from": 6499563571, "to": 6542067384, "type": "CALL" }, { "from": 6499563688, "to": 6499563817, "type": "CODE" }, { "from": 6499563695, "to": 6542067384, "type": "CALL" }, { "from": 6499563828, "to": 6499566560, "type": "CALL" }, { "from": 6499563841, "to": 6511512544, "type": "CALL" }, { "from": 6499563934, "to": 6457891536, "type": "CALL" }, { "from": 6499563974, "to": 6524601072, "type": "CALL" }, { "from": 6499564014, "to": 6524601072, "type": "CALL" }, { "from": 6499564078, "to": 6499564179, "type": "CODE" }, { "from": 6499564099, "to": 6511513840, "type": "CALL" }, { "from": 6499564104, "to": 6499564179, "type": "CODE" }, { "from": 6499564227, "to": 6445282400, "type": "CALL" }, { "from": 6499564257, "to": 6511512544, "type": "CALL" }, { "from": 6499564298, "to": 6457891536, "type": "CALL" }, { "from": 6499564353, "to": 6471067168, "type": "CALL" }, { "from": 6499564438, "to": 6558922784, "type": "CALL" }, { "from": 6499564454, "to": 6499569968, "type": "CALL" }, { "from": 6499564498, "to": 6511512544, "type": "CALL" }, { "from": 6499564554, "to": 6515563504, "type": "CALL" }, { "from": 6499564594, "to": 6522234368, "type": "CALL" }, { "from": 6499564613, "to": 6511682032, "type": "CALL" }, { "from": 6499564639, "to": 6511682032, "type": "CALL" }, { "from": 6499564698, "to": 6532871456, "type": "CALL" }, { "from": 6499564746, "to": 6445650832, "type": "CALL" }, { "from": 6499564775, "to": 6524031184, "type": "CALL" }, { "from": 6499564816, "to": 6524031184, "type": "CALL" }, { "from": 6499564836, "to": 6445656528, "type": "CALL" }, { "from": 6499564913, "to": 6511512544, "type": "CALL" }, { "from": 6499564967, "to": 6511975280, "type": "CALL" }, { "from": 6499564975, "to": 6518967168, "type": "CALL" }, { "from": 6499564992, "to": 6533020784, "type": "CALL" }, { "from": 6499565010, "to": 6740346544, "type": "CALL" }, { "from": 6499565019, "to": 6458342336, "type": "CALL" }, { "from": 6499565112, "to": 6564343184, "type": "CALL" }, { "from": 6499565126, "to": 6577822656, "type": "CALL" }, { "from": 6499565147, "to": 6542067384, "type": "CALL" }, { "from": 6499565158, "to": 6560476576, "type": "CALL" }, { "from": 6499565387, "to": 6740346544, "type": "CALL" }, { "from": 6499565426, "to": 6560778672, "type": "CALL" }, { "from": 6499565439, "to": 6525606240, "type": "CALL" }, { "from": 6499565480, "to": 6511396000, "type": "CALL" }, { "from": 6499565555, "to": 6471274432, "type": "CALL" }, { "from": 6499565601, "to": 6542067384, "type": "CALL" }, { "from": 6499565719, "to": 6442840976, "type": "CALL" }, { "from": 6499565747, "to": 6532074304, "type": "CALL" }, { "from": 6499565773, "to": 6511512544, "type": "CALL" }, { "from": 6499565810, "to": 6511423872, "type": "CALL" }, { "from": 6499565827, "to": 6542067384, "type": "CALL" }, { "from": 6499565897, "to": 6511423872, "type": "CALL" }, { "from": 6499565924, "to": 6463491552, "type": "CALL" }, { "from": 6499565960, "to": 6512942288, "type": "CALL" }, { "from": 6499565991, "to": 6740346544, "type": "CALL" }, { "from": 6499566012, "to": 6499563848, "type": "CODE" }, { "from": 6499566031, "to": 6511512544, "type": "CALL" }, { "from": 6499566036, "to": 6499565765, "type": "CODE" }, { "from": 6499566148, "to": 6511512544, "type": "CALL" }, { "from": 6499566153, "to": 6499565415, "type": "CODE" }, { "from": 6499566170, "to": 6511512544, "type": "CALL" }, { "from": 6499566175, "to": 6499566089, "type": "CODE" }, { "from": 6499566196, "to": 6511512544, "type": "CALL" }, { "from": 6499566201, "to": 6499565458, "type": "CODE" }, { "from": 6499566231, "to": 6524603600, "type": "CALL" }, { "from": 6499566277, "to": 6511512544, "type": "CALL" }, { "from": 6499566282, "to": 6499564375, "type": "CODE" }, { "from": 6499566294, "to": 6542069736, "type": "CALL" }, { "from": 6499566319, "to": 6542069628, "type": "CALL" }, { "from": 6499566324, "to": 6499562704, "type": "CODE" }, { "from": 6499566335, "to": 6542702416, "type": "CALL" }, { "from": 6499566422, "to": 6511512544, "type": "CALL" }, { "from": 6499566427, "to": 6499566010, "type": "CODE" }, { "from": 6499566459, "to": 6740346544, "type": "CALL" }, { "from": 6499566465, "to": 6499560766, "type": "CODE" }, { "from": 6499566510, "to": 6511512544, "type": "CALL" }, { "from": 6499566515, "to": 6499565472, "type": "CODE" }, { "from": 6499566545, "to": 6740346544, "type": "CALL" }, { "from": 6499566551, "to": 6499564956, "type": "CODE" } ], "datarefs": [ { "from": 6499560558, "to": 6742246848, "type": "DATA" }, { "from": 6499560581, "to": 6723474208, "type": "DATA" }, { "from": 6499560624, "to": 6723474280, "type": "DATA" }, { "from": 6499560645, "to": 6710367816, "type": "DATA" }, { "from": 6499560671, "to": 6708900496, "type": "DATA" }, { "from": 6499560686, "to": 6708923712, "type": "DATA" }, { "from": 6499560736, "to": 6708923824, "type": "DATA" }, { "from": 6499560750, "to": 6742217808, "type": "DATA" }, { "from": 6499560811, "to": 6741855512, "type": "DATA" }, { "from": 6499561003, "to": 6710260888, "type": "DATA" }, { "from": 6499561013, "to": 6710260664, "type": "DATA" }, { "from": 6499561024, "to": 6707899440, "type": "DATA" }, { "from": 6499561051, "to": 6741126408, "type": "DATA" }, { "from": 6499561146, "to": 6718224124, "type": "DATA" }, { "from": 6499561175, "to": 6718224128, "type": "DATA" }, { "from": 6499561184, "to": 6718224124, "type": "DATA" }, { "from": 6499561203, "to": 6741832416, "type": "DATA" }, { "from": 6499561342, "to": 6708570464, "type": "DATA" }, { "from": 6499561439, "to": 6708570496, "type": "DATA" }, { "from": 6499561509, "to": 6741832416, "type": "DATA" }, { "from": 6499561584, "to": 6723474776, "type": "DATA" }, { "from": 6499561591, "to": 6723474208, "type": "DATA" }, { "from": 6499562012, "to": 6723475324, "type": "DATA" }, { "from": 6499562054, "to": 6718224124, "type": "DATA" }, { "from": 6499562089, "to": 6718224128, "type": "DATA" }, { "from": 6499562102, "to": 6718224124, "type": "DATA" }, { "from": 6499562189, "to": 6723474344, "type": "DATA" }, { "from": 6499562218, "to": 6723474370, "type": "DATA" }, { "from": 6499562229, "to": 6723474360, "type": "DATA" }, { "from": 6499562240, "to": 6723474344, "type": "DATA" }, { "from": 6499562397, "to": 6715409360, "type": "DATA" }, { "from": 6499562403, "to": 6723475320, "type": "DATA" }, { "from": 6499562410, "to": 6723475324, "type": "DATA" }, { "from": 6499562629, "to": 6717673432, "type": "DATA" }, { "from": 6499562656, "to": 6742235372, "type": "DATA" }, { "from": 6499562662, "to": 6741832416, "type": "DATA" }, { "from": 6499562770, "to": 6723475328, "type": "DATA" }, { "from": 6499562797, "to": 6712480868, "type": "DATA" }, { "from": 6499562880, "to": 6723475404, "type": "DATA" }, { "from": 6499562887, "to": 6723475412, "type": "DATA" }, { "from": 6499562991, "to": 6723475392, "type": "DATA" }, { "from": 6499563394, "to": 6723475232, "type": "DATA" }, { "from": 6499563423, "to": 6723475248, "type": "DATA" }, { "from": 6499563434, "to": 6723475232, "type": "DATA" }, { "from": 6499563630, "to": 6723474160, "type": "DATA" }, { "from": 6499563657, "to": 6723474176, "type": "DATA" }, { "from": 6499563668, "to": 6723474160, "type": "DATA" }, { "from": 6499563754, "to": 6723474344, "type": "DATA" }, { "from": 6499563781, "to": 6723474370, "type": "DATA" }, { "from": 6499563792, "to": 6723474360, "type": "DATA" }, { "from": 6499563803, "to": 6723474344, "type": "DATA" }, { "from": 6499563898, "to": 6712085576, "type": "DATA" }, { "from": 6499563924, "to": 6712258048, "type": "DATA" }, { "from": 6499563939, "to": 6715251672, "type": "DATA" }, { "from": 6499563979, "to": 6715070496, "type": "DATA" }, { "from": 6499564118, "to": 6718224124, "type": "DATA" }, { "from": 6499564145, "to": 6718224128, "type": "DATA" }, { "from": 6499564158, "to": 6718224124, "type": "DATA" }, { "from": 6499564179, "to": 6715078912, "type": "DATA" }, { "from": 6499564262, "to": 6723475424, "type": "DATA" }, { "from": 6499564288, "to": 6712105968, "type": "DATA" }, { "from": 6499564703, "to": 6742246848, "type": "DATA" }, { "from": 6499564716, "to": 6723474208, "type": "DATA" }, { "from": 6499564759, "to": 6723475272, "type": "DATA" }, { "from": 6499564821, "to": 6710367816, "type": "DATA" }, { "from": 6499564849, "to": 6708900496, "type": "DATA" }, { "from": 6499564864, "to": 6708923712, "type": "DATA" }, { "from": 6499564926, "to": 6708923824, "type": "DATA" }, { "from": 6499564940, "to": 6742217808, "type": "DATA" }, { "from": 6499565647, "to": 6710328712, "type": "DATA" }, { "from": 6499565710, "to": 6741126408, "type": "DATA" }, { "from": 6499565789, "to": 6741126408, "type": "DATA" }, { "from": 6499565815, "to": 6741126408, "type": "DATA" }, { "from": 6499565841, "to": 6499585680, "type": "DATA" }, { "from": 6499565852, "to": 6499587088, "type": "DATA" }, { "from": 6499565863, "to": 6511490512, "type": "DATA" }, { "from": 6499565929, "to": 6712266840, "type": "DATA" }, { "from": 6499565936, "to": 6723474208, "type": "DATA" }, { "from": 6499566287, "to": 6742235372, "type": "DATA" }, { "from": 6499566299, "to": 6742235372, "type": "DATA" }, { "from": 6499566312, "to": 6742235372, "type": "DATA" } ] }, "strings": [ { "va": "0x190c01320", "offset": 281020192, "ascii": "..\\..\\tab\\browser\\voice_input\\win\\speech_recognition_engine_win.cc", "wide": null }, { "va": "0x190c01368", "offset": 281020264, "ascii": "Tabbit voice input Windows speech engine Start requested", "wide": null }, { "va": "0x1906ff6fc", "offset": 275770108, "ascii": "zh-CN", "wide": null }, { "va": "0x190c01558", "offset": 281020760, "ascii": "RealtimeAsrWebSocketClient", "wide": null }, { "va": "0x190c0177c", "offset": 281021308, "ascii": "wss", "wide": null }, { "va": "0x190c013a8", "offset": 281020328, "ascii": "Profile is not available for realtime ASR.", "wide": null }, { "va": "0x190c013c2", "offset": 281020354, "ascii": "or realtime ASR.", "wide": null }, { "va": "0x190c013b8", "offset": 281020344, "ascii": "vailable for realtime ASR.", "wide": null }, { "va": "0x1904503d0", "offset": 272955344, "ascii": "http", "wide": null }, { "va": "0x190678fd8", "offset": 275219416, "ascii": "://", "wide": null }, { "va": "0x190c01780", "offset": 281021312, "ascii": "/api/v0/asr/realtime_recognize?voice_format=pcm&engine_type=", "wide": null }, { "va": "0x190c017cc", "offset": 281021388, "ascii": "16k_en", "wide": null }, { "va": "0x190c017d4", "offset": 281021396, "ascii": "16k_zh", "wide": null }, { "va": "0x190c017c0", "offset": 281021376, "ascii": "&language=", "wide": null }, { "va": "0x190c01720", "offset": 281021216, "ascii": "Realtime ASR WebSocket URL is invalid.", "wide": null }, { "va": "0x190c01730", "offset": 281021232, "ascii": "Socket URL is invalid.", "wide": null }, { "va": "0x190c012f0", "offset": 281020144, "ascii": "Microphone input is not available.", "wide": null }, { "va": "0x190c01300", "offset": 281020160, "ascii": " is not available.", "wide": null }, { "va": "0x190124c48", "offset": 269631560, "ascii": "type", "wide": null }, { "va": "0x19014ee00", "offset": 269804032, "ascii": "start", "wide": null }, { "va": "0x190429bd8", "offset": 272797656, "ascii": "sample_rate", "wide": null }, { "va": "0x1903fd820", "offset": 272616480, "ascii": "channels", "wide": null }, { "va": "0x1903ff900", "offset": 272624896, "ascii": "language", "wide": null }, { "va": "0x190c017e0", "offset": 281021408, "ascii": "hotword_list", "wide": null }, { "va": "0x190c01748", "offset": 281021256, "ascii": "Tabbit voice input realtime ASR connecting url=", "wide": null }, { "va": "0x190151058", "offset": 269812824, "ascii": "Start", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 59861 }, { "label": "a-voice-speech-result", "file": "rea-a-voice-speech-result.json", "file_sha256": "b2e8193d071ba8293a6fdff323a96e0e7edcdffc7993eced545b04a0bfec404d", "status": "completed", "evidence_id": "ev_3101d40c9e2e69feeedbe7cf78d44835a0a8fc23f8a20d4e4cae46f73d684ef0", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18367a260;pdgo @ 0x18367a260;afij @ 0x18367a260", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18367a260", "size": 1664, "nargs": 6, "signature": "fcn.18367a260(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h);", "callrefs": [ { "from": 6499574439, "to": 6445650832, "type": "CALL" }, { "from": 6499574465, "to": 6524031184, "type": "CALL" }, { "from": 6499574479, "to": 6446762512, "type": "CALL" }, { "from": 6499574499, "to": 6445656528, "type": "CALL" }, { "from": 6499574570, "to": 6511512544, "type": "CALL" }, { "from": 6499574621, "to": 6511975280, "type": "CALL" }, { "from": 6499574629, "to": 6518967168, "type": "CALL" }, { "from": 6499574675, "to": 6577823552, "type": "CALL" }, { "from": 6499574743, "to": 6577823664, "type": "CALL" }, { "from": 6499574751, "to": 6511633968, "type": "CALL" }, { "from": 6499574913, "to": 6740346544, "type": "CALL" }, { "from": 6499574943, "to": 6740346544, "type": "CALL" }, { "from": 6499574985, "to": 6542067384, "type": "CALL" }, { "from": 6499575033, "to": 6474127984, "type": "CALL" }, { "from": 6499575060, "to": 6472408080, "type": "CALL" }, { "from": 6499575073, "to": 6511512544, "type": "CALL" }, { "from": 6499575089, "to": 6577823312, "type": "CALL" }, { "from": 6499575101, "to": 6560936944, "type": "CALL" }, { "from": 6499575109, "to": 6499568912, "type": "CALL" }, { "from": 6499575129, "to": 6511633968, "type": "CALL" }, { "from": 6499575152, "to": 6560929408, "type": "CALL" }, { "from": 6499575165, "to": 6511512544, "type": "CALL" }, { "from": 6499575303, "to": 6740346544, "type": "CALL" }, { "from": 6499575330, "to": 6740346544, "type": "CALL" }, { "from": 6499575464, "to": 6740346544, "type": "CALL" }, { "from": 6499575491, "to": 6740346544, "type": "CALL" }, { "from": 6499575522, "to": 6740346544, "type": "CALL" }, { "from": 6499575528, "to": 6499575338, "type": "CODE" }, { "from": 6499575536, "to": 6740346544, "type": "CALL" }, { "from": 6499575542, "to": 6499575499, "type": "CODE" }, { "from": 6499575547, "to": 6740346544, "type": "CALL" }, { "from": 6499575553, "to": 6499574964, "type": "CODE" }, { "from": 6499575561, "to": 6740346544, "type": "CALL" }, { "from": 6499575567, "to": 6499575126, "type": "CODE" }, { "from": 6499575683, "to": 6740346544, "type": "CALL" }, { "from": 6499575710, "to": 6740346544, "type": "CALL" }, { "from": 6499575727, "to": 6499575126, "type": "CODE" }, { "from": 6499575739, "to": 6542069736, "type": "CALL" }, { "from": 6499575778, "to": 6542069628, "type": "CALL" }, { "from": 6499575783, "to": 6499575263, "type": "CODE" }, { "from": 6499575795, "to": 6542069736, "type": "CALL" }, { "from": 6499575834, "to": 6542069628, "type": "CALL" }, { "from": 6499575839, "to": 6499575424, "type": "CODE" }, { "from": 6499575851, "to": 6542069736, "type": "CALL" }, { "from": 6499575890, "to": 6542069628, "type": "CALL" }, { "from": 6499575895, "to": 6499574866, "type": "CODE" }, { "from": 6499575907, "to": 6542069736, "type": "CALL" }, { "from": 6499575946, "to": 6542069628, "type": "CALL" }, { "from": 6499575951, "to": 6499575641, "type": "CODE" }, { "from": 6499575956, "to": 6625251072, "type": "CALL" }, { "from": 6499575961, "to": 6499575338, "type": "CODE" }, { "from": 6499575966, "to": 6625251072, "type": "CALL" }, { "from": 6499575971, "to": 6499575499, "type": "CODE" }, { "from": 6499576001, "to": 6740346544, "type": "CALL" }, { "from": 6499576007, "to": 6499574610, "type": "CODE" }, { "from": 6499576012, "to": 6625251072, "type": "CALL" }, { "from": 6499576017, "to": 6499574964, "type": "CODE" }, { "from": 6499576022, "to": 6625251072, "type": "CALL" }, { "from": 6499576027, "to": 6499575126, "type": "CODE" } ], "datarefs": [ { "from": 6499574399, "to": 6742246848, "type": "DATA" }, { "from": 6499574412, "to": 6723474208, "type": "DATA" }, { "from": 6499574449, "to": 6723474904, "type": "DATA" }, { "from": 6499574484, "to": 6710367816, "type": "DATA" }, { "from": 6499574512, "to": 6708900496, "type": "DATA" }, { "from": 6499574524, "to": 6708923712, "type": "DATA" }, { "from": 6499574580, "to": 6708923824, "type": "DATA" }, { "from": 6499574594, "to": 6742217808, "type": "DATA" }, { "from": 6499574793, "to": 6742251808, "type": "DATA" }, { "from": 6499574806, "to": 6742251832, "type": "DATA" }, { "from": 6499574813, "to": 6537719152, "type": "DATA" }, { "from": 6499574829, "to": 6741841128, "type": "DATA" }, { "from": 6499574835, "to": 6741832416, "type": "DATA" }, { "from": 6499574866, "to": 6741832416, "type": "DATA" }, { "from": 6499575190, "to": 6742251808, "type": "DATA" }, { "from": 6499575203, "to": 6742251832, "type": "DATA" }, { "from": 6499575210, "to": 6537719152, "type": "DATA" }, { "from": 6499575226, "to": 6741841128, "type": "DATA" }, { "from": 6499575232, "to": 6741832416, "type": "DATA" }, { "from": 6499575263, "to": 6741832416, "type": "DATA" }, { "from": 6499575351, "to": 6742251808, "type": "DATA" }, { "from": 6499575364, "to": 6742251832, "type": "DATA" }, { "from": 6499575371, "to": 6537719152, "type": "DATA" }, { "from": 6499575387, "to": 6741841128, "type": "DATA" }, { "from": 6499575393, "to": 6741832416, "type": "DATA" }, { "from": 6499575424, "to": 6741832416, "type": "DATA" }, { "from": 6499575572, "to": 6742251808, "type": "DATA" }, { "from": 6499575585, "to": 6742251832, "type": "DATA" }, { "from": 6499575592, "to": 6537719152, "type": "DATA" }, { "from": 6499575604, "to": 6741841128, "type": "DATA" }, { "from": 6499575610, "to": 6741832416, "type": "DATA" }, { "from": 6499575641, "to": 6741832416, "type": "DATA" }, { "from": 6499575732, "to": 6741841128, "type": "DATA" }, { "from": 6499575744, "to": 6741841128, "type": "DATA" }, { "from": 6499575757, "to": 6706346848, "type": "DATA" }, { "from": 6499575764, "to": 6741841120, "type": "DATA" }, { "from": 6499575771, "to": 6741841128, "type": "DATA" }, { "from": 6499575788, "to": 6741841128, "type": "DATA" }, { "from": 6499575800, "to": 6741841128, "type": "DATA" }, { "from": 6499575813, "to": 6706346848, "type": "DATA" }, { "from": 6499575820, "to": 6741841120, "type": "DATA" }, { "from": 6499575827, "to": 6741841128, "type": "DATA" }, { "from": 6499575844, "to": 6741841128, "type": "DATA" }, { "from": 6499575856, "to": 6741841128, "type": "DATA" }, { "from": 6499575869, "to": 6706346848, "type": "DATA" }, { "from": 6499575876, "to": 6741841120, "type": "DATA" }, { "from": 6499575883, "to": 6741841128, "type": "DATA" }, { "from": 6499575900, "to": 6741841128, "type": "DATA" }, { "from": 6499575912, "to": 6741841128, "type": "DATA" }, { "from": 6499575925, "to": 6706346848, "type": "DATA" }, { "from": 6499575932, "to": 6741841120, "type": "DATA" }, { "from": 6499575939, "to": 6741841128, "type": "DATA" } ] }, "strings": [ { "va": "0x190c01320", "offset": 281020192, "ascii": "..\\..\\tab\\browser\\voice_input\\win\\speech_recognition_engine_win.cc", "wide": null }, { "va": "0x190c015d8", "offset": 281020888, "ascii": "Tabbit voice input realtime ASR connected status=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 12944 }, { "label": "b-agent-caller-seams-aligned", "file": "rea-b-agent-caller-seams-aligned.json", "file_sha256": "b8e2e518f0e425085119d5504d7366f306f90ea194dcf5d09681b5ac55066b27", "status": "completed", "evidence_id": "ev_6ef3f1335dfa1788a0e8f7b6ff400e5b61e8632264691b505745d2215c028efd", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;pd 7 @ 0x1837cbc99;pd 7 @ 0x1837dfe0b;pd 7 @ 0x183812422;pd 7 @ 0x183823940;pd 7 @ 0x1837fb8a4;pd 7 @ 0x1836821bb", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": null, "strings": [], "imports": [], "status_display": "汇编核对", "record_kind": "assembly", "pseudocode_chars": 2352 }, { "label": "b-agent-caller-seams", "file": "rea-b-agent-caller-seams.json", "file_sha256": "832e9e90de96d51ea354fb914ef33ee22ce4e1e81bbdbe541a2cdf3fc4c13f62", "status": "completed", "evidence_id": "ev_550f235e7ac8d1ac6e9a35d59134c690657ada2c842429dc5a51495888e0892f", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;pd 12 @ 0x1837cbc80;pd 12 @ 0x1837dfe00;pd 12 @ 0x183812410;pd 12 @ 0x183823930;pd 12 @ 0x1837fb895;pd 12 @ 0x1836821a8", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": null, "strings": [], "imports": [], "status_display": "已由对齐汇编替代", "record_kind": "assembly", "pseudocode_chars": 3921 }, { "label": "b-agent-cdp-dispatch", "file": "rea-b-agent-cdp-dispatch.json", "file_sha256": "cccd825f570511f3240d9cc93c6c3985f4d3f6b0a101b2dbe55f68f0cac2e61f", "status": "completed", "evidence_id": "ev_0d08d67aea27114ec49e4d260821f0b2c7abb8408aa9ff319f3b1b402c710fbe", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837cb3c0;pdgo @ 0x1837cb3c0;afij @ 0x1837cb3c0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837cb3c0", "size": 18944, "nargs": 4, "signature": "fcn.1837cb3c0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6500955185, "to": 6529825440, "type": "CALL" }, { "from": 6500955219, "to": 6447834288, "type": "CALL" }, { "from": 6500955279, "to": 6447834288, "type": "CALL" }, { "from": 6500955431, "to": 6519178480, "type": "CALL" }, { "from": 6500955454, "to": 6529736720, "type": "CALL" }, { "from": 6500955521, "to": 6511512544, "type": "CALL" }, { "from": 6500955555, "to": 6464972032, "type": "CALL" }, { "from": 6500955649, "to": 6456090784, "type": "CALL" }, { "from": 6500955772, "to": 6500974016, "type": "CALL" }, { "from": 6500956118, "to": 6511512544, "type": "CALL" }, { "from": 6500956152, "to": 6511512544, "type": "CALL" }, { "from": 6500956196, "to": 6511512544, "type": "CALL" }, { "from": 6500956230, "to": 6511512544, "type": "CALL" }, { "from": 6500956264, "to": 6511512544, "type": "CALL" }, { "from": 6500956319, "to": 6500958515, "type": "CODE" }, { "from": 6500956496, "to": 6500960867, "type": "CODE" }, { "from": 6500956511, "to": 6500956553, "type": "CODE" }, { "from": 6500956521, "to": 6500956815, "type": "CODE" }, { "from": 6500956534, "to": 6537277856, "type": "CALL" }, { "from": 6500956833, "to": 6542434064, "type": "CALL" }, { "from": 6500956852, "to": 6582659264, "type": "CALL" }, { "from": 6500956872, "to": 6500979008, "type": "CALL" }, { "from": 6500957098, "to": 6500957151, "type": "CODE" }, { "from": 6500957111, "to": 6500956919, "type": "CODE" }, { "from": 6500957146, "to": 6447834288, "type": "CALL" }, { "from": 6500957337, "to": 6500944080, "type": "CALL" }, { "from": 6500957453, "to": 6500957474, "type": "CODE" }, { "from": 6500957504, "to": 6500957587, "type": "CODE" }, { "from": 6500957595, "to": 6542435920, "type": "CALL" }, { "from": 6500957653, "to": 6500958003, "type": "CODE" }, { "from": 6500957687, "to": 6514584544, "type": "CALL" }, { "from": 6500957847, "to": 6500958003, "type": "CODE" }, { "from": 6500958006, "to": 6500954032, "type": "CALL" }, { "from": 6500958369, "to": 6511512544, "type": "CALL" }, { "from": 6500958403, "to": 6511512544, "type": "CALL" }, { "from": 6500958447, "to": 6511512544, "type": "CALL" }, { "from": 6500958481, "to": 6511512544, "type": "CALL" }, { "from": 6500958515, "to": 6511512544, "type": "CALL" }, { "from": 6500958544, "to": 6511512544, "type": "CALL" }, { "from": 6500958639, "to": 6524603600, "type": "CALL" }, { "from": 6500958673, "to": 6511512544, "type": "CALL" }, { "from": 6500958678, "to": 6500958558, "type": "CODE" }, { "from": 6500958728, "to": 6500958764, "type": "CODE" }, { "from": 6500958734, "to": 6542434064, "type": "CALL" }, { "from": 6500958784, "to": 6583190128, "type": "CALL" }, { "from": 6500958913, "to": 6500958734, "type": "CODE" }, { "from": 6500958938, "to": 6500959118, "type": "CODE" }, { "from": 6500958972, "to": 6514584544, "type": "CALL" }, { "from": 6500959030, "to": 6514584544, "type": "CALL" }, { "from": 6500959082, "to": 6500981408, "type": "CALL" }, { "from": 6500959305, "to": 6500958003, "type": "CODE" }, { "from": 6500959329, "to": 6511513840, "type": "CALL" }, { "from": 6500959339, "to": 6500959863, "type": "CODE" }, { "from": 6500959355, "to": 6511513840, "type": "CALL" }, { "from": 6500959360, "to": 6500959624, "type": "CODE" }, { "from": 6500959399, "to": 6519178480, "type": "CALL" }, { "from": 6500959422, "to": 6529736720, "type": "CALL" }, { "from": 6500959489, "to": 6511512544, "type": "CALL" }, { "from": 6500959572, "to": 6456090784, "type": "CALL" }, { "from": 6500959770, "to": 6500974016, "type": "CALL" }, { "from": 6500960214, "to": 6511512544, "type": "CALL" }, { "from": 6500960248, "to": 6511512544, "type": "CALL" }, { "from": 6500960292, "to": 6511512544, "type": "CALL" }, { "from": 6500960326, "to": 6511512544, "type": "CALL" }, { "from": 6500960360, "to": 6511512544, "type": "CALL" }, { "from": 6500960407, "to": 6511512544, "type": "CALL" }, { "from": 6500960417, "to": 6500958520, "type": "CODE" }, { "from": 6500960432, "to": 6511513840, "type": "CALL" }, { "from": 6500960442, "to": 6500959899, "type": "CODE" }, { "from": 6500960472, "to": 6524603600, "type": "CALL" }, { "from": 6500960518, "to": 6511512544, "type": "CALL" }, { "from": 6500960523, "to": 6500960378, "type": "CODE" }, { "from": 6500960679, "to": 6500958003, "type": "CODE" }, { "from": 6500960703, "to": 6511512544, "type": "CALL" }, { "from": 6500960737, "to": 6511512544, "type": "CALL" }, { "from": 6500960781, "to": 6511512544, "type": "CALL" }, { "from": 6500960815, "to": 6511512544, "type": "CALL" }, { "from": 6500960849, "to": 6511512544, "type": "CALL" }, { "from": 6500960906, "to": 6500950496, "type": "CALL" }, { "from": 6500961227, "to": 6500960684, "type": "CODE" }, { "from": 6500961334, "to": 6500974016, "type": "CALL" }, { "from": 6500961690, "to": 6511512544, "type": "CALL" }, { "from": 6500961724, "to": 6511512544, "type": "CALL" }, { "from": 6500961768, "to": 6511512544, "type": "CALL" }, { "from": 6500961802, "to": 6511512544, "type": "CALL" }, { "from": 6500961837, "to": 6500956316, "type": "CODE" }, { "from": 6500961902, "to": 6500961942, "type": "CODE" }, { "from": 6500962013, "to": 6500974016, "type": "CALL" }, { "from": 6500962045, "to": 6500958045, "type": "CODE" }, { "from": 6500962161, "to": 6500962010, "type": "CODE" }, { "from": 6500962479, "to": 6500962514, "type": "CODE" }, { "from": 6500962586, "to": 6500958003, "type": "CODE" }, { "from": 6500962836, "to": 6529736720, "type": "CALL" }, { "from": 6500962903, "to": 6511512544, "type": "CALL" }, { "from": 6500962963, "to": 6457891536, "type": "CALL" }, { "from": 6500963037, "to": 6456090784, "type": "CALL" }, { "from": 6500963078, "to": 6457891536, "type": "CALL" }, { "from": 6500963094, "to": 6447082336, "type": "CALL" }, { "from": 6500963131, "to": 6445282400, "type": "CALL" }, { "from": 6500963162, "to": 6511512544, "type": "CALL" }, { "from": 6500963211, "to": 6457891536, "type": "CALL" }, { "from": 6500963341, "to": 6500974016, "type": "CALL" }, { "from": 6500963687, "to": 6511512544, "type": "CALL" }, { "from": 6500963721, "to": 6511512544, "type": "CALL" }, { "from": 6500963765, "to": 6511512544, "type": "CALL" }, { "from": 6500963799, "to": 6511512544, "type": "CALL" }, { "from": 6500963833, "to": 6511512544, "type": "CALL" }, { "from": 6500963880, "to": 6524603600, "type": "CALL" }, { "from": 6500963922, "to": 6500963991, "type": "CODE" }, { "from": 6500963949, "to": 6524603600, "type": "CALL" }, { "from": 6500963995, "to": 6511512544, "type": "CALL" }, { "from": 6500964000, "to": 6500956286, "type": "CODE" }, { "from": 6500964017, "to": 6500957293, "type": "CODE" }, { "from": 6500964057, "to": 6500981408, "type": "CALL" }, { "from": 6500964154, "to": 6500964160, "type": "CODE" }, { "from": 6500964163, "to": 6542434064, "type": "CALL" }, { "from": 6500964255, "to": 6500964280, "type": "CODE" }, { "from": 6500964352, "to": 6500958003, "type": "CODE" }, { "from": 6500964364, "to": 6500964467, "type": "CODE" }, { "from": 6500964396, "to": 6500964575, "type": "CODE" }, { "from": 6500964432, "to": 6514584544, "type": "CALL" }, { "from": 6500964520, "to": 6526592128, "type": "CALL" }, { "from": 6500964562, "to": 6446063536, "type": "CALL" }, { "from": 6500964630, "to": 6500964756, "type": "CODE" }, { "from": 6500964657, "to": 6524603600, "type": "CALL" }, { "from": 6500964708, "to": 6511512544, "type": "CALL" }, { "from": 6500964713, "to": 6500964575, "type": "CODE" }, { "from": 6500964861, "to": 6500974016, "type": "CALL" }, { "from": 6500965217, "to": 6511512544, "type": "CALL" }, { "from": 6500965251, "to": 6511512544, "type": "CALL" }, { "from": 6500965295, "to": 6511512544, "type": "CALL" }, { "from": 6500965329, "to": 6511512544, "type": "CALL" }, { "from": 6500965363, "to": 6511512544, "type": "CALL" }, { "from": 6500965410, "to": 6524603600, "type": "CALL" }, { "from": 6500965456, "to": 6500958515, "type": "CODE" }, { "from": 6500965464, "to": 6500957103, "type": "CODE" }, { "from": 6500965475, "to": 6500957105, "type": "CODE" }, { "from": 6500965568, "to": 6542067384, "type": "CALL" }, { "from": 6500965584, "to": 6500965588, "type": "CODE" }, { "from": 6500965720, "to": 6500965735, "type": "CODE" }, { "from": 6500965730, "to": 6511513840, "type": "CALL" }, { "from": 6500965787, "to": 6542436672, "type": "CALL" }, { "from": 6500965833, "to": 6542436672, "type": "CALL" }, { "from": 6500965902, "to": 6549090144, "type": "CALL" }, { "from": 6500965920, "to": 6500966395, "type": "CODE" }, { "from": 6500965991, "to": 6500966009, "type": "CODE" }, { "from": 6500966004, "to": 6511513840, "type": "CALL" }, { "from": 6500966022, "to": 6549818240, "type": "CALL" }, { "from": 6500966071, "to": 6500965907, "type": "CODE" }, { "from": 6500966084, "to": 6511729936, "type": "CALL" }, { "from": 6500966094, "to": 6500966395, "type": "CODE" }, { "from": 6500966164, "to": 6500966395, "type": "CODE" }, { "from": 6500966206, "to": 6500966169, "type": "CODE" }, { "from": 6500966216, "to": 6511513840, "type": "CALL" }, { "from": 6500966226, "to": 6500966372, "type": "CODE" }, { "from": 6500966241, "to": 6511513840, "type": "CALL" }, { "from": 6500966251, "to": 6500966441, "type": "CODE" }, { "from": 6500966833, "to": 6511512544, "type": "CALL" }, { "from": 6500966867, "to": 6511512544, "type": "CALL" }, { "from": 6500966911, "to": 6511512544, "type": "CALL" }, { "from": 6500966945, "to": 6511512544, "type": "CALL" }, { "from": 6500966980, "to": 6500968767, "type": "CODE" }, { "from": 6500967097, "to": 6500954032, "type": "CALL" }, { "from": 6500967414, "to": 6500961232, "type": "CODE" }, { "from": 6500967579, "to": 6500966190, "type": "CODE" }, { "from": 6500967599, "to": 6511513840, "type": "CALL" }, { "from": 6500967604, "to": 6500967673, "type": "CODE" }, { "from": 6500967711, "to": 6455871936, "type": "CALL" }, { "from": 6500967749, "to": 6447834288, "type": "CALL" }, { "from": 6500967897, "to": 6471067168, "type": "CALL" }, { "from": 6500967951, "to": 6500968119, "type": "CODE" }, { "from": 6500967978, "to": 6500967816, "type": "CODE" }, { "from": 6500967993, "to": 6511513840, "type": "CALL" }, { "from": 6500967998, "to": 6500967816, "type": "CODE" }, { "from": 6500968022, "to": 6511513840, "type": "CALL" }, { "from": 6500968027, "to": 6500968114, "type": "CODE" }, { "from": 6500968051, "to": 6524603600, "type": "CALL" }, { "from": 6500968088, "to": 6511512544, "type": "CALL" }, { "from": 6500968098, "to": 6500968175, "type": "CODE" }, { "from": 6500968148, "to": 6511512544, "type": "CALL" }, { "from": 6500968586, "to": 6511512544, "type": "CALL" }, { "from": 6500968620, "to": 6511512544, "type": "CALL" }, { "from": 6500968664, "to": 6511512544, "type": "CALL" }, { "from": 6500968698, "to": 6511512544, "type": "CALL" }, { "from": 6500968732, "to": 6511512544, "type": "CALL" }, { "from": 6500968770, "to": 6500958515, "type": "CODE" }, { "from": 6500968782, "to": 6500957027, "type": "CODE" }, { "from": 6500968915, "to": 6500969085, "type": "CODE" }, { "from": 6500968935, "to": 6511513840, "type": "CALL" }, { "from": 6500968940, "to": 6500968912, "type": "CODE" }, { "from": 6500968974, "to": 6514584544, "type": "CALL" }, { "from": 6500969148, "to": 6515567520, "type": "CALL" }, { "from": 6500969182, "to": 6511512544, "type": "CALL" }, { "from": 6500969215, "to": 6500943344, "type": "CALL" }, { "from": 6500969538, "to": 6500969884, "type": "CODE" }, { "from": 6500969553, "to": 6511513840, "type": "CALL" }, { "from": 6500969558, "to": 6500969330, "type": "CODE" }, { "from": 6500969680, "to": 6500954032, "type": "CALL" }, { "from": 6500970031, "to": 6511512544, "type": "CALL" }, { "from": 6500970065, "to": 6511512544, "type": "CALL" }, { "from": 6500970109, "to": 6511512544, "type": "CALL" }, { "from": 6500970143, "to": 6511512544, "type": "CALL" }, { "from": 6500970181, "to": 6500971331, "type": "CODE" }, { "from": 6500970309, "to": 6500970479, "type": "CODE" }, { "from": 6500970329, "to": 6511513840, "type": "CALL" }, { "from": 6500970334, "to": 6500970306, "type": "CODE" }, { "from": 6500970371, "to": 6514584544, "type": "CALL" }, { "from": 6500970532, "to": 6515567520, "type": "CALL" }, { "from": 6500970576, "to": 6511512544, "type": "CALL" }, { "from": 6500970605, "to": 6500943344, "type": "CALL" }, { "from": 6500970622, "to": 6511396000, "type": "CALL" }, { "from": 6500970637, "to": 6500967495, "type": "CODE" }, { "from": 6500970712, "to": 6500970757, "type": "CODE" }, { "from": 6500970832, "to": 6500954032, "type": "CALL" }, { "from": 6500971185, "to": 6511512544, "type": "CALL" }, { "from": 6500971219, "to": 6511512544, "type": "CALL" }, { "from": 6500971263, "to": 6511512544, "type": "CALL" }, { "from": 6500971297, "to": 6511512544, "type": "CALL" }, { "from": 6500971331, "to": 6511512544, "type": "CALL" }, { "from": 6500971344, "to": 6511396000, "type": "CALL" }, { "from": 6500971349, "to": 6500958520, "type": "CODE" }, { "from": 6500971361, "to": 6500957063, "type": "CODE" }, { "from": 6500971418, "to": 6524601072, "type": "CALL" }, { "from": 6500971455, "to": 6524601072, "type": "CALL" }, { "from": 6500971495, "to": 6524601072, "type": "CALL" }, { "from": 6500971536, "to": 6524601072, "type": "CALL" }, { "from": 6500971577, "to": 6457891536, "type": "CALL" }, { "from": 6500971633, "to": 6524601072, "type": "CALL" }, { "from": 6500971666, "to": 6446063536, "type": "CALL" }, { "from": 6500971788, "to": 6500974016, "type": "CALL" }, { "from": 6500972144, "to": 6511512544, "type": "CALL" }, { "from": 6500972178, "to": 6511512544, "type": "CALL" }, { "from": 6500972222, "to": 6511512544, "type": "CALL" }, { "from": 6500972256, "to": 6511512544, "type": "CALL" }, { "from": 6500972290, "to": 6511512544, "type": "CALL" }, { "from": 6500972354, "to": 6524603600, "type": "CALL" }, { "from": 6500972365, "to": 6500965421, "type": "CODE" }, { "from": 6500972395, "to": 6524603600, "type": "CALL" }, { "from": 6500972441, "to": 6511512544, "type": "CALL" }, { "from": 6500972446, "to": 6500972308, "type": "CODE" }, { "from": 6500972459, "to": 6500980560, "type": "CALL" }, { "from": 6500972469, "to": 6500961187, "type": "CODE" }, { "from": 6500972484, "to": 6511513840, "type": "CALL" }, { "from": 6500972489, "to": 6500972611, "type": "CODE" }, { "from": 6500972539, "to": 6500972616, "type": "CODE" }, { "from": 6500972570, "to": 6514584544, "type": "CALL" }, { "from": 6500972946, "to": 6500958290, "type": "CODE" }, { "from": 6500972959, "to": 6500980560, "type": "CALL" }, { "from": 6500972969, "to": 6500958290, "type": "CODE" }, { "from": 6500972984, "to": 6511513840, "type": "CALL" }, { "from": 6500972989, "to": 6500973268, "type": "CODE" }, { "from": 6500973007, "to": 6511513840, "type": "CALL" }, { "from": 6500973012, "to": 6500973083, "type": "CODE" }, { "from": 6500973031, "to": 6500925920, "type": "CALL" }, { "from": 6500973192, "to": 6500974016, "type": "CALL" }, { "from": 6500973529, "to": 6500958290, "type": "CODE" }, { "from": 6500973542, "to": 6500980560, "type": "CALL" }, { "from": 6500973552, "to": 6500956049, "type": "CODE" }, { "from": 6500973565, "to": 6500980560, "type": "CALL" }, { "from": 6500973585, "to": 6500961621, "type": "CODE" }, { "from": 6500973598, "to": 6500980560, "type": "CALL" }, { "from": 6500973608, "to": 6500960142, "type": "CODE" }, { "from": 6500973629, "to": 6511730288, "type": "CALL" }, { "from": 6500973649, "to": 6500965917, "type": "CODE" }, { "from": 6500973675, "to": 6542067384, "type": "CALL" }, { "from": 6500973746, "to": 6549090144, "type": "CALL" }, { "from": 6500973751, "to": 6500965667, "type": "CODE" }, { "from": 6500973764, "to": 6500980560, "type": "CALL" }, { "from": 6500973774, "to": 6500965138, "type": "CODE" }, { "from": 6500973787, "to": 6500980560, "type": "CALL" }, { "from": 6500973800, "to": 6500968517, "type": "CODE" }, { "from": 6500973816, "to": 6511512544, "type": "CALL" }, { "from": 6500973821, "to": 6500966055, "type": "CODE" }, { "from": 6500973837, "to": 6500980560, "type": "CALL" }, { "from": 6500973847, "to": 6500966764, "type": "CODE" }, { "from": 6500973863, "to": 6542089024, "type": "CALL" }, { "from": 6500973876, "to": 6500980560, "type": "CALL" }, { "from": 6500973886, "to": 6500967374, "type": "CODE" }, { "from": 6500973899, "to": 6500980560, "type": "CALL" }, { "from": 6500973909, "to": 6500971116, "type": "CODE" }, { "from": 6500973922, "to": 6500980560, "type": "CALL" }, { "from": 6500973932, "to": 6500972065, "type": "CODE" }, { "from": 6500973945, "to": 6500980560, "type": "CALL" }, { "from": 6500973955, "to": 6500969962, "type": "CODE" }, { "from": 6500973968, "to": 6500980560, "type": "CALL" }, { "from": 6500973978, "to": 6500963618, "type": "CODE" }, { "from": 6500973983, "to": 6545792064, "type": "CALL" }, { "from": 6500973988, "to": 6543271376, "type": "CALL" }, { "from": 6500974001, "to": 6500974006, "type": "CODE" }, { "from": 6500974011, "to": 6500959046, "type": "CODE" } ], "datarefs": [ { "from": 6500955108, "to": 6740709440, "type": "DATA" }, { "from": 6500955156, "to": 6712172456, "type": "DATA" }, { "from": 6500955190, "to": 6715118800, "type": "DATA" }, { "from": 6500955250, "to": 6716731936, "type": "DATA" }, { "from": 6500955436, "to": 6723604368, "type": "DATA" }, { "from": 6500956387, "to": 6717276840, "type": "DATA" }, { "from": 6500956976, "to": 6723603912, "type": "DATA" }, { "from": 6500957120, "to": 6717270928, "type": "DATA" }, { "from": 6500957497, "to": 6723604768, "type": "DATA" }, { "from": 6500957537, "to": 6723603784, "type": "DATA" }, { "from": 6500957569, "to": 6723604624, "type": "DATA" }, { "from": 6500957576, "to": 6723604768, "type": "DATA" }, { "from": 6500957658, "to": 6723604496, "type": "DATA" }, { "from": 6500957775, "to": 6723604520, "type": "DATA" }, { "from": 6500957926, "to": 6723604520, "type": "DATA" }, { "from": 6500958569, "to": 6740709440, "type": "DATA" }, { "from": 6500958943, "to": 6723604384, "type": "DATA" }, { "from": 6500959001, "to": 6723604400, "type": "DATA" }, { "from": 6500959212, "to": 6723604440, "type": "DATA" }, { "from": 6500959219, "to": 6723604416, "type": "DATA" }, { "from": 6500959404, "to": 6723604480, "type": "DATA" }, { "from": 6500960607, "to": 6723604560, "type": "DATA" }, { "from": 6500962514, "to": 6723604848, "type": "DATA" }, { "from": 6500962623, "to": 6723603888, "type": "DATA" }, { "from": 6500962687, "to": 6723603936, "type": "DATA" }, { "from": 6500962740, "to": 6715272624, "type": "DATA" }, { "from": 6500962785, "to": 6715272629, "type": "DATA" }, { "from": 6500962804, "to": 6715272624, "type": "DATA" }, { "from": 6500962818, "to": 6713497952, "type": "DATA" }, { "from": 6500962927, "to": 6717232912, "type": "DATA" }, { "from": 6500962953, "to": 6713564312, "type": "DATA" }, { "from": 6500963008, "to": 6715376440, "type": "DATA" }, { "from": 6500963042, "to": 6713633560, "type": "DATA" }, { "from": 6500963068, "to": 6712105968, "type": "DATA" }, { "from": 6500963099, "to": 6717232928, "type": "DATA" }, { "from": 6500963167, "to": 6717232944, "type": "DATA" }, { "from": 6500963193, "to": 6712105968, "type": "DATA" }, { "from": 6500964280, "to": 6723604416, "type": "DATA" }, { "from": 6500964401, "to": 6723604384, "type": "DATA" }, { "from": 6500964525, "to": 6717275552, "type": "DATA" }, { "from": 6500967024, "to": 6723604912, "type": "DATA" }, { "from": 6500967468, "to": 6717265256, "type": "DATA" }, { "from": 6500967479, "to": 6717265261, "type": "DATA" }, { "from": 6500967688, "to": 6716731936, "type": "DATA" }, { "from": 6500967720, "to": 6717270928, "type": "DATA" }, { "from": 6500968942, "to": 6723604800, "type": "DATA" }, { "from": 6500969605, "to": 6723604816, "type": "DATA" }, { "from": 6500970336, "to": 6723604800, "type": "DATA" }, { "from": 6500970757, "to": 6723604880, "type": "DATA" }, { "from": 6500971386, "to": 6712480888, "type": "DATA" }, { "from": 6500971423, "to": 6712480884, "type": "DATA" }, { "from": 6500971460, "to": 6712479220, "type": "DATA" }, { "from": 6500971500, "to": 6712479228, "type": "DATA" }, { "from": 6500971541, "to": 6717277840, "type": "DATA" }, { "from": 6500971567, "to": 6712585036, "type": "DATA" }, { "from": 6500971598, "to": 6718039056, "type": "DATA" }, { "from": 6500971638, "to": 6712589080, "type": "DATA" }, { "from": 6500972541, "to": 6723604384, "type": "DATA" } ] }, "strings": [ { "va": "0x1904094d0", "offset": 272664784, "ascii": "method", "wide": null }, { "va": "0x190593220", "offset": 274277920, "ascii": "sessionId", "wide": null }, { "va": "0x190c20f90", "offset": 281150352, "ascii": "tabbit-browser-", "wide": null }, { "va": "0x1906182a8", "offset": 274822824, "ascii": "tach", "wide": null }, { "va": "0x190c20dc8", "offset": 281149896, "ascii": "Info", "wide": null }, { "va": "0x190616b90", "offset": 274816912, "ascii": "targetId", "wide": null }, { "va": "0x190c21120", "offset": 281150752, "ascii": "Command rejected by TabbitDance", "wide": null }, { "va": "0x190c21090", "offset": 281150608, "ascii": "foregroundPolicy=preserve; use usePage(page) to select a page without focusing it, or request --foreground when creating or reusing the task.", "wide": null }, { "va": "0x190c21010", "offset": 281150480, "ascii": "params.sessionId", "wide": null }, { "va": "0x190c21028", "offset": 281150504, "ascii": "Unknown or detached sessionId", "wide": null }, { "va": "0x190c20fa0", "offset": 281150368, "ascii": "params.targetId", "wide": null }, { "va": "0x190c20fb0", "offset": 281150384, "ascii": "params.flatten", "wide": null }, { "va": "0x190c20fd8", "offset": 281150424, "ascii": "Only flat CDP sessions are supported", "wide": null }, { "va": "0x190c20fc0", "offset": 281150400, "ascii": "Unknown targetId", "wide": null }, { "va": "0x190c21000", "offset": 281150464, "ascii": "tabbit-cdp-", "wide": null }, { "va": "0x190c21050", "offset": 281150544, "ascii": "Browser and Target commands are unavailable in raw CDP sessions", "wide": null }, { "va": "0x190c21170", "offset": 281150832, "ascii": "Synthetic command unavailable", "wide": null }, { "va": "0x19042edb0", "offset": 272818608, "ascii": "154.0.8037.58", "wide": null }, { "va": "0x19042edb5", "offset": 272818613, "ascii": ".8037.58", "wide": null }, { "va": "0x19027d960", "offset": 271043936, "ascii": "Chrome/", "wide": null }, { "va": "0x19060d710", "offset": 274778896, "ascii": "protocolVersion", "wide": null }, { "va": "0x19028dc98", "offset": 271110296, "ascii": "1.3", "wide": null }, { "va": "0x190448338", "offset": 272922424, "ascii": "product", "wide": null }, { "va": "0x19029eb18", "offset": 271179544, "ascii": "revision", "wide": null }, { "va": "0x19060d720", "offset": 274778912, "ascii": "userAgent", "wide": null }, { "va": "0x19060d730", "offset": 274778928, "ascii": "jsVersion", "wide": null }, { "va": "0x190617da0", "offset": 274821536, "ascii": "targetInfo", "wide": null }, { "va": "0x190c211b0", "offset": 281150896, "ascii": "No session target is available", "wide": null }, { "va": "0x190615568", "offset": 274811240, "ascii": "Page.navigate", "wide": null }, { "va": "0x19061556d", "offset": 274811245, "ascii": "navigate", "wide": null }, { "va": "0x190c21140", "offset": 281150784, "ascii": "params.url", "wide": null }, { "va": "0x190c21150", "offset": 281150800, "ascii": "Target URL is not allowed", "wide": null }, { "va": "0x190c21190", "offset": 281150864, "ascii": "Navigation URL is not allowed", "wide": null }, { "va": "0x190185478", "offset": 270026872, "ascii": "left", "wide": null }, { "va": "0x190185474", "offset": 270026868, "ascii": "top", "wide": null }, { "va": "0x190184df4", "offset": 270025204, "ascii": "width", "wide": null }, { "va": "0x190184dfc", "offset": 270025212, "ascii": "height", "wide": null }, { "va": "0x190618690", "offset": 274823824, "ascii": "windowState", "wide": null }, { "va": "0x19019eb4c", "offset": 270131020, "ascii": "normal", "wide": null }, { "va": "0x1906d2410", "offset": 275585040, "ascii": "windowId", "wide": null }, { "va": "0x19019fb18", "offset": 270135064, "ascii": "bounds", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 274652 }, { "label": "b-agent-cdp-policy-check", "file": "rea-b-agent-cdp-policy-check.json", "file_sha256": "f3eb5528569d6f8d642a9eac98a2a118181427c7bbb78438a41b614ed5eced39", "status": "completed", "evidence_id": "ev_3ab9acf42d61bc05a8a396f4f117494587386f5210dc0e0e3ad932f561578829", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837c88d0;pdgo @ 0x1837c88d0;afij @ 0x1837c88d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837c88d0", "size": 1037, "nargs": 3, "signature": "fcn.1837c88d0(int64_t arg1, int64_t arg2, int64_t arg4);", "callrefs": [ { "from": 6500944158, "to": 6500944414, "type": "CODE" }, { "from": 6500944274, "to": 6500944414, "type": "CODE" }, { "from": 6500944307, "to": 6500944309, "type": "CODE" }, { "from": 6500944307, "to": 6500944339, "type": "CODE" }, { "from": 6500944307, "to": 6500944382, "type": "CODE" }, { "from": 6500944307, "to": 6500944470, "type": "CODE" }, { "from": 6500944307, "to": 6500944510, "type": "CODE" }, { "from": 6500944307, "to": 6500944639, "type": "CODE" }, { "from": 6500944307, "to": 6500944774, "type": "CODE" }, { "from": 6500944307, "to": 6500944862, "type": "CODE" }, { "from": 6500944337, "to": 6500944367, "type": "CODE" }, { "from": 6500944418, "to": 6500945120, "type": "CALL" }, { "from": 6500944468, "to": 6500944428, "type": "CODE" }, { "from": 6500944505, "to": 6500944737, "type": "CODE" }, { "from": 6500944624, "to": 6500944428, "type": "CODE" }, { "from": 6500944634, "to": 6500944428, "type": "CODE" }, { "from": 6500944769, "to": 6500944414, "type": "CODE" }, { "from": 6500944857, "to": 6500944726, "type": "CODE" }, { "from": 6500945095, "to": 6500944611, "type": "CODE" }, { "from": 6500945111, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6500944087, "to": 6740709440, "type": "DATA" }, { "from": 6500944120, "to": 6723603744, "type": "DATA" }, { "from": 6500944242, "to": 6723603792, "type": "DATA" }, { "from": 6500944293, "to": 6723604144, "type": "DATA" }, { "from": 6500944382, "to": 6723604000, "type": "DATA" }, { "from": 6500944439, "to": 6740709440, "type": "DATA" }, { "from": 6500944536, "to": 6717276840, "type": "DATA" }, { "from": 6500944737, "to": 6723603976, "type": "DATA" }, { "from": 6500944997, "to": 6717273680, "type": "DATA" }, { "from": 6500945064, "to": 6717273704, "type": "DATA" } ] }, "strings": [ { "va": "0x190c20d20", "offset": 281149728, "ascii": "target_not_owned", "wide": null }, { "va": "0x190c20d50", "offset": 281149776, "ascii": "foreground_policy_preserve", "wide": null }, { "va": "0x190c20e20", "offset": 281149984, "ascii": "browser_command_not_allowlisted", "wide": null }, { "va": "0x1906182a8", "offset": 274822824, "ascii": "tach", "wide": null }, { "va": "0x190c20e08", "offset": 281149960, "ascii": "browser_command_denied", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 47330 }, { "label": "b-agent-cdp-policy", "file": "rea-b-agent-cdp-policy.json", "file_sha256": "27882f537998b637fe3626bc8cbb79bf2ba6c8d4a8ae026e8befe8387a691ab1", "status": "completed", "evidence_id": "ev_3c75e51a92835d327e3ff02283f2873a45a3bcf8e02180c00e04490911465c9f", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837c8ce0;pdgo @ 0x1837c8ce0;afij @ 0x1837c8ce0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837c8ce0", "size": 768, "nargs": 3, "signature": "fcn.1837c8ce0(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6500945196, "to": 6457891536, "type": "CALL" }, { "from": 6500945248, "to": 6456090784, "type": "CALL" }, { "from": 6500945293, "to": 6456090784, "type": "CALL" }, { "from": 6500945349, "to": 6456090784, "type": "CALL" }, { "from": 6500945405, "to": 6456090784, "type": "CALL" }, { "from": 6500945456, "to": 6471067168, "type": "CALL" }, { "from": 6500945535, "to": 6445650832, "type": "CALL" }, { "from": 6500945575, "to": 6524031184, "type": "CALL" }, { "from": 6500945594, "to": 6445656528, "type": "CALL" }, { "from": 6500945664, "to": 6511512544, "type": "CALL" }, { "from": 6500945718, "to": 6511975280, "type": "CALL" }, { "from": 6500945726, "to": 6518967168, "type": "CALL" }, { "from": 6500945758, "to": 6511512544, "type": "CALL" }, { "from": 6500945808, "to": 6524603600, "type": "CALL" }, { "from": 6500945845, "to": 6511512544, "type": "CALL" }, { "from": 6500945850, "to": 6500945773, "type": "CODE" }, { "from": 6500945877, "to": 6740346544, "type": "CALL" }, { "from": 6500945883, "to": 6500945707, "type": "CODE" } ], "datarefs": [ { "from": 6500945160, "to": 6715269024, "type": "DATA" }, { "from": 6500945186, "to": 6723604048, "type": "DATA" }, { "from": 6500945217, "to": 6715118800, "type": "DATA" }, { "from": 6500945268, "to": 6715090344, "type": "DATA" }, { "from": 6500945318, "to": 6720317508, "type": "DATA" }, { "from": 6500945374, "to": 6717270928, "type": "DATA" }, { "from": 6500945469, "to": 6742246848, "type": "DATA" }, { "from": 6500945482, "to": 6741126112, "type": "DATA" }, { "from": 6500945491, "to": 6742246856, "type": "DATA" }, { "from": 6500945505, "to": 6723604088, "type": "DATA" }, { "from": 6500945580, "to": 6710367816, "type": "DATA" }, { "from": 6500945606, "to": 6708900496, "type": "DATA" }, { "from": 6500945621, "to": 6708923712, "type": "DATA" }, { "from": 6500945677, "to": 6708923824, "type": "DATA" }, { "from": 6500945691, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x19042dfa0", "offset": 272815008, "ascii": "event", "wide": null }, { "va": "0x190c20e50", "offset": 281150032, "ascii": "tabbit_dance.cdp_command_rejected", "wide": null }, { "va": "0x1904094d0", "offset": 272664784, "ascii": "method", "wide": null }, { "va": "0x1904025a8", "offset": 272636328, "ascii": "reason", "wide": null }, { "va": "0x1908fe844", "offset": 277863492, "ascii": "taskId", "wide": null }, { "va": "0x190616b90", "offset": 274816912, "ascii": "targetId", "wide": null }, { "va": "0x190c20e78", "offset": 281150072, "ascii": "..\\..\\tab\\browser\\local_agent\\local_agent_cdp_policy.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 7534 }, { "label": "b-agent-dependencies-resolve", "file": "rea-b-agent-dependencies-resolve.json", "file_sha256": "37a6bfee1154d7a79aa9e17ae6e588510077a2fc950d9b12cc93a62a952f5594", "status": "completed", "evidence_id": "ev_ee1d8ddcd4ba57adfebfb64583eebe6dddf0cfad0ddca6df559e60cda2c53157", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837aa800;pdgo @ 0x1837aa800;afij @ 0x1837aa800", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837aa800", "size": 1230, "nargs": 1, "signature": "fcn.1837aa800(int64_t arg1);", "callrefs": [ { "from": 6500821114, "to": 6542067384, "type": "CALL" }, { "from": 6500821177, "to": 6542067384, "type": "CALL" }, { "from": 6500821243, "to": 6522337344, "type": "CALL" }, { "from": 6500821292, "to": 6512942288, "type": "CALL" }, { "from": 6500821311, "to": 6473606624, "type": "CALL" }, { "from": 6500821374, "to": 6500821248, "type": "CODE" }, { "from": 6500821401, "to": 6500821421, "type": "CODE" }, { "from": 6500821500, "to": 6740346544, "type": "CALL" }, { "from": 6500821567, "to": 6542067384, "type": "CALL" }, { "from": 6500821650, "to": 6542067384, "type": "CALL" }, { "from": 6500821718, "to": 6522337344, "type": "CALL" }, { "from": 6500821757, "to": 6500821817, "type": "CODE" }, { "from": 6500821773, "to": 6500821723, "type": "CODE" }, { "from": 6500821796, "to": 6500821850, "type": "CODE" }, { "from": 6500821812, "to": 6511513840, "type": "CALL" }, { "from": 6500821845, "to": 6522337344, "type": "CALL" }, { "from": 6500821885, "to": 6500821929, "type": "CODE" }, { "from": 6500821908, "to": 6500821965, "type": "CODE" }, { "from": 6500821924, "to": 6511513840, "type": "CALL" }, { "from": 6500821960, "to": 6522337344, "type": "CALL" }, { "from": 6500822007, "to": 6500822031, "type": "CODE" }, { "from": 6500822026, "to": 6511513840, "type": "CALL" }, { "from": 6500822067, "to": 6512942288, "type": "CALL" }, { "from": 6500822086, "to": 6618362160, "type": "CALL" }, { "from": 6500822091, "to": 6500821316, "type": "CODE" }, { "from": 6500822138, "to": 6442840976, "type": "CALL" }, { "from": 6500822151, "to": 6511512544, "type": "CALL" }, { "from": 6500822156, "to": 6500821515, "type": "CODE" }, { "from": 6500822188, "to": 6740346544, "type": "CALL" }, { "from": 6500822194, "to": 6500821515, "type": "CODE" }, { "from": 6500822207, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6500821007, "to": 6740709440, "type": "DATA" }, { "from": 6500821126, "to": 6500830832, "type": "DATA" }, { "from": 6500821137, "to": 6488510160, "type": "DATA" }, { "from": 6500821148, "to": 6511490512, "type": "DATA" }, { "from": 6500821187, "to": 6500831168, "type": "DATA" }, { "from": 6500821198, "to": 6488791120, "type": "DATA" }, { "from": 6500821264, "to": 6723595584, "type": "DATA" }, { "from": 6500821271, "to": 6723595216, "type": "DATA" }, { "from": 6500821324, "to": 6740709440, "type": "DATA" }, { "from": 6500821421, "to": 6715363848, "type": "DATA" }, { "from": 6500821432, "to": 6715363840, "type": "DATA" }, { "from": 6500821578, "to": 6500832272, "type": "DATA" }, { "from": 6500821589, "to": 6488510160, "type": "DATA" }, { "from": 6500821600, "to": 6511490512, "type": "DATA" }, { "from": 6500821664, "to": 6500832992, "type": "DATA" }, { "from": 6500821675, "to": 6500833072, "type": "DATA" }, { "from": 6500821690, "to": 6500847888, "type": "DATA" }, { "from": 6500822039, "to": 6715261168, "type": "DATA" }, { "from": 6500822046, "to": 6723595216, "type": "DATA" }, { "from": 6500822100, "to": 6537935408, "type": "DATA" }, { "from": 6500822129, "to": 6741126408, "type": "DATA" }, { "from": 6500822161, "to": 6488537376, "type": "DATA" }, { "from": 6500822173, "to": 6488537376, "type": "DATA" } ] }, "strings": [ { "va": "0x190c1ed40", "offset": 281141568, "ascii": "DownloadAsset", "wide": null }, { "va": "0x190c1ebd0", "offset": 281141200, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\workspace_dependencies.cc", "wide": null }, { "va": "0x190445200", "offset": 272909824, "ascii": "installing", "wide": null }, { "va": "0x19042c0f0", "offset": 272807152, "ascii": "Install", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 14145 }, { "label": "b-agent-dependencies", "file": "rea-b-agent-dependencies.json", "file_sha256": "ec0a03abac40b8bd1e290a59461f13422953cc1886054a1fe193d3e36ec32f4d", "status": "completed", "evidence_id": "ev_3ba5a2166f3ddab17eb6a36167b8c6d1ff1ee2e57b34efc63186a75a894584d1", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837a9340;pdgo @ 0x1837a9340;afij @ 0x1837a9340", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837a9340", "size": 805, "nargs": 2, "signature": "fcn.1837a9340(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6500815740, "to": 6464561680, "type": "CALL" }, { "from": 6500815890, "to": 6740346544, "type": "CALL" }, { "from": 6500815961, "to": 6512942288, "type": "CALL" }, { "from": 6500815991, "to": 6511423872, "type": "CALL" }, { "from": 6500816015, "to": 6542067384, "type": "CALL" }, { "from": 6500816141, "to": 6517399712, "type": "CALL" }, { "from": 6500816169, "to": 6511512544, "type": "CALL" }, { "from": 6500816228, "to": 6500815772, "type": "CODE" }, { "from": 6500816257, "to": 6511512544, "type": "CALL" }, { "from": 6500816276, "to": 6500815815, "type": "CODE" }, { "from": 6500816310, "to": 6740346544, "type": "CALL" }, { "from": 6500816316, "to": 6500816097, "type": "CODE" }, { "from": 6500816363, "to": 6442840976, "type": "CALL" }, { "from": 6500816376, "to": 6511512544, "type": "CALL" }, { "from": 6500816381, "to": 6500815905, "type": "CODE" }, { "from": 6500816413, "to": 6740346544, "type": "CALL" }, { "from": 6500816419, "to": 6500815905, "type": "CODE" }, { "from": 6500816441, "to": 6511512544, "type": "CALL" }, { "from": 6500816446, "to": 6500816097, "type": "CODE" }, { "from": 6500816461, "to": 6511512544, "type": "CALL" }, { "from": 6500816466, "to": 6500816433, "type": "CODE" }, { "from": 6500816476, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6500815697, "to": 6740709440, "type": "DATA" }, { "from": 6500815772, "to": 6717291816, "type": "DATA" }, { "from": 6500815783, "to": 6717291812, "type": "DATA" }, { "from": 6500815936, "to": 6716398076, "type": "DATA" }, { "from": 6500815943, "to": 6723595216, "type": "DATA" }, { "from": 6500815979, "to": 6741126408, "type": "DATA" }, { "from": 6500816026, "to": 6446192048, "type": "DATA" }, { "from": 6500816037, "to": 6488516144, "type": "DATA" }, { "from": 6500816048, "to": 6511490512, "type": "DATA" }, { "from": 6500816059, "to": 6500814432, "type": "DATA" }, { "from": 6500816182, "to": 6740709440, "type": "DATA" }, { "from": 6500816295, "to": 6488537248, "type": "DATA" }, { "from": 6500816325, "to": 6537935408, "type": "DATA" }, { "from": 6500816354, "to": 6741126408, "type": "DATA" }, { "from": 6500816386, "to": 6488537376, "type": "DATA" }, { "from": 6500816398, "to": 6488537376, "type": "DATA" } ] }, "strings": [ { "va": "0x19061bd24", "offset": 274837796, "ascii": "failed", "wide": null }, { "va": "0x1905419fc", "offset": 273944060, "ascii": "Fail", "wide": null }, { "va": "0x190c1ebd0", "offset": 281141200, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\workspace_dependencies.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 7815 }, { "label": "b-agent-gateway-1", "file": "rea-b-agent-gateway-1.json", "file_sha256": "2eb45f7eacebbfd9c176d2a51546f2d41c30fcec97b2f3812a27336cb9095726", "status": "completed", "evidence_id": "ev_a168d099545b014774f19b86a28a9e7f07cbc78b49bb8f8bdb14f2046b8f815a", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18377a0e0;pdgo @ 0x18377a0e0;afij @ 0x18377a0e0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18377a0e0", "size": 1859, "nargs": 1, "signature": "fcn.18377a0e0(int64_t arg1);", "callrefs": [ { "from": 6500622603, "to": 6500746608, "type": "CALL" }, { "from": 6500622628, "to": 6511479296, "type": "CALL" }, { "from": 6500622692, "to": 6533922976, "type": "CALL" }, { "from": 6500622722, "to": 6542067384, "type": "CALL" }, { "from": 6500622798, "to": 6500740880, "type": "CALL" }, { "from": 6500622831, "to": 6488918096, "type": "CALL" }, { "from": 6500622864, "to": 6464561680, "type": "CALL" }, { "from": 6500622897, "to": 6464561680, "type": "CALL" }, { "from": 6500622916, "to": 6500717840, "type": "CALL" }, { "from": 6500622945, "to": 6522894224, "type": "CALL" }, { "from": 6500622964, "to": 6500717936, "type": "CALL" }, { "from": 6500623012, "to": 6451609056, "type": "CALL" }, { "from": 6500623061, "to": 6500623094, "type": "CODE" }, { "from": 6500623068, "to": 6511512544, "type": "CALL" }, { "from": 6500623073, "to": 6500622791, "type": "CODE" }, { "from": 6500623082, "to": 6740346544, "type": "CALL" }, { "from": 6500623119, "to": 6500623078, "type": "CODE" }, { "from": 6500623215, "to": 6512942288, "type": "CALL" }, { "from": 6500623229, "to": 6500626080, "type": "CALL" }, { "from": 6500623276, "to": 6511512544, "type": "CALL" }, { "from": 6500623314, "to": 6511512544, "type": "CALL" }, { "from": 6500623392, "to": 6511512544, "type": "CALL" }, { "from": 6500623432, "to": 6500623450, "type": "CODE" }, { "from": 6500623438, "to": 6740346544, "type": "CALL" }, { "from": 6500623471, "to": 6500623434, "type": "CODE" }, { "from": 6500623489, "to": 6511512544, "type": "CALL" }, { "from": 6500623494, "to": 6500623925, "type": "CODE" }, { "from": 6500623531, "to": 6511512544, "type": "CALL" }, { "from": 6500623558, "to": 6451609056, "type": "CALL" }, { "from": 6500623570, "to": 6500717936, "type": "CALL" }, { "from": 6500623582, "to": 6500717840, "type": "CALL" }, { "from": 6500623615, "to": 6464561680, "type": "CALL" }, { "from": 6500623648, "to": 6464561680, "type": "CALL" }, { "from": 6500623681, "to": 6488918096, "type": "CALL" }, { "from": 6500623693, "to": 6517838976, "type": "CALL" }, { "from": 6500623740, "to": 6511512544, "type": "CALL" }, { "from": 6500623778, "to": 6511512544, "type": "CALL" }, { "from": 6500623799, "to": 6500662224, "type": "CALL" }, { "from": 6500623826, "to": 6511479296, "type": "CALL" }, { "from": 6500623874, "to": 6474554160, "type": "CALL" }, { "from": 6500623887, "to": 6511512544, "type": "CALL" }, { "from": 6500623907, "to": 6532074304, "type": "CALL" }, { "from": 6500623933, "to": 6511512544, "type": "CALL" }, { "from": 6500623964, "to": 6500721904, "type": "CALL" }, { "from": 6500623977, "to": 6511512544, "type": "CALL" }, { "from": 6500624008, "to": 6500791920, "type": "CALL" }, { "from": 6500624021, "to": 6511512544, "type": "CALL" }, { "from": 6500624044, "to": 6532074304, "type": "CALL" }, { "from": 6500624082, "to": 6511512544, "type": "CALL" }, { "from": 6500624123, "to": 6500622352, "type": "CALL" }, { "from": 6500624165, "to": 6740346544, "type": "CALL" }, { "from": 6500624200, "to": 6442840976, "type": "CALL" }, { "from": 6500624232, "to": 6442840976, "type": "CALL" }, { "from": 6500624257, "to": 6511479296, "type": "CALL" }, { "from": 6500624278, "to": 6442840976, "type": "CALL" }, { "from": 6500624350, "to": 6740346544, "type": "CALL" }, { "from": 6500624356, "to": 6500624119, "type": "CODE" }, { "from": 6500624374, "to": 6740346544, "type": "CALL" }, { "from": 6500624380, "to": 6500624103, "type": "CODE" }, { "from": 6500624394, "to": 6740346544, "type": "CALL" }, { "from": 6500624400, "to": 6500624300, "type": "CODE" }, { "from": 6500624410, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6500622579, "to": 6740709440, "type": "DATA" }, { "from": 6500623187, "to": 6713532920, "type": "DATA" }, { "from": 6500623194, "to": 6723585184, "type": "DATA" }, { "from": 6500624191, "to": 6741126408, "type": "DATA" }, { "from": 6500624223, "to": 6741126408, "type": "DATA" }, { "from": 6500624269, "to": 6741126408, "type": "DATA" }, { "from": 6500624308, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x1902861f8", "offset": 271078904, "ascii": "Shutdown", "wide": null }, { "va": "0x190c1c4a0", "offset": 281131168, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\codex_local_agent_gateway.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 17761 }, { "label": "b-agent-gateway-2", "file": "rea-b-agent-gateway-2.json", "file_sha256": "84ac91a950269e4b10ce73a087edc9cfdb505371fd58805b7cb4450b87cc3a4b", "status": "completed", "evidence_id": "ev_f43ab2274db1d7d1e2a6fedb8ebb21a5cb47f4b7b977081a4756b2b86ac6d112", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183780d10;pdgo @ 0x183780d10;afij @ 0x183780d10", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183780d10", "size": 4796, "nargs": 4, "signature": "fcn.183780d10(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6500650404, "to": 6500646688, "type": "CALL" }, { "from": 6500650489, "to": 6446103440, "type": "CALL" }, { "from": 6500650536, "to": 6514584544, "type": "CALL" }, { "from": 6500650581, "to": 6464561680, "type": "CALL" }, { "from": 6500650623, "to": 6511512544, "type": "CALL" }, { "from": 6500650655, "to": 6511512544, "type": "CALL" }, { "from": 6500650705, "to": 6500650885, "type": "CODE" }, { "from": 6500650721, "to": 6500650553, "type": "CODE" }, { "from": 6500650822, "to": 6531704832, "type": "CALL" }, { "from": 6500650854, "to": 6500651557, "type": "CODE" }, { "from": 6500650880, "to": 6500650885, "type": "CODE" }, { "from": 6500650926, "to": 6500650882, "type": "CODE" }, { "from": 6500651081, "to": 6511483504, "type": "CALL" }, { "from": 6500651115, "to": 6511512544, "type": "CALL" }, { "from": 6500651232, "to": 6740346544, "type": "CALL" }, { "from": 6500651251, "to": 6740346544, "type": "CALL" }, { "from": 6500651327, "to": 6511512544, "type": "CALL" }, { "from": 6500651362, "to": 6511512544, "type": "CALL" }, { "from": 6500651446, "to": 6511513840, "type": "CALL" }, { "from": 6500651451, "to": 6500651198, "type": "CODE" }, { "from": 6500651465, "to": 6740346544, "type": "CALL" }, { "from": 6500651471, "to": 6500651340, "type": "CODE" }, { "from": 6500651501, "to": 6524603600, "type": "CALL" }, { "from": 6500651547, "to": 6511512544, "type": "CALL" }, { "from": 6500651552, "to": 6500651298, "type": "CODE" }, { "from": 6500651619, "to": 6446103440, "type": "CALL" }, { "from": 6500651677, "to": 6447834288, "type": "CALL" }, { "from": 6500651736, "to": 6447834288, "type": "CALL" }, { "from": 6500651812, "to": 6529825440, "type": "CALL" }, { "from": 6500651865, "to": 6447834288, "type": "CALL" }, { "from": 6500651918, "to": 6447834288, "type": "CALL" }, { "from": 6500651993, "to": 6500652002, "type": "CODE" }, { "from": 6500652010, "to": 6526594288, "type": "CALL" }, { "from": 6500652144, "to": 6464561680, "type": "CALL" }, { "from": 6500652184, "to": 6500652371, "type": "CODE" }, { "from": 6500652384, "to": 6500653610, "type": "CODE" }, { "from": 6500652420, "to": 6511512544, "type": "CALL" }, { "from": 6500652452, "to": 6511512544, "type": "CALL" }, { "from": 6500652557, "to": 6740346544, "type": "CALL" }, { "from": 6500652576, "to": 6740346544, "type": "CALL" }, { "from": 6500652629, "to": 6500651327, "type": "CODE" }, { "from": 6500652664, "to": 6524603600, "type": "CALL" }, { "from": 6500652710, "to": 6511512544, "type": "CALL" }, { "from": 6500652720, "to": 6500652116, "type": "CODE" }, { "from": 6500652942, "to": 6522782224, "type": "CALL" }, { "from": 6500652987, "to": 6549240832, "type": "CALL" }, { "from": 6500652999, "to": 6500653170, "type": "CODE" }, { "from": 6500653023, "to": 6542434064, "type": "CALL" }, { "from": 6500653061, "to": 6500653008, "type": "CODE" }, { "from": 6500653069, "to": 6500653038, "type": "CODE" }, { "from": 6500653074, "to": 6500653081, "type": "CODE" }, { "from": 6500653131, "to": 6511512544, "type": "CALL" }, { "from": 6500653190, "to": 6542435920, "type": "CALL" }, { "from": 6500653239, "to": 6542067384, "type": "CALL" }, { "from": 6500653286, "to": 6500653312, "type": "CODE" }, { "from": 6500653291, "to": 6500653086, "type": "CODE" }, { "from": 6500653345, "to": 6542436672, "type": "CALL" }, { "from": 6500653420, "to": 6500653043, "type": "CODE" }, { "from": 6500653621, "to": 6531704832, "type": "CALL" }, { "from": 6500653721, "to": 6542067384, "type": "CALL" }, { "from": 6500653815, "to": 6512942288, "type": "CALL" }, { "from": 6500653907, "to": 6517399712, "type": "CALL" }, { "from": 6500653939, "to": 6500636032, "type": "CALL" }, { "from": 6500654005, "to": 6511512544, "type": "CALL" }, { "from": 6500654041, "to": 6511512544, "type": "CALL" }, { "from": 6500654046, "to": 6500652596, "type": "CODE" }, { "from": 6500654084, "to": 6740346544, "type": "CALL" }, { "from": 6500654093, "to": 6500653850, "type": "CODE" }, { "from": 6500654115, "to": 6511512544, "type": "CALL" }, { "from": 6500654120, "to": 6500654090, "type": "CODE" }, { "from": 6500654132, "to": 6511512544, "type": "CALL" }, { "from": 6500654137, "to": 6500654107, "type": "CODE" }, { "from": 6500654156, "to": 6511512544, "type": "CALL" }, { "from": 6500654161, "to": 6500652203, "type": "CODE" }, { "from": 6500654183, "to": 6511512544, "type": "CALL" }, { "from": 6500654188, "to": 6500652262, "type": "CODE" }, { "from": 6500654213, "to": 6511513840, "type": "CALL" }, { "from": 6500654218, "to": 6500654346, "type": "CODE" }, { "from": 6500654232, "to": 6511513840, "type": "CALL" }, { "from": 6500654237, "to": 6500654395, "type": "CODE" }, { "from": 6500654610, "to": 6500654709, "type": "CODE" }, { "from": 6500654627, "to": 6526594288, "type": "CALL" }, { "from": 6500654736, "to": 6518122064, "type": "CALL" }, { "from": 6500654759, "to": 6500652089, "type": "CODE" }, { "from": 6500654875, "to": 6511512544, "type": "CALL" }, { "from": 6500654880, "to": 6500654754, "type": "CODE" }, { "from": 6500654898, "to": 6511512544, "type": "CALL" }, { "from": 6500654903, "to": 6500654816, "type": "CODE" }, { "from": 6500654916, "to": 6542089024, "type": "CALL" }, { "from": 6500654948, "to": 6511512544, "type": "CALL" }, { "from": 6500654980, "to": 6511512544, "type": "CALL" }, { "from": 6500654993, "to": 6500653425, "type": "CODE" }, { "from": 6500655001, "to": 6542702416, "type": "CALL" }, { "from": 6500655025, "to": 6511512544, "type": "CALL" }, { "from": 6500655030, "to": 6500651271, "type": "CODE" }, { "from": 6500655043, "to": 6500654032, "type": "CODE" } ], "datarefs": [ { "from": 6500650295, "to": 6740709440, "type": "DATA" }, { "from": 6500650375, "to": 6723586048, "type": "DATA" }, { "from": 6500650502, "to": 6723586080, "type": "DATA" }, { "from": 6500650974, "to": 6712116220, "type": "DATA" }, { "from": 6500651035, "to": 6712107144, "type": "DATA" }, { "from": 6500651378, "to": 6740709440, "type": "DATA" }, { "from": 6500651640, "to": 6723589344, "type": "DATA" }, { "from": 6500651699, "to": 6723589360, "type": "DATA" }, { "from": 6500651767, "to": 6723590224, "type": "DATA" }, { "from": 6500651828, "to": 6712172672, "type": "DATA" }, { "from": 6500651884, "to": 6723589376, "type": "DATA" }, { "from": 6500651986, "to": 6723589392, "type": "DATA" }, { "from": 6500651995, "to": 6723589296, "type": "DATA" }, { "from": 6500652876, "to": 6712480876, "type": "DATA" }, { "from": 6500652992, "to": 6723589504, "type": "DATA" }, { "from": 6500653154, "to": 6723589528, "type": "DATA" }, { "from": 6500653735, "to": 6496572928, "type": "DATA" }, { "from": 6500653746, "to": 6488510160, "type": "DATA" }, { "from": 6500653757, "to": 6496570832, "type": "DATA" }, { "from": 6500653768, "to": 6500637776, "type": "DATA" }, { "from": 6500653787, "to": 6723586096, "type": "DATA" }, { "from": 6500653794, "to": 6723585184, "type": "DATA" }, { "from": 6500654069, "to": 6488537248, "type": "DATA" }, { "from": 6500654612, "to": 6723589528, "type": "DATA" } ] }, "strings": [ { "va": "0x190c1c800", "offset": 281132032, "ascii": "Local Agent token exchange", "wide": null }, { "va": "0x190c1c820", "offset": 281132064, "ascii": "error.code", "wide": null }, { "va": "0x190c1d4e0", "offset": 281135328, "ascii": "accessToken", "wide": null }, { "va": "0x190c1d4f0", "offset": 281135344, "ascii": "tokenType", "wide": null }, { "va": "0x190c1d850", "offset": 281136208, "ascii": "expiresIn", "wide": null }, { "va": "0x19013a080", "offset": 269718656, "ascii": "scope", "wide": null }, { "va": "0x190c1d500", "offset": 281135360, "ascii": "tokenJti", "wide": null }, { "va": "0x190c1d510", "offset": 281135376, "ascii": "Local Agent token response is incomplete", "wide": null }, { "va": "0x190c1d4b0", "offset": 281135280, "ascii": "Local Agent token response is invalid JSON", "wide": null }, { "va": "0x190c1d598", "offset": 281135512, "ascii": "Local Agent token scope is incomplete", "wide": null }, { "va": "0x190c1c830", "offset": 281132080, "ascii": "OnAgentTokenExchanged", "wide": null }, { "va": "0x190c1c4a0", "offset": 281131168, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\codex_local_agent_gateway.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 43872 }, { "label": "b-agent-gateway-3", "file": "rea-b-agent-gateway-3.json", "file_sha256": "872b59e04c30f804b6fd85ee8888d506bf4a1f4710d3dec3e2864ba37f1f3e2d", "status": "completed", "evidence_id": "ev_527019dd59f69f8c7779841af3b693011e1fb6717754ae09c3d40e1f7566a917", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183789d20;pdgo @ 0x183789d20;afij @ 0x183789d20", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183789d20", "size": 3783, "nargs": 11, "signature": "fcn.183789d20(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h, int64_t arg_40h, int64_t arg_48h, int64_t arg_50h, int64_t arg_58h);", "callrefs": [ { "from": 6500687234, "to": 6500687244, "type": "CODE" }, { "from": 6500687256, "to": 6500687239, "type": "CODE" }, { "from": 6500687299, "to": 6511512544, "type": "CALL" }, { "from": 6500687322, "to": 6511512544, "type": "CALL" }, { "from": 6500687351, "to": 6511512544, "type": "CALL" }, { "from": 6500687376, "to": 6511512544, "type": "CALL" }, { "from": 6500687405, "to": 6511512544, "type": "CALL" }, { "from": 6500687419, "to": 6519296000, "type": "CALL" }, { "from": 6500687489, "to": 6544016480, "type": "CALL" }, { "from": 6500687515, "to": 6511512544, "type": "CALL" }, { "from": 6500687560, "to": 6500687595, "type": "CODE" }, { "from": 6500687585, "to": 6500687565, "type": "CODE" }, { "from": 6500687606, "to": 6500687590, "type": "CODE" }, { "from": 6500687685, "to": 6500673264, "type": "CALL" }, { "from": 6500687690, "to": 6500687273, "type": "CODE" }, { "from": 6500687711, "to": 6542067384, "type": "CALL" }, { "from": 6500687722, "to": 6525600096, "type": "CALL" }, { "from": 6500687761, "to": 6500618336, "type": "CALL" }, { "from": 6500687778, "to": 6514577840, "type": "CALL" }, { "from": 6500687791, "to": 6511396000, "type": "CALL" }, { "from": 6500687817, "to": 6500687835, "type": "CODE" }, { "from": 6500687911, "to": 6477997904, "type": "CALL" }, { "from": 6500687971, "to": 6515344192, "type": "CALL" }, { "from": 6500688047, "to": 6515344192, "type": "CALL" }, { "from": 6500688128, "to": 6515344192, "type": "CALL" }, { "from": 6500688202, "to": 6515344192, "type": "CALL" }, { "from": 6500688253, "to": 6500688307, "type": "CODE" }, { "from": 6500688269, "to": 6511729936, "type": "CALL" }, { "from": 6500688274, "to": 6500689220, "type": "CODE" }, { "from": 6500688284, "to": 6740346544, "type": "CALL" }, { "from": 6500688290, "to": 6500688717, "type": "CODE" }, { "from": 6500688353, "to": 6515344192, "type": "CALL" }, { "from": 6500688456, "to": 6515344192, "type": "CALL" }, { "from": 6500688559, "to": 6515344192, "type": "CALL" }, { "from": 6500688569, "to": 6542067384, "type": "CALL" }, { "from": 6500688588, "to": 6542434496, "type": "CALL" }, { "from": 6500688665, "to": 6740379656, "type": "CALL" }, { "from": 6500688890, "to": 6542434064, "type": "CALL" }, { "from": 6500689363, "to": 6542067384, "type": "CALL" }, { "from": 6500689481, "to": 6511512544, "type": "CALL" }, { "from": 6500689514, "to": 6512942288, "type": "CALL" }, { "from": 6500689561, "to": 6453036096, "type": "CALL" }, { "from": 6500689605, "to": 6464561680, "type": "CALL" }, { "from": 6500689640, "to": 6464561680, "type": "CALL" }, { "from": 6500689795, "to": 6468400960, "type": "CALL" }, { "from": 6500689867, "to": 6542067384, "type": "CALL" }, { "from": 6500689950, "to": 6612894160, "type": "CALL" }, { "from": 6500690022, "to": 6542067384, "type": "CALL" }, { "from": 6500690179, "to": 6542067384, "type": "CALL" }, { "from": 6500690263, "to": 6511647584, "type": "CALL" }, { "from": 6500690289, "to": 6628788720, "type": "CALL" }, { "from": 6500690294, "to": 6500687273, "type": "CODE" }, { "from": 6500690313, "to": 6511729936, "type": "CALL" }, { "from": 6500690318, "to": 6500689313, "type": "CODE" }, { "from": 6500690361, "to": 6500690174, "type": "CODE" }, { "from": 6500690428, "to": 6500673264, "type": "CALL" }, { "from": 6500690453, "to": 6500715696, "type": "CALL" }, { "from": 6500690466, "to": 6511512544, "type": "CALL" }, { "from": 6500690471, "to": 6500687273, "type": "CODE" }, { "from": 6500690490, "to": 6511512544, "type": "CALL" }, { "from": 6500690495, "to": 6500689473, "type": "CODE" }, { "from": 6500690533, "to": 6740346544, "type": "CALL" }, { "from": 6500690539, "to": 6500690119, "type": "CODE" }, { "from": 6500690555, "to": 6542089024, "type": "CALL" }, { "from": 6500690583, "to": 6511512544, "type": "CALL" }, { "from": 6500690588, "to": 6500688783, "type": "CODE" }, { "from": 6500690616, "to": 6511512544, "type": "CALL" }, { "from": 6500690621, "to": 6500688971, "type": "CODE" }, { "from": 6500690649, "to": 6511512544, "type": "CALL" }, { "from": 6500690654, "to": 6500689016, "type": "CODE" }, { "from": 6500690685, "to": 6511512544, "type": "CALL" }, { "from": 6500690690, "to": 6500689076, "type": "CODE" }, { "from": 6500690718, "to": 6511512544, "type": "CALL" }, { "from": 6500690723, "to": 6500688918, "type": "CODE" }, { "from": 6500690745, "to": 6511512544, "type": "CALL" }, { "from": 6500690750, "to": 6500690119, "type": "CODE" }, { "from": 6500690765, "to": 6511512544, "type": "CALL" }, { "from": 6500690770, "to": 6500690737, "type": "CODE" }, { "from": 6500690801, "to": 6511730288, "type": "CALL" }, { "from": 6500690806, "to": 6500689220, "type": "CODE" }, { "from": 6500690840, "to": 6511730288, "type": "CALL" }, { "from": 6500690845, "to": 6500689313, "type": "CODE" }, { "from": 6500690867, "to": 6511423872, "type": "CALL" }, { "from": 6500690872, "to": 6500689762, "type": "CODE" }, { "from": 6500690914, "to": 6500688709, "type": "CODE" } ], "datarefs": [ { "from": 6500687182, "to": 6740709440, "type": "DATA" }, { "from": 6500687435, "to": 6740709440, "type": "DATA" }, { "from": 6500687617, "to": 6723587560, "type": "DATA" }, { "from": 6500687643, "to": 6723587304, "type": "DATA" }, { "from": 6500687727, "to": 6723587520, "type": "DATA" }, { "from": 6500687916, "to": 6715434912, "type": "DATA" }, { "from": 6500687942, "to": 6712688112, "type": "DATA" }, { "from": 6500687976, "to": 6723587608, "type": "DATA" }, { "from": 6500688002, "to": 6712688024, "type": "DATA" }, { "from": 6500688052, "to": 6712688072, "type": "DATA" }, { "from": 6500688078, "to": 6712688088, "type": "DATA" }, { "from": 6500688171, "to": 6723587632, "type": "DATA" }, { "from": 6500688322, "to": 6723587648, "type": "DATA" }, { "from": 6500688425, "to": 6723587672, "type": "DATA" }, { "from": 6500688528, "to": 6723587704, "type": "DATA" }, { "from": 6500688624, "to": 6741125872, "type": "DATA" }, { "from": 6500688631, "to": 6537033840, "type": "DATA" }, { "from": 6500689375, "to": 6707911888, "type": "DATA" }, { "from": 6500689486, "to": 6723587728, "type": "DATA" }, { "from": 6500689493, "to": 6723585184, "type": "DATA" }, { "from": 6500689535, "to": 6723585640, "type": "DATA" }, { "from": 6500689673, "to": 6715434912, "type": "DATA" }, { "from": 6500689749, "to": 6741126408, "type": "DATA" }, { "from": 6500689878, "to": 6500715600, "type": "DATA" }, { "from": 6500689889, "to": 6488537456, "type": "DATA" }, { "from": 6500689900, "to": 6496570832, "type": "DATA" }, { "from": 6500689911, "to": 6500690928, "type": "DATA" }, { "from": 6500690033, "to": 6500715600, "type": "DATA" }, { "from": 6500690044, "to": 6488537456, "type": "DATA" }, { "from": 6500690055, "to": 6496570832, "type": "DATA" }, { "from": 6500690066, "to": 6500691344, "type": "DATA" }, { "from": 6500690366, "to": 6723587752, "type": "DATA" }, { "from": 6500690389, "to": 6723587800, "type": "DATA" }, { "from": 6500690514, "to": 6488537248, "type": "DATA" }, { "from": 6500690880, "to": 6742234664, "type": "DATA" } ] }, "strings": [ { "va": "0x190c1cde8", "offset": 281133544, "ascii": "Cannot sign Local Agent response request", "wide": null }, { "va": "0x190c1cce8", "offset": 281133288, "ascii": "inference_not_ready", "wide": null }, { "va": "0x190c1cdc0", "offset": 281133504, "ascii": "/api/v1/local-agent-runtime/responses", "wide": null }, { "va": "0x1904567a0", "offset": 272980896, "ascii": "application/json", "wide": null }, { "va": "0x1901b7df0", "offset": 270234096, "ascii": "Content-Type", "wide": null }, { "va": "0x190c1ce18", "offset": 281133592, "ascii": "text/event-stream", "wide": null }, { "va": "0x1901b7d98", "offset": 270234008, "ascii": "Accept", "wide": null }, { "va": "0x1901b7dc8", "offset": 270234056, "ascii": "identity", "wide": null }, { "va": "0x1901b7dd8", "offset": 270234072, "ascii": "Accept-Encoding", "wide": null }, { "va": "0x190c1ce30", "offset": 281133616, "ascii": "Idempotency-Key", "wide": null }, { "va": "0x190c1ce40", "offset": 281133632, "ascii": "X-Client-Request-Id", "wide": null }, { "va": "0x190c1ce58", "offset": 281133656, "ascii": "X-Tabbit-Catalog-Revision", "wide": null }, { "va": "0x190c1ce78", "offset": 281133688, "ascii": "X-Tabbit-Catalog-Etag", "wide": null }, { "va": "0x190c1ce90", "offset": 281133712, "ascii": "OnResponseRequestSigned", "wide": null }, { "va": "0x190c1c4a0", "offset": 281131168, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\codex_local_agent_gateway.cc", "wide": null }, { "va": "0x190c1cea8", "offset": 281133736, "ascii": "Local Agent response state is inconsistent", "wide": null }, { "va": "0x190c1ced8", "offset": 281133784, "ascii": "local_agent_internal_error", "wide": null } ], "imports": [ { "at": "0x18378a319", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 39881 }, { "label": "b-agent-image-cache", "file": "rea-b-agent-image-cache.json", "file_sha256": "82e66a13eea6a576b58d1c8bbbfd4ef45442a93b84adc0e994028051a1784bb0", "status": "completed", "evidence_id": "ev_ace620d0e4d91f321d90f1fd2f25e12c205a97810db0ca75b027b4c3448a7283", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183793c30;pdgo @ 0x183793c30;afij @ 0x183793c30", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183793c30", "size": 1648, "nargs": 7, "signature": "fcn.183793c30(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h);", "callrefs": [ { "from": 6500727937, "to": 6500727942, "type": "CODE" }, { "from": 6500727963, "to": 6500727942, "type": "CODE" }, { "from": 6500728038, "to": 6740346544, "type": "CALL" }, { "from": 6500728056, "to": 6740346544, "type": "CALL" }, { "from": 6500728100, "to": 6511512544, "type": "CALL" }, { "from": 6500728129, "to": 6511512544, "type": "CALL" }, { "from": 6500728198, "to": 6740346544, "type": "CALL" }, { "from": 6500728204, "to": 6500728142, "type": "CODE" }, { "from": 6500728214, "to": 6511729936, "type": "CALL" }, { "from": 6500728281, "to": 6740346544, "type": "CALL" }, { "from": 6500728287, "to": 6500728504, "type": "CODE" }, { "from": 6500728335, "to": 6500728747, "type": "CODE" }, { "from": 6500728345, "to": 6542067384, "type": "CALL" }, { "from": 6500728560, "to": 6542067384, "type": "CALL" }, { "from": 6500728655, "to": 6512942288, "type": "CALL" }, { "from": 6500728722, "to": 6517399712, "type": "CALL" }, { "from": 6500728752, "to": 6542067384, "type": "CALL" }, { "from": 6500728834, "to": 6511647584, "type": "CALL" }, { "from": 6500728894, "to": 6542067384, "type": "CALL" }, { "from": 6500728970, "to": 6542067384, "type": "CALL" }, { "from": 6500729079, "to": 6512942288, "type": "CALL" }, { "from": 6500729089, "to": 6542067384, "type": "CALL" }, { "from": 6500729105, "to": 6542067384, "type": "CALL" }, { "from": 6500729167, "to": 6542067384, "type": "CALL" }, { "from": 6500729243, "to": 6511423872, "type": "CALL" }, { "from": 6500729277, "to": 6463429312, "type": "CALL" }, { "from": 6500729307, "to": 6500742128, "type": "CALL" }, { "from": 6500729312, "to": 6500728073, "type": "CODE" }, { "from": 6500729347, "to": 6740346544, "type": "CALL" }, { "from": 6500729353, "to": 6500728683, "type": "CODE" }, { "from": 6500729375, "to": 6511512544, "type": "CALL" }, { "from": 6500729380, "to": 6500728683, "type": "CODE" }, { "from": 6500729395, "to": 6511512544, "type": "CALL" }, { "from": 6500729400, "to": 6500729367, "type": "CODE" }, { "from": 6500729420, "to": 6511512544, "type": "CALL" }, { "from": 6500729425, "to": 6500728504, "type": "CODE" }, { "from": 6500729440, "to": 6511512544, "type": "CALL" }, { "from": 6500729445, "to": 6500729412, "type": "CODE" }, { "from": 6500729460, "to": 6542089024, "type": "CALL" }, { "from": 6500729494, "to": 6511512544, "type": "CALL" }, { "from": 6500729499, "to": 6500728073, "type": "CODE" } ], "datarefs": [ { "from": 6500727889, "to": 6740709440, "type": "DATA" }, { "from": 6500728153, "to": 6740709440, "type": "DATA" }, { "from": 6500728262, "to": 6488537248, "type": "DATA" }, { "from": 6500728411, "to": 6709836760, "type": "DATA" }, { "from": 6500728574, "to": 6500741840, "type": "DATA" }, { "from": 6500728585, "to": 6488537312, "type": "DATA" }, { "from": 6500728596, "to": 6496570832, "type": "DATA" }, { "from": 6500728607, "to": 6500729504, "type": "DATA" }, { "from": 6500728630, "to": 6722337944, "type": "DATA" }, { "from": 6500728637, "to": 6723590416, "type": "DATA" }, { "from": 6500728909, "to": 6500741984, "type": "DATA" }, { "from": 6500728920, "to": 6488537312, "type": "DATA" }, { "from": 6500728931, "to": 6496570832, "type": "DATA" }, { "from": 6500728942, "to": 6500729824, "type": "DATA" }, { "from": 6500728980, "to": 6496878368, "type": "DATA" }, { "from": 6500728991, "to": 6488537520, "type": "DATA" }, { "from": 6500729002, "to": 6511490512, "type": "DATA" }, { "from": 6500729013, "to": 6500722096, "type": "DATA" }, { "from": 6500729054, "to": 6722337944, "type": "DATA" }, { "from": 6500729061, "to": 6723590416, "type": "DATA" }, { "from": 6500729112, "to": 6462662976, "type": "DATA" }, { "from": 6500729123, "to": 6500745568, "type": "DATA" }, { "from": 6500729138, "to": 6500744496, "type": "DATA" }, { "from": 6500729177, "to": 6443185472, "type": "DATA" }, { "from": 6500729188, "to": 6496379968, "type": "DATA" }, { "from": 6500729203, "to": 6500744896, "type": "DATA" }, { "from": 6500729231, "to": 6741126408, "type": "DATA" }, { "from": 6500729260, "to": 6723590485, "type": "DATA" }, { "from": 6500729332, "to": 6488537248, "type": "DATA" } ] }, "strings": [ { "va": "0x190aebc98", "offset": 279883928, "ascii": "Prepare", "wide": null }, { "va": "0x190c1d910", "offset": 281136400, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\codex_local_agent_image_cache.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 19681 }, { "label": "b-agent-image-response", "file": "rea-b-agent-image-response.json", "file_sha256": "afbd085c69a2fe4306b893c7d23174c4a7104d93d0fd1abfcf233287f675c1c5", "status": "completed", "evidence_id": "ev_1a09f12455b1340e6b2f586fa6eededb750f5d988095d7cc0eb249ff5615d90a", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837962b0;pdgo @ 0x1837962b0;afij @ 0x1837962b0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837962b0", "size": 2603, "nargs": 4, "signature": "fcn.1837962b0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6500737784, "to": 6500737798, "type": "CODE" }, { "from": 6500737819, "to": 6500737826, "type": "CODE" }, { "from": 6500737839, "to": 6542434064, "type": "CALL" }, { "from": 6500737854, "to": 6500737793, "type": "CODE" }, { "from": 6500737900, "to": 6511512544, "type": "CALL" }, { "from": 6500737939, "to": 6511512544, "type": "CALL" }, { "from": 6500738040, "to": 6457891536, "type": "CALL" }, { "from": 6500738096, "to": 6457891536, "type": "CALL" }, { "from": 6500738158, "to": 6457891296, "type": "CALL" }, { "from": 6500738215, "to": 6524601072, "type": "CALL" }, { "from": 6500738261, "to": 6740379656, "type": "CALL" }, { "from": 6500738388, "to": 6500738424, "type": "CODE" }, { "from": 6500738393, "to": 6740346544, "type": "CALL" }, { "from": 6500738402, "to": 6500738313, "type": "CODE" }, { "from": 6500738458, "to": 6457891296, "type": "CALL" }, { "from": 6500738523, "to": 6445650832, "type": "CALL" }, { "from": 6500738576, "to": 6471067168, "type": "CALL" }, { "from": 6500738658, "to": 6524031184, "type": "CALL" }, { "from": 6500738683, "to": 6511512544, "type": "CALL" }, { "from": 6500738709, "to": 6445656528, "type": "CALL" }, { "from": 6500738774, "to": 6511512544, "type": "CALL" }, { "from": 6500738828, "to": 6511975280, "type": "CALL" }, { "from": 6500738836, "to": 6518967168, "type": "CALL" }, { "from": 6500738963, "to": 6446103440, "type": "CALL" }, { "from": 6500739017, "to": 6524006896, "type": "CALL" }, { "from": 6500739098, "to": 6447834288, "type": "CALL" }, { "from": 6500739163, "to": 6529825440, "type": "CALL" }, { "from": 6500739242, "to": 6515567520, "type": "CALL" }, { "from": 6500739267, "to": 6511396000, "type": "CALL" }, { "from": 6500739272, "to": 6500739293, "type": "CODE" }, { "from": 6500739316, "to": 6500735104, "type": "CALL" }, { "from": 6500739374, "to": 6524603600, "type": "CALL" }, { "from": 6500739411, "to": 6511512544, "type": "CALL" }, { "from": 6500739416, "to": 6500737877, "type": "CODE" }, { "from": 6500739443, "to": 6524603600, "type": "CALL" }, { "from": 6500739480, "to": 6511512544, "type": "CALL" }, { "from": 6500739485, "to": 6500739338, "type": "CODE" }, { "from": 6500739499, "to": 6500733232, "type": "CALL" }, { "from": 6500739504, "to": 6500739321, "type": "CODE" }, { "from": 6500739543, "to": 6511645120, "type": "CALL" }, { "from": 6500739593, "to": 6531391632, "type": "CALL" }, { "from": 6500739721, "to": 6542434272, "type": "CALL" }, { "from": 6500739765, "to": 6500739259, "type": "CODE" }, { "from": 6500739852, "to": 6529355056, "type": "CALL" }, { "from": 6500739879, "to": 6511396000, "type": "CALL" }, { "from": 6500739914, "to": 6511513840, "type": "CALL" }, { "from": 6500739919, "to": 6500739945, "type": "CODE" }, { "from": 6500740073, "to": 6500735104, "type": "CALL" }, { "from": 6500740111, "to": 6511512544, "type": "CALL" }, { "from": 6500740116, "to": 6500739321, "type": "CODE" }, { "from": 6500740130, "to": 6543545728, "type": "CALL" }, { "from": 6500740206, "to": 6500738632, "type": "CODE" }, { "from": 6500740236, "to": 6740346544, "type": "CALL" }, { "from": 6500740242, "to": 6500738817, "type": "CODE" }, { "from": 6500740281, "to": 6500738305, "type": "CODE" }, { "from": 6500740305, "to": 6511512544, "type": "CALL" }, { "from": 6500740310, "to": 6500740149, "type": "CODE" } ], "datarefs": [ { "from": 6500738003, "to": 6715269024, "type": "DATA" }, { "from": 6500738030, "to": 6723590520, "type": "DATA" }, { "from": 6500738045, "to": 6719218748, "type": "DATA" }, { "from": 6500738052, "to": 6712694288, "type": "DATA" }, { "from": 6500738071, "to": 6714838688, "type": "DATA" }, { "from": 6500738129, "to": 6723590208, "type": "DATA" }, { "from": 6500738184, "to": 6712261648, "type": "DATA" }, { "from": 6500738220, "to": 6741125872, "type": "DATA" }, { "from": 6500738227, "to": 6537033840, "type": "DATA" }, { "from": 6500738412, "to": 6712113264, "type": "DATA" }, { "from": 6500738424, "to": 6723590544, "type": "DATA" }, { "from": 6500738463, "to": 6742246848, "type": "DATA" }, { "from": 6500738476, "to": 6741126112, "type": "DATA" }, { "from": 6500738485, "to": 6742246856, "type": "DATA" }, { "from": 6500738499, "to": 6723590416, "type": "DATA" }, { "from": 6500738688, "to": 6710367816, "type": "DATA" }, { "from": 6500738722, "to": 6708900496, "type": "DATA" }, { "from": 6500738737, "to": 6708923712, "type": "DATA" }, { "from": 6500738787, "to": 6708923824, "type": "DATA" }, { "from": 6500738801, "to": 6742217808, "type": "DATA" }, { "from": 6500738975, "to": 6723590560, "type": "DATA" }, { "from": 6500739064, "to": 6712260636, "type": "DATA" }, { "from": 6500739127, "to": 6723590224, "type": "DATA" }, { "from": 6500739509, "to": 6715409368, "type": "DATA" }, { "from": 6500739556, "to": 6723590576, "type": "DATA" }, { "from": 6500740123, "to": 6712088560, "type": "DATA" }, { "from": 6500740158, "to": 6712128076, "type": "DATA" }, { "from": 6500740247, "to": 6742234664, "type": "DATA" } ] }, "strings": [ { "va": "0x19042dfa0", "offset": 272815008, "ascii": "event", "wide": null }, { "va": "0x190c1d978", "offset": 281136504, "ascii": "local_agent_image_cache", "wide": null }, { "va": "0x1907f243c", "offset": 276764732, "ascii": "upload", "wide": null }, { "va": "0x1901b9610", "offset": 270240272, "ascii": "resolve", "wide": null }, { "va": "0x1903c4ea0", "offset": 272384672, "ascii": "stage", "wide": null }, { "va": "0x190c1d840", "offset": 281136192, "ascii": "body_bytes", "wide": null }, { "va": "0x19014fc10", "offset": 269807632, "ascii": "status", "wide": null }, { "va": "0x190c1d990", "offset": 281136528, "ascii": "elapsed_ms", "wide": null }, { "va": "0x190c1d910", "offset": 281136400, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\codex_local_agent_image_cache.cc", "wide": null }, { "va": "0x190c1d9a0", "offset": 281136544, "ascii": "uploadRequired", "wide": null }, { "va": "0x19014f81c", "offset": 269806620, "ascii": "url", "wide": null }, { "va": "0x190c1d850", "offset": 281136208, "ascii": "expiresIn", "wide": null }, { "va": "0x1904503d8", "offset": 272955352, "ascii": "https", "wide": null }, { "va": "0x190c1d9b0", "offset": 281136560, "ascii": "myqcloud.com", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null } ], "imports": [ { "at": "0x1837964d5", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 23875 }, { "label": "b-agent-installer-commit", "file": "rea-b-agent-installer-commit.json", "file_sha256": "293e7f6ad676c38d94b74da0be45562f98c1eda1c8f357da5576108f18108bfd", "status": "completed", "evidence_id": "ev_328c1546ce91dbe4a679d7d8c88d095d8410e9165a0a9132d478f785ba8ac72c", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837b1110;pdgo @ 0x1837b1110;afij @ 0x1837b1110", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837b1110", "size": 8847, "nargs": 8, "signature": "fcn.1837b1110(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h, int64_t arg_3a8h);", "callrefs": [ { "from": 6500847987, "to": 6522337344, "type": "CALL" }, { "from": 6500848066, "to": 6522337344, "type": "CALL" }, { "from": 6500848152, "to": 6500848392, "type": "CODE" }, { "from": 6500848164, "to": 6511513840, "type": "CALL" }, { "from": 6500848169, "to": 6500848109, "type": "CODE" }, { "from": 6500848195, "to": 6500847992, "type": "CODE" }, { "from": 6500848214, "to": 6500848071, "type": "CODE" }, { "from": 6500848229, "to": 6511513840, "type": "CALL" }, { "from": 6500848234, "to": 6500848033, "type": "CODE" }, { "from": 6500848260, "to": 6542067384, "type": "CALL" }, { "from": 6500848319, "to": 6500848568, "type": "CODE" }, { "from": 6500848351, "to": 6511512544, "type": "CALL" }, { "from": 6500848364, "to": 6517433568, "type": "CALL" }, { "from": 6500848435, "to": 6453526016, "type": "CALL" }, { "from": 6500848481, "to": 6453526016, "type": "CALL" }, { "from": 6500848601, "to": 6542436672, "type": "CALL" }, { "from": 6500848754, "to": 6453526016, "type": "CALL" }, { "from": 6500848765, "to": 6529181184, "type": "CALL" }, { "from": 6500848781, "to": 6457113920, "type": "CALL" }, { "from": 6500848818, "to": 6511512544, "type": "CALL" }, { "from": 6500848852, "to": 6511512544, "type": "CALL" }, { "from": 6500848886, "to": 6511512544, "type": "CALL" }, { "from": 6500848920, "to": 6511512544, "type": "CALL" }, { "from": 6500848979, "to": 6454898800, "type": "CALL" }, { "from": 6500849067, "to": 6623495712, "type": "CALL" }, { "from": 6500849111, "to": 6543845488, "type": "CALL" }, { "from": 6500849194, "to": 6542434064, "type": "CALL" }, { "from": 6500849205, "to": 6500848327, "type": "CODE" }, { "from": 6500849239, "to": 6511512544, "type": "CALL" }, { "from": 6500849273, "to": 6511512544, "type": "CALL" }, { "from": 6500849307, "to": 6511512544, "type": "CALL" }, { "from": 6500849341, "to": 6511512544, "type": "CALL" }, { "from": 6500849351, "to": 6542067384, "type": "CALL" }, { "from": 6500849542, "to": 6475530272, "type": "CALL" }, { "from": 6500849620, "to": 6500850070, "type": "CODE" }, { "from": 6500849650, "to": 6524603600, "type": "CALL" }, { "from": 6500849696, "to": 6511512544, "type": "CALL" }, { "from": 6500849701, "to": 6500849577, "type": "CODE" }, { "from": 6500849711, "to": 6500850077, "type": "CODE" }, { "from": 6500849741, "to": 6524603600, "type": "CALL" }, { "from": 6500849787, "to": 6511512544, "type": "CALL" }, { "from": 6500849792, "to": 6500850031, "type": "CODE" }, { "from": 6500849805, "to": 6517433568, "type": "CALL" }, { "from": 6500849815, "to": 6535984016, "type": "CALL" }, { "from": 6500849825, "to": 6542067384, "type": "CALL" }, { "from": 6500849926, "to": 6542436672, "type": "CALL" }, { "from": 6500849992, "to": 6475530272, "type": "CALL" }, { "from": 6500850070, "to": 6511512544, "type": "CALL" }, { "from": 6500850106, "to": 6511512544, "type": "CALL" }, { "from": 6500850140, "to": 6511512544, "type": "CALL" }, { "from": 6500850174, "to": 6511512544, "type": "CALL" }, { "from": 6500850208, "to": 6511512544, "type": "CALL" }, { "from": 6500850276, "to": 6453526016, "type": "CALL" }, { "from": 6500850336, "to": 6453526016, "type": "CALL" }, { "from": 6500850373, "to": 6453526016, "type": "CALL" }, { "from": 6500850403, "to": 6511512544, "type": "CALL" }, { "from": 6500850418, "to": 6446849744, "type": "CALL" }, { "from": 6500850447, "to": 6446849744, "type": "CALL" }, { "from": 6500850465, "to": 6542067384, "type": "CALL" }, { "from": 6500850637, "to": 6475530272, "type": "CALL" }, { "from": 6500850712, "to": 6511512544, "type": "CALL" }, { "from": 6500850746, "to": 6511512544, "type": "CALL" }, { "from": 6500850780, "to": 6511512544, "type": "CALL" }, { "from": 6500850868, "to": 6524603600, "type": "CALL" }, { "from": 6500850914, "to": 6511512544, "type": "CALL" }, { "from": 6500850919, "to": 6500850676, "type": "CODE" }, { "from": 6500850949, "to": 6524603600, "type": "CALL" }, { "from": 6500850995, "to": 6511512544, "type": "CALL" }, { "from": 6500851000, "to": 6500851501, "type": "CODE" }, { "from": 6500851061, "to": 6624422672, "type": "CALL" }, { "from": 6500851164, "to": 6500856736, "type": "CALL" }, { "from": 6500851265, "to": 6500856736, "type": "CALL" }, { "from": 6500851283, "to": 6542067384, "type": "CALL" }, { "from": 6500851462, "to": 6475530272, "type": "CALL" }, { "from": 6500851541, "to": 6500851783, "type": "CODE" }, { "from": 6500851551, "to": 6542067384, "type": "CALL" }, { "from": 6500851712, "to": 6475530272, "type": "CALL" }, { "from": 6500851783, "to": 6511512544, "type": "CALL" }, { "from": 6500851796, "to": 6624422496, "type": "CALL" }, { "from": 6500851801, "to": 6500850717, "type": "CODE" }, { "from": 6500851831, "to": 6524603600, "type": "CALL" }, { "from": 6500851877, "to": 6511512544, "type": "CALL" }, { "from": 6500851882, "to": 6500851747, "type": "CODE" }, { "from": 6500851920, "to": 6453526016, "type": "CALL" }, { "from": 6500851958, "to": 6453526016, "type": "CALL" }, { "from": 6500851997, "to": 6500833664, "type": "CALL" }, { "from": 6500852047, "to": 6511512544, "type": "CALL" }, { "from": 6500852091, "to": 6511512544, "type": "CALL" }, { "from": 6500852110, "to": 6542067384, "type": "CALL" }, { "from": 6500852288, "to": 6475530272, "type": "CALL" }, { "from": 6500852363, "to": 6500851783, "type": "CODE" }, { "from": 6500852385, "to": 6524603600, "type": "CALL" }, { "from": 6500852423, "to": 6511512544, "type": "CALL" }, { "from": 6500852428, "to": 6500852018, "type": "CODE" }, { "from": 6500852458, "to": 6524603600, "type": "CALL" }, { "from": 6500852504, "to": 6511512544, "type": "CALL" }, { "from": 6500852509, "to": 6500852323, "type": "CODE" }, { "from": 6500852535, "to": 6542067384, "type": "CALL" }, { "from": 6500852589, "to": 6500852705, "type": "CODE" }, { "from": 6500852624, "to": 6535984912, "type": "CALL" }, { "from": 6500852747, "to": 6542436672, "type": "CALL" }, { "from": 6500852843, "to": 6511733920, "type": "CALL" }, { "from": 6500852920, "to": 6511512544, "type": "CALL" }, { "from": 6500852954, "to": 6511512544, "type": "CALL" }, { "from": 6500853033, "to": 6453526016, "type": "CALL" }, { "from": 6500853111, "to": 6453526016, "type": "CALL" }, { "from": 6500853154, "to": 6453526016, "type": "CALL" }, { "from": 6500853165, "to": 6624426384, "type": "CALL" }, { "from": 6500853197, "to": 6511512544, "type": "CALL" }, { "from": 6500853250, "to": 6624422816, "type": "CALL" }, { "from": 6500853301, "to": 6453526016, "type": "CALL" }, { "from": 6500853317, "to": 6624426384, "type": "CALL" }, { "from": 6500853349, "to": 6511512544, "type": "CALL" }, { "from": 6500853395, "to": 6624422816, "type": "CALL" }, { "from": 6500853458, "to": 6500833664, "type": "CALL" }, { "from": 6500853496, "to": 6500855580, "type": "CODE" }, { "from": 6500853506, "to": 6542067384, "type": "CALL" }, { "from": 6500853667, "to": 6475530272, "type": "CALL" }, { "from": 6500853745, "to": 6511512544, "type": "CALL" }, { "from": 6500853750, "to": 6500854254, "type": "CODE" }, { "from": 6500853780, "to": 6524603600, "type": "CALL" }, { "from": 6500853826, "to": 6511512544, "type": "CALL" }, { "from": 6500853831, "to": 6500853702, "type": "CODE" }, { "from": 6500853841, "to": 6542067384, "type": "CALL" }, { "from": 6500854016, "to": 6475530272, "type": "CALL" }, { "from": 6500854098, "to": 6511512544, "type": "CALL" }, { "from": 6500854103, "to": 6500854241, "type": "CODE" }, { "from": 6500854137, "to": 6511512544, "type": "CALL" }, { "from": 6500854191, "to": 6511512544, "type": "CALL" }, { "from": 6500854221, "to": 6624422496, "type": "CALL" }, { "from": 6500854249, "to": 6624422496, "type": "CALL" }, { "from": 6500854283, "to": 6511512544, "type": "CALL" }, { "from": 6500854317, "to": 6511512544, "type": "CALL" }, { "from": 6500854355, "to": 6500851783, "type": "CODE" }, { "from": 6500854365, "to": 6542067384, "type": "CALL" }, { "from": 6500854526, "to": 6475530272, "type": "CALL" }, { "from": 6500854608, "to": 6511512544, "type": "CALL" }, { "from": 6500854618, "to": 6500854241, "type": "CODE" }, { "from": 6500854648, "to": 6524603600, "type": "CALL" }, { "from": 6500854694, "to": 6511512544, "type": "CALL" }, { "from": 6500854704, "to": 6500854055, "type": "CODE" }, { "from": 6500854734, "to": 6524603600, "type": "CALL" }, { "from": 6500854780, "to": 6511512544, "type": "CALL" }, { "from": 6500854785, "to": 6500854569, "type": "CODE" }, { "from": 6500854815, "to": 6524603600, "type": "CALL" }, { "from": 6500854861, "to": 6500855131, "type": "CODE" }, { "from": 6500854871, "to": 6542067384, "type": "CALL" }, { "from": 6500855049, "to": 6475530272, "type": "CALL" }, { "from": 6500855131, "to": 6511512544, "type": "CALL" }, { "from": 6500855136, "to": 6500854213, "type": "CODE" }, { "from": 6500855166, "to": 6524603600, "type": "CALL" }, { "from": 6500855212, "to": 6511512544, "type": "CALL" }, { "from": 6500855217, "to": 6500855088, "type": "CODE" }, { "from": 6500855227, "to": 6542067384, "type": "CALL" }, { "from": 6500855415, "to": 6475530272, "type": "CALL" }, { "from": 6500855497, "to": 6500854191, "type": "CODE" }, { "from": 6500855527, "to": 6524603600, "type": "CALL" }, { "from": 6500855573, "to": 6511512544, "type": "CALL" }, { "from": 6500855578, "to": 6500855454, "type": "CODE" }, { "from": 6500855657, "to": 6456090784, "type": "CALL" }, { "from": 6500855749, "to": 6456090784, "type": "CALL" }, { "from": 6500855817, "to": 6471067168, "type": "CALL" }, { "from": 6500855926, "to": 6453526016, "type": "CALL" }, { "from": 6500855998, "to": 6469011872, "type": "CALL" }, { "from": 6500856052, "to": 6453526016, "type": "CALL" }, { "from": 6500856071, "to": 6457110720, "type": "CALL" }, { "from": 6500856103, "to": 6511512544, "type": "CALL" }, { "from": 6500856121, "to": 6542067384, "type": "CALL" }, { "from": 6500856294, "to": 6475530272, "type": "CALL" }, { "from": 6500856373, "to": 6511512544, "type": "CALL" }, { "from": 6500856378, "to": 6500854108, "type": "CODE" }, { "from": 6500856408, "to": 6524603600, "type": "CALL" }, { "from": 6500856454, "to": 6511512544, "type": "CALL" }, { "from": 6500856459, "to": 6500856333, "type": "CODE" }, { "from": 6500856508, "to": 6511512544, "type": "CALL" }, { "from": 6500856557, "to": 6511512544, "type": "CALL" }, { "from": 6500856590, "to": 6500844848, "type": "CALL" }, { "from": 6500856639, "to": 6500854108, "type": "CODE" }, { "from": 6500856655, "to": 6542089024, "type": "CALL" }, { "from": 6500856662, "to": 6542702416, "type": "CALL" }, { "from": 6500856725, "to": 6511512544, "type": "CALL" }, { "from": 6500856730, "to": 6500855870, "type": "CODE" } ], "datarefs": [ { "from": 6500847938, "to": 6740709440, "type": "DATA" }, { "from": 6500848392, "to": 6723597328, "type": "DATA" }, { "from": 6500848440, "to": 6718928168, "type": "DATA" }, { "from": 6500848619, "to": 6723597352, "type": "DATA" }, { "from": 6500848650, "to": 6723597356, "type": "DATA" }, { "from": 6500848660, "to": 6723597352, "type": "DATA" }, { "from": 6500849401, "to": 6723597616, "type": "DATA" }, { "from": 6500849435, "to": 6723597648, "type": "DATA" }, { "from": 6500849446, "to": 6723597632, "type": "DATA" }, { "from": 6500849457, "to": 6723597616, "type": "DATA" }, { "from": 6500849505, "to": 6712192108, "type": "DATA" }, { "from": 6500849878, "to": 6723597680, "type": "DATA" }, { "from": 6500849910, "to": 6723597680, "type": "DATA" }, { "from": 6500849955, "to": 6712192108, "type": "DATA" }, { "from": 6500850250, "to": 6723597328, "type": "DATA" }, { "from": 6500850296, "to": 6723597600, "type": "DATA" }, { "from": 6500850341, "to": 6723571184, "type": "DATA" }, { "from": 6500850515, "to": 6723597752, "type": "DATA" }, { "from": 6500850544, "to": 6723597783, "type": "DATA" }, { "from": 6500850555, "to": 6723597768, "type": "DATA" }, { "from": 6500850566, "to": 6723597752, "type": "DATA" }, { "from": 6500850600, "to": 6712192108, "type": "DATA" }, { "from": 6500850796, "to": 6740709440, "type": "DATA" }, { "from": 6500851027, "to": 6724139288, "type": "DATA" }, { "from": 6500851086, "to": 6723597832, "type": "DATA" }, { "from": 6500851113, "to": 6723597832, "type": "DATA" }, { "from": 6500851213, "to": 6723571191, "type": "DATA" }, { "from": 6500851232, "to": 6723571184, "type": "DATA" }, { "from": 6500851333, "to": 6723597856, "type": "DATA" }, { "from": 6500851362, "to": 6723597888, "type": "DATA" }, { "from": 6500851373, "to": 6723597872, "type": "DATA" }, { "from": 6500851384, "to": 6723597856, "type": "DATA" }, { "from": 6500851425, "to": 6712192108, "type": "DATA" }, { "from": 6500851601, "to": 6723597800, "type": "DATA" }, { "from": 6500851630, "to": 6723597809, "type": "DATA" }, { "from": 6500851641, "to": 6723597800, "type": "DATA" }, { "from": 6500851675, "to": 6712192108, "type": "DATA" }, { "from": 6500852160, "to": 6723597912, "type": "DATA" }, { "from": 6500852189, "to": 6723597944, "type": "DATA" }, { "from": 6500852200, "to": 6723597928, "type": "DATA" }, { "from": 6500852211, "to": 6723597912, "type": "DATA" }, { "from": 6500852251, "to": 6712192108, "type": "DATA" }, { "from": 6500852765, "to": 6712106840, "type": "DATA" }, { "from": 6500853556, "to": 6723597968, "type": "DATA" }, { "from": 6500853585, "to": 6723597984, "type": "DATA" }, { "from": 6500853596, "to": 6723597968, "type": "DATA" }, { "from": 6500853630, "to": 6712192108, "type": "DATA" }, { "from": 6500853891, "to": 6723598008, "type": "DATA" }, { "from": 6500853920, "to": 6723598024, "type": "DATA" }, { "from": 6500853931, "to": 6723598008, "type": "DATA" }, { "from": 6500853979, "to": 6712192108, "type": "DATA" }, { "from": 6500854415, "to": 6723598048, "type": "DATA" }, { "from": 6500854444, "to": 6723598062, "type": "DATA" }, { "from": 6500854455, "to": 6723598048, "type": "DATA" }, { "from": 6500854489, "to": 6712192108, "type": "DATA" }, { "from": 6500854931, "to": 6723598080, "type": "DATA" }, { "from": 6500854960, "to": 6723598096, "type": "DATA" }, { "from": 6500854971, "to": 6723598080, "type": "DATA" }, { "from": 6500855012, "to": 6712192108, "type": "DATA" }, { "from": 6500855287, "to": 6723597912, "type": "DATA" }, { "from": 6500855316, "to": 6723597944, "type": "DATA" }, { "from": 6500855327, "to": 6723597928, "type": "DATA" }, { "from": 6500855338, "to": 6723597912, "type": "DATA" }, { "from": 6500855378, "to": 6712192108, "type": "DATA" }, { "from": 6500855620, "to": 6723598120, "type": "DATA" }, { "from": 6500855720, "to": 6723598136, "type": "DATA" }, { "from": 6500855892, "to": 6723598152, "type": "DATA" }, { "from": 6500856007, "to": 6723597552, "type": "DATA" }, { "from": 6500856175, "to": 6723598176, "type": "DATA" }, { "from": 6500856204, "to": 6723598207, "type": "DATA" }, { "from": 6500856215, "to": 6723598192, "type": "DATA" }, { "from": 6500856226, "to": 6723598176, "type": "DATA" }, { "from": 6500856260, "to": 6712192108, "type": "DATA" } ] }, "strings": [ { "va": "0x190c1f410", "offset": 281143312, "ascii": "workspace-dependencies", "wide": null }, { "va": "0x1907ab528", "offset": 276474152, "ascii": "downloads", "wide": null }, { "va": "0x190c1f428", "offset": 281143336, "ascii": ".part", "wide": null }, { "va": "0x190c1f530", "offset": 281143600, "ascii": "Dependency archive is outside its managed download path", "wide": null }, { "va": "0x190c1f550", "offset": 281143632, "ascii": "s managed download path", "wide": null }, { "va": "0x190c1f540", "offset": 281143616, "ascii": "ve is outside its managed download path", "wide": null }, { "va": "0x19013ec6c", "offset": 269738092, "ascii": "error", "wide": null }, { "va": "0x190c1f570", "offset": 281143664, "ascii": "Dependency archive SHA-256 mismatch; retry will download it again", "wide": null }, { "va": "0x190c1f520", "offset": 281143584, "ascii": "skill-bundles", "wide": null }, { "va": "0x190c18df0", "offset": 281117168, "ascii": "tabbit-official", "wide": null }, { "va": "0x190c1f5b8", "offset": 281143736, "ascii": "Cannot create dependency installation directory", "wide": null }, { "va": "0x190c1f5d7", "offset": 281143767, "ascii": "lation directory", "wide": null }, { "va": "0x190c1f5c8", "offset": 281143752, "ascii": "pendency installation directory", "wide": null }, { "va": "0x190ca3918", "offset": 281685272, "ascii": null, "wide": "scoped_dir" }, { "va": "0x190c1f608", "offset": 281143816, "ascii": "codex-primary-runtime", "wide": null }, { "va": "0x190c18df7", "offset": 281117175, "ascii": "official", "wide": null }, { "va": "0x190c1f620", "offset": 281143840, "ascii": "Cannot safely extract workspace dependency archives", "wide": null }, { "va": "0x190c1f640", "offset": 281143872, "ascii": "dependency archives", "wide": null }, { "va": "0x190c1f630", "offset": 281143856, "ascii": "tract workspace dependency archives", "wide": null }, { "va": "0x190c1f5e8", "offset": 281143784, "ascii": "Cannot stage dependencies", "wide": null }, { "va": "0x190c1f5f1", "offset": 281143793, "ascii": "age dependencies", "wide": null }, { "va": "0x190c1f658", "offset": 281143896, "ascii": "Extracted dependency paths or metadata are invalid", "wide": null }, { "va": "0x190c1f678", "offset": 281143928, "ascii": "tadata are invalid", "wide": null }, { "va": "0x190c1f668", "offset": 281143912, "ascii": "ency paths or metadata are invalid", "wide": null }, { "va": "0x190c1f690", "offset": 281143952, "ascii": "Cannot publish workspace runtime", "wide": null }, { "va": "0x190c1f6a0", "offset": 281143968, "ascii": "orkspace runtime", "wide": null }, { "va": "0x190c1f6b8", "offset": 281143992, "ascii": "Cannot retain staged workspace runtime", "wide": null }, { "va": "0x190c1f6c8", "offset": 281144008, "ascii": "aged workspace runtime", "wide": null }, { "va": "0x190c1f6e0", "offset": 281144032, "ascii": "Cannot publish official skills", "wide": null }, { "va": "0x190c1f6ee", "offset": 281144046, "ascii": " official skills", "wide": null }, { "va": "0x190c1f700", "offset": 281144064, "ascii": "Cannot retain staged official skills", "wide": null }, { "va": "0x190c1f710", "offset": 281144080, "ascii": "aged official skills", "wide": null }, { "va": "0x190c1f728", "offset": 281144104, "ascii": "runtimeSha256", "wide": null }, { "va": "0x190c1f738", "offset": 281144120, "ascii": "skillsSha256", "wide": null }, { "va": "0x190c1f748", "offset": 281144136, "ascii": "installed.json.tmp", "wide": null }, { "va": "0x190c1f4f0", "offset": 281143536, "ascii": "installed.json", "wide": null }, { "va": "0x190c1f760", "offset": 281144160, "ascii": "Cannot commit workspace dependency installation", "wide": null }, { "va": "0x190c1f77f", "offset": 281144191, "ascii": "ncy installation", "wide": null }, { "va": "0x190c1f770", "offset": 281144176, "ascii": "rkspace dependency installation", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 108940 }, { "label": "b-agent-installer", "file": "rea-b-agent-installer.json", "file_sha256": "1fd2b9fa7021006cf3d7fe702b495e4442850c8a51ad2200d0a1e8ffcad1d952", "status": "completed", "evidence_id": "ev_0a6dc4c169c7899893301bf6abc0b38609ff55a2ed6dd2344064dc8f7fef11e2", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837afc80;pdgo @ 0x1837afc80;afij @ 0x1837afc80", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837afc80", "size": 2217, "nargs": 4, "signature": "fcn.1837afc80(int64_t arg1, int64_t arg2, int64_t arg_58h, int64_t arg_238h);", "callrefs": [ { "from": 6500842708, "to": 6453526016, "type": "CALL" }, { "from": 6500842750, "to": 6453526016, "type": "CALL" }, { "from": 6500842766, "to": 6500833296, "type": "CALL" }, { "from": 6500842797, "to": 6511512544, "type": "CALL" }, { "from": 6500842827, "to": 6511512544, "type": "CALL" }, { "from": 6500842869, "to": 6447834288, "type": "CALL" }, { "from": 6500842908, "to": 6447834288, "type": "CALL" }, { "from": 6500842941, "to": 6447834288, "type": "CALL" }, { "from": 6500843017, "to": 6513233600, "type": "CALL" }, { "from": 6500843062, "to": 6513233600, "type": "CALL" }, { "from": 6500843094, "to": 6500833664, "type": "CALL" }, { "from": 6500843118, "to": 6511512544, "type": "CALL" }, { "from": 6500843152, "to": 6511512544, "type": "CALL" }, { "from": 6500843157, "to": 6500843257, "type": "CODE" }, { "from": 6500843184, "to": 6524603600, "type": "CALL" }, { "from": 6500843230, "to": 6511512544, "type": "CALL" }, { "from": 6500843235, "to": 6500843270, "type": "CODE" }, { "from": 6500843314, "to": 6453526016, "type": "CALL" }, { "from": 6500843322, "to": 6457113920, "type": "CALL" }, { "from": 6500843354, "to": 6542434496, "type": "CALL" }, { "from": 6500843376, "to": 6470543728, "type": "CALL" }, { "from": 6500843403, "to": 6454127600, "type": "CALL" }, { "from": 6500843480, "to": 6500843822, "type": "CODE" }, { "from": 6500843498, "to": 6511512544, "type": "CALL" }, { "from": 6500843503, "to": 6500843768, "type": "CODE" }, { "from": 6500843530, "to": 6445650832, "type": "CALL" }, { "from": 6500843556, "to": 6524031184, "type": "CALL" }, { "from": 6500843567, "to": 6480750288, "type": "CALL" }, { "from": 6500843590, "to": 6445656528, "type": "CALL" }, { "from": 6500843676, "to": 6511512544, "type": "CALL" }, { "from": 6500843728, "to": 6511975280, "type": "CALL" }, { "from": 6500843741, "to": 6518967168, "type": "CALL" }, { "from": 6500843752, "to": 6454127600, "type": "CALL" }, { "from": 6500843825, "to": 6457113920, "type": "CALL" }, { "from": 6500843867, "to": 6535538512, "type": "CALL" }, { "from": 6500843921, "to": 6525678304, "type": "CALL" }, { "from": 6500843984, "to": 6512724096, "type": "CALL" }, { "from": 6500844030, "to": 6511512544, "type": "CALL" }, { "from": 6500844061, "to": 6511512544, "type": "CALL" }, { "from": 6500844080, "to": 6535984016, "type": "CALL" }, { "from": 6500844133, "to": 6500843508, "type": "CODE" }, { "from": 6500844168, "to": 6511512544, "type": "CALL" }, { "from": 6500844212, "to": 6453526016, "type": "CALL" }, { "from": 6500844222, "to": 6535984016, "type": "CALL" }, { "from": 6500844252, "to": 6511512544, "type": "CALL" }, { "from": 6500844265, "to": 6454127456, "type": "CALL" }, { "from": 6500844303, "to": 6500844848, "type": "CALL" }, { "from": 6500844346, "to": 6447834288, "type": "CALL" }, { "from": 6500844394, "to": 6513233600, "type": "CALL" }, { "from": 6500844407, "to": 6500846576, "type": "CALL" }, { "from": 6500844437, "to": 6511512544, "type": "CALL" }, { "from": 6500844496, "to": 6453526016, "type": "CALL" }, { "from": 6500844504, "to": 6457113920, "type": "CALL" }, { "from": 6500844546, "to": 6447834288, "type": "CALL" }, { "from": 6500844594, "to": 6513233600, "type": "CALL" }, { "from": 6500844641, "to": 6453526016, "type": "CALL" }, { "from": 6500844652, "to": 6500846576, "type": "CALL" }, { "from": 6500844676, "to": 6511512544, "type": "CALL" }, { "from": 6500844710, "to": 6511512544, "type": "CALL" }, { "from": 6500844744, "to": 6511512544, "type": "CALL" }, { "from": 6500844769, "to": 6511512544, "type": "CALL" }, { "from": 6500844830, "to": 6740346544, "type": "CALL" }, { "from": 6500844836, "to": 6500843720, "type": "CODE" } ], "datarefs": [ { "from": 6500842671, "to": 6723597328, "type": "DATA" }, { "from": 6500842713, "to": 6723597552, "type": "DATA" }, { "from": 6500842832, "to": 6712256456, "type": "DATA" }, { "from": 6500842877, "to": 6723597568, "type": "DATA" }, { "from": 6500842916, "to": 6723597584, "type": "DATA" }, { "from": 6500843511, "to": 6723598448, "type": "DATA" }, { "from": 6500843549, "to": 6723598520, "type": "DATA" }, { "from": 6500843572, "to": 6710367816, "type": "DATA" }, { "from": 6500843607, "to": 6708900496, "type": "DATA" }, { "from": 6500843622, "to": 6708923712, "type": "DATA" }, { "from": 6500843681, "to": 6708923824, "type": "DATA" }, { "from": 6500843704, "to": 6742217808, "type": "DATA" }, { "from": 6500843834, "to": 6723598432, "type": "DATA" }, { "from": 6500844093, "to": 6742246848, "type": "DATA" }, { "from": 6500844106, "to": 6741126112, "type": "DATA" }, { "from": 6500844119, "to": 6742246856, "type": "DATA" }, { "from": 6500844173, "to": 6723598152, "type": "DATA" }, { "from": 6500844325, "to": 6723597568, "type": "DATA" }, { "from": 6500844464, "to": 6723597600, "type": "DATA" }, { "from": 6500844525, "to": 6723597584, "type": "DATA" }, { "from": 6500844599, "to": 6723571184, "type": "DATA" } ] }, "strings": [ { "va": "0x190c1f410", "offset": 281143312, "ascii": "workspace-dependencies", "wide": null }, { "va": "0x190c1f4f0", "offset": 281143536, "ascii": "installed.json", "wide": null }, { "va": "0x19014e7c8", "offset": 269802440, "ascii": "version", "wide": null }, { "va": "0x190c1f500", "offset": 281143552, "ascii": "runtimeRoot", "wide": null }, { "va": "0x190c1f510", "offset": 281143568, "ascii": "pluginsRoot", "wide": null }, { "va": "0x190c1f870", "offset": 281144432, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\workspace_dependencies_installer.cc", "wide": null }, { "va": "0x190c1f8b8", "offset": 281144504, "ascii": "Cannot reclaim workspace dependency path: ", "wide": null }, { "va": "0x190c1f860", "offset": 281144416, "ascii": "scoped_dir", "wide": null }, { "va": "0x190c1f748", "offset": 281144136, "ascii": "installed.json.tmp", "wide": null }, { "va": "0x190c1f520", "offset": 281143584, "ascii": "skill-bundles", "wide": null }, { "va": "0x190c18df0", "offset": 281117168, "ascii": "tabbit-official", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 17716 }, { "label": "b-agent-loopback-router", "file": "rea-b-agent-loopback-router.json", "file_sha256": "c47985de208b0d268ac9e2241ed64b9609626a2b2d09a28242a74a929ff0abb4", "status": "completed", "evidence_id": "ev_d0e9f6f9721184c0afdd7b5cf1f37f4890b7e420630f4ec2beaf58ab23f5a6f0", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837844e0;pdgo @ 0x1837844e0;afij @ 0x1837844e0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837844e0", "size": 41593522, "nargs": 3, "signature": "fcn.1837844e0(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6459079767, "to": 6511634672, "type": "CALL" }, { "from": 6459079834, "to": 6511512544, "type": "CALL" }, { "from": 6459079839, "to": 6459079784, "type": "CODE" }, { "from": 6459079849, "to": 6542089024, "type": "CALL" }, { "from": 6459079872, "to": 6511512544, "type": "CALL" }, { "from": 6459079877, "to": 6459079778, "type": "CODE" }, { "from": 6459079897, "to": 6511512544, "type": "CALL" }, { "from": 6459079902, "to": 6459079790, "type": "CODE" }, { "from": 6500664719, "to": 6512842352, "type": "CALL" }, { "from": 6500664798, "to": 6467786960, "type": "CALL" }, { "from": 6500664856, "to": 6500664922, "type": "CODE" }, { "from": 6500664875, "to": 6500665093, "type": "CODE" }, { "from": 6500664911, "to": 6542434064, "type": "CALL" }, { "from": 6500664956, "to": 6511512544, "type": "CALL" }, { "from": 6500664990, "to": 6511512544, "type": "CALL" }, { "from": 6500665151, "to": 6511483504, "type": "CALL" }, { "from": 6500665260, "to": 6467786960, "type": "CALL" }, { "from": 6500665391, "to": 6511512544, "type": "CALL" }, { "from": 6500665433, "to": 6511512544, "type": "CALL" }, { "from": 6500665467, "to": 6511512544, "type": "CALL" }, { "from": 6500665472, "to": 6500665476, "type": "CODE" }, { "from": 6500665505, "to": 6511512544, "type": "CALL" }, { "from": 6500665587, "to": 6500673264, "type": "CALL" }, { "from": 6500665649, "to": 6459079728, "type": "CODE" }, { "from": 6500665662, "to": 6500868416, "type": "CALL" }, { "from": 6500665667, "to": 6500665592, "type": "CODE" }, { "from": 6500665677, "to": 6500665693, "type": "CODE" }, { "from": 6500665704, "to": 6542434272, "type": "CALL" }, { "from": 6500665963, "to": 6500665587, "type": "CODE" }, { "from": 6500666117, "to": 6446103440, "type": "CALL" }, { "from": 6500666174, "to": 6524007984, "type": "CALL" }, { "from": 6500666252, "to": 6500666262, "type": "CODE" }, { "from": 6500666277, "to": 6500666257, "type": "CODE" }, { "from": 6500666300, "to": 6500666310, "type": "CODE" }, { "from": 6500666321, "to": 6500666305, "type": "CODE" }, { "from": 6500666357, "to": 6500666371, "type": "CODE" }, { "from": 6500666386, "to": 6500666362, "type": "CODE" }, { "from": 6500666434, "to": 6500746880, "type": "CALL" }, { "from": 6500666538, "to": 6446103440, "type": "CALL" }, { "from": 6500666543, "to": 6500667648, "type": "CODE" }, { "from": 6500666650, "to": 6467786960, "type": "CALL" }, { "from": 6500666728, "to": 6500666768, "type": "CODE" }, { "from": 6500666757, "to": 6542434064, "type": "CALL" }, { "from": 6500666792, "to": 6511512544, "type": "CALL" }, { "from": 6500666826, "to": 6511512544, "type": "CALL" }, { "from": 6500666975, "to": 6445284496, "type": "CALL" }, { "from": 6500667061, "to": 6445284496, "type": "CALL" }, { "from": 6500667121, "to": 6445284496, "type": "CALL" }, { "from": 6500667187, "to": 6459541808, "type": "CALL" }, { "from": 6500667230, "to": 6511513840, "type": "CALL" }, { "from": 6500667248, "to": 6500676240, "type": "CALL" }, { "from": 6500667261, "to": 6445283808, "type": "CALL" }, { "from": 6500667266, "to": 6500667448, "type": "CODE" }, { "from": 6500667340, "to": 6500673264, "type": "CALL" }, { "from": 6500667372, "to": 6500667448, "type": "CODE" }, { "from": 6500667443, "to": 6500673264, "type": "CALL" }, { "from": 6500667476, "to": 6517426816, "type": "CALL" }, { "from": 6500667492, "to": 6511512544, "type": "CALL" }, { "from": 6500667497, "to": 6500665592, "type": "CODE" }, { "from": 6500667570, "to": 6624433408, "type": "CALL" }, { "from": 6500667702, "to": 6443410976, "type": "CALL" }, { "from": 6500667763, "to": 6444824624, "type": "CALL" }, { "from": 6500667871, "to": 6445284496, "type": "CALL" }, { "from": 6500667965, "to": 6471067168, "type": "CALL" }, { "from": 6500668085, "to": 6445284032, "type": "CALL" }, { "from": 6500668165, "to": 6459541808, "type": "CALL" }, { "from": 6500668208, "to": 6511513840, "type": "CALL" }, { "from": 6500668226, "to": 6500676240, "type": "CALL" }, { "from": 6500668239, "to": 6445283808, "type": "CALL" }, { "from": 6500668244, "to": 6500667345, "type": "CODE" }, { "from": 6500668263, "to": 6500667017, "type": "CODE" }, { "from": 6500668284, "to": 6500666506, "type": "CODE" }, { "from": 6500668316, "to": 6500668345, "type": "CODE" }, { "from": 6500668379, "to": 6500667332, "type": "CODE" }, { "from": 6500668392, "to": 6500669327, "type": "CODE" }, { "from": 6500668417, "to": 6542067384, "type": "CALL" }, { "from": 6500668485, "to": 6511647584, "type": "CALL" }, { "from": 6500668494, "to": 6500668518, "type": "CODE" }, { "from": 6500668523, "to": 6542067384, "type": "CALL" }, { "from": 6500668631, "to": 6542436672, "type": "CALL" }, { "from": 6500668654, "to": 6500676624, "type": "CALL" }, { "from": 6500668709, "to": 6542067384, "type": "CALL" }, { "from": 6500668811, "to": 6526592128, "type": "CALL" }, { "from": 6500668829, "to": 6519178480, "type": "CALL" }, { "from": 6500668852, "to": 6529736720, "type": "CALL" }, { "from": 6500668906, "to": 6500779200, "type": "CALL" }, { "from": 6500668944, "to": 6511512544, "type": "CALL" }, { "from": 6500668952, "to": 6500669884, "type": "CODE" }, { "from": 6500668984, "to": 6500668960, "type": "CODE" }, { "from": 6500669005, "to": 6500668989, "type": "CODE" }, { "from": 6500669042, "to": 6500668969, "type": "CODE" }, { "from": 6500669067, "to": 6500669047, "type": "CODE" }, { "from": 6500669088, "to": 6500668994, "type": "CODE" }, { "from": 6500669129, "to": 6500753056, "type": "CALL" }, { "from": 6500669197, "to": 6524006896, "type": "CALL" }, { "from": 6500669239, "to": 6500669052, "type": "CODE" }, { "from": 6500669313, "to": 6500669879, "type": "CODE" }, { "from": 6500669388, "to": 6500669871, "type": "CODE" }, { "from": 6500669417, "to": 6447428352, "type": "CALL" }, { "from": 6500669499, "to": 6500669879, "type": "CODE" }, { "from": 6500669508, "to": 6500670041, "type": "CODE" }, { "from": 6500669540, "to": 6526594288, "type": "CALL" }, { "from": 6500669628, "to": 6500673264, "type": "CALL" }, { "from": 6500669662, "to": 6511512544, "type": "CALL" }, { "from": 6500669700, "to": 6511512544, "type": "CALL" }, { "from": 6500669705, "to": 6500669884, "type": "CODE" }, { "from": 6500669799, "to": 6500669879, "type": "CODE" }, { "from": 6500669879, "to": 6500673264, "type": "CALL" }, { "from": 6500669940, "to": 6524603600, "type": "CALL" }, { "from": 6500669982, "to": 6500667488, "type": "CODE" }, { "from": 6500670094, "to": 6446103440, "type": "CALL" }, { "from": 6500670148, "to": 6447834288, "type": "CALL" }, { "from": 6500670222, "to": 6524006896, "type": "CALL" }, { "from": 6500670290, "to": 6524006896, "type": "CALL" }, { "from": 6500670369, "to": 6500670428, "type": "CODE" }, { "from": 6500670375, "to": 6500670317, "type": "CODE" }, { "from": 6500670383, "to": 6500670423, "type": "CODE" }, { "from": 6500670404, "to": 6542434064, "type": "CALL" }, { "from": 6500670446, "to": 6500670389, "type": "CODE" }, { "from": 6500670473, "to": 6524603600, "type": "CALL" }, { "from": 6500670519, "to": 6511512544, "type": "CALL" }, { "from": 6500670527, "to": 6500670591, "type": "CODE" }, { "from": 6500670536, "to": 6500670545, "type": "CODE" }, { "from": 6500670553, "to": 6526594288, "type": "CALL" }, { "from": 6500670664, "to": 6446103440, "type": "CALL" }, { "from": 6500670718, "to": 6455871936, "type": "CALL" }, { "from": 6500670790, "to": 6471067168, "type": "CALL" }, { "from": 6500670821, "to": 6526594288, "type": "CALL" }, { "from": 6500670868, "to": 6511512544, "type": "CALL" }, { "from": 6500670902, "to": 6500671057, "type": "CODE" }, { "from": 6500670937, "to": 6524603600, "type": "CALL" }, { "from": 6500670983, "to": 6511512544, "type": "CALL" }, { "from": 6500670996, "to": 6500671084, "type": "CODE" }, { "from": 6500671221, "to": 6467786960, "type": "CALL" }, { "from": 6500671262, "to": 6511512544, "type": "CALL" }, { "from": 6500671326, "to": 6536215600, "type": "CALL" }, { "from": 6500671380, "to": 6511512544, "type": "CALL" }, { "from": 6500671460, "to": 6535984912, "type": "CALL" }, { "from": 6500671653, "to": 6500680960, "type": "CALL" }, { "from": 6500671687, "to": 6511512544, "type": "CALL" }, { "from": 6500671728, "to": 6511512544, "type": "CALL" }, { "from": 6500671759, "to": 6511512544, "type": "CALL" }, { "from": 6500671764, "to": 6500669633, "type": "CODE" }, { "from": 6500671793, "to": 6511513840, "type": "CALL" }, { "from": 6500671798, "to": 6500671508, "type": "CODE" }, { "from": 6500671872, "to": 6500673264, "type": "CALL" }, { "from": 6500671902, "to": 6500671699, "type": "CODE" }, { "from": 6500671923, "to": 6500672101, "type": "CODE" }, { "from": 6500672059, "to": 6445284496, "type": "CALL" }, { "from": 6500672145, "to": 6445284496, "type": "CALL" }, { "from": 6500672205, "to": 6445284496, "type": "CALL" }, { "from": 6500672304, "to": 6445284032, "type": "CALL" }, { "from": 6500672358, "to": 6459541808, "type": "CALL" }, { "from": 6500672382, "to": 6500673050, "type": "CODE" }, { "from": 6500672401, "to": 6500672270, "type": "CODE" }, { "from": 6500672413, "to": 6500670545, "type": "CODE" }, { "from": 6500672480, "to": 6500670545, "type": "CODE" }, { "from": 6500672533, "to": 6465812496, "type": "CALL" }, { "from": 6500672583, "to": 6443410976, "type": "CALL" }, { "from": 6500672674, "to": 6500670561, "type": "CODE" }, { "from": 6500672686, "to": 6500670545, "type": "CODE" }, { "from": 6500672711, "to": 6511729936, "type": "CALL" }, { "from": 6500672716, "to": 6500670561, "type": "CODE" }, { "from": 6500672746, "to": 6524603600, "type": "CALL" }, { "from": 6500672792, "to": 6511512544, "type": "CALL" }, { "from": 6500672797, "to": 6500667645, "type": "CODE" }, { "from": 6500672827, "to": 6524603600, "type": "CALL" }, { "from": 6500672873, "to": 6511512544, "type": "CALL" }, { "from": 6500672878, "to": 6500667448, "type": "CODE" }, { "from": 6500672902, "to": 6511512544, "type": "CALL" }, { "from": 6500672907, "to": 6500668104, "type": "CODE" }, { "from": 6500672923, "to": 6517426816, "type": "CALL" }, { "from": 6500672941, "to": 6511512544, "type": "CALL" }, { "from": 6500672946, "to": 6500667628, "type": "CODE" }, { "from": 6500672960, "to": 6500666201, "type": "CODE" }, { "from": 6500672976, "to": 6542089024, "type": "CALL" }, { "from": 6500672987, "to": 6500665365, "type": "CODE" }, { "from": 6500673027, "to": 6511730288, "type": "CALL" }, { "from": 6500673032, "to": 6500670561, "type": "CODE" }, { "from": 6500673042, "to": 6500672984, "type": "CODE" }, { "from": 6500673074, "to": 6500667235, "type": "CODE" }, { "from": 6500673174, "to": 6500668040, "type": "CODE" }, { "from": 6500673203, "to": 6500668213, "type": "CODE" }, { "from": 6500673240, "to": 6511512544, "type": "CALL" }, { "from": 6500673245, "to": 6500673089, "type": "CODE" } ], "datarefs": [ { "from": 6459079736, "to": 6740709440, "type": "DATA" }, { "from": 6459079798, "to": 6740709440, "type": "DATA" }, { "from": 6500664579, "to": 6740709440, "type": "DATA" }, { "from": 6500664660, "to": 6536805536, "type": "DATA" }, { "from": 6500664690, "to": 6723586792, "type": "DATA" }, { "from": 6500664737, "to": 6712142572, "type": "DATA" }, { "from": 6500665029, "to": 6717200800, "type": "DATA" }, { "from": 6500665181, "to": 6717995160, "type": "DATA" }, { "from": 6500665220, "to": 6717995165, "type": "DATA" }, { "from": 6500665239, "to": 6717995160, "type": "DATA" }, { "from": 6500665519, "to": 6723586600, "type": "DATA" }, { "from": 6500665545, "to": 6723586648, "type": "DATA" }, { "from": 6500665603, "to": 6740709440, "type": "DATA" }, { "from": 6500665825, "to": 6715492944, "type": "DATA" }, { "from": 6500665835, "to": 6715492946, "type": "DATA" }, { "from": 6500665901, "to": 6723586712, "type": "DATA" }, { "from": 6500665924, "to": 6723586760, "type": "DATA" }, { "from": 6500665979, "to": 6717987280, "type": "DATA" }, { "from": 6500666140, "to": 6712256868, "type": "DATA" }, { "from": 6500666209, "to": 6723575844, "type": "DATA" }, { "from": 6500666218, "to": 6723575848, "type": "DATA" }, { "from": 6500666575, "to": 6717982672, "type": "DATA" }, { "from": 6500666602, "to": 6717982677, "type": "DATA" }, { "from": 6500666621, "to": 6717982672, "type": "DATA" }, { "from": 6500666946, "to": 6723586340, "type": "DATA" }, { "from": 6500667032, "to": 6723586352, "type": "DATA" }, { "from": 6500667066, "to": 6723586880, "type": "DATA" }, { "from": 6500667092, "to": 6717684432, "type": "DATA" }, { "from": 6500667271, "to": 6723586904, "type": "DATA" }, { "from": 6500667298, "to": 6723586856, "type": "DATA" }, { "from": 6500667374, "to": 6723586808, "type": "DATA" }, { "from": 6500667401, "to": 6723586856, "type": "DATA" }, { "from": 6500667541, "to": 6717173124, "type": "DATA" }, { "from": 6500667665, "to": 6717173124, "type": "DATA" }, { "from": 6500667819, "to": 6723586984, "type": "DATA" }, { "from": 6500667845, "to": 6717684432, "type": "DATA" }, { "from": 6500667876, "to": 6715434912, "type": "DATA" }, { "from": 6500668289, "to": 6723586960, "type": "DATA" }, { "from": 6500668318, "to": 6723586936, "type": "DATA" }, { "from": 6500668345, "to": 6723586856, "type": "DATA" }, { "from": 6500668588, "to": 6723587072, "type": "DATA" }, { "from": 6500668615, "to": 6723587072, "type": "DATA" }, { "from": 6500668723, "to": 6500713472, "type": "DATA" }, { "from": 6500668734, "to": 6488537312, "type": "DATA" }, { "from": 6500668745, "to": 6496570832, "type": "DATA" }, { "from": 6500668756, "to": 6500676960, "type": "DATA" }, { "from": 6500668834, "to": 6723586776, "type": "DATA" }, { "from": 6500669152, "to": 6712481032, "type": "DATA" }, { "from": 6500669244, "to": 6723575608, "type": "DATA" }, { "from": 6500669271, "to": 6723590360, "type": "DATA" }, { "from": 6500669327, "to": 6723587008, "type": "DATA" }, { "from": 6500669354, "to": 6723587040, "type": "DATA" }, { "from": 6500669430, "to": 6723575584, "type": "DATA" }, { "from": 6500669457, "to": 6723590288, "type": "DATA" }, { "from": 6500669525, "to": 6723589792, "type": "DATA" }, { "from": 6500669586, "to": 6723587040, "type": "DATA" }, { "from": 6500669730, "to": 6723587256, "type": "DATA" }, { "from": 6500669757, "to": 6723587304, "type": "DATA" }, { "from": 6500669810, "to": 6723587200, "type": "DATA" }, { "from": 6500669837, "to": 6723587040, "type": "DATA" }, { "from": 6500670111, "to": 6712256868, "type": "DATA" }, { "from": 6500670177, "to": 6712481032, "type": "DATA" }, { "from": 6500670248, "to": 6723589880, "type": "DATA" }, { "from": 6500670529, "to": 6723589904, "type": "DATA" }, { "from": 6500670538, "to": 6723589840, "type": "DATA" }, { "from": 6500670681, "to": 6723589728, "type": "DATA" }, { "from": 6500670806, "to": 6723589744, "type": "DATA" }, { "from": 6500671143, "to": 6723587328, "type": "DATA" }, { "from": 6500671803, "to": 6723587352, "type": "DATA" }, { "from": 6500671830, "to": 6723587040, "type": "DATA" }, { "from": 6500672030, "to": 6723586340, "type": "DATA" }, { "from": 6500672116, "to": 6723586352, "type": "DATA" }, { "from": 6500672150, "to": 6723586880, "type": "DATA" }, { "from": 6500672176, "to": 6717684432, "type": "DATA" }, { "from": 6500672210, "to": 6715434912, "type": "DATA" }, { "from": 6500672406, "to": 6723589952, "type": "DATA" }, { "from": 6500672473, "to": 6723590000, "type": "DATA" }, { "from": 6500672499, "to": 6715110672, "type": "DATA" }, { "from": 6500672679, "to": 6723590064, "type": "DATA" }, { "from": 6500673101, "to": 6712128076, "type": "DATA" } ] }, "strings": [ { "va": "0x190c1cae8", "offset": 281132776, "ascii": "127.0.0.1:%d", "wide": null }, { "va": "0x190132aec", "offset": 269688556, "ascii": "host", "wide": null }, { "va": "0x1906059a0", "offset": 274746784, "ascii": "Bearer ", "wide": null }, { "va": "0x1906c7898", "offset": 275541144, "ascii": "authorization", "wide": null }, { "va": "0x1906c789d", "offset": 275541149, "ascii": "rization", "wide": null }, { "va": "0x190c1ca28", "offset": 281132584, "ascii": "Local Agent loopback authorization failed", "wide": null }, { "va": "0x190c1ca58", "offset": 281132632, "ascii": "local_agent_access_denied", "wide": null }, { "va": "0x190464a50", "offset": 273038928, "ascii": "GET", "wide": null }, { "va": "0x190c1ca98", "offset": 281132696, "ascii": "Local Agent loopback route was not found", "wide": null }, { "va": "0x190c1cac8", "offset": 281132744, "ascii": "route_not_found", "wide": null }, { "va": "0x1906c59d0", "offset": 275533264, "ascii": "POST", "wide": null }, { "va": "0x19014e964", "offset": 269802852, "ascii": "model", "wide": null }, { "va": "0x190c1a024", "offset": 281121828, "ascii": "byok/", "wide": null }, { "va": "0x1906c47d0", "offset": 275528656, "ascii": "if-none-match", "wide": null }, { "va": "0x1906c47d5", "offset": 275528661, "ascii": "ne-match", "wide": null }, { "va": "0x190c1c924", "offset": 281132324, "ascii": "ETag", "wide": null }, { "va": "0x190c1c930", "offset": 281132336, "ascii": "X-Tabbit-Applied-Catalog-Revision", "wide": null }, { "va": "0x190c1cb40", "offset": 281132864, "ascii": "private, no-cache", "wide": null }, { "va": "0x19067bad0", "offset": 275230416, "ascii": "Cache-Control", "wide": null }, { "va": "0x190c1cb58", "offset": 281132888, "ascii": "Model catalog is unavailable", "wide": null }, { "va": "0x190c1cb28", "offset": 281132840, "ascii": "catalog_unavailable", "wide": null }, { "va": "0x190c1caf8", "offset": 281132792, "ascii": "No verified Local Agent catalog is available", "wide": null }, { "va": "0x1905fed84", "offset": 274719108, "ascii": "models", "wide": null }, { "va": "0x190c1cba8", "offset": 281132968, "ascii": "private, no-store", "wide": null }, { "va": "0x1904567a0", "offset": 272980896, "ascii": "application/json", "wide": null }, { "va": "0x190c1cb90", "offset": 281132944, "ascii": "No models configured", "wide": null }, { "va": "0x190c1cb78", "offset": 281132920, "ascii": "Invalid model catalog", "wide": null }, { "va": "0x190c1cad8", "offset": 281132760, "ascii": "loopback-", "wide": null }, { "va": "0x190185508", "offset": 270027016, "ascii": "stream", "wide": null }, { "va": "0x190c1d8d8", "offset": 281136344, "ascii": "model_unavailable", "wide": null }, { "va": "0x190c1cbc0", "offset": 281132992, "ascii": "Invalid streaming request", "wide": null }, { "va": "0x190c1cbe0", "offset": 281133024, "ascii": "protocol_contract_violation", "wide": null }, { "va": "0x190c1d890", "offset": 281136272, "ascii": "tabbit_login_required", "wide": null }, { "va": "0x190c1d6a0", "offset": 281135776, "ascii": "Responses request exceeds the Local Agent limit", "wide": null }, { "va": "0x190c1ccb8", "offset": 281133240, "ascii": "Local Agent model catalog is unavailable", "wide": null }, { "va": "0x190c1cce8", "offset": 281133288, "ascii": "inference_not_ready", "wide": null }, { "va": "0x190c1cc80", "offset": 281133184, "ascii": "A loopback connection cannot carry overlapping requests", "wide": null }, { "va": "0x190c1d6f8", "offset": 281135864, "ascii": "parallel_tool_calls", "wide": null }, { "va": "0x190c1d710", "offset": 281135888, "ascii": "Responses request selected an unpublished model", "wide": null }, { "va": "0x190c1d6d0", "offset": 281135824, "ascii": "Responses request is not a JSON object", "wide": null }, { "va": "0x190c1d660", "offset": 281135712, "ascii": "client_metadata", "wide": null }, { "va": "0x190c1d670", "offset": 281135728, "ascii": "Responses request could not be privacy-filtered", "wide": null }, { "va": "0x190c1cd00", "offset": 281133312, "ascii": "x-client-request-id", "wide": null }, { "va": "0x190c1cd18", "offset": 281133336, "ascii": "X-Client-Request-Id must be a lowercase UUID", "wide": null }, { "va": "0x190c1d740", "offset": 281135936, "ascii": "Local Agent requires streaming Responses", "wide": null }, { "va": "0x190c1d770", "offset": 281135984, "ascii": "Local Agent requires an explicit parallel_tool_calls setting", "wide": null }, { "va": "0x190407510", "offset": 272656656, "ascii": "tools", "wide": null }, { "va": "0x190c1d7b0", "offset": 281136048, "ascii": "Responses tools must be an array", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 109155 }, { "label": "b-agent-model-providers", "file": "rea-b-agent-model-providers.json", "file_sha256": "19afd6a8ee3b2a767ab026ab58abf2ad7f92117c1fdf4a3dec631cce64bba6fa", "status": "failed", "evidence_id": "ev_85fbf7c4c924e753a1ca2f774b2cf8f75f4f383f66143dc0b49c2036bc5cdd41", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18379a130;pdgo @ 0x18379a130;afij @ 0x18379a130", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18379a130", "size": 13567, "nargs": 4, "signature": "fcn.18379a130(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg_28h);", "callrefs": [ { "from": 6500753831, "to": 6542067384, "type": "CALL" }, { "from": 6500754011, "to": 6740346544, "type": "CALL" }, { "from": 6500754029, "to": 6740346544, "type": "CALL" }, { "from": 6500754092, "to": 6500754494, "type": "CODE" }, { "from": 6500754124, "to": 6500752304, "type": "CALL" }, { "from": 6500754173, "to": 6740346544, "type": "CALL" }, { "from": 6500754191, "to": 6740346544, "type": "CALL" }, { "from": 6500754254, "to": 6500754494, "type": "CODE" }, { "from": 6500754417, "to": 6740346544, "type": "CALL" }, { "from": 6500754435, "to": 6740346544, "type": "CALL" }, { "from": 6500754494, "to": 6511512544, "type": "CALL" }, { "from": 6500754522, "to": 6511512544, "type": "CALL" }, { "from": 6500754581, "to": 6740346544, "type": "CALL" }, { "from": 6500754587, "to": 6500754544, "type": "CODE" }, { "from": 6500754610, "to": 6524603600, "type": "CALL" }, { "from": 6500754643, "to": 6511512544, "type": "CALL" }, { "from": 6500754648, "to": 6500754535, "type": "CODE" }, { "from": 6500754675, "to": 6524603600, "type": "CALL" }, { "from": 6500754721, "to": 6511512544, "type": "CALL" }, { "from": 6500754726, "to": 6500754458, "type": "CODE" }, { "from": 6500754746, "to": 6511513840, "type": "CALL" }, { "from": 6500754751, "to": 6500754929, "type": "CODE" }, { "from": 6500754772, "to": 6500754929, "type": "CODE" }, { "from": 6500754859, "to": 6447834288, "type": "CALL" }, { "from": 6500754891, "to": 6447834288, "type": "CALL" }, { "from": 6500754976, "to": 6500754978, "type": "CODE" }, { "from": 6500754976, "to": 6500755056, "type": "CODE" }, { "from": 6500754976, "to": 6500755101, "type": "CODE" }, { "from": 6500754976, "to": 6500755314, "type": "CODE" }, { "from": 6500754976, "to": 6500755353, "type": "CODE" }, { "from": 6500755051, "to": 6500755349, "type": "CODE" }, { "from": 6500755096, "to": 6500755349, "type": "CODE" }, { "from": 6500755170, "to": 6542067384, "type": "CALL" }, { "from": 6500755304, "to": 6500753440, "type": "CALL" }, { "from": 6500755309, "to": 6500755781, "type": "CODE" }, { "from": 6500755372, "to": 6447428352, "type": "CALL" }, { "from": 6500755429, "to": 6500755431, "type": "CODE" }, { "from": 6500755429, "to": 6500755518, "type": "CODE" }, { "from": 6500755429, "to": 6500755826, "type": "CODE" }, { "from": 6500755429, "to": 6500755868, "type": "CODE" }, { "from": 6500755429, "to": 6500756174, "type": "CODE" }, { "from": 6500755429, "to": 6500757284, "type": "CODE" }, { "from": 6500755429, "to": 6500763035, "type": "CODE" }, { "from": 6500755513, "to": 6500755868, "type": "CODE" }, { "from": 6500755542, "to": 6500755868, "type": "CODE" }, { "from": 6500755699, "to": 6740346544, "type": "CALL" }, { "from": 6500755717, "to": 6740346544, "type": "CALL" }, { "from": 6500755776, "to": 6511512544, "type": "CALL" }, { "from": 6500755821, "to": 6500754494, "type": "CODE" }, { "from": 6500756007, "to": 6740346544, "type": "CALL" }, { "from": 6500756025, "to": 6740346544, "type": "CALL" }, { "from": 6500756088, "to": 6500755776, "type": "CODE" }, { "from": 6500756118, "to": 6524603600, "type": "CALL" }, { "from": 6500756164, "to": 6511512544, "type": "CALL" }, { "from": 6500756169, "to": 6500755740, "type": "CODE" }, { "from": 6500756220, "to": 6542067384, "type": "CALL" }, { "from": 6500756323, "to": 6447834288, "type": "CALL" }, { "from": 6500756365, "to": 6447834288, "type": "CALL" }, { "from": 6500756442, "to": 6455871936, "type": "CALL" }, { "from": 6500756452, "to": 6542067384, "type": "CALL" }, { "from": 6500756608, "to": 6475530592, "type": "CALL" }, { "from": 6500756645, "to": 6624433168, "type": "CALL" }, { "from": 6500756752, "to": 6500774608, "type": "CALL" }, { "from": 6500756807, "to": 6511512544, "type": "CALL" }, { "from": 6500756850, "to": 6740346544, "type": "CALL" }, { "from": 6500756899, "to": 6500755776, "type": "CODE" }, { "from": 6500756928, "to": 6511513840, "type": "CALL" }, { "from": 6500756933, "to": 6500756730, "type": "CODE" }, { "from": 6500756969, "to": 6511512544, "type": "CALL" }, { "from": 6500756974, "to": 6500756420, "type": "CODE" }, { "from": 6500756996, "to": 6511513840, "type": "CALL" }, { "from": 6500757001, "to": 6500756411, "type": "CODE" }, { "from": 6500757017, "to": 6535984912, "type": "CALL" }, { "from": 6500757022, "to": 6500756373, "type": "CODE" }, { "from": 6500757049, "to": 6524603600, "type": "CALL" }, { "from": 6500757086, "to": 6511512544, "type": "CALL" }, { "from": 6500757091, "to": 6500756771, "type": "CODE" }, { "from": 6500757115, "to": 6500755781, "type": "CODE" }, { "from": 6500757145, "to": 6524603600, "type": "CALL" }, { "from": 6500757191, "to": 6511512544, "type": "CALL" }, { "from": 6500757196, "to": 6500756048, "type": "CODE" }, { "from": 6500757228, "to": 6524603600, "type": "CALL" }, { "from": 6500757274, "to": 6511512544, "type": "CALL" }, { "from": 6500757279, "to": 6500757557, "type": "CODE" }, { "from": 6500757380, "to": 6500755868, "type": "CODE" }, { "from": 6500757428, "to": 6500777456, "type": "CALL" }, { "from": 6500757516, "to": 6740346544, "type": "CALL" }, { "from": 6500757534, "to": 6740346544, "type": "CALL" }, { "from": 6500757597, "to": 6500755776, "type": "CODE" }, { "from": 6500757640, "to": 6500757653, "type": "CODE" }, { "from": 6500757667, "to": 6500757677, "type": "CODE" }, { "from": 6500757690, "to": 6542434064, "type": "CALL" }, { "from": 6500757705, "to": 6500757648, "type": "CODE" }, { "from": 6500757710, "to": 6500757722, "type": "CODE" }, { "from": 6500757715, "to": 6500757726, "type": "CODE" }, { "from": 6500757762, "to": 6447834288, "type": "CALL" }, { "from": 6500757923, "to": 6740346544, "type": "CALL" }, { "from": 6500757941, "to": 6740346544, "type": "CALL" }, { "from": 6500758000, "to": 6500755776, "type": "CODE" }, { "from": 6500758030, "to": 6524603600, "type": "CALL" }, { "from": 6500758076, "to": 6511512544, "type": "CALL" }, { "from": 6500758081, "to": 6500757960, "type": "CODE" }, { "from": 6500758110, "to": 6524603600, "type": "CALL" }, { "from": 6500758150, "to": 6511512544, "type": "CALL" }, { "from": 6500758160, "to": 6500758524, "type": "CODE" }, { "from": 6500758182, "to": 6542067384, "type": "CALL" }, { "from": 6500758218, "to": 6500758674, "type": "CODE" }, { "from": 6500758256, "to": 6545851008, "type": "CALL" }, { "from": 6500758315, "to": 6455871936, "type": "CALL" }, { "from": 6500758409, "to": 6475530592, "type": "CALL" }, { "from": 6500758460, "to": 6471067168, "type": "CALL" }, { "from": 6500758710, "to": 6542436672, "type": "CALL" }, { "from": 6500758766, "to": 6542067384, "type": "CALL" }, { "from": 6500758906, "to": 6512942288, "type": "CALL" }, { "from": 6500758943, "to": 6457304048, "type": "CALL" }, { "from": 6500759025, "to": 6740346544, "type": "CALL" }, { "from": 6500759044, "to": 6740346544, "type": "CALL" }, { "from": 6500759099, "to": 6511512544, "type": "CALL" }, { "from": 6500759118, "to": 6500790960, "type": "CALL" }, { "from": 6500759131, "to": 6511512544, "type": "CALL" }, { "from": 6500759176, "to": 6500755776, "type": "CODE" }, { "from": 6500759206, "to": 6524603600, "type": "CALL" }, { "from": 6500759252, "to": 6511512544, "type": "CALL" }, { "from": 6500759262, "to": 6500759063, "type": "CODE" }, { "from": 6500759280, "to": 6500759319, "type": "CODE" }, { "from": 6500759294, "to": 6520862464, "type": "CALL" }, { "from": 6500759349, "to": 6542434064, "type": "CALL" }, { "from": 6500759358, "to": 6500759282, "type": "CODE" }, { "from": 6500759368, "to": 6500759338, "type": "CODE" }, { "from": 6500759408, "to": 6500759454, "type": "CODE" }, { "from": 6500759435, "to": 6500777456, "type": "CALL" }, { "from": 6500759468, "to": 6500759410, "type": "CODE" }, { "from": 6500759495, "to": 6524603600, "type": "CALL" }, { "from": 6500759541, "to": 6511512544, "type": "CALL" }, { "from": 6500759546, "to": 6500754052, "type": "CODE" }, { "from": 6500759576, "to": 6524603600, "type": "CALL" }, { "from": 6500759622, "to": 6511512544, "type": "CALL" }, { "from": 6500759627, "to": 6500754214, "type": "CODE" }, { "from": 6500759653, "to": 6500759914, "type": "CODE" }, { "from": 6500759684, "to": 6524007984, "type": "CALL" }, { "from": 6500759721, "to": 6524007984, "type": "CALL" }, { "from": 6500759755, "to": 6524007984, "type": "CALL" }, { "from": 6500759794, "to": 6524007984, "type": "CALL" }, { "from": 6500759836, "to": 6443410976, "type": "CALL" }, { "from": 6500759873, "to": 6443410976, "type": "CALL" }, { "from": 6500759951, "to": 6542434272, "type": "CALL" }, { "from": 6500760128, "to": 6500760475, "type": "CODE" }, { "from": 6500760141, "to": 6511396000, "type": "CALL" }, { "from": 6500760283, "to": 6740346544, "type": "CALL" }, { "from": 6500760301, "to": 6740346544, "type": "CALL" }, { "from": 6500760360, "to": 6500754494, "type": "CODE" }, { "from": 6500760389, "to": 6500760024, "type": "CODE" }, { "from": 6500760419, "to": 6524603600, "type": "CALL" }, { "from": 6500760465, "to": 6511512544, "type": "CALL" }, { "from": 6500760470, "to": 6500760320, "type": "CODE" }, { "from": 6500760609, "to": 6515567520, "type": "CALL" }, { "from": 6500760715, "to": 6511645120, "type": "CALL" }, { "from": 6500760780, "to": 6500760811, "type": "CODE" }, { "from": 6500760855, "to": 6524007984, "type": "CALL" }, { "from": 6500760881, "to": 6500760801, "type": "CODE" }, { "from": 6500760995, "to": 6500761038, "type": "CODE" }, { "from": 6500761011, "to": 6542434064, "type": "CALL" }, { "from": 6500761094, "to": 6524007984, "type": "CALL" }, { "from": 6500761152, "to": 6500760997, "type": "CODE" }, { "from": 6500761176, "to": 6511513840, "type": "CALL" }, { "from": 6500761181, "to": 6500755277, "type": "CODE" }, { "from": 6500761198, "to": 6511512544, "type": "CALL" }, { "from": 6500761203, "to": 6500761264, "type": "CODE" }, { "from": 6500761323, "to": 6511512544, "type": "CALL" }, { "from": 6500761328, "to": 6500761976, "type": "CODE" }, { "from": 6500761367, "to": 6740346544, "type": "CALL" }, { "from": 6500761402, "to": 6524007200, "type": "CALL" }, { "from": 6500761413, "to": 6526592128, "type": "CALL" }, { "from": 6500761464, "to": 6455871936, "type": "CALL" }, { "from": 6500761491, "to": 6740346544, "type": "CALL" }, { "from": 6500761564, "to": 6447968000, "type": "CALL" }, { "from": 6500761628, "to": 6500759324, "type": "CODE" }, { "from": 6500761780, "to": 6740346544, "type": "CALL" }, { "from": 6500761798, "to": 6740346544, "type": "CALL" }, { "from": 6500761857, "to": 6500762421, "type": "CODE" }, { "from": 6500761887, "to": 6524603600, "type": "CALL" }, { "from": 6500761933, "to": 6511512544, "type": "CALL" }, { "from": 6500761938, "to": 6500761817, "type": "CODE" }, { "from": 6500761952, "to": 6511513840, "type": "CALL" }, { "from": 6500761957, "to": 6500762070, "type": "CODE" }, { "from": 6500762007, "to": 6740346544, "type": "CALL" }, { "from": 6500762042, "to": 6512481968, "type": "CALL" }, { "from": 6500762172, "to": 6500752304, "type": "CALL" }, { "from": 6500762209, "to": 6475529648, "type": "CALL" }, { "from": 6500762295, "to": 6740346544, "type": "CALL" }, { "from": 6500762313, "to": 6740346544, "type": "CALL" }, { "from": 6500762372, "to": 6511512544, "type": "CALL" }, { "from": 6500762421, "to": 6511512544, "type": "CALL" }, { "from": 6500762462, "to": 6524603600, "type": "CALL" }, { "from": 6500762499, "to": 6500755776, "type": "CODE" }, { "from": 6500762522, "to": 6500753056, "type": "CALL" }, { "from": 6500762549, "to": 6740346544, "type": "CALL" }, { "from": 6500762592, "to": 6536691232, "type": "CALL" }, { "from": 6500762622, "to": 6447968000, "type": "CALL" }, { "from": 6500762630, "to": 6500762142, "type": "CODE" }, { "from": 6500762660, "to": 6524603600, "type": "CALL" }, { "from": 6500762706, "to": 6511512544, "type": "CALL" }, { "from": 6500762711, "to": 6500762336, "type": "CODE" }, { "from": 6500762741, "to": 6524603600, "type": "CALL" }, { "from": 6500762787, "to": 6511512544, "type": "CALL" }, { "from": 6500762792, "to": 6500762394, "type": "CODE" }, { "from": 6500762818, "to": 6511729936, "type": "CALL" }, { "from": 6500762863, "to": 6511512544, "type": "CALL" }, { "from": 6500762868, "to": 6500763895, "type": "CODE" }, { "from": 6500762898, "to": 6524603600, "type": "CALL" }, { "from": 6500762944, "to": 6511512544, "type": "CALL" }, { "from": 6500762949, "to": 6500763547, "type": "CODE" }, { "from": 6500762979, "to": 6524603600, "type": "CALL" }, { "from": 6500763025, "to": 6511512544, "type": "CALL" }, { "from": 6500763030, "to": 6500763279, "type": "CODE" }, { "from": 6500763238, "to": 6740346544, "type": "CALL" }, { "from": 6500763256, "to": 6740346544, "type": "CALL" }, { "from": 6500763319, "to": 6500755776, "type": "CODE" }, { "from": 6500763329, "to": 6542067384, "type": "CALL" }, { "from": 6500763506, "to": 6740346544, "type": "CALL" }, { "from": 6500763524, "to": 6740346544, "type": "CALL" }, { "from": 6500763587, "to": 6500755776, "type": "CODE" }, { "from": 6500763604, "to": 6511513840, "type": "CALL" }, { "from": 6500763609, "to": 6500763726, "type": "CODE" }, { "from": 6500763634, "to": 6740346544, "type": "CALL" }, { "from": 6500763698, "to": 6512481968, "type": "CALL" }, { "from": 6500763765, "to": 6536215600, "type": "CALL" }, { "from": 6500763816, "to": 6511512544, "type": "CALL" }, { "from": 6500763841, "to": 6535984912, "type": "CALL" }, { "from": 6500763942, "to": 6536691232, "type": "CALL" }, { "from": 6500763969, "to": 6447968000, "type": "CALL" }, { "from": 6500764005, "to": 6535984912, "type": "CALL" }, { "from": 6500764101, "to": 6500616272, "type": "CALL" }, { "from": 6500764166, "to": 6542067384, "type": "CALL" }, { "from": 6500764314, "to": 6487939808, "type": "CALL" }, { "from": 6500764386, "to": 6475530592, "type": "CALL" }, { "from": 6500764419, "to": 6447834288, "type": "CALL" }, { "from": 6500764455, "to": 6447834288, "type": "CALL" }, { "from": 6500764490, "to": 6500764770, "type": "CODE" }, { "from": 6500764511, "to": 6511513840, "type": "CALL" }, { "from": 6500764516, "to": 6500764262, "type": "CODE" }, { "from": 6500764539, "to": 6511513840, "type": "CALL" }, { "from": 6500764582, "to": 6511512544, "type": "CALL" }, { "from": 6500764587, "to": 6500764055, "type": "CODE" }, { "from": 6500764614, "to": 6524603600, "type": "CALL" }, { "from": 6500764651, "to": 6511512544, "type": "CALL" }, { "from": 6500764656, "to": 6500764120, "type": "CODE" }, { "from": 6500764673, "to": 6511513840, "type": "CALL" }, { "from": 6500764678, "to": 6500764770, "type": "CODE" }, { "from": 6500764704, "to": 6511513840, "type": "CALL" }, { "from": 6500764709, "to": 6500764920, "type": "CODE" }, { "from": 6500764799, "to": 6475530272, "type": "CALL" }, { "from": 6500764832, "to": 6624433168, "type": "CALL" }, { "from": 6500764942, "to": 6500774608, "type": "CALL" }, { "from": 6500764980, "to": 6511512544, "type": "CALL" }, { "from": 6500765109, "to": 6475530592, "type": "CALL" }, { "from": 6500765188, "to": 6740346544, "type": "CALL" }, { "from": 6500765206, "to": 6740346544, "type": "CALL" }, { "from": 6500765265, "to": 6511512544, "type": "CALL" }, { "from": 6500765320, "to": 6511512544, "type": "CALL" }, { "from": 6500765356, "to": 6500755776, "type": "CODE" }, { "from": 6500765383, "to": 6524603600, "type": "CALL" }, { "from": 6500765420, "to": 6511512544, "type": "CALL" }, { "from": 6500765425, "to": 6500764999, "type": "CODE" }, { "from": 6500765452, "to": 6524603600, "type": "CALL" }, { "from": 6500765489, "to": 6511512544, "type": "CALL" }, { "from": 6500765494, "to": 6500765284, "type": "CODE" }, { "from": 6500765524, "to": 6524603600, "type": "CALL" }, { "from": 6500765570, "to": 6511512544, "type": "CALL" }, { "from": 6500765575, "to": 6500765229, "type": "CODE" }, { "from": 6500765591, "to": 6500765617, "type": "CODE" }, { "from": 6500765642, "to": 6511735152, "type": "CALL" }, { "from": 6500765651, "to": 6597107904, "type": "CALL" }, { "from": 6500765664, "to": 6511512544, "type": "CALL" }, { "from": 6500765669, "to": 6500765954, "type": "CODE" }, { "from": 6500765699, "to": 6524603600, "type": "CALL" }, { "from": 6500765745, "to": 6511512544, "type": "CALL" }, { "from": 6500765750, "to": 6500766110, "type": "CODE" }, { "from": 6500765791, "to": 6545851008, "type": "CALL" }, { "from": 6500765860, "to": 6526592128, "type": "CALL" }, { "from": 6500765894, "to": 6465812496, "type": "CALL" }, { "from": 6500765941, "to": 6465812496, "type": "CALL" }, { "from": 6500766069, "to": 6740346544, "type": "CALL" }, { "from": 6500766087, "to": 6740346544, "type": "CALL" }, { "from": 6500766146, "to": 6511512544, "type": "CALL" }, { "from": 6500766193, "to": 6524603600, "type": "CALL" }, { "from": 6500766235, "to": 6500762495, "type": "CODE" }, { "from": 6500766379, "to": 6740346544, "type": "CALL" }, { "from": 6500766397, "to": 6740346544, "type": "CALL" }, { "from": 6500766456, "to": 6500755776, "type": "CODE" }, { "from": 6500766486, "to": 6524603600, "type": "CALL" }, { "from": 6500766532, "to": 6511512544, "type": "CALL" }, { "from": 6500766537, "to": 6500766416, "type": "CODE" }, { "from": 6500766542, "to": 6740346544, "type": "CALL" }, { "from": 6500766548, "to": 6500755781, "type": "CODE" }, { "from": 6500766590, "to": 6511645120, "type": "CALL" }, { "from": 6500766774, "to": 6500760133, "type": "CODE" }, { "from": 6500766791, "to": 6500766801, "type": "CODE" }, { "from": 6500766834, "to": 6500760133, "type": "CODE" }, { "from": 6500766862, "to": 6511396000, "type": "CALL" }, { "from": 6500766912, "to": 6542067384, "type": "CALL" }, { "from": 6500767033, "to": 6500753440, "type": "CALL" }, { "from": 6500767038, "to": 6500754499, "type": "CODE" }, { "from": 6500767075, "to": 6511730288, "type": "CALL" }, { "from": 6500767080, "to": 6500762823, "type": "CODE" }, { "from": 6500767110, "to": 6543545728, "type": "CALL" }, { "from": 6500767139, "to": 6500759983, "type": "CODE" }, { "from": 6500767170, "to": 6542753360, "type": "CALL" }, { "from": 6500767182, "to": 6542753360, "type": "CALL" }, { "from": 6500767193, "to": 6542702416, "type": "CALL" }, { "from": 6500767262, "to": 6511512544, "type": "CALL" }, { "from": 6500767267, "to": 6500758510, "type": "CODE" } ], "datarefs": [ { "from": 6500753791, "to": 6715116816, "type": "DATA" }, { "from": 6500753887, "to": 6723591480, "type": "DATA" }, { "from": 6500753916, "to": 6723591480, "type": "DATA" }, { "from": 6500754271, "to": 6723591464, "type": "DATA" }, { "from": 6500754795, "to": 6722309428, "type": "DATA" }, { "from": 6500754830, "to": 6712172456, "type": "DATA" }, { "from": 6500754962, "to": 6723592244, "type": "DATA" }, { "from": 6500754991, "to": 6712106800, "type": "DATA" }, { "from": 6500755003, "to": 6712106804, "type": "DATA" }, { "from": 6500755027, "to": 6717993284, "type": "DATA" }, { "from": 6500755038, "to": 6717993288, "type": "DATA" }, { "from": 6500755113, "to": 6722409452, "type": "DATA" }, { "from": 6500755184, "to": 6500781504, "type": "DATA" }, { "from": 6500755195, "to": 6496672176, "type": "DATA" }, { "from": 6500755206, "to": 6496570832, "type": "DATA" }, { "from": 6500755217, "to": 6500773280, "type": "DATA" }, { "from": 6500755327, "to": 6718381312, "type": "DATA" }, { "from": 6500755337, "to": 6718381320, "type": "DATA" }, { "from": 6500755415, "to": 6723592276, "type": "DATA" }, { "from": 6500755530, "to": 6716197176, "type": "DATA" }, { "from": 6500755559, "to": 6723590288, "type": "DATA" }, { "from": 6500755594, "to": 6723590301, "type": "DATA" }, { "from": 6500755609, "to": 6723590288, "type": "DATA" }, { "from": 6500755880, "to": 6723591712, "type": "DATA" }, { "from": 6500755915, "to": 6723591712, "type": "DATA" }, { "from": 6500756187, "to": 6718381312, "type": "DATA" }, { "from": 6500756197, "to": 6718381320, "type": "DATA" }, { "from": 6500756238, "to": 6706951120, "type": "DATA" }, { "from": 6500756294, "to": 6717231776, "type": "DATA" }, { "from": 6500756466, "to": 6500782512, "type": "DATA" }, { "from": 6500756477, "to": 6500783280, "type": "DATA" }, { "from": 6500756488, "to": 6511490512, "type": "DATA" }, { "from": 6500756577, "to": 6712262740, "type": "DATA" }, { "from": 6500756613, "to": 6715262400, "type": "DATA" }, { "from": 6500756875, "to": 6545635632, "type": "DATA" }, { "from": 6500757296, "to": 6717218980, "type": "DATA" }, { "from": 6500757306, "to": 6717218984, "type": "DATA" }, { "from": 6500757326, "to": 6717993284, "type": "DATA" }, { "from": 6500757336, "to": 6717993288, "type": "DATA" }, { "from": 6500757352, "to": 6717173124, "type": "DATA" }, { "from": 6500757362, "to": 6717173128, "type": "DATA" }, { "from": 6500757733, "to": 6717218980, "type": "DATA" }, { "from": 6500757796, "to": 6723591552, "type": "DATA" }, { "from": 6500757831, "to": 6723591552, "type": "DATA" }, { "from": 6500758289, "to": 6715437472, "type": "DATA" }, { "from": 6500758728, "to": 6712087500, "type": "DATA" }, { "from": 6500758780, "to": 6500782288, "type": "DATA" }, { "from": 6500758791, "to": 6500782400, "type": "DATA" }, { "from": 6500758802, "to": 6511490512, "type": "DATA" }, { "from": 6500758813, "to": 6500791104, "type": "DATA" }, { "from": 6500758878, "to": 6717886544, "type": "DATA" }, { "from": 6500758885, "to": 6723591648, "type": "DATA" }, { "from": 6500758911, "to": 6742242256, "type": "DATA" }, { "from": 6500758933, "to": 6723591642, "type": "DATA" }, { "from": 6500759658, "to": 6712172456, "type": "DATA" }, { "from": 6500759692, "to": 6712172464, "type": "DATA" }, { "from": 6500759729, "to": 6723591792, "type": "DATA" }, { "from": 6500759765, "to": 6712258620, "type": "DATA" }, { "from": 6500759807, "to": 6717173124, "type": "DATA" }, { "from": 6500759844, "to": 6723590616, "type": "DATA" }, { "from": 6500759944, "to": 6723579872, "type": "DATA" }, { "from": 6500760158, "to": 6723590264, "type": "DATA" }, { "from": 6500760193, "to": 6723590264, "type": "DATA" }, { "from": 6500760681, "to": 6715409368, "type": "DATA" }, { "from": 6500760822, "to": 6712172456, "type": "DATA" }, { "from": 6500761067, "to": 6712172456, "type": "DATA" }, { "from": 6500761373, "to": 6723233416, "type": "DATA" }, { "from": 6500761645, "to": 6723591512, "type": "DATA" }, { "from": 6500761680, "to": 6723591512, "type": "DATA" }, { "from": 6500762013, "to": 6720256624, "type": "DATA" }, { "from": 6500762112, "to": 6723575844, "type": "DATA" }, { "from": 6500762122, "to": 6723575848, "type": "DATA" }, { "from": 6500762177, "to": 6723591536, "type": "DATA" }, { "from": 6500762558, "to": 6712105968, "type": "DATA" }, { "from": 6500763047, "to": 6718148564, "type": "DATA" }, { "from": 6500763056, "to": 6718148568, "type": "DATA" }, { "from": 6500763099, "to": 6723591576, "type": "DATA" }, { "from": 6500763385, "to": 6723591592, "type": "DATA" }, { "from": 6500763414, "to": 6723591603, "type": "DATA" }, { "from": 6500763425, "to": 6723591592, "type": "DATA" }, { "from": 6500763611, "to": 6741850168, "type": "DATA" }, { "from": 6500763669, "to": 6723233784, "type": "DATA" }, { "from": 6500764180, "to": 6500781696, "type": "DATA" }, { "from": 6500764191, "to": 6496449792, "type": "DATA" }, { "from": 6500764202, "to": 6511490512, "type": "DATA" }, { "from": 6500764281, "to": 6712262740, "type": "DATA" }, { "from": 6500764307, "to": 6718148564, "type": "DATA" }, { "from": 6500764355, "to": 6715509752, "type": "DATA" }, { "from": 6500764394, "to": 6723591624, "type": "DATA" }, { "from": 6500764723, "to": 6723591636, "type": "DATA" }, { "from": 6500764804, "to": 6715262400, "type": "DATA" }, { "from": 6500765083, "to": 6716731936, "type": "DATA" }, { "from": 6500765865, "to": 6712481092, "type": "DATA" }, { "from": 6500765907, "to": 6712192108, "type": "DATA" }, { "from": 6500766252, "to": 6723591552, "type": "DATA" }, { "from": 6500766287, "to": 6723591552, "type": "DATA" }, { "from": 6500766553, "to": 6715409360, "type": "DATA" }, { "from": 6500766707, "to": 6712687008, "type": "DATA" }, { "from": 6500766719, "to": 6712687016, "type": "DATA" }, { "from": 6500766744, "to": 6717683880, "type": "DATA" }, { "from": 6500766756, "to": 6717683888, "type": "DATA" }, { "from": 6500766804, "to": 6723431420, "type": "DATA" }, { "from": 6500766814, "to": 6723431424, "type": "DATA" }, { "from": 6500766923, "to": 6500781312, "type": "DATA" }, { "from": 6500766934, "to": 6500247088, "type": "DATA" }, { "from": 6500766945, "to": 6496570832, "type": "DATA" }, { "from": 6500766956, "to": 6500767296, "type": "DATA" }, { "from": 6500767103, "to": 6712088560, "type": "DATA" }, { "from": 6500767163, "to": 6712084152, "type": "DATA" }, { "from": 6500767175, "to": 6712084184, "type": "DATA" } ] }, "strings": [ { "va": "0x190408d10", "offset": 272662800, "ascii": "list", "wide": null }, { "va": "0x190c1dd38", "offset": 281137464, "ascii": "regular_profile_required", "wide": null }, { "va": "0x190c1dd28", "offset": 281137448, "ascii": "settings_only", "wide": null }, { "va": "0x190ae4d34", "offset": 279855412, "ascii": "save", "wide": null }, { "va": "0x190129f30", "offset": 269652784, "ascii": "delete", "wide": null }, { "va": "0x1906c7144", "offset": 275539268, "ascii": "cancel", "wide": null }, { "va": "0x190afd3ec", "offset": 279955436, "ascii": "edit", "wide": null }, { "va": "0x190725d00", "offset": 275927296, "ascii": "directory", "wide": null }, { "va": "0x190510938", "offset": 273743160, "ascii": "test", "wide": null }, { "va": "0x190c1d890", "offset": 281136272, "ascii": "tabbit_login_required", "wide": null }, { "va": "0x190c1d89d", "offset": 281136285, "ascii": "required", "wide": null }, { "va": "0x190c1de20", "offset": 281137696, "ascii": "unknown_operation", "wide": null }, { "va": "0x19060d2a0", "offset": 274777760, "ascii": "requestId", "wide": null }, { "va": "0x19042c5c0", "offset": 272808384, "ascii": "provider", "wide": null }, { "va": "0x19060a0a4", "offset": 274764964, "ascii": "answer", "wide": null }, { "va": "0x1905fed84", "offset": 274719108, "ascii": "models", "wide": null }, { "va": "0x190c1dd80", "offset": 281137536, "ascii": "login_unavailable", "wide": null }, { "va": "0x1904571a0", "offset": 272983456, "ascii": "prompt", "wide": null }, { "va": "0x1906ad050", "offset": 275432528, "ascii": "Action", "wide": null }, { "va": "0x190c1dde0", "offset": 281137632, "ascii": "..\\..\\tab\\browser\\codex_local_agent\\local_model_providers.cc", "wide": null }, { "va": "0x190139fb0", "offset": 269718448, "ascii": "name", "wide": null }, { "va": "0x190c1de70", "offset": 281137776, "ascii": "baseUrl", "wide": null }, { "va": "0x19014f03c", "offset": 269804604, "ascii": "api", "wide": null }, { "va": "0x190c1d9d8", "offset": 281136600, "ascii": "enabledModels", "wide": null }, { "va": "0x190c1afe0", "offset": 281125856, "ascii": "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_-", "wide": null }, { "va": "0x190c1d878", "offset": 281136248, "ascii": "invalid_provider", "wide": null }, { "va": "0x1904503d8", "offset": 272955352, "ascii": "https", "wide": null }, { "va": "0x190bc6688", "offset": 280779400, "ascii": "tabbit.local_agent.providers", "wide": null }, { "va": "0x190c1dd58", "offset": 281137496, "ascii": "provider_not_found", "wide": null }, { "va": "0x1908efa70", "offset": 277802608, "ascii": "tabbit.local_agent.model", "wide": null }, { "va": "0x190c1a024", "offset": 281121828, "ascii": "byok/", "wide": null }, { "va": "0x190c1dd70", "offset": 281137520, "ascii": "defaultReset", "wide": null }, { "va": "0x1906ecfd4", "offset": 275694548, "ascii": "login", "wide": null }, { "va": "0x190c1dd98", "offset": 281137560, "ascii": "login_limit", "wide": null }, { "va": "0x190c1dda8", "offset": 281137576, "ascii": "login_device_id_unavailable", "wide": null }, { "va": "0x190c1ddb3", "offset": 281137587, "ascii": "e_id_unavailable", "wide": null }, { "va": "0x190bc67f8", "offset": 280779768, "ascii": "tabbit.local_agent.installation_id", "wide": null }, { "va": "0x190468bf8", "offset": 273055736, "ascii": "deviceId", "wide": null }, { "va": "0x190c1ddc8", "offset": 281137608, "ascii": "authType", "wide": null }, { "va": "0x190c1ddd4", "offset": 281137620, "ascii": "oauth", "wide": null }, { "va": "0x190593220", "offset": 274277920, "ascii": "sessionId", "wide": null }, { "va": "0x190185544", "offset": 270027076, "ascii": "result", "wide": null }, { "va": "0x19013ec6c", "offset": 269738092, "ascii": "error", "wide": null }, { "va": "0x1904503d0", "offset": 272955344, "ascii": "http", "wide": null }, { "va": "0x1901b79a0", "offset": 270232992, "ascii": "localhost", "wide": null }, { "va": "0x19067b8a8", "offset": 275229864, "ascii": "127.0.0.1", "wide": null }, { "va": "0x190bf6bfc", "offset": 280977404, "ascii": "[::1]", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null }, { "va": "0x1901246b8", "offset": 269630136, "ascii": "std::get: variant is valueless", "wide": null }, { "va": "0x1901246d8", "offset": 269630168, "ascii": "std::get: wrong alternative for variant", "wide": null } ], "imports": [], "status_display": "反编译失败", "record_kind": "failed", "pseudocode_chars": 0 }, { "label": "b-agent-observer-owner", "file": "rea-b-agent-observer-owner.json", "file_sha256": "f20d214041ad3cbcb33cc7b803b9a0a7b3defb34de6052c0dde1deccc47bb693", "status": "completed", "evidence_id": "ev_ab6dfec52dad0a0c69870f605a2ffdcc08bb2684faba55b4f8a9c5797648069f", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837dfd50;pdgo @ 0x1837dfd50;afij @ 0x1837dfd50", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837dfd50", "size": 236, "nargs": 2, "signature": "fcn.1837dfd50(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6501039488, "to": 6511423872, "type": "CALL" }, { "from": 6501039517, "to": 6542434496, "type": "CALL" }, { "from": 6501039550, "to": 6542067384, "type": "CALL" }, { "from": 6501039610, "to": 6542067384, "type": "CALL" }, { "from": 6501039627, "to": 6501145904, "type": "CALL" }, { "from": 6501039656, "to": 6501155120, "type": "CALL" } ], "datarefs": [ { "from": 6501039453, "to": 6707913208, "type": "DATA" }, { "from": 6501039476, "to": 6741126408, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 2528 }, { "label": "b-agent-provider-persist", "file": "rea-b-agent-provider-persist.json", "file_sha256": "45645293bb3d2ba410a3763caa955033b8fa37c2d89be7305c63c98cbec3ae42", "status": "completed", "evidence_id": "ev_398fd7432fd2bfb99c9a89e83d490d634037a333fb34f882ceb83a8d461c8d2e", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18379d640;pdgo @ 0x18379d640;afij @ 0x18379d640", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18379d640", "size": 5973, "nargs": 7, "signature": "fcn.18379d640(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_30h, int64_t arg_38h, int64_t arg_47h);", "callrefs": [ { "from": 6500767412, "to": 6500767422, "type": "CODE" }, { "from": 6500767426, "to": 6500767473, "type": "CODE" }, { "from": 6500767445, "to": 6542434064, "type": "CALL" }, { "from": 6500767491, "to": 6500767432, "type": "CODE" }, { "from": 6500767576, "to": 6458655680, "type": "CALL" }, { "from": 6500767627, "to": 6500768225, "type": "CODE" }, { "from": 6500767647, "to": 6542067384, "type": "CALL" }, { "from": 6500767820, "to": 6740346544, "type": "CALL" }, { "from": 6500767838, "to": 6740346544, "type": "CALL" }, { "from": 6500767890, "to": 6511512544, "type": "CALL" }, { "from": 6500767932, "to": 6491075136, "type": "CALL" }, { "from": 6500768001, "to": 6740346544, "type": "CALL" }, { "from": 6500768007, "to": 6500767913, "type": "CODE" }, { "from": 6500768031, "to": 6524603600, "type": "CALL" }, { "from": 6500768067, "to": 6511512544, "type": "CALL" }, { "from": 6500768072, "to": 6500767904, "type": "CODE" }, { "from": 6500768102, "to": 6524603600, "type": "CALL" }, { "from": 6500768148, "to": 6511512544, "type": "CALL" }, { "from": 6500768153, "to": 6500767861, "type": "CODE" }, { "from": 6500768164, "to": 6517427136, "type": "CALL" }, { "from": 6500768180, "to": 6542435920, "type": "CALL" }, { "from": 6500768202, "to": 6524601328, "type": "CALL" }, { "from": 6500768210, "to": 6517426608, "type": "CALL" }, { "from": 6500768249, "to": 6542435920, "type": "CALL" }, { "from": 6500768270, "to": 6525627664, "type": "CALL" }, { "from": 6500768280, "to": 6500768158, "type": "CODE" }, { "from": 6500768344, "to": 6443410976, "type": "CALL" }, { "from": 6500768429, "to": 6500768617, "type": "CODE" }, { "from": 6500768440, "to": 6517427136, "type": "CALL" }, { "from": 6500768456, "to": 6542435920, "type": "CALL" }, { "from": 6500768478, "to": 6524601328, "type": "CALL" }, { "from": 6500768486, "to": 6517426608, "type": "CALL" }, { "from": 6500768539, "to": 6542435920, "type": "CALL" }, { "from": 6500768558, "to": 6525627664, "type": "CALL" }, { "from": 6500768568, "to": 6500768434, "type": "CODE" }, { "from": 6500768584, "to": 6462063728, "type": "CALL" }, { "from": 6500768639, "to": 6500768501, "type": "CODE" }, { "from": 6500768669, "to": 6524603600, "type": "CALL" }, { "from": 6500768715, "to": 6511512544, "type": "CALL" }, { "from": 6500768720, "to": 6500768602, "type": "CODE" }, { "from": 6500768731, "to": 6500767464, "type": "CODE" }, { "from": 6500768761, "to": 6524603600, "type": "CALL" }, { "from": 6500768807, "to": 6511512544, "type": "CALL" }, { "from": 6500768812, "to": 6500769528, "type": "CODE" }, { "from": 6500768832, "to": 6511513840, "type": "CALL" }, { "from": 6500768837, "to": 6500768998, "type": "CODE" }, { "from": 6500768887, "to": 6445826592, "type": "CALL" }, { "from": 6500768903, "to": 6445354896, "type": "CALL" }, { "from": 6500768960, "to": 6447834288, "type": "CALL" }, { "from": 6500769032, "to": 6740346544, "type": "CALL" }, { "from": 6500769067, "to": 6524007200, "type": "CALL" }, { "from": 6500769118, "to": 6523198896, "type": "CALL" }, { "from": 6500769192, "to": 6447008784, "type": "CALL" }, { "from": 6500769250, "to": 6471067168, "type": "CALL" }, { "from": 6500769487, "to": 6740346544, "type": "CALL" }, { "from": 6500769505, "to": 6740346544, "type": "CALL" }, { "from": 6500769557, "to": 6511512544, "type": "CALL" }, { "from": 6500769601, "to": 6511512544, "type": "CALL" }, { "from": 6500769635, "to": 6511512544, "type": "CALL" }, { "from": 6500769688, "to": 6517426608, "type": "CALL" }, { "from": 6500769693, "to": 6500767895, "type": "CODE" }, { "from": 6500769709, "to": 6517426816, "type": "CALL" }, { "from": 6500769725, "to": 6511512544, "type": "CALL" }, { "from": 6500769730, "to": 6500769653, "type": "CODE" }, { "from": 6500769757, "to": 6524603600, "type": "CALL" }, { "from": 6500769803, "to": 6511512544, "type": "CALL" }, { "from": 6500769808, "to": 6500769666, "type": "CODE" }, { "from": 6500769970, "to": 6740346544, "type": "CALL" }, { "from": 6500769988, "to": 6740346544, "type": "CALL" }, { "from": 6500770040, "to": 6500769601, "type": "CODE" }, { "from": 6500770070, "to": 6524603600, "type": "CALL" }, { "from": 6500770116, "to": 6511512544, "type": "CALL" }, { "from": 6500770121, "to": 6500770007, "type": "CODE" }, { "from": 6500770161, "to": 6524007984, "type": "CALL" }, { "from": 6500770197, "to": 6524007984, "type": "CALL" }, { "from": 6500770261, "to": 6456090784, "type": "CALL" }, { "from": 6500770295, "to": 6524007984, "type": "CALL" }, { "from": 6500770359, "to": 6456090784, "type": "CALL" }, { "from": 6500770415, "to": 6542067384, "type": "CALL" }, { "from": 6500770591, "to": 6740346544, "type": "CALL" }, { "from": 6500770609, "to": 6740346544, "type": "CALL" }, { "from": 6500770661, "to": 6500769601, "type": "CODE" }, { "from": 6500770691, "to": 6524603600, "type": "CALL" }, { "from": 6500770737, "to": 6511512544, "type": "CALL" }, { "from": 6500770742, "to": 6500770628, "type": "CODE" }, { "from": 6500770759, "to": 6511513840, "type": "CALL" }, { "from": 6500770764, "to": 6500771223, "type": "CODE" }, { "from": 6500770824, "to": 6445022656, "type": "CALL" }, { "from": 6500770863, "to": 6445282400, "type": "CALL" }, { "from": 6500770893, "to": 6511512544, "type": "CALL" }, { "from": 6500770937, "to": 6740346544, "type": "CALL" }, { "from": 6500770974, "to": 6524007200, "type": "CALL" }, { "from": 6500770985, "to": 6526592128, "type": "CALL" }, { "from": 6500771043, "to": 6446063536, "type": "CALL" }, { "from": 6500771062, "to": 6740346544, "type": "CALL" }, { "from": 6500771124, "to": 6447968000, "type": "CALL" }, { "from": 6500771150, "to": 6740346544, "type": "CALL" }, { "from": 6500771185, "to": 6512481968, "type": "CALL" }, { "from": 6500771343, "to": 6500752304, "type": "CALL" }, { "from": 6500771377, "to": 6475529648, "type": "CALL" }, { "from": 6500771454, "to": 6740346544, "type": "CALL" }, { "from": 6500771472, "to": 6740346544, "type": "CALL" }, { "from": 6500771521, "to": 6511512544, "type": "CALL" }, { "from": 6500771572, "to": 6511512544, "type": "CALL" }, { "from": 6500771666, "to": 6500753056, "type": "CALL" }, { "from": 6500771693, "to": 6740346544, "type": "CALL" }, { "from": 6500771739, "to": 6536691232, "type": "CALL" }, { "from": 6500771769, "to": 6447968000, "type": "CALL" }, { "from": 6500771777, "to": 6500771311, "type": "CODE" }, { "from": 6500771804, "to": 6524603600, "type": "CALL" }, { "from": 6500771844, "to": 6511512544, "type": "CALL" }, { "from": 6500771849, "to": 6500771492, "type": "CODE" }, { "from": 6500771879, "to": 6524603600, "type": "CALL" }, { "from": 6500771925, "to": 6511512544, "type": "CALL" }, { "from": 6500771930, "to": 6500771594, "type": "CODE" }, { "from": 6500771960, "to": 6524603600, "type": "CALL" }, { "from": 6500772006, "to": 6511512544, "type": "CALL" }, { "from": 6500772011, "to": 6500771543, "type": "CODE" }, { "from": 6500772040, "to": 6536220336, "type": "CALL" }, { "from": 6500772074, "to": 6500772110, "type": "CODE" }, { "from": 6500772183, "to": 6447834288, "type": "CALL" }, { "from": 6500772252, "to": 6447834288, "type": "CALL" }, { "from": 6500772445, "to": 6445282400, "type": "CALL" }, { "from": 6500772485, "to": 6511512544, "type": "CALL" }, { "from": 6500772537, "to": 6511512544, "type": "CALL" }, { "from": 6500772542, "to": 6500770387, "type": "CODE" }, { "from": 6500772554, "to": 6500772355, "type": "CODE" }, { "from": 6500772563, "to": 6500772578, "type": "CODE" }, { "from": 6500772754, "to": 6542436672, "type": "CALL" }, { "from": 6500772783, "to": 6511733920, "type": "CALL" }, { "from": 6500772855, "to": 6511733920, "type": "CALL" }, { "from": 6500772923, "to": 6445282400, "type": "CALL" }, { "from": 6500772956, "to": 6511512544, "type": "CALL" }, { "from": 6500773005, "to": 6511512544, "type": "CALL" }, { "from": 6500773039, "to": 6511512544, "type": "CALL" }, { "from": 6500773077, "to": 6500772485, "type": "CODE" }, { "from": 6500773087, "to": 6500769601, "type": "CODE" }, { "from": 6500773103, "to": 6542089024, "type": "CALL" }, { "from": 6500773122, "to": 6542753360, "type": "CALL" }, { "from": 6500773134, "to": 6542753360, "type": "CALL" }, { "from": 6500773146, "to": 6500767381, "type": "CODE" }, { "from": 6500773192, "to": 6500769335, "type": "CODE" }, { "from": 6500773206, "to": 6546093472, "type": "CALL" }, { "from": 6500773230, "to": 6511512544, "type": "CALL" }, { "from": 6500773264, "to": 6500769335, "type": "CODE" } ], "datarefs": [ { "from": 6500767337, "to": 6740709440, "type": "DATA" }, { "from": 6500767542, "to": 6717713200, "type": "DATA" }, { "from": 6500767596, "to": 6723591848, "type": "DATA" }, { "from": 6500767697, "to": 6723591736, "type": "DATA" }, { "from": 6500767726, "to": 6723591752, "type": "DATA" }, { "from": 6500767737, "to": 6723591736, "type": "DATA" }, { "from": 6500767948, "to": 6740709440, "type": "DATA" }, { "from": 6500768310, "to": 6717173124, "type": "DATA" }, { "from": 6500768390, "to": 6723591976, "type": "DATA" }, { "from": 6500768850, "to": 6717173124, "type": "DATA" }, { "from": 6500768931, "to": 6712172456, "type": "DATA" }, { "from": 6500769038, "to": 6723233416, "type": "DATA" }, { "from": 6500769347, "to": 6723592056, "type": "DATA" }, { "from": 6500769382, "to": 6723592056, "type": "DATA" }, { "from": 6500769825, "to": 6723590312, "type": "DATA" }, { "from": 6500769865, "to": 6723590326, "type": "DATA" }, { "from": 6500769880, "to": 6723590312, "type": "DATA" }, { "from": 6500770132, "to": 6723590592, "type": "DATA" }, { "from": 6500770266, "to": 6723592112, "type": "DATA" }, { "from": 6500770465, "to": 6723592128, "type": "DATA" }, { "from": 6500770499, "to": 6723592140, "type": "DATA" }, { "from": 6500770510, "to": 6723592128, "type": "DATA" }, { "from": 6500770829, "to": 6723590592, "type": "DATA" }, { "from": 6500770951, "to": 6723233416, "type": "DATA" }, { "from": 6500771156, "to": 6720256624, "type": "DATA" }, { "from": 6500771283, "to": 6723575844, "type": "DATA" }, { "from": 6500771292, "to": 6723575848, "type": "DATA" }, { "from": 6500771348, "to": 6723591536, "type": "DATA" }, { "from": 6500771702, "to": 6712105968, "type": "DATA" }, { "from": 6500772146, "to": 6712256604, "type": "DATA" }, { "from": 6500772218, "to": 6712085576, "type": "DATA" }, { "from": 6500772348, "to": 6723592096, "type": "DATA" }, { "from": 6500772411, "to": 6723592112, "type": "DATA" }, { "from": 6500772547, "to": 6723592080, "type": "DATA" }, { "from": 6500772767, "to": 6716691368, "type": "DATA" }, { "from": 6500772889, "to": 6723592112, "type": "DATA" }, { "from": 6500773115, "to": 6712084152, "type": "DATA" }, { "from": 6500773127, "to": 6712084184, "type": "DATA" } ] }, "strings": [ { "va": "0x190682b30", "offset": 275259184, "ascii": "credential", "wide": null }, { "va": "0x190c1de38", "offset": 281137720, "ascii": "credential_encryption_unavailable", "wide": null }, { "va": "0x190c1de48", "offset": 281137736, "ascii": "ption_unavailable", "wide": null }, { "va": "0x1905fed84", "offset": 274719108, "ascii": "models", "wide": null }, { "va": "0x190bc6688", "offset": 280779400, "ascii": "tabbit.local_agent.providers", "wide": null }, { "va": "0x190c1df78", "offset": 281138040, "ascii": "invalid_credential", "wide": null }, { "va": "0x190c1d8a8", "offset": 281136296, "ascii": "provider_auth_required", "wide": null }, { "va": "0x190c1d8b6", "offset": 281136310, "ascii": "required", "wide": null }, { "va": "0x190c1d9c0", "offset": 281136576, "ascii": "encryptedCredential", "wide": null }, { "va": "0x190c1dfb0", "offset": 281138096, "ascii": "credentialLabel", "wide": null }, { "va": "0x190c1dfc0", "offset": 281138112, "ascii": "credential_encryption_failed", "wide": null }, { "va": "0x190c1dfcc", "offset": 281138124, "ascii": "ncryption_failed", "wide": null }, { "va": "0x1908efa70", "offset": 277802608, "ascii": "tabbit.local_agent.model", "wide": null }, { "va": "0x190c1a024", "offset": 281121828, "ascii": "byok/", "wide": null }, { "va": "0x190c1dd70", "offset": 281137520, "ascii": "defaultReset", "wide": null }, { "va": "0x19014e85c", "offset": 269802588, "ascii": "key", "wide": null }, { "va": "0x190124c48", "offset": 269631560, "ascii": "type", "wide": null }, { "va": "0x1901246b8", "offset": 269630136, "ascii": "std::get: variant is valueless", "wide": null }, { "va": "0x1901246d8", "offset": 269630168, "ascii": "std::get: wrong alternative for variant", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 57389 }, { "label": "b-agent-service", "file": "rea-b-agent-service.json", "file_sha256": "68ea94daf8e24feff7737f58d3300d0c3496e26fcd645334062375da96cb47dc", "status": "completed", "evidence_id": "ev_c92e5c45342b2e89cc5d5c785397b03a19dc8af03b430e6e096b5cbca98eeb5a", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837e8aa0;pdgo @ 0x1837e8aa0;afij @ 0x1837e8aa0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837e8aa0", "size": 1571, "nargs": 2, "signature": "fcn.1837e8aa0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6501075710, "to": 6501075733, "type": "CODE" }, { "from": 6501075750, "to": 6501075712, "type": "CODE" }, { "from": 6501075755, "to": 6501075760, "type": "CODE" }, { "from": 6501075783, "to": 6511512544, "type": "CALL" }, { "from": 6501075788, "to": 6501075814, "type": "CODE" }, { "from": 6501075880, "to": 6511513840, "type": "CALL" }, { "from": 6501075885, "to": 6501075948, "type": "CODE" }, { "from": 6501075971, "to": 6456889328, "type": "CALL" }, { "from": 6501075985, "to": 6512708384, "type": "CALL" }, { "from": 6501076084, "to": 6462089824, "type": "CALL" }, { "from": 6501076095, "to": 6501079664, "type": "CALL" }, { "from": 6501076211, "to": 6501076358, "type": "CODE" }, { "from": 6501076239, "to": 6511512544, "type": "CALL" }, { "from": 6501076244, "to": 6501076278, "type": "CODE" }, { "from": 6501076246, "to": 6442840976, "type": "CALL" }, { "from": 6501076344, "to": 6501112368, "type": "CALL" }, { "from": 6501076378, "to": 6501076246, "type": "CODE" }, { "from": 6501076386, "to": 6501076411, "type": "CODE" }, { "from": 6501076448, "to": 6501076505, "type": "CODE" }, { "from": 6501076461, "to": 6511512544, "type": "CALL" }, { "from": 6501076484, "to": 6442840976, "type": "CALL" }, { "from": 6501076536, "to": 6501112368, "type": "CALL" }, { "from": 6501076547, "to": 6501076450, "type": "CODE" }, { "from": 6501076606, "to": 6520594992, "type": "CALL" }, { "from": 6501076616, "to": 6458504880, "type": "CALL" }, { "from": 6501076696, "to": 6512942288, "type": "CALL" }, { "from": 6501076725, "to": 6740346544, "type": "CALL" }, { "from": 6501076746, "to": 6501147680, "type": "CALL" }, { "from": 6501076781, "to": 6501076804, "type": "CODE" }, { "from": 6501076820, "to": 6501076783, "type": "CODE" }, { "from": 6501076897, "to": 6501076907, "type": "CODE" }, { "from": 6501076915, "to": 6501076921, "type": "CODE" }, { "from": 6501076921, "to": 6542434064, "type": "CALL" }, { "from": 6501076942, "to": 6501082032, "type": "CALL" }, { "from": 6501077009, "to": 6501107616, "type": "CALL" }, { "from": 6501077069, "to": 6501144608, "type": "CALL" }, { "from": 6501077145, "to": 6501070480, "type": "CALL" }, { "from": 6501077160, "to": 6501075760, "type": "CODE" }, { "from": 6501077178, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6501075641, "to": 6740709440, "type": "DATA" }, { "from": 6501075825, "to": 6740709440, "type": "DATA" }, { "from": 6501076053, "to": 6501141216, "type": "DATA" }, { "from": 6501076369, "to": 6741126408, "type": "DATA" }, { "from": 6501076475, "to": 6741126408, "type": "DATA" }, { "from": 6501076599, "to": 6722809064, "type": "DATA" }, { "from": 6501076621, "to": 6741832416, "type": "DATA" }, { "from": 6501076668, "to": 6723611288, "type": "DATA" }, { "from": 6501076675, "to": 6723611208, "type": "DATA" }, { "from": 6501076709, "to": 6501139120, "type": "DATA" } ] }, "strings": [ { "va": "0x190c22a98", "offset": 281157272, "ascii": "ReleaseWebContentsInternal", "wide": null }, { "va": "0x190c22a48", "offset": 281157192, "ascii": "..\\..\\tab\\browser\\local_agent\\local_agent_service.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 15421 }, { "label": "b-agent-tab-observer-1", "file": "rea-b-agent-tab-observer-1.json", "file_sha256": "9856ad515482ad1168d87917e83818df26f7c11d81a5bf04a87f569f2d9c8f01", "status": "completed", "evidence_id": "ev_5ffb0782ca91c4ad727c4a87a49faa89d9a27bd4e382ec72869933f60868bee8", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837f9d30;pdgo @ 0x1837f9d30;afij @ 0x1837f9d30", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837f9d30", "size": 707, "nargs": 3, "signature": "fcn.1837f9d30(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6501145942, "to": 6542067384, "type": "CALL" }, { "from": 6501146055, "to": 6511423872, "type": "CALL" }, { "from": 6501146082, "to": 6511423872, "type": "CALL" }, { "from": 6501146119, "to": 6542067384, "type": "CALL" }, { "from": 6501146174, "to": 6456889328, "type": "CALL" }, { "from": 6501146188, "to": 6512708384, "type": "CALL" }, { "from": 6501146231, "to": 6511423872, "type": "CALL" }, { "from": 6501146270, "to": 6519295696, "type": "CALL" }, { "from": 6501146311, "to": 6462089824, "type": "CALL" }, { "from": 6501146376, "to": 6445650832, "type": "CALL" }, { "from": 6501146402, "to": 6524031184, "type": "CALL" }, { "from": 6501146421, "to": 6445656528, "type": "CALL" }, { "from": 6501146488, "to": 6511512544, "type": "CALL" }, { "from": 6501146535, "to": 6511975280, "type": "CALL" }, { "from": 6501146543, "to": 6518967168, "type": "CALL" }, { "from": 6501146572, "to": 6442840976, "type": "CALL" }, { "from": 6501146577, "to": 6501146255, "type": "CODE" }, { "from": 6501146603, "to": 6740346544, "type": "CALL" }, { "from": 6501146609, "to": 6501146524, "type": "CODE" } ], "datarefs": [ { "from": 6501145927, "to": 6708096840, "type": "DATA" }, { "from": 6501146006, "to": 6707914400, "type": "DATA" }, { "from": 6501146016, "to": 6707914448, "type": "DATA" }, { "from": 6501146043, "to": 6741126408, "type": "DATA" }, { "from": 6501146070, "to": 6741126408, "type": "DATA" }, { "from": 6501146219, "to": 6741126408, "type": "DATA" }, { "from": 6501146242, "to": 6741126408, "type": "DATA" }, { "from": 6501146283, "to": 6501154272, "type": "DATA" }, { "from": 6501146316, "to": 6742246848, "type": "DATA" }, { "from": 6501146329, "to": 6741126112, "type": "DATA" }, { "from": 6501146338, "to": 6742246856, "type": "DATA" }, { "from": 6501146352, "to": 6723611680, "type": "DATA" }, { "from": 6501146386, "to": 6723611744, "type": "DATA" }, { "from": 6501146407, "to": 6710367816, "type": "DATA" }, { "from": 6501146433, "to": 6708900496, "type": "DATA" }, { "from": 6501146445, "to": 6708923712, "type": "DATA" }, { "from": 6501146498, "to": 6708923824, "type": "DATA" }, { "from": 6501146512, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190c22c20", "offset": 281157664, "ascii": "..\\..\\tab\\browser\\local_agent\\local_agent_tab_strip_observer.cc", "wide": null }, { "va": "0x190c22c60", "offset": 281157728, "ascii": "{\"event\":\"tabbit_dance.tab_strip_observer_ready\"}", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 8007 }, { "label": "b-agent-tab-observer-2", "file": "rea-b-agent-tab-observer-2.json", "file_sha256": "fc7f7d19d35902140e83d38447e3e04cefc9ed19972e21b543bd0cbb4b4b76e4", "status": "completed", "evidence_id": "ev_16709c4cbeaf80911fe46e59080187ff717ae99af00301f924e39073f7e2f030", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1837fb540;pdgo @ 0x1837fb540;afij @ 0x1837fb540", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1837fb540", "size": 474, "nargs": 3, "signature": "fcn.1837fb540(int64_t arg1, int64_t arg4, int64_t arg_28h);", "callrefs": [ { "from": 6501152118, "to": 6740346544, "type": "CALL" }, { "from": 6501152134, "to": 6501063216, "type": "CALL" }, { "from": 6501152257, "to": 6740346544, "type": "CALL" }, { "from": 6501152302, "to": 6542067384, "type": "CALL" }, { "from": 6501152423, "to": 6512942288, "type": "CALL" }, { "from": 6501152451, "to": 6740346544, "type": "CALL" }, { "from": 6501152499, "to": 6501152127, "type": "CODE" }, { "from": 6501152514, "to": 6511512544, "type": "CALL" }, { "from": 6501152519, "to": 6501152467, "type": "CODE" }, { "from": 6501152529, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6501152087, "to": 6740709440, "type": "DATA" }, { "from": 6501152195, "to": 6741832416, "type": "DATA" }, { "from": 6501152316, "to": 6501154112, "type": "DATA" }, { "from": 6501152327, "to": 6489230992, "type": "DATA" }, { "from": 6501152338, "to": 6495410336, "type": "DATA" }, { "from": 6501152349, "to": 6501152544, "type": "DATA" }, { "from": 6501152395, "to": 6723611864, "type": "DATA" }, { "from": 6501152402, "to": 6723611680, "type": "DATA" }, { "from": 6501152475, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190c22cd8", "offset": 281157848, "ascii": "TabGroupedStateChanged", "wide": null }, { "va": "0x190c22c20", "offset": 281157664, "ascii": "..\\..\\tab\\browser\\local_agent\\local_agent_tab_strip_observer.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 7219 }, { "label": "b-dsh-command-builder", "file": "rea-b-dsh-command-builder.json", "file_sha256": "d5ae898e2632055036774ab92b536ebba6fd74a19d92c1da953d33234c5e695e", "status": "completed", "evidence_id": "ev_cf5bf52d78bc3631354ddc7d53db7c2a259b4bc59519a3c78fe1fe30fb6573e6", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18a89a160;pdgo @ 0x18a89a160;afij @ 0x18a89a160", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18a89a160", "size": 596, "nargs": 4, "signature": "fcn.18a89a160(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6619242925, "to": 6542067384, "type": "CALL" }, { "from": 6619242993, "to": 6450560704, "type": "CALL" }, { "from": 6619243027, "to": 6624627728, "type": "CALL" }, { "from": 6619243072, "to": 6453526016, "type": "CALL" }, { "from": 6619243088, "to": 6626688560, "type": "CALL" }, { "from": 6619243119, "to": 6511512544, "type": "CALL" }, { "from": 6619243135, "to": 6522230240, "type": "CALL" }, { "from": 6619243175, "to": 6624627728, "type": "CALL" }, { "from": 6619243183, "to": 6511396000, "type": "CALL" }, { "from": 6619243194, "to": 6624627888, "type": "CALL" }, { "from": 6619243225, "to": 6624627728, "type": "CALL" }, { "from": 6619243257, "to": 6624627728, "type": "CALL" }, { "from": 6619243289, "to": 6624627728, "type": "CALL" }, { "from": 6619243316, "to": 6624627728, "type": "CALL" }, { "from": 6619243343, "to": 6624627728, "type": "CALL" }, { "from": 6619243374, "to": 6624627728, "type": "CALL" }, { "from": 6619243437, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6619242880, "to": 6740709440, "type": "DATA" }, { "from": 6619242998, "to": 6723510912, "type": "DATA" }, { "from": 6619243032, "to": 6723510880, "type": "DATA" }, { "from": 6619243199, "to": 6719229008, "type": "DATA" }, { "from": 6619243230, "to": 6723510928, "type": "DATA" }, { "from": 6619243262, "to": 6723510940, "type": "DATA" }, { "from": 6619243294, "to": 6717683880, "type": "DATA" }, { "from": 6619243321, "to": 6723510948, "type": "DATA" }, { "from": 6619243348, "to": 6712103832, "type": "DATA" }, { "from": 6619243390, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190c0a280", "offset": 281056896, "ascii": "--import", "wide": null }, { "va": "0x190c0a260", "offset": 281056864, "ascii": "tabbit-dsh-lifecycle.mjs", "wide": null }, { "va": "0x1907f4c50", "offset": 276774992, "ascii": "web", "wide": null }, { "va": "0x190c0a290", "offset": 281056912, "ascii": "--no-open", "wide": null }, { "va": "0x190c0a29c", "offset": 281056924, "ascii": "--host", "wide": null }, { "va": "0x19067b8a8", "offset": 275229864, "ascii": "127.0.0.1", "wide": null }, { "va": "0x190c0a2a4", "offset": 281056932, "ascii": "--port", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5291 }, { "label": "b-dsh-launch", "file": "rea-b-dsh-launch.json", "file_sha256": "08762e3aec2810f3f3bdf8d777a8cfcf764aaf7373dde8d8273dbfb3df74686e", "status": "completed", "evidence_id": "ev_201943f2ffa61aefb5ee43d4762049d04946d60e4724a9a832e36e9428e1e3f9", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183681bf0;pdgo @ 0x183681bf0;afij @ 0x183681bf0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183681bf0", "size": 3614, "nargs": 3, "signature": "fcn.183681bf0(int64_t arg1, int64_t arg2, int64_t arg_108h);", "callrefs": [ { "from": 6499605788, "to": 6499656928, "type": "CALL" }, { "from": 6499605806, "to": 6542067384, "type": "CALL" }, { "from": 6499605856, "to": 6452472976, "type": "CALL" }, { "from": 6499605918, "to": 6453526016, "type": "CALL" }, { "from": 6499605967, "to": 6453526016, "type": "CALL" }, { "from": 6499605977, "to": 6446849744, "type": "CALL" }, { "from": 6499605996, "to": 6446849744, "type": "CALL" }, { "from": 6499606045, "to": 6511512544, "type": "CALL" }, { "from": 6499606079, "to": 6511512544, "type": "CALL" }, { "from": 6499606092, "to": 6499604768, "type": "CALL" }, { "from": 6499606105, "to": 6511512544, "type": "CALL" }, { "from": 6499606110, "to": 6499606119, "type": "CODE" }, { "from": 6499606139, "to": 6511512544, "type": "CALL" }, { "from": 6499606173, "to": 6511512544, "type": "CALL" }, { "from": 6499606207, "to": 6511512544, "type": "CALL" }, { "from": 6499606241, "to": 6511512544, "type": "CALL" }, { "from": 6499606279, "to": 6511512544, "type": "CALL" }, { "from": 6499606313, "to": 6511512544, "type": "CALL" }, { "from": 6499606347, "to": 6511512544, "type": "CALL" }, { "from": 6499606420, "to": 6511512544, "type": "CALL" }, { "from": 6499606425, "to": 6499606480, "type": "CODE" }, { "from": 6499606469, "to": 6453526016, "type": "CALL" }, { "from": 6499606563, "to": 6453526016, "type": "CALL" }, { "from": 6499606571, "to": 6443224192, "type": "CALL" }, { "from": 6499606594, "to": 6457110720, "type": "CALL" }, { "from": 6499606639, "to": 6454898800, "type": "CALL" }, { "from": 6499606650, "to": 6448830656, "type": "CALL" }, { "from": 6499606658, "to": 6517433568, "type": "CALL" }, { "from": 6499606727, "to": 6511512544, "type": "CALL" }, { "from": 6499606732, "to": 6499606016, "type": "CODE" }, { "from": 6499606752, "to": 6456000224, "type": "CALL" }, { "from": 6499606765, "to": 6466681856, "type": "CALL" }, { "from": 6499606770, "to": 6499606694, "type": "CODE" }, { "from": 6499606774, "to": 6499606781, "type": "CODE" }, { "from": 6499606801, "to": 6523198208, "type": "CALL" }, { "from": 6499606836, "to": 6740346544, "type": "CALL" }, { "from": 6499606842, "to": 6499606744, "type": "CODE" }, { "from": 6499606861, "to": 6499607376, "type": "CODE" }, { "from": 6499606891, "to": 6499607063, "type": "CODE" }, { "from": 6499606904, "to": 6499607180, "type": "CODE" }, { "from": 6499606971, "to": 6619242848, "type": "CALL" }, { "from": 6499607016, "to": 6542434496, "type": "CALL" }, { "from": 6499607058, "to": 6454999952, "type": "CALL" }, { "from": 6499607082, "to": 6499688352, "type": "CALL" }, { "from": 6499607106, "to": 6471210304, "type": "CALL" }, { "from": 6499607191, "to": 6471210304, "type": "CALL" }, { "from": 6499607318, "to": 6499609696, "type": "CALL" }, { "from": 6499607371, "to": 6454999952, "type": "CALL" }, { "from": 6499607405, "to": 6511512544, "type": "CALL" }, { "from": 6499607467, "to": 6740377600, "type": "CALL" }, { "from": 6499607498, "to": 6740378384, "type": "CALL" }, { "from": 6499607516, "to": 6523198208, "type": "CALL" }, { "from": 6499607523, "to": 6740380040, "type": "CALL" }, { "from": 6499607551, "to": 6740378384, "type": "CALL" }, { "from": 6499607598, "to": 6523198208, "type": "CALL" }, { "from": 6499607605, "to": 6740380040, "type": "CALL" }, { "from": 6499607623, "to": 6740380024, "type": "CALL" }, { "from": 6499607633, "to": 6740377568, "type": "CALL" }, { "from": 6499607654, "to": 6740378384, "type": "CALL" }, { "from": 6499607703, "to": 6523198208, "type": "CALL" }, { "from": 6499607710, "to": 6740380040, "type": "CALL" }, { "from": 6499607741, "to": 6542434496, "type": "CALL" }, { "from": 6499607798, "to": 6740380032, "type": "CALL" }, { "from": 6499608062, "to": 6457864288, "type": "CALL" }, { "from": 6499608086, "to": 6477601248, "type": "CALL" }, { "from": 6499608117, "to": 6511512544, "type": "CALL" }, { "from": 6499608136, "to": 6463672240, "type": "CALL" }, { "from": 6499608144, "to": 6443184912, "type": "CALL" }, { "from": 6499608187, "to": 6499606781, "type": "CODE" }, { "from": 6499608197, "to": 6499606781, "type": "CODE" }, { "from": 6499608220, "to": 6455000096, "type": "CALL" }, { "from": 6499608225, "to": 6499607376, "type": "CODE" }, { "from": 6499608233, "to": 6499607529, "type": "CODE" }, { "from": 6499608241, "to": 6499607521, "type": "CODE" }, { "from": 6499608246, "to": 6523198208, "type": "CALL" }, { "from": 6499608285, "to": 6740346544, "type": "CALL" }, { "from": 6499608299, "to": 6499607583, "type": "CODE" }, { "from": 6499608304, "to": 6523198208, "type": "CALL" }, { "from": 6499608343, "to": 6740346544, "type": "CALL" }, { "from": 6499608361, "to": 6499607688, "type": "CODE" }, { "from": 6499608368, "to": 6740378496, "type": "CALL" }, { "from": 6499608384, "to": 6740378584, "type": "CALL" }, { "from": 6499608411, "to": 6740346544, "type": "CALL" }, { "from": 6499608422, "to": 6458454272, "type": "CALL" }, { "from": 6499608432, "to": 6499606820, "type": "CODE" }, { "from": 6499608441, "to": 6499608422, "type": "CODE" }, { "from": 6499608454, "to": 6542089024, "type": "CALL" }, { "from": 6499608544, "to": 6542067384, "type": "CALL" }, { "from": 6499608603, "to": 6542436672, "type": "CALL" }, { "from": 6499608669, "to": 6511512544, "type": "CALL" }, { "from": 6499608679, "to": 6499607913, "type": "CODE" }, { "from": 6499608759, "to": 6542067384, "type": "CALL" }, { "from": 6499608810, "to": 6542436672, "type": "CALL" }, { "from": 6499608862, "to": 6511512544, "type": "CALL" }, { "from": 6499608877, "to": 6499607986, "type": "CODE" }, { "from": 6499608884, "to": 6740378496, "type": "CALL" }, { "from": 6499608900, "to": 6740378584, "type": "CALL" }, { "from": 6499608927, "to": 6740346544, "type": "CALL" }, { "from": 6499608938, "to": 6458454272, "type": "CALL" }, { "from": 6499608943, "to": 6499608269, "type": "CODE" }, { "from": 6499608952, "to": 6499608938, "type": "CODE" }, { "from": 6499608956, "to": 6740378496, "type": "CALL" }, { "from": 6499608972, "to": 6740378584, "type": "CALL" }, { "from": 6499608995, "to": 6740346544, "type": "CALL" }, { "from": 6499609006, "to": 6458454272, "type": "CALL" }, { "from": 6499609011, "to": 6499608327, "type": "CODE" }, { "from": 6499609020, "to": 6499609006, "type": "CODE" }, { "from": 6499609056, "to": 6624396544, "type": "CALL" }, { "from": 6499609061, "to": 6499608122, "type": "CODE" }, { "from": 6499609066, "to": 6545792064, "type": "CALL" }, { "from": 6499609071, "to": 6543271376, "type": "CALL" }, { "from": 6499609079, "to": 6499608552, "type": "CODE" }, { "from": 6499609086, "to": 6499608420, "type": "CODE" }, { "from": 6499609093, "to": 6499608936, "type": "CODE" }, { "from": 6499609100, "to": 6499609004, "type": "CODE" } ], "datarefs": [ { "from": 6499605518, "to": 6740709440, "type": "DATA" }, { "from": 6499605881, "to": 6722745488, "type": "DATA" }, { "from": 6499605938, "to": 6715268440, "type": "DATA" }, { "from": 6499606363, "to": 6740709440, "type": "DATA" }, { "from": 6499606427, "to": 6723510960, "type": "DATA" }, { "from": 6499606529, "to": 6723510976, "type": "DATA" }, { "from": 6499606806, "to": 6742480216, "type": "DATA" }, { "from": 6499606820, "to": 6742480216, "type": "DATA" }, { "from": 6499607208, "to": 6723511000, "type": "DATA" }, { "from": 6499607235, "to": 6723511000, "type": "DATA" }, { "from": 6499607289, "to": 6712114780, "type": "DATA" }, { "from": 6499607410, "to": 6723511040, "type": "DATA" }, { "from": 6499607429, "to": 6723511024, "type": "DATA" }, { "from": 6499608255, "to": 6742480216, "type": "DATA" }, { "from": 6499608269, "to": 6742480216, "type": "DATA" }, { "from": 6499608313, "to": 6742480216, "type": "DATA" }, { "from": 6499608327, "to": 6742480216, "type": "DATA" }, { "from": 6499608374, "to": 6729744864, "type": "DATA" }, { "from": 6499608399, "to": 6491546928, "type": "DATA" }, { "from": 6499608890, "to": 6729744864, "type": "DATA" }, { "from": 6499608915, "to": 6491546928, "type": "DATA" }, { "from": 6499608962, "to": 6729744864, "type": "DATA" }, { "from": 6499608983, "to": 6491546928, "type": "DATA" } ] }, "strings": [ { "va": "0x190b4f490", "offset": 280291472, "ascii": "workspace", "wide": null }, { "va": "0x19042dd58", "offset": 272814424, "ascii": "logs", "wide": null }, { "va": "0x190c0a2b0", "offset": 281056944, "ascii": "process.log", "wide": null }, { "va": "0x190c0a2c0", "offset": 281056960, "ascii": "process.previous.log", "wide": null }, { "va": "0x190c0a2d8", "offset": 281056984, "ascii": null, "wide": "DSH_HOME" }, { "va": "0x1911fc1e0", "offset": 287290848, "ascii": "GetHandleVerifier", "wide": null } ], "imports": [ { "at": "0x1836823ab", "target": "0x191c20000", "api": { "va": 6740377600, "lib": "KERNEL32.dll", "sym": "CreatePipe" } }, { "at": "0x1836823ca", "target": "0x191c20310", "api": { "va": 6740378384, "lib": "KERNEL32.dll", "sym": "GetLastError" } }, { "at": "0x1836823e3", "target": "0x191c20988", "api": { "va": 6740380040, "lib": "KERNEL32.dll", "sym": "SetLastError" } }, { "at": "0x1836823ff", "target": "0x191c20310", "api": { "va": 6740378384, "lib": "KERNEL32.dll", "sym": "GetLastError" } }, { "at": "0x183682435", "target": "0x191c20988", "api": { "va": 6740380040, "lib": "KERNEL32.dll", "sym": "SetLastError" } }, { "at": "0x183682447", "target": "0x191c20978", "api": { "va": 6740380024, "lib": "KERNEL32.dll", "sym": "SetHandleInformation" } }, { "at": "0x183682451", "target": "0x191c1ffe0", "api": { "va": 6740377568, "lib": "KERNEL32.dll", "sym": "CreateJobObjectW" } }, { "at": "0x183682466", "target": "0x191c20310", "api": { "va": 6740378384, "lib": "KERNEL32.dll", "sym": "GetLastError" } }, { "at": "0x18368249e", "target": "0x191c20988", "api": { "va": 6740380040, "lib": "KERNEL32.dll", "sym": "SetLastError" } }, { "at": "0x1836824f6", "target": "0x191c20980", "api": { "va": 6740380032, "lib": "KERNEL32.dll", "sym": "SetInformationJobObject" } }, { "at": "0x183682730", "target": "0x191c20380", "api": { "va": 6740378496, "lib": "KERNEL32.dll", "sym": "GetModuleHandleW" } }, { "at": "0x183682740", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } }, { "at": "0x183682934", "target": "0x191c20380", "api": { "va": 6740378496, "lib": "KERNEL32.dll", "sym": "GetModuleHandleW" } }, { "at": "0x183682944", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } }, { "at": "0x18368297c", "target": "0x191c20380", "api": { "va": 6740378496, "lib": "KERNEL32.dll", "sym": "GetModuleHandleW" } }, { "at": "0x18368298c", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 36542 }, { "label": "b-dsh-process", "file": "rea-b-dsh-process.json", "file_sha256": "a5c2e67ba3f13d60622a2102fdbec77839e4c5db084a084255d9d828ee7a0007", "status": "completed", "evidence_id": "ev_37aa8e4b5d98c8cbde93766b97ec348ad59e2f570f53c1a74a75730c2bb15f7f", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18367f730;pdgo @ 0x18367f730;afij @ 0x18367f730", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18367f730", "size": 833, "nargs": 2, "signature": "fcn.18367f730(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499596181, "to": 6511512544, "type": "CALL" }, { "from": 6499596186, "to": 6499596229, "type": "CODE" }, { "from": 6499596197, "to": 6740346544, "type": "CALL" }, { "from": 6499596203, "to": 6499596173, "type": "CODE" }, { "from": 6499596210, "to": 6511512544, "type": "CALL" }, { "from": 6499596215, "to": 6499596385, "type": "CODE" }, { "from": 6499596223, "to": 6740346544, "type": "CALL" }, { "from": 6499596236, "to": 6522894224, "type": "CALL" }, { "from": 6499596248, "to": 6522894224, "type": "CALL" }, { "from": 6499596269, "to": 6535891568, "type": "CALL" }, { "from": 6499596316, "to": 6542067384, "type": "CALL" }, { "from": 6499596525, "to": 6542067384, "type": "CALL" }, { "from": 6499596602, "to": 6542067384, "type": "CALL" }, { "from": 6499596705, "to": 6512942288, "type": "CALL" }, { "from": 6499596722, "to": 6531880336, "type": "CALL" }, { "from": 6499596741, "to": 6532074304, "type": "CALL" }, { "from": 6499596746, "to": 6499596756, "type": "CODE" }, { "from": 6499596751, "to": 6499601456, "type": "CALL" }, { "from": 6499596806, "to": 6740346544, "type": "CALL" }, { "from": 6499596812, "to": 6499596764, "type": "CODE" }, { "from": 6499596822, "to": 6542089024, "type": "CALL" }, { "from": 6499596834, "to": 6542069736, "type": "CALL" }, { "from": 6499596874, "to": 6453059232, "type": "CALL" }, { "from": 6499596896, "to": 6542069628, "type": "CALL" }, { "from": 6499596901, "to": 6499596447, "type": "CODE" } ], "datarefs": [ { "from": 6499596098, "to": 6740709440, "type": "DATA" }, { "from": 6499596152, "to": 6537934960, "type": "DATA" }, { "from": 6499596410, "to": 6742178384, "type": "DATA" }, { "from": 6499596416, "to": 6741832416, "type": "DATA" }, { "from": 6499596447, "to": 6742178376, "type": "DATA" }, { "from": 6499596537, "to": 6496572928, "type": "DATA" }, { "from": 6499596548, "to": 6488510160, "type": "DATA" }, { "from": 6499596559, "to": 6496570832, "type": "DATA" }, { "from": 6499596570, "to": 6499601456, "type": "DATA" }, { "from": 6499596609, "to": 6467941616, "type": "DATA" }, { "from": 6499596620, "to": 6499609520, "type": "DATA" }, { "from": 6499596631, "to": 6511490512, "type": "DATA" }, { "from": 6499596642, "to": 6499601856, "type": "DATA" }, { "from": 6499596677, "to": 6713531992, "type": "DATA" }, { "from": 6499596684, "to": 6723511048, "type": "DATA" }, { "from": 6499596772, "to": 6740709440, "type": "DATA" }, { "from": 6499596827, "to": 6742178384, "type": "DATA" }, { "from": 6499596839, "to": 6742178384, "type": "DATA" }, { "from": 6499596852, "to": 6742242256, "type": "DATA" }, { "from": 6499596859, "to": 6723512473, "type": "DATA" }, { "from": 6499596882, "to": 6742178376, "type": "DATA" }, { "from": 6499596889, "to": 6742178384, "type": "DATA" } ] }, "strings": [ { "va": "0x190285e58", "offset": 271077976, "ascii": "Stop", "wide": null }, { "va": "0x190c0a308", "offset": 281057032, "ascii": "..\\..\\tab\\browser\\dsh\\dsh_process.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 8996 }, { "label": "b-dsh-service", "file": "rea-b-dsh-service.json", "file_sha256": "4011579819c7d06f3b608280bc3cf909e1d0fbee5fa10a1fbc82dc12f0bb039c", "status": "completed", "evidence_id": "ev_f3bcaa68a32c01fc8934fdad20ee1c35b741b416af17d9d7a1a65a8882464b9e", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183683060;pdgo @ 0x183683060;afij @ 0x183683060", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183683060", "size": 870, "nargs": 2, "signature": "fcn.183683060(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499611009, "to": 6542067384, "type": "CALL" }, { "from": 6499611174, "to": 6542067384, "type": "CALL" }, { "from": 6499611248, "to": 6542067384, "type": "CALL" }, { "from": 6499611327, "to": 6522337344, "type": "CALL" }, { "from": 6499611368, "to": 6512942288, "type": "CALL" }, { "from": 6499611387, "to": 6475343664, "type": "CALL" }, { "from": 6499611406, "to": 6532074304, "type": "CALL" }, { "from": 6499611427, "to": 6511512544, "type": "CALL" }, { "from": 6499611486, "to": 6499611332, "type": "CODE" }, { "from": 6499611499, "to": 6542089024, "type": "CALL" }, { "from": 6499611511, "to": 6542069736, "type": "CALL" }, { "from": 6499611551, "to": 6453059232, "type": "CALL" }, { "from": 6499611573, "to": 6542069628, "type": "CALL" }, { "from": 6499611578, "to": 6499611096, "type": "CODE" } ], "datarefs": [ { "from": 6499610738, "to": 6740709440, "type": "DATA" }, { "from": 6499610942, "to": 6709836760, "type": "DATA" }, { "from": 6499611059, "to": 6742178384, "type": "DATA" }, { "from": 6499611065, "to": 6741832416, "type": "DATA" }, { "from": 6499611096, "to": 6742178376, "type": "DATA" }, { "from": 6499611186, "to": 6499632400, "type": "DATA" }, { "from": 6499611197, "to": 6488510160, "type": "DATA" }, { "from": 6499611208, "to": 6496570832, "type": "DATA" }, { "from": 6499611219, "to": 6499611600, "type": "DATA" }, { "from": 6499611258, "to": 6443242560, "type": "DATA" }, { "from": 6499611269, "to": 6488787248, "type": "DATA" }, { "from": 6499611280, "to": 6511490512, "type": "DATA" }, { "from": 6499611291, "to": 6499682976, "type": "DATA" }, { "from": 6499611340, "to": 6723511184, "type": "DATA" }, { "from": 6499611347, "to": 6723511144, "type": "DATA" }, { "from": 6499611440, "to": 6740709440, "type": "DATA" }, { "from": 6499611504, "to": 6742178384, "type": "DATA" }, { "from": 6499611516, "to": 6742178384, "type": "DATA" }, { "from": 6499611529, "to": 6742242256, "type": "DATA" }, { "from": 6499611536, "to": 6723512473, "type": "DATA" }, { "from": 6499611559, "to": 6742178376, "type": "DATA" }, { "from": 6499611566, "to": 6742178384, "type": "DATA" } ] }, "strings": [ { "va": "0x190c0a390", "offset": 281057168, "ascii": "DshService", "wide": null }, { "va": "0x190c0a368", "offset": 281057128, "ascii": "..\\..\\tab\\browser\\dsh\\dsh_service.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 10123 }, { "label": "b-dsh-transport", "file": "rea-b-dsh-transport.json", "file_sha256": "4802db4179793d78e897ba5eef79fd04094e6e0869625d560ddc47b692832032", "status": "completed", "evidence_id": "ev_dada837f0ec915ec1a6b8f61c7472a60c0fbfc448a5ae61e956a8c1e6abe0d02", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183686240;pdgo @ 0x183686240;afij @ 0x183686240", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183686240", "size": 696, "nargs": 1, "signature": "fcn.183686240(int64_t arg1);", "callrefs": [ { "from": 6499623571, "to": 6499623624, "type": "CODE" }, { "from": 6499623583, "to": 6511512544, "type": "CALL" }, { "from": 6499623588, "to": 6499623608, "type": "CODE" }, { "from": 6499623595, "to": 6511512544, "type": "CALL" }, { "from": 6499623637, "to": 6511396000, "type": "CALL" }, { "from": 6499623656, "to": 6499623600, "type": "CODE" }, { "from": 6499623700, "to": 6522894224, "type": "CALL" }, { "from": 6499623725, "to": 6511396000, "type": "CALL" }, { "from": 6499623755, "to": 6542067384, "type": "CALL" }, { "from": 6499623837, "to": 6499596080, "type": "CALL" }, { "from": 6499623959, "to": 6542067384, "type": "CALL" }, { "from": 6499624032, "to": 6512942288, "type": "CALL" }, { "from": 6499624049, "to": 6531880336, "type": "CALL" }, { "from": 6499624076, "to": 6532074304, "type": "CALL" }, { "from": 6499624081, "to": 6499623842, "type": "CODE" }, { "from": 6499624096, "to": 6542089024, "type": "CALL" }, { "from": 6499624108, "to": 6542069736, "type": "CALL" }, { "from": 6499624148, "to": 6453059232, "type": "CALL" }, { "from": 6499624170, "to": 6542069628, "type": "CALL" }, { "from": 6499624175, "to": 6499623913, "type": "CODE" } ], "datarefs": [ { "from": 6499623500, "to": 6740709440, "type": "DATA" }, { "from": 6499623769, "to": 6455944992, "type": "DATA" }, { "from": 6499623780, "to": 6499634416, "type": "DATA" }, { "from": 6499623791, "to": 6511490512, "type": "DATA" }, { "from": 6499623802, "to": 6499623360, "type": "DATA" }, { "from": 6499623850, "to": 6740709440, "type": "DATA" }, { "from": 6499623876, "to": 6742178384, "type": "DATA" }, { "from": 6499623882, "to": 6741832416, "type": "DATA" }, { "from": 6499623913, "to": 6742178376, "type": "DATA" }, { "from": 6499623970, "to": 6446028352, "type": "DATA" }, { "from": 6499623981, "to": 6454368560, "type": "DATA" }, { "from": 6499624004, "to": 6723511264, "type": "DATA" }, { "from": 6499624011, "to": 6723511144, "type": "DATA" }, { "from": 6499624101, "to": 6742178384, "type": "DATA" }, { "from": 6499624113, "to": 6742178384, "type": "DATA" }, { "from": 6499624126, "to": 6742242256, "type": "DATA" }, { "from": 6499624133, "to": 6723512473, "type": "DATA" }, { "from": 6499624156, "to": 6742178376, "type": "DATA" }, { "from": 6499624163, "to": 6742178384, "type": "DATA" } ] }, "strings": [ { "va": "0x190c0a3e0", "offset": 281057248, "ascii": "OnLastProfileClosed", "wide": null }, { "va": "0x190c0a368", "offset": 281057128, "ascii": "..\\..\\tab\\browser\\dsh\\dsh_service.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 7290 }, { "label": "b-fs-api-read-real", "file": "rea-b-fs-api-read-real.json", "file_sha256": "b43b901892525d5a491d8e0e374539c4db14cdc4d63d74f44a232bcb642dad34", "status": "completed", "evidence_id": "ev_1580ec490a3ec31834ec419e4408fdbbe6d32a9d37d236f30696409d142ab816", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183812280;pdgo @ 0x183812280;afij @ 0x183812280", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183812280", "size": 864, "nargs": 3, "signature": "fcn.183812280(int64_t arg1, int64_t arg2, int64_t arg_bfh);", "callrefs": [ { "from": 6501245651, "to": 6502350352, "type": "CALL" }, { "from": 6501245685, "to": 6501356784, "type": "CALL" }, { "from": 6501245699, "to": 6512708384, "type": "CALL" }, { "from": 6501245747, "to": 6542067384, "type": "CALL" }, { "from": 6501245839, "to": 6532014096, "type": "CALL" }, { "from": 6501245847, "to": 6522230240, "type": "CALL" }, { "from": 6501245887, "to": 6511396000, "type": "CALL" }, { "from": 6501245986, "to": 6501315936, "type": "CALL" }, { "from": 6501246017, "to": 6511512544, "type": "CALL" }, { "from": 6501246075, "to": 6511512544, "type": "CALL" }, { "from": 6501246135, "to": 6511513840, "type": "CALL" }, { "from": 6501246140, "to": 6501245879, "type": "CODE" }, { "from": 6501246236, "to": 6587959616, "type": "CALL" }, { "from": 6501246281, "to": 6587967968, "type": "CALL" }, { "from": 6501246294, "to": 6501246029, "type": "CODE" }, { "from": 6501246304, "to": 6542067384, "type": "CALL" }, { "from": 6501246408, "to": 6501246230, "type": "CODE" }, { "from": 6501246426, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6501245580, "to": 6740709440, "type": "DATA" }, { "from": 6501245758, "to": 6501255344, "type": "DATA" }, { "from": 6501245769, "to": 6496176416, "type": "DATA" }, { "from": 6501245780, "to": 6511490512, "type": "DATA" }, { "from": 6501245791, "to": 6501246448, "type": "DATA" }, { "from": 6501246091, "to": 6740709440, "type": "DATA" }, { "from": 6501246157, "to": 6716742096, "type": "DATA" }, { "from": 6501246192, "to": 6716742112, "type": "DATA" }, { "from": 6501246249, "to": 6587963136, "type": "DATA" }, { "from": 6501246274, "to": 6545109024, "type": "DATA" }, { "from": 6501246351, "to": 6723614416, "type": "DATA" }, { "from": 6501246376, "to": 6723614431, "type": "DATA" } ] }, "strings": [ { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x190c236d0", "offset": 281160400, "ascii": "TabLocalFSService not available", "wide": null }, { "va": "0x190c236df", "offset": 281160415, "ascii": "ce not available", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 8308 }, { "label": "b-fs-api-read", "file": "rea-b-fs-api-read.json", "file_sha256": "a5b8047a28d0fcce3b97af5cb4bff6de15a5065e846f0e14e55d897a12fa5965", "status": "completed", "evidence_id": "ev_4af1b7225ffa45d2bcb77fccf6c62d0e85b7375fcc8aaf016f268be61d8c960b", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18380e390;pdgo @ 0x18380e390;afij @ 0x18380e390", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18380e390", "size": 1538, "nargs": 3, "signature": "fcn.18380e390(int64_t arg1, int64_t arg2, int64_t arg_1ffh);", "callrefs": [ { "from": 6501229529, "to": 6502310480, "type": "CALL" }, { "from": 6501229563, "to": 6501356784, "type": "CALL" }, { "from": 6501229577, "to": 6512708384, "type": "CALL" }, { "from": 6501229646, "to": 6445650832, "type": "CALL" }, { "from": 6501229672, "to": 6524031184, "type": "CALL" }, { "from": 6501229693, "to": 6524031184, "type": "CALL" }, { "from": 6501229714, "to": 6524031184, "type": "CALL" }, { "from": 6501229752, "to": 6501223616, "type": "CALL" }, { "from": 6501229786, "to": 6524031184, "type": "CALL" }, { "from": 6501229807, "to": 6524031184, "type": "CALL" }, { "from": 6501229833, "to": 6532014096, "type": "CALL" }, { "from": 6501229841, "to": 6522230240, "type": "CALL" }, { "from": 6501229869, "to": 6501229888, "type": "CODE" }, { "from": 6501229883, "to": 6511513840, "type": "CALL" }, { "from": 6501229896, "to": 6511396000, "type": "CALL" }, { "from": 6501229929, "to": 6524031184, "type": "CALL" }, { "from": 6501229954, "to": 6511512544, "type": "CALL" }, { "from": 6501229985, "to": 6511512544, "type": "CALL" }, { "from": 6501229998, "to": 6447366432, "type": "CALL" }, { "from": 6501230008, "to": 6542067384, "type": "CALL" }, { "from": 6501230113, "to": 6501230206, "type": "CODE" }, { "from": 6501230212, "to": 6587959616, "type": "CALL" }, { "from": 6501230226, "to": 6587960272, "type": "CALL" }, { "from": 6501230277, "to": 6511512544, "type": "CALL" }, { "from": 6501230382, "to": 6445650832, "type": "CALL" }, { "from": 6501230408, "to": 6524031184, "type": "CALL" }, { "from": 6501230429, "to": 6524031184, "type": "CALL" }, { "from": 6501230467, "to": 6501223616, "type": "CALL" }, { "from": 6501230501, "to": 6524031184, "type": "CALL" }, { "from": 6501230522, "to": 6524031184, "type": "CALL" }, { "from": 6501230548, "to": 6532014096, "type": "CALL" }, { "from": 6501230556, "to": 6522230240, "type": "CALL" }, { "from": 6501230584, "to": 6501230603, "type": "CODE" }, { "from": 6501230598, "to": 6511513840, "type": "CALL" }, { "from": 6501230611, "to": 6511396000, "type": "CALL" }, { "from": 6501230644, "to": 6524031184, "type": "CALL" }, { "from": 6501230676, "to": 6511512544, "type": "CALL" }, { "from": 6501230714, "to": 6511512544, "type": "CALL" }, { "from": 6501230727, "to": 6447366432, "type": "CALL" }, { "from": 6501230750, "to": 6532014096, "type": "CALL" }, { "from": 6501230758, "to": 6522230240, "type": "CALL" }, { "from": 6501230792, "to": 6501230814, "type": "CODE" }, { "from": 6501230809, "to": 6511513840, "type": "CALL" }, { "from": 6501230822, "to": 6511396000, "type": "CALL" }, { "from": 6501230863, "to": 6501290672, "type": "CALL" }, { "from": 6501230903, "to": 6511512544, "type": "CALL" }, { "from": 6501230936, "to": 6457900480, "type": "CALL" }, { "from": 6501230946, "to": 6485318848, "type": "CALL" }, { "from": 6501230965, "to": 6587962400, "type": "CALL" }, { "from": 6501230970, "to": 6501230217, "type": "CODE" }, { "from": 6501230988, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6501229470, "to": 6740709440, "type": "DATA" }, { "from": 6501229585, "to": 6742246848, "type": "DATA" }, { "from": 6501229619, "to": 6723614288, "type": "DATA" }, { "from": 6501229659, "to": 6720303740, "type": "DATA" }, { "from": 6501229677, "to": 6723614776, "type": "DATA" }, { "from": 6501229698, "to": 6723615400, "type": "DATA" }, { "from": 6501229791, "to": 6723615368, "type": "DATA" }, { "from": 6501230049, "to": 6723614416, "type": "DATA" }, { "from": 6501230078, "to": 6723614431, "type": "DATA" }, { "from": 6501230089, "to": 6723614416, "type": "DATA" }, { "from": 6501230127, "to": 6716742096, "type": "DATA" }, { "from": 6501230162, "to": 6716742112, "type": "DATA" }, { "from": 6501230182, "to": 6716742096, "type": "DATA" }, { "from": 6501230293, "to": 6740709440, "type": "DATA" }, { "from": 6501230335, "to": 6741126112, "type": "DATA" }, { "from": 6501230344, "to": 6742246856, "type": "DATA" }, { "from": 6501230358, "to": 6723614288, "type": "DATA" }, { "from": 6501230395, "to": 6720303740, "type": "DATA" }, { "from": 6501230413, "to": 6723614832, "type": "DATA" }, { "from": 6501230506, "to": 6723615368, "type": "DATA" } ] }, "strings": [ { "va": "0x190c23650", "offset": 281160272, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_local_fs\\tab_local_fs_api.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c23838", "offset": 281160760, "ascii": "[TabLocalFSAPI] unmount failed: service unavailable", "wide": null }, { "va": "0x190c23aa8", "offset": 281161384, "ascii": " handle=", "wide": null }, { "va": "0x190c23a88", "offset": 281161352, "ascii": " origin=", "wide": null }, { "va": "0x190c236d0", "offset": 281160400, "ascii": "TabLocalFSService not available", "wide": null }, { "va": "0x190c236df", "offset": 281160415, "ascii": "ce not available", "wide": null }, { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x190c23870", "offset": 281160816, "ascii": "[TabLocalFSAPI] unmount called: handle=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 14352 }, { "label": "b-fs-mount", "file": "rea-b-fs-mount.json", "file_sha256": "8293e582e038ee5550db7c0d5c67dc1a169131d94320303460c2a05345a5a465", "status": "completed", "evidence_id": "ev_fac882f2e8049d43143881a235bb7951ebe9cd457071163a5c89e9b64f4f250e", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1838152d0;pdgo @ 0x1838152d0;afij @ 0x1838152d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1838152d0", "size": 1917, "nargs": 3, "signature": "fcn.1838152d0(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6501257959, "to": 6501257104, "type": "CALL" }, { "from": 6501258027, "to": 6740378272, "type": "CALL" }, { "from": 6501258070, "to": 6464588400, "type": "CALL" }, { "from": 6501258197, "to": 6501258226, "type": "CODE" }, { "from": 6501258207, "to": 6501258226, "type": "CODE" }, { "from": 6501258304, "to": 6501258333, "type": "CODE" }, { "from": 6501258314, "to": 6501258333, "type": "CODE" }, { "from": 6501258391, "to": 6501259624, "type": "CODE" }, { "from": 6501258396, "to": 6740378384, "type": "CALL" }, { "from": 6501258404, "to": 6454900080, "type": "CALL" }, { "from": 6501258472, "to": 6445650832, "type": "CALL" }, { "from": 6501258495, "to": 6524031184, "type": "CALL" }, { "from": 6501258516, "to": 6524031184, "type": "CALL" }, { "from": 6501258535, "to": 6501259856, "type": "CALL" }, { "from": 6501258566, "to": 6524031184, "type": "CALL" }, { "from": 6501258587, "to": 6524031184, "type": "CALL" }, { "from": 6501258597, "to": 6446762512, "type": "CALL" }, { "from": 6501258633, "to": 6501258871, "type": "CODE" }, { "from": 6501258638, "to": 6740378384, "type": "CALL" }, { "from": 6501258646, "to": 6454900080, "type": "CALL" }, { "from": 6501258714, "to": 6445650832, "type": "CALL" }, { "from": 6501258737, "to": 6524031184, "type": "CALL" }, { "from": 6501258758, "to": 6524031184, "type": "CALL" }, { "from": 6501258777, "to": 6501259856, "type": "CALL" }, { "from": 6501258808, "to": 6524031184, "type": "CALL" }, { "from": 6501258829, "to": 6524031184, "type": "CALL" }, { "from": 6501258839, "to": 6446762512, "type": "CALL" }, { "from": 6501258871, "to": 6511512544, "type": "CALL" }, { "from": 6501258894, "to": 6445656528, "type": "CALL" }, { "from": 6501258962, "to": 6511512544, "type": "CALL" }, { "from": 6501259013, "to": 6511975280, "type": "CALL" }, { "from": 6501259021, "to": 6518967168, "type": "CALL" }, { "from": 6501259103, "to": 6501257392, "type": "CALL" }, { "from": 6501259108, "to": 6501259602, "type": "CODE" }, { "from": 6501259150, "to": 6445650832, "type": "CALL" }, { "from": 6501259173, "to": 6524031184, "type": "CALL" }, { "from": 6501259194, "to": 6524031184, "type": "CALL" }, { "from": 6501259215, "to": 6524031184, "type": "CALL" }, { "from": 6501259234, "to": 6501259856, "type": "CALL" }, { "from": 6501259265, "to": 6524031184, "type": "CALL" }, { "from": 6501259300, "to": 6511512544, "type": "CALL" }, { "from": 6501259323, "to": 6445656528, "type": "CALL" }, { "from": 6501259384, "to": 6511512544, "type": "CALL" }, { "from": 6501259435, "to": 6511975280, "type": "CALL" }, { "from": 6501259443, "to": 6518967168, "type": "CALL" }, { "from": 6501259467, "to": 6542067384, "type": "CALL" }, { "from": 6501259584, "to": 6501257392, "type": "CALL" }, { "from": 6501259597, "to": 6511512544, "type": "CALL" }, { "from": 6501259708, "to": 6501259602, "type": "CODE" }, { "from": 6501259753, "to": 6501259624, "type": "CODE" }, { "from": 6501259774, "to": 6501259624, "type": "CODE" }, { "from": 6501259806, "to": 6740346544, "type": "CALL" }, { "from": 6501259812, "to": 6501259424, "type": "CODE" }, { "from": 6501259842, "to": 6740346544, "type": "CALL" }, { "from": 6501259848, "to": 6501259002, "type": "CODE" } ], "datarefs": [ { "from": 6501258199, "to": 6706266480, "type": "DATA" }, { "from": 6501258213, "to": 6712113264, "type": "DATA" }, { "from": 6501258306, "to": 6706266480, "type": "DATA" }, { "from": 6501258320, "to": 6712113264, "type": "DATA" }, { "from": 6501258378, "to": 6712113264, "type": "DATA" }, { "from": 6501258424, "to": 6723620844, "type": "DATA" }, { "from": 6501258435, "to": 6742246848, "type": "DATA" }, { "from": 6501258448, "to": 6723615496, "type": "DATA" }, { "from": 6501258482, "to": 6720303740, "type": "DATA" }, { "from": 6501258500, "to": 6723615712, "type": "DATA" }, { "from": 6501258571, "to": 6723615680, "type": "DATA" }, { "from": 6501258666, "to": 6723620844, "type": "DATA" }, { "from": 6501258677, "to": 6742246848, "type": "DATA" }, { "from": 6501258690, "to": 6723615496, "type": "DATA" }, { "from": 6501258724, "to": 6720303740, "type": "DATA" }, { "from": 6501258742, "to": 6723615640, "type": "DATA" }, { "from": 6501258813, "to": 6723615680, "type": "DATA" }, { "from": 6501258876, "to": 6710367816, "type": "DATA" }, { "from": 6501258907, "to": 6708900496, "type": "DATA" }, { "from": 6501258919, "to": 6708923712, "type": "DATA" }, { "from": 6501258972, "to": 6708923824, "type": "DATA" }, { "from": 6501258986, "to": 6742217808, "type": "DATA" }, { "from": 6501259045, "to": 6723615688, "type": "DATA" }, { "from": 6501259081, "to": 6723615688, "type": "DATA" }, { "from": 6501259113, "to": 6742246848, "type": "DATA" }, { "from": 6501259126, "to": 6723615496, "type": "DATA" }, { "from": 6501259160, "to": 6720303740, "type": "DATA" }, { "from": 6501259178, "to": 6723615552, "type": "DATA" }, { "from": 6501259199, "to": 6719731404, "type": "DATA" }, { "from": 6501259305, "to": 6710367816, "type": "DATA" }, { "from": 6501259336, "to": 6708900496, "type": "DATA" }, { "from": 6501259348, "to": 6708923712, "type": "DATA" }, { "from": 6501259394, "to": 6708923824, "type": "DATA" }, { "from": 6501259408, "to": 6742217808, "type": "DATA" }, { "from": 6501259517, "to": 6723615608, "type": "DATA" }, { "from": 6501259548, "to": 6723615620, "type": "DATA" }, { "from": 6501259559, "to": 6723615608, "type": "DATA" }, { "from": 6501259670, "to": 6712149512, "type": "DATA" }, { "from": 6501259745, "to": 6706266480, "type": "DATA" } ] }, "strings": [ { "va": "0x190c23b08", "offset": 281161480, "ascii": "..\\..\\tab\\browser\\local_fs\\tab_local_fs_service.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c23be0", "offset": 281161696, "ascii": "[TabLocalFS] getattr failed to read file info: file=", "wide": null }, { "va": "0x190c23bc0", "offset": 281161664, "ascii": " errno=", "wide": null }, { "va": "0x190c23b98", "offset": 281161624, "ascii": "[TabLocalFS] getattr failed: file=", "wide": null }, { "va": "0x190c23bc8", "offset": 281161672, "ascii": "Cannot stat path", "wide": null }, { "va": "0x190c23b40", "offset": 281161536, "ascii": "[TabLocalFS] getattr rejected: symlink escapes mount", "wide": null }, { "va": "0x19086f6cc", "offset": 277277388, "ascii": " file=", "wide": null }, { "va": "0x190c23b78", "offset": 281161592, "ascii": "Path escapes mount (symlink)", "wide": null }, { "va": "0x190c23b84", "offset": 281161604, "ascii": " mount (symlink)", "wide": null } ], "imports": [ { "at": "0x18381532b", "target": "0x191c202a0", "api": { "va": 6740378272, "lib": "KERNEL32.dll", "sym": "GetFileAttributesExW" } }, { "at": "0x18381549c", "target": "0x191c20310", "api": { "va": 6740378384, "lib": "KERNEL32.dll", "sym": "GetLastError" } }, { "at": "0x18381558e", "target": "0x191c20310", "api": { "va": 6740378384, "lib": "KERNEL32.dll", "sym": "GetLastError" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 16827 }, { "label": "b-fs-path", "file": "rea-b-fs-path.json", "file_sha256": "30f9d8b49729ffd0c990d442b1d82528463630cb8610b07d84dd2292faf25d27", "status": "completed", "evidence_id": "ev_630ca1da1365a44bcf6cafeaa2c1265e92a253124ab39a299cc74fc7b242b2e9", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183819180;pdgo @ 0x183819180;afij @ 0x183819180", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183819180", "size": 595, "nargs": 1, "signature": "fcn.183819180(int64_t arg1);", "callrefs": [ { "from": 6501274065, "to": 6445650832, "type": "CALL" }, { "from": 6501274091, "to": 6524031184, "type": "CALL" }, { "from": 6501274112, "to": 6524031184, "type": "CALL" }, { "from": 6501274124, "to": 6462379168, "type": "CALL" }, { "from": 6501274145, "to": 6524031184, "type": "CALL" }, { "from": 6501274157, "to": 6462379168, "type": "CALL" }, { "from": 6501274176, "to": 6445656528, "type": "CALL" }, { "from": 6501274240, "to": 6511512544, "type": "CALL" }, { "from": 6501274291, "to": 6511975280, "type": "CALL" }, { "from": 6501274299, "to": 6518967168, "type": "CALL" }, { "from": 6501274332, "to": 6501339488, "type": "CALL" }, { "from": 6501274351, "to": 6501351456, "type": "CALL" }, { "from": 6501274381, "to": 6501351056, "type": "CALL" }, { "from": 6501274402, "to": 6501351280, "type": "CALL" }, { "from": 6501274427, "to": 6501274592, "type": "CALL" }, { "from": 6501274448, "to": 6542067384, "type": "CALL" }, { "from": 6501274533, "to": 6511512544, "type": "CALL" }, { "from": 6501274538, "to": 6501274509, "type": "CODE" }, { "from": 6501274568, "to": 6740346544, "type": "CALL" }, { "from": 6501274574, "to": 6501274280, "type": "CODE" } ], "datarefs": [ { "from": 6501274005, "to": 6742246848, "type": "DATA" }, { "from": 6501274018, "to": 6741126112, "type": "DATA" }, { "from": 6501274027, "to": 6742246856, "type": "DATA" }, { "from": 6501274041, "to": 6723615496, "type": "DATA" }, { "from": 6501274075, "to": 6720303740, "type": "DATA" }, { "from": 6501274096, "to": 6723616856, "type": "DATA" }, { "from": 6501274129, "to": 6723616896, "type": "DATA" }, { "from": 6501274162, "to": 6710367816, "type": "DATA" }, { "from": 6501274188, "to": 6708900496, "type": "DATA" }, { "from": 6501274200, "to": 6708923712, "type": "DATA" }, { "from": 6501274250, "to": 6708923824, "type": "DATA" }, { "from": 6501274264, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190c23b08", "offset": 281161480, "ascii": "..\\..\\tab\\browser\\local_fs\\tab_local_fs_service.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c24058", "offset": 281162840, "ascii": "[TabLocalFS] Shutdown: active_mounts=", "wide": null }, { "va": "0x190c24080", "offset": 281162880, "ascii": " tracked_mount_handles=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5011 }, { "label": "b-fs-preview-source", "file": "rea-b-fs-preview-source.json", "file_sha256": "e781db3d2cd2002cff0bad3ac8490d9b41b82b0805b331fd9d4f871a123206aa", "status": "completed", "evidence_id": "ev_e2d499574ded223a15e75c25d416333dd080248c73fab22c2061ae5369911ee0", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183696610;pdgo @ 0x183696610;afij @ 0x183696610", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183696610", "size": 1724, "nargs": 3, "signature": "fcn.183696610(int64_t arg1, int64_t arg2, int64_t arg4);", "callrefs": [ { "from": 6499690055, "to": 6499691728, "type": "CALL" }, { "from": 6499690109, "to": 6499692000, "type": "CALL" }, { "from": 6499690133, "to": 6481026848, "type": "CALL" }, { "from": 6499690147, "to": 6512708384, "type": "CALL" }, { "from": 6499690212, "to": 6499709184, "type": "CALL" }, { "from": 6499690267, "to": 6740346544, "type": "CALL" }, { "from": 6499690285, "to": 6740346544, "type": "CALL" }, { "from": 6499690355, "to": 6511512544, "type": "CALL" }, { "from": 6499690387, "to": 6511512544, "type": "CALL" }, { "from": 6499690419, "to": 6511512544, "type": "CALL" }, { "from": 6499690424, "to": 6499690504, "type": "CODE" }, { "from": 6499690466, "to": 6740346544, "type": "CALL" }, { "from": 6499690484, "to": 6740346544, "type": "CALL" }, { "from": 6499690540, "to": 6511512544, "type": "CALL" }, { "from": 6499690585, "to": 6511512544, "type": "CALL" }, { "from": 6499690590, "to": 6499690833, "type": "CODE" }, { "from": 6499690600, "to": 6542067384, "type": "CALL" }, { "from": 6499690613, "to": 6542067384, "type": "CALL" }, { "from": 6499690677, "to": 6542436672, "type": "CALL" }, { "from": 6499690795, "to": 6740346544, "type": "CALL" }, { "from": 6499690813, "to": 6740346544, "type": "CALL" }, { "from": 6499690903, "to": 6740346544, "type": "CALL" }, { "from": 6499690909, "to": 6499690841, "type": "CODE" }, { "from": 6499690995, "to": 6542067384, "type": "CALL" }, { "from": 6499691073, "to": 6542067384, "type": "CALL" }, { "from": 6499691129, "to": 6499698464, "type": "CALL" }, { "from": 6499691198, "to": 6512942288, "type": "CALL" }, { "from": 6499691208, "to": 6542067384, "type": "CALL" }, { "from": 6499691228, "to": 6542067384, "type": "CALL" }, { "from": 6499691298, "to": 6542067384, "type": "CALL" }, { "from": 6499691374, "to": 6511423872, "type": "CALL" }, { "from": 6499691414, "to": 6463429312, "type": "CALL" }, { "from": 6499691419, "to": 6499690305, "type": "CODE" }, { "from": 6499691435, "to": 6511513840, "type": "CALL" }, { "from": 6499691440, "to": 6499691173, "type": "CODE" }, { "from": 6499691461, "to": 6610248464, "type": "CALL" }, { "from": 6499691512, "to": 6740346544, "type": "CALL" }, { "from": 6499691530, "to": 6740346544, "type": "CALL" }, { "from": 6499691558, "to": 6499690296, "type": "CODE" }, { "from": 6499691584, "to": 6740346544, "type": "CALL" }, { "from": 6499691590, "to": 6499690305, "type": "CODE" }, { "from": 6499691606, "to": 6542089024, "type": "CALL" }, { "from": 6499691643, "to": 6740346544, "type": "CALL" }, { "from": 6499691649, "to": 6499690833, "type": "CODE" }, { "from": 6499691678, "to": 6740346544, "type": "CALL" }, { "from": 6499691684, "to": 6499690504, "type": "CODE" }, { "from": 6499691713, "to": 6740346544, "type": "CALL" }, { "from": 6499691719, "to": 6499691550, "type": "CODE" } ], "datarefs": [ { "from": 6499690034, "to": 6740709440, "type": "DATA" }, { "from": 6499690126, "to": 6742178400, "type": "DATA" }, { "from": 6499690634, "to": 6723513488, "type": "DATA" }, { "from": 6499690661, "to": 6723513488, "type": "DATA" }, { "from": 6499690693, "to": 6710332144, "type": "DATA" }, { "from": 6499690852, "to": 6740709440, "type": "DATA" }, { "from": 6499690960, "to": 6718095440, "type": "DATA" }, { "from": 6499690971, "to": 6718095448, "type": "DATA" }, { "from": 6499691010, "to": 6499696464, "type": "DATA" }, { "from": 6499691021, "to": 6495420080, "type": "DATA" }, { "from": 6499691032, "to": 6511490512, "type": "DATA" }, { "from": 6499691043, "to": 6499693392, "type": "DATA" }, { "from": 6499691083, "to": 6499696656, "type": "DATA" }, { "from": 6499691094, "to": 6499696800, "type": "DATA" }, { "from": 6499691109, "to": 6499704752, "type": "DATA" }, { "from": 6499691173, "to": 6722694264, "type": "DATA" }, { "from": 6499691180, "to": 6723513584, "type": "DATA" }, { "from": 6499691240, "to": 6462662976, "type": "DATA" }, { "from": 6499691251, "to": 6499697824, "type": "DATA" }, { "from": 6499691266, "to": 6499696960, "type": "DATA" }, { "from": 6499691308, "to": 6443185472, "type": "DATA" }, { "from": 6499691319, "to": 6496379968, "type": "DATA" }, { "from": 6499691334, "to": 6499697312, "type": "DATA" }, { "from": 6499691362, "to": 6741126408, "type": "DATA" }, { "from": 6499691394, "to": 6723513564, "type": "DATA" } ] }, "strings": [ { "va": "0x1906e0050", "offset": 275641424, "ascii": "index.html", "wide": null }, { "va": "0x190b42c78", "offset": 280240248, "ascii": "StartDataRequest", "wide": null }, { "va": "0x190c0acf0", "offset": 281059568, "ascii": "..\\..\\tab\\browser\\ui\\webui\\tab_local_preview\\tab_local_preview_source.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 17996 }, { "label": "b-fs-read-bridge", "file": "rea-b-fs-read-bridge.json", "file_sha256": "cd2c42b76c3656e9b9e39e89e3dabe69c19682c73e6b2361cd199012b397e9bc", "status": "completed", "evidence_id": "ev_21f54737192c69901294d7b9c9b1c57ec6999e355f4a1f479955352416ca9dd2", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183823560;pdgo @ 0x183823560;afij @ 0x183823560", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183823560", "size": 1392, "nargs": 7, "signature": "fcn.183823560(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h);", "callrefs": [ { "from": 6501316039, "to": 6445650832, "type": "CALL" }, { "from": 6501316062, "to": 6524031184, "type": "CALL" }, { "from": 6501316083, "to": 6524031184, "type": "CALL" }, { "from": 6501316102, "to": 6501223616, "type": "CALL" }, { "from": 6501316133, "to": 6524031184, "type": "CALL" }, { "from": 6501316154, "to": 6524031184, "type": "CALL" }, { "from": 6501316185, "to": 6524031184, "type": "CALL" }, { "from": 6501316206, "to": 6524031184, "type": "CALL" }, { "from": 6501316217, "to": 6462379168, "type": "CALL" }, { "from": 6501316238, "to": 6524031184, "type": "CALL" }, { "from": 6501316249, "to": 6524048128, "type": "CALL" }, { "from": 6501316270, "to": 6524031184, "type": "CALL" }, { "from": 6501316280, "to": 6530586256, "type": "CALL" }, { "from": 6501316315, "to": 6511512544, "type": "CALL" }, { "from": 6501316339, "to": 6445656528, "type": "CALL" }, { "from": 6501316400, "to": 6511512544, "type": "CALL" }, { "from": 6501316455, "to": 6511975280, "type": "CALL" }, { "from": 6501316463, "to": 6518967168, "type": "CALL" }, { "from": 6501316505, "to": 6501294352, "type": "CALL" }, { "from": 6501316523, "to": 6542067384, "type": "CALL" }, { "from": 6501316671, "to": 6740346544, "type": "CALL" }, { "from": 6501316689, "to": 6740346544, "type": "CALL" }, { "from": 6501316743, "to": 6511512544, "type": "CALL" }, { "from": 6501316748, "to": 6501317194, "type": "CODE" }, { "from": 6501316784, "to": 6542067384, "type": "CALL" }, { "from": 6501316875, "to": 6511423872, "type": "CALL" }, { "from": 6501316885, "to": 6542067384, "type": "CALL" }, { "from": 6501316987, "to": 6512942288, "type": "CALL" }, { "from": 6501316997, "to": 6542067384, "type": "CALL" }, { "from": 6501317017, "to": 6542067384, "type": "CALL" }, { "from": 6501317080, "to": 6542067384, "type": "CALL" }, { "from": 6501317147, "to": 6511423872, "type": "CALL" }, { "from": 6501317181, "to": 6463429312, "type": "CALL" }, { "from": 6501317214, "to": 6511512544, "type": "CALL" }, { "from": 6501317257, "to": 6740346544, "type": "CALL" }, { "from": 6501317263, "to": 6501317228, "type": "CODE" }, { "from": 6501317279, "to": 6511512544, "type": "CALL" }, { "from": 6501317284, "to": 6501316712, "type": "CODE" }, { "from": 6501317317, "to": 6740346544, "type": "CALL" }, { "from": 6501317323, "to": 6501316444, "type": "CODE" } ], "datarefs": [ { "from": 6501315982, "to": 6742246848, "type": "DATA" }, { "from": 6501315995, "to": 6741126112, "type": "DATA" }, { "from": 6501316004, "to": 6742246856, "type": "DATA" }, { "from": 6501316018, "to": 6723615496, "type": "DATA" }, { "from": 6501316049, "to": 6720303740, "type": "DATA" }, { "from": 6501316067, "to": 6723618088, "type": "DATA" }, { "from": 6501316138, "to": 6723615368, "type": "DATA" }, { "from": 6501316190, "to": 6723618128, "type": "DATA" }, { "from": 6501316222, "to": 6712262456, "type": "DATA" }, { "from": 6501316254, "to": 6713565508, "type": "DATA" }, { "from": 6501316320, "to": 6710367816, "type": "DATA" }, { "from": 6501316352, "to": 6708900496, "type": "DATA" }, { "from": 6501316364, "to": 6708923712, "type": "DATA" }, { "from": 6501316413, "to": 6708923824, "type": "DATA" }, { "from": 6501316428, "to": 6742217808, "type": "DATA" }, { "from": 6501316570, "to": 6723617688, "type": "DATA" }, { "from": 6501316599, "to": 6723617702, "type": "DATA" }, { "from": 6501316610, "to": 6723617688, "type": "DATA" }, { "from": 6501316798, "to": 6501344976, "type": "DATA" }, { "from": 6501316809, "to": 6495420080, "type": "DATA" }, { "from": 6501316820, "to": 6511490512, "type": "DATA" }, { "from": 6501316863, "to": 6741126408, "type": "DATA" }, { "from": 6501316902, "to": 6501345696, "type": "DATA" }, { "from": 6501316913, "to": 6490195952, "type": "DATA" }, { "from": 6501316928, "to": 6501317328, "type": "DATA" }, { "from": 6501316962, "to": 6723618144, "type": "DATA" }, { "from": 6501316969, "to": 6723615496, "type": "DATA" }, { "from": 6501317025, "to": 6462662976, "type": "DATA" }, { "from": 6501317036, "to": 6501354544, "type": "DATA" }, { "from": 6501317051, "to": 6501353984, "type": "DATA" }, { "from": 6501317091, "to": 6443185472, "type": "DATA" }, { "from": 6501317102, "to": 6496379968, "type": "DATA" }, { "from": 6501317117, "to": 6501354224, "type": "DATA" }, { "from": 6501317135, "to": 6741126408, "type": "DATA" }, { "from": 6501317164, "to": 6723618133, "type": "DATA" } ] }, "strings": [ { "va": "0x190c23b08", "offset": 281161480, "ascii": "..\\..\\tab\\browser\\local_fs\\tab_local_fs_service.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c24528", "offset": 281164072, "ascii": "[TabLocalFS] Read requested: handle=", "wide": null }, { "va": "0x190c23a88", "offset": 281161352, "ascii": " origin=", "wide": null }, { "va": "0x190c24550", "offset": 281164112, "ascii": " fh=", "wide": null }, { "va": "0x19014ff38", "offset": 269808440, "ascii": " offset=", "wide": null }, { "va": "0x19028e144", "offset": 271111492, "ascii": " size=", "wide": null }, { "va": "0x190c24398", "offset": 281163672, "ascii": "Invalid mount handle or origin", "wide": null }, { "va": "0x190c243a6", "offset": 281163686, "ascii": "handle or origin", "wide": null }, { "va": "0x190c24560", "offset": 281164128, "ascii": "FuseRead", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 11774 }, { "label": "b-fs-read-worker", "file": "rea-b-fs-read-worker.json", "file_sha256": "0e44264c5ceb15e34ea307f840aad56fea81c71bcc1922db9717cd5a741d181e", "status": "completed", "evidence_id": "ev_230d4d9f3fa0bcda4571f20a4660a9a5a4527ea2e643264b31a2f37745f1e93e", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183823ad0;pdgo @ 0x183823ad0;afij @ 0x183823ad0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183823ad0", "size": 1599, "nargs": 5, "signature": "fcn.183823ad0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h);", "callrefs": [ { "from": 6501317359, "to": 6740380256, "type": "CALL" }, { "from": 6501317394, "to": 6501317405, "type": "CODE" }, { "from": 6501317417, "to": 6501317400, "type": "CODE" }, { "from": 6501317458, "to": 6501318408, "type": "CODE" }, { "from": 6501317503, "to": 6445650832, "type": "CALL" }, { "from": 6501317529, "to": 6524031184, "type": "CALL" }, { "from": 6501317550, "to": 6524031184, "type": "CALL" }, { "from": 6501317561, "to": 6462379168, "type": "CALL" }, { "from": 6501317582, "to": 6524031184, "type": "CALL" }, { "from": 6501317593, "to": 6524048128, "type": "CALL" }, { "from": 6501317614, "to": 6524031184, "type": "CALL" }, { "from": 6501317625, "to": 6530586256, "type": "CALL" }, { "from": 6501317644, "to": 6445656528, "type": "CALL" }, { "from": 6501317712, "to": 6511512544, "type": "CALL" }, { "from": 6501317763, "to": 6511975280, "type": "CALL" }, { "from": 6501317771, "to": 6518967168, "type": "CALL" }, { "from": 6501317800, "to": 6740379744, "type": "CALL" }, { "from": 6501317886, "to": 6445650832, "type": "CALL" }, { "from": 6501317912, "to": 6524031184, "type": "CALL" }, { "from": 6501317933, "to": 6524031184, "type": "CALL" }, { "from": 6501317944, "to": 6462379168, "type": "CALL" }, { "from": 6501317965, "to": 6524031184, "type": "CALL" }, { "from": 6501317976, "to": 6530586256, "type": "CALL" }, { "from": 6501317997, "to": 6524031184, "type": "CALL" }, { "from": 6501318007, "to": 6530586256, "type": "CALL" }, { "from": 6501318028, "to": 6445656528, "type": "CALL" }, { "from": 6501318096, "to": 6511512544, "type": "CALL" }, { "from": 6501318147, "to": 6511975280, "type": "CALL" }, { "from": 6501318155, "to": 6518967168, "type": "CALL" }, { "from": 6501318166, "to": 6542067384, "type": "CALL" }, { "from": 6501318194, "to": 6542434496, "type": "CALL" }, { "from": 6501318215, "to": 6453223840, "type": "CALL" }, { "from": 6501318279, "to": 6542067384, "type": "CALL" }, { "from": 6501318319, "to": 6542434496, "type": "CALL" }, { "from": 6501318333, "to": 6542436672, "type": "CALL" }, { "from": 6501318349, "to": 6511512544, "type": "CALL" }, { "from": 6501318378, "to": 6501317797, "type": "CODE" }, { "from": 6501318393, "to": 6512700960, "type": "CALL" }, { "from": 6501318398, "to": 6501317373, "type": "CODE" }, { "from": 6501318406, "to": 6501318360, "type": "CODE" }, { "from": 6501318411, "to": 6501318199, "type": "CODE" }, { "from": 6501318441, "to": 6740346544, "type": "CALL" }, { "from": 6501318447, "to": 6501317752, "type": "CODE" }, { "from": 6501318489, "to": 6445650832, "type": "CALL" }, { "from": 6501318515, "to": 6524031184, "type": "CALL" }, { "from": 6501318536, "to": 6524031184, "type": "CALL" }, { "from": 6501318547, "to": 6462379168, "type": "CALL" }, { "from": 6501318568, "to": 6524031184, "type": "CALL" }, { "from": 6501318579, "to": 6524048128, "type": "CALL" }, { "from": 6501318600, "to": 6524031184, "type": "CALL" }, { "from": 6501318610, "to": 6530586256, "type": "CALL" }, { "from": 6501318631, "to": 6524031184, "type": "CALL" }, { "from": 6501318644, "to": 6446762512, "type": "CALL" }, { "from": 6501318665, "to": 6445656528, "type": "CALL" }, { "from": 6501318734, "to": 6511512544, "type": "CALL" }, { "from": 6501318781, "to": 6511975280, "type": "CALL" }, { "from": 6501318789, "to": 6518967168, "type": "CALL" }, { "from": 6501318845, "to": 6511512544, "type": "CALL" }, { "from": 6501318850, "to": 6501317797, "type": "CODE" }, { "from": 6501318880, "to": 6740346544, "type": "CALL" }, { "from": 6501318886, "to": 6501318136, "type": "CODE" }, { "from": 6501318916, "to": 6740346544, "type": "CALL" }, { "from": 6501318922, "to": 6501318770, "type": "CODE" } ], "datarefs": [ { "from": 6501317463, "to": 6742246848, "type": "DATA" }, { "from": 6501317476, "to": 6723615496, "type": "DATA" }, { "from": 6501317513, "to": 6720303740, "type": "DATA" }, { "from": 6501317534, "to": 6723619848, "type": "DATA" }, { "from": 6501317566, "to": 6712262456, "type": "DATA" }, { "from": 6501317598, "to": 6713565508, "type": "DATA" }, { "from": 6501317630, "to": 6710367816, "type": "DATA" }, { "from": 6501317656, "to": 6708900496, "type": "DATA" }, { "from": 6501317668, "to": 6708923712, "type": "DATA" }, { "from": 6501317722, "to": 6708923824, "type": "DATA" }, { "from": 6501317736, "to": 6742217808, "type": "DATA" }, { "from": 6501317829, "to": 6742246848, "type": "DATA" }, { "from": 6501317842, "to": 6741126112, "type": "DATA" }, { "from": 6501317851, "to": 6742246856, "type": "DATA" }, { "from": 6501317865, "to": 6723615496, "type": "DATA" }, { "from": 6501317896, "to": 6720303740, "type": "DATA" }, { "from": 6501317917, "to": 6723619888, "type": "DATA" }, { "from": 6501317949, "to": 6723619928, "type": "DATA" }, { "from": 6501317981, "to": 6723619944, "type": "DATA" }, { "from": 6501318012, "to": 6710367816, "type": "DATA" }, { "from": 6501318040, "to": 6708900496, "type": "DATA" }, { "from": 6501318052, "to": 6708923712, "type": "DATA" }, { "from": 6501318106, "to": 6708923824, "type": "DATA" }, { "from": 6501318120, "to": 6742217808, "type": "DATA" }, { "from": 6501318383, "to": 6724150288, "type": "DATA" }, { "from": 6501318452, "to": 6742246848, "type": "DATA" }, { "from": 6501318465, "to": 6723615496, "type": "DATA" }, { "from": 6501318499, "to": 6720303740, "type": "DATA" }, { "from": 6501318520, "to": 6723619960, "type": "DATA" }, { "from": 6501318552, "to": 6712262456, "type": "DATA" }, { "from": 6501318584, "to": 6713565508, "type": "DATA" }, { "from": 6501318615, "to": 6723615680, "type": "DATA" }, { "from": 6501318649, "to": 6710367816, "type": "DATA" }, { "from": 6501318678, "to": 6708900496, "type": "DATA" }, { "from": 6501318690, "to": 6708923712, "type": "DATA" }, { "from": 6501318744, "to": 6708923824, "type": "DATA" }, { "from": 6501318758, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190c23b08", "offset": 281161480, "ascii": "..\\..\\tab\\browser\\local_fs\\tab_local_fs_service.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c24c08", "offset": 281165832, "ascii": "[TabLocalFS] Read failed: bad fh=", "wide": null }, { "va": "0x19014ff38", "offset": 269808440, "ascii": " offset=", "wide": null }, { "va": "0x19028e144", "offset": 271111492, "ascii": " size=", "wide": null }, { "va": "0x190c24c30", "offset": 281165872, "ascii": "[TabLocalFS] Read size clamped: fh=", "wide": null }, { "va": "0x190c24c58", "offset": 281165912, "ascii": " requested=", "wide": null }, { "va": "0x190c24c68", "offset": 281165928, "ascii": " clamped=", "wide": null }, { "va": "0x190c24c78", "offset": 281165944, "ascii": "[TabLocalFS] Read failed: fh=", "wide": null }, { "va": "0x190c23bc0", "offset": 281161664, "ascii": " errno=", "wide": null } ], "imports": [ { "at": "0x183823aef", "target": "0x191c20a60", "api": { "va": 6740380256, "lib": "KERNEL32.dll", "sym": "TryAcquireSRWLockExclusive" } }, { "at": "0x183823ca8", "target": "0x191c20860", "api": { "va": 6740379744, "lib": "KERNEL32.dll", "sym": "ReleaseSRWLockExclusive" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 14657 }, { "label": "b-fs-read", "file": "rea-b-fs-read.json", "file_sha256": "ea01ccd78edf292ec2749e41ef9f34b9f06757cf233220e006b68585658f0d08", "status": "completed", "evidence_id": "ev_56a6cee4fa66403f78732fca7f37e9bd42ceb6bbb4a09967ecf328dbe1188699", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18381ed30;pdgo @ 0x18381ed30;afij @ 0x18381ed30", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18381ed30", "size": 2916, "nargs": 3, "signature": "fcn.18381ed30(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6501297559, "to": 6542434272, "type": "CALL" }, { "from": 6501297571, "to": 6501297669, "type": "CODE" }, { "from": 6501297604, "to": 6501297569, "type": "CODE" }, { "from": 6501297651, "to": 6454999952, "type": "CALL" }, { "from": 6501297656, "to": 6501298217, "type": "CODE" }, { "from": 6501297683, "to": 6501297661, "type": "CODE" }, { "from": 6501297817, "to": 6501298492, "type": "CODE" }, { "from": 6501297833, "to": 6511513840, "type": "CALL" }, { "from": 6501297838, "to": 6501297770, "type": "CODE" }, { "from": 6501297856, "to": 6501298217, "type": "CODE" }, { "from": 6501297901, "to": 6445650832, "type": "CALL" }, { "from": 6501297927, "to": 6524031184, "type": "CALL" }, { "from": 6501297948, "to": 6524031184, "type": "CALL" }, { "from": 6501297969, "to": 6524031184, "type": "CALL" }, { "from": 6501297988, "to": 6501293936, "type": "CALL" }, { "from": 6501298019, "to": 6524031184, "type": "CALL" }, { "from": 6501298051, "to": 6511512544, "type": "CALL" }, { "from": 6501298077, "to": 6445656528, "type": "CALL" }, { "from": 6501298148, "to": 6511512544, "type": "CALL" }, { "from": 6501298202, "to": 6511975280, "type": "CALL" }, { "from": 6501298210, "to": 6518967168, "type": "CALL" }, { "from": 6501298282, "to": 6454999952, "type": "CALL" }, { "from": 6501298314, "to": 6511512544, "type": "CALL" }, { "from": 6501298319, "to": 6501298217, "type": "CODE" }, { "from": 6501298336, "to": 6501298287, "type": "CODE" }, { "from": 6501298393, "to": 6542436672, "type": "CALL" }, { "from": 6501298429, "to": 6511512544, "type": "CALL" }, { "from": 6501298579, "to": 6542067384, "type": "CALL" }, { "from": 6501298624, "to": 6501298354, "type": "CODE" }, { "from": 6501298637, "to": 6501298646, "type": "CODE" }, { "from": 6501298652, "to": 6455000096, "type": "CALL" }, { "from": 6501298657, "to": 6501298217, "type": "CODE" }, { "from": 6501298701, "to": 6542434272, "type": "CALL" }, { "from": 6501298768, "to": 6445650832, "type": "CALL" }, { "from": 6501298794, "to": 6524031184, "type": "CALL" }, { "from": 6501298815, "to": 6524031184, "type": "CALL" }, { "from": 6501298836, "to": 6524031184, "type": "CALL" }, { "from": 6501298857, "to": 6501293936, "type": "CALL" }, { "from": 6501298888, "to": 6524031184, "type": "CALL" }, { "from": 6501298923, "to": 6511512544, "type": "CALL" }, { "from": 6501298949, "to": 6445656528, "type": "CALL" }, { "from": 6501299020, "to": 6511512544, "type": "CALL" }, { "from": 6501299074, "to": 6511975280, "type": "CALL" }, { "from": 6501299082, "to": 6518967168, "type": "CALL" }, { "from": 6501299089, "to": 6501298287, "type": "CODE" }, { "from": 6501299137, "to": 6513233600, "type": "CALL" }, { "from": 6501299197, "to": 6536562960, "type": "CALL" }, { "from": 6501299231, "to": 6511512544, "type": "CALL" }, { "from": 6501299263, "to": 6459494464, "type": "CALL" }, { "from": 6501299280, "to": 6529181184, "type": "CALL" }, { "from": 6501299338, "to": 6454999952, "type": "CALL" }, { "from": 6501299367, "to": 6511512544, "type": "CALL" }, { "from": 6501299372, "to": 6501298287, "type": "CODE" }, { "from": 6501299439, "to": 6445650832, "type": "CALL" }, { "from": 6501299465, "to": 6524031184, "type": "CALL" }, { "from": 6501299486, "to": 6524031184, "type": "CALL" }, { "from": 6501299507, "to": 6524031184, "type": "CALL" }, { "from": 6501299528, "to": 6501293936, "type": "CALL" }, { "from": 6501299559, "to": 6524031184, "type": "CALL" }, { "from": 6501299594, "to": 6511512544, "type": "CALL" }, { "from": 6501299620, "to": 6445656528, "type": "CALL" }, { "from": 6501299688, "to": 6501298148, "type": "CODE" }, { "from": 6501299710, "to": 6501299343, "type": "CODE" }, { "from": 6501299723, "to": 6501299732, "type": "CODE" }, { "from": 6501299735, "to": 6455000096, "type": "CALL" }, { "from": 6501299740, "to": 6501298287, "type": "CODE" }, { "from": 6501299785, "to": 6445650832, "type": "CALL" }, { "from": 6501299811, "to": 6524031184, "type": "CALL" }, { "from": 6501299829, "to": 6501298812, "type": "CODE" }, { "from": 6501299874, "to": 6445650832, "type": "CALL" }, { "from": 6501299900, "to": 6524031184, "type": "CALL" }, { "from": 6501299921, "to": 6524031184, "type": "CALL" }, { "from": 6501299942, "to": 6524031184, "type": "CALL" }, { "from": 6501299958, "to": 6501293936, "type": "CALL" }, { "from": 6501299993, "to": 6524031184, "type": "CALL" }, { "from": 6501300034, "to": 6511512544, "type": "CALL" }, { "from": 6501300060, "to": 6445656528, "type": "CALL" }, { "from": 6501300131, "to": 6511512544, "type": "CALL" }, { "from": 6501300185, "to": 6511975280, "type": "CALL" }, { "from": 6501300193, "to": 6518967168, "type": "CALL" }, { "from": 6501300200, "to": 6501299343, "type": "CODE" }, { "from": 6501300226, "to": 6455000096, "type": "CALL" }, { "from": 6501300231, "to": 6501299343, "type": "CODE" }, { "from": 6501300238, "to": 6542702416, "type": "CALL" }, { "from": 6501300268, "to": 6740346544, "type": "CALL" }, { "from": 6501300274, "to": 6501298191, "type": "CODE" }, { "from": 6501300304, "to": 6740346544, "type": "CALL" }, { "from": 6501300310, "to": 6501299063, "type": "CODE" }, { "from": 6501300326, "to": 6449318512, "type": "CALL" }, { "from": 6501300331, "to": 6501299268, "type": "CODE" }, { "from": 6501300361, "to": 6740346544, "type": "CALL" }, { "from": 6501300367, "to": 6501300174, "type": "CODE" } ], "datarefs": [ { "from": 6501297576, "to": 6712114924, "type": "DATA" }, { "from": 6501297861, "to": 6742246848, "type": "DATA" }, { "from": 6501297874, "to": 6723615496, "type": "DATA" }, { "from": 6501297914, "to": 6720303740, "type": "DATA" }, { "from": 6501297932, "to": 6723619024, "type": "DATA" }, { "from": 6501297953, "to": 6723615436, "type": "DATA" }, { "from": 6501298056, "to": 6710367816, "type": "DATA" }, { "from": 6501298090, "to": 6708900496, "type": "DATA" }, { "from": 6501298105, "to": 6708923712, "type": "DATA" }, { "from": 6501298161, "to": 6708923824, "type": "DATA" }, { "from": 6501298175, "to": 6742217808, "type": "DATA" }, { "from": 6501298728, "to": 6742246848, "type": "DATA" }, { "from": 6501298741, "to": 6723615496, "type": "DATA" }, { "from": 6501298781, "to": 6720303740, "type": "DATA" }, { "from": 6501298799, "to": 6723619080, "type": "DATA" }, { "from": 6501298820, "to": 6723615436, "type": "DATA" }, { "from": 6501298928, "to": 6710367816, "type": "DATA" }, { "from": 6501298962, "to": 6708900496, "type": "DATA" }, { "from": 6501298977, "to": 6708923712, "type": "DATA" }, { "from": 6501299033, "to": 6708923824, "type": "DATA" }, { "from": 6501299047, "to": 6742217808, "type": "DATA" }, { "from": 6501299236, "to": 6742246932, "type": "DATA" }, { "from": 6501299399, "to": 6742246848, "type": "DATA" }, { "from": 6501299412, "to": 6723615496, "type": "DATA" }, { "from": 6501299452, "to": 6720303740, "type": "DATA" }, { "from": 6501299470, "to": 6723618976, "type": "DATA" }, { "from": 6501299491, "to": 6723615436, "type": "DATA" }, { "from": 6501299599, "to": 6710367816, "type": "DATA" }, { "from": 6501299633, "to": 6708900496, "type": "DATA" }, { "from": 6501299648, "to": 6708923712, "type": "DATA" }, { "from": 6501299745, "to": 6742246848, "type": "DATA" }, { "from": 6501299758, "to": 6723615496, "type": "DATA" }, { "from": 6501299798, "to": 6720303740, "type": "DATA" }, { "from": 6501299816, "to": 6723619024, "type": "DATA" }, { "from": 6501299834, "to": 6742246848, "type": "DATA" }, { "from": 6501299847, "to": 6723615496, "type": "DATA" }, { "from": 6501299887, "to": 6720303740, "type": "DATA" }, { "from": 6501299905, "to": 6723619128, "type": "DATA" }, { "from": 6501299926, "to": 6723615436, "type": "DATA" }, { "from": 6501300039, "to": 6710367816, "type": "DATA" }, { "from": 6501300073, "to": 6708900496, "type": "DATA" }, { "from": 6501300088, "to": 6708923712, "type": "DATA" }, { "from": 6501300144, "to": 6708923824, "type": "DATA" }, { "from": 6501300158, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190c23b08", "offset": 281161480, "ascii": "..\\..\\tab\\browser\\local_fs\\tab_local_fs_service.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c248d0", "offset": 281165008, "ascii": "[TabLocalFS] ValidatePath rejected absolute path:", "wide": null }, { "va": "0x190c23acc", "offset": 281161420, "ascii": " path=", "wide": null }, { "va": "0x190c24908", "offset": 281165064, "ascii": "[TabLocalFS] ValidatePath rejected null byte:", "wide": null }, { "va": "0x190c248a0", "offset": 281164960, "ascii": "[TabLocalFS] ValidatePath rejected traversal:", "wide": null }, { "va": "0x190c24938", "offset": 281165112, "ascii": "[TabLocalFS] ValidatePath rejected escaped path:", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 31238 }, { "label": "b-fs-write-bridge", "file": "rea-b-fs-write-bridge.json", "file_sha256": "efda3fe898354db061548b026ae9c233051bd3ebdd0327a79cdb623f9dc91a43", "status": "completed", "evidence_id": "ev_2f059e2f36282a64b32a0832aec5c3e11499b7987fb3a0299913d77259dbde90", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183824110;pdgo @ 0x183824110;afij @ 0x183824110", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183824110", "size": 1397, "nargs": 7, "signature": "fcn.183824110(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h);", "callrefs": [ { "from": 6501319036, "to": 6445650832, "type": "CALL" }, { "from": 6501319059, "to": 6524031184, "type": "CALL" }, { "from": 6501319080, "to": 6524031184, "type": "CALL" }, { "from": 6501319099, "to": 6501223616, "type": "CALL" }, { "from": 6501319130, "to": 6524031184, "type": "CALL" }, { "from": 6501319151, "to": 6524031184, "type": "CALL" }, { "from": 6501319179, "to": 6524031184, "type": "CALL" }, { "from": 6501319200, "to": 6524031184, "type": "CALL" }, { "from": 6501319211, "to": 6462379168, "type": "CALL" }, { "from": 6501319232, "to": 6524031184, "type": "CALL" }, { "from": 6501319243, "to": 6524048128, "type": "CALL" }, { "from": 6501319264, "to": 6524031184, "type": "CALL" }, { "from": 6501319275, "to": 6462379168, "type": "CALL" }, { "from": 6501319310, "to": 6511512544, "type": "CALL" }, { "from": 6501319334, "to": 6445656528, "type": "CALL" }, { "from": 6501319396, "to": 6511512544, "type": "CALL" }, { "from": 6501319449, "to": 6511975280, "type": "CALL" }, { "from": 6501319457, "to": 6518967168, "type": "CALL" }, { "from": 6501319499, "to": 6501294352, "type": "CALL" }, { "from": 6501319517, "to": 6542067384, "type": "CALL" }, { "from": 6501319664, "to": 6740346544, "type": "CALL" }, { "from": 6501319682, "to": 6740346544, "type": "CALL" }, { "from": 6501319719, "to": 6511512544, "type": "CALL" }, { "from": 6501319724, "to": 6501320174, "type": "CODE" }, { "from": 6501319741, "to": 6542067384, "type": "CALL" }, { "from": 6501319832, "to": 6511423872, "type": "CALL" }, { "from": 6501319842, "to": 6542067384, "type": "CALL" }, { "from": 6501319971, "to": 6512942288, "type": "CALL" }, { "from": 6501319981, "to": 6542067384, "type": "CALL" }, { "from": 6501319997, "to": 6542067384, "type": "CALL" }, { "from": 6501320060, "to": 6542067384, "type": "CALL" }, { "from": 6501320127, "to": 6511423872, "type": "CALL" }, { "from": 6501320161, "to": 6463429312, "type": "CALL" }, { "from": 6501320194, "to": 6511512544, "type": "CALL" }, { "from": 6501320259, "to": 6740346544, "type": "CALL" }, { "from": 6501320265, "to": 6501320216, "type": "CODE" }, { "from": 6501320279, "to": 6511512544, "type": "CALL" }, { "from": 6501320284, "to": 6501320207, "type": "CODE" }, { "from": 6501320314, "to": 6740346544, "type": "CALL" }, { "from": 6501320320, "to": 6501319438, "type": "CODE" } ], "datarefs": [ { "from": 6501318967, "to": 6742246848, "type": "DATA" }, { "from": 6501318980, "to": 6741126112, "type": "DATA" }, { "from": 6501318989, "to": 6742246856, "type": "DATA" }, { "from": 6501319015, "to": 6723615496, "type": "DATA" }, { "from": 6501319046, "to": 6720303740, "type": "DATA" }, { "from": 6501319064, "to": 6723618160, "type": "DATA" }, { "from": 6501319135, "to": 6723615368, "type": "DATA" }, { "from": 6501319184, "to": 6723618128, "type": "DATA" }, { "from": 6501319216, "to": 6712262456, "type": "DATA" }, { "from": 6501319248, "to": 6713565508, "type": "DATA" }, { "from": 6501319315, "to": 6710367816, "type": "DATA" }, { "from": 6501319347, "to": 6708900496, "type": "DATA" }, { "from": 6501319359, "to": 6708923712, "type": "DATA" }, { "from": 6501319406, "to": 6708923824, "type": "DATA" }, { "from": 6501319422, "to": 6742217808, "type": "DATA" }, { "from": 6501319564, "to": 6723617688, "type": "DATA" }, { "from": 6501319601, "to": 6723617702, "type": "DATA" }, { "from": 6501319612, "to": 6723617688, "type": "DATA" }, { "from": 6501319755, "to": 6501345760, "type": "DATA" }, { "from": 6501319766, "to": 6495420080, "type": "DATA" }, { "from": 6501319777, "to": 6511490512, "type": "DATA" }, { "from": 6501319820, "to": 6741126408, "type": "DATA" }, { "from": 6501319859, "to": 6501346208, "type": "DATA" }, { "from": 6501319870, "to": 6501346336, "type": "DATA" }, { "from": 6501319885, "to": 6501320336, "type": "DATA" }, { "from": 6501319946, "to": 6723618208, "type": "DATA" }, { "from": 6501319953, "to": 6723615496, "type": "DATA" }, { "from": 6501320005, "to": 6462662976, "type": "DATA" }, { "from": 6501320016, "to": 6501354880, "type": "DATA" }, { "from": 6501320031, "to": 6462666160, "type": "DATA" }, { "from": 6501320071, "to": 6443185472, "type": "DATA" }, { "from": 6501320082, "to": 6496379968, "type": "DATA" }, { "from": 6501320097, "to": 6501354720, "type": "DATA" }, { "from": 6501320115, "to": 6741126408, "type": "DATA" }, { "from": 6501320144, "to": 6723618198, "type": "DATA" } ] }, "strings": [ { "va": "0x190c23b08", "offset": 281161480, "ascii": "..\\..\\tab\\browser\\local_fs\\tab_local_fs_service.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c24570", "offset": 281164144, "ascii": "[TabLocalFS] Write requested: handle=", "wide": null }, { "va": "0x190c23a88", "offset": 281161352, "ascii": " origin=", "wide": null }, { "va": "0x190c24550", "offset": 281164112, "ascii": " fh=", "wide": null }, { "va": "0x19014ff38", "offset": 269808440, "ascii": " offset=", "wide": null }, { "va": "0x19028e144", "offset": 271111492, "ascii": " size=", "wide": null }, { "va": "0x190c24398", "offset": 281163672, "ascii": "Invalid mount handle or origin", "wide": null }, { "va": "0x190c243a6", "offset": 281163686, "ascii": "handle or origin", "wide": null }, { "va": "0x190c245a0", "offset": 281164192, "ascii": "FuseWrite", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 12432 }, { "label": "b-fs-write-worker", "file": "rea-b-fs-write-worker.json", "file_sha256": "012a23ac05fa457a1301d1127eb1c954d4dca4342e0eeffea010a8b6e262ab8f", "status": "completed", "evidence_id": "ev_fd7440eef50fadbd7de18cd706f3cdda8335d1d1ab01721909549d2e78244d5e", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183824690;pdgo @ 0x183824690;afij @ 0x183824690", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183824690", "size": 945, "nargs": 5, "signature": "fcn.183824690(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h);", "callrefs": [ { "from": 6501320367, "to": 6740380256, "type": "CALL" }, { "from": 6501320402, "to": 6501320412, "type": "CODE" }, { "from": 6501320424, "to": 6501320407, "type": "CODE" }, { "from": 6501320458, "to": 6537193504, "type": "CALL" }, { "from": 6501320473, "to": 6501320799, "type": "CODE" }, { "from": 6501320523, "to": 6445650832, "type": "CALL" }, { "from": 6501320549, "to": 6524031184, "type": "CALL" }, { "from": 6501320570, "to": 6524031184, "type": "CALL" }, { "from": 6501320581, "to": 6462379168, "type": "CALL" }, { "from": 6501320602, "to": 6524031184, "type": "CALL" }, { "from": 6501320613, "to": 6524048128, "type": "CALL" }, { "from": 6501320634, "to": 6524031184, "type": "CALL" }, { "from": 6501320646, "to": 6462379168, "type": "CALL" }, { "from": 6501320666, "to": 6445656528, "type": "CALL" }, { "from": 6501320737, "to": 6511512544, "type": "CALL" }, { "from": 6501320784, "to": 6511975280, "type": "CALL" }, { "from": 6501320792, "to": 6518967168, "type": "CALL" }, { "from": 6501320807, "to": 6740379744, "type": "CALL" }, { "from": 6501320846, "to": 6512700960, "type": "CALL" }, { "from": 6501320851, "to": 6501320381, "type": "CODE" }, { "from": 6501320877, "to": 6740346544, "type": "CALL" }, { "from": 6501320883, "to": 6501320773, "type": "CODE" }, { "from": 6501320934, "to": 6445650832, "type": "CALL" }, { "from": 6501320960, "to": 6524031184, "type": "CALL" }, { "from": 6501320981, "to": 6524031184, "type": "CALL" }, { "from": 6501320992, "to": 6462379168, "type": "CALL" }, { "from": 6501321013, "to": 6524031184, "type": "CALL" }, { "from": 6501321024, "to": 6524048128, "type": "CALL" }, { "from": 6501321045, "to": 6524031184, "type": "CALL" }, { "from": 6501321057, "to": 6462379168, "type": "CALL" }, { "from": 6501321078, "to": 6524031184, "type": "CALL" }, { "from": 6501321091, "to": 6446762512, "type": "CALL" }, { "from": 6501321111, "to": 6445656528, "type": "CALL" }, { "from": 6501321182, "to": 6511512544, "type": "CALL" }, { "from": 6501321229, "to": 6511975280, "type": "CALL" }, { "from": 6501321237, "to": 6518967168, "type": "CALL" }, { "from": 6501321247, "to": 6501320797, "type": "CODE" }, { "from": 6501321273, "to": 6740346544, "type": "CALL" }, { "from": 6501321279, "to": 6501321218, "type": "CODE" } ], "datarefs": [ { "from": 6501320483, "to": 6742246848, "type": "DATA" }, { "from": 6501320496, "to": 6723615496, "type": "DATA" }, { "from": 6501320533, "to": 6720303740, "type": "DATA" }, { "from": 6501320554, "to": 6723620016, "type": "DATA" }, { "from": 6501320586, "to": 6712262456, "type": "DATA" }, { "from": 6501320618, "to": 6713565508, "type": "DATA" }, { "from": 6501320651, "to": 6710367816, "type": "DATA" }, { "from": 6501320679, "to": 6708900496, "type": "DATA" }, { "from": 6501320691, "to": 6708923712, "type": "DATA" }, { "from": 6501320747, "to": 6708923824, "type": "DATA" }, { "from": 6501320761, "to": 6742217808, "type": "DATA" }, { "from": 6501320836, "to": 6724150288, "type": "DATA" }, { "from": 6501320894, "to": 6742246848, "type": "DATA" }, { "from": 6501320907, "to": 6723615496, "type": "DATA" }, { "from": 6501320944, "to": 6720303740, "type": "DATA" }, { "from": 6501320965, "to": 6723620056, "type": "DATA" }, { "from": 6501320997, "to": 6712262456, "type": "DATA" }, { "from": 6501321029, "to": 6713565508, "type": "DATA" }, { "from": 6501321062, "to": 6723615680, "type": "DATA" }, { "from": 6501321096, "to": 6710367816, "type": "DATA" }, { "from": 6501321124, "to": 6708900496, "type": "DATA" }, { "from": 6501321136, "to": 6708923712, "type": "DATA" }, { "from": 6501321192, "to": 6708923824, "type": "DATA" }, { "from": 6501321206, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190c23b08", "offset": 281161480, "ascii": "..\\..\\tab\\browser\\local_fs\\tab_local_fs_service.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c24cb0", "offset": 281166000, "ascii": "[TabLocalFS] Write failed: bad fh=", "wide": null }, { "va": "0x19014ff38", "offset": 269808440, "ascii": " offset=", "wide": null }, { "va": "0x19028e144", "offset": 271111492, "ascii": " size=", "wide": null }, { "va": "0x190c24cd8", "offset": 281166040, "ascii": "[TabLocalFS] Write failed: fh=", "wide": null }, { "va": "0x190c23bc0", "offset": 281161664, "ascii": " errno=", "wide": null } ], "imports": [ { "at": "0x1838246af", "target": "0x191c20a60", "api": { "va": 6740380256, "lib": "KERNEL32.dll", "sym": "TryAcquireSRWLockExclusive" } }, { "at": "0x183824867", "target": "0x191c20860", "api": { "va": 6740379744, "lib": "KERNEL32.dll", "sym": "ReleaseSRWLockExclusive" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 7761 }, { "label": "b-fs-write", "file": "rea-b-fs-write.json", "file_sha256": "ddfc1badec4c64dbbf08572ab58fa276815df63b81a0c57c8be84bb18361b392", "status": "completed", "evidence_id": "ev_ce332c4225abd15ca106920ebc125d6d6d72c57a3bac8791c25dc853db62bd38", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1838203b0;pdgo @ 0x1838203b0;afij @ 0x1838203b0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1838203b0", "size": 952, "nargs": 5, "signature": "fcn.1838203b0(int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_78h);", "callrefs": [ { "from": 6501303299, "to": 6501294352, "type": "CALL" }, { "from": 6501303327, "to": 6542067384, "type": "CALL" }, { "from": 6501303455, "to": 6740346544, "type": "CALL" }, { "from": 6501303473, "to": 6740346544, "type": "CALL" }, { "from": 6501303503, "to": 6501304013, "type": "CODE" }, { "from": 6501303533, "to": 6501297456, "type": "CALL" }, { "from": 6501303648, "to": 6740346544, "type": "CALL" }, { "from": 6501303666, "to": 6740346544, "type": "CALL" }, { "from": 6501303703, "to": 6511512544, "type": "CALL" }, { "from": 6501303708, "to": 6501303993, "type": "CODE" }, { "from": 6501303730, "to": 6501303889, "type": "CODE" }, { "from": 6501303740, "to": 6542067384, "type": "CALL" }, { "from": 6501303809, "to": 6542067384, "type": "CALL" }, { "from": 6501303884, "to": 6522337344, "type": "CALL" }, { "from": 6501303924, "to": 6522337344, "type": "CALL" }, { "from": 6501303965, "to": 6512942288, "type": "CALL" }, { "from": 6501303988, "to": 6496868480, "type": "CALL" }, { "from": 6501304013, "to": 6511512544, "type": "CALL" }, { "from": 6501304044, "to": 6511512544, "type": "CALL" }, { "from": 6501304113, "to": 6740346544, "type": "CALL" }, { "from": 6501304119, "to": 6501304057, "type": "CODE" }, { "from": 6501304141, "to": 6501303929, "type": "CODE" }, { "from": 6501304157, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6501303261, "to": 6740709440, "type": "DATA" }, { "from": 6501303368, "to": 6723617688, "type": "DATA" }, { "from": 6501303397, "to": 6723617702, "type": "DATA" }, { "from": 6501303408, "to": 6723617688, "type": "DATA" }, { "from": 6501303555, "to": 6723617720, "type": "DATA" }, { "from": 6501303752, "to": 6501342368, "type": "DATA" }, { "from": 6501303763, "to": 6495420080, "type": "DATA" }, { "from": 6501303774, "to": 6511490512, "type": "DATA" }, { "from": 6501303822, "to": 6501342560, "type": "DATA" }, { "from": 6501303833, "to": 6501341936, "type": "DATA" }, { "from": 6501303848, "to": 6501262512, "type": "DATA" }, { "from": 6501303937, "to": 6723617872, "type": "DATA" }, { "from": 6501303944, "to": 6723615496, "type": "DATA" }, { "from": 6501303970, "to": 6723617863, "type": "DATA" }, { "from": 6501304068, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190c24398", "offset": 281163672, "ascii": "Invalid mount handle or origin", "wide": null }, { "va": "0x190c243a6", "offset": 281163686, "ascii": "handle or origin", "wide": null }, { "va": "0x190c243b8", "offset": 281163704, "ascii": "Invalid path", "wide": null }, { "va": "0x190c24450", "offset": 281163856, "ascii": "FuseMkdir", "wide": null }, { "va": "0x190c23b08", "offset": 281161480, "ascii": "..\\..\\tab\\browser\\local_fs\\tab_local_fs_service.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 9478 }, { "label": "p-agent-event-router", "file": "rea-p-agent-event-router.json", "file_sha256": "3afa015fde0fa950b0b6541e99cadf62f86af197c4e40670441e95e88d5767f7", "status": "completed", "evidence_id": "ev_5df776344ec7f562550954594259516d371a192ab2b2a8da56d830eea604daff", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1834069a0;pdgo @ 0x1834069a0;afij @ 0x1834069a0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834069a0", "size": 2227, "nargs": 4, "signature": "fcn.1834069a0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6497004186, "to": 6511423872, "type": "CALL" }, { "from": 6497004207, "to": 6442840976, "type": "CALL" }, { "from": 6497004230, "to": 6497006176, "type": "CALL" }, { "from": 6497004282, "to": 6497004452, "type": "CODE" }, { "from": 6497004337, "to": 6497010160, "type": "CALL" }, { "from": 6497004351, "to": 6497004091, "type": "CODE" }, { "from": 6497004356, "to": 6740346544, "type": "CALL" }, { "from": 6497004365, "to": 6497004158, "type": "CODE" }, { "from": 6497004426, "to": 6497004875, "type": "CODE" }, { "from": 6497004468, "to": 6497004431, "type": "CODE" }, { "from": 6497004514, "to": 6740346544, "type": "CALL" }, { "from": 6497004559, "to": 6511645120, "type": "CALL" }, { "from": 6497004585, "to": 6497005001, "type": "CODE" }, { "from": 6497004605, "to": 6511681872, "type": "CALL" }, { "from": 6497004610, "to": 6497004763, "type": "CODE" }, { "from": 6497004723, "to": 6740346544, "type": "CALL" }, { "from": 6497004774, "to": 6740346544, "type": "CALL" }, { "from": 6497004794, "to": 6511751392, "type": "CALL" }, { "from": 6497004816, "to": 6497007632, "type": "CALL" }, { "from": 6497004824, "to": 6511396000, "type": "CALL" }, { "from": 6497004849, "to": 6511512544, "type": "CALL" }, { "from": 6497004857, "to": 6511396000, "type": "CALL" }, { "from": 6497004889, "to": 6497006176, "type": "CALL" }, { "from": 6497004933, "to": 6497004960, "type": "CODE" }, { "from": 6497004976, "to": 6497004935, "type": "CODE" }, { "from": 6497004981, "to": 6497004158, "type": "CODE" }, { "from": 6497004989, "to": 6497005109, "type": "CODE" }, { "from": 6497004996, "to": 6497005230, "type": "CODE" }, { "from": 6497005102, "to": 6498681376, "type": "CALL" }, { "from": 6497005166, "to": 6445650832, "type": "CALL" }, { "from": 6497005189, "to": 6524031184, "type": "CALL" }, { "from": 6497005210, "to": 6524031184, "type": "CALL" }, { "from": 6497005243, "to": 6446762512, "type": "CALL" }, { "from": 6497005264, "to": 6524031184, "type": "CALL" }, { "from": 6497005278, "to": 6446762512, "type": "CALL" }, { "from": 6497005299, "to": 6524031184, "type": "CALL" }, { "from": 6497005310, "to": 6451143232, "type": "CALL" }, { "from": 6497005331, "to": 6524031184, "type": "CALL" }, { "from": 6497005341, "to": 6451143232, "type": "CALL" }, { "from": 6497005362, "to": 6524031184, "type": "CALL" }, { "from": 6497005373, "to": 6522230240, "type": "CALL" }, { "from": 6497005401, "to": 6524031184, "type": "CALL" }, { "from": 6497005422, "to": 6524031184, "type": "CALL" }, { "from": 6497005433, "to": 6498681376, "type": "CALL" }, { "from": 6497005443, "to": 6451143232, "type": "CALL" }, { "from": 6497005466, "to": 6445656528, "type": "CALL" }, { "from": 6497005534, "to": 6511512544, "type": "CALL" }, { "from": 6497005585, "to": 6511975280, "type": "CALL" }, { "from": 6497005593, "to": 6518967168, "type": "CALL" }, { "from": 6497005676, "to": 6740346544, "type": "CALL" }, { "from": 6497005695, "to": 6740346544, "type": "CALL" }, { "from": 6497005718, "to": 6497007632, "type": "CALL" }, { "from": 6497005726, "to": 6511396000, "type": "CALL" }, { "from": 6497005747, "to": 6497010688, "type": "CALL" }, { "from": 6497005752, "to": 6497004015, "type": "CODE" }, { "from": 6497005760, "to": 6614223408, "type": "CALL" }, { "from": 6497005789, "to": 6497010160, "type": "CALL" }, { "from": 6497005813, "to": 6497006176, "type": "CALL" }, { "from": 6497005861, "to": 6497005884, "type": "CODE" }, { "from": 6497005900, "to": 6497005863, "type": "CODE" }, { "from": 6497006023, "to": 6740346544, "type": "CALL" }, { "from": 6497006043, "to": 6740346544, "type": "CALL" }, { "from": 6497006066, "to": 6497007632, "type": "CALL" }, { "from": 6497006074, "to": 6511396000, "type": "CALL" }, { "from": 6497006079, "to": 6497004091, "type": "CODE" }, { "from": 6497006091, "to": 6543545728, "type": "CALL" }, { "from": 6497006110, "to": 6542753360, "type": "CALL" }, { "from": 6497006122, "to": 6542753360, "type": "CALL" }, { "from": 6497006152, "to": 6740346544, "type": "CALL" }, { "from": 6497006158, "to": 6497005574, "type": "CODE" } ], "datarefs": [ { "from": 6497004138, "to": 6523219744, "type": "DATA" }, { "from": 6497004174, "to": 6741126408, "type": "DATA" }, { "from": 6497004198, "to": 6741126408, "type": "DATA" }, { "from": 6497004414, "to": 6712085216, "type": "DATA" }, { "from": 6497004530, "to": 6712083436, "type": "DATA" }, { "from": 6497005109, "to": 6742246848, "type": "DATA" }, { "from": 6497005122, "to": 6741126112, "type": "DATA" }, { "from": 6497005131, "to": 6742246856, "type": "DATA" }, { "from": 6497005145, "to": 6720260608, "type": "DATA" }, { "from": 6497005176, "to": 6720260680, "type": "DATA" }, { "from": 6497005194, "to": 6720260728, "type": "DATA" }, { "from": 6497005248, "to": 6720260744, "type": "DATA" }, { "from": 6497005283, "to": 6720260760, "type": "DATA" }, { "from": 6497005315, "to": 6720260776, "type": "DATA" }, { "from": 6497005346, "to": 6720260796, "type": "DATA" }, { "from": 6497005406, "to": 6720260808, "type": "DATA" }, { "from": 6497005448, "to": 6710367816, "type": "DATA" }, { "from": 6497005479, "to": 6708900496, "type": "DATA" }, { "from": 6497005491, "to": 6708923712, "type": "DATA" }, { "from": 6497005544, "to": 6708923824, "type": "DATA" }, { "from": 6497005558, "to": 6742217808, "type": "DATA" }, { "from": 6497006084, "to": 6712088560, "type": "DATA" }, { "from": 6497006103, "to": 6712084152, "type": "DATA" }, { "from": 6497006115, "to": 6712084184, "type": "DATA" } ] }, "strings": [ { "va": "0x1901243ec", "offset": 269629420, "ascii": "chrome", "wide": null }, { "va": "0x1908f0a00", "offset": 277806592, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab\\tab_agent_event_router.cc", "wide": null }, { "va": "0x1908f0a48", "offset": 277806664, "ascii": "[TabAgentEventRouter] active_tab_changed", "wide": null }, { "va": "0x1908f0a78", "offset": 277806712, "ascii": " window_id=", "wide": null }, { "va": "0x1908f0a88", "offset": 277806728, "ascii": " reason=", "wide": null }, { "va": "0x1908f0a98", "offset": 277806744, "ascii": " user_gesture=", "wide": null }, { "va": "0x1908f0aa8", "offset": 277806760, "ascii": " is_tab_group_home=", "wide": null }, { "va": "0x1908f0abc", "offset": 277806780, "ascii": " url=", "wide": null }, { "va": "0x1908f0ac8", "offset": 277806792, "ascii": " is group home url ", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null }, { "va": "0x1901246b8", "offset": 269630136, "ascii": "std::get: variant is valueless", "wide": null }, { "va": "0x1901246d8", "offset": 269630168, "ascii": "std::get: wrong alternative for variant", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 25781 }, { "label": "p-automation-click-run", "file": "rea-p-automation-click-run.json", "file_sha256": "7e5c08e54a3433aaba9a8efcb71b08f458fa4dbf73c60faeaf7ad330e68839fc", "status": "completed", "evidence_id": "ev_4ff43a870219c2bbc53e802560d109fef6bebe94532da8870674e4df7e324a11", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836c85c0;pdgo @ 0x1836c85c0;afij @ 0x1836c85c0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836c85c0", "size": 4865, "nargs": 2, "signature": "fcn.1836c85c0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499894945, "to": 6499894959, "type": "CODE" }, { "from": 6499894949, "to": 6499894961, "type": "CODE" }, { "from": 6499894996, "to": 6499895013, "type": "CODE" }, { "from": 6499895005, "to": 6499895016, "type": "CODE" }, { "from": 6499895034, "to": 6499895064, "type": "CODE" }, { "from": 6499895040, "to": 6499895064, "type": "CODE" }, { "from": 6499895049, "to": 6499895064, "type": "CODE" }, { "from": 6499895286, "to": 6512834800, "type": "CALL" }, { "from": 6499895370, "to": 6512834800, "type": "CALL" }, { "from": 6499895435, "to": 6512834800, "type": "CALL" }, { "from": 6499895665, "to": 6499895675, "type": "CODE" }, { "from": 6499895806, "to": 6457891536, "type": "CALL" }, { "from": 6499895845, "to": 6457891296, "type": "CALL" }, { "from": 6499895879, "to": 6457891296, "type": "CALL" }, { "from": 6499895889, "to": 6542067384, "type": "CALL" }, { "from": 6499896073, "to": 6499931152, "type": "CALL" }, { "from": 6499896166, "to": 6511512544, "type": "CALL" }, { "from": 6499896216, "to": 6499897403, "type": "CODE" }, { "from": 6499896243, "to": 6524603600, "type": "CALL" }, { "from": 6499896281, "to": 6511512544, "type": "CALL" }, { "from": 6499896286, "to": 6499896127, "type": "CODE" }, { "from": 6499896313, "to": 6524603600, "type": "CALL" }, { "from": 6499896351, "to": 6511512544, "type": "CALL" }, { "from": 6499896371, "to": 6499896762, "type": "CODE" }, { "from": 6499896578, "to": 6499899600, "type": "CALL" }, { "from": 6499896801, "to": 6511512544, "type": "CALL" }, { "from": 6499896845, "to": 6512834800, "type": "CALL" }, { "from": 6499896910, "to": 6512834800, "type": "CALL" }, { "from": 6499897160, "to": 6499899600, "type": "CALL" }, { "from": 6499897387, "to": 6511512544, "type": "CALL" }, { "from": 6499897442, "to": 6512834800, "type": "CALL" }, { "from": 6499897507, "to": 6512834800, "type": "CALL" }, { "from": 6499897729, "to": 6499896542, "type": "CODE" }, { "from": 6499897756, "to": 6524603600, "type": "CALL" }, { "from": 6499897794, "to": 6511512544, "type": "CALL" }, { "from": 6499897809, "to": 6499897348, "type": "CODE" }, { "from": 6499897873, "to": 6740346544, "type": "CALL" }, { "from": 6499897887, "to": 6499897447, "type": "CODE" }, { "from": 6499897949, "to": 6740346544, "type": "CALL" }, { "from": 6499897963, "to": 6499897512, "type": "CODE" }, { "from": 6499898008, "to": 6499899600, "type": "CALL" }, { "from": 6499898123, "to": 6499883728, "type": "CALL" }, { "from": 6499898271, "to": 6542067384, "type": "CALL" }, { "from": 6499898399, "to": 6587959616, "type": "CALL" }, { "from": 6499898447, "to": 6587967968, "type": "CALL" }, { "from": 6499898461, "to": 6499898128, "type": "CODE" }, { "from": 6499898473, "to": 6542069736, "type": "CALL" }, { "from": 6499898494, "to": 6740379376, "type": "CALL" }, { "from": 6499898519, "to": 6740378584, "type": "CALL" }, { "from": 6499898548, "to": 6542069628, "type": "CALL" }, { "from": 6499898553, "to": 6499898588, "type": "CODE" }, { "from": 6499898608, "to": 6740346544, "type": "CALL" }, { "from": 6499898632, "to": 6542069736, "type": "CALL" }, { "from": 6499898653, "to": 6740379376, "type": "CALL" }, { "from": 6499898678, "to": 6740378584, "type": "CALL" }, { "from": 6499898707, "to": 6542069628, "type": "CALL" }, { "from": 6499898712, "to": 6499898747, "type": "CODE" }, { "from": 6499898767, "to": 6740346544, "type": "CALL" }, { "from": 6499898791, "to": 6542069736, "type": "CALL" }, { "from": 6499898816, "to": 6740379376, "type": "CALL" }, { "from": 6499898841, "to": 6740378584, "type": "CALL" }, { "from": 6499898870, "to": 6542069628, "type": "CALL" }, { "from": 6499898875, "to": 6499897853, "type": "CODE" }, { "from": 6499898887, "to": 6542069736, "type": "CALL" }, { "from": 6499898912, "to": 6740379376, "type": "CALL" }, { "from": 6499898937, "to": 6740378584, "type": "CALL" }, { "from": 6499898966, "to": 6542069628, "type": "CALL" }, { "from": 6499898971, "to": 6499897929, "type": "CODE" }, { "from": 6499898992, "to": 6499931152, "type": "CALL" }, { "from": 6499899000, "to": 6499896707, "type": "CODE" }, { "from": 6499899021, "to": 6499931152, "type": "CALL" }, { "from": 6499899034, "to": 6499897296, "type": "CODE" }, { "from": 6499899092, "to": 6740346544, "type": "CALL" }, { "from": 6499899106, "to": 6499899560, "type": "CODE" }, { "from": 6499899118, "to": 6542069736, "type": "CALL" }, { "from": 6499899139, "to": 6740379376, "type": "CALL" }, { "from": 6499899164, "to": 6740378584, "type": "CALL" }, { "from": 6499899193, "to": 6542069628, "type": "CALL" }, { "from": 6499899198, "to": 6499899072, "type": "CODE" }, { "from": 6499899253, "to": 6740346544, "type": "CALL" }, { "from": 6499899267, "to": 6499899563, "type": "CODE" }, { "from": 6499899279, "to": 6542069736, "type": "CALL" }, { "from": 6499899300, "to": 6740379376, "type": "CALL" }, { "from": 6499899325, "to": 6740378584, "type": "CALL" }, { "from": 6499899354, "to": 6542069628, "type": "CALL" }, { "from": 6499899359, "to": 6499899233, "type": "CODE" }, { "from": 6499899414, "to": 6740346544, "type": "CALL" }, { "from": 6499899428, "to": 6499899566, "type": "CODE" }, { "from": 6499899440, "to": 6542069736, "type": "CALL" }, { "from": 6499899461, "to": 6740379376, "type": "CALL" }, { "from": 6499899482, "to": 6740378584, "type": "CALL" }, { "from": 6499899507, "to": 6542069628, "type": "CALL" }, { "from": 6499899512, "to": 6499899394, "type": "CODE" }, { "from": 6499899525, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499894836, "to": 6740709440, "type": "DATA" }, { "from": 6499895137, "to": 6712103632, "type": "DATA" }, { "from": 6499895217, "to": 6712103632, "type": "DATA" }, { "from": 6499895259, "to": 6742234780, "type": "DATA" }, { "from": 6499895343, "to": 6742234780, "type": "DATA" }, { "from": 6499895408, "to": 6742234780, "type": "DATA" }, { "from": 6499895510, "to": 6706277488, "type": "DATA" }, { "from": 6499895522, "to": 6706266416, "type": "DATA" }, { "from": 6499895667, "to": 6723548776, "type": "DATA" }, { "from": 6499895677, "to": 6712113256, "type": "DATA" }, { "from": 6499895770, "to": 6712085576, "type": "DATA" }, { "from": 6499895796, "to": 6723549616, "type": "DATA" }, { "from": 6499895811, "to": 6712106492, "type": "DATA" }, { "from": 6499895850, "to": 6712103804, "type": "DATA" }, { "from": 6499895963, "to": 6717245320, "type": "DATA" }, { "from": 6499895992, "to": 6717245336, "type": "DATA" }, { "from": 6499896003, "to": 6717245320, "type": "DATA" }, { "from": 6499896184, "to": 6712083952, "type": "DATA" }, { "from": 6499896198, "to": 6712693728, "type": "DATA" }, { "from": 6499896478, "to": 6723548808, "type": "DATA" }, { "from": 6499896563, "to": 6723549632, "type": "DATA" }, { "from": 6499896818, "to": 6742234780, "type": "DATA" }, { "from": 6499896883, "to": 6742234780, "type": "DATA" }, { "from": 6499897055, "to": 6721184720, "type": "DATA" }, { "from": 6499897145, "to": 6723549648, "type": "DATA" }, { "from": 6499897415, "to": 6742234780, "type": "DATA" }, { "from": 6499897480, "to": 6742234780, "type": "DATA" }, { "from": 6499897661, "to": 6723548792, "type": "DATA" }, { "from": 6499897816, "to": 6742234792, "type": "DATA" }, { "from": 6499897822, "to": 6741832416, "type": "DATA" }, { "from": 6499897853, "to": 6742234784, "type": "DATA" }, { "from": 6499897892, "to": 6742234792, "type": "DATA" }, { "from": 6499897898, "to": 6741832416, "type": "DATA" }, { "from": 6499897929, "to": 6742234784, "type": "DATA" }, { "from": 6499897982, "to": 6723549648, "type": "DATA" }, { "from": 6499898139, "to": 6740709440, "type": "DATA" }, { "from": 6499898331, "to": 6723549584, "type": "DATA" }, { "from": 6499898360, "to": 6723549593, "type": "DATA" }, { "from": 6499898371, "to": 6723549584, "type": "DATA" }, { "from": 6499898415, "to": 6587963136, "type": "DATA" }, { "from": 6499898440, "to": 6545109024, "type": "DATA" }, { "from": 6499898466, "to": 6742234792, "type": "DATA" }, { "from": 6499898478, "to": 6742234792, "type": "DATA" }, { "from": 6499898487, "to": 6724131568, "type": "DATA" }, { "from": 6499898512, "to": 6724131616, "type": "DATA" }, { "from": 6499898534, "to": 6742234784, "type": "DATA" }, { "from": 6499898541, "to": 6742234792, "type": "DATA" }, { "from": 6499898555, "to": 6742234792, "type": "DATA" }, { "from": 6499898561, "to": 6741832416, "type": "DATA" }, { "from": 6499898588, "to": 6742234784, "type": "DATA" }, { "from": 6499898625, "to": 6742234792, "type": "DATA" }, { "from": 6499898637, "to": 6742234792, "type": "DATA" }, { "from": 6499898646, "to": 6724131568, "type": "DATA" }, { "from": 6499898671, "to": 6724131616, "type": "DATA" }, { "from": 6499898693, "to": 6742234784, "type": "DATA" }, { "from": 6499898700, "to": 6742234792, "type": "DATA" }, { "from": 6499898714, "to": 6742234792, "type": "DATA" }, { "from": 6499898720, "to": 6741832416, "type": "DATA" }, { "from": 6499898747, "to": 6742234784, "type": "DATA" }, { "from": 6499898784, "to": 6742234792, "type": "DATA" }, { "from": 6499898796, "to": 6742234792, "type": "DATA" }, { "from": 6499898809, "to": 6724131568, "type": "DATA" }, { "from": 6499898834, "to": 6724131616, "type": "DATA" }, { "from": 6499898856, "to": 6742234784, "type": "DATA" }, { "from": 6499898863, "to": 6742234792, "type": "DATA" }, { "from": 6499898880, "to": 6742234792, "type": "DATA" }, { "from": 6499898892, "to": 6742234792, "type": "DATA" }, { "from": 6499898905, "to": 6724131568, "type": "DATA" }, { "from": 6499898930, "to": 6724131616, "type": "DATA" }, { "from": 6499898952, "to": 6742234784, "type": "DATA" }, { "from": 6499898959, "to": 6742234792, "type": "DATA" }, { "from": 6499899039, "to": 6742234792, "type": "DATA" }, { "from": 6499899045, "to": 6741832416, "type": "DATA" }, { "from": 6499899072, "to": 6742234784, "type": "DATA" }, { "from": 6499899111, "to": 6742234792, "type": "DATA" }, { "from": 6499899123, "to": 6742234792, "type": "DATA" }, { "from": 6499899132, "to": 6724131568, "type": "DATA" }, { "from": 6499899154, "to": 6724131616, "type": "DATA" }, { "from": 6499899179, "to": 6742234784, "type": "DATA" }, { "from": 6499899186, "to": 6742234792, "type": "DATA" }, { "from": 6499899200, "to": 6742234792, "type": "DATA" }, { "from": 6499899206, "to": 6741832416, "type": "DATA" }, { "from": 6499899233, "to": 6742234784, "type": "DATA" }, { "from": 6499899272, "to": 6742234792, "type": "DATA" }, { "from": 6499899284, "to": 6742234792, "type": "DATA" }, { "from": 6499899293, "to": 6724131568, "type": "DATA" }, { "from": 6499899315, "to": 6724131616, "type": "DATA" }, { "from": 6499899340, "to": 6742234784, "type": "DATA" }, { "from": 6499899347, "to": 6742234792, "type": "DATA" }, { "from": 6499899361, "to": 6742234792, "type": "DATA" }, { "from": 6499899367, "to": 6741832416, "type": "DATA" }, { "from": 6499899394, "to": 6742234784, "type": "DATA" }, { "from": 6499899433, "to": 6742234792, "type": "DATA" }, { "from": 6499899445, "to": 6742234792, "type": "DATA" }, { "from": 6499899454, "to": 6724131568, "type": "DATA" }, { "from": 6499899472, "to": 6724131616, "type": "DATA" }, { "from": 6499899493, "to": 6742234784, "type": "DATA" }, { "from": 6499899500, "to": 6742234792, "type": "DATA" } ] }, "strings": [ { "va": "0x190124c48", "offset": 269631560, "ascii": "type", "wide": null }, { "va": "0x190c139b0", "offset": 281095600, "ascii": "mouseMoved", "wide": null }, { "va": "0x190610788", "offset": 274791304, "ascii": "Input.dispatchMouseEvent", "wide": null }, { "va": "0x190610798", "offset": 274791320, "ascii": "useEvent", "wide": null }, { "va": "0x190c139c0", "offset": 281095616, "ascii": "mousePressed", "wide": null }, { "va": "0x190c139d0", "offset": 281095632, "ascii": "mouseReleased", "wide": null }, { "va": "0x190c13990", "offset": 281095568, "ascii": "Invalid input parameters.", "wide": null }, { "va": "0x190c13999", "offset": 281095577, "ascii": "nput parameters.", "wide": null }, { "va": "0x190ca1af0", "offset": 281677552, "ascii": null, "wide": "bcryptprimitives.dll" }, { "va": "0x190ca1b20", "offset": 281677600, "ascii": "ProcessPrng", "wide": null } ], "imports": [ { "at": "0x1836c947e", "target": "0x191c206f0", "api": { "va": 6740379376, "lib": "KERNEL32.dll", "sym": "LoadLibraryW" } }, { "at": "0x1836c9497", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } }, { "at": "0x1836c951d", "target": "0x191c206f0", "api": { "va": 6740379376, "lib": "KERNEL32.dll", "sym": "LoadLibraryW" } }, { "at": "0x1836c9536", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } }, { "at": "0x1836c95c0", "target": "0x191c206f0", "api": { "va": 6740379376, "lib": "KERNEL32.dll", "sym": "LoadLibraryW" } }, { "at": "0x1836c95d9", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } }, { "at": "0x1836c9620", "target": "0x191c206f0", "api": { "va": 6740379376, "lib": "KERNEL32.dll", "sym": "LoadLibraryW" } }, { "at": "0x1836c9639", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } }, { "at": "0x1836c9703", "target": "0x191c206f0", "api": { "va": 6740379376, "lib": "KERNEL32.dll", "sym": "LoadLibraryW" } }, { "at": "0x1836c971c", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } }, { "at": "0x1836c97a4", "target": "0x191c206f0", "api": { "va": 6740379376, "lib": "KERNEL32.dll", "sym": "LoadLibraryW" } }, { "at": "0x1836c97bd", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } }, { "at": "0x1836c9845", "target": "0x191c206f0", "api": { "va": 6740379376, "lib": "KERNEL32.dll", "sym": "LoadLibraryW" } }, { "at": "0x1836c985a", "target": "0x191c203d8", "api": { "va": 6740378584, "lib": "KERNEL32.dll", "sym": "GetProcAddress" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 49506 }, { "label": "p-automation-command-build", "file": "rea-p-automation-command-build.json", "file_sha256": "3ac2b8881df5614f5080c42f5739bdd2b84c686ce2a7800099bc0f50608c22a7", "status": "completed", "evidence_id": "ev_7daf1864ae1634ec75b1a07cce252a4a2418ddf06d84d1fb204745a216d1be2b", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836d1410;pdgo @ 0x1836d1410;afij @ 0x1836d1410", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836d1410", "size": 523, "nargs": 3, "signature": "fcn.1836d1410(int64_t arg1, int64_t arg2, int64_t arg_40h);", "callrefs": [ { "from": 6499931286, "to": 6542067384, "type": "CALL" }, { "from": 6499931416, "to": 6499931680, "type": "CALL" }, { "from": 6499931456, "to": 6499931489, "type": "CODE" }, { "from": 6499931460, "to": 6499931296, "type": "CODE" }, { "from": 6499931476, "to": 6511512544, "type": "CALL" }, { "from": 6499931514, "to": 6499931465, "type": "CODE" }, { "from": 6499931540, "to": 6524603600, "type": "CALL" }, { "from": 6499931574, "to": 6511512544, "type": "CALL" }, { "from": 6499931579, "to": 6499931508, "type": "CODE" }, { "from": 6499931600, "to": 6511512544, "type": "CALL" }, { "from": 6499931651, "to": 6545792064, "type": "CALL" }, { "from": 6499931656, "to": 6543271376, "type": "CALL" }, { "from": 6499931669, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499931168, "to": 6740709440, "type": "DATA" }, { "from": 6499931613, "to": 6740709440, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 6628 }, { "label": "p-automation-ctor", "file": "rea-p-automation-ctor.json", "file_sha256": "caf213d3d20f92a2843cf27e7932e605abe7b7464b9df2106841b2d60592a00b", "status": "completed", "evidence_id": "ev_fedcb9b5839bb10c0e0f33d8cb87022cb4a79bcb008492dde32ba58c5afbb1eb", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836c8430;pdgo @ 0x1836c8430;afij @ 0x1836c8430", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836c8430", "size": 387, "nargs": 1, "signature": "fcn.1836c8430(int64_t arg1);", "callrefs": [ { "from": 6499894328, "to": 6587957152, "type": "CALL" }, { "from": 6499894366, "to": 6542067384, "type": "CALL" } ], "datarefs": [ { "from": 6499894333, "to": 6708320512, "type": "DATA" }, { "from": 6499894347, "to": 6708096840, "type": "DATA" }, { "from": 6499894545, "to": 6709836760, "type": "DATA" }, { "from": 6499894659, "to": 6711339176, "type": "DATA" }, { "from": 6499894669, "to": 6707910048, "type": "DATA" }, { "from": 6499894683, "to": 6707910144, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 4434 }, { "label": "p-bookmark-file-parse", "file": "rea-p-bookmark-file-parse.json", "file_sha256": "9b3cae7c18d60fa804b49a41a7259db4da13318f49c59aab1dd4af48147d90ba", "status": "completed", "evidence_id": "ev_2e482ecd6211b7ab5495587384217367a98c8734e665ceeda201dd959180273b", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18342d200;pdgo @ 0x18342d200;afij @ 0x18342d200", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18342d200", "size": 2461, "nargs": 14, "signature": "fcn.18342d200(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_80h, int64_t arg_98h, int64_t arg_afh, int64_t arg_b0h, int64_t arg_c0h, int64_t arg_c8h, int64_t arg_d8h, int64_t arg_dfh, int64_t arg_e0h, int64_t arg_e8h);", "callrefs": [ { "from": 6497161815, "to": 6464396224, "type": "CALL" }, { "from": 6497161840, "to": 6511733920, "type": "CALL" }, { "from": 6497161874, "to": 6511512544, "type": "CALL" }, { "from": 6497161996, "to": 6523637440, "type": "CALL" }, { "from": 6497162012, "to": 6497162162, "type": "CODE" }, { "from": 6497162029, "to": 6497162038, "type": "CODE" }, { "from": 6497162079, "to": 6511733920, "type": "CALL" }, { "from": 6497162120, "to": 6542434272, "type": "CALL" }, { "from": 6497162200, "to": 6542434272, "type": "CALL" }, { "from": 6497162285, "to": 6542434272, "type": "CALL" }, { "from": 6497162348, "to": 6497162031, "type": "CODE" }, { "from": 6497162371, "to": 6497162257, "type": "CODE" }, { "from": 6497162396, "to": 6497162409, "type": "CODE" }, { "from": 6497162409, "to": 6511733920, "type": "CALL" }, { "from": 6497162460, "to": 6469011872, "type": "CALL" }, { "from": 6497162494, "to": 6511512544, "type": "CALL" }, { "from": 6497162517, "to": 6542067384, "type": "CALL" }, { "from": 6497162579, "to": 6531545168, "type": "CALL" }, { "from": 6497162631, "to": 6542067384, "type": "CALL" }, { "from": 6497162667, "to": 6525250016, "type": "CALL" }, { "from": 6497162703, "to": 6542067384, "type": "CALL" }, { "from": 6497162787, "to": 6522337344, "type": "CALL" }, { "from": 6497162850, "to": 6512942288, "type": "CALL" }, { "from": 6497162878, "to": 6740346544, "type": "CALL" }, { "from": 6497162898, "to": 6532074304, "type": "CALL" }, { "from": 6497162935, "to": 6512942288, "type": "CALL" }, { "from": 6497162951, "to": 6533143424, "type": "CALL" }, { "from": 6497162993, "to": 6497163029, "type": "CODE" }, { "from": 6497163011, "to": 6497162792, "type": "CODE" }, { "from": 6497163032, "to": 6511733920, "type": "CALL" }, { "from": 6497163070, "to": 6525343600, "type": "CALL" }, { "from": 6497163083, "to": 6511512544, "type": "CALL" }, { "from": 6497163088, "to": 6497161847, "type": "CODE" }, { "from": 6497163096, "to": 6601735968, "type": "CALL" }, { "from": 6497163101, "to": 6497163067, "type": "CODE" }, { "from": 6497163128, "to": 6497163827, "type": "CODE" }, { "from": 6497163188, "to": 6641238848, "type": "CALL" }, { "from": 6497163221, "to": 6497163246, "type": "CODE" }, { "from": 6497163236, "to": 6511681872, "type": "CALL" }, { "from": 6497163241, "to": 6497163336, "type": "CODE" }, { "from": 6497163266, "to": 6601623008, "type": "CALL" }, { "from": 6497163297, "to": 6542067384, "type": "CALL" }, { "from": 6497163378, "to": 6511423872, "type": "CALL" }, { "from": 6497163463, "to": 6497181520, "type": "CALL" }, { "from": 6497163488, "to": 6740346544, "type": "CALL" }, { "from": 6497163494, "to": 6497163509, "type": "CODE" }, { "from": 6497163504, "to": 6497181520, "type": "CALL" }, { "from": 6497163540, "to": 6497163032, "type": "CODE" }, { "from": 6497163566, "to": 6460876800, "type": "CALL" }, { "from": 6497163571, "to": 6497163725, "type": "CODE" }, { "from": 6497163592, "to": 6536519280, "type": "CALL" }, { "from": 6497163597, "to": 6497163725, "type": "CODE" }, { "from": 6497163652, "to": 6456654544, "type": "CALL" }, { "from": 6497163841, "to": 6641238848, "type": "CALL" }, { "from": 6497163875, "to": 6528657040, "type": "CALL" }, { "from": 6497163889, "to": 6497163599, "type": "CODE" }, { "from": 6497163905, "to": 6542089024, "type": "CALL" }, { "from": 6497163917, "to": 6543545728, "type": "CALL" }, { "from": 6497163939, "to": 6497162398, "type": "CODE" }, { "from": 6497164002, "to": 6497163788, "type": "CODE" }, { "from": 6497164023, "to": 6511729936, "type": "CALL" }, { "from": 6497164028, "to": 6497163788, "type": "CODE" }, { "from": 6497164054, "to": 6511730288, "type": "CALL" }, { "from": 6497164059, "to": 6497163788, "type": "CODE" }, { "from": 6497164104, "to": 6511512544, "type": "CALL" }, { "from": 6497164116, "to": 6497163788, "type": "CODE" }, { "from": 6497164158, "to": 6497163788, "type": "CODE" }, { "from": 6497164179, "to": 6511513840, "type": "CALL" }, { "from": 6497164184, "to": 6497164151, "type": "CODE" } ], "datarefs": [ { "from": 6497161767, "to": 6740709440, "type": "DATA" }, { "from": 6497161824, "to": 6720322552, "type": "DATA" }, { "from": 6497161890, "to": 6740709440, "type": "DATA" }, { "from": 6497162219, "to": 6720206088, "type": "DATA" }, { "from": 6497162228, "to": 6720206091, "type": "DATA" }, { "from": 6497162305, "to": 6720206096, "type": "DATA" }, { "from": 6497162316, "to": 6720206099, "type": "DATA" }, { "from": 6497162619, "to": 6742242256, "type": "DATA" }, { "from": 6497162657, "to": 6720322582, "type": "DATA" }, { "from": 6497162717, "to": 6497180736, "type": "DATA" }, { "from": 6497162728, "to": 6497180864, "type": "DATA" }, { "from": 6497162739, "to": 6511490512, "type": "DATA" }, { "from": 6497162750, "to": 6601622656, "type": "DATA" }, { "from": 6497162822, "to": 6720322680, "type": "DATA" }, { "from": 6497162829, "to": 6720322592, "type": "DATA" }, { "from": 6497162907, "to": 6720322680, "type": "DATA" }, { "from": 6497162914, "to": 6720322592, "type": "DATA" }, { "from": 6497162980, "to": 6720322736, "type": "DATA" }, { "from": 6497163016, "to": 6720322704, "type": "DATA" }, { "from": 6497163343, "to": 6709056360, "type": "DATA" }, { "from": 6497163366, "to": 6741126408, "type": "DATA" }, { "from": 6497163524, "to": 6720322768, "type": "DATA" }, { "from": 6497163910, "to": 6712088560, "type": "DATA" } ] }, "strings": [ { "va": "0x1908ffbf8", "offset": 277868536, "ascii": "Failed to prepare bookmarks; ", "wide": null }, { "va": "0x1908e3508", "offset": 277752072, "ascii": " ICON=\"", "wide": null }, { "va": "0x1908e350b", "offset": 277752075, "ascii": "ON=\"", "wide": null }, { "va": "0x1908e3510", "offset": 277752080, "ascii": " ICON_URI=\"", "wide": null }, { "va": "0x1908e3513", "offset": 277752083, "ascii": "ON_URI=\"", "wide": null }, { "va": "0x1908ffc78", "offset": 277868664, "ascii": "ParseBookmarksFile", "wide": null }, { "va": "0x1908ffc20", "offset": 277868576, "ascii": "..\\..\\chrome\\browser\\tab_data_migration\\tab_data_migration_archive_read_delegate.cc", "wide": null }, { "va": "0x1908ffcb0", "offset": 277868720, "ascii": "Failed to parse bookmarks; ", "wide": null }, { "va": "0x1908ffc90", "offset": 277868688, "ascii": "Bookmark parsing timed out; ", "wide": null }, { "va": "0x1908ffcd0", "offset": 277868752, "ascii": "No bookmarks parsed; ", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 33623 }, { "label": "p-bookmark-import-result-bounded", "file": "rea-p-bookmark-import-result-bounded.json", "file_sha256": "164173aa5f479118786cecf93edaf8ee3e9a8f11699594d75d886a4bc621c371", "status": "completed", "evidence_id": "ev_531416de051e5ddad565b8a683f7388670f2dc217a8cef284a3138a6033463a4", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;s 0x183453d80;af;afu 0x183453f51;pdg @ 0x183453d80;afij @ 0x183453d80", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183453d80", "size": 54485985, "nargs": 1, "signature": "fcn.183453d80(int64_t arg1);", "callrefs": [ { "from": 6442835090, "to": 6442835190, "type": "CODE" }, { "from": 6442835418, "to": 6542067676, "type": "CALL" }, { "from": 6442835699, "to": 6442835603, "type": "CODE" }, { "from": 6442835849, "to": 6542434496, "type": "CALL" }, { "from": 6442835879, "to": 6740380256, "type": "CALL" }, { "from": 6442835892, "to": 6513228480, "type": "CALL" }, { "from": 6442836084, "to": 6442835987, "type": "CODE" }, { "from": 6442836089, "to": 6511982528, "type": "CALL" }, { "from": 6442836094, "to": 6442835658, "type": "CODE" }, { "from": 6442836107, "to": 6502986064, "type": "CALL" }, { "from": 6442836134, "to": 6442835324, "type": "CODE" }, { "from": 6442836148, "to": 6526943040, "type": "CALL" }, { "from": 6442836153, "to": 6442835342, "type": "CODE" }, { "from": 6442836213, "to": 6442835682, "type": "CODE" }, { "from": 6442836231, "to": 6511977968, "type": "CALL" }, { "from": 6442836236, "to": 6442835646, "type": "CODE" }, { "from": 6442836267, "to": 6442835297, "type": "CODE" }, { "from": 6442836285, "to": 6511979808, "type": "CALL" }, { "from": 6442836290, "to": 6442836058, "type": "CODE" }, { "from": 6442836299, "to": 6442835724, "type": "CODE" }, { "from": 6442836313, "to": 6642659344, "type": "CALL" }, { "from": 6442836323, "to": 6642659440, "type": "CALL" }, { "from": 6442836336, "to": 6442835682, "type": "CODE" }, { "from": 6442836345, "to": 6442835835, "type": "CODE" }, { "from": 6442836694, "to": 6442836794, "type": "CODE" }, { "from": 6442837040, "to": 6542067676, "type": "CALL" }, { "from": 6442837110, "to": 6495376016, "type": "CALL" }, { "from": 6442837158, "to": 6502986064, "type": "CALL" }, { "from": 6442837185, "to": 6442836938, "type": "CODE" }, { "from": 6442837199, "to": 6526943040, "type": "CALL" }, { "from": 6442837204, "to": 6442836956, "type": "CODE" }, { "from": 6442837264, "to": 6442837115, "type": "CODE" }, { "from": 6442837290, "to": 6495371760, "type": "CALL" }, { "from": 6442837295, "to": 6442837115, "type": "CODE" }, { "from": 6442837326, "to": 6442836900, "type": "CODE" }, { "from": 6442837344, "to": 6542089024, "type": "CALL" }, { "from": 6497320397, "to": 6511733920, "type": "CALL" }, { "from": 6497320416, "to": 6740346544, "type": "CALL" }, { "from": 6497320513, "to": 6497320464, "type": "CODE" }, { "from": 6497320525, "to": 6740346544, "type": "CALL" }, { "from": 6497320565, "to": 6511512544, "type": "CALL" }, { "from": 6497320570, "to": 6497320464, "type": "CODE" }, { "from": 6497320586, "to": 6497320445, "type": "CODE" }, { "from": 6497320601, "to": 6740346544, "type": "CALL" }, { "from": 6497320641, "to": 6511512544, "type": "CALL" }, { "from": 6497320646, "to": 6497320445, "type": "CODE" }, { "from": 6497320654, "to": 6740346544, "type": "CALL" }, { "from": 6497320660, "to": 6497320464, "type": "CODE" }, { "from": 6497320668, "to": 6740346544, "type": "CALL" }, { "from": 6497320674, "to": 6497320445, "type": "CODE" }, { "from": 6497320693, "to": 6497320487, "type": "CODE" }, { "from": 6497320708, "to": 6740346544, "type": "CALL" }, { "from": 6497320759, "to": 6511512544, "type": "CODE" }, { "from": 6497320778, "to": 6497320740, "type": "CODE" }, { "from": 6497320778, "to": 6542091152, "type": "CODE" }, { "from": 6497320778, "to": 6542433696, "type": "CODE" }, { "from": 6497320778, "to": 6542433728, "type": "CODE" } ], "datarefs": [ { "from": 6442834836, "to": 6741126400, "type": "DATA" }, { "from": 6442834845, "to": 6741126424, "type": "DATA" }, { "from": 6442834855, "to": 6741126416, "type": "DATA" }, { "from": 6442835390, "to": 6741832416, "type": "DATA" }, { "from": 6442835433, "to": 6741832416, "type": "DATA" }, { "from": 6442835487, "to": 6741345312, "type": "DATA" }, { "from": 6442835561, "to": 6724160688, "type": "DATA" }, { "from": 6442835934, "to": 6741126408, "type": "DATA" }, { "from": 6442835943, "to": 6741126400, "type": "DATA" }, { "from": 6442835952, "to": 6741126424, "type": "DATA" }, { "from": 6442835965, "to": 6741126416, "type": "DATA" }, { "from": 6442836075, "to": 6740379744, "type": "DATA" }, { "from": 6442836400, "to": 6740709440, "type": "DATA" }, { "from": 6442836431, "to": 6741126400, "type": "DATA" }, { "from": 6442836440, "to": 6741126424, "type": "DATA" }, { "from": 6442836450, "to": 6741126416, "type": "DATA" }, { "from": 6442837012, "to": 6741832416, "type": "DATA" }, { "from": 6442837055, "to": 6741832416, "type": "DATA" }, { "from": 6442837123, "to": 6740709440, "type": "DATA" }, { "from": 6497320384, "to": 6720326400, "type": "DATA" }, { "from": 6497320545, "to": 6545635632, "type": "DATA" }, { "from": 6497320621, "to": 6545635632, "type": "DATA" }, { "from": 6497320728, "to": 6545635632, "type": "DATA" }, { "from": 6497320778, "to": 6740346544, "type": "DATA" } ] }, "strings": [ { "va": "0x190900b00", "offset": 277872384, "ascii": "Failed to import bookmarks; ", "wide": null } ], "imports": [ { "at": "0x18005dfa7", "target": "0x191c20a60", "api": { "va": 6740380256, "lib": "KERNEL32.dll", "sym": "TryAcquireSRWLockExclusive" } } ], "status_display": "汇编核对", "record_kind": "assembly", "pseudocode_chars": 46200 }, { "label": "p-bookmark-import-result", "file": "rea-p-bookmark-import-result.json", "file_sha256": "ac4a8dea356e5875d8c01114d6c67d23f384b1425e035a66b560d7fe1d53ffdd", "status": "completed", "evidence_id": "ev_7accae1ff67590f3de077dff93148119131e4da734635fd15f3b7e00e32db4eb", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183453d80;pdgo @ 0x183453d80;afij @ 0x183453d80", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183453d80", "size": 99598934, "nargs": 1, "signature": "fcn.183453d80(int64_t arg1);", "callrefs": [ { "from": 6442835090, "to": 6442835190, "type": "CODE" }, { "from": 6442835418, "to": 6542067676, "type": "CALL" }, { "from": 6442835699, "to": 6442835603, "type": "CODE" }, { "from": 6442835849, "to": 6542434496, "type": "CALL" }, { "from": 6442835879, "to": 6740380256, "type": "CALL" }, { "from": 6442835892, "to": 6513228480, "type": "CALL" }, { "from": 6442836084, "to": 6442835987, "type": "CODE" }, { "from": 6442836089, "to": 6511982528, "type": "CALL" }, { "from": 6442836094, "to": 6442835658, "type": "CODE" }, { "from": 6442836107, "to": 6502986064, "type": "CALL" }, { "from": 6442836134, "to": 6442835324, "type": "CODE" }, { "from": 6442836148, "to": 6526943040, "type": "CALL" }, { "from": 6442836153, "to": 6442835342, "type": "CODE" }, { "from": 6442836213, "to": 6442835682, "type": "CODE" }, { "from": 6442836231, "to": 6511977968, "type": "CALL" }, { "from": 6442836236, "to": 6442835646, "type": "CODE" }, { "from": 6442836267, "to": 6442835297, "type": "CODE" }, { "from": 6442836285, "to": 6511979808, "type": "CALL" }, { "from": 6442836290, "to": 6442836058, "type": "CODE" }, { "from": 6442836299, "to": 6442835724, "type": "CODE" }, { "from": 6442836313, "to": 6642659344, "type": "CALL" }, { "from": 6442836323, "to": 6642659440, "type": "CALL" }, { "from": 6442836336, "to": 6442835682, "type": "CODE" }, { "from": 6442836345, "to": 6442835835, "type": "CODE" }, { "from": 6442836694, "to": 6442836794, "type": "CODE" }, { "from": 6442837040, "to": 6542067676, "type": "CALL" }, { "from": 6442837110, "to": 6495376016, "type": "CALL" }, { "from": 6442837158, "to": 6502986064, "type": "CALL" }, { "from": 6442837185, "to": 6442836938, "type": "CODE" }, { "from": 6442837199, "to": 6526943040, "type": "CALL" }, { "from": 6442837204, "to": 6442836956, "type": "CODE" }, { "from": 6442837264, "to": 6442837115, "type": "CODE" }, { "from": 6442837290, "to": 6495371760, "type": "CALL" }, { "from": 6442837295, "to": 6442837115, "type": "CODE" }, { "from": 6442837326, "to": 6442836900, "type": "CODE" }, { "from": 6442837344, "to": 6542089024, "type": "CALL" }, { "from": 6497320397, "to": 6511733920, "type": "CALL" }, { "from": 6497320416, "to": 6740346544, "type": "CALL" }, { "from": 6497320513, "to": 6497320464, "type": "CODE" }, { "from": 6497320525, "to": 6740346544, "type": "CALL" }, { "from": 6497320565, "to": 6511512544, "type": "CALL" }, { "from": 6497320570, "to": 6497320464, "type": "CODE" }, { "from": 6497320586, "to": 6497320445, "type": "CODE" }, { "from": 6497320601, "to": 6740346544, "type": "CALL" }, { "from": 6497320641, "to": 6511512544, "type": "CALL" }, { "from": 6497320646, "to": 6497320445, "type": "CODE" }, { "from": 6497320654, "to": 6740346544, "type": "CALL" }, { "from": 6497320660, "to": 6497320464, "type": "CODE" }, { "from": 6497320668, "to": 6740346544, "type": "CALL" }, { "from": 6497320674, "to": 6497320445, "type": "CODE" }, { "from": 6497320693, "to": 6497320487, "type": "CODE" }, { "from": 6497320708, "to": 6740346544, "type": "CALL" }, { "from": 6497320759, "to": 6511512544, "type": "CODE" }, { "from": 6497320778, "to": 6497320740, "type": "CODE" }, { "from": 6497320778, "to": 6542091152, "type": "CODE" }, { "from": 6497320778, "to": 6542433696, "type": "CODE" }, { "from": 6497320778, "to": 6542433728, "type": "CODE" }, { "from": 6511396639, "to": 6442834800, "type": "CODE" }, { "from": 6511396686, "to": 6511396623, "type": "CODE" }, { "from": 6511396767, "to": 6442836384, "type": "CODE" }, { "from": 6511396814, "to": 6511396751, "type": "CODE" }, { "from": 6511512687, "to": 6511512813, "type": "CODE" }, { "from": 6511512687, "to": 6542091152, "type": "CODE" }, { "from": 6511512687, "to": 6542433696, "type": "CODE" }, { "from": 6511512687, "to": 6542433728, "type": "CODE" }, { "from": 6511512766, "to": 6511396704, "type": "CODE" }, { "from": 6511512808, "to": 6511396576, "type": "CODE" }, { "from": 6511512821, "to": 6542089024, "type": "CALL" }, { "from": 6511512835, "to": 6624513440, "type": "CALL" }, { "from": 6511512900, "to": 6520861456, "type": "CALL" }, { "from": 6511513027, "to": 6511513006, "type": "CODE" }, { "from": 6511513029, "to": 6624512000, "type": "CALL" }, { "from": 6511513048, "to": 6624513648, "type": "CALL" }, { "from": 6511513053, "to": 6511512620, "type": "CODE" } ], "datarefs": [ { "from": 6442834836, "to": 6741126400, "type": "DATA" }, { "from": 6442834845, "to": 6741126424, "type": "DATA" }, { "from": 6442834855, "to": 6741126416, "type": "DATA" }, { "from": 6442835390, "to": 6741832416, "type": "DATA" }, { "from": 6442835433, "to": 6741832416, "type": "DATA" }, { "from": 6442835487, "to": 6741345312, "type": "DATA" }, { "from": 6442835561, "to": 6724160688, "type": "DATA" }, { "from": 6442835934, "to": 6741126408, "type": "DATA" }, { "from": 6442835943, "to": 6741126400, "type": "DATA" }, { "from": 6442835952, "to": 6741126424, "type": "DATA" }, { "from": 6442835965, "to": 6741126416, "type": "DATA" }, { "from": 6442836075, "to": 6740379744, "type": "DATA" }, { "from": 6442836400, "to": 6740709440, "type": "DATA" }, { "from": 6442836431, "to": 6741126400, "type": "DATA" }, { "from": 6442836440, "to": 6741126424, "type": "DATA" }, { "from": 6442836450, "to": 6741126416, "type": "DATA" }, { "from": 6442837012, "to": 6741832416, "type": "DATA" }, { "from": 6442837055, "to": 6741832416, "type": "DATA" }, { "from": 6442837123, "to": 6740709440, "type": "DATA" }, { "from": 6497320384, "to": 6720326400, "type": "DATA" }, { "from": 6497320545, "to": 6545635632, "type": "DATA" }, { "from": 6497320621, "to": 6545635632, "type": "DATA" }, { "from": 6497320728, "to": 6545635632, "type": "DATA" }, { "from": 6497320778, "to": 6740346544, "type": "DATA" }, { "from": 6511396614, "to": 6741126408, "type": "DATA" }, { "from": 6511396623, "to": 6741126400, "type": "DATA" }, { "from": 6511396649, "to": 6741126400, "type": "DATA" }, { "from": 6511396658, "to": 6741126424, "type": "DATA" }, { "from": 6511396671, "to": 6741126416, "type": "DATA" }, { "from": 6511396742, "to": 6741126408, "type": "DATA" }, { "from": 6511396751, "to": 6741126400, "type": "DATA" }, { "from": 6511396777, "to": 6741126400, "type": "DATA" }, { "from": 6511396786, "to": 6741126424, "type": "DATA" }, { "from": 6511396799, "to": 6741126416, "type": "DATA" }, { "from": 6511512561, "to": 6740709440, "type": "DATA" }, { "from": 6511512576, "to": 6741126528, "type": "DATA" }, { "from": 6511512587, "to": 6537703408, "type": "DATA" }, { "from": 6511512599, "to": 6741837648, "type": "DATA" }, { "from": 6511512606, "to": 6742242904, "type": "DATA" }, { "from": 6511512620, "to": 6740713128, "type": "DATA" }, { "from": 6511512631, "to": 6511396512, "type": "DATA" }, { "from": 6511512651, "to": 6740709440, "type": "DATA" }, { "from": 6511512687, "to": 6740346544, "type": "DATA" }, { "from": 6511512694, "to": 6741345248, "type": "DATA" }, { "from": 6511512705, "to": 6538544560, "type": "DATA" }, { "from": 6511512717, "to": 6538544672, "type": "DATA" }, { "from": 6511512737, "to": 6740709440, "type": "DATA" }, { "from": 6511512779, "to": 6740709440, "type": "DATA" }, { "from": 6542433728, "to": 6740346544, "type": "DATA" } ] }, "strings": [ { "va": "0x190900b00", "offset": 277872384, "ascii": "Failed to import bookmarks; ", "wide": null } ], "imports": [ { "at": "0x18005dfa7", "target": "0x191c20a60", "api": { "va": 6740380256, "lib": "KERNEL32.dll", "sym": "TryAcquireSRWLockExclusive" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 62066 }, { "label": "p-bookmark-star-check", "file": "rea-p-bookmark-star-check.json", "file_sha256": "d20edee70d3b9c3f32b758cc742c3704551c34e29fb1b5ddcc16b04929d33a8b", "status": "completed", "evidence_id": "ev_61feb3d30d9485597ef22bf3af26f4e48d1f1100b57c19ce5374a1e2705d0b92", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18ab92010;pdgo @ 0x18ab92010;afij @ 0x18ab92010", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18ab92010", "size": 524, "nargs": 2, "signature": "fcn.18ab92010(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6622355541, "to": 6622345936, "type": "CALL" }, { "from": 6622355554, "to": 6478574384, "type": "CALL" }, { "from": 6622355581, "to": 6541767856, "type": "CALL" }, { "from": 6622355619, "to": 6532333680, "type": "CALL" }, { "from": 6622355632, "to": 6622355671, "type": "CODE" }, { "from": 6622355658, "to": 6532333680, "type": "CALL" }, { "from": 6622355674, "to": 6594376496, "type": "CALL" }, { "from": 6622355743, "to": 6740346544, "type": "CALL" }, { "from": 6622355749, "to": 6622355687, "type": "CODE" }, { "from": 6622355764, "to": 6740346544, "type": "CALL" }, { "from": 6622355801, "to": 6636366128, "type": "CALL" }, { "from": 6622355836, "to": 6532333680, "type": "CALL" }, { "from": 6622355849, "to": 6594376496, "type": "CALL" }, { "from": 6622355862, "to": 6495482672, "type": "CALL" }, { "from": 6622355867, "to": 6622355679, "type": "CODE" }, { "from": 6622355925, "to": 6512942288, "type": "CALL" }, { "from": 6622355944, "to": 6636353024, "type": "CALL" }, { "from": 6622355974, "to": 6622355846, "type": "CODE" }, { "from": 6622355990, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6622355497, "to": 6740709440, "type": "DATA" }, { "from": 6622355515, "to": 6720160784, "type": "DATA" }, { "from": 6622355607, "to": 6723733616, "type": "DATA" }, { "from": 6622355646, "to": 6723784072, "type": "DATA" }, { "from": 6622355698, "to": 6740709440, "type": "DATA" }, { "from": 6622355824, "to": 6723784104, "type": "DATA" }, { "from": 6622355891, "to": 6720160784, "type": "DATA" }, { "from": 6622355898, "to": 6723784136, "type": "DATA" } ] }, "strings": [ { "va": "0x1908d8410", "offset": 277706768, "ascii": "RemoveBookmark", "wide": null }, { "va": "0x190c40870", "offset": 281279600, "ascii": "No active tab", "wide": null }, { "va": "0x190c4cd88", "offset": 281330056, "ascii": "Bookmark model not loaded", "wide": null }, { "va": "0x190c4cda8", "offset": 281330088, "ascii": "Active tab is not bookmarked", "wide": null }, { "va": "0x190c4cdc8", "offset": 281330120, "ascii": "..\\..\\chrome\\browser\\ui\\webui\\ai_overlay_dialog\\tools\\tools.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 4716 }, { "label": "p-bookmark-ui-entry", "file": "rea-p-bookmark-ui-entry.json", "file_sha256": "826327a9b2f057bdb0c02384949a9e901999905576459bda2ae8712e62d91179", "status": "completed", "evidence_id": "ev_25be2d0df6b6f5e57ef1092e28a0824bd0a2660a4fcb9cba1b2a0753db646fae", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1835841e0;pdgo @ 0x1835841e0;afij @ 0x1835841e0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1835841e0", "size": 7618, "nargs": 9, "signature": "fcn.1835841e0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h, int64_t arg_40h, int64_t arg_48h);", "callrefs": [ { "from": 6498566852, "to": 6498566913, "type": "CODE" }, { "from": 6498566872, "to": 6511513840, "type": "CALL" }, { "from": 6498566880, "to": 6498566977, "type": "CODE" }, { "from": 6498566900, "to": 6511681872, "type": "CALL" }, { "from": 6498567168, "to": 6529862896, "type": "CALL" }, { "from": 6498567209, "to": 6498567222, "type": "CODE" }, { "from": 6498567458, "to": 6498570855, "type": "CODE" }, { "from": 6498567528, "to": 6608138512, "type": "CALL" }, { "from": 6498567547, "to": 6544807632, "type": "CALL" }, { "from": 6498567571, "to": 6559030752, "type": "CALL" }, { "from": 6498567622, "to": 6451707840, "type": "CALL" }, { "from": 6498567684, "to": 6542067384, "type": "CALL" }, { "from": 6498567737, "to": 6614180736, "type": "CALL" }, { "from": 6498567753, "to": 6544807632, "type": "CALL" }, { "from": 6498567774, "to": 6559030752, "type": "CALL" }, { "from": 6498567825, "to": 6511512544, "type": "CALL" }, { "from": 6498567869, "to": 6511512544, "type": "CALL" }, { "from": 6498567893, "to": 6559030752, "type": "CALL" }, { "from": 6498567929, "to": 6511512544, "type": "CALL" }, { "from": 6498567956, "to": 6511512544, "type": "CALL" }, { "from": 6498568130, "to": 6498568784, "type": "CODE" }, { "from": 6498568183, "to": 6511512544, "type": "CALL" }, { "from": 6498568188, "to": 6498567742, "type": "CODE" }, { "from": 6498568261, "to": 6512708384, "type": "CALL" }, { "from": 6498568303, "to": 6542067384, "type": "CALL" }, { "from": 6498568341, "to": 6542436672, "type": "CALL" }, { "from": 6498568364, "to": 6498745968, "type": "CALL" }, { "from": 6498568376, "to": 6614123920, "type": "CALL" }, { "from": 6498568450, "to": 6511681872, "type": "CALL" }, { "from": 6498568455, "to": 6498568491, "type": "CODE" }, { "from": 6498568513, "to": 6613706960, "type": "CALL" }, { "from": 6498568585, "to": 6498568600, "type": "CODE" }, { "from": 6498568595, "to": 6511681872, "type": "CALL" }, { "from": 6498568641, "to": 6498753744, "type": "CALL" }, { "from": 6498568654, "to": 6614185296, "type": "CALL" }, { "from": 6498568678, "to": 6511512544, "type": "CALL" }, { "from": 6498568787, "to": 6528099264, "type": "CALL" }, { "from": 6498568805, "to": 6740346544, "type": "CALL" }, { "from": 6498568934, "to": 6528099264, "type": "CALL" }, { "from": 6498568958, "to": 6740346544, "type": "CALL" }, { "from": 6498568978, "to": 6498568731, "type": "CODE" }, { "from": 6498568997, "to": 6613708640, "type": "CALL" }, { "from": 6498569222, "to": 6613686912, "type": "CALL" }, { "from": 6498569278, "to": 6740346544, "type": "CALL" }, { "from": 6498569316, "to": 6740346544, "type": "CALL" }, { "from": 6498569392, "to": 6512708384, "type": "CALL" }, { "from": 6498569428, "to": 6531704832, "type": "CALL" }, { "from": 6498569441, "to": 6616426512, "type": "CALL" }, { "from": 6498569460, "to": 6502223744, "type": "CALL" }, { "from": 6498569511, "to": 6740346544, "type": "CALL" }, { "from": 6498569523, "to": 6529862896, "type": "CALL" }, { "from": 6498569543, "to": 6456889328, "type": "CALL" }, { "from": 6498569557, "to": 6512708384, "type": "CALL" }, { "from": 6498569581, "to": 6462089632, "type": "CALL" }, { "from": 6498569594, "to": 6498569658, "type": "CODE" }, { "from": 6498569607, "to": 6456889328, "type": "CALL" }, { "from": 6498569621, "to": 6512708384, "type": "CALL" }, { "from": 6498569645, "to": 6462089632, "type": "CALL" }, { "from": 6498569669, "to": 6546184976, "type": "CALL" }, { "from": 6498569674, "to": 6498570802, "type": "CODE" }, { "from": 6498569684, "to": 6511396000, "type": "CALL" }, { "from": 6498569693, "to": 6498569711, "type": "CODE" }, { "from": 6498569707, "to": 6498569711, "type": "CODE" }, { "from": 6498569738, "to": 6511512544, "type": "CALL" }, { "from": 6498569773, "to": 6511512544, "type": "CALL" }, { "from": 6498569838, "to": 6445650832, "type": "CALL" }, { "from": 6498569864, "to": 6524031184, "type": "CALL" }, { "from": 6498569874, "to": 6451143232, "type": "CALL" }, { "from": 6498569895, "to": 6524031184, "type": "CALL" }, { "from": 6498569905, "to": 6446762512, "type": "CALL" }, { "from": 6498569928, "to": 6445656528, "type": "CALL" }, { "from": 6498570014, "to": 6511512544, "type": "CALL" }, { "from": 6498570066, "to": 6511975280, "type": "CALL" }, { "from": 6498570079, "to": 6518967168, "type": "CALL" }, { "from": 6498570158, "to": 6445650832, "type": "CALL" }, { "from": 6498570184, "to": 6498570451, "type": "CODE" }, { "from": 6498570219, "to": 6609712352, "type": "CALL" }, { "from": 6498570262, "to": 6609712720, "type": "CALL" }, { "from": 6498570310, "to": 6511512544, "type": "CALL" }, { "from": 6498570315, "to": 6498570692, "type": "CODE" }, { "from": 6498570334, "to": 6511512544, "type": "CALL" }, { "from": 6498570339, "to": 6498570816, "type": "CODE" }, { "from": 6498570425, "to": 6445650832, "type": "CALL" }, { "from": 6498570451, "to": 6524031184, "type": "CALL" }, { "from": 6498570474, "to": 6445656528, "type": "CALL" }, { "from": 6498570560, "to": 6511512544, "type": "CALL" }, { "from": 6498570612, "to": 6511975280, "type": "CALL" }, { "from": 6498570625, "to": 6518967168, "type": "CALL" }, { "from": 6498570654, "to": 6488261728, "type": "CALL" }, { "from": 6498570819, "to": 6490739872, "type": "CALL" }, { "from": 6498570832, "to": 6511396000, "type": "CALL" }, { "from": 6498570898, "to": 6511645120, "type": "CALL" }, { "from": 6498570910, "to": 6497160352, "type": "CALL" }, { "from": 6498571058, "to": 6511751392, "type": "CALL" }, { "from": 6498571187, "to": 6542067384, "type": "CALL" }, { "from": 6498571228, "to": 6498571249, "type": "CODE" }, { "from": 6498571285, "to": 6542436672, "type": "CALL" }, { "from": 6498571367, "to": 6498572216, "type": "CODE" }, { "from": 6498571405, "to": 6498571495, "type": "CODE" }, { "from": 6498571457, "to": 6498571498, "type": "CODE" }, { "from": 6498571568, "to": 6449418864, "type": "CALL" }, { "from": 6498571653, "to": 6542434064, "type": "CALL" }, { "from": 6498571677, "to": 6542434496, "type": "CALL" }, { "from": 6498571690, "to": 6532021136, "type": "CALL" }, { "from": 6498571784, "to": 6534277856, "type": "CALL" }, { "from": 6498571795, "to": 6514577840, "type": "CALL" }, { "from": 6498571803, "to": 6511396000, "type": "CALL" }, { "from": 6498571863, "to": 6445650832, "type": "CALL" }, { "from": 6498571889, "to": 6524031184, "type": "CALL" }, { "from": 6498571926, "to": 6524031184, "type": "CALL" }, { "from": 6498571947, "to": 6524031184, "type": "CALL" }, { "from": 6498571984, "to": 6524031184, "type": "CALL" }, { "from": 6498572007, "to": 6445656528, "type": "CALL" }, { "from": 6498572093, "to": 6511512544, "type": "CALL" }, { "from": 6498572145, "to": 6511975280, "type": "CALL" }, { "from": 6498572158, "to": 6518967168, "type": "CALL" }, { "from": 6498572171, "to": 6511396112, "type": "CALL" }, { "from": 6498572207, "to": 6511512544, "type": "CALL" }, { "from": 6498572243, "to": 6511512544, "type": "CALL" }, { "from": 6498572259, "to": 6542434496, "type": "CALL" }, { "from": 6498572284, "to": 6621598688, "type": "CALL" }, { "from": 6498572324, "to": 6511423872, "type": "CALL" }, { "from": 6498572362, "to": 6442840976, "type": "CALL" }, { "from": 6498572401, "to": 6515312816, "type": "CALL" }, { "from": 6498572443, "to": 6449418528, "type": "CALL" }, { "from": 6498572499, "to": 6514018912, "type": "CALL" }, { "from": 6498572589, "to": 6454611952, "type": "CALL" }, { "from": 6498572622, "to": 6449417312, "type": "CALL" }, { "from": 6498572679, "to": 6449418864, "type": "CALL" }, { "from": 6498572730, "to": 6498572751, "type": "CODE" }, { "from": 6498572732, "to": 6740346544, "type": "CALL" }, { "from": 6498572741, "to": 6498572577, "type": "CODE" }, { "from": 6498572770, "to": 6740346544, "type": "CALL" }, { "from": 6498572971, "to": 6542436672, "type": "CALL" }, { "from": 6498573079, "to": 6511733920, "type": "CALL" }, { "from": 6498573137, "to": 6511733920, "type": "CALL" }, { "from": 6498573242, "to": 6515567520, "type": "CALL" }, { "from": 6498573293, "to": 6511512544, "type": "CALL" }, { "from": 6498573337, "to": 6511512544, "type": "CALL" }, { "from": 6498573381, "to": 6511512544, "type": "CALL" }, { "from": 6498573486, "to": 6542434064, "type": "CALL" }, { "from": 6498573497, "to": 6498569681, "type": "CODE" }, { "from": 6498573587, "to": 6542067384, "type": "CALL" }, { "from": 6498573626, "to": 6542436672, "type": "CALL" }, { "from": 6498573642, "to": 6511512544, "type": "CALL" }, { "from": 6498573653, "to": 6498568752, "type": "CODE" }, { "from": 6498573695, "to": 6542633200, "type": "CALL" }, { "from": 6498573722, "to": 6542067384, "type": "CALL" }, { "from": 6498573772, "to": 6498572938, "type": "CODE" }, { "from": 6498573822, "to": 6498569186, "type": "CODE" }, { "from": 6498573863, "to": 6498573820, "type": "CODE" }, { "from": 6498573872, "to": 6542069736, "type": "CALL" }, { "from": 6498573897, "to": 6478574512, "type": "CALL" }, { "from": 6498573909, "to": 6542069628, "type": "CALL" }, { "from": 6498573914, "to": 6498569379, "type": "CODE" }, { "from": 6498573926, "to": 6542069736, "type": "CALL" }, { "from": 6498573951, "to": 6485191760, "type": "CALL" }, { "from": 6498573963, "to": 6542069628, "type": "CALL" }, { "from": 6498573968, "to": 6498568248, "type": "CODE" }, { "from": 6498573980, "to": 6543545728, "type": "CALL" }, { "from": 6498573985, "to": 6542741104, "type": "CALL" }, { "from": 6498573997, "to": 6542069736, "type": "CALL" }, { "from": 6498574022, "to": 6542069628, "type": "CALL" }, { "from": 6498574027, "to": 6498571563, "type": "CODE" }, { "from": 6498574043, "to": 6498569073, "type": "CODE" }, { "from": 6498574048, "to": 6545792064, "type": "CALL" }, { "from": 6498574060, "to": 6542069736, "type": "CALL" }, { "from": 6498574085, "to": 6542069628, "type": "CALL" }, { "from": 6498574090, "to": 6498572674, "type": "CODE" }, { "from": 6498574110, "to": 6542702416, "type": "CALL" }, { "from": 6498574142, "to": 6740346544, "type": "CALL" }, { "from": 6498574148, "to": 6498572137, "type": "CODE" }, { "from": 6498574181, "to": 6740346544, "type": "CALL" }, { "from": 6498574187, "to": 6498570058, "type": "CODE" }, { "from": 6498574217, "to": 6740346544, "type": "CALL" }, { "from": 6498574223, "to": 6498570604, "type": "CODE" }, { "from": 6498574228, "to": 6543271376, "type": "CALL" }, { "from": 6498574236, "to": 6498573595, "type": "CODE" } ], "datarefs": [ { "from": 6498567302, "to": 6712087704, "type": "DATA" }, { "from": 6498567309, "to": 6723028960, "type": "DATA" }, { "from": 6498567380, "to": 6721976896, "type": "DATA" }, { "from": 6498568211, "to": 6742191576, "type": "DATA" }, { "from": 6498568217, "to": 6741832416, "type": "DATA" }, { "from": 6498568248, "to": 6742191488, "type": "DATA" }, { "from": 6498569133, "to": 6723028960, "type": "DATA" }, { "from": 6498569156, "to": 6741838692, "type": "DATA" }, { "from": 6498569342, "to": 6742143056, "type": "DATA" }, { "from": 6498569348, "to": 6741832416, "type": "DATA" }, { "from": 6498569379, "to": 6742142976, "type": "DATA" }, { "from": 6498569778, "to": 6742246848, "type": "DATA" }, { "from": 6498569796, "to": 6741126112, "type": "DATA" }, { "from": 6498569805, "to": 6742246856, "type": "DATA" }, { "from": 6498569822, "to": 6723028672, "type": "DATA" }, { "from": 6498569857, "to": 6723028800, "type": "DATA" }, { "from": 6498569888, "to": 6723028832, "type": "DATA" }, { "from": 6498569910, "to": 6710367816, "type": "DATA" }, { "from": 6498569945, "to": 6708900496, "type": "DATA" }, { "from": 6498569960, "to": 6708923712, "type": "DATA" }, { "from": 6498570019, "to": 6708923824, "type": "DATA" }, { "from": 6498570042, "to": 6742217808, "type": "DATA" }, { "from": 6498570093, "to": 6742246848, "type": "DATA" }, { "from": 6498570116, "to": 6741126112, "type": "DATA" }, { "from": 6498570125, "to": 6742246856, "type": "DATA" }, { "from": 6498570142, "to": 6723028672, "type": "DATA" }, { "from": 6498570177, "to": 6723028912, "type": "DATA" }, { "from": 6498570358, "to": 6742246848, "type": "DATA" }, { "from": 6498570383, "to": 6741126112, "type": "DATA" }, { "from": 6498570392, "to": 6742246856, "type": "DATA" }, { "from": 6498570409, "to": 6723028672, "type": "DATA" }, { "from": 6498570444, "to": 6723028848, "type": "DATA" }, { "from": 6498570456, "to": 6710367816, "type": "DATA" }, { "from": 6498570491, "to": 6708900496, "type": "DATA" }, { "from": 6498570506, "to": 6708923712, "type": "DATA" }, { "from": 6498570565, "to": 6708923824, "type": "DATA" }, { "from": 6498570588, "to": 6742217808, "type": "DATA" }, { "from": 6498570860, "to": 6715409192, "type": "DATA" }, { "from": 6498571526, "to": 6742235372, "type": "DATA" }, { "from": 6498571532, "to": 6741832416, "type": "DATA" }, { "from": 6498571808, "to": 6742246848, "type": "DATA" }, { "from": 6498571821, "to": 6741126112, "type": "DATA" }, { "from": 6498571830, "to": 6742246856, "type": "DATA" }, { "from": 6498571847, "to": 6723028672, "type": "DATA" }, { "from": 6498571882, "to": 6723028736, "type": "DATA" }, { "from": 6498571940, "to": 6712466784, "type": "DATA" }, { "from": 6498571989, "to": 6710367816, "type": "DATA" }, { "from": 6498572024, "to": 6708900496, "type": "DATA" }, { "from": 6498572039, "to": 6708923712, "type": "DATA" }, { "from": 6498572098, "to": 6708923824, "type": "DATA" }, { "from": 6498572121, "to": 6742217808, "type": "DATA" }, { "from": 6498572312, "to": 6741126408, "type": "DATA" }, { "from": 6498572353, "to": 6741126408, "type": "DATA" }, { "from": 6498572384, "to": 6742247160, "type": "DATA" }, { "from": 6498572394, "to": 6715570248, "type": "DATA" }, { "from": 6498572410, "to": 6722679656, "type": "DATA" }, { "from": 6498572557, "to": 6523219744, "type": "DATA" }, { "from": 6498572637, "to": 6742235372, "type": "DATA" }, { "from": 6498572643, "to": 6741832416, "type": "DATA" }, { "from": 6498572989, "to": 6717673432, "type": "DATA" }, { "from": 6498573019, "to": 6717673434, "type": "DATA" }, { "from": 6498573028, "to": 6717673432, "type": "DATA" }, { "from": 6498573130, "to": 6723028792, "type": "DATA" }, { "from": 6498573658, "to": 6712467056, "type": "DATA" }, { "from": 6498573670, "to": 6712467221, "type": "DATA" }, { "from": 6498573677, "to": 6712467240, "type": "DATA" }, { "from": 6498573840, "to": 6712116080, "type": "DATA" }, { "from": 6498573847, "to": 6723028960, "type": "DATA" }, { "from": 6498573865, "to": 6742143056, "type": "DATA" }, { "from": 6498573877, "to": 6742143056, "type": "DATA" }, { "from": 6498573890, "to": 6742142976, "type": "DATA" }, { "from": 6498573902, "to": 6742143056, "type": "DATA" }, { "from": 6498573919, "to": 6742191576, "type": "DATA" }, { "from": 6498573931, "to": 6742191576, "type": "DATA" }, { "from": 6498573944, "to": 6742191488, "type": "DATA" }, { "from": 6498573956, "to": 6742191576, "type": "DATA" }, { "from": 6498573973, "to": 6712088560, "type": "DATA" }, { "from": 6498573990, "to": 6742235372, "type": "DATA" }, { "from": 6498574002, "to": 6742235372, "type": "DATA" }, { "from": 6498574015, "to": 6742235372, "type": "DATA" }, { "from": 6498574053, "to": 6742235372, "type": "DATA" }, { "from": 6498574065, "to": 6742235372, "type": "DATA" }, { "from": 6498574078, "to": 6742235372, "type": "DATA" } ] }, "strings": [ { "va": "0x190b946c0", "offset": 280574656, "ascii": "..\\..\\chrome\\browser\\ui\\bookmarks\\bookmark_utils_desktop.cc", "wide": null }, { "va": "0x190b94740", "offset": 280574784, "ascii": "[BookmarkUtils] is_newtab: ", "wide": null }, { "va": "0x190b94760", "offset": 280574816, "ascii": ", disposition: ", "wide": null }, { "va": "0x190b947b0", "offset": 280574896, "ascii": "[BookmarkUtils] On NewTab, keeping CURRENT_TAB", "wide": null }, { "va": "0x190b94770", "offset": 280574832, "ascii": "[BookmarkUtils] Not on NewTab, changed to NEW_FOREGROUND_TAB", "wide": null }, { "va": "0x190450328", "offset": 272955176, "ascii": "javascript", "wide": null }, { "va": "0x190b94700", "offset": 280574720, "ascii": "[BookmarkUtils] Resolved legacy bookmark host from ", "wide": null }, { "va": "0x190181d60", "offset": 270012768, "ascii": " to ", "wide": null }, { "va": "0x190477848", "offset": 273116232, "ascii": "browser-test", "wide": null }, { "va": "0x190b3f368", "offset": 280225640, "ascii": "use-chrome-bookmark-manager-for-tab-browser-tests", "wide": null }, { "va": "0x190678fd8", "offset": 275219416, "ascii": "://", "wide": null }, { "va": "0x190b94738", "offset": 280574776, "ascii": "/newtab", "wide": null }, { "va": "0x190181e70", "offset": 270013040, "ascii": "Comparing default-constructed hashtable iterator with a non-default-constructed hashtable iterator.", "wide": null }, { "va": "0x190181f15", "offset": 270013205, "ascii": "raw_hash_set.h", "wide": null }, { "va": "0x190181f28", "offset": 270013224, "ascii": "Invalid iterator comparison. %s", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 114855 }, { "label": "p-bookmark-webui-choice", "file": "rea-p-bookmark-webui-choice.json", "file_sha256": "2ed6f2d0eecc89b5ef67bc23aee019a498121f77b9f1d8b9f17bbc69f6781a6f", "status": "completed", "evidence_id": "ev_97e64e6ae33f321b1f28c9b54307e1eda4388000dee02ce1867213446717a9bf", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1834c06d0;pdgo @ 0x1834c06d0;afij @ 0x1834c06d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834c06d0", "size": 2839, "nargs": 4, "signature": "fcn.1834c06d0(int64_t arg1, int64_t arg2, int64_t arg_80h, int64_t arg_148h);", "callrefs": [ { "from": 6497765161, "to": 6511423872, "type": "CALL" }, { "from": 6497765211, "to": 6740346544, "type": "CALL" }, { "from": 6497765303, "to": 6542067384, "type": "CALL" }, { "from": 6497765317, "to": 6469838560, "type": "CALL" }, { "from": 6497765339, "to": 6469838304, "type": "CALL" }, { "from": 6497765379, "to": 6511512544, "type": "CALL" }, { "from": 6497765387, "to": 6470171712, "type": "CALL" }, { "from": 6497765395, "to": 6469031424, "type": "CALL" }, { "from": 6497765432, "to": 6537296576, "type": "CALL" }, { "from": 6497765475, "to": 6470173632, "type": "CALL" }, { "from": 6497765526, "to": 6476769072, "type": "CALL" }, { "from": 6497765542, "to": 6456773264, "type": "CALL" }, { "from": 6497765617, "to": 6469032160, "type": "CALL" }, { "from": 6497765661, "to": 6511512544, "type": "CALL" }, { "from": 6497765705, "to": 6511512544, "type": "CALL" }, { "from": 6497765729, "to": 6497766097, "type": "CODE" }, { "from": 6497765763, "to": 6497765734, "type": "CODE" }, { "from": 6497765779, "to": 6497765751, "type": "CODE" }, { "from": 6497765874, "to": 6445460800, "type": "CALL" }, { "from": 6497766004, "to": 6469032160, "type": "CALL" }, { "from": 6497766038, "to": 6511512544, "type": "CALL" }, { "from": 6497766072, "to": 6511512544, "type": "CALL" }, { "from": 6497766119, "to": 6542435920, "type": "CALL" }, { "from": 6497766207, "to": 6542436672, "type": "CALL" }, { "from": 6497766267, "to": 6527001952, "type": "CALL" }, { "from": 6497766352, "to": 6497765784, "type": "CODE" }, { "from": 6497766378, "to": 6542067384, "type": "CALL" }, { "from": 6497766437, "to": 6497766166, "type": "CODE" }, { "from": 6497766445, "to": 6497765834, "type": "CODE" }, { "from": 6497766459, "to": 6511730640, "type": "CALL" }, { "from": 6497766479, "to": 6511730640, "type": "CALL" }, { "from": 6497766541, "to": 6445488624, "type": "CALL" }, { "from": 6497766549, "to": 6476511472, "type": "CALL" }, { "from": 6497766599, "to": 6445488624, "type": "CALL" }, { "from": 6497766644, "to": 6470173632, "type": "CALL" }, { "from": 6497766687, "to": 6470173632, "type": "CALL" }, { "from": 6497766699, "to": 6511730640, "type": "CALL" }, { "from": 6497766715, "to": 6511730640, "type": "CALL" }, { "from": 6497766733, "to": 6497766747, "type": "CODE" }, { "from": 6497766788, "to": 6469030976, "type": "CALL" }, { "from": 6497766810, "to": 6515312816, "type": "CALL" }, { "from": 6497766822, "to": 6497766861, "type": "CODE" }, { "from": 6497766853, "to": 6449418528, "type": "CALL" }, { "from": 6497766903, "to": 6445488624, "type": "CALL" }, { "from": 6497766924, "to": 6740346544, "type": "CALL" }, { "from": 6497766939, "to": 6607968192, "type": "CALL" }, { "from": 6497766949, "to": 6542067384, "type": "CALL" }, { "from": 6497766972, "to": 6469031744, "type": "CALL" }, { "from": 6497766991, "to": 6466379616, "type": "CALL" }, { "from": 6497767001, "to": 6542067384, "type": "CALL" }, { "from": 6497767047, "to": 6511423872, "type": "CALL" }, { "from": 6497767078, "to": 6466379616, "type": "CALL" }, { "from": 6497767088, "to": 6542067384, "type": "CALL" }, { "from": 6497767261, "to": 6469965760, "type": "CALL" }, { "from": 6497767315, "to": 6511512544, "type": "CALL" }, { "from": 6497767424, "to": 6469965760, "type": "CALL" }, { "from": 6497767478, "to": 6511512544, "type": "CALL" }, { "from": 6497767585, "to": 6469965760, "type": "CALL" }, { "from": 6497767636, "to": 6511512544, "type": "CALL" }, { "from": 6497767657, "to": 6469032704, "type": "CALL" }, { "from": 6497767667, "to": 6542067384, "type": "CALL" }, { "from": 6497767678, "to": 6610315168, "type": "CALL" }, { "from": 6497767694, "to": 6469032704, "type": "CALL" }, { "from": 6497767704, "to": 6542067384, "type": "CALL" }, { "from": 6497767742, "to": 6469032704, "type": "CALL" }, { "from": 6497767814, "to": 6542089024, "type": "CALL" }, { "from": 6497767819, "to": 6542702416, "type": "CALL" }, { "from": 6497767824, "to": 6546093472, "type": "CALL" }, { "from": 6497767840, "to": 6497767864, "type": "CODE" }, { "from": 6497767892, "to": 6497765879, "type": "CODE" }, { "from": 6497767899, "to": 6497766484, "type": "CODE" } ], "datarefs": [ { "from": 6497765105, "to": 6740709440, "type": "DATA" }, { "from": 6497765133, "to": 6711261848, "type": "DATA" }, { "from": 6497765149, "to": 6741126408, "type": "DATA" }, { "from": 6497765174, "to": 6711310344, "type": "DATA" }, { "from": 6497765184, "to": 6707179856, "type": "DATA" }, { "from": 6497765232, "to": 6722424320, "type": "DATA" }, { "from": 6497765267, "to": 6722424328, "type": "DATA" }, { "from": 6497765284, "to": 6722424320, "type": "DATA" }, { "from": 6497765400, "to": 6720002224, "type": "DATA" }, { "from": 6497765437, "to": 6712105968, "type": "DATA" }, { "from": 6497765588, "to": 6719931464, "type": "DATA" }, { "from": 6497765710, "to": 6722677136, "type": "DATA" }, { "from": 6497766081, "to": 6722678288, "type": "DATA" }, { "from": 6497766237, "to": 6742256144, "type": "DATA" }, { "from": 6497766452, "to": 6741141072, "type": "DATA" }, { "from": 6497766472, "to": 6741073064, "type": "DATA" }, { "from": 6497766509, "to": 6722679608, "type": "DATA" }, { "from": 6497766567, "to": 6722679632, "type": "DATA" }, { "from": 6497766604, "to": 6720002096, "type": "DATA" }, { "from": 6497766649, "to": 6720002136, "type": "DATA" }, { "from": 6497766692, "to": 6741141072, "type": "DATA" }, { "from": 6497766708, "to": 6741073096, "type": "DATA" }, { "from": 6497766726, "to": 6712105968, "type": "DATA" }, { "from": 6497766740, "to": 6719341536, "type": "DATA" }, { "from": 6497766762, "to": 6722416704, "type": "DATA" }, { "from": 6497766793, "to": 6742247160, "type": "DATA" }, { "from": 6497766800, "to": 6715570248, "type": "DATA" }, { "from": 6497766824, "to": 6722679656, "type": "DATA" }, { "from": 6497766874, "to": 6722679712, "type": "DATA" }, { "from": 6497767009, "to": 6706767008, "type": "DATA" }, { "from": 6497767035, "to": 6741126408, "type": "DATA" }, { "from": 6497767107, "to": 6706811376, "type": "DATA" }, { "from": 6497767146, "to": 6722677072, "type": "DATA" }, { "from": 6497767232, "to": 6712114780, "type": "DATA" }, { "from": 6497767332, "to": 6722677088, "type": "DATA" }, { "from": 6497767359, "to": 6722677088, "type": "DATA" }, { "from": 6497767495, "to": 6722677112, "type": "DATA" }, { "from": 6497767522, "to": 6722677112, "type": "DATA" }, { "from": 6497767721, "to": 6707179824, "type": "DATA" }, { "from": 6497767758, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190b00e00", "offset": 279970304, "ascii": "bookmarks", "wide": null }, { "va": "0x1908a0448", "offset": 277477448, "ascii": "undoDescription", "wide": null }, { "va": "0x190b3ee10", "offset": 280224272, "ascii": "addBookmarkTitle", "wide": null }, { "va": "0x190b3f338", "offset": 280225592, "ascii": "menuSimplification", "wide": null }, { "va": "0x190b3f350", "offset": 280225616, "ascii": "isIsolatedModeEnabled", "wide": null }, { "va": "0x1908b1830", "offset": 277548080, "ascii": "images/batch_upload_bookmarks_promo.svg", "wide": null }, { "va": "0x1908b1858", "offset": 277548120, "ascii": "images/batch_upload_bookmarks_promo_dark.svg", "wide": null }, { "va": "0x1908103e0", "offset": 276887520, "ascii": "webui-refresh-2026", "wide": null }, { "va": "0x190aff040", "offset": 279962688, "ascii": "webuiRefresh2026", "wide": null }, { "va": "0x190477848", "offset": 273116232, "ascii": "browser-test", "wide": null }, { "va": "0x190b3f368", "offset": 280225640, "ascii": "use-chrome-bookmark-manager-for-tab-browser-tests", "wide": null }, { "va": "0x190b3f3a0", "offset": 280225696, "ascii": "allowAccountBookmarkUploadForTesting", "wide": null }, { "va": "0x190b3e950", "offset": 280223056, "ascii": "listChanged", "wide": null }, { "va": "0x190b3e960", "offset": 280223072, "ascii": "toastItemsDeleted", "wide": null }, { "va": "0x190b3e978", "offset": 280223096, "ascii": "toastItemsCopied", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 24478 }, { "label": "p-browser-start-services", "file": "rea-p-browser-start-services.json", "file_sha256": "795b021c467039bd645e1573c6b15805c60d5ac65edc04a293ca5212f1f32824", "status": "completed", "evidence_id": "ev_dd06869c16894845f6492a31a97156a7031db8b4b327167bec3e6e571d1d195c", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18334eb30;pdgo @ 0x18334eb30;afij @ 0x18334eb30", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18334eb30", "size": 3316, "nargs": 2, "signature": "fcn.18334eb30(int64_t arg1, int64_t arg_70h);", "callrefs": [ { "from": 6496250735, "to": 6474303664, "type": "CALL" }, { "from": 6496250747, "to": 6491234688, "type": "CALL" }, { "from": 6496250801, "to": 6542067384, "type": "CALL" }, { "from": 6496250941, "to": 6542067384, "type": "CALL" }, { "from": 6496250995, "to": 6542436672, "type": "CALL" }, { "from": 6496251042, "to": 6511512544, "type": "CALL" }, { "from": 6496251093, "to": 6542067384, "type": "CALL" }, { "from": 6496251110, "to": 6486354400, "type": "CALL" }, { "from": 6496251194, "to": 6542067384, "type": "CALL" }, { "from": 6496251248, "to": 6542436672, "type": "CALL" }, { "from": 6496251295, "to": 6511512544, "type": "CALL" }, { "from": 6496251330, "to": 6542067384, "type": "CALL" }, { "from": 6496251379, "to": 6487982496, "type": "CALL" }, { "from": 6496251408, "to": 6491076480, "type": "CALL" }, { "from": 6496251458, "to": 6740379656, "type": "CALL" }, { "from": 6496251515, "to": 6542067384, "type": "CALL" }, { "from": 6496251574, "to": 6473203696, "type": "CALL" }, { "from": 6496251628, "to": 6466401008, "type": "CALL" }, { "from": 6496251660, "to": 6532643840, "type": "CALL" }, { "from": 6496251791, "to": 6496251891, "type": "CODE" }, { "from": 6496251796, "to": 6740346544, "type": "CALL" }, { "from": 6496251805, "to": 6496251510, "type": "CODE" }, { "from": 6496251820, "to": 6740346544, "type": "CALL" }, { "from": 6496251834, "to": 6496252035, "type": "CODE" }, { "from": 6496251845, "to": 6496251882, "type": "CODE" }, { "from": 6496251864, "to": 6542434064, "type": "CALL" }, { "from": 6496251909, "to": 6496251851, "type": "CODE" }, { "from": 6496251916, "to": 6542067384, "type": "CALL" }, { "from": 6496251972, "to": 6542067384, "type": "CALL" }, { "from": 6496251986, "to": 6484997296, "type": "CALL" }, { "from": 6496252008, "to": 6496253965, "type": "CODE" }, { "from": 6496252030, "to": 6595235264, "type": "CALL" }, { "from": 6496252035, "to": 6490185584, "type": "CALL" }, { "from": 6496252040, "to": 6479155856, "type": "CALL" }, { "from": 6496252048, "to": 6478823776, "type": "CALL" }, { "from": 6496252081, "to": 6511423872, "type": "CALL" }, { "from": 6496252113, "to": 6502815008, "type": "CALL" }, { "from": 6496252139, "to": 6542067384, "type": "CALL" }, { "from": 6496252152, "to": 6542067384, "type": "CALL" }, { "from": 6496252163, "to": 6492115872, "type": "CALL" }, { "from": 6496252171, "to": 6475685440, "type": "CALL" }, { "from": 6496252223, "to": 6475685360, "type": "CALL" }, { "from": 6496252301, "to": 6478366192, "type": "CALL" }, { "from": 6496252330, "to": 6486917472, "type": "CALL" }, { "from": 6496252367, "to": 6542067384, "type": "CALL" }, { "from": 6496252525, "to": 6511423872, "type": "CALL" }, { "from": 6496252553, "to": 6542067384, "type": "CALL" }, { "from": 6496252638, "to": 6740346544, "type": "CALL" }, { "from": 6496252652, "to": 6490665504, "type": "CALL" }, { "from": 6496252690, "to": 6740346544, "type": "CALL" }, { "from": 6496252701, "to": 6542067384, "type": "CALL" }, { "from": 6496252712, "to": 6490747536, "type": "CALL" }, { "from": 6496252741, "to": 6490747872, "type": "CALL" }, { "from": 6496252770, "to": 6462236224, "type": "CALL" }, { "from": 6496252775, "to": 6443187296, "type": "CALL" }, { "from": 6496252791, "to": 6474141360, "type": "CALL" }, { "from": 6496252809, "to": 6490130368, "type": "CALL" }, { "from": 6496252866, "to": 6542067384, "type": "CALL" }, { "from": 6496252934, "to": 6512942288, "type": "CALL" }, { "from": 6496252962, "to": 6740346544, "type": "CALL" }, { "from": 6496252975, "to": 6511730640, "type": "CALL" }, { "from": 6496253000, "to": 6542067384, "type": "CALL" }, { "from": 6496253014, "to": 6501725696, "type": "CALL" }, { "from": 6496253043, "to": 6501731424, "type": "CALL" }, { "from": 6496253058, "to": 6501727632, "type": "CALL" }, { "from": 6496253099, "to": 6481189904, "type": "CALL" }, { "from": 6496253132, "to": 6486935408, "type": "CALL" }, { "from": 6496253157, "to": 6511512544, "type": "CALL" }, { "from": 6496253263, "to": 6511512544, "type": "CALL" }, { "from": 6496253338, "to": 6608314800, "type": "CALL" }, { "from": 6496253348, "to": 6542067384, "type": "CALL" }, { "from": 6496253393, "to": 6542067384, "type": "CALL" }, { "from": 6496253412, "to": 6608298112, "type": "CALL" }, { "from": 6496253445, "to": 6608299776, "type": "CALL" }, { "from": 6496253450, "to": 6496252814, "type": "CODE" }, { "from": 6496253474, "to": 6595239488, "type": "CALL" }, { "from": 6496253479, "to": 6496250782, "type": "CODE" }, { "from": 6496253510, "to": 6513050896, "type": "CALL" }, { "from": 6496253515, "to": 6496253291, "type": "CODE" }, { "from": 6496253549, "to": 6513050896, "type": "CALL" }, { "from": 6496253554, "to": 6496250735, "type": "CODE" }, { "from": 6496253570, "to": 6542089024, "type": "CALL" }, { "from": 6496253575, "to": 6545792064, "type": "CALL" }, { "from": 6496253580, "to": 6543271376, "type": "CALL" }, { "from": 6496253612, "to": 6496251047, "type": "CODE" }, { "from": 6496253643, "to": 6496251300, "type": "CODE" }, { "from": 6496253650, "to": 6496250949, "type": "CODE" }, { "from": 6496253657, "to": 6496251202, "type": "CODE" }, { "from": 6496253668, "to": 6442840976, "type": "CALL" }, { "from": 6496253673, "to": 6496252109, "type": "CODE" }, { "from": 6496253690, "to": 6511423872, "type": "CALL" }, { "from": 6496253695, "to": 6496250838, "type": "CODE" }, { "from": 6496253700, "to": 6478068464, "type": "CALL" }, { "from": 6496253708, "to": 6496253122, "type": "CODE" }, { "from": 6496253724, "to": 6740346544, "type": "CALL" }, { "from": 6496253730, "to": 6496252134, "type": "CODE" }, { "from": 6496253735, "to": 6467129088, "type": "CALL" }, { "from": 6496253756, "to": 6542884512, "type": "CALL" }, { "from": 6496253776, "to": 6496251599, "type": "CODE" }, { "from": 6496253781, "to": 6467129088, "type": "CALL" }, { "from": 6496253802, "to": 6542884512, "type": "CALL" }, { "from": 6496253832, "to": 6496252272, "type": "CODE" }, { "from": 6496253848, "to": 6740346544, "type": "CALL" }, { "from": 6496253854, "to": 6496253227, "type": "CODE" }, { "from": 6496253871, "to": 6740346544, "type": "CALL" }, { "from": 6496253912, "to": 6740346544, "type": "CALL" }, { "from": 6496253918, "to": 6496252362, "type": "CODE" }, { "from": 6496253960, "to": 6496251505, "type": "CODE" }, { "from": 6496253970, "to": 6491069920, "type": "CALL" }, { "from": 6496253979, "to": 6496252319, "type": "CODE" } ], "datarefs": [ { "from": 6496250694, "to": 6740709440, "type": "DATA" }, { "from": 6496250721, "to": 6742233702, "type": "DATA" }, { "from": 6496250809, "to": 6709788712, "type": "DATA" }, { "from": 6496250825, "to": 6741126408, "type": "DATA" }, { "from": 6496251420, "to": 6741125872, "type": "DATA" }, { "from": 6496251427, "to": 6537033840, "type": "DATA" }, { "from": 6496251526, "to": 6489852736, "type": "DATA" }, { "from": 6496251537, "to": 6488393984, "type": "DATA" }, { "from": 6496251548, "to": 6511490512, "type": "DATA" }, { "from": 6496251583, "to": 6742138664, "type": "DATA" }, { "from": 6496251637, "to": 6719534736, "type": "DATA" }, { "from": 6496251748, "to": 6512483600, "type": "DATA" }, { "from": 6496251930, "to": 6443187264, "type": "DATA" }, { "from": 6496251941, "to": 6488393984, "type": "DATA" }, { "from": 6496251956, "to": 6467129088, "type": "DATA" }, { "from": 6496252069, "to": 6741126408, "type": "DATA" }, { "from": 6496252096, "to": 6741126408, "type": "DATA" }, { "from": 6496252118, "to": 6742373376, "type": "DATA" }, { "from": 6496252176, "to": 6709296320, "type": "DATA" }, { "from": 6496252228, "to": 6742373376, "type": "DATA" }, { "from": 6496252256, "to": 6742138664, "type": "DATA" }, { "from": 6496252437, "to": 6742359528, "type": "DATA" }, { "from": 6496252451, "to": 6709727840, "type": "DATA" }, { "from": 6496252461, "to": 6709773000, "type": "DATA" }, { "from": 6496252513, "to": 6741126408, "type": "DATA" }, { "from": 6496252814, "to": 6741832416, "type": "DATA" }, { "from": 6496252880, "to": 6496254000, "type": "DATA" }, { "from": 6496252891, "to": 6454368560, "type": "DATA" }, { "from": 6496252906, "to": 6719535176, "type": "DATA" }, { "from": 6496252913, "to": 6719534840, "type": "DATA" }, { "from": 6496252968, "to": 6741280328, "type": "DATA" }, { "from": 6496253277, "to": 6742233702, "type": "DATA" }, { "from": 6496253302, "to": 6740709440, "type": "DATA" }, { "from": 6496253362, "to": 6595240784, "type": "DATA" }, { "from": 6496253373, "to": 6545669488, "type": "DATA" }, { "from": 6496253523, "to": 6719535368, "type": "DATA" }, { "from": 6496253740, "to": 6742138664, "type": "DATA" }, { "from": 6496253769, "to": 6742138664, "type": "DATA" }, { "from": 6496253786, "to": 6742138664, "type": "DATA" }, { "from": 6496253815, "to": 6742138664, "type": "DATA" }, { "from": 6496253923, "to": 6742234664, "type": "DATA" } ] }, "strings": [ { "va": "0x19083f690", "offset": 277080720, "ascii": "browser.default_browser_setting_enabled", "wide": null }, { "va": "0x19083f848", "offset": 277081160, "ascii": "PreMainMessageLoopRun", "wide": null }, { "va": "0x19083f6f8", "offset": 277080824, "ascii": "..\\..\\chrome\\browser\\browser_process_impl.cc", "wide": null }, { "va": "0x19083f908", "offset": 277081352, "ascii": "BrowserProcessImpl::PreMainMessageLoopRun", "wide": null } ], "imports": [ { "at": "0x18334ee42", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 30788 }, { "label": "p-content-pdf-overlay", "file": "rea-p-content-pdf-overlay.json", "file_sha256": "225f5b45442ccbe6538b7fe4d4572c2f7f429d27803638627c278d3fa9dcd49c", "status": "completed", "evidence_id": "ev_1b7bc29d758a569b7aca2f980bf6f4e975509976724bd84ba77cc933a031a71a", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836dfce0;pdgo @ 0x1836dfce0;afij @ 0x1836dfce0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836dfce0", "size": 4533, "nargs": 3, "signature": "fcn.1836dfce0(int64_t arg1, int64_t arg2, int64_t arg_2d7h);", "callrefs": [ { "from": 6499990846, "to": 6502378832, "type": "CALL" }, { "from": 6499991081, "to": 6464405264, "type": "CALL" }, { "from": 6499991285, "to": 6740346544, "type": "CALL" }, { "from": 6499991371, "to": 6445650832, "type": "CALL" }, { "from": 6499991397, "to": 6524031184, "type": "CALL" }, { "from": 6499991444, "to": 6542435920, "type": "CALL" }, { "from": 6499991458, "to": 6524031184, "type": "CALL" }, { "from": 6499991512, "to": 6524031184, "type": "CALL" }, { "from": 6499991525, "to": 6447366432, "type": "CALL" }, { "from": 6499991631, "to": 6499995296, "type": "CALL" }, { "from": 6499991683, "to": 6442840976, "type": "CALL" }, { "from": 6499991708, "to": 6499992056, "type": "CODE" }, { "from": 6499991744, "to": 6740346544, "type": "CALL" }, { "from": 6499991775, "to": 6740346544, "type": "CALL" }, { "from": 6499991784, "to": 6499955440, "type": "CALL" }, { "from": 6499991872, "to": 6740346544, "type": "CALL" }, { "from": 6499991979, "to": 6499995296, "type": "CALL" }, { "from": 6499992031, "to": 6442840976, "type": "CALL" }, { "from": 6499992072, "to": 6442840976, "type": "CALL" }, { "from": 6499992077, "to": 6499992301, "type": "CODE" }, { "from": 6499992087, "to": 6542067384, "type": "CALL" }, { "from": 6499992239, "to": 6587959616, "type": "CALL" }, { "from": 6499992287, "to": 6587967968, "type": "CALL" }, { "from": 6499992351, "to": 6511512544, "type": "CALL" }, { "from": 6499992499, "to": 6499992233, "type": "CODE" }, { "from": 6499992552, "to": 6457900480, "type": "CALL" }, { "from": 6499992562, "to": 6485318848, "type": "CALL" }, { "from": 6499992576, "to": 6587962400, "type": "CALL" }, { "from": 6499992624, "to": 6587967968, "type": "CALL" }, { "from": 6499992638, "to": 6499991984, "type": "CODE" }, { "from": 6499992724, "to": 6499992233, "type": "CODE" }, { "from": 6499992734, "to": 6542067384, "type": "CALL" }, { "from": 6499992860, "to": 6499992233, "type": "CODE" }, { "from": 6499992870, "to": 6542067384, "type": "CALL" }, { "from": 6499993007, "to": 6499992233, "type": "CODE" }, { "from": 6499993078, "to": 6511512544, "type": "CALL" }, { "from": 6499993083, "to": 6499993397, "type": "CODE" }, { "from": 6499993157, "to": 6511730640, "type": "CALL" }, { "from": 6499993224, "to": 6740346544, "type": "CALL" }, { "from": 6499993254, "to": 6740346544, "type": "CALL" }, { "from": 6499993286, "to": 6499993331, "type": "CODE" }, { "from": 6499993299, "to": 6740346544, "type": "CALL" }, { "from": 6499993317, "to": 6499999920, "type": "CALL" }, { "from": 6499993354, "to": 6740346544, "type": "CALL" }, { "from": 6499993365, "to": 6499993288, "type": "CODE" }, { "from": 6499993470, "to": 6511423872, "type": "CALL" }, { "from": 6499993509, "to": 6511423872, "type": "CALL" }, { "from": 6499993564, "to": 6442840976, "type": "CALL" }, { "from": 6499993604, "to": 6442840976, "type": "CALL" }, { "from": 6499993621, "to": 6499991305, "type": "CODE" }, { "from": 6499993636, "to": 6740346544, "type": "CALL" }, { "from": 6499993667, "to": 6740346544, "type": "CALL" }, { "from": 6499993749, "to": 6499954832, "type": "CALL" }, { "from": 6499993922, "to": 6524265776, "type": "CALL" }, { "from": 6499993947, "to": 6511396000, "type": "CALL" }, { "from": 6499994036, "to": 6499954832, "type": "CALL" }, { "from": 6499994082, "to": 6499994227, "type": "CODE" }, { "from": 6499994106, "to": 6499993900, "type": "CODE" }, { "from": 6499994205, "to": 6524265776, "type": "CALL" }, { "from": 6499994289, "to": 6499994193, "type": "CODE" }, { "from": 6499994329, "to": 6511396000, "type": "CALL" }, { "from": 6499994347, "to": 6499955440, "type": "CALL" }, { "from": 6499994377, "to": 6511423872, "type": "CALL" }, { "from": 6499994406, "to": 6511423872, "type": "CALL" }, { "from": 6499994414, "to": 6499994422, "type": "CODE" }, { "from": 6499994465, "to": 6442840976, "type": "CALL" }, { "from": 6499994501, "to": 6442840976, "type": "CALL" }, { "from": 6499994514, "to": 6499994634, "type": "CODE" }, { "from": 6499994543, "to": 6442840976, "type": "CALL" }, { "from": 6499994583, "to": 6442840976, "type": "CALL" }, { "from": 6499994608, "to": 6499994640, "type": "CODE" }, { "from": 6499994671, "to": 6442840976, "type": "CALL" }, { "from": 6499994691, "to": 6442840976, "type": "CALL" }, { "from": 6499994705, "to": 6499991297, "type": "CODE" }, { "from": 6499994725, "to": 6740346544, "type": "CALL" }, { "from": 6499994819, "to": 6457900480, "type": "CALL" }, { "from": 6499994829, "to": 6485318848, "type": "CALL" }, { "from": 6499994843, "to": 6587962400, "type": "CALL" }, { "from": 6499994891, "to": 6587967968, "type": "CALL" }, { "from": 6499994905, "to": 6499991636, "type": "CODE" }, { "from": 6499994976, "to": 6445650832, "type": "CALL" }, { "from": 6499995002, "to": 6524031184, "type": "CALL" }, { "from": 6499995039, "to": 6524031184, "type": "CALL" }, { "from": 6499995060, "to": 6524031184, "type": "CALL" }, { "from": 6499995068, "to": 6447366432, "type": "CALL" }, { "from": 6499995111, "to": 6542067384, "type": "CALL" }, { "from": 6499995190, "to": 6542436672, "type": "CALL" }, { "from": 6499995211, "to": 6587959616, "type": "CALL" }, { "from": 6499995216, "to": 6499994848, "type": "CODE" }, { "from": 6499995232, "to": 6542089024, "type": "CALL" }, { "from": 6499995244, "to": 6543545728, "type": "CALL" }, { "from": 6499995275, "to": 6642723488, "type": "CALL" }, { "from": 6499995280, "to": 6499991336, "type": "CODE" } ], "datarefs": [ { "from": 6499990779, "to": 6740709440, "type": "DATA" }, { "from": 6499991250, "to": 6499999280, "type": "DATA" }, { "from": 6499991305, "to": 6742246872, "type": "DATA" }, { "from": 6499991323, "to": 6742246848, "type": "DATA" }, { "from": 6499991344, "to": 6723552192, "type": "DATA" }, { "from": 6499991384, "to": 6723555104, "type": "DATA" }, { "from": 6499991405, "to": 6723555184, "type": "DATA" }, { "from": 6499991412, "to": 6723555200, "type": "DATA" }, { "from": 6499991426, "to": 6723555160, "type": "DATA" }, { "from": 6499991485, "to": 6723555208, "type": "DATA" }, { "from": 6499991492, "to": 6722769992, "type": "DATA" }, { "from": 6499991674, "to": 6741126408, "type": "DATA" }, { "from": 6499991837, "to": 6499998816, "type": "DATA" }, { "from": 6499992022, "to": 6741126408, "type": "DATA" }, { "from": 6499992059, "to": 6741126408, "type": "DATA" }, { "from": 6499992147, "to": 6723554768, "type": "DATA" }, { "from": 6499992176, "to": 6723554812, "type": "DATA" }, { "from": 6499992187, "to": 6723554800, "type": "DATA" }, { "from": 6499992198, "to": 6723554784, "type": "DATA" }, { "from": 6499992255, "to": 6587963136, "type": "DATA" }, { "from": 6499992280, "to": 6545109024, "type": "DATA" }, { "from": 6499992367, "to": 6740709440, "type": "DATA" }, { "from": 6499992426, "to": 6716742096, "type": "DATA" }, { "from": 6499992461, "to": 6716742112, "type": "DATA" }, { "from": 6499992592, "to": 6587963136, "type": "DATA" }, { "from": 6499992617, "to": 6545109024, "type": "DATA" }, { "from": 6499992655, "to": 6722732536, "type": "DATA" }, { "from": 6499992690, "to": 6722732541, "type": "DATA" }, { "from": 6499992709, "to": 6722732536, "type": "DATA" }, { "from": 6499992790, "to": 6723554832, "type": "DATA" }, { "from": 6499992819, "to": 6723554848, "type": "DATA" }, { "from": 6499992930, "to": 6723554872, "type": "DATA" }, { "from": 6499992959, "to": 6723554904, "type": "DATA" }, { "from": 6499992970, "to": 6723554888, "type": "DATA" }, { "from": 6499993141, "to": 6741068360, "type": "DATA" }, { "from": 6499993150, "to": 6741068184, "type": "DATA" }, { "from": 6499993189, "to": 6500000240, "type": "DATA" }, { "from": 6499993458, "to": 6741126408, "type": "DATA" }, { "from": 6499993497, "to": 6741126408, "type": "DATA" }, { "from": 6499993555, "to": 6741126408, "type": "DATA" }, { "from": 6499993595, "to": 6741126408, "type": "DATA" }, { "from": 6499993766, "to": 6717684984, "type": "DATA" }, { "from": 6499994241, "to": 6723551968, "type": "DATA" }, { "from": 6499994362, "to": 6741126408, "type": "DATA" }, { "from": 6499994382, "to": 6741126408, "type": "DATA" }, { "from": 6499994456, "to": 6741126408, "type": "DATA" }, { "from": 6499994492, "to": 6741126408, "type": "DATA" }, { "from": 6499994534, "to": 6741126408, "type": "DATA" }, { "from": 6499994574, "to": 6741126408, "type": "DATA" }, { "from": 6499994659, "to": 6741126408, "type": "DATA" }, { "from": 6499994679, "to": 6741126408, "type": "DATA" }, { "from": 6499994764, "to": 6718493896, "type": "DATA" }, { "from": 6499994775, "to": 6718493903, "type": "DATA" }, { "from": 6499994859, "to": 6587963136, "type": "DATA" }, { "from": 6499994884, "to": 6545109024, "type": "DATA" }, { "from": 6499994910, "to": 6742246848, "type": "DATA" }, { "from": 6499994927, "to": 6741126112, "type": "DATA" }, { "from": 6499994936, "to": 6742246856, "type": "DATA" }, { "from": 6499994946, "to": 6723552192, "type": "DATA" }, { "from": 6499994989, "to": 6723554928, "type": "DATA" }, { "from": 6499995007, "to": 6723554968, "type": "DATA" }, { "from": 6499995014, "to": 6723554980, "type": "DATA" }, { "from": 6499995044, "to": 6723554992, "type": "DATA" }, { "from": 6499995073, "to": 6723555016, "type": "DATA" }, { "from": 6499995080, "to": 6723555064, "type": "DATA" }, { "from": 6499995237, "to": 6712088560, "type": "DATA" }, { "from": 6499995249, "to": 6723552192, "type": "DATA" } ] }, "strings": [ { "va": "0x190c143c0", "offset": 281098176, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_content_extractor\\tab_content_extractor_api.cc", "wide": null }, { "va": "0x190c14f20", "offset": 281101088, "ascii": "TabContentExtractor PDF overlay: injecting into ", "wide": null }, { "va": "0x190c14f70", "offset": 281101168, "ascii": "Previewer ", "wide": null }, { "va": "0x190c14f80", "offset": 281101184, "ascii": "viewer ", "wide": null }, { "va": "0x190c14f58", "offset": 281101144, "ascii": "local Previewer ", "wide": null }, { "va": "0x190c14f88", "offset": 281101192, "ascii": "OOPIF", "wide": null }, { "va": "0x190b55448", "offset": 280315976, "ascii": "guest", "wide": null }, { "va": "0x190c14dd0", "offset": 281100752, "ascii": "Only the built-in Tab Translation extension may use this API", "wide": null }, { "va": "0x190c14dfc", "offset": 281100796, "ascii": "may use this API", "wide": null }, { "va": "0x190c14df0", "offset": 281100784, "ascii": "n extension may use this API", "wide": null }, { "va": "0x190c14de0", "offset": 281100768, "ascii": "n Tab Translation extension may use this API", "wide": null }, { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x190b4c1f8", "offset": 280278520, "ascii": "Tab not found", "wide": null }, { "va": "0x190b4c1fd", "offset": 280278525, "ascii": "ot found", "wide": null }, { "va": "0x190c14e10", "offset": 281100816, "ascii": "PDF Viewer script is out of bounds", "wide": null }, { "va": "0x190c14e20", "offset": 281100832, "ascii": "t is out of bounds", "wide": null }, { "va": "0x190c14e38", "offset": 281100856, "ascii": "previewer and htmlPreview select different frames", "wide": null }, { "va": "0x190c14e58", "offset": 281100888, "ascii": " different frames", "wide": null }, { "va": "0x190c14e48", "offset": 281100872, "ascii": "mlPreview select different frames", "wide": null }, { "va": "0x19067bcf8", "offset": 275230968, "ascii": ".pdf", "wide": null }, { "va": "0x1907414c8", "offset": 276039880, "ascii": "application/pdf", "wide": null }, { "va": "0x1907414cf", "offset": 276039887, "ascii": "tion/pdf", "wide": null }, { "va": "0x190c14e70", "offset": 281100912, "ascii": "TabContentExtractor PDF overlay: ", "wide": null }, { "va": "0x190c14e98", "offset": 281100952, "ascii": "Previewer", "wide": null }, { "va": "0x190c14ea4", "offset": 281100964, "ascii": "viewer", "wide": null }, { "va": "0x190c14eb0", "offset": 281100976, "ascii": " frame unavailable", "wide": null }, { "va": "0x190c14ec8", "offset": 281101000, "ascii": "Current PDF Previewer frame is unavailable", "wide": null }, { "va": "0x190c14ef8", "offset": 281101048, "ascii": "Current PDF Viewer frame is unavailable", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 48568 }, { "label": "p-content-run", "file": "rea-p-content-run.json", "file_sha256": "bd599d87f51f754536abe614d9fd5a45d963947b9529a77d02e356eb2b156d80", "status": "completed", "evidence_id": "ev_fecf3a70ccf88d9463cc5b24fe1e04628a5ddb368f57632d15c27a6d09344df4", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836d8030;pdgo @ 0x1836d8030;afij @ 0x1836d8030", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836d8030", "size": 5309, "nargs": 3, "signature": "fcn.1836d8030(int64_t arg1, int64_t arg2, int64_t arg_4fh);", "callrefs": [ { "from": 6499958930, "to": 6445650832, "type": "CALL" }, { "from": 6499958953, "to": 6524031184, "type": "CALL" }, { "from": 6499958975, "to": 6462379168, "type": "CALL" }, { "from": 6499958998, "to": 6445656528, "type": "CALL" }, { "from": 6499959060, "to": 6511512544, "type": "CALL" }, { "from": 6499959111, "to": 6511975280, "type": "CALL" }, { "from": 6499959119, "to": 6518967168, "type": "CALL" }, { "from": 6499959168, "to": 6502376880, "type": "CALL" }, { "from": 6499959247, "to": 6445650832, "type": "CALL" }, { "from": 6499959270, "to": 6524031184, "type": "CALL" }, { "from": 6499959313, "to": 6524031184, "type": "CALL" }, { "from": 6499959336, "to": 6445656528, "type": "CALL" }, { "from": 6499959398, "to": 6511512544, "type": "CALL" }, { "from": 6499959449, "to": 6511975280, "type": "CALL" }, { "from": 6499959457, "to": 6518967168, "type": "CALL" }, { "from": 6499959559, "to": 6445650832, "type": "CALL" }, { "from": 6499959585, "to": 6524031184, "type": "CALL" }, { "from": 6499959595, "to": 6446762512, "type": "CALL" }, { "from": 6499959615, "to": 6445656528, "type": "CALL" }, { "from": 6499959679, "to": 6511512544, "type": "CALL" }, { "from": 6499959730, "to": 6511975280, "type": "CALL" }, { "from": 6499959738, "to": 6518967168, "type": "CALL" }, { "from": 6499959872, "to": 6515567520, "type": "CALL" }, { "from": 6499959951, "to": 6445650832, "type": "CALL" }, { "from": 6499959974, "to": 6524031184, "type": "CALL" }, { "from": 6499960067, "to": 6524031184, "type": "CALL" }, { "from": 6499960090, "to": 6445656528, "type": "CALL" }, { "from": 6499960152, "to": 6511512544, "type": "CALL" }, { "from": 6499960203, "to": 6511975280, "type": "CALL" }, { "from": 6499960211, "to": 6518967168, "type": "CALL" }, { "from": 6499960291, "to": 6464405264, "type": "CALL" }, { "from": 6499960369, "to": 6740346544, "type": "CALL" }, { "from": 6499960381, "to": 6511751392, "type": "CALL" }, { "from": 6499960413, "to": 6511751392, "type": "CALL" }, { "from": 6499960448, "to": 6511751392, "type": "CALL" }, { "from": 6499960558, "to": 6542434064, "type": "CALL" }, { "from": 6499960568, "to": 6511396000, "type": "CALL" }, { "from": 6499960576, "to": 6511396000, "type": "CALL" }, { "from": 6499960597, "to": 6511396000, "type": "CALL" }, { "from": 6499960632, "to": 6511645120, "type": "CALL" }, { "from": 6499960711, "to": 6445650832, "type": "CALL" }, { "from": 6499960737, "to": 6524031184, "type": "CALL" }, { "from": 6499960756, "to": 6445656528, "type": "CALL" }, { "from": 6499960817, "to": 6511512544, "type": "CALL" }, { "from": 6499960868, "to": 6511975280, "type": "CALL" }, { "from": 6499960876, "to": 6518967168, "type": "CALL" }, { "from": 6499960911, "to": 6626689072, "type": "CALL" }, { "from": 6499960990, "to": 6445650832, "type": "CALL" }, { "from": 6499961016, "to": 6524031184, "type": "CALL" }, { "from": 6499961032, "to": 6480750288, "type": "CALL" }, { "from": 6499961051, "to": 6445656528, "type": "CALL" }, { "from": 6499961112, "to": 6511512544, "type": "CALL" }, { "from": 6499961163, "to": 6511975280, "type": "CALL" }, { "from": 6499961171, "to": 6518967168, "type": "CALL" }, { "from": 6499961242, "to": 6445650832, "type": "CALL" }, { "from": 6499961268, "to": 6524031184, "type": "CALL" }, { "from": 6499961287, "to": 6445656528, "type": "CALL" }, { "from": 6499961348, "to": 6511512544, "type": "CALL" }, { "from": 6499961399, "to": 6511975280, "type": "CALL" }, { "from": 6499961407, "to": 6518967168, "type": "CALL" }, { "from": 6499961420, "to": 6522230240, "type": "CALL" }, { "from": 6499961459, "to": 6542067384, "type": "CALL" }, { "from": 6499961560, "to": 6542067384, "type": "CALL" }, { "from": 6499961648, "to": 6499961688, "type": "CODE" }, { "from": 6499961657, "to": 6511513840, "type": "CALL" }, { "from": 6499961662, "to": 6499961555, "type": "CODE" }, { "from": 6499961683, "to": 6522337344, "type": "CALL" }, { "from": 6499961713, "to": 6512942288, "type": "CALL" }, { "from": 6499961723, "to": 6542067384, "type": "CALL" }, { "from": 6499961743, "to": 6542067384, "type": "CALL" }, { "from": 6499961813, "to": 6542067384, "type": "CALL" }, { "from": 6499961889, "to": 6511423872, "type": "CALL" }, { "from": 6499961929, "to": 6463429312, "type": "CALL" }, { "from": 6499961970, "to": 6511512544, "type": "CALL" }, { "from": 6499961983, "to": 6511396000, "type": "CALL" }, { "from": 6499962015, "to": 6511512544, "type": "CALL" }, { "from": 6499962051, "to": 6511396000, "type": "CALL" }, { "from": 6499962064, "to": 6511396000, "type": "CALL" }, { "from": 6499962074, "to": 6542067384, "type": "CALL" }, { "from": 6499962176, "to": 6542436672, "type": "CALL" }, { "from": 6499962200, "to": 6587959616, "type": "CALL" }, { "from": 6499962245, "to": 6587967968, "type": "CALL" }, { "from": 6499962266, "to": 6511396000, "type": "CALL" }, { "from": 6499962271, "to": 6499961975, "type": "CODE" }, { "from": 6499962365, "to": 6587959616, "type": "CALL" }, { "from": 6499962410, "to": 6587967968, "type": "CALL" }, { "from": 6499962423, "to": 6499961988, "type": "CODE" }, { "from": 6499962514, "to": 6587959616, "type": "CALL" }, { "from": 6499962559, "to": 6587967968, "type": "CALL" }, { "from": 6499962572, "to": 6499961975, "type": "CODE" }, { "from": 6499962601, "to": 6511645120, "type": "CALL" }, { "from": 6499962619, "to": 6542067384, "type": "CALL" }, { "from": 6499962744, "to": 6499962508, "type": "CODE" }, { "from": 6499962755, "to": 6499960061, "type": "CODE" }, { "from": 6499962770, "to": 6519178480, "type": "CALL" }, { "from": 6499962793, "to": 6529736720, "type": "CALL" }, { "from": 6499962810, "to": 6499963061, "type": "CODE" }, { "from": 6499962927, "to": 6542067384, "type": "CALL" }, { "from": 6499962963, "to": 6499962975, "type": "CODE" }, { "from": 6499963011, "to": 6542436672, "type": "CALL" }, { "from": 6499963044, "to": 6529736720, "type": "CALL" }, { "from": 6499963092, "to": 6587959616, "type": "CALL" }, { "from": 6499963140, "to": 6587967968, "type": "CALL" }, { "from": 6499963177, "to": 6499961970, "type": "CODE" }, { "from": 6499963208, "to": 6542434496, "type": "CALL" }, { "from": 6499963298, "to": 6534277856, "type": "CALL" }, { "from": 6499963306, "to": 6511396112, "type": "CALL" }, { "from": 6499963311, "to": 6499960418, "type": "CODE" }, { "from": 6499963340, "to": 6542434496, "type": "CALL" }, { "from": 6499963430, "to": 6534277856, "type": "CALL" }, { "from": 6499963438, "to": 6511396112, "type": "CALL" }, { "from": 6499963443, "to": 6499960453, "type": "CODE" }, { "from": 6499963453, "to": 6542067384, "type": "CALL" }, { "from": 6499963580, "to": 6587959616, "type": "CALL" }, { "from": 6499963625, "to": 6587967968, "type": "CALL" }, { "from": 6499963638, "to": 6499961941, "type": "CODE" }, { "from": 6499963650, "to": 6543545728, "type": "CALL" }, { "from": 6499963681, "to": 6642723488, "type": "CALL" }, { "from": 6499963686, "to": 6499958888, "type": "CODE" }, { "from": 6499963714, "to": 6642723488, "type": "CALL" }, { "from": 6499963719, "to": 6499959215, "type": "CODE" }, { "from": 6499963747, "to": 6642723488, "type": "CALL" }, { "from": 6499963752, "to": 6499959919, "type": "CODE" }, { "from": 6499963780, "to": 6642723488, "type": "CALL" }, { "from": 6499963785, "to": 6499960676, "type": "CODE" }, { "from": 6499963815, "to": 6740346544, "type": "CALL" }, { "from": 6499963821, "to": 6499959100, "type": "CODE" }, { "from": 6499963849, "to": 6642723488, "type": "CALL" }, { "from": 6499963854, "to": 6499960955, "type": "CODE" }, { "from": 6499963882, "to": 6642723488, "type": "CALL" }, { "from": 6499963887, "to": 6499961207, "type": "CODE" }, { "from": 6499963917, "to": 6740346544, "type": "CALL" }, { "from": 6499963923, "to": 6499959438, "type": "CODE" }, { "from": 6499963953, "to": 6740346544, "type": "CALL" }, { "from": 6499963959, "to": 6499960192, "type": "CODE" }, { "from": 6499963987, "to": 6642723488, "type": "CALL" }, { "from": 6499963992, "to": 6499959524, "type": "CODE" }, { "from": 6499964022, "to": 6740346544, "type": "CALL" }, { "from": 6499964028, "to": 6499960857, "type": "CODE" }, { "from": 6499964058, "to": 6740346544, "type": "CALL" }, { "from": 6499964064, "to": 6499961152, "type": "CODE" }, { "from": 6499964094, "to": 6740346544, "type": "CALL" }, { "from": 6499964100, "to": 6499961388, "type": "CODE" }, { "from": 6499964130, "to": 6740346544, "type": "CALL" }, { "from": 6499964136, "to": 6499959719, "type": "CODE" } ], "datarefs": [ { "from": 6499958857, "to": 6742246872, "type": "DATA" }, { "from": 6499958875, "to": 6742246848, "type": "DATA" }, { "from": 6499958906, "to": 6723552192, "type": "DATA" }, { "from": 6499958940, "to": 6723552632, "type": "DATA" }, { "from": 6499958980, "to": 6710367816, "type": "DATA" }, { "from": 6499959011, "to": 6708900496, "type": "DATA" }, { "from": 6499959023, "to": 6708923712, "type": "DATA" }, { "from": 6499959070, "to": 6708923824, "type": "DATA" }, { "from": 6499959084, "to": 6742217808, "type": "DATA" }, { "from": 6499959184, "to": 6742246872, "type": "DATA" }, { "from": 6499959202, "to": 6742246848, "type": "DATA" }, { "from": 6499959223, "to": 6723552192, "type": "DATA" }, { "from": 6499959257, "to": 6723552680, "type": "DATA" }, { "from": 6499959318, "to": 6710367816, "type": "DATA" }, { "from": 6499959349, "to": 6708900496, "type": "DATA" }, { "from": 6499959361, "to": 6708923712, "type": "DATA" }, { "from": 6499959408, "to": 6708923824, "type": "DATA" }, { "from": 6499959422, "to": 6742217808, "type": "DATA" }, { "from": 6499959493, "to": 6742246872, "type": "DATA" }, { "from": 6499959511, "to": 6742246848, "type": "DATA" }, { "from": 6499959532, "to": 6723552192, "type": "DATA" }, { "from": 6499959569, "to": 6723552712, "type": "DATA" }, { "from": 6499959600, "to": 6710367816, "type": "DATA" }, { "from": 6499959628, "to": 6708900496, "type": "DATA" }, { "from": 6499959640, "to": 6708923712, "type": "DATA" }, { "from": 6499959689, "to": 6708923824, "type": "DATA" }, { "from": 6499959703, "to": 6742217808, "type": "DATA" }, { "from": 6499959888, "to": 6742246872, "type": "DATA" }, { "from": 6499959906, "to": 6742246848, "type": "DATA" }, { "from": 6499959927, "to": 6723552192, "type": "DATA" }, { "from": 6499959961, "to": 6723552744, "type": "DATA" }, { "from": 6499960072, "to": 6710367816, "type": "DATA" }, { "from": 6499960103, "to": 6708900496, "type": "DATA" }, { "from": 6499960115, "to": 6708923712, "type": "DATA" }, { "from": 6499960162, "to": 6708923824, "type": "DATA" }, { "from": 6499960176, "to": 6742217808, "type": "DATA" }, { "from": 6499960225, "to": 6712687036, "type": "DATA" }, { "from": 6499960645, "to": 6742246872, "type": "DATA" }, { "from": 6499960663, "to": 6742246848, "type": "DATA" }, { "from": 6499960684, "to": 6723552192, "type": "DATA" }, { "from": 6499960721, "to": 6723552928, "type": "DATA" }, { "from": 6499960742, "to": 6710367816, "type": "DATA" }, { "from": 6499960768, "to": 6708900496, "type": "DATA" }, { "from": 6499960780, "to": 6708923712, "type": "DATA" }, { "from": 6499960827, "to": 6708923824, "type": "DATA" }, { "from": 6499960841, "to": 6742217808, "type": "DATA" }, { "from": 6499960924, "to": 6742246872, "type": "DATA" }, { "from": 6499960942, "to": 6742246848, "type": "DATA" }, { "from": 6499960963, "to": 6723552192, "type": "DATA" }, { "from": 6499961000, "to": 6723553008, "type": "DATA" }, { "from": 6499961037, "to": 6710367816, "type": "DATA" }, { "from": 6499961063, "to": 6708900496, "type": "DATA" }, { "from": 6499961075, "to": 6708923712, "type": "DATA" }, { "from": 6499961122, "to": 6708923824, "type": "DATA" }, { "from": 6499961136, "to": 6742217808, "type": "DATA" }, { "from": 6499961176, "to": 6742246872, "type": "DATA" }, { "from": 6499961194, "to": 6742246848, "type": "DATA" }, { "from": 6499961215, "to": 6723552192, "type": "DATA" }, { "from": 6499961252, "to": 6723553056, "type": "DATA" }, { "from": 6499961273, "to": 6710367816, "type": "DATA" }, { "from": 6499961299, "to": 6708900496, "type": "DATA" }, { "from": 6499961311, "to": 6708923712, "type": "DATA" }, { "from": 6499961358, "to": 6708923824, "type": "DATA" }, { "from": 6499961372, "to": 6742217808, "type": "DATA" }, { "from": 6499961473, "to": 6499997808, "type": "DATA" }, { "from": 6499961484, "to": 6499881168, "type": "DATA" }, { "from": 6499961495, "to": 6511490512, "type": "DATA" }, { "from": 6499961506, "to": 6499964144, "type": "DATA" }, { "from": 6499961574, "to": 6496878368, "type": "DATA" }, { "from": 6499961585, "to": 6488787248, "type": "DATA" }, { "from": 6499961600, "to": 6499956256, "type": "DATA" }, { "from": 6499961688, "to": 6713540648, "type": "DATA" }, { "from": 6499961695, "to": 6723552192, "type": "DATA" }, { "from": 6499961755, "to": 6462662976, "type": "DATA" }, { "from": 6499961766, "to": 6500000768, "type": "DATA" }, { "from": 6499961781, "to": 6500000272, "type": "DATA" }, { "from": 6499961823, "to": 6443185472, "type": "DATA" }, { "from": 6499961834, "to": 6496379968, "type": "DATA" }, { "from": 6499961849, "to": 6500000480, "type": "DATA" }, { "from": 6499961877, "to": 6741126408, "type": "DATA" }, { "from": 6499961909, "to": 6723553103, "type": "DATA" }, { "from": 6499962133, "to": 6723552816, "type": "DATA" }, { "from": 6499962160, "to": 6723552816, "type": "DATA" }, { "from": 6499962216, "to": 6587963136, "type": "DATA" }, { "from": 6499962238, "to": 6545109024, "type": "DATA" }, { "from": 6499962288, "to": 6716742096, "type": "DATA" }, { "from": 6499962323, "to": 6716742112, "type": "DATA" }, { "from": 6499962343, "to": 6716742096, "type": "DATA" }, { "from": 6499962381, "to": 6587963136, "type": "DATA" }, { "from": 6499962403, "to": 6545109024, "type": "DATA" }, { "from": 6499962440, "to": 6719702552, "type": "DATA" }, { "from": 6499962475, "to": 6719702559, "type": "DATA" }, { "from": 6499962493, "to": 6719702552, "type": "DATA" }, { "from": 6499962530, "to": 6587963136, "type": "DATA" }, { "from": 6499962552, "to": 6545109024, "type": "DATA" }, { "from": 6499962675, "to": 6723552888, "type": "DATA" }, { "from": 6499962704, "to": 6723552904, "type": "DATA" }, { "from": 6499962715, "to": 6723552888, "type": "DATA" }, { "from": 6499962775, "to": 6723552792, "type": "DATA" }, { "from": 6499963021, "to": 6723553112, "type": "DATA" }, { "from": 6499963108, "to": 6587963136, "type": "DATA" }, { "from": 6499963133, "to": 6545109024, "type": "DATA" }, { "from": 6499963254, "to": 6712084972, "type": "DATA" }, { "from": 6499963386, "to": 6712084972, "type": "DATA" }, { "from": 6499963509, "to": 6723552976, "type": "DATA" }, { "from": 6499963538, "to": 6723552976, "type": "DATA" }, { "from": 6499963596, "to": 6587963136, "type": "DATA" }, { "from": 6499963618, "to": 6545109024, "type": "DATA" }, { "from": 6499963643, "to": 6712088560, "type": "DATA" }, { "from": 6499963658, "to": 6723552192, "type": "DATA" }, { "from": 6499963691, "to": 6723552192, "type": "DATA" }, { "from": 6499963724, "to": 6723552192, "type": "DATA" }, { "from": 6499963757, "to": 6723552192, "type": "DATA" }, { "from": 6499963826, "to": 6723552192, "type": "DATA" }, { "from": 6499963859, "to": 6723552192, "type": "DATA" }, { "from": 6499963964, "to": 6723552192, "type": "DATA" } ] }, "strings": [ { "va": "0x190c143c0", "offset": 281098176, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_content_extractor\\tab_content_extractor_api.cc", "wide": null }, { "va": "0x190c14578", "offset": 281098616, "ascii": "TabContentExtractor: Run called, args size: ", "wide": null }, { "va": "0x190c145a8", "offset": 281098664, "ascii": "TabContentExtractor: URL = ", "wide": null }, { "va": "0x190c145c8", "offset": 281098696, "ascii": "TabContentExtractor: tabId = ", "wide": null }, { "va": "0x190c145e8", "offset": 281098728, "ascii": "TabContentExtractor: Valid URL, scheme: ", "wide": null }, { "va": "0x1901b79bc", "offset": 270233020, "ascii": "file", "wide": null }, { "va": "0x190c146a0", "offset": 281098912, "ascii": "TabContentExtractor: Processing file:// URL", "wide": null }, { "va": "0x190c146f0", "offset": 281098992, "ascii": "TabContentExtractor: File path resolved: ", "wide": null }, { "va": "0x190c14720", "offset": 281099040, "ascii": "TabContentExtractor: Posting ReadLocalFileTask", "wide": null }, { "va": "0x190288028", "offset": 271086632, "ascii": "Run", "wide": null }, { "va": "0x190c14630", "offset": 281098800, "ascii": "URL mismatch: The requested URL must match the Tab's current URL.", "wide": null }, { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x190868618", "offset": 277248536, "ascii": "Invalid URL", "wide": null }, { "va": "0x19086861f", "offset": 277248543, "ascii": " URL", "wide": null }, { "va": "0x190c14678", "offset": 281098872, "ascii": "tabId is required for non-file URLs", "wide": null }, { "va": "0x190c14688", "offset": 281098888, "ascii": "d for non-file URLs", "wide": null }, { "va": "0x190c14618", "offset": 281098776, "ascii": "Tab not found: ", "wide": null }, { "va": "0x190c14758", "offset": 281099096, "ascii": "Unsupported URL scheme: ", "wide": null }, { "va": "0x190c146d0", "offset": 281098960, "ascii": "Cannot resolve file path", "wide": null }, { "va": "0x1901257f0", "offset": 269634544, "ascii": "string_view::substr", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 47174 }, { "label": "p-diagnostic-collect", "file": "rea-p-diagnostic-collect.json", "file_sha256": "badc4f456b6984635d174d786b66f623b5d63f16b8876a8cbcea4e75810919a9", "status": "completed", "evidence_id": "ev_44314490cea83c319e1166c48f0baf3d7074158e15924d4c8b99e01c7f9ad8f6", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1835079f0;pdgo @ 0x1835079f0;afij @ 0x1835079f0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1835079f0", "size": 3271, "nargs": 2, "signature": "fcn.1835079f0(int64_t arg1, int64_t arg_38h);", "callrefs": [ { "from": 6498056824, "to": 6740346544, "type": "CALL" }, { "from": 6498056878, "to": 6740346544, "type": "CALL" }, { "from": 6498056884, "to": 6498056930, "type": "CODE" }, { "from": 6498056912, "to": 6442840976, "type": "CALL" }, { "from": 6498056925, "to": 6511512544, "type": "CALL" }, { "from": 6498056979, "to": 6542067384, "type": "CALL" }, { "from": 6498057080, "to": 6512942288, "type": "CALL" }, { "from": 6498057147, "to": 6517399712, "type": "CALL" }, { "from": 6498057179, "to": 6498057181, "type": "CODE" }, { "from": 6498057179, "to": 6498057333, "type": "CODE" }, { "from": 6498057179, "to": 6498057698, "type": "CODE" }, { "from": 6498057179, "to": 6498057774, "type": "CODE" }, { "from": 6498057179, "to": 6498057829, "type": "CODE" }, { "from": 6498057179, "to": 6498058885, "type": "CODE" }, { "from": 6498057225, "to": 6542067384, "type": "CALL" }, { "from": 6498057323, "to": 6461969648, "type": "CALL" }, { "from": 6498057328, "to": 6498057774, "type": "CODE" }, { "from": 6498057433, "to": 6512708384, "type": "CALL" }, { "from": 6498057493, "to": 6498058404, "type": "CODE" }, { "from": 6498057537, "to": 6560758224, "type": "CALL" }, { "from": 6498057542, "to": 6498057774, "type": "CODE" }, { "from": 6498057567, "to": 6740346544, "type": "CALL" }, { "from": 6498057599, "to": 6498060624, "type": "CALL" }, { "from": 6498057609, "to": 6498057769, "type": "CODE" }, { "from": 6498057651, "to": 6445826592, "type": "CALL" }, { "from": 6498057675, "to": 6517426816, "type": "CALL" }, { "from": 6498057691, "to": 6511512544, "type": "CALL" }, { "from": 6498057696, "to": 6498057764, "type": "CODE" }, { "from": 6498057710, "to": 6496026736, "type": "CALL" }, { "from": 6498057747, "to": 6446063536, "type": "CALL" }, { "from": 6498057769, "to": 6498060112, "type": "CALL" }, { "from": 6498057897, "to": 6740346544, "type": "CALL" }, { "from": 6498057984, "to": 6462089824, "type": "CALL" }, { "from": 6498058028, "to": 6524601072, "type": "CALL" }, { "from": 6498058070, "to": 6524601072, "type": "CALL" }, { "from": 6498058115, "to": 6445826592, "type": "CALL" }, { "from": 6498058153, "to": 6446063536, "type": "CALL" }, { "from": 6498058163, "to": 6498060112, "type": "CALL" }, { "from": 6498058218, "to": 6524603600, "type": "CALL" }, { "from": 6498058264, "to": 6511512544, "type": "CALL" }, { "from": 6498058269, "to": 6498057774, "type": "CODE" }, { "from": 6498058285, "to": 6517426816, "type": "CALL" }, { "from": 6498058301, "to": 6511512544, "type": "CALL" }, { "from": 6498058306, "to": 6498058176, "type": "CODE" }, { "from": 6498058333, "to": 6524603600, "type": "CALL" }, { "from": 6498058366, "to": 6498057687, "type": "CODE" }, { "from": 6498058379, "to": 6498058535, "type": "CODE" }, { "from": 6498058508, "to": 6456090784, "type": "CALL" }, { "from": 6498058597, "to": 6456090784, "type": "CALL" }, { "from": 6498058617, "to": 6462373904, "type": "CALL" }, { "from": 6498058663, "to": 6445282400, "type": "CALL" }, { "from": 6498058697, "to": 6511512544, "type": "CALL" }, { "from": 6498058743, "to": 6445488624, "type": "CALL" }, { "from": 6498058759, "to": 6462063728, "type": "CALL" }, { "from": 6498058800, "to": 6498058395, "type": "CODE" }, { "from": 6498058827, "to": 6524603600, "type": "CALL" }, { "from": 6498058864, "to": 6511512544, "type": "CALL" }, { "from": 6498058883, "to": 6498058774, "type": "CODE" }, { "from": 6498059021, "to": 6445282400, "type": "CALL" }, { "from": 6498059045, "to": 6511512544, "type": "CALL" }, { "from": 6498059058, "to": 6475583648, "type": "CALL" }, { "from": 6498059100, "to": 6445282400, "type": "CALL" }, { "from": 6498059124, "to": 6511512544, "type": "CALL" }, { "from": 6498059137, "to": 6469646816, "type": "CALL" }, { "from": 6498059179, "to": 6445282400, "type": "CALL" }, { "from": 6498059203, "to": 6511512544, "type": "CALL" }, { "from": 6498059218, "to": 6536786256, "type": "CALL" }, { "from": 6498059261, "to": 6524601072, "type": "CALL" }, { "from": 6498059280, "to": 6515312816, "type": "CALL" }, { "from": 6498059335, "to": 6740379000, "type": "CALL" }, { "from": 6498059407, "to": 6524601072, "type": "CALL" }, { "from": 6498059423, "to": 6446428896, "type": "CALL" }, { "from": 6498059490, "to": 6524601072, "type": "CALL" }, { "from": 6498059528, "to": 6446063536, "type": "CALL" }, { "from": 6498059538, "to": 6498060112, "type": "CALL" }, { "from": 6498059584, "to": 6524603600, "type": "CALL" }, { "from": 6498059595, "to": 6498058229, "type": "CODE" }, { "from": 6498059629, "to": 6740346544, "type": "CALL" }, { "from": 6498059635, "to": 6498057108, "type": "CODE" }, { "from": 6498059657, "to": 6511512544, "type": "CALL" }, { "from": 6498059662, "to": 6498057108, "type": "CODE" }, { "from": 6498059677, "to": 6511512544, "type": "CALL" }, { "from": 6498059682, "to": 6498059649, "type": "CODE" }, { "from": 6498059718, "to": 6542069736, "type": "CALL" }, { "from": 6498059736, "to": 6445291680, "type": "CALL" }, { "from": 6498059761, "to": 6465229872, "type": "CALL" }, { "from": 6498059808, "to": 6542069628, "type": "CALL" }, { "from": 6498059813, "to": 6498057420, "type": "CODE" }, { "from": 6498059829, "to": 6542089024, "type": "CALL" }, { "from": 6498059914, "to": 6740379000, "type": "CALL" }, { "from": 6498059950, "to": 6498059372, "type": "CODE" } ], "datarefs": [ { "from": 6498056718, "to": 6740709440, "type": "DATA" }, { "from": 6498056750, "to": 6722920504, "type": "DATA" }, { "from": 6498056839, "to": 6537935408, "type": "DATA" }, { "from": 6498056851, "to": 6488537376, "type": "DATA" }, { "from": 6498056863, "to": 6488537376, "type": "DATA" }, { "from": 6498056903, "to": 6741126408, "type": "DATA" }, { "from": 6498056993, "to": 6498062752, "type": "DATA" }, { "from": 6498057004, "to": 6488537312, "type": "DATA" }, { "from": 6498057015, "to": 6496570832, "type": "DATA" }, { "from": 6498057026, "to": 6498059968, "type": "DATA" }, { "from": 6498057052, "to": 6722920584, "type": "DATA" }, { "from": 6498057059, "to": 6722920528, "type": "DATA" }, { "from": 6498057165, "to": 6722920968, "type": "DATA" }, { "from": 6498057236, "to": 6498062816, "type": "DATA" }, { "from": 6498057247, "to": 6488537312, "type": "DATA" }, { "from": 6498057258, "to": 6496570832, "type": "DATA" }, { "from": 6498057269, "to": 6498061344, "type": "DATA" }, { "from": 6498057294, "to": 6742349392, "type": "DATA" }, { "from": 6498057383, "to": 6742087912, "type": "DATA" }, { "from": 6498057389, "to": 6741832416, "type": "DATA" }, { "from": 6498057420, "to": 6742087856, "type": "DATA" }, { "from": 6498057573, "to": 6715402224, "type": "DATA" }, { "from": 6498057614, "to": 6715123816, "type": "DATA" }, { "from": 6498057715, "to": 6722920640, "type": "DATA" }, { "from": 6498057785, "to": 6740709440, "type": "DATA" }, { "from": 6498057880, "to": 6741850168, "type": "DATA" }, { "from": 6498057956, "to": 6498062976, "type": "DATA" }, { "from": 6498057991, "to": 6722920888, "type": "DATA" }, { "from": 6498058041, "to": 6718498848, "type": "DATA" }, { "from": 6498058075, "to": 6718516424, "type": "DATA" }, { "from": 6498058124, "to": 6722920656, "type": "DATA" }, { "from": 6498058462, "to": 6712172456, "type": "DATA" }, { "from": 6498058551, "to": 6712172464, "type": "DATA" }, { "from": 6498058622, "to": 6712256456, "type": "DATA" }, { "from": 6498058702, "to": 6712256672, "type": "DATA" }, { "from": 6498058917, "to": 6724130880, "type": "DATA" }, { "from": 6498058954, "to": 6724130888, "type": "DATA" }, { "from": 6498058970, "to": 6724130880, "type": "DATA" }, { "from": 6498058984, "to": 6722920672, "type": "DATA" }, { "from": 6498059063, "to": 6722920680, "type": "DATA" }, { "from": 6498059142, "to": 6722920696, "type": "DATA" }, { "from": 6498059227, "to": 6722920704, "type": "DATA" }, { "from": 6498059266, "to": 6742247160, "type": "DATA" }, { "from": 6498059273, "to": 6717403296, "type": "DATA" }, { "from": 6498059293, "to": 6742235216, "type": "DATA" }, { "from": 6498059376, "to": 6722920720, "type": "DATA" }, { "from": 6498059453, "to": 6722920744, "type": "DATA" }, { "from": 6498059499, "to": 6722920624, "type": "DATA" }, { "from": 6498059614, "to": 6488537248, "type": "DATA" }, { "from": 6498059711, "to": 6742087912, "type": "DATA" }, { "from": 6498059723, "to": 6742087912, "type": "DATA" }, { "from": 6498059741, "to": 6742087856, "type": "DATA" }, { "from": 6498059748, "to": 6718019168, "type": "DATA" }, { "from": 6498059769, "to": 6742087888, "type": "DATA" }, { "from": 6498059776, "to": 6742087904, "type": "DATA" }, { "from": 6498059787, "to": 6706597696, "type": "DATA" }, { "from": 6498059794, "to": 6742087856, "type": "DATA" }, { "from": 6498059801, "to": 6742087912, "type": "DATA" }, { "from": 6498059851, "to": 6742235208, "type": "DATA" } ] }, "strings": [ { "va": "0x190b7a088", "offset": 280466568, "ascii": "CollectNextItem", "wide": null }, { "va": "0x190b7a050", "offset": 280466512, "ascii": "..\\..\\tab\\browser\\tracing\\diagnostic_data_collector.cc", "wide": null }, { "va": "0x19044e7f0", "offset": 272948208, "ascii": "unavailable", "wide": null }, { "va": "0x19040a868", "offset": 272669800, "ascii": "extensions", "wide": null }, { "va": "0x190b7a0c0", "offset": 280466624, "ascii": "gpu_info", "wide": null }, { "va": "0x190b7a1b8", "offset": 280466872, "ascii": "window_count", "wide": null }, { "va": "0x190742820", "offset": 276044832, "ascii": "total_tab_count", "wide": null }, { "va": "0x190746cc8", "offset": 276062408, "ascii": "windows", "wide": null }, { "va": "0x190b7a0d0", "offset": 280466640, "ascii": "tab_status", "wide": null }, { "va": "0x190139fb0", "offset": 269718448, "ascii": "name", "wide": null }, { "va": "0x19014e7c8", "offset": 269802440, "ascii": "version", "wide": null }, { "va": "0x19014e8a0", "offset": 269802656, "ascii": "enabled", "wide": null }, { "va": "0x190ca1840", "offset": 281676864, "ascii": "Windows NT", "wide": null }, { "va": "0x190b7a0e0", "offset": 280466656, "ascii": "os_name", "wide": null }, { "va": "0x190b7a0e8", "offset": 280466664, "ascii": "os_version", "wide": null }, { "va": "0x190b7a0f8", "offset": 280466680, "ascii": "os_arch", "wide": null }, { "va": "0x190b7a100", "offset": 280466688, "ascii": "cpu_count", "wide": null }, { "va": "0x1906370a0", "offset": 274949280, "ascii": "enable-low-end-device-mode", "wide": null }, { "va": "0x190b7a110", "offset": 280466704, "ascii": "physical_memory_mb", "wide": null }, { "va": "0x190b7a128", "offset": 280466728, "ascii": "available_memory_mb", "wide": null }, { "va": "0x190b7a0b0", "offset": 280466608, "ascii": "system_info", "wide": null }, { "va": "0x1906cd660", "offset": 275565152, "ascii": "ExtensionRegistry", "wide": null } ], "imports": [ { "at": "0x183508447", "target": "0x191c20578", "api": { "va": 6740379000, "lib": "KERNEL32.dll", "sym": "GlobalMemoryStatusEx" } }, { "at": "0x18350868a", "target": "0x191c20578", "api": { "va": 6740379000, "lib": "KERNEL32.dll", "sym": "GlobalMemoryStatusEx" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 29491 }, { "label": "p-diagnostic-upload", "file": "rea-p-diagnostic-upload.json", "file_sha256": "0043225a75c7bc1f284febc9953d9bfa4bc0c3ae2cddada26201a52d39f195e3", "status": "completed", "evidence_id": "ev_858e6b00bcae1840d93664f562d3a04b6f7dda7f9c6d1ffef0403b4b842fb950", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183509f10;pdgo @ 0x183509f10;afij @ 0x183509f10", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183509f10", "size": 2636, "nargs": 6, "signature": "fcn.183509f10(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_30h);", "callrefs": [ { "from": 6498066263, "to": 6464561680, "type": "CALL" }, { "from": 6498066312, "to": 6454999952, "type": "CALL" }, { "from": 6498066570, "to": 6514577840, "type": "CALL" }, { "from": 6498066578, "to": 6511396000, "type": "CALL" }, { "from": 6498066674, "to": 6740346544, "type": "CALL" }, { "from": 6498066735, "to": 6442840976, "type": "CALL" }, { "from": 6498066748, "to": 6511512544, "type": "CALL" }, { "from": 6498066814, "to": 6457891536, "type": "CALL" }, { "from": 6498066833, "to": 6535538512, "type": "CALL" }, { "from": 6498066887, "to": 6525678304, "type": "CALL" }, { "from": 6498066924, "to": 6445282400, "type": "CALL" }, { "from": 6498066949, "to": 6511512544, "type": "CALL" }, { "from": 6498066983, "to": 6511512544, "type": "CALL" }, { "from": 6498067024, "to": 6457891536, "type": "CALL" }, { "from": 6498067076, "to": 6471067168, "type": "CALL" }, { "from": 6498067094, "to": 6542067384, "type": "CALL" }, { "from": 6498067214, "to": 6498067304, "type": "CODE" }, { "from": 6498067231, "to": 6498066499, "type": "CODE" }, { "from": 6498067251, "to": 6498066317, "type": "CODE" }, { "from": 6498067291, "to": 6740346544, "type": "CALL" }, { "from": 6498067297, "to": 6498066753, "type": "CODE" }, { "from": 6498067354, "to": 6498080224, "type": "CALL" }, { "from": 6498067359, "to": 6498067904, "type": "CODE" }, { "from": 6498067392, "to": 6512942288, "type": "CALL" }, { "from": 6498067497, "to": 6497729504, "type": "CALL" }, { "from": 6498067519, "to": 6497728336, "type": "CALL" }, { "from": 6498067550, "to": 6453036096, "type": "CALL" }, { "from": 6498067585, "to": 6464561680, "type": "CALL" }, { "from": 6498067614, "to": 6464561680, "type": "CALL" }, { "from": 6498067624, "to": 6511396000, "type": "CALL" }, { "from": 6498067753, "to": 6468400960, "type": "CALL" }, { "from": 6498067808, "to": 6542067384, "type": "CALL" }, { "from": 6498067891, "to": 6474418992, "type": "CALL" }, { "from": 6498067933, "to": 6511512544, "type": "CALL" }, { "from": 6498067980, "to": 6524603600, "type": "CALL" }, { "from": 6498068026, "to": 6511512544, "type": "CALL" }, { "from": 6498068031, "to": 6498068393, "type": "CODE" }, { "from": 6498068041, "to": 6542067384, "type": "CALL" }, { "from": 6498068161, "to": 6498068165, "type": "CODE" }, { "from": 6498068204, "to": 6498068377, "type": "CODE" }, { "from": 6498068214, "to": 6542067384, "type": "CALL" }, { "from": 6498068334, "to": 6498068338, "type": "CODE" }, { "from": 6498068388, "to": 6498080224, "type": "CALL" }, { "from": 6498068409, "to": 6511512544, "type": "CALL" }, { "from": 6498068430, "to": 6511512544, "type": "CALL" }, { "from": 6498068500, "to": 6740346544, "type": "CALL" }, { "from": 6498068506, "to": 6498068444, "type": "CODE" }, { "from": 6498068539, "to": 6740346544, "type": "CALL" }, { "from": 6498068545, "to": 6498066443, "type": "CODE" }, { "from": 6498068568, "to": 6511512544, "type": "CALL" }, { "from": 6498068573, "to": 6498066443, "type": "CODE" }, { "from": 6498068588, "to": 6511512544, "type": "CALL" }, { "from": 6498068593, "to": 6498068560, "type": "CODE" }, { "from": 6498068626, "to": 6740346544, "type": "CALL" }, { "from": 6498068632, "to": 6498066478, "type": "CODE" }, { "from": 6498068655, "to": 6511512544, "type": "CALL" }, { "from": 6498068660, "to": 6498066478, "type": "CODE" }, { "from": 6498068675, "to": 6511512544, "type": "CALL" }, { "from": 6498068680, "to": 6498068647, "type": "CODE" }, { "from": 6498068700, "to": 6455000096, "type": "CALL" }, { "from": 6498068705, "to": 6498066317, "type": "CODE" }, { "from": 6498068721, "to": 6511512544, "type": "CALL" }, { "from": 6498068743, "to": 6498066342, "type": "CODE" }, { "from": 6498068759, "to": 6511512544, "type": "CALL" }, { "from": 6498068781, "to": 6498066388, "type": "CODE" }, { "from": 6498068797, "to": 6542089024, "type": "CALL" }, { "from": 6498068818, "to": 6511423872, "type": "CALL" }, { "from": 6498068823, "to": 6498067733, "type": "CODE" } ], "datarefs": [ { "from": 6498066223, "to": 6740709440, "type": "DATA" }, { "from": 6498066518, "to": 6712085216, "type": "DATA" }, { "from": 6498066692, "to": 6537935408, "type": "DATA" }, { "from": 6498066726, "to": 6741126408, "type": "DATA" }, { "from": 6498066778, "to": 6722563056, "type": "DATA" }, { "from": 6498066804, "to": 6722921112, "type": "DATA" }, { "from": 6498066892, "to": 6722563072, "type": "DATA" }, { "from": 6498066988, "to": 6715132072, "type": "DATA" }, { "from": 6498067014, "to": 6715502576, "type": "DATA" }, { "from": 6498067112, "to": 6722563120, "type": "DATA" }, { "from": 6498067141, "to": 6722563151, "type": "DATA" }, { "from": 6498067152, "to": 6722563136, "type": "DATA" }, { "from": 6498067163, "to": 6722563120, "type": "DATA" }, { "from": 6498067256, "to": 6488537376, "type": "DATA" }, { "from": 6498067272, "to": 6488537376, "type": "DATA" }, { "from": 6498067364, "to": 6722563160, "type": "DATA" }, { "from": 6498067371, "to": 6722921128, "type": "DATA" }, { "from": 6498067409, "to": 6712688104, "type": "DATA" }, { "from": 6498067466, "to": 6722921192, "type": "DATA" }, { "from": 6498067524, "to": 6722921184, "type": "DATA" }, { "from": 6498067656, "to": 6715434912, "type": "DATA" }, { "from": 6498067720, "to": 6741126408, "type": "DATA" }, { "from": 6498067819, "to": 6497735616, "type": "DATA" }, { "from": 6498067830, "to": 6488510160, "type": "DATA" }, { "from": 6498067841, "to": 6496570832, "type": "DATA" }, { "from": 6498067852, "to": 6498068832, "type": "DATA" }, { "from": 6498068059, "to": 6722921064, "type": "DATA" }, { "from": 6498068088, "to": 6722921091, "type": "DATA" }, { "from": 6498068099, "to": 6722921080, "type": "DATA" }, { "from": 6498068110, "to": 6722921064, "type": "DATA" }, { "from": 6498068232, "to": 6722921008, "type": "DATA" }, { "from": 6498068261, "to": 6722921040, "type": "DATA" }, { "from": 6498068272, "to": 6722921024, "type": "DATA" }, { "from": 6498068283, "to": 6722921008, "type": "DATA" }, { "from": 6498068455, "to": 6740709440, "type": "DATA" }, { "from": 6498068524, "to": 6488537248, "type": "DATA" }, { "from": 6498068611, "to": 6488537248, "type": "DATA" } ] }, "strings": [ { "va": "0x190b22bf0", "offset": 280109040, "ascii": "file_category", "wide": null }, { "va": "0x190b7a298", "offset": 280467096, "ascii": "feedback", "wide": null }, { "va": "0x190b22c00", "offset": 280109056, "ascii": "original_filename", "wide": null }, { "va": "0x19040c8a8", "offset": 272678056, "ascii": "content_type", "wide": null }, { "va": "0x190466ff0", "offset": 273048560, "ascii": "application/zip", "wide": null }, { "va": "0x190b22c30", "offset": 280109104, "ascii": "Failed to serialize the upload request.", "wide": null }, { "va": "0x190b22c4f", "offset": 280109135, "ascii": "request.", "wide": null }, { "va": "0x190b22c40", "offset": 280109120, "ascii": "ize the upload request.", "wide": null }, { "va": "0x190b22c58", "offset": 280109144, "ascii": "RequestPresignedUrl", "wide": null }, { "va": "0x190b7a2a8", "offset": 280467112, "ascii": "..\\..\\tab\\browser\\tracing\\diagnostic_report_uploader.cc", "wide": null }, { "va": "0x1901b7de8", "offset": 270234088, "ascii": "POST", "wide": null }, { "va": "0x190b7a2e8", "offset": 280467176, "ascii": "/proxy/v0/cos/presigned-upload-url", "wide": null }, { "va": "0x1904567a0", "offset": 272980896, "ascii": "application/json", "wide": null }, { "va": "0x190b7a268", "offset": 280467048, "ascii": "The packaged diagnostic ZIP is unavailable.", "wide": null }, { "va": "0x190b7a283", "offset": 280467075, "ascii": " is unavailable.", "wide": null }, { "va": "0x190b7a278", "offset": 280467064, "ascii": "gnostic ZIP is unavailable.", "wide": null }, { "va": "0x190b7a230", "offset": 280466992, "ascii": "Network loader is unavailable for report upload.", "wide": null }, { "va": "0x190b7a250", "offset": 280467024, "ascii": "r report upload.", "wide": null }, { "va": "0x190b7a240", "offset": 280467008, "ascii": "s unavailable for report upload.", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 27569 }, { "label": "p-extension-base-ctor", "file": "rea-p-extension-base-ctor.json", "file_sha256": "ca2a8cd398ca13555ddb2b54a1e3934c8b154838c2473abe7dc56f7e8a0f34a7", "status": "completed", "evidence_id": "ev_457b094dd22db015826d259b484067e3c973ca79b1ac9d78243752267f77f73f", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x188ac3fa0;pdgo @ 0x188ac3fa0;afij @ 0x188ac3fa0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x188ac3fa0", "size": 261, "nargs": 1, "signature": "fcn.188ac3fa0(int64_t arg1);", "callrefs": [ { "from": 6587957209, "to": 6517325904, "type": "CALL" }, { "from": 6587957246, "to": 6476302592, "type": "CALL" }, { "from": 6587957265, "to": 6536625232, "type": "CALL" }, { "from": 6587957334, "to": 6522896976, "type": "CALL" }, { "from": 6587957360, "to": 6522896976, "type": "CALL" }, { "from": 6587957393, "to": 6587958736, "type": "CALL" } ], "datarefs": [ { "from": 6587957171, "to": 6711270712, "type": "DATA" }, { "from": 6587957285, "to": 6718011216, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 2924 }, { "label": "p-extension-dispatch", "file": "rea-p-extension-dispatch.json", "file_sha256": "fe6f466b764935c0f59ecb98ccb45e4763fcfaa445ef89753872388000452b65", "status": "completed", "evidence_id": "ev_f3f5fc7552ab7697bad3611d6a425a275f40f4417bf5930d8da8d8fa987e82d9", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x182d2a250;pdgo @ 0x182d2a250;afij @ 0x182d2a250", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x182d2a250", "size": 24229, "nargs": 2, "signature": "fcn.182d2a250(int64_t arg1, int64_t arg_50h);", "callrefs": [ { "from": 6489809532, "to": 6542067384, "type": "CALL" }, { "from": 6489809550, "to": 6524328704, "type": "CALL" }, { "from": 6489809593, "to": 6518110256, "type": "CALL" }, { "from": 6489809603, "to": 6542067384, "type": "CALL" }, { "from": 6489809645, "to": 6512942288, "type": "CALL" }, { "from": 6489809754, "to": 6518110256, "type": "CALL" }, { "from": 6489809764, "to": 6542067384, "type": "CALL" }, { "from": 6489809792, "to": 6512942288, "type": "CALL" }, { "from": 6489809888, "to": 6518110256, "type": "CALL" }, { "from": 6489809898, "to": 6542067384, "type": "CALL" }, { "from": 6489809926, "to": 6512942288, "type": "CALL" }, { "from": 6489810023, "to": 6518110256, "type": "CALL" }, { "from": 6489810033, "to": 6542067384, "type": "CALL" }, { "from": 6489810061, "to": 6512942288, "type": "CALL" }, { "from": 6489810158, "to": 6518110256, "type": "CALL" }, { "from": 6489810168, "to": 6542067384, "type": "CALL" }, { "from": 6489810196, "to": 6512942288, "type": "CALL" }, { "from": 6489810297, "to": 6518110256, "type": "CALL" }, { "from": 6489810307, "to": 6542067384, "type": "CALL" }, { "from": 6489810325, "to": 6524328704, "type": "CALL" }, { "from": 6489810368, "to": 6518110256, "type": "CALL" }, { "from": 6489810378, "to": 6542067384, "type": "CALL" }, { "from": 6489810409, "to": 6512942288, "type": "CALL" }, { "from": 6489810511, "to": 6518110256, "type": "CALL" }, { "from": 6489810521, "to": 6542067384, "type": "CALL" }, { "from": 6489810549, "to": 6512942288, "type": "CALL" }, { "from": 6489810647, "to": 6518110256, "type": "CALL" }, { "from": 6489810657, "to": 6542067384, "type": "CALL" }, { "from": 6489810675, "to": 6524328704, "type": "CALL" }, { "from": 6489810718, "to": 6518110256, "type": "CALL" }, { "from": 6489810728, "to": 6542067384, "type": "CALL" }, { "from": 6489810766, "to": 6512942288, "type": "CALL" }, { "from": 6489810863, "to": 6518110256, "type": "CALL" }, { "from": 6489810873, "to": 6542067384, "type": "CALL" }, { "from": 6489810901, "to": 6512942288, "type": "CALL" }, { "from": 6489810999, "to": 6518110256, "type": "CALL" }, { "from": 6489811009, "to": 6542067384, "type": "CALL" }, { "from": 6489811027, "to": 6524328704, "type": "CALL" }, { "from": 6489811070, "to": 6518110256, "type": "CALL" }, { "from": 6489811080, "to": 6542067384, "type": "CALL" }, { "from": 6489811111, "to": 6512942288, "type": "CALL" }, { "from": 6489811215, "to": 6518110256, "type": "CALL" }, { "from": 6489811225, "to": 6542067384, "type": "CALL" }, { "from": 6489811253, "to": 6512942288, "type": "CALL" }, { "from": 6489811350, "to": 6518110256, "type": "CALL" }, { "from": 6489811360, "to": 6542067384, "type": "CALL" }, { "from": 6489811388, "to": 6512942288, "type": "CALL" }, { "from": 6489811483, "to": 6518110256, "type": "CALL" }, { "from": 6489811493, "to": 6542067384, "type": "CALL" }, { "from": 6489811521, "to": 6512942288, "type": "CALL" }, { "from": 6489811619, "to": 6518110256, "type": "CALL" }, { "from": 6489811629, "to": 6542067384, "type": "CALL" }, { "from": 6489811647, "to": 6524328704, "type": "CALL" }, { "from": 6489811690, "to": 6518110256, "type": "CALL" }, { "from": 6489811700, "to": 6542067384, "type": "CALL" }, { "from": 6489811738, "to": 6512942288, "type": "CALL" }, { "from": 6489811840, "to": 6518110256, "type": "CALL" }, { "from": 6489811850, "to": 6542067384, "type": "CALL" }, { "from": 6489811878, "to": 6512942288, "type": "CALL" }, { "from": 6489811973, "to": 6518110256, "type": "CALL" }, { "from": 6489811983, "to": 6542067384, "type": "CALL" }, { "from": 6489812011, "to": 6512942288, "type": "CALL" }, { "from": 6489812110, "to": 6518110256, "type": "CALL" }, { "from": 6489812120, "to": 6542067384, "type": "CALL" }, { "from": 6489812148, "to": 6512942288, "type": "CALL" }, { "from": 6489812250, "to": 6518110256, "type": "CALL" }, { "from": 6489812260, "to": 6542067384, "type": "CALL" }, { "from": 6489812288, "to": 6512942288, "type": "CALL" }, { "from": 6489812389, "to": 6518110256, "type": "CALL" }, { "from": 6489812399, "to": 6542067384, "type": "CALL" }, { "from": 6489812417, "to": 6524328704, "type": "CALL" }, { "from": 6489812463, "to": 6518110256, "type": "CALL" }, { "from": 6489812473, "to": 6542067384, "type": "CALL" }, { "from": 6489812491, "to": 6524328704, "type": "CALL" }, { "from": 6489812537, "to": 6518110256, "type": "CALL" }, { "from": 6489812547, "to": 6542067384, "type": "CALL" }, { "from": 6489812565, "to": 6524328704, "type": "CALL" }, { "from": 6489812608, "to": 6518110256, "type": "CALL" }, { "from": 6489812618, "to": 6542067384, "type": "CALL" }, { "from": 6489812649, "to": 6512942288, "type": "CALL" }, { "from": 6489812758, "to": 6518110256, "type": "CALL" }, { "from": 6489812768, "to": 6542067384, "type": "CALL" }, { "from": 6489812796, "to": 6512942288, "type": "CALL" }, { "from": 6489812894, "to": 6518110256, "type": "CALL" }, { "from": 6489812904, "to": 6542067384, "type": "CALL" }, { "from": 6489812932, "to": 6512942288, "type": "CALL" }, { "from": 6489813034, "to": 6518110256, "type": "CALL" }, { "from": 6489813044, "to": 6542067384, "type": "CALL" }, { "from": 6489813072, "to": 6512942288, "type": "CALL" }, { "from": 6489813170, "to": 6518110256, "type": "CALL" }, { "from": 6489813180, "to": 6542067384, "type": "CALL" }, { "from": 6489813208, "to": 6512942288, "type": "CALL" }, { "from": 6489813310, "to": 6518110256, "type": "CALL" }, { "from": 6489813320, "to": 6542067384, "type": "CALL" }, { "from": 6489813348, "to": 6512942288, "type": "CALL" }, { "from": 6489813446, "to": 6518110256, "type": "CALL" }, { "from": 6489813456, "to": 6542067384, "type": "CALL" }, { "from": 6489813484, "to": 6512942288, "type": "CALL" }, { "from": 6489813589, "to": 6518110256, "type": "CALL" }, { "from": 6489813599, "to": 6542067384, "type": "CALL" }, { "from": 6489813617, "to": 6524328704, "type": "CALL" }, { "from": 6489813660, "to": 6518110256, "type": "CALL" }, { "from": 6489813670, "to": 6542067384, "type": "CALL" }, { "from": 6489813698, "to": 6512942288, "type": "CALL" }, { "from": 6489813796, "to": 6518110256, "type": "CALL" }, { "from": 6489813806, "to": 6542067384, "type": "CALL" }, { "from": 6489813837, "to": 6512942288, "type": "CALL" }, { "from": 6489813942, "to": 6518110256, "type": "CALL" }, { "from": 6489813952, "to": 6542067384, "type": "CALL" }, { "from": 6489813980, "to": 6512942288, "type": "CALL" }, { "from": 6489814081, "to": 6518110256, "type": "CALL" }, { "from": 6489814091, "to": 6542067384, "type": "CALL" }, { "from": 6489814109, "to": 6524328704, "type": "CALL" }, { "from": 6489814152, "to": 6518110256, "type": "CALL" }, { "from": 6489814162, "to": 6542067384, "type": "CALL" }, { "from": 6489814196, "to": 6512942288, "type": "CALL" }, { "from": 6489814302, "to": 6518110256, "type": "CALL" }, { "from": 6489814312, "to": 6542067384, "type": "CALL" }, { "from": 6489814340, "to": 6512942288, "type": "CALL" }, { "from": 6489814438, "to": 6518110256, "type": "CALL" }, { "from": 6489814448, "to": 6542067384, "type": "CALL" }, { "from": 6489814479, "to": 6512942288, "type": "CALL" }, { "from": 6489814584, "to": 6518110256, "type": "CALL" }, { "from": 6489814594, "to": 6542067384, "type": "CALL" }, { "from": 6489814622, "to": 6512942288, "type": "CALL" }, { "from": 6489814720, "to": 6518110256, "type": "CALL" }, { "from": 6489814730, "to": 6542067384, "type": "CALL" }, { "from": 6489814758, "to": 6512942288, "type": "CALL" }, { "from": 6489814860, "to": 6518110256, "type": "CALL" }, { "from": 6489814870, "to": 6542067384, "type": "CALL" }, { "from": 6489814898, "to": 6512942288, "type": "CALL" }, { "from": 6489814996, "to": 6518110256, "type": "CALL" }, { "from": 6489815006, "to": 6542067384, "type": "CALL" }, { "from": 6489815034, "to": 6512942288, "type": "CALL" }, { "from": 6489815136, "to": 6518110256, "type": "CALL" }, { "from": 6489815146, "to": 6542067384, "type": "CALL" }, { "from": 6489815174, "to": 6512942288, "type": "CALL" }, { "from": 6489815272, "to": 6518110256, "type": "CALL" }, { "from": 6489815282, "to": 6542067384, "type": "CALL" }, { "from": 6489815310, "to": 6512942288, "type": "CALL" }, { "from": 6489815412, "to": 6518110256, "type": "CALL" }, { "from": 6489815422, "to": 6542067384, "type": "CALL" }, { "from": 6489815450, "to": 6512942288, "type": "CALL" }, { "from": 6489815548, "to": 6518110256, "type": "CALL" }, { "from": 6489815558, "to": 6542067384, "type": "CALL" }, { "from": 6489815586, "to": 6512942288, "type": "CALL" }, { "from": 6489815688, "to": 6518110256, "type": "CALL" }, { "from": 6489815698, "to": 6542067384, "type": "CALL" }, { "from": 6489815726, "to": 6512942288, "type": "CALL" }, { "from": 6489815824, "to": 6518110256, "type": "CALL" }, { "from": 6489815834, "to": 6542067384, "type": "CALL" }, { "from": 6489815862, "to": 6512942288, "type": "CALL" }, { "from": 6489815964, "to": 6518110256, "type": "CALL" }, { "from": 6489815974, "to": 6542067384, "type": "CALL" }, { "from": 6489816002, "to": 6512942288, "type": "CALL" }, { "from": 6489816100, "to": 6518110256, "type": "CALL" }, { "from": 6489816110, "to": 6542067384, "type": "CALL" }, { "from": 6489816138, "to": 6512942288, "type": "CALL" }, { "from": 6489816240, "to": 6518110256, "type": "CALL" }, { "from": 6489816250, "to": 6542067384, "type": "CALL" }, { "from": 6489816278, "to": 6512942288, "type": "CALL" }, { "from": 6489816375, "to": 6518110256, "type": "CALL" }, { "from": 6489816385, "to": 6542067384, "type": "CALL" }, { "from": 6489816413, "to": 6512942288, "type": "CALL" }, { "from": 6489816515, "to": 6518110256, "type": "CALL" }, { "from": 6489816525, "to": 6542067384, "type": "CALL" }, { "from": 6489816553, "to": 6512942288, "type": "CALL" }, { "from": 6489816651, "to": 6518110256, "type": "CALL" }, { "from": 6489816661, "to": 6542067384, "type": "CALL" }, { "from": 6489816689, "to": 6512942288, "type": "CALL" }, { "from": 6489816790, "to": 6518110256, "type": "CALL" }, { "from": 6489816800, "to": 6542067384, "type": "CALL" }, { "from": 6489816828, "to": 6512942288, "type": "CALL" }, { "from": 6489816925, "to": 6518110256, "type": "CALL" }, { "from": 6489816935, "to": 6542067384, "type": "CALL" }, { "from": 6489816963, "to": 6512942288, "type": "CALL" }, { "from": 6489817065, "to": 6518110256, "type": "CALL" }, { "from": 6489817075, "to": 6542067384, "type": "CALL" }, { "from": 6489817103, "to": 6512942288, "type": "CALL" }, { "from": 6489817201, "to": 6518110256, "type": "CALL" }, { "from": 6489817211, "to": 6542067384, "type": "CALL" }, { "from": 6489817239, "to": 6512942288, "type": "CALL" }, { "from": 6489817341, "to": 6518110256, "type": "CALL" }, { "from": 6489817351, "to": 6542067384, "type": "CALL" }, { "from": 6489817379, "to": 6512942288, "type": "CALL" }, { "from": 6489817477, "to": 6518110256, "type": "CALL" }, { "from": 6489817487, "to": 6542067384, "type": "CALL" }, { "from": 6489817515, "to": 6512942288, "type": "CALL" }, { "from": 6489817617, "to": 6518110256, "type": "CALL" }, { "from": 6489817627, "to": 6542067384, "type": "CALL" }, { "from": 6489817655, "to": 6512942288, "type": "CALL" }, { "from": 6489817753, "to": 6518110256, "type": "CALL" }, { "from": 6489817763, "to": 6542067384, "type": "CALL" }, { "from": 6489817791, "to": 6512942288, "type": "CALL" }, { "from": 6489817893, "to": 6518110256, "type": "CALL" }, { "from": 6489817903, "to": 6542067384, "type": "CALL" }, { "from": 6489817931, "to": 6512942288, "type": "CALL" }, { "from": 6489818028, "to": 6518110256, "type": "CALL" }, { "from": 6489818038, "to": 6542067384, "type": "CALL" }, { "from": 6489818066, "to": 6512942288, "type": "CALL" }, { "from": 6489818168, "to": 6518110256, "type": "CALL" }, { "from": 6489818178, "to": 6542067384, "type": "CALL" }, { "from": 6489818206, "to": 6512942288, "type": "CALL" }, { "from": 6489818304, "to": 6518110256, "type": "CALL" }, { "from": 6489818314, "to": 6542067384, "type": "CALL" }, { "from": 6489818342, "to": 6512942288, "type": "CALL" }, { "from": 6489818444, "to": 6518110256, "type": "CALL" }, { "from": 6489818454, "to": 6542067384, "type": "CALL" }, { "from": 6489818482, "to": 6512942288, "type": "CALL" }, { "from": 6489818580, "to": 6518110256, "type": "CALL" }, { "from": 6489818590, "to": 6542067384, "type": "CALL" }, { "from": 6489818618, "to": 6512942288, "type": "CALL" }, { "from": 6489818720, "to": 6518110256, "type": "CALL" }, { "from": 6489818730, "to": 6542067384, "type": "CALL" }, { "from": 6489818758, "to": 6512942288, "type": "CALL" }, { "from": 6489818856, "to": 6518110256, "type": "CALL" }, { "from": 6489818866, "to": 6542067384, "type": "CALL" }, { "from": 6489818894, "to": 6512942288, "type": "CALL" }, { "from": 6489818996, "to": 6518110256, "type": "CALL" }, { "from": 6489819006, "to": 6542067384, "type": "CALL" }, { "from": 6489819037, "to": 6512942288, "type": "CALL" }, { "from": 6489819138, "to": 6518110256, "type": "CALL" }, { "from": 6489819148, "to": 6542067384, "type": "CALL" }, { "from": 6489819166, "to": 6524328704, "type": "CALL" }, { "from": 6489819218, "to": 6518110256, "type": "CALL" }, { "from": 6489819228, "to": 6542067384, "type": "CALL" }, { "from": 6489819246, "to": 6524328704, "type": "CALL" }, { "from": 6489819292, "to": 6518110256, "type": "CALL" }, { "from": 6489819302, "to": 6542067384, "type": "CALL" }, { "from": 6489819320, "to": 6524328704, "type": "CALL" }, { "from": 6489819361, "to": 6518110256, "type": "CALL" }, { "from": 6489819371, "to": 6542067384, "type": "CALL" }, { "from": 6489819389, "to": 6524328704, "type": "CALL" }, { "from": 6489819427, "to": 6518110256, "type": "CALL" }, { "from": 6489819437, "to": 6542067384, "type": "CALL" }, { "from": 6489819472, "to": 6512942288, "type": "CALL" }, { "from": 6489819577, "to": 6518110256, "type": "CALL" }, { "from": 6489819587, "to": 6542067384, "type": "CALL" }, { "from": 6489819615, "to": 6512942288, "type": "CALL" }, { "from": 6489819713, "to": 6518110256, "type": "CALL" }, { "from": 6489819723, "to": 6542067384, "type": "CALL" }, { "from": 6489819754, "to": 6512942288, "type": "CALL" }, { "from": 6489819856, "to": 6518110256, "type": "CALL" }, { "from": 6489819866, "to": 6542067384, "type": "CALL" }, { "from": 6489819894, "to": 6512942288, "type": "CALL" }, { "from": 6489819992, "to": 6518110256, "type": "CALL" }, { "from": 6489820002, "to": 6542067384, "type": "CALL" }, { "from": 6489820030, "to": 6512942288, "type": "CALL" }, { "from": 6489820132, "to": 6518110256, "type": "CALL" }, { "from": 6489820142, "to": 6542067384, "type": "CALL" }, { "from": 6489820170, "to": 6512942288, "type": "CALL" }, { "from": 6489820268, "to": 6518110256, "type": "CALL" }, { "from": 6489820278, "to": 6542067384, "type": "CALL" }, { "from": 6489820306, "to": 6512942288, "type": "CALL" }, { "from": 6489820408, "to": 6518110256, "type": "CALL" }, { "from": 6489820418, "to": 6542067384, "type": "CALL" }, { "from": 6489820446, "to": 6512942288, "type": "CALL" }, { "from": 6489820544, "to": 6518110256, "type": "CALL" }, { "from": 6489820554, "to": 6542067384, "type": "CALL" }, { "from": 6489820582, "to": 6512942288, "type": "CALL" }, { "from": 6489820684, "to": 6518110256, "type": "CALL" }, { "from": 6489820694, "to": 6542067384, "type": "CALL" }, { "from": 6489820722, "to": 6512942288, "type": "CALL" }, { "from": 6489820823, "to": 6518110256, "type": "CALL" }, { "from": 6489820833, "to": 6542067384, "type": "CALL" }, { "from": 6489820851, "to": 6524328704, "type": "CALL" }, { "from": 6489820894, "to": 6518110256, "type": "CALL" }, { "from": 6489820904, "to": 6542067384, "type": "CALL" }, { "from": 6489820935, "to": 6512942288, "type": "CALL" }, { "from": 6489821040, "to": 6518110256, "type": "CALL" }, { "from": 6489821050, "to": 6542067384, "type": "CALL" }, { "from": 6489821068, "to": 6524328704, "type": "CALL" }, { "from": 6489821111, "to": 6518110256, "type": "CALL" }, { "from": 6489821121, "to": 6542067384, "type": "CALL" }, { "from": 6489821149, "to": 6512942288, "type": "CALL" }, { "from": 6489821250, "to": 6518110256, "type": "CALL" }, { "from": 6489821260, "to": 6542067384, "type": "CALL" }, { "from": 6489821278, "to": 6524328704, "type": "CALL" }, { "from": 6489821324, "to": 6518110256, "type": "CALL" }, { "from": 6489821334, "to": 6542067384, "type": "CALL" }, { "from": 6489821352, "to": 6524328704, "type": "CALL" }, { "from": 6489821397, "to": 6518110256, "type": "CALL" }, { "from": 6489821407, "to": 6542067384, "type": "CALL" }, { "from": 6489821425, "to": 6524328704, "type": "CALL" }, { "from": 6489821468, "to": 6518110256, "type": "CALL" }, { "from": 6489821478, "to": 6542067384, "type": "CALL" }, { "from": 6489821516, "to": 6512942288, "type": "CALL" }, { "from": 6489821625, "to": 6518110256, "type": "CALL" }, { "from": 6489821635, "to": 6542067384, "type": "CALL" }, { "from": 6489821663, "to": 6512942288, "type": "CALL" }, { "from": 6489821761, "to": 6518110256, "type": "CALL" }, { "from": 6489821771, "to": 6542067384, "type": "CALL" }, { "from": 6489821799, "to": 6512942288, "type": "CALL" }, { "from": 6489821901, "to": 6518110256, "type": "CALL" }, { "from": 6489821911, "to": 6542067384, "type": "CALL" }, { "from": 6489821939, "to": 6512942288, "type": "CALL" }, { "from": 6489822037, "to": 6518110256, "type": "CALL" }, { "from": 6489822047, "to": 6542067384, "type": "CALL" }, { "from": 6489822078, "to": 6512942288, "type": "CALL" }, { "from": 6489822181, "to": 6518110256, "type": "CALL" }, { "from": 6489822191, "to": 6542067384, "type": "CALL" }, { "from": 6489822219, "to": 6512942288, "type": "CALL" }, { "from": 6489822317, "to": 6518110256, "type": "CALL" }, { "from": 6489822327, "to": 6542067384, "type": "CALL" }, { "from": 6489822358, "to": 6512942288, "type": "CALL" }, { "from": 6489822463, "to": 6518110256, "type": "CALL" }, { "from": 6489822473, "to": 6542067384, "type": "CALL" }, { "from": 6489822501, "to": 6512942288, "type": "CALL" }, { "from": 6489822599, "to": 6518110256, "type": "CALL" }, { "from": 6489822609, "to": 6542067384, "type": "CALL" }, { "from": 6489822637, "to": 6512942288, "type": "CALL" }, { "from": 6489822739, "to": 6518110256, "type": "CALL" }, { "from": 6489822749, "to": 6542067384, "type": "CALL" }, { "from": 6489822777, "to": 6512942288, "type": "CALL" }, { "from": 6489822878, "to": 6518110256, "type": "CALL" }, { "from": 6489822888, "to": 6542067384, "type": "CALL" }, { "from": 6489822906, "to": 6524328704, "type": "CALL" }, { "from": 6489822949, "to": 6518110256, "type": "CALL" }, { "from": 6489822959, "to": 6542067384, "type": "CALL" }, { "from": 6489822993, "to": 6512942288, "type": "CALL" }, { "from": 6489823095, "to": 6518110256, "type": "CALL" }, { "from": 6489823105, "to": 6542067384, "type": "CALL" }, { "from": 6489823133, "to": 6512942288, "type": "CALL" }, { "from": 6489823231, "to": 6518110256, "type": "CALL" }, { "from": 6489823241, "to": 6542067384, "type": "CALL" }, { "from": 6489823269, "to": 6512942288, "type": "CALL" }, { "from": 6489823370, "to": 6518110256, "type": "CALL" }, { "from": 6489823380, "to": 6542067384, "type": "CALL" }, { "from": 6489823408, "to": 6512942288, "type": "CALL" }, { "from": 6489823506, "to": 6518110256, "type": "CALL" }, { "from": 6489823516, "to": 6542067384, "type": "CALL" }, { "from": 6489823544, "to": 6512942288, "type": "CALL" }, { "from": 6489823649, "to": 6518110256, "type": "CALL" }, { "from": 6489823659, "to": 6542067384, "type": "CALL" }, { "from": 6489823677, "to": 6524328704, "type": "CALL" }, { "from": 6489823720, "to": 6518110256, "type": "CALL" }, { "from": 6489823730, "to": 6542067384, "type": "CALL" }, { "from": 6489823758, "to": 6512942288, "type": "CALL" }, { "from": 6489823856, "to": 6518110256, "type": "CALL" }, { "from": 6489823866, "to": 6542067384, "type": "CALL" }, { "from": 6489823894, "to": 6512942288, "type": "CALL" }, { "from": 6489823996, "to": 6518110256, "type": "CALL" }, { "from": 6489824006, "to": 6542067384, "type": "CALL" }, { "from": 6489824034, "to": 6512942288, "type": "CALL" }, { "from": 6489824132, "to": 6518110256, "type": "CALL" }, { "from": 6489824142, "to": 6542067384, "type": "CALL" }, { "from": 6489824170, "to": 6512942288, "type": "CALL" }, { "from": 6489824272, "to": 6518110256, "type": "CALL" }, { "from": 6489824282, "to": 6542067384, "type": "CALL" }, { "from": 6489824310, "to": 6512942288, "type": "CALL" }, { "from": 6489824411, "to": 6518110256, "type": "CALL" }, { "from": 6489824421, "to": 6542067384, "type": "CALL" }, { "from": 6489824439, "to": 6524328704, "type": "CALL" }, { "from": 6489824482, "to": 6518110256, "type": "CALL" }, { "from": 6489824492, "to": 6542067384, "type": "CALL" }, { "from": 6489824520, "to": 6512942288, "type": "CALL" }, { "from": 6489824622, "to": 6518110256, "type": "CALL" }, { "from": 6489824632, "to": 6542067384, "type": "CALL" }, { "from": 6489824660, "to": 6512942288, "type": "CALL" }, { "from": 6489824758, "to": 6518110256, "type": "CALL" }, { "from": 6489824768, "to": 6542067384, "type": "CALL" }, { "from": 6489824796, "to": 6512942288, "type": "CALL" }, { "from": 6489824904, "to": 6518110256, "type": "CALL" }, { "from": 6489824914, "to": 6542067384, "type": "CALL" }, { "from": 6489824932, "to": 6524328704, "type": "CALL" }, { "from": 6489824975, "to": 6518110256, "type": "CALL" }, { "from": 6489824985, "to": 6542067384, "type": "CALL" }, { "from": 6489825027, "to": 6512942288, "type": "CALL" }, { "from": 6489825125, "to": 6518110256, "type": "CALL" }, { "from": 6489825135, "to": 6542067384, "type": "CALL" }, { "from": 6489825163, "to": 6512942288, "type": "CALL" }, { "from": 6489825265, "to": 6518110256, "type": "CALL" }, { "from": 6489825275, "to": 6542067384, "type": "CALL" }, { "from": 6489825303, "to": 6512942288, "type": "CALL" }, { "from": 6489825401, "to": 6518110256, "type": "CALL" }, { "from": 6489825411, "to": 6542067384, "type": "CALL" }, { "from": 6489825439, "to": 6512942288, "type": "CALL" }, { "from": 6489825547, "to": 6518110256, "type": "CALL" }, { "from": 6489825557, "to": 6542067384, "type": "CALL" }, { "from": 6489825575, "to": 6524328704, "type": "CALL" }, { "from": 6489825621, "to": 6518110256, "type": "CALL" }, { "from": 6489825631, "to": 6542067384, "type": "CALL" }, { "from": 6489825649, "to": 6524328704, "type": "CALL" }, { "from": 6489825690, "to": 6518110256, "type": "CALL" }, { "from": 6489825700, "to": 6542067384, "type": "CALL" }, { "from": 6489825718, "to": 6524328704, "type": "CALL" }, { "from": 6489825761, "to": 6518110256, "type": "CALL" }, { "from": 6489825771, "to": 6542067384, "type": "CALL" }, { "from": 6489825809, "to": 6512942288, "type": "CALL" }, { "from": 6489825910, "to": 6518110256, "type": "CALL" }, { "from": 6489825920, "to": 6542067384, "type": "CALL" }, { "from": 6489825938, "to": 6524328704, "type": "CALL" }, { "from": 6489825984, "to": 6518110256, "type": "CALL" }, { "from": 6489825994, "to": 6542067384, "type": "CALL" }, { "from": 6489826012, "to": 6524328704, "type": "CALL" }, { "from": 6489826055, "to": 6518110256, "type": "CALL" }, { "from": 6489826065, "to": 6542067384, "type": "CALL" }, { "from": 6489826096, "to": 6512942288, "type": "CALL" }, { "from": 6489826201, "to": 6518110256, "type": "CALL" }, { "from": 6489826211, "to": 6542067384, "type": "CALL" }, { "from": 6489826239, "to": 6512942288, "type": "CALL" }, { "from": 6489826343, "to": 6518110256, "type": "CALL" }, { "from": 6489826353, "to": 6542067384, "type": "CALL" }, { "from": 6489826371, "to": 6524328704, "type": "CALL" }, { "from": 6489826417, "to": 6518110256, "type": "CALL" }, { "from": 6489826427, "to": 6542067384, "type": "CALL" }, { "from": 6489826445, "to": 6524328704, "type": "CALL" }, { "from": 6489826491, "to": 6518110256, "type": "CALL" }, { "from": 6489826501, "to": 6542067384, "type": "CALL" }, { "from": 6489826519, "to": 6524328704, "type": "CALL" }, { "from": 6489826562, "to": 6518110256, "type": "CALL" }, { "from": 6489826572, "to": 6542067384, "type": "CALL" }, { "from": 6489826604, "to": 6512942288, "type": "CALL" }, { "from": 6489826707, "to": 6518110256, "type": "CALL" }, { "from": 6489826717, "to": 6542067384, "type": "CALL" }, { "from": 6489826735, "to": 6524328704, "type": "CALL" }, { "from": 6489826781, "to": 6518110256, "type": "CALL" }, { "from": 6489826791, "to": 6542067384, "type": "CALL" }, { "from": 6489826809, "to": 6524328704, "type": "CALL" }, { "from": 6489826855, "to": 6518110256, "type": "CALL" }, { "from": 6489826865, "to": 6542067384, "type": "CALL" }, { "from": 6489826883, "to": 6524328704, "type": "CALL" }, { "from": 6489826929, "to": 6518110256, "type": "CALL" }, { "from": 6489826939, "to": 6542067384, "type": "CALL" }, { "from": 6489826957, "to": 6524328704, "type": "CALL" }, { "from": 6489827003, "to": 6518110256, "type": "CALL" }, { "from": 6489827013, "to": 6542067384, "type": "CALL" }, { "from": 6489827031, "to": 6524328704, "type": "CALL" }, { "from": 6489827077, "to": 6518110256, "type": "CALL" }, { "from": 6489827087, "to": 6542067384, "type": "CALL" }, { "from": 6489827105, "to": 6524328704, "type": "CALL" }, { "from": 6489827151, "to": 6518110256, "type": "CALL" }, { "from": 6489827161, "to": 6542067384, "type": "CALL" }, { "from": 6489827179, "to": 6524328704, "type": "CALL" }, { "from": 6489827225, "to": 6518110256, "type": "CALL" }, { "from": 6489827235, "to": 6542067384, "type": "CALL" }, { "from": 6489827253, "to": 6524328704, "type": "CALL" }, { "from": 6489827291, "to": 6518110256, "type": "CALL" }, { "from": 6489827301, "to": 6542067384, "type": "CALL" }, { "from": 6489827336, "to": 6512942288, "type": "CALL" }, { "from": 6489827431, "to": 6518110256, "type": "CALL" }, { "from": 6489827441, "to": 6542067384, "type": "CALL" }, { "from": 6489827469, "to": 6512942288, "type": "CALL" }, { "from": 6489827577, "to": 6518110256, "type": "CALL" }, { "from": 6489827587, "to": 6542067384, "type": "CALL" }, { "from": 6489827605, "to": 6524328704, "type": "CALL" }, { "from": 6489827651, "to": 6518110256, "type": "CALL" }, { "from": 6489827661, "to": 6542067384, "type": "CALL" }, { "from": 6489827679, "to": 6524328704, "type": "CALL" }, { "from": 6489827722, "to": 6518110256, "type": "CALL" }, { "from": 6489827732, "to": 6542067384, "type": "CALL" }, { "from": 6489827770, "to": 6512942288, "type": "CALL" }, { "from": 6489827868, "to": 6518110256, "type": "CALL" }, { "from": 6489827878, "to": 6542067384, "type": "CALL" }, { "from": 6489827909, "to": 6512942288, "type": "CALL" }, { "from": 6489828014, "to": 6518110256, "type": "CALL" }, { "from": 6489828024, "to": 6542067384, "type": "CALL" }, { "from": 6489828052, "to": 6512942288, "type": "CALL" }, { "from": 6489828150, "to": 6518110256, "type": "CALL" }, { "from": 6489828160, "to": 6542067384, "type": "CALL" }, { "from": 6489828194, "to": 6512942288, "type": "CALL" }, { "from": 6489828299, "to": 6518110256, "type": "CALL" }, { "from": 6489828309, "to": 6542067384, "type": "CALL" }, { "from": 6489828327, "to": 6524328704, "type": "CALL" }, { "from": 6489828370, "to": 6518110256, "type": "CALL" }, { "from": 6489828380, "to": 6542067384, "type": "CALL" }, { "from": 6489828408, "to": 6512942288, "type": "CALL" }, { "from": 6489828509, "to": 6518110256, "type": "CALL" }, { "from": 6489828519, "to": 6542067384, "type": "CALL" }, { "from": 6489828537, "to": 6524328704, "type": "CALL" }, { "from": 6489828583, "to": 6518110256, "type": "CALL" }, { "from": 6489828593, "to": 6542067384, "type": "CALL" }, { "from": 6489828611, "to": 6524328704, "type": "CALL" }, { "from": 6489828657, "to": 6518110256, "type": "CALL" }, { "from": 6489828667, "to": 6542067384, "type": "CALL" }, { "from": 6489828685, "to": 6524328704, "type": "CALL" }, { "from": 6489828731, "to": 6518110256, "type": "CALL" }, { "from": 6489828741, "to": 6542067384, "type": "CALL" }, { "from": 6489828759, "to": 6524328704, "type": "CALL" }, { "from": 6489828805, "to": 6518110256, "type": "CALL" }, { "from": 6489828815, "to": 6542067384, "type": "CALL" }, { "from": 6489828833, "to": 6524328704, "type": "CALL" }, { "from": 6489828874, "to": 6518110256, "type": "CALL" }, { "from": 6489828884, "to": 6542067384, "type": "CALL" }, { "from": 6489828902, "to": 6524328704, "type": "CALL" }, { "from": 6489828945, "to": 6518110256, "type": "CALL" }, { "from": 6489828955, "to": 6542067384, "type": "CALL" }, { "from": 6489828989, "to": 6512942288, "type": "CALL" }, { "from": 6489829094, "to": 6518110256, "type": "CALL" }, { "from": 6489829104, "to": 6542067384, "type": "CALL" }, { "from": 6489829122, "to": 6524328704, "type": "CALL" }, { "from": 6489829168, "to": 6518110256, "type": "CALL" }, { "from": 6489829178, "to": 6542067384, "type": "CALL" }, { "from": 6489829196, "to": 6524328704, "type": "CALL" }, { "from": 6489829239, "to": 6518110256, "type": "CALL" }, { "from": 6489829249, "to": 6542067384, "type": "CALL" }, { "from": 6489829277, "to": 6512942288, "type": "CALL" }, { "from": 6489829375, "to": 6518110256, "type": "CALL" }, { "from": 6489829385, "to": 6542067384, "type": "CALL" }, { "from": 6489829416, "to": 6512942288, "type": "CALL" }, { "from": 6489829521, "to": 6518110256, "type": "CALL" }, { "from": 6489829531, "to": 6542067384, "type": "CALL" }, { "from": 6489829559, "to": 6512942288, "type": "CALL" }, { "from": 6489829657, "to": 6518110256, "type": "CALL" }, { "from": 6489829667, "to": 6542067384, "type": "CALL" }, { "from": 6489829695, "to": 6512942288, "type": "CALL" }, { "from": 6489829800, "to": 6518110256, "type": "CALL" }, { "from": 6489829810, "to": 6542067384, "type": "CALL" }, { "from": 6489829828, "to": 6524328704, "type": "CALL" }, { "from": 6489829866, "to": 6518110256, "type": "CALL" }, { "from": 6489829876, "to": 6542067384, "type": "CALL" }, { "from": 6489829911, "to": 6512942288, "type": "CALL" }, { "from": 6489830012, "to": 6518110256, "type": "CALL" }, { "from": 6489830022, "to": 6542067384, "type": "CALL" }, { "from": 6489830040, "to": 6524328704, "type": "CALL" }, { "from": 6489830086, "to": 6518110256, "type": "CALL" }, { "from": 6489830096, "to": 6542067384, "type": "CALL" }, { "from": 6489830114, "to": 6524328704, "type": "CALL" }, { "from": 6489830157, "to": 6518110256, "type": "CALL" }, { "from": 6489830167, "to": 6542067384, "type": "CALL" }, { "from": 6489830198, "to": 6512942288, "type": "CALL" }, { "from": 6489830303, "to": 6518110256, "type": "CALL" }, { "from": 6489830313, "to": 6542067384, "type": "CALL" }, { "from": 6489830331, "to": 6524328704, "type": "CALL" }, { "from": 6489830374, "to": 6518110256, "type": "CALL" }, { "from": 6489830384, "to": 6542067384, "type": "CALL" }, { "from": 6489830412, "to": 6512942288, "type": "CALL" }, { "from": 6489830513, "to": 6518110256, "type": "CALL" }, { "from": 6489830523, "to": 6542067384, "type": "CALL" }, { "from": 6489830541, "to": 6524328704, "type": "CALL" }, { "from": 6489830587, "to": 6518110256, "type": "CALL" }, { "from": 6489830597, "to": 6542067384, "type": "CALL" }, { "from": 6489830615, "to": 6524328704, "type": "CALL" }, { "from": 6489830658, "to": 6518110256, "type": "CALL" }, { "from": 6489830668, "to": 6542067384, "type": "CALL" }, { "from": 6489830706, "to": 6512942288, "type": "CALL" }, { "from": 6489830808, "to": 6518110256, "type": "CALL" }, { "from": 6489830818, "to": 6542067384, "type": "CALL" }, { "from": 6489830846, "to": 6512942288, "type": "CALL" }, { "from": 6489830950, "to": 6518110256, "type": "CALL" }, { "from": 6489830960, "to": 6542067384, "type": "CALL" }, { "from": 6489830978, "to": 6524328704, "type": "CALL" }, { "from": 6489831024, "to": 6518110256, "type": "CALL" }, { "from": 6489831034, "to": 6542067384, "type": "CALL" }, { "from": 6489831052, "to": 6524328704, "type": "CALL" }, { "from": 6489831098, "to": 6518110256, "type": "CALL" }, { "from": 6489831108, "to": 6542067384, "type": "CALL" }, { "from": 6489831126, "to": 6524328704, "type": "CALL" }, { "from": 6489831172, "to": 6518110256, "type": "CALL" }, { "from": 6489831182, "to": 6542067384, "type": "CALL" }, { "from": 6489831200, "to": 6524328704, "type": "CALL" }, { "from": 6489831243, "to": 6518110256, "type": "CALL" }, { "from": 6489831253, "to": 6542067384, "type": "CALL" }, { "from": 6489831295, "to": 6512942288, "type": "CALL" }, { "from": 6489831400, "to": 6518110256, "type": "CALL" }, { "from": 6489831410, "to": 6542067384, "type": "CALL" }, { "from": 6489831428, "to": 6524328704, "type": "CALL" }, { "from": 6489831471, "to": 6518110256, "type": "CALL" }, { "from": 6489831481, "to": 6542067384, "type": "CALL" }, { "from": 6489831509, "to": 6512942288, "type": "CALL" }, { "from": 6489831610, "to": 6518110256, "type": "CALL" }, { "from": 6489831620, "to": 6542067384, "type": "CALL" }, { "from": 6489831638, "to": 6524328704, "type": "CALL" }, { "from": 6489831681, "to": 6518110256, "type": "CALL" }, { "from": 6489831691, "to": 6542067384, "type": "CALL" }, { "from": 6489831719, "to": 6512942288, "type": "CALL" }, { "from": 6489831821, "to": 6518110256, "type": "CALL" }, { "from": 6489831831, "to": 6542067384, "type": "CALL" }, { "from": 6489831859, "to": 6512942288, "type": "CALL" }, { "from": 6489831957, "to": 6518110256, "type": "CALL" }, { "from": 6489831967, "to": 6542067384, "type": "CALL" }, { "from": 6489831995, "to": 6512942288, "type": "CALL" }, { "from": 6489832097, "to": 6518110256, "type": "CALL" }, { "from": 6489832107, "to": 6542067384, "type": "CALL" }, { "from": 6489832135, "to": 6512942288, "type": "CALL" }, { "from": 6489832233, "to": 6518110256, "type": "CALL" }, { "from": 6489832243, "to": 6542067384, "type": "CALL" }, { "from": 6489832274, "to": 6512942288, "type": "CALL" }, { "from": 6489832376, "to": 6518110256, "type": "CALL" }, { "from": 6489832386, "to": 6542067384, "type": "CALL" }, { "from": 6489832414, "to": 6512942288, "type": "CALL" }, { "from": 6489832512, "to": 6518110256, "type": "CALL" }, { "from": 6489832522, "to": 6542067384, "type": "CALL" }, { "from": 6489832550, "to": 6512942288, "type": "CALL" }, { "from": 6489832653, "to": 6518110256, "type": "CALL" }, { "from": 6489832663, "to": 6542067384, "type": "CALL" }, { "from": 6489832681, "to": 6524328704, "type": "CALL" }, { "from": 6489832727, "to": 6518110256, "type": "CALL" }, { "from": 6489832737, "to": 6542067384, "type": "CALL" }, { "from": 6489832755, "to": 6524328704, "type": "CALL" }, { "from": 6489832801, "to": 6518110256, "type": "CALL" }, { "from": 6489832811, "to": 6542067384, "type": "CALL" }, { "from": 6489832829, "to": 6524328704, "type": "CALL" }, { "from": 6489832875, "to": 6518110256, "type": "CALL" }, { "from": 6489832885, "to": 6542067384, "type": "CALL" }, { "from": 6489832903, "to": 6524328704, "type": "CALL" }, { "from": 6489832949, "to": 6518110256, "type": "CALL" }, { "from": 6489832959, "to": 6542067384, "type": "CALL" }, { "from": 6489832977, "to": 6524328704, "type": "CALL" }, { "from": 6489833023, "to": 6518110256, "type": "CALL" }, { "from": 6489833033, "to": 6542067384, "type": "CALL" }, { "from": 6489833051, "to": 6524328704, "type": "CALL" }, { "from": 6489833097, "to": 6518110256, "type": "CALL" }, { "from": 6489833107, "to": 6542067384, "type": "CALL" }, { "from": 6489833125, "to": 6524328704, "type": "CALL" }, { "from": 6489833171, "to": 6518110256, "type": "CALL" }, { "from": 6489833181, "to": 6542067384, "type": "CALL" }, { "from": 6489833199, "to": 6524328704, "type": "CALL" }, { "from": 6489833246, "to": 6518110256, "type": "CALL" }, { "from": 6489833256, "to": 6542067384, "type": "CALL" }, { "from": 6489833274, "to": 6524328704, "type": "CALL" }, { "from": 6489833315, "to": 6518110256, "type": "CALL" }, { "from": 6489833325, "to": 6542067384, "type": "CALL" }, { "from": 6489833343, "to": 6524328704, "type": "CALL" }, { "from": 6489833384, "to": 6518110256, "type": "CALL" }, { "from": 6489833394, "to": 6542067384, "type": "CALL" }, { "from": 6489833412, "to": 6524328704, "type": "CALL" }, { "from": 6489833453, "to": 6518110256, "type": "CALL" }, { "from": 6489833463, "to": 6542067384, "type": "CALL" }, { "from": 6489833481, "to": 6524328704, "type": "CALL" }, { "from": 6489833519, "to": 6518110256, "type": "CALL" }, { "from": 6489833529, "to": 6542067384, "type": "CALL" }, { "from": 6489833565, "to": 6512942288, "type": "CALL" }, { "from": 6489833657, "to": 6518110256, "type": "CALL" }, { "from": 6489833690, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6489809512, "to": 6740709440, "type": "DATA" }, { "from": 6489809540, "to": 6718933792, "type": "DATA" }, { "from": 6489809563, "to": 6718933240, "type": "DATA" }, { "from": 6489809611, "to": 6727266168, "type": "DATA" }, { "from": 6489809618, "to": 6727266112, "type": "DATA" }, { "from": 6489809650, "to": 6718933920, "type": "DATA" }, { "from": 6489809661, "to": 6709766648, "type": "DATA" }, { "from": 6489809671, "to": 6718933960, "type": "DATA" }, { "from": 6489809717, "to": 6718928360, "type": "DATA" }, { "from": 6489809797, "to": 6718934752, "type": "DATA" }, { "from": 6489809811, "to": 6718934792, "type": "DATA" }, { "from": 6489809852, "to": 6718934984, "type": "DATA" }, { "from": 6489809931, "to": 6718935200, "type": "DATA" }, { "from": 6489809945, "to": 6718935240, "type": "DATA" }, { "from": 6489809986, "to": 6718935432, "type": "DATA" }, { "from": 6489810066, "to": 6718935552, "type": "DATA" }, { "from": 6489810080, "to": 6718935592, "type": "DATA" }, { "from": 6489810121, "to": 6718928384, "type": "DATA" }, { "from": 6489810201, "to": 6718935824, "type": "DATA" }, { "from": 6489810215, "to": 6718935864, "type": "DATA" }, { "from": 6489810257, "to": 6712256360, "type": "DATA" }, { "from": 6489810315, "to": 6718936624, "type": "DATA" }, { "from": 6489810333, "to": 6718929080, "type": "DATA" }, { "from": 6489810414, "to": 6718937152, "type": "DATA" }, { "from": 6489810425, "to": 6709766648, "type": "DATA" }, { "from": 6489810435, "to": 6718937192, "type": "DATA" }, { "from": 6489810474, "to": 6718210224, "type": "DATA" }, { "from": 6489810554, "to": 6718937440, "type": "DATA" }, { "from": 6489810568, "to": 6718937480, "type": "DATA" }, { "from": 6489810607, "to": 6718937672, "type": "DATA" }, { "from": 6489810665, "to": 6718938256, "type": "DATA" }, { "from": 6489810683, "to": 6718929104, "type": "DATA" }, { "from": 6489810744, "to": 6727266168, "type": "DATA" }, { "from": 6489810771, "to": 6718938384, "type": "DATA" }, { "from": 6489810785, "to": 6718938424, "type": "DATA" }, { "from": 6489810826, "to": 6718929120, "type": "DATA" }, { "from": 6489810906, "to": 6718938800, "type": "DATA" }, { "from": 6489810920, "to": 6718938840, "type": "DATA" }, { "from": 6489810959, "to": 6718939032, "type": "DATA" }, { "from": 6489811017, "to": 6718939920, "type": "DATA" }, { "from": 6489811035, "to": 6718928416, "type": "DATA" }, { "from": 6489811116, "to": 6718940016, "type": "DATA" }, { "from": 6489811127, "to": 6709766648, "type": "DATA" }, { "from": 6489811137, "to": 6718940056, "type": "DATA" }, { "from": 6489811178, "to": 6718940248, "type": "DATA" }, { "from": 6489811258, "to": 6718940288, "type": "DATA" }, { "from": 6489811272, "to": 6718940328, "type": "DATA" }, { "from": 6489811313, "to": 6718940520, "type": "DATA" }, { "from": 6489811393, "to": 6718940608, "type": "DATA" }, { "from": 6489811407, "to": 6718940648, "type": "DATA" }, { "from": 6489811446, "to": 6718928432, "type": "DATA" }, { "from": 6489811526, "to": 6718940896, "type": "DATA" }, { "from": 6489811540, "to": 6718940936, "type": "DATA" }, { "from": 6489811579, "to": 6718941128, "type": "DATA" }, { "from": 6489811637, "to": 6718941872, "type": "DATA" }, { "from": 6489811655, "to": 6718941168, "type": "DATA" }, { "from": 6489811722, "to": 6727266112, "type": "DATA" }, { "from": 6489811743, "to": 6718941984, "type": "DATA" }, { "from": 6489811754, "to": 6709766648, "type": "DATA" }, { "from": 6489811764, "to": 6718942024, "type": "DATA" }, { "from": 6489811803, "to": 6718928456, "type": "DATA" }, { "from": 6489811883, "to": 6718942272, "type": "DATA" }, { "from": 6489811897, "to": 6718942312, "type": "DATA" }, { "from": 6489811936, "to": 6718928472, "type": "DATA" }, { "from": 6489812016, "to": 6718942528, "type": "DATA" }, { "from": 6489812030, "to": 6718942568, "type": "DATA" }, { "from": 6489812074, "to": 6718942760, "type": "DATA" }, { "from": 6489812153, "to": 6718942832, "type": "DATA" }, { "from": 6489812167, "to": 6718942872, "type": "DATA" }, { "from": 6489812213, "to": 6718943064, "type": "DATA" }, { "from": 6489812293, "to": 6718943136, "type": "DATA" }, { "from": 6489812307, "to": 6718943176, "type": "DATA" }, { "from": 6489812349, "to": 6718943368, "type": "DATA" }, { "from": 6489812407, "to": 6718944528, "type": "DATA" }, { "from": 6489812425, "to": 6718943440, "type": "DATA" }, { "from": 6489812481, "to": 6718946000, "type": "DATA" }, { "from": 6489812499, "to": 6718944640, "type": "DATA" }, { "from": 6489812555, "to": 6718946640, "type": "DATA" }, { "from": 6489812573, "to": 6718929136, "type": "DATA" }, { "from": 6489812654, "to": 6718946768, "type": "DATA" }, { "from": 6489812665, "to": 6709766648, "type": "DATA" }, { "from": 6489812675, "to": 6718946808, "type": "DATA" }, { "from": 6489812721, "to": 6718929160, "type": "DATA" }, { "from": 6489812801, "to": 6718947056, "type": "DATA" }, { "from": 6489812815, "to": 6718947096, "type": "DATA" }, { "from": 6489812857, "to": 6717246160, "type": "DATA" }, { "from": 6489812937, "to": 6718947344, "type": "DATA" }, { "from": 6489812951, "to": 6718947384, "type": "DATA" }, { "from": 6489812997, "to": 6718928496, "type": "DATA" }, { "from": 6489813077, "to": 6718947600, "type": "DATA" }, { "from": 6489813091, "to": 6718947640, "type": "DATA" }, { "from": 6489813133, "to": 6718947832, "type": "DATA" }, { "from": 6489813213, "to": 6718947936, "type": "DATA" }, { "from": 6489813227, "to": 6718947976, "type": "DATA" }, { "from": 6489813273, "to": 6718928512, "type": "DATA" }, { "from": 6489813353, "to": 6718948240, "type": "DATA" }, { "from": 6489813367, "to": 6718948280, "type": "DATA" }, { "from": 6489813409, "to": 6718928528, "type": "DATA" }, { "from": 6489813489, "to": 6718948544, "type": "DATA" }, { "from": 6489813503, "to": 6718948584, "type": "DATA" }, { "from": 6489813549, "to": 6715117464, "type": "DATA" }, { "from": 6489813607, "to": 6718950000, "type": "DATA" }, { "from": 6489813625, "to": 6718948832, "type": "DATA" }, { "from": 6489813703, "to": 6718950112, "type": "DATA" }, { "from": 6489813717, "to": 6718950152, "type": "DATA" }, { "from": 6489813759, "to": 6713609120, "type": "DATA" }, { "from": 6489813842, "to": 6718950400, "type": "DATA" }, { "from": 6489813859, "to": 6718950440, "type": "DATA" }, { "from": 6489813905, "to": 6718928112, "type": "DATA" }, { "from": 6489813985, "to": 6718950688, "type": "DATA" }, { "from": 6489813999, "to": 6718950728, "type": "DATA" }, { "from": 6489814041, "to": 6718928136, "type": "DATA" }, { "from": 6489814099, "to": 6718951504, "type": "DATA" }, { "from": 6489814117, "to": 6718929208, "type": "DATA" }, { "from": 6489814201, "to": 6718951632, "type": "DATA" }, { "from": 6489814218, "to": 6718951672, "type": "DATA" }, { "from": 6489814265, "to": 6718929232, "type": "DATA" }, { "from": 6489814345, "to": 6718951920, "type": "DATA" }, { "from": 6489814359, "to": 6718951960, "type": "DATA" }, { "from": 6489814401, "to": 6718928152, "type": "DATA" }, { "from": 6489814484, "to": 6718952208, "type": "DATA" }, { "from": 6489814501, "to": 6718952248, "type": "DATA" }, { "from": 6489814547, "to": 6718928168, "type": "DATA" }, { "from": 6489814627, "to": 6718952464, "type": "DATA" }, { "from": 6489814641, "to": 6718952504, "type": "DATA" }, { "from": 6489814683, "to": 6718952696, "type": "DATA" }, { "from": 6489814763, "to": 6718952768, "type": "DATA" }, { "from": 6489814777, "to": 6718952808, "type": "DATA" }, { "from": 6489814823, "to": 6718929256, "type": "DATA" }, { "from": 6489814903, "to": 6718953072, "type": "DATA" }, { "from": 6489814917, "to": 6718953112, "type": "DATA" }, { "from": 6489814959, "to": 6718928552, "type": "DATA" }, { "from": 6489815039, "to": 6718953376, "type": "DATA" }, { "from": 6489815053, "to": 6718953416, "type": "DATA" }, { "from": 6489815099, "to": 6718928584, "type": "DATA" }, { "from": 6489815179, "to": 6718953680, "type": "DATA" }, { "from": 6489815193, "to": 6718953720, "type": "DATA" }, { "from": 6489815235, "to": 6718928616, "type": "DATA" }, { "from": 6489815315, "to": 6718953968, "type": "DATA" }, { "from": 6489815329, "to": 6718954008, "type": "DATA" }, { "from": 6489815375, "to": 6718928640, "type": "DATA" }, { "from": 6489815455, "to": 6718954272, "type": "DATA" }, { "from": 6489815469, "to": 6718954312, "type": "DATA" }, { "from": 6489815511, "to": 6718928664, "type": "DATA" }, { "from": 6489815591, "to": 6718954576, "type": "DATA" }, { "from": 6489815605, "to": 6718954616, "type": "DATA" }, { "from": 6489815651, "to": 6718928696, "type": "DATA" }, { "from": 6489815731, "to": 6718954832, "type": "DATA" }, { "from": 6489815745, "to": 6718954872, "type": "DATA" }, { "from": 6489815787, "to": 6718955064, "type": "DATA" }, { "from": 6489815867, "to": 6718955168, "type": "DATA" }, { "from": 6489815881, "to": 6718955208, "type": "DATA" }, { "from": 6489815927, "to": 6718929272, "type": "DATA" }, { "from": 6489816007, "to": 6718955472, "type": "DATA" }, { "from": 6489816021, "to": 6718955512, "type": "DATA" }, { "from": 6489816063, "to": 6718929304, "type": "DATA" }, { "from": 6489816143, "to": 6718955744, "type": "DATA" }, { "from": 6489816157, "to": 6718955784, "type": "DATA" }, { "from": 6489816203, "to": 6718955976, "type": "DATA" }, { "from": 6489816283, "to": 6718956064, "type": "DATA" }, { "from": 6489816297, "to": 6718956104, "type": "DATA" }, { "from": 6489816339, "to": 6718956296, "type": "DATA" }, { "from": 6489816418, "to": 6718956384, "type": "DATA" }, { "from": 6489816432, "to": 6718956424, "type": "DATA" }, { "from": 6489816478, "to": 6718956616, "type": "DATA" }, { "from": 6489816558, "to": 6718956688, "type": "DATA" }, { "from": 6489816572, "to": 6718956728, "type": "DATA" }, { "from": 6489816614, "to": 6718956920, "type": "DATA" }, { "from": 6489816694, "to": 6718956992, "type": "DATA" }, { "from": 6489816708, "to": 6718957032, "type": "DATA" }, { "from": 6489816754, "to": 6718957224, "type": "DATA" }, { "from": 6489816833, "to": 6718957360, "type": "DATA" }, { "from": 6489816847, "to": 6718957400, "type": "DATA" }, { "from": 6489816889, "to": 6718957592, "type": "DATA" }, { "from": 6489816968, "to": 6718957792, "type": "DATA" }, { "from": 6489816982, "to": 6718957832, "type": "DATA" }, { "from": 6489817028, "to": 6718928232, "type": "DATA" }, { "from": 6489817108, "to": 6718958080, "type": "DATA" }, { "from": 6489817122, "to": 6718958120, "type": "DATA" }, { "from": 6489817164, "to": 6718928256, "type": "DATA" }, { "from": 6489817244, "to": 6718958336, "type": "DATA" }, { "from": 6489817258, "to": 6718958376, "type": "DATA" }, { "from": 6489817304, "to": 6714880832, "type": "DATA" }, { "from": 6489817384, "to": 6718958592, "type": "DATA" }, { "from": 6489817398, "to": 6718958632, "type": "DATA" }, { "from": 6489817440, "to": 6718958824, "type": "DATA" }, { "from": 6489817520, "to": 6718958864, "type": "DATA" }, { "from": 6489817534, "to": 6718958904, "type": "DATA" }, { "from": 6489817580, "to": 6718959096, "type": "DATA" }, { "from": 6489817660, "to": 6718959152, "type": "DATA" }, { "from": 6489817674, "to": 6718959192, "type": "DATA" }, { "from": 6489817716, "to": 6718959384, "type": "DATA" }, { "from": 6489817796, "to": 6718959424, "type": "DATA" }, { "from": 6489817810, "to": 6718959464, "type": "DATA" }, { "from": 6489817856, "to": 6718959656, "type": "DATA" }, { "from": 6489817936, "to": 6718959712, "type": "DATA" }, { "from": 6489817950, "to": 6718959752, "type": "DATA" }, { "from": 6489817992, "to": 6718959944, "type": "DATA" }, { "from": 6489818071, "to": 6718960000, "type": "DATA" }, { "from": 6489818085, "to": 6718960040, "type": "DATA" }, { "from": 6489818131, "to": 6718960232, "type": "DATA" }, { "from": 6489818211, "to": 6718960288, "type": "DATA" }, { "from": 6489818225, "to": 6718960328, "type": "DATA" }, { "from": 6489818267, "to": 6718960520, "type": "DATA" }, { "from": 6489818347, "to": 6718960560, "type": "DATA" }, { "from": 6489818361, "to": 6718960600, "type": "DATA" }, { "from": 6489818407, "to": 6718216424, "type": "DATA" }, { "from": 6489818487, "to": 6718960816, "type": "DATA" }, { "from": 6489818501, "to": 6718960856, "type": "DATA" }, { "from": 6489818543, "to": 6718961048, "type": "DATA" }, { "from": 6489818623, "to": 6718961104, "type": "DATA" }, { "from": 6489818637, "to": 6718961144, "type": "DATA" }, { "from": 6489818683, "to": 6718036728, "type": "DATA" }, { "from": 6489818763, "to": 6718961344, "type": "DATA" }, { "from": 6489818777, "to": 6718961384, "type": "DATA" }, { "from": 6489818819, "to": 6718961576, "type": "DATA" }, { "from": 6489818899, "to": 6718961664, "type": "DATA" }, { "from": 6489818913, "to": 6718961704, "type": "DATA" }, { "from": 6489818959, "to": 6718928720, "type": "DATA" }, { "from": 6489819042, "to": 6718961920, "type": "DATA" }, { "from": 6489819056, "to": 6718961960, "type": "DATA" }, { "from": 6489819098, "to": 6718962152, "type": "DATA" }, { "from": 6489819156, "to": 6718962784, "type": "DATA" }, { "from": 6489819174, "to": 6718929336, "type": "DATA" }, { "from": 6489819236, "to": 6718963408, "type": "DATA" }, { "from": 6489819254, "to": 6718962872, "type": "DATA" }, { "from": 6489819310, "to": 6718964064, "type": "DATA" }, { "from": 6489819328, "to": 6718929904, "type": "DATA" }, { "from": 6489819379, "to": 6718964672, "type": "DATA" }, { "from": 6489819397, "to": 6718964152, "type": "DATA" }, { "from": 6489819453, "to": 6727266168, "type": "DATA" }, { "from": 6489819477, "to": 6718964784, "type": "DATA" }, { "from": 6489819494, "to": 6718964824, "type": "DATA" }, { "from": 6489819540, "to": 6718928744, "type": "DATA" }, { "from": 6489819620, "to": 6718965056, "type": "DATA" }, { "from": 6489819634, "to": 6718965096, "type": "DATA" }, { "from": 6489819676, "to": 6718928276, "type": "DATA" }, { "from": 6489819759, "to": 6718965344, "type": "DATA" }, { "from": 6489819773, "to": 6718965384, "type": "DATA" }, { "from": 6489819819, "to": 6718928760, "type": "DATA" }, { "from": 6489819899, "to": 6718965648, "type": "DATA" }, { "from": 6489819913, "to": 6718965688, "type": "DATA" }, { "from": 6489819955, "to": 6718928776, "type": "DATA" }, { "from": 6489820035, "to": 6718965936, "type": "DATA" }, { "from": 6489820049, "to": 6718965976, "type": "DATA" }, { "from": 6489820095, "to": 6718288224, "type": "DATA" }, { "from": 6489820175, "to": 6718966224, "type": "DATA" }, { "from": 6489820189, "to": 6718966264, "type": "DATA" }, { "from": 6489820231, "to": 6712688072, "type": "DATA" }, { "from": 6489820311, "to": 6718966480, "type": "DATA" }, { "from": 6489820325, "to": 6718966520, "type": "DATA" }, { "from": 6489820371, "to": 6718966712, "type": "DATA" }, { "from": 6489820451, "to": 6718966800, "type": "DATA" }, { "from": 6489820465, "to": 6718966840, "type": "DATA" }, { "from": 6489820507, "to": 6718929360, "type": "DATA" }, { "from": 6489820587, "to": 6718967088, "type": "DATA" }, { "from": 6489820601, "to": 6718967128, "type": "DATA" }, { "from": 6489820647, "to": 6718929384, "type": "DATA" }, { "from": 6489820727, "to": 6718967376, "type": "DATA" }, { "from": 6489820741, "to": 6718967416, "type": "DATA" }, { "from": 6489820783, "to": 6718929528, "type": "DATA" }, { "from": 6489820841, "to": 6718968128, "type": "DATA" }, { "from": 6489820859, "to": 6718205320, "type": "DATA" }, { "from": 6489820940, "to": 6718968240, "type": "DATA" }, { "from": 6489820954, "to": 6718968280, "type": "DATA" }, { "from": 6489821000, "to": 6718968472, "type": "DATA" }, { "from": 6489821058, "to": 6718969040, "type": "DATA" }, { "from": 6489821076, "to": 6718929408, "type": "DATA" }, { "from": 6489821154, "to": 6718969136, "type": "DATA" }, { "from": 6489821168, "to": 6718969176, "type": "DATA" }, { "from": 6489821210, "to": 6718969368, "type": "DATA" }, { "from": 6489821268, "to": 6718970240, "type": "DATA" }, { "from": 6489821286, "to": 6718929432, "type": "DATA" }, { "from": 6489821342, "to": 6718971200, "type": "DATA" }, { "from": 6489821360, "to": 6718148564, "type": "DATA" }, { "from": 6489821415, "to": 6718972416, "type": "DATA" }, { "from": 6489821433, "to": 6718971304, "type": "DATA" }, { "from": 6489821500, "to": 6727266112, "type": "DATA" }, { "from": 6489821521, "to": 6718972544, "type": "DATA" }, { "from": 6489821532, "to": 6709766648, "type": "DATA" }, { "from": 6489821542, "to": 6718972584, "type": "DATA" }, { "from": 6489821588, "to": 6718972776, "type": "DATA" }, { "from": 6489821668, "to": 6718972848, "type": "DATA" }, { "from": 6489821682, "to": 6718972888, "type": "DATA" }, { "from": 6489821724, "to": 6718973080, "type": "DATA" }, { "from": 6489821804, "to": 6718973152, "type": "DATA" }, { "from": 6489821818, "to": 6718973192, "type": "DATA" }, { "from": 6489821864, "to": 6717240992, "type": "DATA" }, { "from": 6489821944, "to": 6718973392, "type": "DATA" }, { "from": 6489821958, "to": 6718973432, "type": "DATA" }, { "from": 6489822000, "to": 6718973624, "type": "DATA" }, { "from": 6489822083, "to": 6718973680, "type": "DATA" }, { "from": 6489822097, "to": 6718973720, "type": "DATA" }, { "from": 6489822144, "to": 6712694280, "type": "DATA" }, { "from": 6489822224, "to": 6718973968, "type": "DATA" }, { "from": 6489822238, "to": 6718974008, "type": "DATA" }, { "from": 6489822280, "to": 6718929456, "type": "DATA" }, { "from": 6489822363, "to": 6718974256, "type": "DATA" }, { "from": 6489822380, "to": 6718974296, "type": "DATA" }, { "from": 6489822426, "to": 6717347664, "type": "DATA" }, { "from": 6489822506, "to": 6718974544, "type": "DATA" }, { "from": 6489822520, "to": 6718974584, "type": "DATA" }, { "from": 6489822562, "to": 6718288880, "type": "DATA" }, { "from": 6489822642, "to": 6718974832, "type": "DATA" }, { "from": 6489822656, "to": 6718974872, "type": "DATA" }, { "from": 6489822702, "to": 6718975064, "type": "DATA" }, { "from": 6489822782, "to": 6718975120, "type": "DATA" }, { "from": 6489822796, "to": 6718975160, "type": "DATA" }, { "from": 6489822838, "to": 6718929848, "type": "DATA" }, { "from": 6489822896, "to": 6718975936, "type": "DATA" }, { "from": 6489822914, "to": 6718929480, "type": "DATA" }, { "from": 6489822998, "to": 6718976064, "type": "DATA" }, { "from": 6489823012, "to": 6718976104, "type": "DATA" }, { "from": 6489823058, "to": 6718929504, "type": "DATA" }, { "from": 6489823138, "to": 6718976320, "type": "DATA" }, { "from": 6489823152, "to": 6718976360, "type": "DATA" }, { "from": 6489823194, "to": 6717233984, "type": "DATA" }, { "from": 6489823274, "to": 6718976576, "type": "DATA" }, { "from": 6489823288, "to": 6718976616, "type": "DATA" }, { "from": 6489823334, "to": 6718976808, "type": "DATA" }, { "from": 6489823413, "to": 6718976864, "type": "DATA" }, { "from": 6489823427, "to": 6718976904, "type": "DATA" }, { "from": 6489823469, "to": 6718977096, "type": "DATA" }, { "from": 6489823549, "to": 6718977184, "type": "DATA" }, { "from": 6489823563, "to": 6718977224, "type": "DATA" }, { "from": 6489823609, "to": 6718928840, "type": "DATA" }, { "from": 6489823667, "to": 6718977952, "type": "DATA" }, { "from": 6489823685, "to": 6718977440, "type": "DATA" }, { "from": 6489823763, "to": 6718978064, "type": "DATA" }, { "from": 6489823777, "to": 6718978104, "type": "DATA" }, { "from": 6489823819, "to": 6718928856, "type": "DATA" }, { "from": 6489823899, "to": 6718978352, "type": "DATA" }, { "from": 6489823913, "to": 6718978392, "type": "DATA" }, { "from": 6489823959, "to": 6718928864, "type": "DATA" }, { "from": 6489824039, "to": 6718978656, "type": "DATA" }, { "from": 6489824053, "to": 6718978696, "type": "DATA" }, { "from": 6489824095, "to": 6718929544, "type": "DATA" }, { "from": 6489824175, "to": 6718979040, "type": "DATA" }, { "from": 6489824189, "to": 6718979080, "type": "DATA" }, { "from": 6489824235, "to": 6718979272, "type": "DATA" }, { "from": 6489824315, "to": 6718979344, "type": "DATA" }, { "from": 6489824329, "to": 6718979384, "type": "DATA" }, { "from": 6489824371, "to": 6718928880, "type": "DATA" }, { "from": 6489824429, "to": 6718980144, "type": "DATA" }, { "from": 6489824447, "to": 6718929576, "type": "DATA" }, { "from": 6489824525, "to": 6718980272, "type": "DATA" }, { "from": 6489824539, "to": 6718980312, "type": "DATA" }, { "from": 6489824585, "to": 6718929600, "type": "DATA" }, { "from": 6489824665, "to": 6718980560, "type": "DATA" }, { "from": 6489824679, "to": 6718980600, "type": "DATA" }, { "from": 6489824721, "to": 6712687432, "type": "DATA" }, { "from": 6489824801, "to": 6718980848, "type": "DATA" }, { "from": 6489824818, "to": 6718980888, "type": "DATA" }, { "from": 6489824864, "to": 6717255688, "type": "DATA" }, { "from": 6489824922, "to": 6718981648, "type": "DATA" }, { "from": 6489824940, "to": 6718929624, "type": "DATA" }, { "from": 6489825001, "to": 6727266168, "type": "DATA" }, { "from": 6489825011, "to": 6727266112, "type": "DATA" }, { "from": 6489825032, "to": 6718981760, "type": "DATA" }, { "from": 6489825046, "to": 6718981800, "type": "DATA" }, { "from": 6489825088, "to": 6718928912, "type": "DATA" }, { "from": 6489825168, "to": 6718982064, "type": "DATA" }, { "from": 6489825182, "to": 6718982104, "type": "DATA" }, { "from": 6489825228, "to": 6718929640, "type": "DATA" }, { "from": 6489825308, "to": 6718982352, "type": "DATA" }, { "from": 6489825322, "to": 6718982392, "type": "DATA" }, { "from": 6489825364, "to": 6718982584, "type": "DATA" }, { "from": 6489825444, "to": 6718982656, "type": "DATA" }, { "from": 6489825461, "to": 6718982696, "type": "DATA" }, { "from": 6489825507, "to": 6718929672, "type": "DATA" }, { "from": 6489825565, "to": 6718983408, "type": "DATA" }, { "from": 6489825583, "to": 6718205288, "type": "DATA" }, { "from": 6489825639, "to": 6718984560, "type": "DATA" }, { "from": 6489825657, "to": 6718205408, "type": "DATA" }, { "from": 6489825708, "to": 6718985168, "type": "DATA" }, { "from": 6489825726, "to": 6718205528, "type": "DATA" }, { "from": 6489825793, "to": 6727266112, "type": "DATA" }, { "from": 6489825814, "to": 6718985296, "type": "DATA" }, { "from": 6489825828, "to": 6718985336, "type": "DATA" }, { "from": 6489825870, "to": 6718929056, "type": "DATA" }, { "from": 6489825928, "to": 6718986048, "type": "DATA" }, { "from": 6489825946, "to": 6718205236, "type": "DATA" }, { "from": 6489826002, "to": 6718986640, "type": "DATA" }, { "from": 6489826020, "to": 6718205504, "type": "DATA" }, { "from": 6489826101, "to": 6718986752, "type": "DATA" }, { "from": 6489826118, "to": 6718986792, "type": "DATA" }, { "from": 6489826164, "to": 6718929864, "type": "DATA" }, { "from": 6489826244, "to": 6718987008, "type": "DATA" }, { "from": 6489826261, "to": 6718987048, "type": "DATA" }, { "from": 6489826303, "to": 6718987240, "type": "DATA" }, { "from": 6489826361, "to": 6718988080, "type": "DATA" }, { "from": 6489826379, "to": 6718205472, "type": "DATA" }, { "from": 6489826435, "to": 6718988672, "type": "DATA" }, { "from": 6489826453, "to": 6718205424, "type": "DATA" }, { "from": 6489826509, "to": 6718989280, "type": "DATA" }, { "from": 6489826527, "to": 6718988784, "type": "DATA" }, { "from": 6489826588, "to": 6727266168, "type": "DATA" }, { "from": 6489826609, "to": 6718989376, "type": "DATA" }, { "from": 6489826623, "to": 6718989416, "type": "DATA" }, { "from": 6489826667, "to": 6718989608, "type": "DATA" }, { "from": 6489826725, "to": 6718990176, "type": "DATA" }, { "from": 6489826743, "to": 6718205264, "type": "DATA" }, { "from": 6489826799, "to": 6718991040, "type": "DATA" }, { "from": 6489826817, "to": 6718205520, "type": "DATA" }, { "from": 6489826873, "to": 6718991600, "type": "DATA" }, { "from": 6489826891, "to": 6718928928, "type": "DATA" }, { "from": 6489826947, "to": 6718992192, "type": "DATA" }, { "from": 6489826965, "to": 6718205304, "type": "DATA" }, { "from": 6489827021, "to": 6718992784, "type": "DATA" }, { "from": 6489827039, "to": 6718205360, "type": "DATA" }, { "from": 6489827095, "to": 6718993344, "type": "DATA" }, { "from": 6489827113, "to": 6718205616, "type": "DATA" }, { "from": 6489827169, "to": 6718993936, "type": "DATA" }, { "from": 6489827187, "to": 6718205376, "type": "DATA" }, { "from": 6489827243, "to": 6718994528, "type": "DATA" }, { "from": 6489827261, "to": 6718205552, "type": "DATA" }, { "from": 6489827317, "to": 6727266168, "type": "DATA" }, { "from": 6489827341, "to": 6718994656, "type": "DATA" }, { "from": 6489827355, "to": 6718994696, "type": "DATA" }, { "from": 6489827399, "to": 6718205568, "type": "DATA" }, { "from": 6489827474, "to": 6718994944, "type": "DATA" }, { "from": 6489827491, "to": 6718994984, "type": "DATA" }, { "from": 6489827537, "to": 6718205592, "type": "DATA" }, { "from": 6489827595, "to": 6718995696, "type": "DATA" }, { "from": 6489827613, "to": 6718205536, "type": "DATA" }, { "from": 6489827669, "to": 6718996288, "type": "DATA" }, { "from": 6489827687, "to": 6718995784, "type": "DATA" }, { "from": 6489827754, "to": 6727266112, "type": "DATA" }, { "from": 6489827775, "to": 6718996368, "type": "DATA" }, { "from": 6489827789, "to": 6718996408, "type": "DATA" }, { "from": 6489827831, "to": 6718996600, "type": "DATA" }, { "from": 6489827914, "to": 6718996640, "type": "DATA" }, { "from": 6489827931, "to": 6718996680, "type": "DATA" }, { "from": 6489827978, "to": 6718996872, "type": "DATA" }, { "from": 6489828057, "to": 6718996912, "type": "DATA" }, { "from": 6489828071, "to": 6718996952, "type": "DATA" }, { "from": 6489828113, "to": 6718997144, "type": "DATA" }, { "from": 6489828199, "to": 6718997184, "type": "DATA" }, { "from": 6489828213, "to": 6718997224, "type": "DATA" }, { "from": 6489828259, "to": 6718997416, "type": "DATA" }, { "from": 6489828317, "to": 6718997968, "type": "DATA" }, { "from": 6489828335, "to": 6718205248, "type": "DATA" }, { "from": 6489828413, "to": 6718998080, "type": "DATA" }, { "from": 6489828427, "to": 6718998120, "type": "DATA" }, { "from": 6489828469, "to": 6718205456, "type": "DATA" }, { "from": 6489828527, "to": 6718998976, "type": "DATA" }, { "from": 6489828545, "to": 6718205632, "type": "DATA" }, { "from": 6489828601, "to": 6718999568, "type": "DATA" }, { "from": 6489828619, "to": 6718205344, "type": "DATA" }, { "from": 6489828675, "to": 6719000160, "type": "DATA" }, { "from": 6489828693, "to": 6718205488, "type": "DATA" }, { "from": 6489828749, "to": 6719000752, "type": "DATA" }, { "from": 6489828767, "to": 6718205392, "type": "DATA" }, { "from": 6489828823, "to": 6719001344, "type": "DATA" }, { "from": 6489828841, "to": 6718205440, "type": "DATA" }, { "from": 6489828892, "to": 6719002576, "type": "DATA" }, { "from": 6489828910, "to": 6718488764, "type": "DATA" }, { "from": 6489828994, "to": 6719002656, "type": "DATA" }, { "from": 6489829008, "to": 6719002696, "type": "DATA" }, { "from": 6489829054, "to": 6719002888, "type": "DATA" }, { "from": 6489829112, "to": 6719003488, "type": "DATA" }, { "from": 6489829130, "to": 6719002976, "type": "DATA" }, { "from": 6489829186, "to": 6719004096, "type": "DATA" }, { "from": 6489829204, "to": 6719003584, "type": "DATA" }, { "from": 6489829282, "to": 6719004176, "type": "DATA" }, { "from": 6489829296, "to": 6719004216, "type": "DATA" }, { "from": 6489829338, "to": 6719004408, "type": "DATA" }, { "from": 6489829421, "to": 6719004448, "type": "DATA" }, { "from": 6489829438, "to": 6719004488, "type": "DATA" }, { "from": 6489829484, "to": 6719004680, "type": "DATA" }, { "from": 6489829564, "to": 6719004720, "type": "DATA" }, { "from": 6489829578, "to": 6719004760, "type": "DATA" }, { "from": 6489829620, "to": 6719004952, "type": "DATA" }, { "from": 6489829700, "to": 6719004992, "type": "DATA" }, { "from": 6489829714, "to": 6719005032, "type": "DATA" }, { "from": 6489829760, "to": 6719005224, "type": "DATA" }, { "from": 6489829818, "to": 6719006032, "type": "DATA" }, { "from": 6489829836, "to": 6719005256, "type": "DATA" }, { "from": 6489829895, "to": 6727266112, "type": "DATA" }, { "from": 6489829916, "to": 6719006112, "type": "DATA" }, { "from": 6489829930, "to": 6719006152, "type": "DATA" }, { "from": 6489829972, "to": 6719006344, "type": "DATA" }, { "from": 6489830030, "to": 6719006896, "type": "DATA" }, { "from": 6489830048, "to": 6719006384, "type": "DATA" }, { "from": 6489830104, "to": 6719007472, "type": "DATA" }, { "from": 6489830122, "to": 6719006976, "type": "DATA" }, { "from": 6489830203, "to": 6719007552, "type": "DATA" }, { "from": 6489830217, "to": 6719007592, "type": "DATA" }, { "from": 6489830263, "to": 6719007784, "type": "DATA" }, { "from": 6489830321, "to": 6719008320, "type": "DATA" }, { "from": 6489830339, "to": 6719007824, "type": "DATA" }, { "from": 6489830417, "to": 6719008400, "type": "DATA" }, { "from": 6489830431, "to": 6719008440, "type": "DATA" }, { "from": 6489830473, "to": 6719008632, "type": "DATA" }, { "from": 6489830531, "to": 6719009184, "type": "DATA" }, { "from": 6489830549, "to": 6719008672, "type": "DATA" }, { "from": 6489830605, "to": 6719010032, "type": "DATA" }, { "from": 6489830623, "to": 6719009264, "type": "DATA" }, { "from": 6489830690, "to": 6727266112, "type": "DATA" }, { "from": 6489830711, "to": 6719010112, "type": "DATA" }, { "from": 6489830725, "to": 6719010152, "type": "DATA" }, { "from": 6489830771, "to": 6719010344, "type": "DATA" }, { "from": 6489830851, "to": 6719010384, "type": "DATA" }, { "from": 6489830868, "to": 6719010424, "type": "DATA" }, { "from": 6489830910, "to": 6719010616, "type": "DATA" }, { "from": 6489830968, "to": 6719011200, "type": "DATA" }, { "from": 6489830986, "to": 6718929688, "type": "DATA" }, { "from": 6489831042, "to": 6719011824, "type": "DATA" }, { "from": 6489831060, "to": 6719011296, "type": "DATA" }, { "from": 6489831116, "to": 6719012400, "type": "DATA" }, { "from": 6489831134, "to": 6718928944, "type": "DATA" }, { "from": 6489831190, "to": 6719012992, "type": "DATA" }, { "from": 6489831208, "to": 6712153664, "type": "DATA" }, { "from": 6489831269, "to": 6727266168, "type": "DATA" }, { "from": 6489831279, "to": 6727266112, "type": "DATA" }, { "from": 6489831300, "to": 6719013104, "type": "DATA" }, { "from": 6489831314, "to": 6719013144, "type": "DATA" }, { "from": 6489831360, "to": 6718928984, "type": "DATA" }, { "from": 6489831418, "to": 6719013872, "type": "DATA" }, { "from": 6489831436, "to": 6718929704, "type": "DATA" }, { "from": 6489831514, "to": 6719014000, "type": "DATA" }, { "from": 6489831528, "to": 6719014040, "type": "DATA" }, { "from": 6489831570, "to": 6718929720, "type": "DATA" }, { "from": 6489831628, "to": 6719014768, "type": "DATA" }, { "from": 6489831646, "to": 6718929000, "type": "DATA" }, { "from": 6489831724, "to": 6719014896, "type": "DATA" }, { "from": 6489831738, "to": 6719014936, "type": "DATA" }, { "from": 6489831784, "to": 6718929016, "type": "DATA" }, { "from": 6489831864, "to": 6719015184, "type": "DATA" }, { "from": 6489831878, "to": 6719015224, "type": "DATA" }, { "from": 6489831920, "to": 6718929040, "type": "DATA" }, { "from": 6489832000, "to": 6719015472, "type": "DATA" }, { "from": 6489832014, "to": 6719015512, "type": "DATA" }, { "from": 6489832060, "to": 6718929744, "type": "DATA" }, { "from": 6489832140, "to": 6719015776, "type": "DATA" }, { "from": 6489832154, "to": 6719015816, "type": "DATA" }, { "from": 6489832196, "to": 6718929760, "type": "DATA" }, { "from": 6489832279, "to": 6719016064, "type": "DATA" }, { "from": 6489832293, "to": 6719016104, "type": "DATA" }, { "from": 6489832339, "to": 6718929792, "type": "DATA" }, { "from": 6489832419, "to": 6719016448, "type": "DATA" }, { "from": 6489832433, "to": 6719016488, "type": "DATA" }, { "from": 6489832475, "to": 6719016680, "type": "DATA" }, { "from": 6489832555, "to": 6719016752, "type": "DATA" }, { "from": 6489832569, "to": 6719016792, "type": "DATA" }, { "from": 6489832613, "to": 6719016984, "type": "DATA" }, { "from": 6489832671, "to": 6719018064, "type": "DATA" }, { "from": 6489832689, "to": 6718516424, "type": "DATA" }, { "from": 6489832745, "to": 6719018656, "type": "DATA" }, { "from": 6489832763, "to": 6719018152, "type": "DATA" }, { "from": 6489832819, "to": 6719019248, "type": "DATA" }, { "from": 6489832837, "to": 6719018744, "type": "DATA" }, { "from": 6489832893, "to": 6719019840, "type": "DATA" }, { "from": 6489832911, "to": 6719019336, "type": "DATA" }, { "from": 6489832967, "to": 6719020432, "type": "DATA" }, { "from": 6489832985, "to": 6719019928, "type": "DATA" }, { "from": 6489833041, "to": 6719021040, "type": "DATA" }, { "from": 6489833059, "to": 6719020520, "type": "DATA" }, { "from": 6489833115, "to": 6719021648, "type": "DATA" }, { "from": 6489833133, "to": 6719021128, "type": "DATA" }, { "from": 6489833189, "to": 6719022240, "type": "DATA" }, { "from": 6489833207, "to": 6719021736, "type": "DATA" }, { "from": 6489833264, "to": 6719022848, "type": "DATA" }, { "from": 6489833282, "to": 6719022328, "type": "DATA" }, { "from": 6489833333, "to": 6719023440, "type": "DATA" }, { "from": 6489833351, "to": 6719022936, "type": "DATA" }, { "from": 6489833402, "to": 6719024032, "type": "DATA" }, { "from": 6489833420, "to": 6719023528, "type": "DATA" }, { "from": 6489833471, "to": 6719024624, "type": "DATA" }, { "from": 6489833489, "to": 6719024120, "type": "DATA" }, { "from": 6489833545, "to": 6727266168, "type": "DATA" }, { "from": 6489833552, "to": 6727266112, "type": "DATA" }, { "from": 6489833570, "to": 6719024752, "type": "DATA" }, { "from": 6489833584, "to": 6719024792, "type": "DATA" }, { "from": 6489833628, "to": 6719024984, "type": "DATA" }, { "from": 6489833670, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x1907ac8f8", "offset": 276479224, "ascii": "accessibilityFeatures", "wide": null }, { "va": "0x190f9ef78", "offset": 284812152, "ascii": "SimpleFeature", "wide": null }, { "va": "0x190f9ef40", "offset": 284812096, "ascii": "..\\..\\extensions\\common\\features\\simple_feature.cc", "wide": null }, { "va": "0x1907ab5e8", "offset": 276474344, "ascii": "accessibilityPrivate", "wide": null }, { "va": "0x1907acfc8", "offset": 276480968, "ascii": "accessibilityPrivate.onTwoFingerTouchStart", "wide": null }, { "va": "0x1907ad188", "offset": 276481416, "ascii": "accessibilityPrivate.onTwoFingerTouchStop", "wide": null }, { "va": "0x1907ab600", "offset": 276474368, "ascii": "accessibilityServicePrivate", "wide": null }, { "va": "0x19014e768", "offset": 269802344, "ascii": "action", "wide": null }, { "va": "0x1907ab8b8", "offset": 276475064, "ascii": "activityLogPrivate", "wide": null }, { "va": "0x1906fc0b0", "offset": 275756208, "ascii": "app", "wide": null }, { "va": "0x1907ada48", "offset": 276483656, "ascii": "appviewTag", "wide": null }, { "va": "0x1907ab8d0", "offset": 276475088, "ascii": "autofillPrivate", "wide": null }, { "va": "0x1907ab8e0", "offset": 276475104, "ascii": "autotestPrivate", "wide": null }, { "va": "0x1907adf98", "offset": 276485016, "ascii": "bookmarkManagerPrivate", "wide": null }, { "va": "0x1907ab620", "offset": 276474400, "ascii": "bookmarks", "wide": null }, { "va": "0x1907ae458", "offset": 276486232, "ascii": "bookmarks.export", "wide": null }, { "va": "0x1907ae568", "offset": 276486504, "ascii": "bookmarks.import", "wide": null }, { "va": "0x1907ab630", "offset": 276474416, "ascii": "brailleDisplayPrivate", "wide": null }, { "va": "0x1907ae7c8", "offset": 276487112, "ascii": "browserAction", "wide": null }, { "va": "0x1907ae7f0", "offset": 276487152, "ascii": "browserAction.openPopup", "wide": null }, { "va": "0x1907ab648", "offset": 276474440, "ascii": "browsingData", "wide": null }, { "va": "0x1907ab658", "offset": 276474456, "ascii": "certificateProvider", "wide": null }, { "va": "0x1907aee28", "offset": 276488744, "ascii": "certificateProvider.onCertificatesRequested", "wide": null }, { "va": "0x1907aef58", "offset": 276489048, "ascii": "certificateProvider.onSignDigestRequested", "wide": null }, { "va": "0x1907af088", "offset": 276489352, "ascii": "certificateProviderInternal", "wide": null }, { "va": "0x1907af0d0", "offset": 276489424, "ascii": "chromeWebViewInternal", "wide": null }, { "va": "0x1907af580", "offset": 276490624, "ascii": "chromeWebViewTag", "wide": null }, { "va": "0x1907ab8f0", "offset": 276475120, "ascii": "chromeosInfoPrivate", "wide": null }, { "va": "0x1907ab908", "offset": 276475144, "ascii": "commandLinePrivate", "wide": null }, { "va": "0x190610ad0", "offset": 274792144, "ascii": "commands", "wide": null }, { "va": "0x1907ab670", "offset": 276474480, "ascii": "contentSettings", "wide": null }, { "va": "0x1907b01f8", "offset": 276493816, "ascii": "contentSettings.clipboard", "wide": null }, { "va": "0x1907ab680", "offset": 276474496, "ascii": "contextMenus", "wide": null }, { "va": "0x1907ab690", "offset": 276474512, "ascii": "contextualTasksPrivate", "wide": null }, { "va": "0x190408f98", "offset": 272663448, "ascii": "cookies", "wide": null }, { "va": "0x1907b05e0", "offset": 276494816, "ascii": "crashReportPrivate", "wide": null }, { "va": "0x190298ba0", "offset": 271155104, "ascii": "debugger", "wide": null }, { "va": "0x1907ab4f0", "offset": 276474096, "ascii": "declarativeContent", "wide": null }, { "va": "0x1907ab508", "offset": 276474120, "ascii": "desktopCapture", "wide": null }, { "va": "0x1907ab938", "offset": 276475192, "ascii": "developerPrivate", "wide": null }, { "va": "0x1907ab950", "offset": 276475216, "ascii": "dictationPrivate", "wide": null }, { "va": "0x1907ab518", "offset": 276474136, "ascii": "documentScan", "wide": null }, { "va": "0x1907ab528", "offset": 276474152, "ascii": "downloads", "wide": null }, { "va": "0x1907b14f8", "offset": 276498680, "ascii": "downloadsInternal", "wide": null }, { "va": "0x1907ab968", "offset": 276475240, "ascii": "echoPrivate", "wide": null }, { "va": "0x1907ab6a8", "offset": 276474536, "ascii": "enterprise.deviceAttributes", "wide": null }, { "va": "0x1907ab6c8", "offset": 276474568, "ascii": "enterprise.hardwarePlatform", "wide": null }, { "va": "0x1907ab6e8", "offset": 276474600, "ascii": "enterprise.kioskInput", "wide": null }, { "va": "0x1907ab700", "offset": 276474624, "ascii": "enterprise.login", "wide": null }, { "va": "0x1907ab718", "offset": 276474648, "ascii": "enterprise.networkingAttributes", "wide": null }, { "va": "0x1907ab738", "offset": 276474680, "ascii": "enterprise.platformKeys", "wide": null }, { "va": "0x1907b1e38", "offset": 276501048, "ascii": "enterprise.platformKeysInternal", "wide": null }, { "va": "0x1907ab978", "offset": 276475256, "ascii": "enterprise.platformKeysPrivate", "wide": null }, { "va": "0x1907ab998", "offset": 276475288, "ascii": "enterprise.reportingPrivate", "wide": null }, { "va": "0x1907b21c8", "offset": 276501960, "ascii": "enterprise.reportingPrivate.getAvInfo", "wide": null }, { "va": "0x1907b2308", "offset": 276502280, "ascii": "enterprise.reportingPrivate.getFileSystemInfo", "wide": null }, { "va": "0x1907b2448", "offset": 276502600, "ascii": "enterprise.reportingPrivate.getHotfixes", "wide": null }, { "va": "0x1907b2578", "offset": 276502904, "ascii": "enterprise.reportingPrivate.getSettings", "wide": null }, { "va": "0x1907b26a8", "offset": 276503208, "ascii": "enterprise.reportingPrivate.onDataMaskingRulesTriggered", "wide": null }, { "va": "0x1907b2818", "offset": 276503576, "ascii": "enterprise.reportingPrivate.reportForceSaveToCloudEventHandled", "wide": null }, { "va": "0x1907ab568", "offset": 276474216, "ascii": "experimentalActor", "wide": null }, { "va": "0x1907ab580", "offset": 276474240, "ascii": "experimentalAiData", "wide": null }, { "va": "0x1903cf340", "offset": 272426816, "ascii": "extension", "wide": null }, { "va": "0x1907b2ce8", "offset": 276504808, "ascii": "extension.getBackgroundPage", "wide": null }, { "va": "0x1907b2df8", "offset": 276505080, "ascii": "extension.getExtensionTabs", "wide": null }, { "va": "0x1907b2f18", "offset": 276505368, "ascii": "extension.getURL", "wide": null }, { "va": "0x1907b3028", "offset": 276505640, "ascii": "extension.getViews", "wide": null }, { "va": "0x1907b3148", "offset": 276505928, "ascii": "extension.inIncognitoContext", "wide": null }, { "va": "0x1907b3268", "offset": 276506216, "ascii": "extension.lastError", "wide": null }, { "va": "0x1907b3388", "offset": 276506504, "ascii": "extension.onRequest", "wide": null }, { "va": "0x1906fd8e8", "offset": 275762408, "ascii": "extension.onRequestExternal", "wide": null }, { "va": "0x1907b3598", "offset": 276507032, "ascii": "extension.sendRequest", "wide": null }, { "va": "0x1906d1af8", "offset": 275582712, "ascii": "extensionOptionsInternal", "wide": null }, { "va": "0x1907b37a8", "offset": 276507560, "ascii": "extensionsManifestTypes", "wide": null }, { "va": "0x1907ab750", "offset": 276474704, "ascii": "fileBrowserHandler", "wide": null }, { "va": "0x1907b39e8", "offset": 276508136, "ascii": "fileBrowserHandlerInternal", "wide": null }, { "va": "0x1907ab9b8", "offset": 276475320, "ascii": "fileManagerPrivate", "wide": null }, { "va": "0x1907b3cb8", "offset": 276508856, "ascii": "fileManagerPrivateInternal", "wide": null }, { "va": "0x1907abbf0", "offset": 276475888, "ascii": "fileSystemProvider", "wide": null }, { "va": "0x1907b41b8", "offset": 276510136, "ascii": "fileSystemProviderInternal", "wide": null }, { "va": "0x1907ab768", "offset": 276474728, "ascii": "fontSettings", "wide": null }, { "va": "0x1907ab594", "offset": 276474260, "ascii": "gcm", "wide": null }, { "va": "0x1907ab778", "offset": 276474744, "ascii": "glicPrivate", "wide": null }, { "va": "0x1907ab788", "offset": 276474760, "ascii": "glicPrivate.invoke", "wide": null }, { "va": "0x19070f160", "offset": 275834208, "ascii": "history", "wide": null }, { "va": "0x1901b7dc8", "offset": 270234056, "ascii": "identity", "wide": null }, { "va": "0x1907b4bb8", "offset": 276512696, "ascii": "identity.getAccounts", "wide": null }, { "va": "0x1907ab9d0", "offset": 276475344, "ascii": "imageLoaderPrivate", "wide": null }, { "va": "0x1907ab9e8", "offset": 276475368, "ascii": "imageWriterPrivate", "wide": null }, { "va": "0x1907aba78", "offset": 276475512, "ascii": "indigoPrivate", "wide": null }, { "va": "0x1906fad88", "offset": 275751304, "ascii": "innerWebContents", "wide": null }, { "va": "0x1907b5298", "offset": 276514456, "ascii": "input.ime", "wide": null }, { "va": "0x1907aba00", "offset": 276475392, "ascii": "inputMethodPrivate", "wide": null }, { "va": "0x1907b5618", "offset": 276515352, "ascii": "instanceID", "wide": null }, { "va": "0x1907aba18", "offset": 276475416, "ascii": "languageSettingsPrivate", "wide": null }, { "va": "0x1906ecfd4", "offset": 275694548, "ascii": "login", "wide": null }, { "va": "0x1907b5da8", "offset": 276517288, "ascii": "login.exitCurrentSession", "wide": null }, { "va": "0x1907b6368", "offset": 276518760, "ascii": "loginScreenStorage", "wide": null }, { "va": "0x1907b6498", "offset": 276519064, "ascii": "loginScreenUi", "wide": null }, { "va": "0x19060f6a0", "offset": 274786976, "ascii": "loginState", "wide": null }, { "va": "0x1907b66b8", "offset": 276519608, "ascii": "manifestTypes", "wide": null }, { "va": "0x1901b9608", "offset": 270240264, "ascii": "mdns", "wide": null }, { "va": "0x1907aba30", "offset": 276475440, "ascii": "mediaPlayerPrivate", "wide": null }, { "va": "0x190629750", "offset": 274893648, "ascii": "notifications", "wide": null }, { "va": "0x19070f3f0", "offset": 275834864, "ascii": "omnibox", "wide": null }, { "va": "0x1907b6c58", "offset": 276521048, "ascii": "pageAction", "wide": null }, { "va": "0x1907abbb8", "offset": 276475832, "ascii": "pageCapture", "wide": null }, { "va": "0x1907aba48", "offset": 276475464, "ascii": "passwordsPrivate", "wide": null }, { "va": "0x1907aba60", "offset": 276475488, "ascii": "pdfViewerPrivate", "wide": null }, { "va": "0x19060db40", "offset": 274779968, "ascii": "permissions", "wide": null }, { "va": "0x1907b7328", "offset": 276522792, "ascii": "permissions.addHostAccessRequest", "wide": null }, { "va": "0x1907b7448", "offset": 276523080, "ascii": "permissions.removeHostAccessRequest", "wide": null }, { "va": "0x1907ab7c8", "offset": 276474824, "ascii": "platformKeys", "wide": null }, { "va": "0x1907b75a0", "offset": 276523424, "ascii": "platformKeysInternal", "wide": null }, { "va": "0x1907ab7d8", "offset": 276474840, "ascii": "privacy", "wide": null }, { "va": "0x1907ab7e0", "offset": 276474848, "ascii": "processes", "wide": null }, { "va": "0x1907aba88", "offset": 276475528, "ascii": "proxyOverrideRulesPrivate", "wide": null }, { "va": "0x1907b7cc8", "offset": 276525256, "ascii": "quickUnlockPrivate", "wide": null }, { "va": "0x1907ab7f0", "offset": 276474864, "ascii": "readingList", "wide": null }, { "va": "0x1907abaa8", "offset": 276475560, "ascii": "resourcesPrivate", "wide": null }, { "va": "0x1907abac0", "offset": 276475584, "ascii": "safeBrowsingPrivate", "wide": null }, { "va": "0x1901b7b48", "offset": 270233416, "ascii": "search", "wide": null }, { "va": "0x190613008", "offset": 274801672, "ascii": "sessions", "wide": null }, { "va": "0x1907abad8", "offset": 276475608, "ascii": "settingsPrivate", "wide": null }, { "va": "0x1907ab810", "offset": 276474896, "ascii": "sidePanel", "wide": null }, { "va": "0x1907abae8", "offset": 276475624, "ascii": "smartCardProviderPrivate", "wide": null }, { "va": "0x1907b89b8", "offset": 276528568, "ascii": "systemLog", "wide": null }, { "va": "0x1907abb08", "offset": 276475656, "ascii": "systemPrivate", "wide": null }, { "va": "0x1906fad68", "offset": 275751272, "ascii": "tabAiPrivacy", "wide": null }, { "va": "0x1906fade0", "offset": 275751392, "ascii": "tabAnalytics", "wide": null }, { "va": "0x1906fae58", "offset": 275751512, "ascii": "tabAuth", "wide": null }, { "va": "0x1907ab8a0", "offset": 276475040, "ascii": "tabAutomationInput", "wide": null }, { "va": "0x1906fad34", "offset": 275751220, "ascii": "tabCDP", "wide": null }, { "va": "0x1906fae40", "offset": 275751488, "ascii": "tabCDPBridge", "wide": null }, { "va": "0x1907abbc8", "offset": 276475848, "ascii": "tabCapture", "wide": null }, { "va": "0x1907b9be8", "offset": 276533224, "ascii": "tabCapture.capture", "wide": null }, { "va": "0x1906fae20", "offset": 275751456, "ascii": "tabChannel", "wide": null }, { "va": "0x1906fadf0", "offset": 275751408, "ascii": "tabChatExt", "wide": null }, { "va": "0x1907ba1f0", "offset": 276534768, "ascii": "tabChatExt.executeCommand", "wide": null }, { "va": "0x1907ba528", "offset": 276535592, "ascii": "tabChatExt.getSelectionContent", "wide": null }, { "va": "0x1906fad50", "offset": 275751248, "ascii": "tabContentExtractor", "wide": null }, { "va": "0x1906fae50", "offset": 275751504, "ascii": "tabGlic", "wide": null }, { "va": "0x1907ab820", "offset": 276474912, "ascii": "tabGroups", "wide": null }, { "va": "0x1906fad78", "offset": 275751288, "ascii": "tabGroupsExt", "wide": null }, { "va": "0x1906fadb0", "offset": 275751344, "ascii": "tabInstance", "wide": null }, { "va": "0x1906faeb0", "offset": 275751600, "ascii": "tabLocalAgent", "wide": null }, { "va": "0x1906fadc0", "offset": 275751360, "ascii": "tabLocalAgents", "wide": null }, { "va": "0x1906fae70", "offset": 275751536, "ascii": "tabLocalFS", "wide": null }, { "va": "0x1906fae80", "offset": 275751552, "ascii": "tabLocalFilePreview", "wide": null }, { "va": "0x1906fae98", "offset": 275751576, "ascii": "tabLocalWorkspace", "wide": null }, { "va": "0x1906fae60", "offset": 275751520, "ascii": "tabMessaging", "wide": null }, { "va": "0x1907bbd48", "offset": 276541768, "ascii": "tabMessaging.getVersion", "wide": null }, { "va": "0x1907bc078", "offset": 276542584, "ascii": "tabMessaging.onMessage", "wide": null }, { "va": "0x1907bc188", "offset": 276542856, "ascii": "tabMessaging.registerListener", "wide": null }, { "va": "0x1907bc298", "offset": 276543128, "ascii": "tabMessaging.sendResponse", "wide": null }, { "va": "0x1907bc3a8", "offset": 276543400, "ascii": "tabMessaging.unregisterListener", "wide": null }, { "va": "0x1906fad40", "offset": 275751232, "ascii": "tabOmnibox", "wide": null }, { "va": "0x1906fae10", "offset": 275751440, "ascii": "tabOrganize", "wide": null }, { "va": "0x1906faec0", "offset": 275751616, "ascii": "tabReadingSpace", "wide": null }, { "va": "0x1906fada0", "offset": 275751328, "ascii": "tabSignin", "wide": null }, { "va": "0x1906fae30", "offset": 275751472, "ascii": "tabThemeColor", "wide": null }, { "va": "0x1906fadd0", "offset": 275751376, "ascii": "tabUserPrefs", "wide": null }, { "va": "0x1906fae00", "offset": 275751424, "ascii": "tabWindowExt", "wide": null }, { "va": "0x1907400bc", "offset": 276034748, "ascii": "tabs", "wide": null }, { "va": "0x1907bd908", "offset": 276548872, "ascii": "tabs.createSplit", "wide": null }, { "va": "0x1907bd960", "offset": 276548960, "ascii": "tabs.disableTabAnimation", "wide": null }, { "va": "0x1907bdbc0", "offset": 276549568, "ascii": "tabs.enableTabAnimation", "wide": null }, { "va": "0x1907bdef8", "offset": 276550392, "ascii": "tabs.executeScript", "wide": null }, { "va": "0x1907be008", "offset": 276550664, "ascii": "tabs.getAllInWindow", "wide": null }, { "va": "0x1907be118", "offset": 276550936, "ascii": "tabs.getSelected", "wide": null }, { "va": "0x1907be228", "offset": 276551208, "ascii": "tabs.insertCSS", "wide": null }, { "va": "0x1907be248", "offset": 276551240, "ascii": "tabs.onActivated", "wide": null }, { "va": "0x1907be688", "offset": 276552328, "ascii": "tabs.onActiveChanged", "wide": null }, { "va": "0x1907be6b0", "offset": 276552368, "ascii": "tabs.onActiveTabChanged", "wide": null }, { "va": "0x1907be900", "offset": 276552960, "ascii": "tabs.onCreated", "wide": null }, { "va": "0x1907bec28", "offset": 276553768, "ascii": "tabs.onHighlightChanged", "wide": null }, { "va": "0x1907bec50", "offset": 276553808, "ascii": "tabs.onRemoved", "wide": null }, { "va": "0x1907bef78", "offset": 276554616, "ascii": "tabs.onSelectionChanged", "wide": null }, { "va": "0x1907befa0", "offset": 276554656, "ascii": "tabs.onTabModelUpdated", "wide": null }, { "va": "0x1907bf1f0", "offset": 276555248, "ascii": "tabs.onUpdated", "wide": null }, { "va": "0x1907bf628", "offset": 276556328, "ascii": "tabs.removeCSS", "wide": null }, { "va": "0x1907bf738", "offset": 276556600, "ascii": "tabs.sendRequest", "wide": null }, { "va": "0x1907abb18", "offset": 276475672, "ascii": "terminalPrivate", "wide": null }, { "va": "0x1907bf9e0", "offset": 276557280, "ascii": "terminalPrivate.openTerminalProcess", "wide": null }, { "va": "0x1907ab830", "offset": 276474928, "ascii": "topSites", "wide": null }, { "va": "0x190135640", "offset": 269699648, "ascii": "tts", "wide": null }, { "va": "0x1907ab858", "offset": 276474968, "ascii": "ttsEngine", "wide": null }, { "va": "0x1907abb28", "offset": 276475688, "ascii": "usersPrivate", "wide": null }, { "va": "0x1907abb38", "offset": 276475704, "ascii": "virtualKeyboardPrivate", "wide": null }, { "va": "0x1907ab868", "offset": 276474984, "ascii": "wallpaper", "wide": null }, { "va": "0x1907ab878", "offset": 276475000, "ascii": "webAuthenticationProxy", "wide": null }, { "va": "0x1907ab890", "offset": 276475024, "ascii": "webNavigation", "wide": null }, { "va": "0x1907abb50", "offset": 276475728, "ascii": "webcamPrivate", "wide": null }, { "va": "0x1907abb60", "offset": 276475744, "ascii": "webrtcDesktopCapturePrivate", "wide": null }, { "va": "0x1907abb80", "offset": 276475776, "ascii": "webrtcLoggingPrivate", "wide": null }, { "va": "0x1907c0ee8", "offset": 276562664, "ascii": "webrtcLoggingPrivate.getLogsDirectory", "wide": null }, { "va": "0x1907c1018", "offset": 276562968, "ascii": "webviewTag", "wide": null }, { "va": "0x190746cc8", "offset": 276062408, "ascii": "windows", "wide": null }, { "va": "0x1907c14a8", "offset": 276564136, "ascii": "windows.create", "wide": null }, { "va": "0x1907c16f8", "offset": 276564728, "ascii": "windows.get", "wide": null }, { "va": "0x1907c1948", "offset": 276565320, "ascii": "windows.getAll", "wide": null }, { "va": "0x1907c1b98", "offset": 276565912, "ascii": "windows.getCurrent", "wide": null }, { "va": "0x1907c1de8", "offset": 276566504, "ascii": "windows.getLastFocused", "wide": null }, { "va": "0x1907c2048", "offset": 276567112, "ascii": "windows.onBoundsChanged", "wide": null }, { "va": "0x1907c22a8", "offset": 276567720, "ascii": "windows.onCreated", "wide": null }, { "va": "0x1907c24f8", "offset": 276568312, "ascii": "windows.onFocusChanged", "wide": null }, { "va": "0x1907c2758", "offset": 276568920, "ascii": "windows.onRemoved", "wide": null }, { "va": "0x1907c29a8", "offset": 276569512, "ascii": "windows.remove", "wide": null }, { "va": "0x1907c2bf8", "offset": 276570104, "ascii": "windows.update", "wide": null }, { "va": "0x1907c2f58", "offset": 276570968, "ascii": "wmDesksPrivate", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 158788 }, { "label": "p-factory-tabAutomationInput-click", "file": "rea-p-factory-tabAutomationInput-click.json", "file_sha256": "1b6fcf07fdcd197bc74735e98996b122b4de46c34ad0c8f5e19352a85c387b7d", "status": "completed", "evidence_id": "ev_48361e401cd45ee69c15a534530048c2485d8efbaa4a8580cb825308c8c4ce09", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18398a740;pdgo @ 0x18398a740;afij @ 0x18398a740", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18398a740", "size": 66, "nargs": 1, "signature": "fcn.18398a740(int64_t arg1);", "callrefs": [ { "from": 6502786894, "to": 6542067384, "type": "CALL" }, { "from": 6502786905, "to": 6499894320, "type": "CALL" } ], "datarefs": [] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 1055 }, { "label": "p-factory-tabCapture-capture", "file": "rea-p-factory-tabCapture-capture.json", "file_sha256": "6a79b4f6f494319f07e4ed175b1b1b66221becb5ec080407443c9fab9391441d", "status": "completed", "evidence_id": "ev_e6e58136acdaa845468a171557e0864e5bf71fd94a20a91a7affaade23a65a7d", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18bd87550;pdgo @ 0x18bd87550;afij @ 0x18bd87550", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18bd87550", "size": 16892, "nargs": 1, "signature": "fcn.18bd87550(int64_t arg1);", "callrefs": [ { "from": 6641186128, "to": 6641202928, "type": "CODE" }, { "from": 6641202942, "to": 6542067384, "type": "CALL" }, { "from": 6641202961, "to": 6542434496, "type": "CALL" }, { "from": 6641202969, "to": 6587957152, "type": "CALL" } ], "datarefs": [ { "from": 6641202974, "to": 6711382120, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "工厂体／边界合并警告", "record_kind": "pseudocode", "pseudocode_chars": 1245 }, { "label": "p-factory-tabChatExt-showTabSidePanel", "file": "rea-p-factory-tabChatExt-showTabSidePanel.json", "file_sha256": "6bffc60dd5e1c507b8e6f9885713a393cfb645f2200fd3dee288a17d17a8cc58", "status": "completed", "evidence_id": "ev_1b3fe666bf453ffcc17233520892bcd171c53ace4138f961df22007a09c3a965", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183988ee0;pdgo @ 0x183988ee0;afij @ 0x183988ee0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183988ee0", "size": 92, "nargs": 1, "signature": "fcn.183988ee0(int64_t arg1);", "callrefs": [ { "from": 6502780654, "to": 6542067384, "type": "CALL" }, { "from": 6502780673, "to": 6542434496, "type": "CALL" }, { "from": 6502780681, "to": 6587957152, "type": "CALL" } ], "datarefs": [ { "from": 6502780686, "to": 6711397544, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 1245 }, { "label": "p-factory-tabContentExtractor-extractPdfText", "file": "rea-p-factory-tabContentExtractor-extractPdfText.json", "file_sha256": "e8c3ecbf00e0087f257e7967d9de251bbf4333a8e6af9782ad363ed4450d6d9b", "status": "completed", "evidence_id": "ev_21c2693d6ba4f1df2a06a49089c05c3c2dba713ccf896886d59605cfac287a74", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1839888f0;pdgo @ 0x1839888f0;afij @ 0x1839888f0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1839888f0", "size": 279, "nargs": 1, "signature": "fcn.1839888f0(int64_t arg1);", "callrefs": [ { "from": 6502779134, "to": 6542067384, "type": "CALL" }, { "from": 6502779145, "to": 6587957152, "type": "CALL" } ], "datarefs": [ { "from": 6502779277, "to": 6709836760, "type": "DATA" }, { "from": 6502779353, "to": 6711340904, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 3323 }, { "label": "p-factory-tabInstance-desktopPetGoOut", "file": "rea-p-factory-tabInstance-desktopPetGoOut.json", "file_sha256": "3d50e587be9d6a2d0e72c3dc2d883d6fb67ef1ba109b2c6da8042ee497d62517", "status": "completed", "evidence_id": "ev_2fa98d2bb7b9c5dc93da1a4caf02d4c54fa32283a20a50d2c0c7b19ba31c6433", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18398a100;pdgo @ 0x18398a100;afij @ 0x18398a100", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18398a100", "size": 76, "nargs": 1, "signature": "fcn.18398a100(int64_t arg1);", "callrefs": [ { "from": 6502785294, "to": 6542067384, "type": "CALL" }, { "from": 6502785305, "to": 6587957152, "type": "CALL" } ], "datarefs": [ { "from": 6502785310, "to": 6711343400, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 1187 }, { "label": "p-factory-tabOrganize-handleExtensionOrganizeResult", "file": "rea-p-factory-tabOrganize-handleExtensionOrganizeResult.json", "file_sha256": "857faa59b4555b1e7bf0edaa531ddea81109075e1ddeea3aadf52e966e21a21b", "status": "completed", "evidence_id": "ev_c3d65e8c2880f0f1f8e013c72f2071a1a25360bf857b00d4995aba0c61e65cd6", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18398a9c0;pdgo @ 0x18398a9c0;afij @ 0x18398a9c0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18398a9c0", "size": 76, "nargs": 1, "signature": "fcn.18398a9c0(int64_t arg1);", "callrefs": [ { "from": 6502787534, "to": 6542067384, "type": "CALL" }, { "from": 6502787545, "to": 6587957152, "type": "CALL" } ], "datarefs": [ { "from": 6502787550, "to": 6711346568, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 1187 }, { "label": "p-factory-tabThemeColor-setDarkMode", "file": "rea-p-factory-tabThemeColor-setDarkMode.json", "file_sha256": "94c1e64044a78c664b22fdeac20d1c5f41d5dc437e99ca94f4426970bf96dae0", "status": "completed", "evidence_id": "ev_05a70959bd3b3e3a2cc51b6a5d43c60029128be5d7b9482a58c66bc704ac3176", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18398ac00;pdgo @ 0x18398ac00;afij @ 0x18398ac00", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18398ac00", "size": 76, "nargs": 1, "signature": "fcn.18398ac00(int64_t arg1);", "callrefs": [ { "from": 6502788110, "to": 6542067384, "type": "CALL" }, { "from": 6502788121, "to": 6587957152, "type": "CALL" } ], "datarefs": [ { "from": 6502788126, "to": 6711347720, "type": "DATA" } ] }, "strings": [], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 1187 }, { "label": "p-field-trace", "file": "rea-p-field-trace.json", "file_sha256": "3220f82fb6bed9311aa71b0fa00e7e4f55294d679ba0b8e4b8df8aa1dcf0a8cd", "status": "completed", "evidence_id": "ev_aa01512ad4d607dca1dfe718f1c1ef3e7c58d8244f32dcb2cef86987bc8f7f17", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1834b6b60;pdgo @ 0x1834b6b60;afij @ 0x1834b6b60", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834b6b60", "size": 1184, "nargs": 4, "signature": "fcn.1834b6b60(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6497725349, "to": 6464561680, "type": "CALL" }, { "from": 6497725562, "to": 6514577840, "type": "CALL" }, { "from": 6497725570, "to": 6511396000, "type": "CALL" }, { "from": 6497725613, "to": 6542067384, "type": "CALL" }, { "from": 6497725722, "to": 6497726480, "type": "CALL" }, { "from": 6497725735, "to": 6511512544, "type": "CALL" }, { "from": 6497725756, "to": 6511512544, "type": "CALL" }, { "from": 6497725829, "to": 6497725499, "type": "CODE" }, { "from": 6497725841, "to": 6511729936, "type": "CALL" }, { "from": 6497725846, "to": 6497725402, "type": "CODE" }, { "from": 6497725860, "to": 6740346544, "type": "CALL" }, { "from": 6497725866, "to": 6497725769, "type": "CODE" }, { "from": 6497725873, "to": 6542067384, "type": "CALL" }, { "from": 6497725997, "to": 6497726480, "type": "CALL" }, { "from": 6497726007, "to": 6497725732, "type": "CODE" }, { "from": 6497726041, "to": 6740346544, "type": "CALL" }, { "from": 6497726047, "to": 6497725478, "type": "CODE" }, { "from": 6497726063, "to": 6511512544, "type": "CALL" }, { "from": 6497726085, "to": 6497725427, "type": "CODE" }, { "from": 6497726111, "to": 6511512544, "type": "CALL" }, { "from": 6497726116, "to": 6497725478, "type": "CODE" }, { "from": 6497726166, "to": 6542067384, "type": "CALL" }, { "from": 6497726243, "to": 6542067384, "type": "CALL" }, { "from": 6497726365, "to": 6512942288, "type": "CALL" }, { "from": 6497726386, "to": 6595875904, "type": "CALL" }, { "from": 6497726391, "to": 6497725740, "type": "CODE" }, { "from": 6497726411, "to": 6511730288, "type": "CALL" }, { "from": 6497726416, "to": 6497725402, "type": "CODE" }, { "from": 6497726435, "to": 6511512544, "type": "CALL" }, { "from": 6497726440, "to": 6497726103, "type": "CODE" }, { "from": 6497726456, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6497725309, "to": 6740709440, "type": "DATA" }, { "from": 6497725516, "to": 6712085216, "type": "DATA" }, { "from": 6497725657, "to": 6722562928, "type": "DATA" }, { "from": 6497725684, "to": 6722562939, "type": "DATA" }, { "from": 6497725696, "to": 6722562928, "type": "DATA" }, { "from": 6497725780, "to": 6740709440, "type": "DATA" }, { "from": 6497725917, "to": 6722562880, "type": "DATA" }, { "from": 6497725944, "to": 6722562911, "type": "DATA" }, { "from": 6497725956, "to": 6722562896, "type": "DATA" }, { "from": 6497725968, "to": 6722562880, "type": "DATA" }, { "from": 6497726026, "to": 6488537248, "type": "DATA" }, { "from": 6497726178, "to": 6497735616, "type": "DATA" }, { "from": 6497726189, "to": 6488510160, "type": "DATA" }, { "from": 6497726200, "to": 6496570832, "type": "DATA" }, { "from": 6497726211, "to": 6497726848, "type": "DATA" }, { "from": 6497726250, "to": 6496878368, "type": "DATA" }, { "from": 6497726261, "to": 6488537520, "type": "DATA" }, { "from": 6497726272, "to": 6511490512, "type": "DATA" }, { "from": 6497726283, "to": 6609668896, "type": "DATA" }, { "from": 6497726337, "to": 6718457404, "type": "DATA" }, { "from": 6497726344, "to": 6722562968, "type": "DATA" }, { "from": 6497726370, "to": 6722562956, "type": "DATA" } ] }, "strings": [ { "va": "0x190b22b70", "offset": 280108912, "ascii": "The trace payload is empty.", "wide": null }, { "va": "0x190b22b7b", "offset": 280108923, "ascii": "ayload is empty.", "wide": null }, { "va": "0x190b22b40", "offset": 280108864, "ascii": "Network loader is unavailable for trace upload.", "wide": null }, { "va": "0x190b22b5f", "offset": 280108895, "ascii": "or trace upload.", "wide": null }, { "va": "0x190b22b50", "offset": 280108880, "ascii": "s unavailable for trace upload.", "wide": null }, { "va": "0x19073863c", "offset": 276003388, "ascii": "Upload", "wide": null }, { "va": "0x190b22b98", "offset": 280108952, "ascii": "..\\..\\tab\\browser\\tracing\\field_trace_uploader.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 14128 }, { "label": "p-history-handler-query", "file": "rea-p-history-handler-query.json", "file_sha256": "b084e24935a338536d4a9f1b67e31da13369f52498c2bf4ffe5ffa42d105a164", "status": "completed", "evidence_id": "ev_08e91b503bdec87a91b3d83b632848686209d2b6f632d35bd0e3506e0d911955", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;s 0x18a0722e0;af;afu 0x18a0724f6;pdg @ 0x18a0722e0;afij @ 0x18a0722e0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18a0722e0", "size": 531, "nargs": 4, "signature": "fcn.18a0722e0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6610690872, "to": 6522896976, "type": "CALL" }, { "from": 6610690903, "to": 6511423872, "type": "CALL" }, { "from": 6610690930, "to": 6511423872, "type": "CALL" }, { "from": 6610690943, "to": 6535596784, "type": "CALL" }, { "from": 6610690971, "to": 6536048032, "type": "CALL" }, { "from": 6610690987, "to": 6536048032, "type": "CALL" }, { "from": 6610691001, "to": 6610710672, "type": "CALL" }, { "from": 6610691009, "to": 6511633968, "type": "CALL" }, { "from": 6610691039, "to": 6512942288, "type": "CALL" }, { "from": 6610691047, "to": 6481183328, "type": "CALL" }, { "from": 6610691089, "to": 6511423872, "type": "CALL" }, { "from": 6610691122, "to": 6511423872, "type": "CALL" }, { "from": 6610691145, "to": 6537503712, "type": "CALL" }, { "from": 6610691168, "to": 6511423872, "type": "CALL" }, { "from": 6610691249, "to": 6528059648, "type": "CALL" }, { "from": 6610691257, "to": 6511633968, "type": "CALL" }, { "from": 6610691309, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6610690811, "to": 6740709440, "type": "DATA" }, { "from": 6610690836, "to": 6707197376, "type": "DATA" }, { "from": 6610690846, "to": 6709761712, "type": "DATA" }, { "from": 6610690857, "to": 6707197504, "type": "DATA" }, { "from": 6610690891, "to": 6741126408, "type": "DATA" }, { "from": 6610690918, "to": 6741126408, "type": "DATA" }, { "from": 6610691014, "to": 6722721976, "type": "DATA" }, { "from": 6610691021, "to": 6722721904, "type": "DATA" }, { "from": 6610691074, "to": 6741126408, "type": "DATA" }, { "from": 6610691094, "to": 6741126408, "type": "DATA" }, { "from": 6610691156, "to": 6741126408, "type": "DATA" }, { "from": 6610691270, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190b498b8", "offset": 280267960, "ascii": "BrowsingHistoryHandler", "wide": null }, { "va": "0x190b49870", "offset": 280267888, "ascii": "..\\..\\chrome\\browser\\ui\\webui\\history\\browsing_history_handler.cc", "wide": null } ], "imports": [], "status_display": "汇编核对", "record_kind": "assembly", "pseudocode_chars": 2856 }, { "label": "p-history-import-result-bounded", "file": "rea-p-history-import-result-bounded.json", "file_sha256": "a6bf5e78c508e7b539976df0a994714e62ed8a5abbd64d977fb10e8141fbe2f0", "status": "completed", "evidence_id": "ev_0227bcc299c8a68a5b8dcdd3a6efd48e94ce044b15aa934a1be4027486530bfc", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;s 0x1834540f0;af;afu 0x1834542c1;pdg @ 0x1834540f0;afij @ 0x1834540f0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834540f0", "size": 54486865, "nargs": 1, "signature": "fcn.1834540f0(int64_t arg1);", "callrefs": [ { "from": 6442835090, "to": 6442835190, "type": "CODE" }, { "from": 6442835418, "to": 6542067676, "type": "CALL" }, { "from": 6442835699, "to": 6442835603, "type": "CODE" }, { "from": 6442835849, "to": 6542434496, "type": "CALL" }, { "from": 6442835879, "to": 6740380256, "type": "CALL" }, { "from": 6442835892, "to": 6513228480, "type": "CALL" }, { "from": 6442836084, "to": 6442835987, "type": "CODE" }, { "from": 6442836089, "to": 6511982528, "type": "CALL" }, { "from": 6442836094, "to": 6442835658, "type": "CODE" }, { "from": 6442836107, "to": 6502986064, "type": "CALL" }, { "from": 6442836134, "to": 6442835324, "type": "CODE" }, { "from": 6442836148, "to": 6526943040, "type": "CALL" }, { "from": 6442836153, "to": 6442835342, "type": "CODE" }, { "from": 6442836213, "to": 6442835682, "type": "CODE" }, { "from": 6442836231, "to": 6511977968, "type": "CALL" }, { "from": 6442836236, "to": 6442835646, "type": "CODE" }, { "from": 6442836267, "to": 6442835297, "type": "CODE" }, { "from": 6442836285, "to": 6511979808, "type": "CALL" }, { "from": 6442836290, "to": 6442836058, "type": "CODE" }, { "from": 6442836299, "to": 6442835724, "type": "CODE" }, { "from": 6442836313, "to": 6642659344, "type": "CALL" }, { "from": 6442836323, "to": 6642659440, "type": "CALL" }, { "from": 6442836336, "to": 6442835682, "type": "CODE" }, { "from": 6442836345, "to": 6442835835, "type": "CODE" }, { "from": 6442836694, "to": 6442836794, "type": "CODE" }, { "from": 6442837040, "to": 6542067676, "type": "CALL" }, { "from": 6442837110, "to": 6495376016, "type": "CALL" }, { "from": 6442837158, "to": 6502986064, "type": "CALL" }, { "from": 6442837185, "to": 6442836938, "type": "CODE" }, { "from": 6442837199, "to": 6526943040, "type": "CALL" }, { "from": 6442837204, "to": 6442836956, "type": "CODE" }, { "from": 6442837264, "to": 6442837115, "type": "CODE" }, { "from": 6442837290, "to": 6495371760, "type": "CALL" }, { "from": 6442837295, "to": 6442837115, "type": "CODE" }, { "from": 6442837326, "to": 6442836900, "type": "CODE" }, { "from": 6442837344, "to": 6542089024, "type": "CALL" }, { "from": 6497321277, "to": 6511733920, "type": "CALL" }, { "from": 6497321296, "to": 6740346544, "type": "CALL" }, { "from": 6497321393, "to": 6497321344, "type": "CODE" }, { "from": 6497321405, "to": 6740346544, "type": "CALL" }, { "from": 6497321445, "to": 6511512544, "type": "CALL" }, { "from": 6497321450, "to": 6497321344, "type": "CODE" }, { "from": 6497321466, "to": 6497321325, "type": "CODE" }, { "from": 6497321481, "to": 6740346544, "type": "CALL" }, { "from": 6497321521, "to": 6511512544, "type": "CALL" }, { "from": 6497321526, "to": 6497321325, "type": "CODE" }, { "from": 6497321534, "to": 6740346544, "type": "CALL" }, { "from": 6497321540, "to": 6497321344, "type": "CODE" }, { "from": 6497321548, "to": 6740346544, "type": "CALL" }, { "from": 6497321554, "to": 6497321325, "type": "CODE" }, { "from": 6497321573, "to": 6497321367, "type": "CODE" }, { "from": 6497321588, "to": 6740346544, "type": "CALL" }, { "from": 6497321639, "to": 6511512544, "type": "CODE" }, { "from": 6497321658, "to": 6497321620, "type": "CODE" }, { "from": 6497321658, "to": 6542091152, "type": "CODE" }, { "from": 6497321658, "to": 6542433696, "type": "CODE" }, { "from": 6497321658, "to": 6542433728, "type": "CODE" } ], "datarefs": [ { "from": 6442834836, "to": 6741126400, "type": "DATA" }, { "from": 6442834845, "to": 6741126424, "type": "DATA" }, { "from": 6442834855, "to": 6741126416, "type": "DATA" }, { "from": 6442835390, "to": 6741832416, "type": "DATA" }, { "from": 6442835433, "to": 6741832416, "type": "DATA" }, { "from": 6442835487, "to": 6741345312, "type": "DATA" }, { "from": 6442835561, "to": 6724160688, "type": "DATA" }, { "from": 6442835934, "to": 6741126408, "type": "DATA" }, { "from": 6442835943, "to": 6741126400, "type": "DATA" }, { "from": 6442835952, "to": 6741126424, "type": "DATA" }, { "from": 6442835965, "to": 6741126416, "type": "DATA" }, { "from": 6442836075, "to": 6740379744, "type": "DATA" }, { "from": 6442836400, "to": 6740709440, "type": "DATA" }, { "from": 6442836431, "to": 6741126400, "type": "DATA" }, { "from": 6442836440, "to": 6741126424, "type": "DATA" }, { "from": 6442836450, "to": 6741126416, "type": "DATA" }, { "from": 6442837012, "to": 6741832416, "type": "DATA" }, { "from": 6442837055, "to": 6741832416, "type": "DATA" }, { "from": 6442837123, "to": 6740709440, "type": "DATA" }, { "from": 6497321264, "to": 6720326432, "type": "DATA" }, { "from": 6497321425, "to": 6545635632, "type": "DATA" }, { "from": 6497321501, "to": 6545635632, "type": "DATA" }, { "from": 6497321608, "to": 6545635632, "type": "DATA" }, { "from": 6497321658, "to": 6740346544, "type": "DATA" } ] }, "strings": [ { "va": "0x190900b20", "offset": 277872416, "ascii": "Failed to import history; ", "wide": null } ], "imports": [ { "at": "0x18005dfa7", "target": "0x191c20a60", "api": { "va": 6740380256, "lib": "KERNEL32.dll", "sym": "TryAcquireSRWLockExclusive" } } ], "status_display": "汇编核对", "record_kind": "assembly", "pseudocode_chars": 46200 }, { "label": "p-history-import-result", "file": "rea-p-history-import-result.json", "file_sha256": "373723252184103aeb8456e487cbc26c07d0fc6e139395a8e01a52da3646f10b", "status": "completed", "evidence_id": "ev_e5021ea7c280108ad08b8df672d963e272a31e70463777af412e3f391c845ef8", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1834540f0;pdgo @ 0x1834540f0;afij @ 0x1834540f0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834540f0", "size": 99598934, "nargs": 1, "signature": "fcn.1834540f0(int64_t arg1);", "callrefs": [ { "from": 6442835090, "to": 6442835190, "type": "CODE" }, { "from": 6442835418, "to": 6542067676, "type": "CALL" }, { "from": 6442835699, "to": 6442835603, "type": "CODE" }, { "from": 6442835849, "to": 6542434496, "type": "CALL" }, { "from": 6442835879, "to": 6740380256, "type": "CALL" }, { "from": 6442835892, "to": 6513228480, "type": "CALL" }, { "from": 6442836084, "to": 6442835987, "type": "CODE" }, { "from": 6442836089, "to": 6511982528, "type": "CALL" }, { "from": 6442836094, "to": 6442835658, "type": "CODE" }, { "from": 6442836107, "to": 6502986064, "type": "CALL" }, { "from": 6442836134, "to": 6442835324, "type": "CODE" }, { "from": 6442836148, "to": 6526943040, "type": "CALL" }, { "from": 6442836153, "to": 6442835342, "type": "CODE" }, { "from": 6442836213, "to": 6442835682, "type": "CODE" }, { "from": 6442836231, "to": 6511977968, "type": "CALL" }, { "from": 6442836236, "to": 6442835646, "type": "CODE" }, { "from": 6442836267, "to": 6442835297, "type": "CODE" }, { "from": 6442836285, "to": 6511979808, "type": "CALL" }, { "from": 6442836290, "to": 6442836058, "type": "CODE" }, { "from": 6442836299, "to": 6442835724, "type": "CODE" }, { "from": 6442836313, "to": 6642659344, "type": "CALL" }, { "from": 6442836323, "to": 6642659440, "type": "CALL" }, { "from": 6442836336, "to": 6442835682, "type": "CODE" }, { "from": 6442836345, "to": 6442835835, "type": "CODE" }, { "from": 6442836694, "to": 6442836794, "type": "CODE" }, { "from": 6442837040, "to": 6542067676, "type": "CALL" }, { "from": 6442837110, "to": 6495376016, "type": "CALL" }, { "from": 6442837158, "to": 6502986064, "type": "CALL" }, { "from": 6442837185, "to": 6442836938, "type": "CODE" }, { "from": 6442837199, "to": 6526943040, "type": "CALL" }, { "from": 6442837204, "to": 6442836956, "type": "CODE" }, { "from": 6442837264, "to": 6442837115, "type": "CODE" }, { "from": 6442837290, "to": 6495371760, "type": "CALL" }, { "from": 6442837295, "to": 6442837115, "type": "CODE" }, { "from": 6442837326, "to": 6442836900, "type": "CODE" }, { "from": 6442837344, "to": 6542089024, "type": "CALL" }, { "from": 6497321277, "to": 6511733920, "type": "CALL" }, { "from": 6497321296, "to": 6740346544, "type": "CALL" }, { "from": 6497321393, "to": 6497321344, "type": "CODE" }, { "from": 6497321405, "to": 6740346544, "type": "CALL" }, { "from": 6497321445, "to": 6511512544, "type": "CALL" }, { "from": 6497321450, "to": 6497321344, "type": "CODE" }, { "from": 6497321466, "to": 6497321325, "type": "CODE" }, { "from": 6497321481, "to": 6740346544, "type": "CALL" }, { "from": 6497321521, "to": 6511512544, "type": "CALL" }, { "from": 6497321526, "to": 6497321325, "type": "CODE" }, { "from": 6497321534, "to": 6740346544, "type": "CALL" }, { "from": 6497321540, "to": 6497321344, "type": "CODE" }, { "from": 6497321548, "to": 6740346544, "type": "CALL" }, { "from": 6497321554, "to": 6497321325, "type": "CODE" }, { "from": 6497321573, "to": 6497321367, "type": "CODE" }, { "from": 6497321588, "to": 6740346544, "type": "CALL" }, { "from": 6497321639, "to": 6511512544, "type": "CODE" }, { "from": 6497321658, "to": 6497321620, "type": "CODE" }, { "from": 6497321658, "to": 6542091152, "type": "CODE" }, { "from": 6497321658, "to": 6542433696, "type": "CODE" }, { "from": 6497321658, "to": 6542433728, "type": "CODE" }, { "from": 6511396639, "to": 6442834800, "type": "CODE" }, { "from": 6511396686, "to": 6511396623, "type": "CODE" }, { "from": 6511396767, "to": 6442836384, "type": "CODE" }, { "from": 6511396814, "to": 6511396751, "type": "CODE" }, { "from": 6511512687, "to": 6511512813, "type": "CODE" }, { "from": 6511512687, "to": 6542091152, "type": "CODE" }, { "from": 6511512687, "to": 6542433696, "type": "CODE" }, { "from": 6511512687, "to": 6542433728, "type": "CODE" }, { "from": 6511512766, "to": 6511396704, "type": "CODE" }, { "from": 6511512808, "to": 6511396576, "type": "CODE" }, { "from": 6511512821, "to": 6542089024, "type": "CALL" }, { "from": 6511512835, "to": 6624513440, "type": "CALL" }, { "from": 6511512900, "to": 6520861456, "type": "CALL" }, { "from": 6511513027, "to": 6511513006, "type": "CODE" }, { "from": 6511513029, "to": 6624512000, "type": "CALL" }, { "from": 6511513048, "to": 6624513648, "type": "CALL" }, { "from": 6511513053, "to": 6511512620, "type": "CODE" } ], "datarefs": [ { "from": 6442834836, "to": 6741126400, "type": "DATA" }, { "from": 6442834845, "to": 6741126424, "type": "DATA" }, { "from": 6442834855, "to": 6741126416, "type": "DATA" }, { "from": 6442835390, "to": 6741832416, "type": "DATA" }, { "from": 6442835433, "to": 6741832416, "type": "DATA" }, { "from": 6442835487, "to": 6741345312, "type": "DATA" }, { "from": 6442835561, "to": 6724160688, "type": "DATA" }, { "from": 6442835934, "to": 6741126408, "type": "DATA" }, { "from": 6442835943, "to": 6741126400, "type": "DATA" }, { "from": 6442835952, "to": 6741126424, "type": "DATA" }, { "from": 6442835965, "to": 6741126416, "type": "DATA" }, { "from": 6442836075, "to": 6740379744, "type": "DATA" }, { "from": 6442836400, "to": 6740709440, "type": "DATA" }, { "from": 6442836431, "to": 6741126400, "type": "DATA" }, { "from": 6442836440, "to": 6741126424, "type": "DATA" }, { "from": 6442836450, "to": 6741126416, "type": "DATA" }, { "from": 6442837012, "to": 6741832416, "type": "DATA" }, { "from": 6442837055, "to": 6741832416, "type": "DATA" }, { "from": 6442837123, "to": 6740709440, "type": "DATA" }, { "from": 6497321264, "to": 6720326432, "type": "DATA" }, { "from": 6497321425, "to": 6545635632, "type": "DATA" }, { "from": 6497321501, "to": 6545635632, "type": "DATA" }, { "from": 6497321608, "to": 6545635632, "type": "DATA" }, { "from": 6497321658, "to": 6740346544, "type": "DATA" }, { "from": 6511396614, "to": 6741126408, "type": "DATA" }, { "from": 6511396623, "to": 6741126400, "type": "DATA" }, { "from": 6511396649, "to": 6741126400, "type": "DATA" }, { "from": 6511396658, "to": 6741126424, "type": "DATA" }, { "from": 6511396671, "to": 6741126416, "type": "DATA" }, { "from": 6511396742, "to": 6741126408, "type": "DATA" }, { "from": 6511396751, "to": 6741126400, "type": "DATA" }, { "from": 6511396777, "to": 6741126400, "type": "DATA" }, { "from": 6511396786, "to": 6741126424, "type": "DATA" }, { "from": 6511396799, "to": 6741126416, "type": "DATA" }, { "from": 6511512561, "to": 6740709440, "type": "DATA" }, { "from": 6511512576, "to": 6741126528, "type": "DATA" }, { "from": 6511512587, "to": 6537703408, "type": "DATA" }, { "from": 6511512599, "to": 6741837648, "type": "DATA" }, { "from": 6511512606, "to": 6742242904, "type": "DATA" }, { "from": 6511512620, "to": 6740713128, "type": "DATA" }, { "from": 6511512631, "to": 6511396512, "type": "DATA" }, { "from": 6511512651, "to": 6740709440, "type": "DATA" }, { "from": 6511512687, "to": 6740346544, "type": "DATA" }, { "from": 6511512694, "to": 6741345248, "type": "DATA" }, { "from": 6511512705, "to": 6538544560, "type": "DATA" }, { "from": 6511512717, "to": 6538544672, "type": "DATA" }, { "from": 6511512737, "to": 6740709440, "type": "DATA" }, { "from": 6511512779, "to": 6740709440, "type": "DATA" }, { "from": 6542433728, "to": 6740346544, "type": "DATA" } ] }, "strings": [ { "va": "0x190900b20", "offset": 277872416, "ascii": "Failed to import history; ", "wide": null } ], "imports": [ { "at": "0x18005dfa7", "target": "0x191c20a60", "api": { "va": 6740380256, "lib": "KERNEL32.dll", "sym": "TryAcquireSRWLockExclusive" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 62066 }, { "label": "p-history-json-parse", "file": "rea-p-history-json-parse.json", "file_sha256": "ea0579c36a2479a68dc3ab7acab96763e477e35e00660acc4548b951c51a42da", "status": "completed", "evidence_id": "ev_dbd18d612c62bc1dd25887ec843e68ba11f5be5f8d3786cee1f80f0600a43947", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18342dba0;pdgo @ 0x18342dba0;afij @ 0x18342dba0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18342dba0", "size": 2210, "nargs": 4, "signature": "fcn.18342dba0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg_248h);", "callrefs": [ { "from": 6497164313, "to": 6446103632, "type": "CALL" }, { "from": 6497164340, "to": 6511733920, "type": "CALL" }, { "from": 6497164365, "to": 6517426608, "type": "CALL" }, { "from": 6497164462, "to": 6497164337, "type": "CODE" }, { "from": 6497164498, "to": 6523198896, "type": "CALL" }, { "from": 6497164548, "to": 6529825440, "type": "CALL" }, { "from": 6497164603, "to": 6443410976, "type": "CALL" }, { "from": 6497164637, "to": 6444823776, "type": "CALL" }, { "from": 6497164745, "to": 6497165626, "type": "CODE" }, { "from": 6497164784, "to": 6443410976, "type": "CALL" }, { "from": 6497164832, "to": 6443410976, "type": "CALL" }, { "from": 6497164880, "to": 6443410976, "type": "CALL" }, { "from": 6497164894, "to": 6497166271, "type": "CODE" }, { "from": 6497164935, "to": 6511512544, "type": "CALL" }, { "from": 6497164995, "to": 6511733920, "type": "CALL" }, { "from": 6497165030, "to": 6517426816, "type": "CALL" }, { "from": 6497165046, "to": 6511512544, "type": "CALL" }, { "from": 6497165051, "to": 6497164347, "type": "CODE" }, { "from": 6497165125, "to": 6497191584, "type": "CALL" }, { "from": 6497165185, "to": 6497165234, "type": "CODE" }, { "from": 6497165201, "to": 6511512544, "type": "CALL" }, { "from": 6497165209, "to": 6511396000, "type": "CALL" }, { "from": 6497165252, "to": 6497165187, "type": "CODE" }, { "from": 6497165270, "to": 6511681872, "type": "CALL" }, { "from": 6497165278, "to": 6497165466, "type": "CODE" }, { "from": 6497165323, "to": 6525627664, "type": "CALL" }, { "from": 6497165349, "to": 6497165355, "type": "CODE" }, { "from": 6497165426, "to": 6511751392, "type": "CALL" }, { "from": 6497165580, "to": 6511512544, "type": "CALL" }, { "from": 6497165588, "to": 6511396000, "type": "CALL" }, { "from": 6497165607, "to": 6511396000, "type": "CALL" }, { "from": 6497165664, "to": 6524007984, "type": "CALL" }, { "from": 6497165781, "to": 6515567520, "type": "CALL" }, { "from": 6497165811, "to": 6542434496, "type": "CALL" }, { "from": 6497165917, "to": 6528657040, "type": "CALL" }, { "from": 6497165960, "to": 6524007984, "type": "CALL" }, { "from": 6497166019, "to": 6530673136, "type": "CALL" }, { "from": 6497166053, "to": 6511512544, "type": "CALL" }, { "from": 6497166122, "to": 6525627664, "type": "CALL" }, { "from": 6497166144, "to": 6497183824, "type": "CALL" }, { "from": 6497166178, "to": 6525627664, "type": "CALL" }, { "from": 6497166192, "to": 6497183824, "type": "CALL" }, { "from": 6497166226, "to": 6525627664, "type": "CALL" }, { "from": 6497166264, "to": 6497165287, "type": "CODE" }, { "from": 6497166305, "to": 6443410976, "type": "CALL" }, { "from": 6497166353, "to": 6443410976, "type": "CALL" }, { "from": 6497166367, "to": 6497164623, "type": "CODE" }, { "from": 6497166375, "to": 6497184672, "type": "CALL" }, { "from": 6497166380, "to": 6497165506, "type": "CODE" }, { "from": 6497166396, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6497164225, "to": 6740709440, "type": "DATA" }, { "from": 6497164324, "to": 6720322800, "type": "DATA" }, { "from": 6497164381, "to": 6740709440, "type": "DATA" }, { "from": 6497164449, "to": 6720322832, "type": "DATA" }, { "from": 6497164464, "to": 6712172424, "type": "DATA" }, { "from": 6497164508, "to": 6720322952, "type": "DATA" }, { "from": 6497164569, "to": 6718288224, "type": "DATA" }, { "from": 6497164711, "to": 6712260636, "type": "DATA" }, { "from": 6497164750, "to": 6719741032, "type": "DATA" }, { "from": 6497164798, "to": 6720322968, "type": "DATA" }, { "from": 6497164846, "to": 6720322984, "type": "DATA" }, { "from": 6497164977, "to": 6720322920, "type": "DATA" }, { "from": 6497165294, "to": 6720322904, "type": "DATA" }, { "from": 6497165922, "to": 6712257068, "type": "DATA" }, { "from": 6497166090, "to": 6720322864, "type": "DATA" }, { "from": 6497166149, "to": 6720322880, "type": "DATA" }, { "from": 6497166197, "to": 6718489880, "type": "DATA" }, { "from": 6497166271, "to": 6715372172, "type": "DATA" }, { "from": 6497166319, "to": 6720323000, "type": "DATA" } ] }, "strings": [ { "va": "0x1908ffcf0", "offset": 277868784, "ascii": "History JSON parse error; ", "wide": null }, { "va": "0x1908ffd10", "offset": 277868816, "ascii": "History JSON missing list; ", "wide": null }, { "va": "0x190139f88", "offset": 269718408, "ascii": "metadata", "wide": null }, { "va": "0x1908ffd88", "offset": 277868936, "ascii": "schema_version", "wide": null }, { "va": "0x19070f160", "offset": 275834208, "ascii": "history", "wide": null }, { "va": "0x19014f81c", "offset": 269806620, "ascii": "url", "wide": null }, { "va": "0x190871c68", "offset": 277287016, "ascii": "History", "wide": null }, { "va": "0x1908ffd98", "offset": 277868952, "ascii": "historyItems", "wide": null }, { "va": "0x1908ffda8", "offset": 277868968, "ascii": "HistoryItems", "wide": null }, { "va": "0x1908ffd68", "offset": 277868904, "ascii": "No history entries recognised; ", "wide": null }, { "va": "0x1908ffd58", "offset": 277868888, "ascii": "visitCount", "wide": null }, { "va": "0x19014ea2c", "offset": 269803052, "ascii": "title", "wide": null }, { "va": "0x1908ffd30", "offset": 277868848, "ascii": "time_usec", "wide": null }, { "va": "0x1908ffd40", "offset": 277868864, "ascii": "source_time_usec", "wide": null }, { "va": "0x190740518", "offset": 276035864, "ascii": "visit_count", "wide": null }, { "va": "0x19044728c", "offset": 272918156, "ascii": "items", "wide": null }, { "va": "0x1908ffdb8", "offset": 277868984, "ascii": "HistoryEntries", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 24235 }, { "label": "p-history-webui-query", "file": "rea-p-history-webui-query.json", "file_sha256": "eb5edb95e1bc0db385a3c4f567ca6f0fea89b320adfaaed54d5948607eb556b8", "status": "completed", "evidence_id": "ev_30240ddc08f106e6b34c01d98a5d1704089112fddd03c05f9516194c4e322f40", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18a071390;pdgo @ 0x18a071390;afij @ 0x18a071390", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18a071390", "size": 770, "nargs": 1, "signature": "fcn.18a071390(int64_t arg3);", "callrefs": [ { "from": 6610686982, "to": 6610686993, "type": "CODE" }, { "from": 6610687033, "to": 6610687326, "type": "CODE" }, { "from": 6610687060, "to": 6511512544, "type": "CALL" }, { "from": 6610687065, "to": 6610687107, "type": "CODE" }, { "from": 6610687081, "to": 6632273856, "type": "CALL" }, { "from": 6610687094, "to": 6469867072, "type": "CALL" }, { "from": 6610687147, "to": 6632278544, "type": "CALL" }, { "from": 6610687173, "to": 6632278544, "type": "CALL" }, { "from": 6610687198, "to": 6740346544, "type": "CALL" }, { "from": 6610687210, "to": 6632278544, "type": "CALL" }, { "from": 6610687255, "to": 6632278432, "type": "CALL" }, { "from": 6610687268, "to": 6610688656, "type": "CALL" }, { "from": 6610687295, "to": 6556107696, "type": "CALL" }, { "from": 6610687308, "to": 6511512544, "type": "CALL" }, { "from": 6610687342, "to": 6542067384, "type": "CALL" }, { "from": 6610687353, "to": 6590996464, "type": "CALL" }, { "from": 6610687463, "to": 6740346544, "type": "CALL" }, { "from": 6610687469, "to": 6610687549, "type": "CODE" }, { "from": 6610687518, "to": 6594977424, "type": "CALL" }, { "from": 6610687536, "to": 6594979200, "type": "CALL" }, { "from": 6610687628, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6610686913, "to": 6740709440, "type": "DATA" }, { "from": 6610686948, "to": 6722721864, "type": "DATA" }, { "from": 6610686963, "to": 6717634764, "type": "DATA" }, { "from": 6610686973, "to": 6715022296, "type": "DATA" }, { "from": 6610686984, "to": 6712509524, "type": "DATA" }, { "from": 6610686998, "to": 6717354684, "type": "DATA" }, { "from": 6610687014, "to": 6719739904, "type": "DATA" }, { "from": 6610687026, "to": 6719740032, "type": "DATA" }, { "from": 6610687380, "to": 6722721872, "type": "DATA" }, { "from": 6610687430, "to": 6722721904, "type": "DATA" }, { "from": 6610687560, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190871880", "offset": 277286016, "ascii": "Orange", "wide": null }, { "va": "0x190b49870", "offset": 280267888, "ascii": "..\\..\\chrome\\browser\\ui\\webui\\history\\browsing_history_handler.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 6976 }, { "label": "p-import-history", "file": "rea-p-import-history.json", "file_sha256": "67218f1ebab857dd366ba768ae63b8c51d19ff203aa9dc7701cb98eff1bda158", "status": "completed", "evidence_id": "ev_4aa325eed6a6465732487acb8e00adb2af16281a4ef51631e76c8f23d0324ef7", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183449a10;pdgo @ 0x183449a10;afij @ 0x183449a10", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183449a10", "size": 13983, "nargs": 153, "signature": "fcn.183449a10(int64_t arg_28h, int64_t arg_30h, int64_t arg_38h, int64_t arg_40h, int64_t arg_48h, int64_t arg_58h, int64_t arg_5dh, int64_t arg_5eh, int64_t arg_5fh, int64_t arg_60h, int64_t arg_68h, int64_t arg_70h, int64_t arg_78h, int64_t arg_80h, int64_t arg_88h, int64_t arg_90h, int64_t arg_97h, int64_t arg_98h, int64_t arg_a0h, int64_t arg_a8h, int64_t arg_b0h, int64_t arg_b8h, int64_t arg_c0h, int64_t arg_c8h, int64_t arg_d0h, int64_t arg_d4h, int64_t arg_d8h, int64_t arg_dch, int64_t arg_e0h, int64_t arg_e7h, int64_t arg_edh, int64_t arg_f0h, int64_t arg_f8h, int64_t arg_100h, int64_t arg_108h, int64_t arg_110h, int64_t arg_118h, int64_t arg_120h, int64_t arg_128h, int64_t arg_130h, int64_t arg_138h, int64_t arg_140h, int64_t arg_148h, int64_t arg_150h, int64_t arg_157h, int64_t arg_160h, int64_t arg_168h, int64_t arg_174h, int64_t arg_178h, int64_t arg_17ch, int64_t arg_180h, int64_t arg_188h, int64_t arg_190h, int64_t arg_1a0h, int64_t arg_1b0h, int64_t arg_1b8h, int64_t arg_1c0h, int64_t arg_1c7h, int64_t arg_1c8h, int64_t arg_1d0h, int64_t arg_1d8h, int64_t arg_1e0h, int64_t arg_1e8h, int64_t arg_1f0h, int64_t arg_1f8h, int64_t arg_200h, int64_t arg_210h, int64_t arg_220h, int64_t arg_228h, int64_t arg_230h, int64_t arg_238h, int64_t arg_240h, int64_t arg_248h, int64_t arg_250h, int64_t arg_258h, int64_t arg_260h, int64_t arg_268h, int64_t arg_270h, int64_t arg_278h, int64_t arg_280h, int64_t arg_290h, int64_t arg_2a0h, int64_t arg_2b0h, int64_t arg_2c0h, int64_t arg_2c8h, int64_t arg_2d0h, int64_t arg_2d8h, int64_t arg_2dch, int64_t arg_2e0h, int64_t arg_2e7h, int64_t arg_2e8h, int64_t arg_2f0h, int64_t arg_2f7h, int64_t arg_2f8h, int64_t arg_2ffh, int64_t arg_300h, int64_t arg_308h, int64_t arg_310h, int64_t arg_318h, int64_t arg_320h, int64_t arg_328h, int64_t arg_330h, int64_t arg_340h, int64_t arg_348h, int64_t arg_370h, int64_t arg_520h, int64_t arg_537h, int64_t arg_540h, int64_t arg_557h, int64_t arg_590h, int64_t arg_5a7h, int64_t arg_5b0h, int64_t arg_668h, int64_t arg_678h, int64_t arg_680h, int64_t arg_688h, int64_t arg_68ch, int64_t arg_690h, int64_t arg_a14h, int64_t arg_b30h, int64_t arg_b38h, int64_t arg_b40h, int64_t arg_b47h, int64_t arg_b48h, int64_t arg_b50h, int64_t arg_b58h, int64_t arg_b60h, int64_t arg_b70h, int64_t arg_b80h, int64_t arg_b90h, int64_t arg_ba0h, int64_t arg_1274h, int64_t arg_1390h, int64_t arg_1398h, int64_t arg_13a0h, int64_t arg_13a8h, int64_t arg_13b0h, int64_t arg_13b8h, int64_t arg_13c0h, int64_t arg_13c8h, int64_t arg_13c9h, int64_t arg_13d8h, int64_t arg_1400h, int64_t arg_1bf0h, int64_t arg_1bf7h, int64_t arg_1c00h, int64_t arg_1c07h, int64_t arg_1c0fh, int64_t arg_23b0h, int64_t arg_23c0h, int64_t arg_23d0h, int64_t arg_2450h, int64_t arg_2458h);", "callrefs": [ { "from": 6497278497, "to": 6542088928, "type": "CALL" }, { "from": 6497278560, "to": 6542067384, "type": "CALL" }, { "from": 6497278633, "to": 6542067384, "type": "CALL" }, { "from": 6497278681, "to": 6542067384, "type": "CALL" }, { "from": 6497278765, "to": 6542067384, "type": "CALL" }, { "from": 6497278853, "to": 6542067384, "type": "CALL" }, { "from": 6497279038, "to": 6740346544, "type": "CALL" }, { "from": 6497279059, "to": 6740346544, "type": "CALL" }, { "from": 6497279105, "to": 6511512544, "type": "CALL" }, { "from": 6497279110, "to": 6497283699, "type": "CODE" }, { "from": 6497279129, "to": 6511729936, "type": "CALL" }, { "from": 6497279137, "to": 6497279010, "type": "CODE" }, { "from": 6497279154, "to": 6497279184, "type": "CODE" }, { "from": 6497279204, "to": 6542067384, "type": "CALL" }, { "from": 6497279407, "to": 6497261936, "type": "CALL" }, { "from": 6497279490, "to": 6542067384, "type": "CALL" }, { "from": 6497279710, "to": 6512708384, "type": "CALL" }, { "from": 6497279854, "to": 6740346544, "type": "CALL" }, { "from": 6497279909, "to": 6740346544, "type": "CALL" }, { "from": 6497279915, "to": 6497279961, "type": "CODE" }, { "from": 6497279943, "to": 6442840976, "type": "CALL" }, { "from": 6497279956, "to": 6511512544, "type": "CALL" }, { "from": 6497279979, "to": 6740346544, "type": "CALL" }, { "from": 6497279997, "to": 6740346544, "type": "CALL" }, { "from": 6497280039, "to": 6511512544, "type": "CALL" }, { "from": 6497280044, "to": 6497280117, "type": "CODE" }, { "from": 6497280059, "to": 6740346544, "type": "CALL" }, { "from": 6497280065, "to": 6497280122, "type": "CODE" }, { "from": 6497280093, "to": 6740346544, "type": "CALL" }, { "from": 6497280111, "to": 6740346544, "type": "CALL" }, { "from": 6497280168, "to": 6542067384, "type": "CALL" }, { "from": 6497280386, "to": 6479985792, "type": "CALL" }, { "from": 6497280430, "to": 6497327024, "type": "CALL" }, { "from": 6497280480, "to": 6470136960, "type": "CALL" }, { "from": 6497280518, "to": 6471047408, "type": "CALL" }, { "from": 6497280566, "to": 6515312816, "type": "CALL" }, { "from": 6497280629, "to": 6512708384, "type": "CALL" }, { "from": 6497280637, "to": 6445352064, "type": "CALL" }, { "from": 6497280804, "to": 6470136960, "type": "CALL" }, { "from": 6497280844, "to": 6740346544, "type": "CALL" }, { "from": 6497280879, "to": 6524006080, "type": "CALL" }, { "from": 6497280901, "to": 6497280912, "type": "CODE" }, { "from": 6497280921, "to": 6740346544, "type": "CALL" }, { "from": 6497280948, "to": 6740346544, "type": "CALL" }, { "from": 6497280993, "to": 6497281006, "type": "CODE" }, { "from": 6497280995, "to": 6470136960, "type": "CALL" }, { "from": 6497281032, "to": 6497280995, "type": "CODE" }, { "from": 6497281049, "to": 6511512544, "type": "CALL" }, { "from": 6497281104, "to": 6542067384, "type": "CALL" }, { "from": 6497281282, "to": 6533020784, "type": "CALL" }, { "from": 6497281309, "to": 6740346544, "type": "CALL" }, { "from": 6497281362, "to": 6542067384, "type": "CALL" }, { "from": 6497281430, "to": 6542067384, "type": "CALL" }, { "from": 6497281499, "to": 6542067384, "type": "CALL" }, { "from": 6497281590, "to": 6542067384, "type": "CALL" }, { "from": 6497281802, "to": 6497286623, "type": "CODE" }, { "from": 6497281821, "to": 6497322640, "type": "CALL" }, { "from": 6497281842, "to": 6740346544, "type": "CALL" }, { "from": 6497281848, "to": 6497282503, "type": "CODE" }, { "from": 6497281862, "to": 6497281896, "type": "CODE" }, { "from": 6497281872, "to": 6497281967, "type": "CODE" }, { "from": 6497281882, "to": 6497282541, "type": "CODE" }, { "from": 6497281905, "to": 6740346544, "type": "CALL" }, { "from": 6497281923, "to": 6740346544, "type": "CALL" }, { "from": 6497281991, "to": 6542067384, "type": "CALL" }, { "from": 6497282180, "to": 6740346544, "type": "CALL" }, { "from": 6497282199, "to": 6542067384, "type": "CALL" }, { "from": 6497282296, "to": 6497282349, "type": "CODE" }, { "from": 6497282326, "to": 6497282393, "type": "CODE" }, { "from": 6497282344, "to": 6522337344, "type": "CALL" }, { "from": 6497282388, "to": 6522337344, "type": "CALL" }, { "from": 6497282435, "to": 6512942288, "type": "CALL" }, { "from": 6497282461, "to": 6474478384, "type": "CALL" }, { "from": 6497282495, "to": 6511512544, "type": "CALL" }, { "from": 6497282559, "to": 6542067384, "type": "CALL" }, { "from": 6497282734, "to": 6542067384, "type": "CALL" }, { "from": 6497282798, "to": 6542067384, "type": "CALL" }, { "from": 6497282889, "to": 6497282975, "type": "CODE" }, { "from": 6497282903, "to": 6497323120, "type": "CALL" }, { "from": 6497282942, "to": 6740346544, "type": "CALL" }, { "from": 6497282948, "to": 6497283261, "type": "CODE" }, { "from": 6497282970, "to": 6522337344, "type": "CALL" }, { "from": 6497283003, "to": 6512942288, "type": "CALL" }, { "from": 6497283013, "to": 6542067384, "type": "CALL" }, { "from": 6497283033, "to": 6542067384, "type": "CALL" }, { "from": 6497283103, "to": 6542067384, "type": "CALL" }, { "from": 6497283179, "to": 6511423872, "type": "CALL" }, { "from": 6497283222, "to": 6463429312, "type": "CALL" }, { "from": 6497283309, "to": 6542067384, "type": "CALL" }, { "from": 6497283472, "to": 6542067384, "type": "CALL" }, { "from": 6497283598, "to": 6497328848, "type": "CALL" }, { "from": 6497283664, "to": 6497297280, "type": "CALL" }, { "from": 6497283693, "to": 6740346544, "type": "CALL" }, { "from": 6497283864, "to": 6497283622, "type": "CODE" }, { "from": 6497283878, "to": 6740346544, "type": "CALL" }, { "from": 6497283884, "to": 6497283814, "type": "CODE" }, { "from": 6497283899, "to": 6740346544, "type": "CALL" }, { "from": 6497283905, "to": 6497283798, "type": "CODE" }, { "from": 6497283921, "to": 6497283722, "type": "CODE" }, { "from": 6497283937, "to": 6740346544, "type": "CALL" }, { "from": 6497283982, "to": 6511512544, "type": "CALL" }, { "from": 6497283987, "to": 6497283722, "type": "CODE" }, { "from": 6497284007, "to": 6497283769, "type": "CODE" }, { "from": 6497284023, "to": 6740346544, "type": "CALL" }, { "from": 6497284069, "to": 6511512544, "type": "CALL" }, { "from": 6497284074, "to": 6497283769, "type": "CODE" }, { "from": 6497284093, "to": 6497283745, "type": "CODE" }, { "from": 6497284108, "to": 6740346544, "type": "CALL" }, { "from": 6497284152, "to": 6511512544, "type": "CALL" }, { "from": 6497284157, "to": 6497283745, "type": "CODE" }, { "from": 6497284177, "to": 6497283793, "type": "CODE" }, { "from": 6497284192, "to": 6740346544, "type": "CALL" }, { "from": 6497284237, "to": 6511512544, "type": "CALL" }, { "from": 6497284242, "to": 6497283793, "type": "CODE" }, { "from": 6497284288, "to": 6542067384, "type": "CALL" }, { "from": 6497284359, "to": 6542067384, "type": "CALL" }, { "from": 6497284452, "to": 6465716880, "type": "CALL" }, { "from": 6497284589, "to": 6497291103, "type": "CODE" }, { "from": 6497284612, "to": 6497280921, "type": "CODE" }, { "from": 6497284620, "to": 6740346544, "type": "CALL" }, { "from": 6497284626, "to": 6497283793, "type": "CODE" }, { "from": 6497284634, "to": 6740346544, "type": "CALL" }, { "from": 6497284640, "to": 6497283745, "type": "CODE" }, { "from": 6497284648, "to": 6740346544, "type": "CALL" }, { "from": 6497284654, "to": 6497283769, "type": "CODE" }, { "from": 6497284662, "to": 6740346544, "type": "CALL" }, { "from": 6497284668, "to": 6497283722, "type": "CODE" }, { "from": 6497284703, "to": 6740346544, "type": "CALL" }, { "from": 6497284709, "to": 6497283641, "type": "CODE" }, { "from": 6497284731, "to": 6511512544, "type": "CALL" }, { "from": 6497284736, "to": 6497283641, "type": "CODE" }, { "from": 6497284751, "to": 6511512544, "type": "CALL" }, { "from": 6497284756, "to": 6497284723, "type": "CODE" }, { "from": 6497284788, "to": 6740346544, "type": "CALL" }, { "from": 6497284794, "to": 6497283622, "type": "CODE" }, { "from": 6497284816, "to": 6511512544, "type": "CALL" }, { "from": 6497284821, "to": 6497283622, "type": "CODE" }, { "from": 6497284836, "to": 6511512544, "type": "CALL" }, { "from": 6497284841, "to": 6497284808, "type": "CODE" }, { "from": 6497284941, "to": 6511751392, "type": "CALL" }, { "from": 6497284973, "to": 6511681872, "type": "CALL" }, { "from": 6497284978, "to": 6497284865, "type": "CODE" }, { "from": 6497284987, "to": 6542067384, "type": "CALL" }, { "from": 6497285082, "to": 6601624176, "type": "CALL" }, { "from": 6497285159, "to": 6542067384, "type": "CALL" }, { "from": 6497285189, "to": 6497284923, "type": "CODE" }, { "from": 6497285382, "to": 6599931280, "type": "CALL" }, { "from": 6497285433, "to": 6512942288, "type": "CALL" }, { "from": 6497285468, "to": 6469338480, "type": "CALL" }, { "from": 6497285480, "to": 6497280117, "type": "CODE" }, { "from": 6497285505, "to": 6542067384, "type": "CALL" }, { "from": 6497285550, "to": 6497285950, "type": "CODE" }, { "from": 6497285659, "to": 6519187136, "type": "CALL" }, { "from": 6497285766, "to": 6542436672, "type": "CALL" }, { "from": 6497285991, "to": 6542436672, "type": "CALL" }, { "from": 6497286124, "to": 6511733920, "type": "CALL" }, { "from": 6497286183, "to": 6511733920, "type": "CALL" }, { "from": 6497286294, "to": 6515567520, "type": "CALL" }, { "from": 6497286338, "to": 6511512544, "type": "CALL" }, { "from": 6497286382, "to": 6511512544, "type": "CALL" }, { "from": 6497286426, "to": 6511512544, "type": "CALL" }, { "from": 6497286507, "to": 6497254128, "type": "CALL" }, { "from": 6497286520, "to": 6511396000, "type": "CALL" }, { "from": 6497286553, "to": 6511512544, "type": "CALL" }, { "from": 6497286597, "to": 6511512544, "type": "CALL" }, { "from": 6497286688, "to": 6511513840, "type": "CALL" }, { "from": 6497286693, "to": 6497285580, "type": "CODE" }, { "from": 6497286803, "to": 6626524960, "type": "CALL" }, { "from": 6497286893, "to": 6497254128, "type": "CALL" }, { "from": 6497286906, "to": 6601624480, "type": "CALL" }, { "from": 6497286911, "to": 6497286512, "type": "CODE" }, { "from": 6497286916, "to": 6740346544, "type": "CALL" }, { "from": 6497286922, "to": 6497287050, "type": "CODE" }, { "from": 6497286939, "to": 6740346544, "type": "CALL" }, { "from": 6497286984, "to": 6511512544, "type": "CALL" }, { "from": 6497286989, "to": 6497287050, "type": "CODE" }, { "from": 6497287005, "to": 6497287050, "type": "CODE" }, { "from": 6497287158, "to": 6740346544, "type": "CALL" }, { "from": 6497287211, "to": 6511512544, "type": "CALL" }, { "from": 6497287216, "to": 6497281929, "type": "CODE" }, { "from": 6497287236, "to": 6740346544, "type": "CALL" }, { "from": 6497287281, "to": 6511512544, "type": "CALL" }, { "from": 6497287286, "to": 6497287108, "type": "CODE" }, { "from": 6497287305, "to": 6497287108, "type": "CODE" }, { "from": 6497287325, "to": 6740346544, "type": "CALL" }, { "from": 6497287370, "to": 6511512544, "type": "CALL" }, { "from": 6497287375, "to": 6497287081, "type": "CODE" }, { "from": 6497287394, "to": 6497287081, "type": "CODE" }, { "from": 6497287399, "to": 6740346544, "type": "CALL" }, { "from": 6497287405, "to": 6497287108, "type": "CODE" }, { "from": 6497287410, "to": 6740346544, "type": "CALL" }, { "from": 6497287416, "to": 6497287081, "type": "CODE" }, { "from": 6497287439, "to": 6497287183, "type": "CODE" }, { "from": 6497287595, "to": 6497287798, "type": "CODE" }, { "from": 6497288387, "to": 6497288412, "type": "CODE" }, { "from": 6497288407, "to": 6511513840, "type": "CALL" }, { "from": 6497288455, "to": 6497288480, "type": "CODE" }, { "from": 6497288475, "to": 6511513840, "type": "CALL" }, { "from": 6497288526, "to": 6497288557, "type": "CODE" }, { "from": 6497288552, "to": 6511513840, "type": "CALL" }, { "from": 6497288606, "to": 6497288635, "type": "CODE" }, { "from": 6497288630, "to": 6511513840, "type": "CALL" }, { "from": 6497288825, "to": 6452862752, "type": "CALL" }, { "from": 6497288920, "to": 6542067384, "type": "CALL" }, { "from": 6497289215, "to": 6740346544, "type": "CALL" }, { "from": 6497289221, "to": 6497289306, "type": "CODE" }, { "from": 6497289285, "to": 6497254128, "type": "CALL" }, { "from": 6497289336, "to": 6490950448, "type": "CALL" }, { "from": 6497289440, "to": 6511512544, "type": "CALL" }, { "from": 6497289445, "to": 6497286898, "type": "CODE" }, { "from": 6497289485, "to": 6740346544, "type": "CALL" }, { "from": 6497289491, "to": 6497289667, "type": "CODE" }, { "from": 6497289591, "to": 6740346544, "type": "CALL" }, { "from": 6497289649, "to": 6442840976, "type": "CALL" }, { "from": 6497289662, "to": 6511512544, "type": "CALL" }, { "from": 6497289685, "to": 6740346544, "type": "CALL" }, { "from": 6497289703, "to": 6740346544, "type": "CALL" }, { "from": 6497289745, "to": 6511512544, "type": "CALL" }, { "from": 6497289767, "to": 6740346544, "type": "CALL" }, { "from": 6497289773, "to": 6497281938, "type": "CODE" }, { "from": 6497289795, "to": 6740346544, "type": "CALL" }, { "from": 6497289801, "to": 6497281070, "type": "CODE" }, { "from": 6497289814, "to": 6497289830, "type": "CODE" }, { "from": 6497289838, "to": 6460876800, "type": "CALL" }, { "from": 6497289843, "to": 6497290203, "type": "CODE" }, { "from": 6497289866, "to": 6497289872, "type": "CODE" }, { "from": 6497289880, "to": 6460876800, "type": "CALL" }, { "from": 6497289885, "to": 6497290276, "type": "CODE" }, { "from": 6497289912, "to": 6536519280, "type": "CALL" }, { "from": 6497289917, "to": 6497290203, "type": "CODE" }, { "from": 6497289944, "to": 6536519280, "type": "CALL" }, { "from": 6497289949, "to": 6497290276, "type": "CODE" }, { "from": 6497289964, "to": 6511729936, "type": "CALL" }, { "from": 6497289969, "to": 6497290509, "type": "CODE" }, { "from": 6497289976, "to": 6497290540, "type": "CODE" }, { "from": 6497289998, "to": 6511681872, "type": "CALL" }, { "from": 6497290017, "to": 6460874880, "type": "CALL" }, { "from": 6497290033, "to": 6543238544, "type": "CALL" }, { "from": 6497290105, "to": 6511512544, "type": "CALL" }, { "from": 6497290125, "to": 6528657040, "type": "CALL" }, { "from": 6497290449, "to": 6464594816, "type": "CALL" }, { "from": 6497290457, "to": 6522230240, "type": "CALL" }, { "from": 6497290517, "to": 6511396000, "type": "CALL" }, { "from": 6497290560, "to": 6542067384, "type": "CALL" }, { "from": 6497290766, "to": 6465716880, "type": "CALL" }, { "from": 6497290815, "to": 6542434496, "type": "CALL" }, { "from": 6497290831, "to": 6589133616, "type": "CALL" }, { "from": 6497290856, "to": 6542067384, "type": "CALL" }, { "from": 6497290951, "to": 6589133616, "type": "CALL" }, { "from": 6497290970, "to": 6589154560, "type": "CALL" }, { "from": 6497290989, "to": 6589174528, "type": "CALL" }, { "from": 6497290997, "to": 6544736192, "type": "CALL" }, { "from": 6497291066, "to": 6544736192, "type": "CALL" }, { "from": 6497291114, "to": 6542434496, "type": "CALL" }, { "from": 6497291122, "to": 6543239616, "type": "CALL" }, { "from": 6497291139, "to": 6528657040, "type": "CALL" }, { "from": 6497291320, "to": 6497290003, "type": "CODE" }, { "from": 6497291335, "to": 6511729936, "type": "CALL" }, { "from": 6497291340, "to": 6497291201, "type": "CODE" }, { "from": 6497291406, "to": 6740346544, "type": "CALL" }, { "from": 6497291458, "to": 6497292124, "type": "CODE" }, { "from": 6497291485, "to": 6536519280, "type": "CALL" }, { "from": 6497291490, "to": 6497291274, "type": "CODE" }, { "from": 6497291508, "to": 6740346544, "type": "CALL" }, { "from": 6497291514, "to": 6497291037, "type": "CODE" }, { "from": 6497291528, "to": 6740346544, "type": "CALL" }, { "from": 6497291534, "to": 6497291549, "type": "CODE" }, { "from": 6497291610, "to": 6740346544, "type": "CALL" }, { "from": 6497291650, "to": 6511512544, "type": "CALL" }, { "from": 6497291655, "to": 6497280954, "type": "CODE" }, { "from": 6497291678, "to": 6497291623, "type": "CODE" }, { "from": 6497291688, "to": 6497291704, "type": "CODE" }, { "from": 6497291712, "to": 6460876800, "type": "CALL" }, { "from": 6497291717, "to": 6497291274, "type": "CODE" }, { "from": 6497291725, "to": 6497280948, "type": "CODE" }, { "from": 6497291759, "to": 6442840976, "type": "CALL" }, { "from": 6497291772, "to": 6511512544, "type": "CALL" }, { "from": 6497291777, "to": 6497291055, "type": "CODE" }, { "from": 6497291793, "to": 6497291802, "type": "CODE" }, { "from": 6497291805, "to": 6511730288, "type": "CALL" }, { "from": 6497291810, "to": 6497291201, "type": "CODE" }, { "from": 6497291867, "to": 6497287732, "type": "CODE" }, { "from": 6497291934, "to": 6497288134, "type": "CODE" }, { "from": 6497291946, "to": 6542069736, "type": "CALL" }, { "from": 6497291971, "to": 6462098144, "type": "CALL" }, { "from": 6497291983, "to": 6542069628, "type": "CALL" }, { "from": 6497291988, "to": 6497279697, "type": "CODE" }, { "from": 6497292027, "to": 6511512544, "type": "CALL" }, { "from": 6497292032, "to": 6497289379, "type": "CODE" }, { "from": 6497292044, "to": 6542069736, "type": "CALL" }, { "from": 6497292069, "to": 6483139200, "type": "CALL" }, { "from": 6497292081, "to": 6542069628, "type": "CALL" }, { "from": 6497292086, "to": 6497280616, "type": "CODE" }, { "from": 6497292099, "to": 6497292108, "type": "CODE" }, { "from": 6497292114, "to": 6511730288, "type": "CALL" }, { "from": 6497292119, "to": 6497290509, "type": "CODE" }, { "from": 6497292139, "to": 6740346544, "type": "CALL" }, { "from": 6497292145, "to": 6497291055, "type": "CODE" }, { "from": 6497292179, "to": 6442840976, "type": "CALL" }, { "from": 6497292192, "to": 6511512544, "type": "CALL" }, { "from": 6497292212, "to": 6497291055, "type": "CODE" }, { "from": 6497292241, "to": 6497327024, "type": "CALL" }, { "from": 6497292246, "to": 6497280750, "type": "CODE" }, { "from": 6497292251, "to": 6496205200, "type": "CALL" }, { "from": 6497292256, "to": 6542702416, "type": "CALL" }, { "from": 6497292272, "to": 6497280634, "type": "CODE" }, { "from": 6497292390, "to": 6537118576, "type": "CALL" }, { "from": 6497292395, "to": 6497290068, "type": "CODE" }, { "from": 6497292419, "to": 6511512544, "type": "CALL" }, { "from": 6497292424, "to": 6497290068, "type": "CODE" } ], "datarefs": [ { "from": 6497278576, "to": 6706951056, "type": "DATA" }, { "from": 6497278647, "to": 6706951088, "type": "DATA" }, { "from": 6497278695, "to": 6706951120, "type": "DATA" }, { "from": 6497278779, "to": 6706951152, "type": "DATA" }, { "from": 6497278897, "to": 6497335936, "type": "DATA" }, { "from": 6497278908, "to": 6720326824, "type": "DATA" }, { "from": 6497279211, "to": 6497320320, "type": "DATA" }, { "from": 6497279222, "to": 6497320800, "type": "DATA" }, { "from": 6497279233, "to": 6511490512, "type": "DATA" }, { "from": 6497279504, "to": 6497321200, "type": "DATA" }, { "from": 6497279515, "to": 6497320800, "type": "DATA" }, { "from": 6497279526, "to": 6511490512, "type": "DATA" }, { "from": 6497279660, "to": 6742126256, "type": "DATA" }, { "from": 6497279666, "to": 6741832416, "type": "DATA" }, { "from": 6497279697, "to": 6742126176, "type": "DATA" }, { "from": 6497279870, "to": 6537935408, "type": "DATA" }, { "from": 6497279882, "to": 6488537376, "type": "DATA" }, { "from": 6497279894, "to": 6488537376, "type": "DATA" }, { "from": 6497279934, "to": 6741126408, "type": "DATA" }, { "from": 6497280182, "to": 6497321680, "type": "DATA" }, { "from": 6497280193, "to": 6497320800, "type": "DATA" }, { "from": 6497280204, "to": 6511490512, "type": "DATA" }, { "from": 6497280552, "to": 6742247160, "type": "DATA" }, { "from": 6497280559, "to": 6726554688, "type": "DATA" }, { "from": 6497280579, "to": 6742116160, "type": "DATA" }, { "from": 6497280585, "to": 6741832416, "type": "DATA" }, { "from": 6497280616, "to": 6742116080, "type": "DATA" }, { "from": 6497280850, "to": 6719687704, "type": "DATA" }, { "from": 6497281118, "to": 6497322160, "type": "DATA" }, { "from": 6497281129, "to": 6497320800, "type": "DATA" }, { "from": 6497281140, "to": 6511490512, "type": "DATA" }, { "from": 6497281375, "to": 6706951088, "type": "DATA" }, { "from": 6497281510, "to": 6706345584, "type": "DATA" }, { "from": 6497281601, "to": 6706951120, "type": "DATA" }, { "from": 6497281734, "to": 6497332496, "type": "DATA" }, { "from": 6497281746, "to": 6497332336, "type": "DATA" }, { "from": 6497281758, "to": 6497254576, "type": "DATA" }, { "from": 6497281774, "to": 6511490512, "type": "DATA" }, { "from": 6497282005, "to": 6497322640, "type": "DATA" }, { "from": 6497282016, "to": 6497320800, "type": "DATA" }, { "from": 6497282027, "to": 6511490512, "type": "DATA" }, { "from": 6497282213, "to": 6482133456, "type": "DATA" }, { "from": 6497282224, "to": 6489246576, "type": "DATA" }, { "from": 6497282235, "to": 6511490512, "type": "DATA" }, { "from": 6497282246, "to": 6497252208, "type": "DATA" }, { "from": 6497282404, "to": 6720326112, "type": "DATA" }, { "from": 6497282411, "to": 6720325360, "type": "DATA" }, { "from": 6497282440, "to": 6720326102, "type": "DATA" }, { "from": 6497282573, "to": 6497323120, "type": "DATA" }, { "from": 6497282584, "to": 6497323408, "type": "DATA" }, { "from": 6497282595, "to": 6511490512, "type": "DATA" }, { "from": 6497282749, "to": 6497331040, "type": "DATA" }, { "from": 6497282761, "to": 6496660576, "type": "DATA" }, { "from": 6497282808, "to": 6443242560, "type": "DATA" }, { "from": 6497282819, "to": 6488787248, "type": "DATA" }, { "from": 6497282834, "to": 6497213792, "type": "DATA" }, { "from": 6497282975, "to": 6720326072, "type": "DATA" }, { "from": 6497282982, "to": 6720325360, "type": "DATA" }, { "from": 6497283045, "to": 6462662976, "type": "DATA" }, { "from": 6497283056, "to": 6497337504, "type": "DATA" }, { "from": 6497283071, "to": 6497337040, "type": "DATA" }, { "from": 6497283113, "to": 6443185472, "type": "DATA" }, { "from": 6497283124, "to": 6496379968, "type": "DATA" }, { "from": 6497283139, "to": 6497337248, "type": "DATA" }, { "from": 6497283167, "to": 6741126408, "type": "DATA" }, { "from": 6497283199, "to": 6720326061, "type": "DATA" }, { "from": 6497283323, "to": 6497323680, "type": "DATA" }, { "from": 6497283334, "to": 6497320800, "type": "DATA" }, { "from": 6497283345, "to": 6511490512, "type": "DATA" }, { "from": 6497283492, "to": 6706951184, "type": "DATA" }, { "from": 6497283958, "to": 6545635632, "type": "DATA" }, { "from": 6497284045, "to": 6545635632, "type": "DATA" }, { "from": 6497284128, "to": 6545635632, "type": "DATA" }, { "from": 6497284213, "to": 6545635632, "type": "DATA" }, { "from": 6497284304, "to": 6706951088, "type": "DATA" }, { "from": 6497284370, "to": 6497327408, "type": "DATA" }, { "from": 6497284381, "to": 6497327616, "type": "DATA" }, { "from": 6497284525, "to": 6497328416, "type": "DATA" }, { "from": 6497284537, "to": 6497327792, "type": "DATA" }, { "from": 6497284553, "to": 6495420080, "type": "DATA" }, { "from": 6497284565, "to": 6497328624, "type": "DATA" }, { "from": 6497284688, "to": 6488537248, "type": "DATA" }, { "from": 6497284773, "to": 6488537248, "type": "DATA" }, { "from": 6497285267, "to": 6709762120, "type": "DATA" }, { "from": 6497285410, "to": 6720325824, "type": "DATA" }, { "from": 6497285417, "to": 6720325360, "type": "DATA" }, { "from": 6497285702, "to": 6715409360, "type": "DATA" }, { "from": 6497285709, "to": 6715409368, "type": "DATA" }, { "from": 6497286009, "to": 6717673432, "type": "DATA" }, { "from": 6497286052, "to": 6717673434, "type": "DATA" }, { "from": 6497286061, "to": 6717673432, "type": "DATA" }, { "from": 6497286176, "to": 6712106876, "type": "DATA" }, { "from": 6497286967, "to": 6545635632, "type": "DATA" }, { "from": 6497287190, "to": 6545635632, "type": "DATA" }, { "from": 6497287264, "to": 6545635632, "type": "DATA" }, { "from": 6497287353, "to": 6545635632, "type": "DATA" }, { "from": 6497288283, "to": 6713633672, "type": "DATA" }, { "from": 6497289450, "to": 6488537376, "type": "DATA" }, { "from": 6497289466, "to": 6488537376, "type": "DATA" }, { "from": 6497289607, "to": 6537935408, "type": "DATA" }, { "from": 6497289640, "to": 6741126408, "type": "DATA" }, { "from": 6497290576, "to": 6511490512, "type": "DATA" }, { "from": 6497290872, "to": 6511490512, "type": "DATA" }, { "from": 6497291426, "to": 6537935408, "type": "DATA" }, { "from": 6497291442, "to": 6488537376, "type": "DATA" }, { "from": 6497291630, "to": 6545635632, "type": "DATA" }, { "from": 6497291750, "to": 6741126408, "type": "DATA" }, { "from": 6497291939, "to": 6742126256, "type": "DATA" }, { "from": 6497291951, "to": 6742126256, "type": "DATA" }, { "from": 6497291964, "to": 6742126176, "type": "DATA" }, { "from": 6497291976, "to": 6742126256, "type": "DATA" }, { "from": 6497292037, "to": 6742116160, "type": "DATA" }, { "from": 6497292049, "to": 6742116160, "type": "DATA" }, { "from": 6497292062, "to": 6742116080, "type": "DATA" }, { "from": 6497292074, "to": 6742116160, "type": "DATA" }, { "from": 6497292124, "to": 6488537376, "type": "DATA" }, { "from": 6497292170, "to": 6741126408, "type": "DATA" } ] }, "strings": [ { "va": "0x190ef1440", "offset": 284100672, "ascii": "disable-sync", "wide": null }, { "va": "0x190864c18", "offset": 277233688, "ascii": "credentials_enable_service", "wide": null }, { "va": "0x1909009e0", "offset": 277872096, "ascii": "ImportDeviceBoundSessions", "wide": null }, { "va": "0x1909006f0", "offset": 277871344, "ascii": "..\\..\\chrome\\browser\\tab_data_migration\\tab_data_migration_service.cc", "wide": null }, { "va": "0x1909009b8", "offset": 277872056, "ascii": "ImportOpenTabsFromProfilePath", "wide": null }, { "va": "0x1909008c0", "offset": 277871808, "ascii": "ImportHistory", "wide": null }, { "va": "0x1904503d0", "offset": 272955344, "ascii": "http", "wide": null }, { "va": "0x1904503d8", "offset": 272955352, "ascii": "https", "wide": null }, { "va": "0x190678fd8", "offset": 275219416, "ascii": "://", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 210407 }, { "label": "p-location-icon-view", "file": "rea-p-location-icon-view.json", "file_sha256": "364f86253f6c87fcee5e736d701244663056f6e69dd89160320223d4e840b214", "status": "completed", "evidence_id": "ev_26dea991232c4a795d4cb4dea5994bde0b19191d0df33efcf59d23e1670107b1", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1832888a0;pdgo @ 0x1832888a0;afij @ 0x1832888a0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1832888a0", "size": 380, "nargs": 0, "signature": "fcn.1832888a0();", "callrefs": [ { "from": 6495439051, "to": 6542067384, "type": "CALL" }, { "from": 6495439091, "to": 6529644880, "type": "CALL" }, { "from": 6495439169, "to": 6511423872, "type": "CALL" }, { "from": 6495439246, "to": 6458053264, "type": "CALL" }, { "from": 6495439296, "to": 6542069736, "type": "CALL" }, { "from": 6495439338, "to": 6542069628, "type": "CALL" }, { "from": 6495439343, "to": 6495439231, "type": "CODE" }, { "from": 6495439353, "to": 6542089024, "type": "CALL" }, { "from": 6495439358, "to": 6442840976, "type": "CALL" }, { "from": 6495439363, "to": 6495439194, "type": "CODE" }, { "from": 6495439368, "to": 6624110480, "type": "CALL" }, { "from": 6495439383, "to": 6495439141, "type": "CODE" } ], "datarefs": [ { "from": 6495439015, "to": 6740709440, "type": "DATA" }, { "from": 6495439030, "to": 6741837816, "type": "DATA" }, { "from": 6495439059, "to": 6712086448, "type": "DATA" }, { "from": 6495439096, "to": 6706345176, "type": "DATA" }, { "from": 6495439106, "to": 6712085760, "type": "DATA" }, { "from": 6495439125, "to": 6742233264, "type": "DATA" }, { "from": 6495439157, "to": 6741126408, "type": "DATA" }, { "from": 6495439181, "to": 6741126408, "type": "DATA" }, { "from": 6495439198, "to": 6742271936, "type": "DATA" }, { "from": 6495439204, "to": 6741832416, "type": "DATA" }, { "from": 6495439239, "to": 6742271912, "type": "DATA" }, { "from": 6495439251, "to": 6741837816, "type": "DATA" }, { "from": 6495439266, "to": 6740709440, "type": "DATA" }, { "from": 6495439289, "to": 6742271936, "type": "DATA" }, { "from": 6495439301, "to": 6742271936, "type": "DATA" }, { "from": 6495439313, "to": 6742271912, "type": "DATA" }, { "from": 6495439320, "to": 6742271928, "type": "DATA" }, { "from": 6495439331, "to": 6742271936, "type": "DATA" }, { "from": 6495439376, "to": 6742233264, "type": "DATA" } ] }, "strings": [ { "va": "0x190124fb0", "offset": 269632432, "ascii": "..\\..\\tab\\browser\\ui\\views\\location_bar\\tab_search_engine_icon_view.h", "wide": null }, { "va": "0x190124d00", "offset": 269631744, "ascii": "TabSearchEngineIconView", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 3075 }, { "label": "p-memory-discard", "file": "rea-p-memory-discard.json", "file_sha256": "8cb8427b799ffcbd34447c2e97b90556c2eb4ce4dd57b97f3e7e82dddddc4c89", "status": "completed", "evidence_id": "ev_f53f1248812b230a816d73ee3ff2d5277b40cb6d767ef52a7db96af7c914fdaa", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18388ae40;pdgo @ 0x18388ae40;afij @ 0x18388ae40", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18388ae40", "size": 5246, "nargs": 3, "signature": "fcn.18388ae40(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6501740179, "to": 6501740202, "type": "CODE" }, { "from": 6501740218, "to": 6501740181, "type": "CODE" }, { "from": 6501740235, "to": 6501740246, "type": "CODE" }, { "from": 6501740306, "to": 6501735968, "type": "CALL" }, { "from": 6501740398, "to": 6501740425, "type": "CODE" }, { "from": 6501740400, "to": 6442840976, "type": "CALL" }, { "from": 6501740452, "to": 6501740400, "type": "CODE" }, { "from": 6501740462, "to": 6501740357, "type": "CODE" }, { "from": 6501740485, "to": 6501740545, "type": "CODE" }, { "from": 6501740487, "to": 6442840976, "type": "CALL" }, { "from": 6501740564, "to": 6501740487, "type": "CODE" }, { "from": 6501740627, "to": 6501741004, "type": "CODE" }, { "from": 6501740642, "to": 6740346544, "type": "CALL" }, { "from": 6501740688, "to": 6501740566, "type": "CODE" }, { "from": 6501740688, "to": 6501740690, "type": "CODE" }, { "from": 6501740688, "to": 6501740746, "type": "CODE" }, { "from": 6501740688, "to": 6501740807, "type": "CODE" }, { "from": 6501740688, "to": 6501740873, "type": "CODE" }, { "from": 6501740688, "to": 6501740933, "type": "CODE" }, { "from": 6501740741, "to": 6501740999, "type": "CODE" }, { "from": 6501740802, "to": 6501741004, "type": "CODE" }, { "from": 6501740868, "to": 6501741004, "type": "CODE" }, { "from": 6501740931, "to": 6501740999, "type": "CODE" }, { "from": 6501741079, "to": 6740346544, "type": "CALL" }, { "from": 6501741137, "to": 6442840976, "type": "CALL" }, { "from": 6501741150, "to": 6511512544, "type": "CALL" }, { "from": 6501741155, "to": 6501741484, "type": "CODE" }, { "from": 6501741187, "to": 6740346544, "type": "CALL" }, { "from": 6501741193, "to": 6501741484, "type": "CODE" }, { "from": 6501741208, "to": 6740346544, "type": "CALL" }, { "from": 6501741236, "to": 6740346544, "type": "CALL" }, { "from": 6501741290, "to": 6520429280, "type": "CALL" }, { "from": 6501741426, "to": 6469361888, "type": "CALL" }, { "from": 6501741472, "to": 6501741484, "type": "CODE" }, { "from": 6501741510, "to": 6501741536, "type": "CODE" }, { "from": 6501741565, "to": 6501734592, "type": "CALL" }, { "from": 6501741614, "to": 6501744355, "type": "CODE" }, { "from": 6501741743, "to": 6511423872, "type": "CALL" }, { "from": 6501741783, "to": 6501742396, "type": "CODE" }, { "from": 6501741889, "to": 6542067384, "type": "CALL" }, { "from": 6501741897, "to": 6501741902, "type": "CODE" }, { "from": 6501741952, "to": 6501741962, "type": "CODE" }, { "from": 6501742004, "to": 6511423872, "type": "CALL" }, { "from": 6501742133, "to": 6501744448, "type": "CODE" }, { "from": 6501742241, "to": 6501744398, "type": "CODE" }, { "from": 6501742265, "to": 6542067384, "type": "CALL" }, { "from": 6501742305, "to": 6511512544, "type": "CALL" }, { "from": 6501742310, "to": 6501741947, "type": "CODE" }, { "from": 6501742374, "to": 6511512544, "type": "CALL" }, { "from": 6501742502, "to": 6740346544, "type": "CALL" }, { "from": 6501742556, "to": 6740346544, "type": "CALL" }, { "from": 6501742562, "to": 6501742608, "type": "CODE" }, { "from": 6501742590, "to": 6442840976, "type": "CALL" }, { "from": 6501742603, "to": 6511512544, "type": "CALL" }, { "from": 6501742661, "to": 6501742704, "type": "CODE" }, { "from": 6501742666, "to": 6740346544, "type": "CALL" }, { "from": 6501742675, "to": 6501743100, "type": "CODE" }, { "from": 6501742719, "to": 6501735376, "type": "CALL" }, { "from": 6501742735, "to": 6611684432, "type": "CALL" }, { "from": 6501742792, "to": 6501742796, "type": "CODE" }, { "from": 6501742807, "to": 6544807632, "type": "CALL" }, { "from": 6501742827, "to": 6451260224, "type": "CALL" }, { "from": 6501742888, "to": 6524601072, "type": "CALL" }, { "from": 6501742962, "to": 6456090784, "type": "CALL" }, { "from": 6501742999, "to": 6524601072, "type": "CALL" }, { "from": 6501743045, "to": 6740379656, "type": "CALL" }, { "from": 6501743222, "to": 6524601072, "type": "CALL" }, { "from": 6501743284, "to": 6524601072, "type": "CALL" }, { "from": 6501743341, "to": 6524601072, "type": "CALL" }, { "from": 6501743402, "to": 6471067168, "type": "CALL" }, { "from": 6501743680, "to": 6501730256, "type": "CALL" }, { "from": 6501743711, "to": 6511512544, "type": "CALL" }, { "from": 6501743745, "to": 6511512544, "type": "CALL" }, { "from": 6501743779, "to": 6511512544, "type": "CALL" }, { "from": 6501743796, "to": 6514715792, "type": "CALL" }, { "from": 6501743835, "to": 6740346544, "type": "CALL" }, { "from": 6501743907, "to": 6445650832, "type": "CALL" }, { "from": 6501743936, "to": 6524031184, "type": "CALL" }, { "from": 6501743968, "to": 6524031184, "type": "CALL" }, { "from": 6501743989, "to": 6524031184, "type": "CALL" }, { "from": 6501744000, "to": 6524048128, "type": "CALL" }, { "from": 6501744019, "to": 6445656528, "type": "CALL" }, { "from": 6501744083, "to": 6511512544, "type": "CALL" }, { "from": 6501744137, "to": 6511975280, "type": "CALL" }, { "from": 6501744145, "to": 6518967168, "type": "CALL" }, { "from": 6501744179, "to": 6511512544, "type": "CALL" }, { "from": 6501744221, "to": 6511512544, "type": "CALL" }, { "from": 6501744226, "to": 6501740246, "type": "CODE" }, { "from": 6501744239, "to": 6517335696, "type": "CALL" }, { "from": 6501744244, "to": 6501743841, "type": "CODE" }, { "from": 6501744274, "to": 6524603600, "type": "CALL" }, { "from": 6501744320, "to": 6511512544, "type": "CALL" }, { "from": 6501744325, "to": 6501744197, "type": "CODE" }, { "from": 6501744371, "to": 6501744330, "type": "CODE" }, { "from": 6501744373, "to": 6442840976, "type": "CALL" }, { "from": 6501744421, "to": 6501744373, "type": "CODE" }, { "from": 6501744423, "to": 6442840976, "type": "CALL" }, { "from": 6501744471, "to": 6501744423, "type": "CODE" }, { "from": 6501744528, "to": 6501744729, "type": "CODE" }, { "from": 6501744533, "to": 6442840976, "type": "CALL" }, { "from": 6501744612, "to": 6501744533, "type": "CODE" }, { "from": 6501744622, "to": 6501741426, "type": "CODE" }, { "from": 6501744671, "to": 6511423872, "type": "CALL" }, { "from": 6501744724, "to": 6501744475, "type": "CODE" }, { "from": 6501744778, "to": 6442840976, "type": "CALL" }, { "from": 6501744826, "to": 6501742396, "type": "CODE" }, { "from": 6501744877, "to": 6740346544, "type": "CALL" }, { "from": 6501744936, "to": 6636678064, "type": "CALL" }, { "from": 6501744988, "to": 6740379656, "type": "CALL" }, { "from": 6501745068, "to": 6501745086, "type": "CODE" }, { "from": 6501745073, "to": 6740346544, "type": "CALL" }, { "from": 6501745082, "to": 6501745032, "type": "CODE" }, { "from": 6501745109, "to": 6501741450, "type": "CODE" }, { "from": 6501745119, "to": 6501741150, "type": "CODE" }, { "from": 6501745165, "to": 6545792064, "type": "CALL" }, { "from": 6501745170, "to": 6543271376, "type": "CALL" }, { "from": 6501745215, "to": 6740346544, "type": "CALL" }, { "from": 6501745221, "to": 6501744126, "type": "CODE" }, { "from": 6501745266, "to": 6501743092, "type": "CODE" }, { "from": 6501745282, "to": 6522896976, "type": "CALL" }, { "from": 6501745292, "to": 6501741369, "type": "CODE" }, { "from": 6501745337, "to": 6501745032, "type": "CODE" } ], "datarefs": [ { "from": 6501740443, "to": 6741126408, "type": "DATA" }, { "from": 6501740555, "to": 6741126408, "type": "DATA" }, { "from": 6501740575, "to": 6712125168, "type": "DATA" }, { "from": 6501740607, "to": 6712125171, "type": "DATA" }, { "from": 6501740617, "to": 6712125168, "type": "DATA" }, { "from": 6501740674, "to": 6723760184, "type": "DATA" }, { "from": 6501740699, "to": 6713609232, "type": "DATA" }, { "from": 6501740755, "to": 6723760140, "type": "DATA" }, { "from": 6501740816, "to": 6723760152, "type": "DATA" }, { "from": 6501740882, "to": 6723759992, "type": "DATA" }, { "from": 6501740914, "to": 6723760000, "type": "DATA" }, { "from": 6501740924, "to": 6723759992, "type": "DATA" }, { "from": 6501740942, "to": 6723760168, "type": "DATA" }, { "from": 6501741099, "to": 6537935408, "type": "DATA" }, { "from": 6501741128, "to": 6741126408, "type": "DATA" }, { "from": 6501741160, "to": 6488537376, "type": "DATA" }, { "from": 6501741172, "to": 6488537376, "type": "DATA" }, { "from": 6501741251, "to": 6742372168, "type": "DATA" }, { "from": 6501741280, "to": 6727542840, "type": "DATA" }, { "from": 6501741500, "to": 6712105968, "type": "DATA" }, { "from": 6501741512, "to": 6722592736, "type": "DATA" }, { "from": 6501741523, "to": 6722592728, "type": "DATA" }, { "from": 6501741727, "to": 6741126408, "type": "DATA" }, { "from": 6501741992, "to": 6741126408, "type": "DATA" }, { "from": 6501742517, "to": 6537935408, "type": "DATA" }, { "from": 6501742529, "to": 6488537376, "type": "DATA" }, { "from": 6501742541, "to": 6488537376, "type": "DATA" }, { "from": 6501742581, "to": 6741126408, "type": "DATA" }, { "from": 6501742651, "to": 6712105968, "type": "DATA" }, { "from": 6501742680, "to": 6722592736, "type": "DATA" }, { "from": 6501742691, "to": 6722592728, "type": "DATA" }, { "from": 6501742853, "to": 6712106496, "type": "DATA" }, { "from": 6501742933, "to": 6718521144, "type": "DATA" }, { "from": 6501742967, "to": 6718516448, "type": "DATA" }, { "from": 6501743004, "to": 6741125872, "type": "DATA" }, { "from": 6501743011, "to": 6537033840, "type": "DATA" }, { "from": 6501743100, "to": 6742194320, "type": "DATA" }, { "from": 6501743185, "to": 6723757480, "type": "DATA" }, { "from": 6501743250, "to": 6723757736, "type": "DATA" }, { "from": 6501743307, "to": 6723757752, "type": "DATA" }, { "from": 6501743421, "to": 6723760008, "type": "DATA" }, { "from": 6501743504, "to": 6715269024, "type": "DATA" }, { "from": 6501743539, "to": 6715269028, "type": "DATA" }, { "from": 6501743552, "to": 6715269024, "type": "DATA" }, { "from": 6501743585, "to": 6723756856, "type": "DATA" }, { "from": 6501743620, "to": 6723756872, "type": "DATA" }, { "from": 6501743640, "to": 6723756856, "type": "DATA" }, { "from": 6501743784, "to": 6723758264, "type": "DATA" }, { "from": 6501743808, "to": 6517335696, "type": "DATA" }, { "from": 6501743841, "to": 6742246848, "type": "DATA" }, { "from": 6501743854, "to": 6741126112, "type": "DATA" }, { "from": 6501743863, "to": 6742246856, "type": "DATA" }, { "from": 6501743877, "to": 6723760024, "type": "DATA" }, { "from": 6501743920, "to": 6723760088, "type": "DATA" }, { "from": 6501743973, "to": 6723760128, "type": "DATA" }, { "from": 6501744005, "to": 6710367816, "type": "DATA" }, { "from": 6501744031, "to": 6708900496, "type": "DATA" }, { "from": 6501744046, "to": 6708923712, "type": "DATA" }, { "from": 6501744096, "to": 6708923824, "type": "DATA" }, { "from": 6501744110, "to": 6742217808, "type": "DATA" }, { "from": 6501744412, "to": 6741126408, "type": "DATA" }, { "from": 6501744462, "to": 6741126408, "type": "DATA" }, { "from": 6501744603, "to": 6741126408, "type": "DATA" }, { "from": 6501744659, "to": 6741126408, "type": "DATA" }, { "from": 6501744769, "to": 6741126408, "type": "DATA" }, { "from": 6501744831, "to": 6742372168, "type": "DATA" }, { "from": 6501744870, "to": 6722593292, "type": "DATA" }, { "from": 6501744951, "to": 6741125872, "type": "DATA" }, { "from": 6501744958, "to": 6537033840, "type": "DATA" }, { "from": 6501745229, "to": 6742234664, "type": "DATA" }, { "from": 6501745303, "to": 6742234664, "type": "DATA" } ] }, "strings": [ { "va": "0x19012e6f0", "offset": 269671152, "ascii": "unknown", "wide": null }, { "va": "0x19012e6f3", "offset": 269671155, "ascii": "nown", "wide": null }, { "va": "0x190298c10", "offset": 271155216, "ascii": "external", "wide": null }, { "va": "0x190c4700c", "offset": 281306124, "ascii": "urgent", "wide": null }, { "va": "0x190c47018", "offset": 281306136, "ascii": "suggested", "wide": null }, { "va": "0x190c46f78", "offset": 281305976, "ascii": "proactive", "wide": null }, { "va": "0x190c47028", "offset": 281306152, "ascii": "frozen_growing", "wide": null }, { "va": "0x190747f38", "offset": 276067128, "ascii": "discard_reason", "wide": null }, { "va": "0x190746ce0", "offset": 276062432, "ascii": "tab_count", "wide": null }, { "va": "0x190c465a8", "offset": 281303464, "ascii": "uptime_sec", "wide": null }, { "va": "0x190c466a8", "offset": 281303720, "ascii": "sys_total_mb", "wide": null }, { "va": "0x190c466b8", "offset": 281303736, "ascii": "sys_free_mb", "wide": null }, { "va": "0x190c46f88", "offset": 281305992, "ascii": "tab_discarded", "wide": null }, { "va": "0x19042dfa0", "offset": 272815008, "ascii": "event", "wide": null }, { "va": "0x190c46338", "offset": 281302840, "ascii": "performance_memory", "wide": null }, { "va": "0x190c468b8", "offset": 281304248, "ascii": "Memory.Tabbit.TabDiscarded", "wide": null }, { "va": "0x190c46f98", "offset": 281306008, "ascii": "..\\..\\tab\\browser\\memory_monitor\\tab_discard_aggregator.cc", "wide": null }, { "va": "0x190c46fd8", "offset": 281306072, "ascii": "[MemMonitor] tab_discarded: reason=", "wide": null }, { "va": "0x190c47000", "offset": 281306112, "ascii": " tab_count=", "wide": null } ], "imports": [ { "at": "0x18388b9c5", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } }, { "at": "0x18388c15c", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 56457 }, { "label": "p-memory-pressure-signal", "file": "rea-p-memory-pressure-signal.json", "file_sha256": "e21c9e70468cf1227150bb74d2b6e2b5dac19775265912a51a0ac84cc028777b", "status": "completed", "evidence_id": "ev_59e8647158275809d0f69d31417568db9d7ca69090429588123332d4dc0639a8", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18adb6860;pdgo @ 0x18adb6860;afij @ 0x18adb6860", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18adb6860", "size": 2003, "nargs": 2, "signature": "fcn.18adb6860(int64_t arg1, int64_t arg_40h);", "callrefs": [ { "from": 6624600950, "to": 6740346544, "type": "CALL" }, { "from": 6624601101, "to": 6624601048, "type": "CODE" }, { "from": 6624601108, "to": 6624602288, "type": "CALL" }, { "from": 6624601113, "to": 6624601026, "type": "CODE" }, { "from": 6624601144, "to": 6513050896, "type": "CALL" }, { "from": 6624601149, "to": 6624601048, "type": "CODE" }, { "from": 6624601182, "to": 6624603584, "type": "CALL" }, { "from": 6624601187, "to": 6624601017, "type": "CODE" }, { "from": 6624601226, "to": 6539244160, "type": "CALL" }, { "from": 6624601325, "to": 6624604208, "type": "CALL" }, { "from": 6624601330, "to": 6624600991, "type": "CODE" }, { "from": 6624601346, "to": 6542089024, "type": "CALL" }, { "from": 6624602274, "to": 6624602288, "type": "CODE" }, { "from": 6624602365, "to": 6740346544, "type": "CALL" }, { "from": 6624602386, "to": 6511730640, "type": "CALL" }, { "from": 6624602430, "to": 6536129904, "type": "CALL" }, { "from": 6624602471, "to": 6448933696, "type": "CALL" }, { "from": 6624602513, "to": 6446095360, "type": "CALL" }, { "from": 6624602523, "to": 6446095360, "type": "CALL" }, { "from": 6624602564, "to": 6511512544, "type": "CALL" }, { "from": 6624602620, "to": 6624605392, "type": "CALL" }, { "from": 6624602834, "to": 6624602617, "type": "CODE" }, { "from": 6624602856, "to": 6624602896, "type": "CALL" }, { "from": 6624602861, "to": 6624602569, "type": "CODE" }, { "from": 6624602877, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6624600901, "to": 6740709440, "type": "DATA" }, { "from": 6624600923, "to": 6742242312, "type": "DATA" }, { "from": 6624600977, "to": 6742233648, "type": "DATA" }, { "from": 6624601003, "to": 6742233648, "type": "DATA" }, { "from": 6624601038, "to": 6742233648, "type": "DATA" }, { "from": 6624601059, "to": 6740709440, "type": "DATA" }, { "from": 6624601154, "to": 6724157024, "type": "DATA" }, { "from": 6624601195, "to": 6741839496, "type": "DATA" }, { "from": 6624601243, "to": 6724157080, "type": "DATA" }, { "from": 6624602210, "to": 6742246552, "type": "DATA" }, { "from": 6624602313, "to": 6740709440, "type": "DATA" }, { "from": 6624602338, "to": 6742242312, "type": "DATA" }, { "from": 6624602379, "to": 6741126088, "type": "DATA" }, { "from": 6624602420, "to": 6724156824, "type": "DATA" }, { "from": 6624602580, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190ca7e60", "offset": 281703008, "ascii": "MemoryPressureListenerRegistry::SetMemoryPressureLevel", "wide": null }, { "va": "0x190ca7e98", "offset": 281703064, "ascii": "MemoryPressureLevel", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 17444 }, { "label": "p-memory-pressure", "file": "rea-p-memory-pressure.json", "file_sha256": "7e91bee8df5fde53787a7b443d5a757fcb09f1f92c3f10d9218539b4de07e975", "status": "completed", "evidence_id": "ev_8d2181c6b79b3179bbf6c18539f810ad43994984e9cadde775fc0181783a2108", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18388a750;pdgo @ 0x18388a750;afij @ 0x18388a750", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18388a750", "size": 1157, "nargs": 1, "signature": "fcn.18388a750(int64_t arg1);", "callrefs": [ { "from": 6501738358, "to": 6740346544, "type": "CALL" }, { "from": 6501738401, "to": 6532643840, "type": "CALL" }, { "from": 6501738433, "to": 6524006080, "type": "CALL" }, { "from": 6501738509, "to": 6445650832, "type": "CALL" }, { "from": 6501738535, "to": 6524031184, "type": "CALL" }, { "from": 6501738554, "to": 6445656528, "type": "CALL" }, { "from": 6501738621, "to": 6511512544, "type": "CALL" }, { "from": 6501738672, "to": 6511975280, "type": "CALL" }, { "from": 6501738680, "to": 6518967168, "type": "CALL" }, { "from": 6501738754, "to": 6445650832, "type": "CALL" }, { "from": 6501738780, "to": 6524031184, "type": "CALL" }, { "from": 6501738801, "to": 6524031184, "type": "CALL" }, { "from": 6501738820, "to": 6445656528, "type": "CALL" }, { "from": 6501738865, "to": 6501738626, "type": "CODE" }, { "from": 6501738933, "to": 6445650832, "type": "CALL" }, { "from": 6501738959, "to": 6524031184, "type": "CALL" }, { "from": 6501738971, "to": 6524048128, "type": "CALL" }, { "from": 6501738992, "to": 6524031184, "type": "CALL" }, { "from": 6501739011, "to": 6445656528, "type": "CALL" }, { "from": 6501739078, "to": 6511512544, "type": "CALL" }, { "from": 6501739129, "to": 6511975280, "type": "CALL" }, { "from": 6501739137, "to": 6518967168, "type": "CALL" }, { "from": 6501739167, "to": 6511423872, "type": "CALL" }, { "from": 6501739181, "to": 6542067384, "type": "CALL" }, { "from": 6501739268, "to": 6512942288, "type": "CALL" }, { "from": 6501739322, "to": 6517399712, "type": "CALL" }, { "from": 6501739327, "to": 6501738686, "type": "CODE" }, { "from": 6501739356, "to": 6740346544, "type": "CALL" }, { "from": 6501739362, "to": 6501739286, "type": "CODE" }, { "from": 6501739381, "to": 6511512544, "type": "CALL" }, { "from": 6501739386, "to": 6501739286, "type": "CODE" }, { "from": 6501739398, "to": 6511512544, "type": "CALL" }, { "from": 6501739403, "to": 6501739373, "type": "CODE" }, { "from": 6501739430, "to": 6740346544, "type": "CALL" }, { "from": 6501739436, "to": 6501738661, "type": "CODE" }, { "from": 6501739466, "to": 6740346544, "type": "CALL" }, { "from": 6501739472, "to": 6501739118, "type": "CODE" } ], "datarefs": [ { "from": 6501738335, "to": 6741850168, "type": "DATA" }, { "from": 6501738372, "to": 6723757776, "type": "DATA" }, { "from": 6501738446, "to": 6742246848, "type": "DATA" }, { "from": 6501738459, "to": 6741126112, "type": "DATA" }, { "from": 6501738468, "to": 6742246856, "type": "DATA" }, { "from": 6501738482, "to": 6723759672, "type": "DATA" }, { "from": 6501738519, "to": 6723759816, "type": "DATA" }, { "from": 6501738540, "to": 6710367816, "type": "DATA" }, { "from": 6501738566, "to": 6708900496, "type": "DATA" }, { "from": 6501738578, "to": 6708923712, "type": "DATA" }, { "from": 6501738631, "to": 6708923824, "type": "DATA" }, { "from": 6501738645, "to": 6742217808, "type": "DATA" }, { "from": 6501738699, "to": 6742246848, "type": "DATA" }, { "from": 6501738708, "to": 6741126112, "type": "DATA" }, { "from": 6501738717, "to": 6742246856, "type": "DATA" }, { "from": 6501738727, "to": 6723759672, "type": "DATA" }, { "from": 6501738764, "to": 6723759736, "type": "DATA" }, { "from": 6501738785, "to": 6723759784, "type": "DATA" }, { "from": 6501738806, "to": 6710367816, "type": "DATA" }, { "from": 6501738832, "to": 6708900496, "type": "DATA" }, { "from": 6501738844, "to": 6708923712, "type": "DATA" }, { "from": 6501738870, "to": 6742246848, "type": "DATA" }, { "from": 6501738883, "to": 6741126112, "type": "DATA" }, { "from": 6501738892, "to": 6742246856, "type": "DATA" }, { "from": 6501738906, "to": 6723759672, "type": "DATA" }, { "from": 6501738943, "to": 6723759872, "type": "DATA" }, { "from": 6501738976, "to": 6719614228, "type": "DATA" }, { "from": 6501738997, "to": 6710367816, "type": "DATA" }, { "from": 6501739023, "to": 6708900496, "type": "DATA" }, { "from": 6501739035, "to": 6708923712, "type": "DATA" }, { "from": 6501739088, "to": 6708923824, "type": "DATA" }, { "from": 6501739102, "to": 6742217808, "type": "DATA" }, { "from": 6501739155, "to": 6741126408, "type": "DATA" }, { "from": 6501739195, "to": 6446192048, "type": "DATA" }, { "from": 6501739206, "to": 6488516144, "type": "DATA" }, { "from": 6501739217, "to": 6511490512, "type": "DATA" }, { "from": 6501739228, "to": 6501739488, "type": "DATA" }, { "from": 6501739243, "to": 6712266840, "type": "DATA" }, { "from": 6501739250, "to": 6723759672, "type": "DATA" }, { "from": 6501739341, "to": 6488537248, "type": "DATA" } ] }, "strings": [ { "va": "0x190c466d0", "offset": 281303760, "ascii": "tab_memory_monitor.proactive_trigger_enabled", "wide": null }, { "va": "0x190c46e38", "offset": 281305656, "ascii": "..\\..\\tab\\browser\\memory_monitor\\proactive_memory_trigger.cc", "wide": null }, { "va": "0x190c46ec8", "offset": 281305800, "ascii": "[MemMonitor] proactive trigger: DISABLED (pref off)", "wide": null }, { "va": "0x190c46e78", "offset": 281305720, "ascii": "[MemMonitor] proactive trigger: DISABLED ", "wide": null }, { "va": "0x190c46ea8", "offset": 281305768, "ascii": "(browser process unavailable)", "wide": null }, { "va": "0x190c46f00", "offset": 281305856, "ascii": "[MemMonitor] proactive trigger: ENABLED, threshold=", "wide": null }, { "va": "0x190151058", "offset": 269812824, "ascii": "Start", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 9984 }, { "label": "p-memory-service", "file": "rea-p-memory-service.json", "file_sha256": "2ed77f05c6f88a15fe5dbb21f255946e7b0eed7e362f634cda31d2052de22d89", "status": "completed", "evidence_id": "ev_53906d383d86011b8b42cb5831b4760ad4d9a89c4a22fca4092cea78cd74866e", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183887d90;pdgo @ 0x183887d90;afij @ 0x183887d90", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183887d90", "size": 731, "nargs": 1, "signature": "fcn.183887d90(int64_t arg1);", "callrefs": [ { "from": 6501727732, "to": 6445650832, "type": "CALL" }, { "from": 6501727758, "to": 6524031184, "type": "CALL" }, { "from": 6501727777, "to": 6445656528, "type": "CALL" }, { "from": 6501727844, "to": 6511512544, "type": "CALL" }, { "from": 6501727895, "to": 6511975280, "type": "CALL" }, { "from": 6501727903, "to": 6518967168, "type": "CALL" }, { "from": 6501727912, "to": 6501688848, "type": "CALL" }, { "from": 6501727950, "to": 6532642064, "type": "CALL" }, { "from": 6501727986, "to": 6447968000, "type": "CALL" }, { "from": 6501727996, "to": 6501728368, "type": "CALL" }, { "from": 6501728018, "to": 6501717504, "type": "CALL" }, { "from": 6501728047, "to": 6740346544, "type": "CALL" }, { "from": 6501728091, "to": 6511423872, "type": "CALL" }, { "from": 6501728112, "to": 6442840976, "type": "CALL" }, { "from": 6501728139, "to": 6457284240, "type": "CALL" }, { "from": 6501728151, "to": 6501738320, "type": "CALL" }, { "from": 6501728163, "to": 6501688048, "type": "CALL" }, { "from": 6501728187, "to": 6542067384, "type": "CALL" }, { "from": 6501728209, "to": 6446086448, "type": "CALL" }, { "from": 6501728230, "to": 6466679792, "type": "CALL" }, { "from": 6501728243, "to": 6511512544, "type": "CALL" }, { "from": 6501728275, "to": 6501693360, "type": "CALL" }, { "from": 6501728283, "to": 6501729136, "type": "CALL" }, { "from": 6501728320, "to": 6501715168, "type": "CALL" }, { "from": 6501728325, "to": 6501728268, "type": "CODE" }, { "from": 6501728352, "to": 6740346544, "type": "CALL" }, { "from": 6501728358, "to": 6501727884, "type": "CODE" } ], "datarefs": [ { "from": 6501727669, "to": 6742246848, "type": "DATA" }, { "from": 6501727682, "to": 6741126112, "type": "DATA" }, { "from": 6501727691, "to": 6742246856, "type": "DATA" }, { "from": 6501727705, "to": 6723757944, "type": "DATA" }, { "from": 6501727742, "to": 6723758008, "type": "DATA" }, { "from": 6501727763, "to": 6710367816, "type": "DATA" }, { "from": 6501727789, "to": 6708900496, "type": "DATA" }, { "from": 6501727801, "to": 6708923712, "type": "DATA" }, { "from": 6501727854, "to": 6708923824, "type": "DATA" }, { "from": 6501727868, "to": 6742217808, "type": "DATA" }, { "from": 6501727925, "to": 6723756320, "type": "DATA" }, { "from": 6501728030, "to": 6741850168, "type": "DATA" }, { "from": 6501728079, "to": 6741126408, "type": "DATA" }, { "from": 6501728103, "to": 6741126408, "type": "DATA" }, { "from": 6501728304, "to": 6742372168, "type": "DATA" } ] }, "strings": [ { "va": "0x190c46778", "offset": 281303928, "ascii": "..\\..\\tab\\browser\\memory_monitor\\memory_monitor_service.cc", "wide": null }, { "va": "0x190c467b8", "offset": 281303992, "ascii": "[MemMonitor] service started", "wide": null }, { "va": "0x190c46120", "offset": 281302304, "ascii": "tab_memory_monitor.last_session.session_id", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5488 }, { "label": "p-memory-trigger-tick", "file": "rea-p-memory-trigger-tick.json", "file_sha256": "33d4c3841c30d87aa27657777d2eb23bc0d5f7d11df2f8440bfc66314a505f8a", "status": "completed", "evidence_id": "ev_9330ca8fa6bd91459e2e5d26010305445daf763b144ba8fea777be6aae1837e1", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18388abe0;pdgo @ 0x18388abe0;afij @ 0x18388abe0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18388abe0", "size": 593, "nargs": 1, "signature": "fcn.18388abe0(int64_t arg1);", "callrefs": [ { "from": 6501739554, "to": 6451260224, "type": "CALL" }, { "from": 6501739650, "to": 6445650832, "type": "CALL" }, { "from": 6501739676, "to": 6524031184, "type": "CALL" }, { "from": 6501739687, "to": 6524048128, "type": "CALL" }, { "from": 6501739708, "to": 6524031184, "type": "CALL" }, { "from": 6501739720, "to": 6524048128, "type": "CALL" }, { "from": 6501739739, "to": 6445656528, "type": "CALL" }, { "from": 6501739806, "to": 6511512544, "type": "CALL" }, { "from": 6501739857, "to": 6511975280, "type": "CALL" }, { "from": 6501739865, "to": 6518967168, "type": "CALL" }, { "from": 6501739973, "to": 6624602208, "type": "CALL" }, { "from": 6501739978, "to": 6501739521, "type": "CODE" }, { "from": 6501739997, "to": 6511730288, "type": "CALL" }, { "from": 6501740028, "to": 6511512544, "type": "CALL" }, { "from": 6501740033, "to": 6501739968, "type": "CODE" }, { "from": 6501740070, "to": 6740346544, "type": "CALL" }, { "from": 6501740076, "to": 6501739846, "type": "CODE" } ], "datarefs": [ { "from": 6501739587, "to": 6742246848, "type": "DATA" }, { "from": 6501739600, "to": 6741126112, "type": "DATA" }, { "from": 6501739609, "to": 6742246856, "type": "DATA" }, { "from": 6501739623, "to": 6723759672, "type": "DATA" }, { "from": 6501739660, "to": 6723759928, "type": "DATA" }, { "from": 6501739692, "to": 6723759976, "type": "DATA" }, { "from": 6501739725, "to": 6710367816, "type": "DATA" }, { "from": 6501739751, "to": 6708900496, "type": "DATA" }, { "from": 6501739763, "to": 6708923712, "type": "DATA" }, { "from": 6501739816, "to": 6708923824, "type": "DATA" }, { "from": 6501739830, "to": 6742217808, "type": "DATA" }, { "from": 6501739879, "to": 6723759992, "type": "DATA" } ] }, "strings": [ { "va": "0x190c46e38", "offset": 281305656, "ascii": "..\\..\\tab\\browser\\memory_monitor\\proactive_memory_trigger.cc", "wide": null }, { "va": "0x190c46f38", "offset": 281305912, "ascii": "[MemMonitor] proactive trigger: free_mb=", "wide": null }, { "va": "0x190c46f68", "offset": 281305960, "ascii": " < threshold=", "wide": null }, { "va": "0x190c46f78", "offset": 281305976, "ascii": "proactive", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5088 }, { "label": "p-metrics-apps", "file": "rea-p-metrics-apps.json", "file_sha256": "4e840743df876773a2b9b8b0045bcc700facd679a4181cde0d5f3a6ee6be1b67", "status": "completed", "evidence_id": "ev_b1fb55f4a71a555985aa82b5cf015af51aca9f110a949ef36d58f9e744a86704", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183429060;pdgo @ 0x183429060;afij @ 0x183429060", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183429060", "size": 2111, "nargs": 1, "signature": "fcn.183429060(int64_t arg1);", "callrefs": [ { "from": 6497144987, "to": 6511730640, "type": "CALL" }, { "from": 6497145034, "to": 6524006080, "type": "CALL" }, { "from": 6497145189, "to": 6527000464, "type": "CALL" }, { "from": 6497145282, "to": 6511512544, "type": "CALL" }, { "from": 6497145334, "to": 6497145344, "type": "CODE" }, { "from": 6497145400, "to": 6497145336, "type": "CODE" }, { "from": 6497145420, "to": 6511512544, "type": "CALL" }, { "from": 6497145425, "to": 6497145208, "type": "CODE" }, { "from": 6497145459, "to": 6512481968, "type": "CALL" }, { "from": 6497145524, "to": 6542434064, "type": "CALL" }, { "from": 6497145563, "to": 6512481968, "type": "CALL" }, { "from": 6497145628, "to": 6542434064, "type": "CALL" }, { "from": 6497145652, "to": 6531704832, "type": "CALL" }, { "from": 6497145752, "to": 6521465568, "type": "CALL" }, { "from": 6497145808, "to": 6511512544, "type": "CALL" }, { "from": 6497145918, "to": 6456144208, "type": "CALL" }, { "from": 6497145982, "to": 6511512544, "type": "CALL" }, { "from": 6497146039, "to": 6447968000, "type": "CALL" }, { "from": 6497146148, "to": 6542436672, "type": "CALL" }, { "from": 6497146219, "to": 6447968000, "type": "CALL" }, { "from": 6497146255, "to": 6467206368, "type": "CALL" }, { "from": 6497146306, "to": 6447968000, "type": "CALL" }, { "from": 6497146352, "to": 6740346544, "type": "CALL" }, { "from": 6497146371, "to": 6467550816, "type": "CALL" }, { "from": 6497146452, "to": 6512942288, "type": "CALL" }, { "from": 6497146482, "to": 6511423872, "type": "CALL" }, { "from": 6497146496, "to": 6542067384, "type": "CALL" }, { "from": 6497146622, "to": 6517399712, "type": "CALL" }, { "from": 6497146627, "to": 6497145043, "type": "CODE" }, { "from": 6497146653, "to": 6542067384, "type": "CALL" }, { "from": 6497146709, "to": 6497146106, "type": "CODE" }, { "from": 6497146746, "to": 6740346544, "type": "CALL" }, { "from": 6497146752, "to": 6497146578, "type": "CODE" }, { "from": 6497146783, "to": 6532642064, "type": "CALL" }, { "from": 6497146804, "to": 6497146841, "type": "CODE" }, { "from": 6497146832, "to": 6524006080, "type": "CALL" }, { "from": 6497146852, "to": 6531704832, "type": "CALL" }, { "from": 6497146894, "to": 6443003968, "type": "CALL" }, { "from": 6497146963, "to": 6497145043, "type": "CODE" }, { "from": 6497146985, "to": 6511512544, "type": "CALL" }, { "from": 6497146990, "to": 6497146578, "type": "CODE" }, { "from": 6497147005, "to": 6511512544, "type": "CALL" }, { "from": 6497147010, "to": 6497146977, "type": "CODE" }, { "from": 6497147023, "to": 6542089024, "type": "CALL" }, { "from": 6497147033, "to": 6542702416, "type": "CALL" } ], "datarefs": [ { "from": 6497144947, "to": 6740709440, "type": "DATA" }, { "from": 6497144980, "to": 6741079432, "type": "DATA" }, { "from": 6497145008, "to": 6715266744, "type": "DATA" }, { "from": 6497145054, "to": 6740709440, "type": "DATA" }, { "from": 6497145102, "to": 6720316648, "type": "DATA" }, { "from": 6497145171, "to": 6741079432, "type": "DATA" }, { "from": 6497145433, "to": 6720316608, "type": "DATA" }, { "from": 6497145540, "to": 6720316512, "type": "DATA" }, { "from": 6497145674, "to": 6720316664, "type": "DATA" }, { "from": 6497145736, "to": 6741079432, "type": "DATA" }, { "from": 6497145825, "to": 6720316680, "type": "DATA" }, { "from": 6497145891, "to": 6741079432, "type": "DATA" }, { "from": 6497146010, "to": 6720316480, "type": "DATA" }, { "from": 6497146232, "to": 6720316544, "type": "DATA" }, { "from": 6497146274, "to": 6720316576, "type": "DATA" }, { "from": 6497146424, "to": 6712266840, "type": "DATA" }, { "from": 6497146431, "to": 6720316704, "type": "DATA" }, { "from": 6497146470, "to": 6741126408, "type": "DATA" }, { "from": 6497146507, "to": 6446192048, "type": "DATA" }, { "from": 6497146518, "to": 6488516144, "type": "DATA" }, { "from": 6497146529, "to": 6511490512, "type": "DATA" }, { "from": 6497146540, "to": 6497147040, "type": "DATA" }, { "from": 6497146678, "to": 6720316512, "type": "DATA" }, { "from": 6497146727, "to": 6488537248, "type": "DATA" }, { "from": 6497146760, "to": 6720316576, "type": "DATA" }, { "from": 6497146809, "to": 6720316480, "type": "DATA" }, { "from": 6497146868, "to": 6720316544, "type": "DATA" } ] }, "strings": [ { "va": "0x19042d6b8", "offset": 272812728, "ascii": "user_experience_metrics.reporting_enabled", "wide": null }, { "va": "0x1908fe4e8", "offset": 277862632, "ascii": "campaign_id", "wide": null }, { "va": "0x1908fe4c0", "offset": 277862592, "ascii": "tab.app_inventory.completed_campaign_id", "wide": null }, { "va": "0x1908fe460", "offset": 277862496, "ascii": "tab.app_inventory.campaign_id", "wide": null }, { "va": "0x1908fe4f8", "offset": 277862648, "ascii": "max_apps", "wide": null }, { "va": "0x1908fe508", "offset": 277862664, "ascii": "startup_delay", "wide": null }, { "va": "0x1908fe440", "offset": 277862464, "ascii": "tab.app_inventory.attempted", "wide": null }, { "va": "0x1908fe480", "offset": 277862528, "ascii": "tab.app_inventory.attempt_time", "wide": null }, { "va": "0x1908fe4a0", "offset": 277862560, "ascii": "tab.app_inventory.attempt_count", "wide": null }, { "va": "0x190151058", "offset": 269812824, "ascii": "Start", "wide": null }, { "va": "0x1908fe520", "offset": 277862688, "ascii": "..\\..\\tab\\browser\\analytics\\installed_app_inventory_reporter.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 21412 }, { "label": "p-metrics-extensions", "file": "rea-p-metrics-extensions.json", "file_sha256": "abfccf5b7d4f0a07b5fd72dbed0b5b28583b06d4ec2bc3fc90ad330924c67da8", "status": "completed", "evidence_id": "ev_61dc6e7ff7aa4248bd95f40cc2b7c4f0d9b1ce7c8143050fa8024ef9736d6681", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1834270f0;pdgo @ 0x1834270f0;afij @ 0x1834270f0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834270f0", "size": 481, "nargs": 1, "signature": "fcn.1834270f0(int64_t arg1);", "callrefs": [ { "from": 6497136960, "to": 6511423872, "type": "CALL" }, { "from": 6497137015, "to": 6533382128, "type": "CALL" }, { "from": 6497137023, "to": 6497137376, "type": "CALL" }, { "from": 6497137053, "to": 6512942288, "type": "CALL" }, { "from": 6497137073, "to": 6511423872, "type": "CALL" }, { "from": 6497137090, "to": 6542067384, "type": "CALL" }, { "from": 6497137229, "to": 6517399712, "type": "CALL" }, { "from": 6497137286, "to": 6740346544, "type": "CALL" }, { "from": 6497137292, "to": 6497137175, "type": "CODE" }, { "from": 6497137311, "to": 6511512544, "type": "CALL" }, { "from": 6497137316, "to": 6497137175, "type": "CODE" }, { "from": 6497137331, "to": 6511512544, "type": "CALL" }, { "from": 6497137336, "to": 6497137303, "type": "CODE" }, { "from": 6497137346, "to": 6542089024, "type": "CALL" }, { "from": 6497137351, "to": 6442840976, "type": "CALL" }, { "from": 6497137356, "to": 6497136991, "type": "CODE" } ], "datarefs": [ { "from": 6497136887, "to": 6740709440, "type": "DATA" }, { "from": 6497136948, "to": 6741126408, "type": "DATA" }, { "from": 6497136978, "to": 6741126408, "type": "DATA" }, { "from": 6497137028, "to": 6712266840, "type": "DATA" }, { "from": 6497137035, "to": 6720316304, "type": "DATA" }, { "from": 6497137061, "to": 6741126408, "type": "DATA" }, { "from": 6497137101, "to": 6451217136, "type": "DATA" }, { "from": 6497137112, "to": 6488537376, "type": "DATA" }, { "from": 6497137123, "to": 6511490512, "type": "DATA" }, { "from": 6497137134, "to": 6497139200, "type": "DATA" }, { "from": 6497137242, "to": 6740709440, "type": "DATA" }, { "from": 6497137271, "to": 6488537248, "type": "DATA" } ] }, "strings": [ { "va": "0x190151058", "offset": 269812824, "ascii": "Start", "wide": null }, { "va": "0x1908fe390", "offset": 277862288, "ascii": "..\\..\\tab\\browser\\analytics\\extension_inventory_reporter.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5001 }, { "label": "p-omnibox-controller-start", "file": "rea-p-omnibox-controller-start.json", "file_sha256": "b1d30e136a46cee99d025157a5bd3a7a9f787fcdfab3e9abbafaba1b5b06cc52", "status": "completed", "evidence_id": "ev_57bfe631aac09ff8795dac56118c3e3d754dcc4f93f461c801a5cc2ab61c4cd6", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x182ea6560;pdgo @ 0x182ea6560;afij @ 0x182ea6560", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x182ea6560", "size": 3069, "nargs": 3, "signature": "fcn.182ea6560(int64_t arg1, int64_t arg2, int64_t arg_d8h);", "callrefs": [ { "from": 6491366853, "to": 6450903232, "type": "CALL" }, { "from": 6491366898, "to": 6453588320, "type": "CALL" }, { "from": 6491366941, "to": 6456647392, "type": "CALL" }, { "from": 6491366996, "to": 6740379656, "type": "CALL" }, { "from": 6491367175, "to": 6456653408, "type": "CALL" }, { "from": 6491367245, "to": 6740379656, "type": "CALL" }, { "from": 6491367378, "to": 6491367765, "type": "CODE" }, { "from": 6491367391, "to": 6740346544, "type": "CALL" }, { "from": 6491367407, "to": 6491367297, "type": "CODE" }, { "from": 6491367412, "to": 6740346544, "type": "CALL" }, { "from": 6491367421, "to": 6491367030, "type": "CODE" }, { "from": 6491367441, "to": 6740379656, "type": "CALL" }, { "from": 6491367509, "to": 6459175104, "type": "CALL" }, { "from": 6491367586, "to": 6542435920, "type": "CALL" }, { "from": 6491367602, "to": 6511733920, "type": "CALL" }, { "from": 6491367669, "to": 6519307904, "type": "CALL" }, { "from": 6491367680, "to": 6533022912, "type": "CALL" }, { "from": 6491367714, "to": 6511512544, "type": "CALL" }, { "from": 6491367772, "to": 6456645888, "type": "CALL" }, { "from": 6491367824, "to": 6740379656, "type": "CALL" }, { "from": 6491367892, "to": 6740346544, "type": "CALL" }, { "from": 6491367934, "to": 6740346544, "type": "CALL" }, { "from": 6491367948, "to": 6491367491, "type": "CODE" }, { "from": 6491367961, "to": 6740346544, "type": "CALL" }, { "from": 6491367967, "to": 6491367871, "type": "CODE" }, { "from": 6491368011, "to": 6514715792, "type": "CALL" }, { "from": 6491368043, "to": 6740346544, "type": "CALL" }, { "from": 6491368083, "to": 6491368122, "type": "CODE" }, { "from": 6491368090, "to": 6517335696, "type": "CALL" }, { "from": 6491368095, "to": 6491368049, "type": "CODE" }, { "from": 6491368128, "to": 6456645888, "type": "CALL" }, { "from": 6491368137, "to": 6491368097, "type": "CODE" }, { "from": 6491368156, "to": 6456662624, "type": "CALL" }, { "from": 6491368281, "to": 6542089024, "type": "CALL" }, { "from": 6491368406, "to": 6491368463, "type": "CODE" }, { "from": 6491368533, "to": 6740346544, "type": "CALL" }, { "from": 6491368624, "to": 6537185984, "type": "CALL" }, { "from": 6491368656, "to": 6491368594, "type": "CODE" }, { "from": 6491368665, "to": 6491368516, "type": "CODE" }, { "from": 6491368675, "to": 6545226544, "type": "CALL" }, { "from": 6491368688, "to": 6545226544, "type": "CALL" }, { "from": 6491368703, "to": 6491366923, "type": "CODE" }, { "from": 6491368751, "to": 6491368153, "type": "CODE" }, { "from": 6491368779, "to": 6511512544, "type": "CALL" }, { "from": 6491368784, "to": 6491367752, "type": "CODE" }, { "from": 6491368823, "to": 6491367863, "type": "CODE" }, { "from": 6491368865, "to": 6491367483, "type": "CODE" }, { "from": 6491368879, "to": 6491366871, "type": "CODE" }, { "from": 6491368950, "to": 6491367123, "type": "CODE" }, { "from": 6491368973, "to": 6491367167, "type": "CODE" }, { "from": 6491368999, "to": 6491367167, "type": "CODE" }, { "from": 6491369033, "to": 6513050896, "type": "CALL" }, { "from": 6491369038, "to": 6491368219, "type": "CODE" }, { "from": 6491369091, "to": 6534927440, "type": "CALL" }, { "from": 6491369194, "to": 6529573584, "type": "CALL" }, { "from": 6491369231, "to": 6511512544, "type": "CALL" }, { "from": 6491369263, "to": 6511512544, "type": "CALL" }, { "from": 6491369278, "to": 6491366839, "type": "CODE" }, { "from": 6491369374, "to": 6620094064, "type": "CALL" }, { "from": 6491369379, "to": 6491368175, "type": "CODE" }, { "from": 6491369418, "to": 6491367030, "type": "CODE" }, { "from": 6491369457, "to": 6491367289, "type": "CODE" }, { "from": 6491369486, "to": 6491369608, "type": "CODE" }, { "from": 6491369499, "to": 6517325904, "type": "CALL" }, { "from": 6491369574, "to": 6478222592, "type": "CALL" }, { "from": 6491369616, "to": 6523844720, "type": "CALL" }, { "from": 6491369639, "to": 6529736720, "type": "CALL" }, { "from": 6491369708, "to": 6519307904, "type": "CALL" }, { "from": 6491369719, "to": 6533022912, "type": "CALL" }, { "from": 6491369749, "to": 6511512544, "type": "CALL" }, { "from": 6491369774, "to": 6511512544, "type": "CALL" }, { "from": 6491369789, "to": 6491367988, "type": "CODE" }, { "from": 6491369811, "to": 6580144528, "type": "CALL" }, { "from": 6491369816, "to": 6491368329, "type": "CODE" } ], "datarefs": [ { "from": 6491366785, "to": 6740709440, "type": "DATA" }, { "from": 6491366815, "to": 6742233661, "type": "DATA" }, { "from": 6491366955, "to": 6741125872, "type": "DATA" }, { "from": 6491366962, "to": 6537033840, "type": "DATA" }, { "from": 6491367204, "to": 6741125872, "type": "DATA" }, { "from": 6491367211, "to": 6537033840, "type": "DATA" }, { "from": 6491367320, "to": 6728092192, "type": "DATA" }, { "from": 6491367547, "to": 6728092192, "type": "DATA" }, { "from": 6491367739, "to": 6537033840, "type": "DATA" }, { "from": 6491367793, "to": 6741125872, "type": "DATA" }, { "from": 6491367910, "to": 6741125872, "type": "DATA" }, { "from": 6491367999, "to": 6728092264, "type": "DATA" }, { "from": 6491368023, "to": 6517335696, "type": "DATA" }, { "from": 6491368205, "to": 6742233661, "type": "DATA" }, { "from": 6491368230, "to": 6740709440, "type": "DATA" }, { "from": 6491368789, "to": 6742234664, "type": "DATA" }, { "from": 6491368828, "to": 6742234664, "type": "DATA" }, { "from": 6491369132, "to": 6714960280, "type": "DATA" }, { "from": 6491369150, "to": 6728092680, "type": "DATA" }, { "from": 6491369384, "to": 6742234664, "type": "DATA" }, { "from": 6491369423, "to": 6742234664, "type": "DATA" }, { "from": 6491369552, "to": 6728092216, "type": "DATA" }, { "from": 6491369621, "to": 6728092240, "type": "DATA" } ] }, "strings": [ { "va": "0x191068a20", "offset": 285638176, "ascii": "Omnibox.ProviderTime2.", "wide": null }, { "va": "0x191068a68", "offset": 285638248, "ascii": "Omnibox.Start.WantAsyncMatches", "wide": null }, { "va": "0x1903e2998", "offset": 272506264, "ascii": "text", "wide": null }, { "va": "0x191068c08", "offset": 285638664, "ascii": "AutocompleteController::Start", "wide": null }, { "va": "0x191068a38", "offset": 285638200, "ascii": "Omnibox.QueryTime2", "wide": null }, { "va": "0x191068a50", "offset": 285638224, "ascii": "Omnibox.QueryTime2.", "wide": null } ], "imports": [ { "at": "0x182ea6654", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } }, { "at": "0x182ea674d", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } }, { "at": "0x182ea6811", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } }, { "at": "0x182ea6990", "target": "0x191c20808", "api": { "va": 6740379656, "lib": "KERNEL32.dll", "sym": "QueryPerformanceCounter" } } ], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 23791 }, { "label": "p-omnibox-delete", "file": "rea-p-omnibox-delete.json", "file_sha256": "a7b11a70028d26595f7990c4d554854273f06f1a3aa8bca0bb398620be1475b2", "status": "completed", "evidence_id": "ev_108faa87e43d0299c36d5cd0067d59ff4b86cb73899b9178e5bb39b504c16adb", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183837b50;pdgo @ 0x183837b50;afij @ 0x183837b50", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183837b50", "size": 3493, "nargs": 3, "signature": "fcn.183837b50(int64_t arg1, int64_t arg2, int64_t arg_3fh);", "callrefs": [ { "from": 6501399428, "to": 6502310480, "type": "CALL" }, { "from": 6501399501, "to": 6445650832, "type": "CALL" }, { "from": 6501399524, "to": 6524031184, "type": "CALL" }, { "from": 6501399545, "to": 6524031184, "type": "CALL" }, { "from": 6501399588, "to": 6524031184, "type": "CALL" }, { "from": 6501399611, "to": 6445656528, "type": "CALL" }, { "from": 6501399680, "to": 6511512544, "type": "CALL" }, { "from": 6501399731, "to": 6511975280, "type": "CALL" }, { "from": 6501399739, "to": 6518967168, "type": "CALL" }, { "from": 6501399822, "to": 6512708384, "type": "CALL" }, { "from": 6501399899, "to": 6445650832, "type": "CALL" }, { "from": 6501399925, "to": 6524031184, "type": "CALL" }, { "from": 6501399946, "to": 6524031184, "type": "CALL" }, { "from": 6501399965, "to": 6445656528, "type": "CALL" }, { "from": 6501400032, "to": 6511512544, "type": "CALL" }, { "from": 6501400083, "to": 6511975280, "type": "CALL" }, { "from": 6501400091, "to": 6518967168, "type": "CALL" }, { "from": 6501400156, "to": 6445650832, "type": "CALL" }, { "from": 6501400182, "to": 6524031184, "type": "CALL" }, { "from": 6501400203, "to": 6524031184, "type": "CALL" }, { "from": 6501400222, "to": 6445656528, "type": "CALL" }, { "from": 6501400289, "to": 6511512544, "type": "CALL" }, { "from": 6501400340, "to": 6511975280, "type": "CALL" }, { "from": 6501400348, "to": 6518967168, "type": "CALL" }, { "from": 6501400383, "to": 6457900480, "type": "CALL" }, { "from": 6501400393, "to": 6485318848, "type": "CALL" }, { "from": 6501400407, "to": 6587962400, "type": "CALL" }, { "from": 6501400412, "to": 6501400744, "type": "CODE" }, { "from": 6501400453, "to": 6445650832, "type": "CALL" }, { "from": 6501400479, "to": 6524031184, "type": "CALL" }, { "from": 6501400500, "to": 6524031184, "type": "CALL" }, { "from": 6501400519, "to": 6445656528, "type": "CALL" }, { "from": 6501400586, "to": 6511512544, "type": "CALL" }, { "from": 6501400637, "to": 6511975280, "type": "CALL" }, { "from": 6501400645, "to": 6518967168, "type": "CALL" }, { "from": 6501400739, "to": 6587959616, "type": "CALL" }, { "from": 6501400784, "to": 6587967968, "type": "CALL" }, { "from": 6501400831, "to": 6511512544, "type": "CALL" }, { "from": 6501400894, "to": 6445650832, "type": "CALL" }, { "from": 6501400920, "to": 6524031184, "type": "CALL" }, { "from": 6501400941, "to": 6524031184, "type": "CALL" }, { "from": 6501400960, "to": 6445656528, "type": "CALL" }, { "from": 6501401027, "to": 6511512544, "type": "CALL" }, { "from": 6501401078, "to": 6511975280, "type": "CALL" }, { "from": 6501401086, "to": 6518967168, "type": "CALL" }, { "from": 6501401169, "to": 6501400733, "type": "CODE" }, { "from": 6501401307, "to": 6515567520, "type": "CALL" }, { "from": 6501401385, "to": 6445650832, "type": "CALL" }, { "from": 6501401408, "to": 6524031184, "type": "CALL" }, { "from": 6501401429, "to": 6524031184, "type": "CALL" }, { "from": 6501401472, "to": 6524031184, "type": "CALL" }, { "from": 6501401495, "to": 6445656528, "type": "CALL" }, { "from": 6501401563, "to": 6511512544, "type": "CALL" }, { "from": 6501401614, "to": 6511975280, "type": "CALL" }, { "from": 6501401622, "to": 6518967168, "type": "CALL" }, { "from": 6501401635, "to": 6511396000, "type": "CALL" }, { "from": 6501401640, "to": 6501400096, "type": "CODE" }, { "from": 6501401700, "to": 6445650832, "type": "CALL" }, { "from": 6501401723, "to": 6524031184, "type": "CALL" }, { "from": 6501401744, "to": 6524031184, "type": "CALL" }, { "from": 6501401760, "to": 6522230240, "type": "CALL" }, { "from": 6501401788, "to": 6524031184, "type": "CALL" }, { "from": 6501401808, "to": 6445656528, "type": "CALL" }, { "from": 6501401882, "to": 6511512544, "type": "CALL" }, { "from": 6501401933, "to": 6511975280, "type": "CALL" }, { "from": 6501401941, "to": 6518967168, "type": "CALL" }, { "from": 6501401959, "to": 6511751392, "type": "CALL" }, { "from": 6501401969, "to": 6542067384, "type": "CALL" }, { "from": 6501402008, "to": 6511751392, "type": "CALL" }, { "from": 6501402029, "to": 6511396000, "type": "CALL" }, { "from": 6501402040, "to": 6635650848, "type": "CALL" }, { "from": 6501402105, "to": 6445650832, "type": "CALL" }, { "from": 6501402131, "to": 6524031184, "type": "CALL" }, { "from": 6501402152, "to": 6524031184, "type": "CALL" }, { "from": 6501402171, "to": 6445656528, "type": "CALL" }, { "from": 6501402238, "to": 6511512544, "type": "CALL" }, { "from": 6501402289, "to": 6511975280, "type": "CALL" }, { "from": 6501402297, "to": 6518967168, "type": "CALL" }, { "from": 6501402332, "to": 6457900480, "type": "CALL" }, { "from": 6501402342, "to": 6485318848, "type": "CALL" }, { "from": 6501402356, "to": 6587962400, "type": "CALL" }, { "from": 6501402401, "to": 6587967968, "type": "CALL" }, { "from": 6501402432, "to": 6511396000, "type": "CALL" }, { "from": 6501402437, "to": 6501400797, "type": "CODE" }, { "from": 6501402472, "to": 6511396000, "type": "CALL" }, { "from": 6501402520, "to": 6511512544, "type": "CALL" }, { "from": 6501402525, "to": 6501402424, "type": "CODE" }, { "from": 6501402534, "to": 6542069736, "type": "CALL" }, { "from": 6501402559, "to": 6462098144, "type": "CALL" }, { "from": 6501402571, "to": 6542069628, "type": "CALL" }, { "from": 6501402576, "to": 6501399809, "type": "CODE" }, { "from": 6501402606, "to": 6740346544, "type": "CALL" }, { "from": 6501402612, "to": 6501400626, "type": "CODE" }, { "from": 6501402642, "to": 6740346544, "type": "CALL" }, { "from": 6501402648, "to": 6501399720, "type": "CODE" }, { "from": 6501402678, "to": 6740346544, "type": "CALL" }, { "from": 6501402684, "to": 6501400329, "type": "CODE" }, { "from": 6501402714, "to": 6740346544, "type": "CALL" }, { "from": 6501402720, "to": 6501401067, "type": "CODE" }, { "from": 6501402750, "to": 6740346544, "type": "CALL" }, { "from": 6501402756, "to": 6501400072, "type": "CODE" }, { "from": 6501402786, "to": 6740346544, "type": "CALL" }, { "from": 6501402792, "to": 6501401922, "type": "CODE" }, { "from": 6501402822, "to": 6740346544, "type": "CALL" }, { "from": 6501402828, "to": 6501402278, "type": "CODE" }, { "from": 6501402858, "to": 6740346544, "type": "CALL" }, { "from": 6501402864, "to": 6501401603, "type": "CODE" } ], "datarefs": [ { "from": 6501399433, "to": 6742246848, "type": "DATA" }, { "from": 6501399457, "to": 6741126112, "type": "DATA" }, { "from": 6501399466, "to": 6742246856, "type": "DATA" }, { "from": 6501399480, "to": 6723620928, "type": "DATA" }, { "from": 6501399511, "to": 6720303740, "type": "DATA" }, { "from": 6501399529, "to": 6723624304, "type": "DATA" }, { "from": 6501399593, "to": 6710367816, "type": "DATA" }, { "from": 6501399624, "to": 6708900496, "type": "DATA" }, { "from": 6501399636, "to": 6708923712, "type": "DATA" }, { "from": 6501399690, "to": 6708923824, "type": "DATA" }, { "from": 6501399704, "to": 6742217808, "type": "DATA" }, { "from": 6501399772, "to": 6742126256, "type": "DATA" }, { "from": 6501399778, "to": 6741832416, "type": "DATA" }, { "from": 6501399809, "to": 6742126176, "type": "DATA" }, { "from": 6501399836, "to": 6742246848, "type": "DATA" }, { "from": 6501399849, "to": 6741126112, "type": "DATA" }, { "from": 6501399858, "to": 6742246856, "type": "DATA" }, { "from": 6501399872, "to": 6723620928, "type": "DATA" }, { "from": 6501399909, "to": 6720303740, "type": "DATA" }, { "from": 6501399930, "to": 6723624608, "type": "DATA" }, { "from": 6501399951, "to": 6710367816, "type": "DATA" }, { "from": 6501399977, "to": 6708900496, "type": "DATA" }, { "from": 6501399989, "to": 6708923712, "type": "DATA" }, { "from": 6501400042, "to": 6708923824, "type": "DATA" }, { "from": 6501400056, "to": 6742217808, "type": "DATA" }, { "from": 6501400096, "to": 6742246848, "type": "DATA" }, { "from": 6501400109, "to": 6741126112, "type": "DATA" }, { "from": 6501400118, "to": 6742246856, "type": "DATA" }, { "from": 6501400132, "to": 6723620928, "type": "DATA" }, { "from": 6501400166, "to": 6720303740, "type": "DATA" }, { "from": 6501400187, "to": 6723624680, "type": "DATA" }, { "from": 6501400208, "to": 6710367816, "type": "DATA" }, { "from": 6501400234, "to": 6708900496, "type": "DATA" }, { "from": 6501400246, "to": 6708923712, "type": "DATA" }, { "from": 6501400299, "to": 6708923824, "type": "DATA" }, { "from": 6501400313, "to": 6742217808, "type": "DATA" }, { "from": 6501400426, "to": 6723620928, "type": "DATA" }, { "from": 6501400463, "to": 6720303740, "type": "DATA" }, { "from": 6501400484, "to": 6723624240, "type": "DATA" }, { "from": 6501400505, "to": 6710367816, "type": "DATA" }, { "from": 6501400531, "to": 6708900496, "type": "DATA" }, { "from": 6501400543, "to": 6708923712, "type": "DATA" }, { "from": 6501400596, "to": 6708923824, "type": "DATA" }, { "from": 6501400610, "to": 6742217808, "type": "DATA" }, { "from": 6501400662, "to": 6716742096, "type": "DATA" }, { "from": 6501400697, "to": 6716742112, "type": "DATA" }, { "from": 6501400717, "to": 6716742096, "type": "DATA" }, { "from": 6501400755, "to": 6587963136, "type": "DATA" }, { "from": 6501400777, "to": 6545109024, "type": "DATA" }, { "from": 6501400854, "to": 6742246848, "type": "DATA" }, { "from": 6501400867, "to": 6723620928, "type": "DATA" }, { "from": 6501400904, "to": 6720303740, "type": "DATA" }, { "from": 6501400925, "to": 6723624360, "type": "DATA" }, { "from": 6501400946, "to": 6710367816, "type": "DATA" }, { "from": 6501400972, "to": 6708900496, "type": "DATA" }, { "from": 6501400984, "to": 6708923712, "type": "DATA" }, { "from": 6501401037, "to": 6708923824, "type": "DATA" }, { "from": 6501401051, "to": 6742217808, "type": "DATA" }, { "from": 6501401103, "to": 6722947088, "type": "DATA" }, { "from": 6501401134, "to": 6722947101, "type": "DATA" }, { "from": 6501401153, "to": 6722947088, "type": "DATA" }, { "from": 6501401312, "to": 6742246848, "type": "DATA" }, { "from": 6501401338, "to": 6741126112, "type": "DATA" }, { "from": 6501401347, "to": 6742246856, "type": "DATA" }, { "from": 6501401361, "to": 6723620928, "type": "DATA" }, { "from": 6501401395, "to": 6720303740, "type": "DATA" }, { "from": 6501401413, "to": 6723624544, "type": "DATA" }, { "from": 6501401477, "to": 6710367816, "type": "DATA" }, { "from": 6501401508, "to": 6708900496, "type": "DATA" }, { "from": 6501401520, "to": 6708923712, "type": "DATA" }, { "from": 6501401573, "to": 6708923824, "type": "DATA" }, { "from": 6501401587, "to": 6742217808, "type": "DATA" }, { "from": 6501401653, "to": 6741126112, "type": "DATA" }, { "from": 6501401662, "to": 6742246856, "type": "DATA" }, { "from": 6501401676, "to": 6723620928, "type": "DATA" }, { "from": 6501401710, "to": 6720303740, "type": "DATA" }, { "from": 6501401728, "to": 6723624424, "type": "DATA" }, { "from": 6501401793, "to": 6710367816, "type": "DATA" }, { "from": 6501401822, "to": 6708900496, "type": "DATA" }, { "from": 6501401834, "to": 6708923712, "type": "DATA" }, { "from": 6501401892, "to": 6708923824, "type": "DATA" }, { "from": 6501401906, "to": 6742217808, "type": "DATA" }, { "from": 6501402045, "to": 6742246848, "type": "DATA" }, { "from": 6501402058, "to": 6741126112, "type": "DATA" }, { "from": 6501402067, "to": 6742246856, "type": "DATA" }, { "from": 6501402081, "to": 6723620928, "type": "DATA" }, { "from": 6501402115, "to": 6720303740, "type": "DATA" }, { "from": 6501402136, "to": 6723624480, "type": "DATA" }, { "from": 6501402157, "to": 6710367816, "type": "DATA" }, { "from": 6501402183, "to": 6708900496, "type": "DATA" }, { "from": 6501402195, "to": 6708923712, "type": "DATA" }, { "from": 6501402248, "to": 6708923824, "type": "DATA" }, { "from": 6501402262, "to": 6742217808, "type": "DATA" }, { "from": 6501402372, "to": 6587963136, "type": "DATA" }, { "from": 6501402394, "to": 6545109024, "type": "DATA" }, { "from": 6501402527, "to": 6742126256, "type": "DATA" }, { "from": 6501402539, "to": 6742126256, "type": "DATA" }, { "from": 6501402552, "to": 6742126176, "type": "DATA" }, { "from": 6501402564, "to": 6742126256, "type": "DATA" } ] }, "strings": [ { "va": "0x190c25040", "offset": 281166912, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_omnibox\\tab_omnibox_api.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c25d70", "offset": 281170288, "ascii": "TabOmniboxDeleteSuggestionFunction::Run: content=", "wide": null }, { "va": "0x190c25ea0", "offset": 281170592, "ascii": "TabOmniboxDeleteSuggestionFunction::Run: history service not available", "wide": null }, { "va": "0x190c25ee8", "offset": 281170664, "ascii": "TabOmniboxDeleteSuggestionFunction::Run: delete success=false", "wide": null }, { "va": "0x190c25d30", "offset": 281170224, "ascii": "TabOmniboxDeleteSuggestionFunction::Run: invalid parameters", "wide": null }, { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x190c25da8", "offset": 281170344, "ascii": "TabOmniboxDeleteSuggestionFunction::Run: profile not available", "wide": null }, { "va": "0x190b80810", "offset": 280493072, "ascii": "Profile not available", "wide": null }, { "va": "0x190b8081d", "offset": 280493085, "ascii": "vailable", "wide": null }, { "va": "0x190c25e60", "offset": 281170528, "ascii": "TabOmniboxDeleteSuggestionFunction::Run: invalid URL=", "wide": null }, { "va": "0x190c25de8", "offset": 281170408, "ascii": "TabOmniboxDeleteSuggestionFunction::Run: deleting URL=", "wide": null }, { "va": "0x190c25e20", "offset": 281170464, "ascii": "TabOmniboxDeleteSuggestionFunction::Run: delete success=true", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 26766 }, { "label": "p-omnibox-event-response", "file": "rea-p-omnibox-event-response.json", "file_sha256": "6937d6a20dc03d3c7a811e72432085099fc4a5491f2046368f4a5de49d0cb0ce", "status": "completed", "evidence_id": "ev_60222f1a36d8168e347729de4fb08d3b53ef78b39701128fb21a4c04074cc73d", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1838338d0;pdgo @ 0x1838338d0;afij @ 0x1838338d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1838338d0", "size": 1714, "nargs": 4, "signature": "fcn.1838338d0(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6501382422, "to": 6501378432, "type": "CALL" }, { "from": 6501382471, "to": 6502369664, "type": "CALL" }, { "from": 6501382520, "to": 6502368864, "type": "CALL" }, { "from": 6501382561, "to": 6502368720, "type": "CALL" }, { "from": 6501382707, "to": 6445650832, "type": "CALL" }, { "from": 6501382733, "to": 6524031184, "type": "CALL" }, { "from": 6501382754, "to": 6524031184, "type": "CALL" }, { "from": 6501382783, "to": 6524031184, "type": "CALL" }, { "from": 6501382804, "to": 6524031184, "type": "CALL" }, { "from": 6501382840, "to": 6542435920, "type": "CALL" }, { "from": 6501382854, "to": 6524031184, "type": "CALL" }, { "from": 6501382875, "to": 6524031184, "type": "CALL" }, { "from": 6501382888, "to": 6462379168, "type": "CALL" }, { "from": 6501382909, "to": 6524031184, "type": "CALL" }, { "from": 6501382921, "to": 6451143232, "type": "CALL" }, { "from": 6501382947, "to": 6445656528, "type": "CALL" }, { "from": 6501383018, "to": 6511512544, "type": "CALL" }, { "from": 6501383072, "to": 6511975280, "type": "CALL" }, { "from": 6501383080, "to": 6518967168, "type": "CALL" }, { "from": 6501383088, "to": 6448258368, "type": "CALL" }, { "from": 6501383102, "to": 6512708384, "type": "CALL" }, { "from": 6501383145, "to": 6457900480, "type": "CALL" }, { "from": 6501383166, "to": 6502370640, "type": "CALL" }, { "from": 6501383177, "to": 6462063728, "type": "CALL" }, { "from": 6501383185, "to": 6537217088, "type": "CALL" }, { "from": 6501383195, "to": 6542067384, "type": "CALL" }, { "from": 6501383271, "to": 6480339856, "type": "CALL" }, { "from": 6501383302, "to": 6457893264, "type": "CALL" }, { "from": 6501383390, "to": 6511423872, "type": "CALL" }, { "from": 6501383400, "to": 6542067384, "type": "CALL" }, { "from": 6501383519, "to": 6512942288, "type": "CALL" }, { "from": 6501383547, "to": 6740346544, "type": "CALL" }, { "from": 6501383558, "to": 6502370480, "type": "CALL" }, { "from": 6501383602, "to": 6511513840, "type": "CALL" }, { "from": 6501383607, "to": 6501383488, "type": "CODE" }, { "from": 6501383617, "to": 6511729936, "type": "CALL" }, { "from": 6501383622, "to": 6501382640, "type": "CODE" }, { "from": 6501383635, "to": 6517426816, "type": "CALL" }, { "from": 6501383651, "to": 6511512544, "type": "CALL" }, { "from": 6501383656, "to": 6501383288, "type": "CODE" }, { "from": 6501383727, "to": 6445650832, "type": "CALL" }, { "from": 6501383756, "to": 6524031184, "type": "CALL" }, { "from": 6501383777, "to": 6524031184, "type": "CALL" }, { "from": 6501383796, "to": 6445656528, "type": "CALL" }, { "from": 6501383866, "to": 6511512544, "type": "CALL" }, { "from": 6501383916, "to": 6511975280, "type": "CALL" }, { "from": 6501383924, "to": 6518967168, "type": "CALL" }, { "from": 6501383929, "to": 6501383307, "type": "CODE" }, { "from": 6501383947, "to": 6501383957, "type": "CODE" }, { "from": 6501383957, "to": 6511730288, "type": "CALL" }, { "from": 6501383962, "to": 6501382640, "type": "CODE" }, { "from": 6501383975, "to": 6501406880, "type": "CALL" }, { "from": 6501383983, "to": 6501382525, "type": "CODE" }, { "from": 6501384019, "to": 6740346544, "type": "CALL" }, { "from": 6501384025, "to": 6501383061, "type": "CODE" }, { "from": 6501384055, "to": 6740346544, "type": "CALL" }, { "from": 6501384061, "to": 6501383905, "type": "CODE" } ], "datarefs": [ { "from": 6501382647, "to": 6742246848, "type": "DATA" }, { "from": 6501382660, "to": 6741126112, "type": "DATA" }, { "from": 6501382669, "to": 6742246856, "type": "DATA" }, { "from": 6501382683, "to": 6723620928, "type": "DATA" }, { "from": 6501382720, "to": 6720303740, "type": "DATA" }, { "from": 6501382738, "to": 6723623600, "type": "DATA" }, { "from": 6501382788, "to": 6723623672, "type": "DATA" }, { "from": 6501382826, "to": 6723625536, "type": "DATA" }, { "from": 6501382859, "to": 6723623680, "type": "DATA" }, { "from": 6501382893, "to": 6723623704, "type": "DATA" }, { "from": 6501382926, "to": 6710367816, "type": "DATA" }, { "from": 6501382960, "to": 6708900496, "type": "DATA" }, { "from": 6501382975, "to": 6708923712, "type": "DATA" }, { "from": 6501383031, "to": 6708923824, "type": "DATA" }, { "from": 6501383045, "to": 6742217808, "type": "DATA" }, { "from": 6501383229, "to": 6728685648, "type": "DATA" }, { "from": 6501383318, "to": 6741832416, "type": "DATA" }, { "from": 6501383378, "to": 6741126408, "type": "DATA" }, { "from": 6501383414, "to": 6457993728, "type": "DATA" }, { "from": 6501383425, "to": 6488660704, "type": "DATA" }, { "from": 6501383436, "to": 6511490512, "type": "DATA" }, { "from": 6501383447, "to": 6501378304, "type": "DATA" }, { "from": 6501383488, "to": 6723623808, "type": "DATA" }, { "from": 6501383495, "to": 6723620928, "type": "DATA" }, { "from": 6501383661, "to": 6742246848, "type": "DATA" }, { "from": 6501383674, "to": 6741126112, "type": "DATA" }, { "from": 6501383683, "to": 6742246856, "type": "DATA" }, { "from": 6501383697, "to": 6723620928, "type": "DATA" }, { "from": 6501383740, "to": 6720303740, "type": "DATA" }, { "from": 6501383761, "to": 6723623728, "type": "DATA" }, { "from": 6501383782, "to": 6710367816, "type": "DATA" }, { "from": 6501383808, "to": 6708900496, "type": "DATA" }, { "from": 6501383823, "to": 6708923712, "type": "DATA" }, { "from": 6501383879, "to": 6708923824, "type": "DATA" }, { "from": 6501383893, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190c25040", "offset": 281166912, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_omnibox\\tab_omnibox_api.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c25ab0", "offset": 281169584, "ascii": "TabOmniboxSuggestionManager::SendSuggestionResponse: request_id=", "wide": null }, { "va": "0x190c25af8", "offset": 281169656, "ascii": " phase=", "wide": null }, { "va": "0x190c25b00", "offset": 281169664, "ascii": " suggestions_count=", "wide": null }, { "va": "0x190c25b18", "offset": 281169688, "ascii": " has_more=", "wide": null }, { "va": "0x1910f9850", "offset": 286231632, "ascii": "tabOmnibox.onSuggestionUpdate", "wide": null }, { "va": "0x190c25b80", "offset": 281169792, "ascii": "SendSuggestionResponse", "wide": null }, { "va": "0x190c25b30", "offset": 281169712, "ascii": "TabOmniboxSuggestionManager::SendSuggestionResponse: event router not available", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 14301 }, { "label": "p-omnibox-history-delete-asm", "file": "rea-p-omnibox-history-delete-asm.json", "file_sha256": "91da1806d98efc5f047397f07c7f656ce991e7881e639d5b775671f8e4a4c593", "status": "completed", "evidence_id": "ev_852a8781d5ee2aa63296c0f2ff947823b0eeb153ca3b5410a8dc2f054da7d1d5", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;pd 25 @ 0x183838550;pd 65 @ 0x18b83ff20", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": null, "strings": [], "imports": [], "status_display": "汇编核对", "record_kind": "assembly", "pseudocode_chars": 5032 }, { "label": "p-omnibox-history-deleteurls", "file": "rea-p-omnibox-history-deleteurls.json", "file_sha256": "6ea693222a056f70150bbb5485f5ea3c7e7305e5d91d0f8388908a0cfce3a7e4", "status": "completed", "evidence_id": "ev_609b6701fad949170bd3f4cf7c41aa30d1da8ed946b29a4a86e5a059ceb2cf69", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18b83ff20;pdgo @ 0x18b83ff20;afij @ 0x18b83ff20", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18b83ff20", "size": 294, "nargs": 2, "signature": "fcn.18b83ff20(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6635650910, "to": 6542067384, "type": "CALL" }, { "from": 6635650986, "to": 6635663280, "type": "CALL" }, { "from": 6635651002, "to": 6462092768, "type": "CALL" }, { "from": 6635651082, "to": 6513050896, "type": "CALL" }, { "from": 6635651087, "to": 6635651026, "type": "CODE" }, { "from": 6635651118, "to": 6513050896, "type": "CALL" }, { "from": 6635651123, "to": 6635650901, "type": "CODE" }, { "from": 6635651136, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6635650863, "to": 6740709440, "type": "DATA" }, { "from": 6635650887, "to": 6742233576, "type": "DATA" }, { "from": 6635650924, "to": 6545703280, "type": "DATA" }, { "from": 6635650935, "to": 6635668448, "type": "DATA" }, { "from": 6635650946, "to": 6511490512, "type": "DATA" }, { "from": 6635650957, "to": 6635689952, "type": "DATA" }, { "from": 6635651016, "to": 6742233576, "type": "DATA" }, { "from": 6635651034, "to": 6740709440, "type": "DATA" }, { "from": 6635651092, "to": 6727409032, "type": "DATA" } ] }, "strings": [ { "va": "0x190fc1d88", "offset": 284955016, "ascii": "HistoryService::DeleteURLs", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 2356 }, { "label": "p-omnibox-history-scheduled", "file": "rea-p-omnibox-history-scheduled.json", "file_sha256": "b263bad46a6c8019bce056584edb66693451aecfff2407ac5fd6d09a724eb641", "status": "completed", "evidence_id": "ev_a60c1f40e6c970fa97d15fa596a87a50fcb610935254e7ac44a057d1b504cf30", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18b8497e0;pdgo @ 0x18b8497e0;afij @ 0x18b8497e0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18b8497e0", "size": 250, "nargs": 2, "signature": "fcn.18b8497e0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6635690037, "to": 6651517904, "type": "CALL" }, { "from": 6635690057, "to": 6480882496, "type": "CALL" }, { "from": 6635690065, "to": 6451277232, "type": "CALL" }, { "from": 6635690142, "to": 6513050896, "type": "CALL" }, { "from": 6635690147, "to": 6635690089, "type": "CODE" }, { "from": 6635690178, "to": 6513050896, "type": "CALL" }, { "from": 6635690183, "to": 6635690009, "type": "CODE" }, { "from": 6635690196, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6635689958, "to": 6740709440, "type": "DATA" }, { "from": 6635689995, "to": 6742233576, "type": "DATA" }, { "from": 6635690079, "to": 6742233576, "type": "DATA" }, { "from": 6635690097, "to": 6740709440, "type": "DATA" }, { "from": 6635690152, "to": 6727411336, "type": "DATA" } ] }, "strings": [ { "va": "0x190fc2688", "offset": 284957320, "ascii": "HistoryBackend::DeleteURLs", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 2150 }, { "label": "p-omnibox-request", "file": "rea-p-omnibox-request.json", "file_sha256": "4c8bde10f218a947c88e5b3b4f7f8d18c9aa4622d8d051ce992a5a0e86939fa1", "status": "completed", "evidence_id": "ev_ac44226e8e5ba9a92d6599be0a2c9c22c2fda3eabfeeb66e7dc4e9883c81a0c6", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183835800;pdgo @ 0x183835800;afij @ 0x183835800", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183835800", "size": 7601, "nargs": 7, "signature": "fcn.183835800(int64_t arg1, int64_t arg2, int64_t arg_28h, int64_t arg_30h, int64_t arg_38h, int64_t arg_197h, int64_t arg_198h);", "callrefs": [ { "from": 6501390432, "to": 6502372624, "type": "CALL" }, { "from": 6501390450, "to": 6501388368, "type": "CALL" }, { "from": 6501390507, "to": 6445650832, "type": "CALL" }, { "from": 6501390536, "to": 6524031184, "type": "CALL" }, { "from": 6501390557, "to": 6524031184, "type": "CALL" }, { "from": 6501390576, "to": 6445656528, "type": "CALL" }, { "from": 6501390646, "to": 6511512544, "type": "CALL" }, { "from": 6501390700, "to": 6511975280, "type": "CALL" }, { "from": 6501390708, "to": 6518967168, "type": "CALL" }, { "from": 6501390798, "to": 6501391135, "type": "CODE" }, { "from": 6501390846, "to": 6445650832, "type": "CALL" }, { "from": 6501390875, "to": 6524031184, "type": "CALL" }, { "from": 6501390896, "to": 6524031184, "type": "CALL" }, { "from": 6501390915, "to": 6445656528, "type": "CALL" }, { "from": 6501390985, "to": 6511512544, "type": "CALL" }, { "from": 6501391039, "to": 6511975280, "type": "CALL" }, { "from": 6501391047, "to": 6518967168, "type": "CALL" }, { "from": 6501391141, "to": 6587959616, "type": "CALL" }, { "from": 6501391189, "to": 6587967968, "type": "CALL" }, { "from": 6501391258, "to": 6511512544, "type": "CALL" }, { "from": 6501391299, "to": 6511512544, "type": "CALL" }, { "from": 6501391413, "to": 6511513840, "type": "CALL" }, { "from": 6501391515, "to": 6502370336, "type": "CALL" }, { "from": 6501391583, "to": 6445650832, "type": "CALL" }, { "from": 6501391612, "to": 6524031184, "type": "CALL" }, { "from": 6501391633, "to": 6524031184, "type": "CALL" }, { "from": 6501391674, "to": 6524031184, "type": "CALL" }, { "from": 6501391693, "to": 6445656528, "type": "CALL" }, { "from": 6501391764, "to": 6511512544, "type": "CALL" }, { "from": 6501391818, "to": 6511975280, "type": "CALL" }, { "from": 6501391826, "to": 6518967168, "type": "CALL" }, { "from": 6501391903, "to": 6501391940, "type": "CODE" }, { "from": 6501391935, "to": 6511729936, "type": "CALL" }, { "from": 6501392003, "to": 6445650832, "type": "CALL" }, { "from": 6501392032, "to": 6524031184, "type": "CALL" }, { "from": 6501392053, "to": 6524031184, "type": "CALL" }, { "from": 6501392083, "to": 6524031184, "type": "CALL" }, { "from": 6501392102, "to": 6445656528, "type": "CALL" }, { "from": 6501392172, "to": 6511512544, "type": "CALL" }, { "from": 6501392226, "to": 6511975280, "type": "CALL" }, { "from": 6501392234, "to": 6518967168, "type": "CALL" }, { "from": 6501392262, "to": 6501419840, "type": "CALL" }, { "from": 6501392283, "to": 6501376576, "type": "CALL" }, { "from": 6501392302, "to": 6501420112, "type": "CALL" }, { "from": 6501392315, "to": 6501388016, "type": "CALL" }, { "from": 6501392320, "to": 6501392754, "type": "CODE" }, { "from": 6501392351, "to": 6519178480, "type": "CALL" }, { "from": 6501392374, "to": 6529736720, "type": "CALL" }, { "from": 6501392429, "to": 6511512544, "type": "CALL" }, { "from": 6501392518, "to": 6445650832, "type": "CALL" }, { "from": 6501392547, "to": 6524031184, "type": "CALL" }, { "from": 6501392568, "to": 6524031184, "type": "CALL" }, { "from": 6501392598, "to": 6524031184, "type": "CALL" }, { "from": 6501392617, "to": 6445656528, "type": "CALL" }, { "from": 6501392687, "to": 6511512544, "type": "CALL" }, { "from": 6501392741, "to": 6511975280, "type": "CALL" }, { "from": 6501392749, "to": 6518967168, "type": "CALL" }, { "from": 6501392759, "to": 6542067384, "type": "CALL" }, { "from": 6501392783, "to": 6502370336, "type": "CALL" }, { "from": 6501392803, "to": 6542067384, "type": "CALL" }, { "from": 6501392890, "to": 6501392907, "type": "CODE" }, { "from": 6501392902, "to": 6511513840, "type": "CALL" }, { "from": 6501392919, "to": 6502370336, "type": "CALL" }, { "from": 6501392952, "to": 6511423872, "type": "CALL" }, { "from": 6501393152, "to": 6460531936, "type": "CALL" }, { "from": 6501393172, "to": 6542067384, "type": "CALL" }, { "from": 6501393245, "to": 6542067384, "type": "CALL" }, { "from": 6501393262, "to": 6453818288, "type": "CALL" }, { "from": 6501393342, "to": 6442908368, "type": "CALL" }, { "from": 6501393369, "to": 6469311312, "type": "CALL" }, { "from": 6501393392, "to": 6471061024, "type": "CALL" }, { "from": 6501393411, "to": 6445568880, "type": "CALL" }, { "from": 6501393452, "to": 6542067384, "type": "CALL" }, { "from": 6501393543, "to": 6517838976, "type": "CALL" }, { "from": 6501393556, "to": 6511512544, "type": "CALL" }, { "from": 6501393607, "to": 6511512544, "type": "CALL" }, { "from": 6501393648, "to": 6511512544, "type": "CALL" }, { "from": 6501393695, "to": 6501418656, "type": "CALL" }, { "from": 6501393731, "to": 6501420448, "type": "CALL" }, { "from": 6501393769, "to": 6501418656, "type": "CALL" }, { "from": 6501393853, "to": 6445650832, "type": "CALL" }, { "from": 6501393879, "to": 6524031184, "type": "CALL" }, { "from": 6501393900, "to": 6524031184, "type": "CALL" }, { "from": 6501393919, "to": 6501393929, "type": "CODE" }, { "from": 6501393932, "to": 6524031184, "type": "CALL" }, { "from": 6501393953, "to": 6524031184, "type": "CALL" }, { "from": 6501393972, "to": 6501393982, "type": "CODE" }, { "from": 6501393985, "to": 6524031184, "type": "CALL" }, { "from": 6501394008, "to": 6445656528, "type": "CALL" }, { "from": 6501394091, "to": 6511512544, "type": "CALL" }, { "from": 6501394147, "to": 6511975280, "type": "CALL" }, { "from": 6501394155, "to": 6518967168, "type": "CALL" }, { "from": 6501394240, "to": 6445650832, "type": "CALL" }, { "from": 6501394266, "to": 6524031184, "type": "CALL" }, { "from": 6501394287, "to": 6524031184, "type": "CALL" }, { "from": 6501394306, "to": 6501394316, "type": "CODE" }, { "from": 6501394322, "to": 6524031184, "type": "CALL" }, { "from": 6501394345, "to": 6445656528, "type": "CALL" }, { "from": 6501394428, "to": 6511512544, "type": "CALL" }, { "from": 6501394482, "to": 6511975280, "type": "CALL" }, { "from": 6501394490, "to": 6518967168, "type": "CALL" }, { "from": 6501394495, "to": 6501396551, "type": "CODE" }, { "from": 6501394542, "to": 6501394549, "type": "CODE" }, { "from": 6501394605, "to": 6542067384, "type": "CALL" }, { "from": 6501394714, "to": 6512942288, "type": "CALL" }, { "from": 6501394797, "to": 6517399712, "type": "CALL" }, { "from": 6501394855, "to": 6542067384, "type": "CALL" }, { "from": 6501394956, "to": 6512942288, "type": "CALL" }, { "from": 6501395044, "to": 6517399712, "type": "CALL" }, { "from": 6501395084, "to": 6501395090, "type": "CODE" }, { "from": 6501395120, "to": 6530673136, "type": "CALL" }, { "from": 6501395141, "to": 6542434496, "type": "CALL" }, { "from": 6501395189, "to": 6511423872, "type": "CALL" }, { "from": 6501395262, "to": 6482390576, "type": "CALL" }, { "from": 6501395295, "to": 6442840976, "type": "CALL" }, { "from": 6501395374, "to": 6528657040, "type": "CALL" }, { "from": 6501395382, "to": 6511396000, "type": "CALL" }, { "from": 6501395412, "to": 6501395418, "type": "CODE" }, { "from": 6501395501, "to": 6445650832, "type": "CALL" }, { "from": 6501395527, "to": 6524031184, "type": "CALL" }, { "from": 6501395548, "to": 6524031184, "type": "CALL" }, { "from": 6501395612, "to": 6534927440, "type": "CALL" }, { "from": 6501395650, "to": 6524031184, "type": "CALL" }, { "from": 6501395671, "to": 6524031184, "type": "CALL" }, { "from": 6501395686, "to": 6446762512, "type": "CALL" }, { "from": 6501395707, "to": 6524031184, "type": "CALL" }, { "from": 6501395733, "to": 6638477968, "type": "CALL" }, { "from": 6501395770, "to": 6524031184, "type": "CALL" }, { "from": 6501395791, "to": 6524031184, "type": "CALL" }, { "from": 6501395806, "to": 6446762512, "type": "CALL" }, { "from": 6501395827, "to": 6524031184, "type": "CALL" }, { "from": 6501395838, "to": 6522230240, "type": "CALL" }, { "from": 6501395866, "to": 6524031184, "type": "CALL" }, { "from": 6501395887, "to": 6524031184, "type": "CALL" }, { "from": 6501395906, "to": 6451143232, "type": "CALL" }, { "from": 6501395927, "to": 6524031184, "type": "CALL" }, { "from": 6501395942, "to": 6451143232, "type": "CALL" }, { "from": 6501395983, "to": 6511512544, "type": "CALL" }, { "from": 6501396024, "to": 6511512544, "type": "CALL" }, { "from": 6501396050, "to": 6445656528, "type": "CALL" }, { "from": 6501396122, "to": 6511512544, "type": "CALL" }, { "from": 6501396176, "to": 6511975280, "type": "CALL" }, { "from": 6501396184, "to": 6518967168, "type": "CALL" }, { "from": 6501396204, "to": 6491366752, "type": "CALL" }, { "from": 6501396293, "to": 6445650832, "type": "CALL" }, { "from": 6501396322, "to": 6524031184, "type": "CALL" }, { "from": 6501396343, "to": 6524031184, "type": "CALL" }, { "from": 6501396362, "to": 6445656528, "type": "CALL" }, { "from": 6501396433, "to": 6511512544, "type": "CALL" }, { "from": 6501396487, "to": 6511975280, "type": "CALL" }, { "from": 6501396495, "to": 6518967168, "type": "CALL" }, { "from": 6501396508, "to": 6501357104, "type": "CALL" }, { "from": 6501396521, "to": 6468458368, "type": "CALL" }, { "from": 6501396546, "to": 6511512544, "type": "CALL" }, { "from": 6501396597, "to": 6511512544, "type": "CALL" }, { "from": 6501396638, "to": 6511512544, "type": "CALL" }, { "from": 6501396775, "to": 6445650832, "type": "CALL" }, { "from": 6501396804, "to": 6524031184, "type": "CALL" }, { "from": 6501396825, "to": 6524031184, "type": "CALL" }, { "from": 6501396858, "to": 6524031184, "type": "CALL" }, { "from": 6501396879, "to": 6524031184, "type": "CALL" }, { "from": 6501396911, "to": 6524031184, "type": "CALL" }, { "from": 6501396930, "to": 6445656528, "type": "CALL" }, { "from": 6501397001, "to": 6511512544, "type": "CALL" }, { "from": 6501397055, "to": 6511975280, "type": "CALL" }, { "from": 6501397063, "to": 6518967168, "type": "CALL" }, { "from": 6501397099, "to": 6457900480, "type": "CALL" }, { "from": 6501397126, "to": 6502370640, "type": "CALL" }, { "from": 6501397137, "to": 6462063728, "type": "CALL" }, { "from": 6501397145, "to": 6537217088, "type": "CALL" }, { "from": 6501397159, "to": 6587962400, "type": "CALL" }, { "from": 6501397205, "to": 6587967968, "type": "CALL" }, { "from": 6501397221, "to": 6502370480, "type": "CALL" }, { "from": 6501397253, "to": 6511512544, "type": "CALL" }, { "from": 6501397298, "to": 6511512544, "type": "CALL" }, { "from": 6501397303, "to": 6501391202, "type": "CODE" }, { "from": 6501397318, "to": 6511729936, "type": "CALL" }, { "from": 6501397323, "to": 6501396712, "type": "CODE" }, { "from": 6501397341, "to": 6740346544, "type": "CALL" }, { "from": 6501397347, "to": 6501393539, "type": "CODE" }, { "from": 6501397382, "to": 6740346544, "type": "CALL" }, { "from": 6501397388, "to": 6501394742, "type": "CODE" }, { "from": 6501397410, "to": 6511512544, "type": "CALL" }, { "from": 6501397415, "to": 6501394742, "type": "CODE" }, { "from": 6501397430, "to": 6511512544, "type": "CALL" }, { "from": 6501397435, "to": 6501397402, "type": "CODE" }, { "from": 6501397467, "to": 6740346544, "type": "CALL" }, { "from": 6501397473, "to": 6501394984, "type": "CODE" }, { "from": 6501397495, "to": 6511512544, "type": "CALL" }, { "from": 6501397500, "to": 6501394984, "type": "CODE" }, { "from": 6501397515, "to": 6511512544, "type": "CALL" }, { "from": 6501397520, "to": 6501397487, "type": "CODE" }, { "from": 6501397542, "to": 6511512544, "type": "CALL" }, { "from": 6501397547, "to": 6501392445, "type": "CODE" }, { "from": 6501397583, "to": 6740346544, "type": "CALL" }, { "from": 6501397589, "to": 6501391028, "type": "CODE" }, { "from": 6501397594, "to": 6642659040, "type": "CALL" }, { "from": 6501397602, "to": 6501393334, "type": "CODE" }, { "from": 6501397638, "to": 6740346544, "type": "CALL" }, { "from": 6501397644, "to": 6501390689, "type": "CODE" }, { "from": 6501397674, "to": 6740346544, "type": "CALL" }, { "from": 6501397680, "to": 6501391807, "type": "CODE" }, { "from": 6501397710, "to": 6740346544, "type": "CALL" }, { "from": 6501397716, "to": 6501394136, "type": "CODE" }, { "from": 6501397746, "to": 6740346544, "type": "CALL" }, { "from": 6501397752, "to": 6501397044, "type": "CODE" }, { "from": 6501397782, "to": 6740346544, "type": "CALL" }, { "from": 6501397788, "to": 6501392730, "type": "CODE" }, { "from": 6501397818, "to": 6740346544, "type": "CALL" }, { "from": 6501397824, "to": 6501396165, "type": "CODE" }, { "from": 6501397854, "to": 6740346544, "type": "CALL" }, { "from": 6501397860, "to": 6501394471, "type": "CODE" }, { "from": 6501397890, "to": 6740346544, "type": "CALL" }, { "from": 6501397896, "to": 6501392215, "type": "CODE" }, { "from": 6501397926, "to": 6740346544, "type": "CALL" }, { "from": 6501397932, "to": 6501396476, "type": "CODE" } ], "datarefs": [ { "from": 6501390464, "to": 6742246848, "type": "DATA" }, { "from": 6501390477, "to": 6723620928, "type": "DATA" }, { "from": 6501390520, "to": 6720303740, "type": "DATA" }, { "from": 6501390541, "to": 6723623904, "type": "DATA" }, { "from": 6501390562, "to": 6710367816, "type": "DATA" }, { "from": 6501390588, "to": 6708900496, "type": "DATA" }, { "from": 6501390603, "to": 6708923712, "type": "DATA" }, { "from": 6501390659, "to": 6708923824, "type": "DATA" }, { "from": 6501390673, "to": 6742217808, "type": "DATA" }, { "from": 6501390725, "to": 6723623968, "type": "DATA" }, { "from": 6501390760, "to": 6723623968, "type": "DATA" }, { "from": 6501390803, "to": 6742246848, "type": "DATA" }, { "from": 6501390816, "to": 6723620928, "type": "DATA" }, { "from": 6501390859, "to": 6720303740, "type": "DATA" }, { "from": 6501390880, "to": 6723623840, "type": "DATA" }, { "from": 6501390901, "to": 6710367816, "type": "DATA" }, { "from": 6501390927, "to": 6708900496, "type": "DATA" }, { "from": 6501390942, "to": 6708923712, "type": "DATA" }, { "from": 6501390998, "to": 6708923824, "type": "DATA" }, { "from": 6501391012, "to": 6742217808, "type": "DATA" }, { "from": 6501391064, "to": 6716742096, "type": "DATA" }, { "from": 6501391099, "to": 6716742112, "type": "DATA" }, { "from": 6501391119, "to": 6716742096, "type": "DATA" }, { "from": 6501391157, "to": 6587963136, "type": "DATA" }, { "from": 6501391182, "to": 6545109024, "type": "DATA" }, { "from": 6501391520, "to": 6742246848, "type": "DATA" }, { "from": 6501391533, "to": 6741126112, "type": "DATA" }, { "from": 6501391542, "to": 6742246856, "type": "DATA" }, { "from": 6501391556, "to": 6723620928, "type": "DATA" }, { "from": 6501391596, "to": 6720303740, "type": "DATA" }, { "from": 6501391617, "to": 6723623376, "type": "DATA" }, { "from": 6501391679, "to": 6710367816, "type": "DATA" }, { "from": 6501391705, "to": 6708900496, "type": "DATA" }, { "from": 6501391720, "to": 6708923712, "type": "DATA" }, { "from": 6501391777, "to": 6708923824, "type": "DATA" }, { "from": 6501391791, "to": 6742217808, "type": "DATA" }, { "from": 6501391940, "to": 6742246848, "type": "DATA" }, { "from": 6501391953, "to": 6741126112, "type": "DATA" }, { "from": 6501391962, "to": 6742246856, "type": "DATA" }, { "from": 6501391976, "to": 6723620928, "type": "DATA" }, { "from": 6501392016, "to": 6720303740, "type": "DATA" }, { "from": 6501392037, "to": 6723623440, "type": "DATA" }, { "from": 6501392088, "to": 6710367816, "type": "DATA" }, { "from": 6501392114, "to": 6708900496, "type": "DATA" }, { "from": 6501392129, "to": 6708923712, "type": "DATA" }, { "from": 6501392185, "to": 6708923824, "type": "DATA" }, { "from": 6501392199, "to": 6742217808, "type": "DATA" }, { "from": 6501392325, "to": 6741104936, "type": "DATA" }, { "from": 6501392334, "to": 6741104936, "type": "DATA" }, { "from": 6501392356, "to": 6723623832, "type": "DATA" }, { "from": 6501392455, "to": 6742246848, "type": "DATA" }, { "from": 6501392468, "to": 6741126112, "type": "DATA" }, { "from": 6501392477, "to": 6742246856, "type": "DATA" }, { "from": 6501392491, "to": 6723620928, "type": "DATA" }, { "from": 6501392531, "to": 6720303740, "type": "DATA" }, { "from": 6501392552, "to": 6723623520, "type": "DATA" }, { "from": 6501392603, "to": 6710367816, "type": "DATA" }, { "from": 6501392629, "to": 6708900496, "type": "DATA" }, { "from": 6501392644, "to": 6708923712, "type": "DATA" }, { "from": 6501392700, "to": 6708923824, "type": "DATA" }, { "from": 6501392714, "to": 6742217808, "type": "DATA" }, { "from": 6501392788, "to": 6708096840, "type": "DATA" }, { "from": 6501392852, "to": 6707916208, "type": "DATA" }, { "from": 6501392940, "to": 6741126408, "type": "DATA" }, { "from": 6501393028, "to": 6709836760, "type": "DATA" }, { "from": 6501393318, "to": 6742465472, "type": "DATA" }, { "from": 6501393790, "to": 6742246848, "type": "DATA" }, { "from": 6501393803, "to": 6741126112, "type": "DATA" }, { "from": 6501393812, "to": 6742246856, "type": "DATA" }, { "from": 6501393826, "to": 6723620928, "type": "DATA" }, { "from": 6501393866, "to": 6720303740, "type": "DATA" }, { "from": 6501393884, "to": 6723621000, "type": "DATA" }, { "from": 6501393937, "to": 6723621040, "type": "DATA" }, { "from": 6501393990, "to": 6710367816, "type": "DATA" }, { "from": 6501394025, "to": 6708900496, "type": "DATA" }, { "from": 6501394040, "to": 6708923712, "type": "DATA" }, { "from": 6501394104, "to": 6708923824, "type": "DATA" }, { "from": 6501394120, "to": 6742217808, "type": "DATA" }, { "from": 6501394174, "to": 6742246848, "type": "DATA" }, { "from": 6501394187, "to": 6741126112, "type": "DATA" }, { "from": 6501394196, "to": 6742246856, "type": "DATA" }, { "from": 6501394210, "to": 6723620928, "type": "DATA" }, { "from": 6501394253, "to": 6720303740, "type": "DATA" }, { "from": 6501394271, "to": 6723621056, "type": "DATA" }, { "from": 6501394327, "to": 6710367816, "type": "DATA" }, { "from": 6501394362, "to": 6708900496, "type": "DATA" }, { "from": 6501394377, "to": 6708923712, "type": "DATA" }, { "from": 6501394441, "to": 6708923824, "type": "DATA" }, { "from": 6501394455, "to": 6742217808, "type": "DATA" }, { "from": 6501394621, "to": 6498062752, "type": "DATA" }, { "from": 6501394632, "to": 6488537312, "type": "DATA" }, { "from": 6501394643, "to": 6496570832, "type": "DATA" }, { "from": 6501394654, "to": 6501357104, "type": "DATA" }, { "from": 6501394686, "to": 6712266840, "type": "DATA" }, { "from": 6501394693, "to": 6723620928, "type": "DATA" }, { "from": 6501394869, "to": 6498062752, "type": "DATA" }, { "from": 6501394880, "to": 6488537312, "type": "DATA" }, { "from": 6501394891, "to": 6496570832, "type": "DATA" }, { "from": 6501394902, "to": 6501357104, "type": "DATA" }, { "from": 6501394928, "to": 6712266840, "type": "DATA" }, { "from": 6501394935, "to": 6723620928, "type": "DATA" }, { "from": 6501395156, "to": 6707927600, "type": "DATA" }, { "from": 6501395177, "to": 6741126408, "type": "DATA" }, { "from": 6501395286, "to": 6741126408, "type": "DATA" }, { "from": 6501395321, "to": 6712085216, "type": "DATA" }, { "from": 6501395441, "to": 6742246848, "type": "DATA" }, { "from": 6501395454, "to": 6741126112, "type": "DATA" }, { "from": 6501395463, "to": 6742246856, "type": "DATA" }, { "from": 6501395477, "to": 6723620928, "type": "DATA" }, { "from": 6501395514, "to": 6720303740, "type": "DATA" }, { "from": 6501395532, "to": 6723621128, "type": "DATA" }, { "from": 6501395655, "to": 6723381692, "type": "DATA" }, { "from": 6501395691, "to": 6723621184, "type": "DATA" }, { "from": 6501395775, "to": 6723621208, "type": "DATA" }, { "from": 6501395811, "to": 6723621232, "type": "DATA" }, { "from": 6501395871, "to": 6723621248, "type": "DATA" }, { "from": 6501395911, "to": 6723621272, "type": "DATA" }, { "from": 6501396029, "to": 6710367816, "type": "DATA" }, { "from": 6501396063, "to": 6708900496, "type": "DATA" }, { "from": 6501396078, "to": 6708923712, "type": "DATA" }, { "from": 6501396135, "to": 6708923824, "type": "DATA" }, { "from": 6501396149, "to": 6742217808, "type": "DATA" }, { "from": 6501396230, "to": 6742246848, "type": "DATA" }, { "from": 6501396243, "to": 6741126112, "type": "DATA" }, { "from": 6501396252, "to": 6742246856, "type": "DATA" }, { "from": 6501396266, "to": 6723620928, "type": "DATA" }, { "from": 6501396306, "to": 6720303740, "type": "DATA" }, { "from": 6501396327, "to": 6723621288, "type": "DATA" }, { "from": 6501396348, "to": 6710367816, "type": "DATA" }, { "from": 6501396374, "to": 6708900496, "type": "DATA" }, { "from": 6501396389, "to": 6708923712, "type": "DATA" }, { "from": 6501396446, "to": 6708923824, "type": "DATA" }, { "from": 6501396460, "to": 6742217808, "type": "DATA" }, { "from": 6501396712, "to": 6742246848, "type": "DATA" }, { "from": 6501396725, "to": 6741126112, "type": "DATA" }, { "from": 6501396734, "to": 6742246856, "type": "DATA" }, { "from": 6501396748, "to": 6723620928, "type": "DATA" }, { "from": 6501396788, "to": 6720303740, "type": "DATA" }, { "from": 6501396809, "to": 6723623992, "type": "DATA" }, { "from": 6501396863, "to": 6723622368, "type": "DATA" }, { "from": 6501396916, "to": 6710367816, "type": "DATA" }, { "from": 6501396942, "to": 6708900496, "type": "DATA" }, { "from": 6501396957, "to": 6708923712, "type": "DATA" }, { "from": 6501397014, "to": 6708923824, "type": "DATA" }, { "from": 6501397028, "to": 6742217808, "type": "DATA" }, { "from": 6501397172, "to": 6587963136, "type": "DATA" }, { "from": 6501397190, "to": 6545109024, "type": "DATA" }, { "from": 6501397367, "to": 6488537248, "type": "DATA" }, { "from": 6501397452, "to": 6488537248, "type": "DATA" } ] }, "strings": [ { "va": "0x190c25040", "offset": 281166912, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_omnibox\\tab_omnibox_api.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c25be0", "offset": 281169888, "ascii": "TabOmniboxGetSuggestionsFunction::Run: manager not available", "wide": null }, { "va": "0x190c25c20", "offset": 281169952, "ascii": "Manager not available", "wide": null }, { "va": "0x190c25ba0", "offset": 281169824, "ascii": "TabOmniboxGetSuggestionsFunction::Run: invalid parameters", "wide": null }, { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x190c259d0", "offset": 281169360, "ascii": "TabOmniboxSuggestionManager::CreateRequest: input=", "wide": null }, { "va": "0x190c25a10", "offset": 281169424, "ascii": "TabOmniboxSuggestionManager::CreateRequest: using provided request_id=", "wide": null }, { "va": "0x190c25b98", "offset": 281169816, "ascii": "req_", "wide": null }, { "va": "0x190c25a60", "offset": 281169504, "ascii": "TabOmniboxSuggestionManager::CreateRequest: generated request_id=", "wide": null }, { "va": "0x190c25088", "offset": 281166984, "ascii": "TabOmniboxRequest::Start: request_id=", "wide": null }, { "va": "0x190c250b0", "offset": 281167024, "ascii": " input=", "wide": null }, { "va": "0x190c250c0", "offset": 281167040, "ascii": "TabOmniboxRequest::Start: request already cancelled, request_id=", "wide": null }, { "va": "0x190151058", "offset": 269812824, "ascii": "Start", "wide": null }, { "va": "0x190c25108", "offset": 281167112, "ascii": "TabOmniboxRequest::Start: created input with text=", "wide": null }, { "va": "0x190bea9bc", "offset": 280927676, "ascii": " type=", "wide": null }, { "va": "0x190c25140", "offset": 281167168, "ascii": " input_type_name=", "wide": null }, { "va": "0x190c25158", "offset": 281167192, "ascii": " page_classification=", "wide": null }, { "va": "0x190c25170", "offset": 281167216, "ascii": " current_url=", "wide": null }, { "va": "0x190c25180", "offset": 281167232, "ascii": " is_zero_suggest=", "wide": null }, { "va": "0x190c25198", "offset": 281167256, "ascii": " omit_async=", "wide": null }, { "va": "0x190c251a8", "offset": 281167272, "ascii": "TabOmniboxRequest::Start: immediate processing", "wide": null }, { "va": "0x190c25c38", "offset": 281169976, "ascii": "TabOmniboxGetSuggestionsFunction ready to RespondNow, input= ", "wide": null }, { "va": "0x190c255e0", "offset": 281168352, "ascii": " request_id=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 69524 }, { "label": "p-omnibox-results", "file": "rea-p-omnibox-results.json", "file_sha256": "81461f75abaf3f78503ceb3ba69cbc667be3b529dcab5c972dc7366297979d08", "status": "completed", "evidence_id": "ev_e6205c994d1d6b17c6c031c9092411001aa3e388e3ddb2debffb87459d36e3b3", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18382d630;pdgo @ 0x18382d630;afij @ 0x18382d630", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18382d630", "size": 19472, "nargs": 2, "signature": "fcn.18382d630(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6501357458, "to": 6445650832, "type": "CALL" }, { "from": 6501357484, "to": 6524031184, "type": "CALL" }, { "from": 6501357505, "to": 6524031184, "type": "CALL" }, { "from": 6501357538, "to": 6542435920, "type": "CALL" }, { "from": 6501357552, "to": 6524031184, "type": "CALL" }, { "from": 6501357573, "to": 6524031184, "type": "CALL" }, { "from": 6501357588, "to": 6462379168, "type": "CALL" }, { "from": 6501357614, "to": 6445656528, "type": "CALL" }, { "from": 6501357685, "to": 6511512544, "type": "CALL" }, { "from": 6501357739, "to": 6511975280, "type": "CALL" }, { "from": 6501357747, "to": 6518967168, "type": "CALL" }, { "from": 6501357786, "to": 6501357800, "type": "CODE" }, { "from": 6501357858, "to": 6501357868, "type": "CODE" }, { "from": 6501357942, "to": 6501361518, "type": "CODE" }, { "from": 6501357996, "to": 6501358009, "type": "CODE" }, { "from": 6501358024, "to": 6522894224, "type": "CALL" }, { "from": 6501358092, "to": 6445650832, "type": "CALL" }, { "from": 6501358121, "to": 6524031184, "type": "CALL" }, { "from": 6501358142, "to": 6524031184, "type": "CALL" }, { "from": 6501358161, "to": 6445656528, "type": "CALL" }, { "from": 6501358231, "to": 6511512544, "type": "CALL" }, { "from": 6501358285, "to": 6511975280, "type": "CALL" }, { "from": 6501358293, "to": 6518967168, "type": "CALL" }, { "from": 6501358370, "to": 6445650832, "type": "CALL" }, { "from": 6501358399, "to": 6524031184, "type": "CALL" }, { "from": 6501358420, "to": 6524031184, "type": "CALL" }, { "from": 6501358430, "to": 6451143232, "type": "CALL" }, { "from": 6501358451, "to": 6524031184, "type": "CALL" }, { "from": 6501358489, "to": 6451143232, "type": "CALL" }, { "from": 6501358508, "to": 6445656528, "type": "CALL" }, { "from": 6501358578, "to": 6511512544, "type": "CALL" }, { "from": 6501358632, "to": 6511975280, "type": "CALL" }, { "from": 6501358640, "to": 6518967168, "type": "CALL" }, { "from": 6501358645, "to": 6501358658, "type": "CODE" }, { "from": 6501358708, "to": 6501358738, "type": "CODE" }, { "from": 6501358777, "to": 6502369056, "type": "CALL" }, { "from": 6501358846, "to": 6502368720, "type": "CALL" }, { "from": 6501358880, "to": 6501358719, "type": "CODE" }, { "from": 6501358942, "to": 6522894224, "type": "CALL" }, { "from": 6501358954, "to": 6522894224, "type": "CALL" }, { "from": 6501359022, "to": 6445650832, "type": "CALL" }, { "from": 6501359048, "to": 6524031184, "type": "CALL" }, { "from": 6501359069, "to": 6524031184, "type": "CALL" }, { "from": 6501359082, "to": 6462379168, "type": "CALL" }, { "from": 6501359103, "to": 6524031184, "type": "CALL" }, { "from": 6501359126, "to": 6501359132, "type": "CODE" }, { "from": 6501359135, "to": 6524031184, "type": "CALL" }, { "from": 6501359158, "to": 6445656528, "type": "CALL" }, { "from": 6501359241, "to": 6511512544, "type": "CALL" }, { "from": 6501359295, "to": 6511975280, "type": "CALL" }, { "from": 6501359303, "to": 6518967168, "type": "CALL" }, { "from": 6501359381, "to": 6501364110, "type": "CODE" }, { "from": 6501359479, "to": 6445650832, "type": "CALL" }, { "from": 6501359508, "to": 6524031184, "type": "CALL" }, { "from": 6501359529, "to": 6524031184, "type": "CALL" }, { "from": 6501359548, "to": 6445656528, "type": "CALL" }, { "from": 6501359618, "to": 6511512544, "type": "CALL" }, { "from": 6501359672, "to": 6511975280, "type": "CALL" }, { "from": 6501359680, "to": 6518967168, "type": "CALL" }, { "from": 6501359737, "to": 6502368720, "type": "CALL" }, { "from": 6501359790, "to": 6501378432, "type": "CALL" }, { "from": 6501359832, "to": 6502369664, "type": "CALL" }, { "from": 6501359887, "to": 6502368864, "type": "CALL" }, { "from": 6501359932, "to": 6502368720, "type": "CALL" }, { "from": 6501360004, "to": 6542067384, "type": "CALL" }, { "from": 6501360098, "to": 6456681280, "type": "CALL" }, { "from": 6501360103, "to": 6501360445, "type": "CODE" }, { "from": 6501360145, "to": 6502368720, "type": "CALL" }, { "from": 6501360198, "to": 6501378432, "type": "CALL" }, { "from": 6501360243, "to": 6502369664, "type": "CALL" }, { "from": 6501360298, "to": 6502368864, "type": "CALL" }, { "from": 6501360343, "to": 6502368720, "type": "CALL" }, { "from": 6501360440, "to": 6501379808, "type": "CALL" }, { "from": 6501360495, "to": 6502368720, "type": "CALL" }, { "from": 6501360549, "to": 6511512544, "type": "CALL" }, { "from": 6501360554, "to": 6501357228, "type": "CODE" }, { "from": 6501360574, "to": 6511729936, "type": "CALL" }, { "from": 6501360579, "to": 6501361298, "type": "CODE" }, { "from": 6501360646, "to": 6501361298, "type": "CODE" }, { "from": 6501360698, "to": 6511645120, "type": "CALL" }, { "from": 6501360714, "to": 6528656752, "type": "CALL" }, { "from": 6501360762, "to": 6542434272, "type": "CALL" }, { "from": 6501360815, "to": 6501374091, "type": "CODE" }, { "from": 6501360844, "to": 6501361290, "type": "CODE" }, { "from": 6501360854, "to": 6501361341, "type": "CODE" }, { "from": 6501360864, "to": 6501361341, "type": "CODE" }, { "from": 6501360874, "to": 6501361341, "type": "CODE" }, { "from": 6501360893, "to": 6501360960, "type": "CODE" }, { "from": 6501360909, "to": 6501361087, "type": "CODE" }, { "from": 6501360919, "to": 6501361341, "type": "CODE" }, { "from": 6501360935, "to": 6542434496, "type": "CALL" }, { "from": 6501360982, "to": 6534927440, "type": "CALL" }, { "from": 6501361026, "to": 6511512544, "type": "CALL" }, { "from": 6501361114, "to": 6534927440, "type": "CALL" }, { "from": 6501361158, "to": 6511512544, "type": "CALL" }, { "from": 6501361241, "to": 6522230240, "type": "CALL" }, { "from": 6501361285, "to": 6511513840, "type": "CALL" }, { "from": 6501361334, "to": 6501360651, "type": "CODE" }, { "from": 6501361334, "to": 6501360849, "type": "CODE" }, { "from": 6501361334, "to": 6501360859, "type": "CODE" }, { "from": 6501361334, "to": 6501360869, "type": "CODE" }, { "from": 6501361334, "to": 6501360914, "type": "CODE" }, { "from": 6501361334, "to": 6501361336, "type": "CODE" }, { "from": 6501361334, "to": 6501361341, "type": "CODE" }, { "from": 6501361430, "to": 6502368864, "type": "CALL" }, { "from": 6501361481, "to": 6502368720, "type": "CALL" }, { "from": 6501361587, "to": 6445650832, "type": "CALL" }, { "from": 6501361613, "to": 6524031184, "type": "CALL" }, { "from": 6501361634, "to": 6524031184, "type": "CALL" }, { "from": 6501361645, "to": 6462379168, "type": "CALL" }, { "from": 6501361666, "to": 6524031184, "type": "CALL" }, { "from": 6501361708, "to": 6532333680, "type": "CALL" }, { "from": 6501361749, "to": 6524031184, "type": "CALL" }, { "from": 6501361770, "to": 6524031184, "type": "CALL" }, { "from": 6501361785, "to": 6451143232, "type": "CALL" }, { "from": 6501361806, "to": 6524031184, "type": "CALL" }, { "from": 6501361865, "to": 6534927440, "type": "CALL" }, { "from": 6501361906, "to": 6524031184, "type": "CALL" }, { "from": 6501361927, "to": 6524031184, "type": "CALL" }, { "from": 6501361942, "to": 6465167984, "type": "CALL" }, { "from": 6501361963, "to": 6524031184, "type": "CALL" }, { "from": 6501361978, "to": 6522230240, "type": "CALL" }, { "from": 6501362006, "to": 6524031184, "type": "CALL" }, { "from": 6501362050, "to": 6511512544, "type": "CALL" }, { "from": 6501362094, "to": 6511512544, "type": "CALL" }, { "from": 6501362117, "to": 6445656528, "type": "CALL" }, { "from": 6501362203, "to": 6511512544, "type": "CALL" }, { "from": 6501362255, "to": 6511975280, "type": "CALL" }, { "from": 6501362267, "to": 6518967168, "type": "CALL" }, { "from": 6501362323, "to": 6501362535, "type": "CODE" }, { "from": 6501362342, "to": 6501361838, "type": "CODE" }, { "from": 6501362393, "to": 6501363176, "type": "CODE" }, { "from": 6501362462, "to": 6445650832, "type": "CALL" }, { "from": 6501362488, "to": 6524031184, "type": "CALL" }, { "from": 6501362509, "to": 6524031184, "type": "CALL" }, { "from": 6501362514, "to": 6501362967, "type": "CODE" }, { "from": 6501362607, "to": 6445650832, "type": "CALL" }, { "from": 6501362633, "to": 6524031184, "type": "CALL" }, { "from": 6501362654, "to": 6524031184, "type": "CALL" }, { "from": 6501362675, "to": 6524031184, "type": "CALL" }, { "from": 6501362712, "to": 6532333680, "type": "CALL" }, { "from": 6501362753, "to": 6524031184, "type": "CALL" }, { "from": 6501362774, "to": 6524031184, "type": "CALL" }, { "from": 6501362833, "to": 6534927440, "type": "CALL" }, { "from": 6501362874, "to": 6524031184, "type": "CALL" }, { "from": 6501362918, "to": 6511512544, "type": "CALL" }, { "from": 6501362962, "to": 6511512544, "type": "CALL" }, { "from": 6501362985, "to": 6445656528, "type": "CALL" }, { "from": 6501363071, "to": 6511512544, "type": "CALL" }, { "from": 6501363123, "to": 6511975280, "type": "CALL" }, { "from": 6501363135, "to": 6518967168, "type": "CALL" }, { "from": 6501363140, "to": 6501361486, "type": "CODE" }, { "from": 6501363159, "to": 6501362806, "type": "CODE" }, { "from": 6501363280, "to": 6501363289, "type": "CODE" }, { "from": 6501363382, "to": 6445650832, "type": "CALL" }, { "from": 6501363408, "to": 6524031184, "type": "CALL" }, { "from": 6501363429, "to": 6524031184, "type": "CALL" }, { "from": 6501363450, "to": 6524031184, "type": "CALL" }, { "from": 6501363512, "to": 6534927440, "type": "CALL" }, { "from": 6501363553, "to": 6524031184, "type": "CALL" }, { "from": 6501363558, "to": 6501362923, "type": "CODE" }, { "from": 6501363577, "to": 6501363587, "type": "CODE" }, { "from": 6501363587, "to": 6542434064, "type": "CALL" }, { "from": 6501363723, "to": 6542434064, "type": "CALL" }, { "from": 6501363907, "to": 6542434064, "type": "CALL" }, { "from": 6501364179, "to": 6542434064, "type": "CALL" }, { "from": 6501364255, "to": 6501363568, "type": "CODE" }, { "from": 6501364329, "to": 6501364494, "type": "CODE" }, { "from": 6501364460, "to": 6501375962, "type": "CODE" }, { "from": 6501364517, "to": 6501365526, "type": "CODE" }, { "from": 6501364575, "to": 6501364584, "type": "CODE" }, { "from": 6501364684, "to": 6501375761, "type": "CODE" }, { "from": 6501364705, "to": 6501365235, "type": "CODE" }, { "from": 6501364768, "to": 6501364906, "type": "CODE" }, { "from": 6501364880, "to": 6501375902, "type": "CODE" }, { "from": 6501364924, "to": 6501365226, "type": "CODE" }, { "from": 6501365079, "to": 6501365374, "type": "CODE" }, { "from": 6501365095, "to": 6511681872, "type": "CALL" }, { "from": 6501365100, "to": 6501365330, "type": "CODE" }, { "from": 6501365122, "to": 6501365576, "type": "CODE" }, { "from": 6501365564, "to": 6511512544, "type": "CALL" }, { "from": 6501365599, "to": 6511512544, "type": "CALL" }, { "from": 6501365633, "to": 6511512544, "type": "CALL" }, { "from": 6501365667, "to": 6511512544, "type": "CALL" }, { "from": 6501365708, "to": 6542434496, "type": "CALL" }, { "from": 6501365751, "to": 6534927440, "type": "CALL" }, { "from": 6501365795, "to": 6511512544, "type": "CALL" }, { "from": 6501365857, "to": 6522230240, "type": "CALL" }, { "from": 6501365964, "to": 6542434272, "type": "CALL" }, { "from": 6501366056, "to": 6522230240, "type": "CALL" }, { "from": 6501366100, "to": 6511513840, "type": "CALL" }, { "from": 6501366235, "to": 6511512544, "type": "CALL" }, { "from": 6501366307, "to": 6502368864, "type": "CALL" }, { "from": 6501366424, "to": 6445650832, "type": "CALL" }, { "from": 6501366450, "to": 6524031184, "type": "CALL" }, { "from": 6501366471, "to": 6524031184, "type": "CALL" }, { "from": 6501366492, "to": 6524031184, "type": "CALL" }, { "from": 6501366569, "to": 6534927440, "type": "CALL" }, { "from": 6501366610, "to": 6524031184, "type": "CALL" }, { "from": 6501366631, "to": 6524031184, "type": "CALL" }, { "from": 6501366643, "to": 6522230240, "type": "CALL" }, { "from": 6501366671, "to": 6524031184, "type": "CALL" }, { "from": 6501366692, "to": 6524031184, "type": "CALL" }, { "from": 6501366704, "to": 6469174912, "type": "CALL" }, { "from": 6501366748, "to": 6511512544, "type": "CALL" }, { "from": 6501366771, "to": 6445656528, "type": "CALL" }, { "from": 6501366865, "to": 6511512544, "type": "CALL" }, { "from": 6501366917, "to": 6511975280, "type": "CALL" }, { "from": 6501366930, "to": 6518967168, "type": "CALL" }, { "from": 6501366943, "to": 6502368720, "type": "CALL" }, { "from": 6501366978, "to": 6522230240, "type": "CALL" }, { "from": 6501366992, "to": 6445071680, "type": "CALL" }, { "from": 6501367102, "to": 6530673136, "type": "CALL" }, { "from": 6501367164, "to": 6453276880, "type": "CALL" }, { "from": 6501367198, "to": 6511512544, "type": "CALL" }, { "from": 6501367285, "to": 6453276880, "type": "CALL" }, { "from": 6501367313, "to": 6522230240, "type": "CALL" }, { "from": 6501367362, "to": 6530673136, "type": "CALL" }, { "from": 6501367420, "to": 6453276880, "type": "CALL" }, { "from": 6501367445, "to": 6511512544, "type": "CALL" }, { "from": 6501367578, "to": 6501365239, "type": "CODE" }, { "from": 6501367585, "to": 6501368406, "type": "CODE" }, { "from": 6501367668, "to": 6501408352, "type": "CALL" }, { "from": 6501367736, "to": 6502368864, "type": "CALL" }, { "from": 6501367793, "to": 6501368406, "type": "CODE" }, { "from": 6501367816, "to": 6501367821, "type": "CODE" }, { "from": 6501367877, "to": 6501367883, "type": "CODE" }, { "from": 6501367889, "to": 6542434064, "type": "CALL" }, { "from": 6501368031, "to": 6450653792, "type": "CALL" }, { "from": 6501368087, "to": 6513291376, "type": "CALL" }, { "from": 6501368112, "to": 6501368120, "type": "CODE" }, { "from": 6501368144, "to": 6501367833, "type": "CODE" }, { "from": 6501368160, "to": 6501368120, "type": "CODE" }, { "from": 6501368232, "to": 6501367983, "type": "CODE" }, { "from": 6501368391, "to": 6501366964, "type": "CODE" }, { "from": 6501368469, "to": 6445650832, "type": "CALL" }, { "from": 6501368498, "to": 6524031184, "type": "CALL" }, { "from": 6501368519, "to": 6524031184, "type": "CALL" }, { "from": 6501368529, "to": 6446762512, "type": "CALL" }, { "from": 6501368550, "to": 6524031184, "type": "CALL" }, { "from": 6501368569, "to": 6445656528, "type": "CALL" }, { "from": 6501368639, "to": 6511512544, "type": "CALL" }, { "from": 6501368693, "to": 6511975280, "type": "CALL" }, { "from": 6501368701, "to": 6518967168, "type": "CALL" }, { "from": 6501368792, "to": 6502368720, "type": "CALL" }, { "from": 6501368910, "to": 6445650832, "type": "CALL" }, { "from": 6501368939, "to": 6524031184, "type": "CALL" }, { "from": 6501368960, "to": 6524031184, "type": "CALL" }, { "from": 6501368970, "to": 6446762512, "type": "CALL" }, { "from": 6501368989, "to": 6445656528, "type": "CALL" }, { "from": 6501369059, "to": 6511512544, "type": "CALL" }, { "from": 6501369113, "to": 6511975280, "type": "CALL" }, { "from": 6501369121, "to": 6518967168, "type": "CALL" }, { "from": 6501369179, "to": 6502368720, "type": "CALL" }, { "from": 6501369219, "to": 6511512544, "type": "CALL" }, { "from": 6501369278, "to": 6511512544, "type": "CALL" }, { "from": 6501369328, "to": 6511512544, "type": "CALL" }, { "from": 6501369356, "to": 6501369395, "type": "CODE" }, { "from": 6501369369, "to": 6511512544, "type": "CALL" }, { "from": 6501369382, "to": 6511512544, "type": "CALL" }, { "from": 6501369414, "to": 6501369358, "type": "CODE" }, { "from": 6501369453, "to": 6511512544, "type": "CALL" }, { "from": 6501369527, "to": 6501369561, "type": "CODE" }, { "from": 6501369540, "to": 6511512544, "type": "CALL" }, { "from": 6501369592, "to": 6442840976, "type": "CALL" }, { "from": 6501369612, "to": 6511396000, "type": "CALL" }, { "from": 6501369623, "to": 6501369529, "type": "CODE" }, { "from": 6501369678, "to": 6511512544, "type": "CALL" }, { "from": 6501369683, "to": 6501358916, "type": "CODE" }, { "from": 6501369781, "to": 6740346544, "type": "CALL" }, { "from": 6501369833, "to": 6462089824, "type": "CALL" }, { "from": 6501369909, "to": 6611684432, "type": "CALL" }, { "from": 6501369986, "to": 6501370462, "type": "CODE" }, { "from": 6501370010, "to": 6544807632, "type": "CALL" }, { "from": 6501370100, "to": 6445650832, "type": "CALL" }, { "from": 6501370129, "to": 6524031184, "type": "CALL" }, { "from": 6501370150, "to": 6524031184, "type": "CALL" }, { "from": 6501370166, "to": 6462379168, "type": "CALL" }, { "from": 6501370187, "to": 6524031184, "type": "CALL" }, { "from": 6501370206, "to": 6445656528, "type": "CALL" }, { "from": 6501370276, "to": 6511512544, "type": "CALL" }, { "from": 6501370330, "to": 6511975280, "type": "CALL" }, { "from": 6501370338, "to": 6518967168, "type": "CALL" }, { "from": 6501370434, "to": 6501371434, "type": "CODE" }, { "from": 6501370487, "to": 6501370548, "type": "CODE" }, { "from": 6501370499, "to": 6536519280, "type": "CALL" }, { "from": 6501370504, "to": 6501370802, "type": "CODE" }, { "from": 6501370528, "to": 6511512544, "type": "CALL" }, { "from": 6501370551, "to": 6528099264, "type": "CALL" }, { "from": 6501370569, "to": 6740346544, "type": "CALL" }, { "from": 6501370601, "to": 6542434496, "type": "CALL" }, { "from": 6501370705, "to": 6520429280, "type": "CALL" }, { "from": 6501370747, "to": 6740346544, "type": "CALL" }, { "from": 6501370812, "to": 6740346544, "type": "CALL" }, { "from": 6501370824, "to": 6528657040, "type": "CALL" }, { "from": 6501370847, "to": 6511423872, "type": "CALL" }, { "from": 6501370875, "to": 6442840976, "type": "CALL" }, { "from": 6501371040, "to": 6514576880, "type": "CALL" }, { "from": 6501371160, "to": 6442840976, "type": "CALL" }, { "from": 6501371180, "to": 6511396000, "type": "CALL" }, { "from": 6501371199, "to": 6501370509, "type": "CODE" }, { "from": 6501371212, "to": 6501371221, "type": "CODE" }, { "from": 6501371227, "to": 6460876800, "type": "CALL" }, { "from": 6501371232, "to": 6501370802, "type": "CODE" }, { "from": 6501371307, "to": 6501371312, "type": "CODE" }, { "from": 6501371324, "to": 6501371406, "type": "CODE" }, { "from": 6501371364, "to": 6501371371, "type": "CODE" }, { "from": 6501371445, "to": 6522230240, "type": "CALL" }, { "from": 6501371480, "to": 6513291376, "type": "CALL" }, { "from": 6501371538, "to": 6501371546, "type": "CODE" }, { "from": 6501371566, "to": 6501371599, "type": "CODE" }, { "from": 6501371586, "to": 6501371591, "type": "CODE" }, { "from": 6501371643, "to": 6501371649, "type": "CODE" }, { "from": 6501371655, "to": 6542434064, "type": "CALL" }, { "from": 6501371674, "to": 6501371414, "type": "CODE" }, { "from": 6501371687, "to": 6542067384, "type": "CALL" }, { "from": 6501371801, "to": 6501371826, "type": "CODE" }, { "from": 6501371811, "to": 6511513840, "type": "CALL" }, { "from": 6501371816, "to": 6501371756, "type": "CODE" }, { "from": 6501371858, "to": 6501371868, "type": "CODE" }, { "from": 6501371894, "to": 6542230720, "type": "CALL" }, { "from": 6501371992, "to": 6523766064, "type": "CALL" }, { "from": 6501372060, "to": 6501372070, "type": "CODE" }, { "from": 6501372079, "to": 6542230720, "type": "CALL" }, { "from": 6501372158, "to": 6501372179, "type": "CODE" }, { "from": 6501372163, "to": 6501372000, "type": "CODE" }, { "from": 6501372171, "to": 6523766064, "type": "CALL" }, { "from": 6501372208, "to": 6501372241, "type": "CODE" }, { "from": 6501372234, "to": 6542067384, "type": "CALL" }, { "from": 6501372274, "to": 6511512544, "type": "CALL" }, { "from": 6501372368, "to": 6501372373, "type": "CODE" }, { "from": 6501372396, "to": 6501372481, "type": "CODE" }, { "from": 6501372402, "to": 6501372472, "type": "CODE" }, { "from": 6501372512, "to": 6501372407, "type": "CODE" }, { "from": 6501372538, "to": 6445650832, "type": "CALL" }, { "from": 6501372564, "to": 6524031184, "type": "CALL" }, { "from": 6501372585, "to": 6524031184, "type": "CALL" }, { "from": 6501372606, "to": 6524031184, "type": "CALL" }, { "from": 6501372663, "to": 6532333680, "type": "CALL" }, { "from": 6501372700, "to": 6524031184, "type": "CALL" }, { "from": 6501372721, "to": 6524031184, "type": "CALL" }, { "from": 6501372764, "to": 6534927440, "type": "CALL" }, { "from": 6501372805, "to": 6524031184, "type": "CALL" }, { "from": 6501372846, "to": 6511512544, "type": "CALL" }, { "from": 6501372887, "to": 6511512544, "type": "CALL" }, { "from": 6501372913, "to": 6445656528, "type": "CALL" }, { "from": 6501372984, "to": 6511512544, "type": "CALL" }, { "from": 6501373044, "to": 6511975280, "type": "CALL" }, { "from": 6501373052, "to": 6518967168, "type": "CALL" }, { "from": 6501373057, "to": 6501357868, "type": "CODE" }, { "from": 6501373123, "to": 6501373277, "type": "CODE" }, { "from": 6501373251, "to": 6501375820, "type": "CODE" }, { "from": 6501373289, "to": 6501365547, "type": "CODE" }, { "from": 6501373307, "to": 6501360754, "type": "CODE" }, { "from": 6501373320, "to": 6501407328, "type": "CALL" }, { "from": 6501373325, "to": 6501371080, "type": "CODE" }, { "from": 6501373340, "to": 6511513840, "type": "CALL" }, { "from": 6501373345, "to": 6501365897, "type": "CODE" }, { "from": 6501373356, "to": 6501406880, "type": "CALL" }, { "from": 6501373364, "to": 6501360303, "type": "CODE" }, { "from": 6501373369, "to": 6740346544, "type": "CALL" }, { "from": 6501373375, "to": 6501369893, "type": "CODE" }, { "from": 6501373449, "to": 6445650832, "type": "CALL" }, { "from": 6501373475, "to": 6524031184, "type": "CALL" }, { "from": 6501373496, "to": 6524031184, "type": "CALL" }, { "from": 6501373529, "to": 6542435920, "type": "CALL" }, { "from": 6501373543, "to": 6524031184, "type": "CALL" }, { "from": 6501373564, "to": 6524031184, "type": "CALL" }, { "from": 6501373596, "to": 6542435920, "type": "CALL" }, { "from": 6501373610, "to": 6524031184, "type": "CALL" }, { "from": 6501373636, "to": 6445656528, "type": "CALL" }, { "from": 6501373707, "to": 6511512544, "type": "CALL" }, { "from": 6501373761, "to": 6511975280, "type": "CALL" }, { "from": 6501373769, "to": 6518967168, "type": "CALL" }, { "from": 6501373862, "to": 6511423872, "type": "CALL" }, { "from": 6501373872, "to": 6542067384, "type": "CALL" }, { "from": 6501373997, "to": 6512942288, "type": "CALL" }, { "from": 6501374028, "to": 6740346544, "type": "CALL" }, { "from": 6501374034, "to": 6501360445, "type": "CODE" }, { "from": 6501374050, "to": 6511513840, "type": "CALL" }, { "from": 6501374055, "to": 6501373966, "type": "CODE" }, { "from": 6501374081, "to": 6511729936, "type": "CALL" }, { "from": 6501374086, "to": 6501366053, "type": "CODE" }, { "from": 6501374124, "to": 6445650832, "type": "CALL" }, { "from": 6501374150, "to": 6524031184, "type": "CALL" }, { "from": 6501374171, "to": 6524031184, "type": "CALL" }, { "from": 6501374192, "to": 6524031184, "type": "CALL" }, { "from": 6501374236, "to": 6524031184, "type": "CALL" }, { "from": 6501374259, "to": 6445656528, "type": "CALL" }, { "from": 6501374345, "to": 6511512544, "type": "CALL" }, { "from": 6501374397, "to": 6511975280, "type": "CALL" }, { "from": 6501374409, "to": 6518967168, "type": "CALL" }, { "from": 6501374414, "to": 6501361336, "type": "CODE" }, { "from": 6501374425, "to": 6501406880, "type": "CALL" }, { "from": 6501374433, "to": 6501359892, "type": "CODE" }, { "from": 6501374446, "to": 6501406880, "type": "CALL" }, { "from": 6501374454, "to": 6501361435, "type": "CODE" }, { "from": 6501374483, "to": 6501366105, "type": "CODE" }, { "from": 6501374496, "to": 6501374505, "type": "CODE" }, { "from": 6501374516, "to": 6511730288, "type": "CALL" }, { "from": 6501374521, "to": 6501361298, "type": "CODE" }, { "from": 6501374546, "to": 6542067384, "type": "CALL" }, { "from": 6501374599, "to": 6501374744, "type": "CODE" }, { "from": 6501374655, "to": 6501365978, "type": "CODE" }, { "from": 6501374783, "to": 6542436672, "type": "CALL" }, { "from": 6501374828, "to": 6511512544, "type": "CALL" }, { "from": 6501374880, "to": 6501365988, "type": "CODE" }, { "from": 6501374909, "to": 6445650832, "type": "CALL" }, { "from": 6501374935, "to": 6524031184, "type": "CALL" }, { "from": 6501374956, "to": 6524031184, "type": "CALL" }, { "from": 6501374977, "to": 6524031184, "type": "CALL" }, { "from": 6501375006, "to": 6524031184, "type": "CALL" }, { "from": 6501375027, "to": 6524031184, "type": "CALL" }, { "from": 6501375041, "to": 6446762512, "type": "CALL" }, { "from": 6501375069, "to": 6445656528, "type": "CALL" }, { "from": 6501375155, "to": 6511512544, "type": "CALL" }, { "from": 6501375207, "to": 6511975280, "type": "CALL" }, { "from": 6501375220, "to": 6518967168, "type": "CALL" }, { "from": 6501375225, "to": 6501367965, "type": "CODE" }, { "from": 6501375241, "to": 6511512544, "type": "CALL" }, { "from": 6501375246, "to": 6501369270, "type": "CODE" }, { "from": 6501375260, "to": 6501369898, "type": "CODE" }, { "from": 6501375327, "to": 6501366113, "type": "CODE" }, { "from": 6501375347, "to": 6511729936, "type": "CALL" }, { "from": 6501375352, "to": 6501366113, "type": "CODE" }, { "from": 6501375363, "to": 6501406880, "type": "CALL" }, { "from": 6501375371, "to": 6501367741, "type": "CODE" }, { "from": 6501375392, "to": 6501375529, "type": "CODE" }, { "from": 6501375484, "to": 6542067384, "type": "CALL" }, { "from": 6501375567, "to": 6542436672, "type": "CALL" }, { "from": 6501375595, "to": 6511512544, "type": "CALL" }, { "from": 6501375641, "to": 6501365374, "type": "CODE" }, { "from": 6501375682, "to": 6511730288, "type": "CALL" }, { "from": 6501375687, "to": 6501366053, "type": "CODE" }, { "from": 6501375714, "to": 6501375751, "type": "CODE" }, { "from": 6501375756, "to": 6501373277, "type": "CODE" }, { "from": 6501375769, "to": 6501364696, "type": "CODE" }, { "from": 6501375788, "to": 6501365239, "type": "CODE" }, { "from": 6501375815, "to": 6501365239, "type": "CODE" }, { "from": 6501375836, "to": 6501373263, "type": "CODE" }, { "from": 6501375849, "to": 6501375858, "type": "CODE" }, { "from": 6501375869, "to": 6511730288, "type": "CALL" }, { "from": 6501375897, "to": 6501366113, "type": "CODE" }, { "from": 6501375915, "to": 6501364892, "type": "CODE" }, { "from": 6501375920, "to": 6542741104, "type": "CALL" }, { "from": 6501375949, "to": 6501407968, "type": "CALL" }, { "from": 6501375957, "to": 6501366312, "type": "CODE" }, { "from": 6501375991, "to": 6501364485, "type": "CODE" }, { "from": 6501375996, "to": 6543271376, "type": "CALL" }, { "from": 6501376026, "to": 6740346544, "type": "CALL" }, { "from": 6501376032, "to": 6501362247, "type": "CODE" }, { "from": 6501376062, "to": 6740346544, "type": "CALL" }, { "from": 6501376068, "to": 6501363115, "type": "CODE" }, { "from": 6501376104, "to": 6740346544, "type": "CALL" }, { "from": 6501376110, "to": 6501357728, "type": "CODE" }, { "from": 6501376140, "to": 6740346544, "type": "CALL" }, { "from": 6501376146, "to": 6501358621, "type": "CODE" }, { "from": 6501376176, "to": 6740346544, "type": "CALL" }, { "from": 6501376182, "to": 6501359284, "type": "CODE" }, { "from": 6501376212, "to": 6740346544, "type": "CALL" }, { "from": 6501376218, "to": 6501358274, "type": "CODE" }, { "from": 6501376248, "to": 6740346544, "type": "CALL" }, { "from": 6501376254, "to": 6501359661, "type": "CODE" }, { "from": 6501376259, "to": 6546093472, "type": "CALL" }, { "from": 6501376264, "to": 6542702416, "type": "CALL" }, { "from": 6501376269, "to": 6546093472, "type": "CALL" }, { "from": 6501376274, "to": 6542702416, "type": "CALL" }, { "from": 6501376304, "to": 6740346544, "type": "CALL" }, { "from": 6501376310, "to": 6501373027, "type": "CODE" }, { "from": 6501376349, "to": 6740346544, "type": "CALL" }, { "from": 6501376355, "to": 6501366909, "type": "CODE" }, { "from": 6501376385, "to": 6740346544, "type": "CALL" }, { "from": 6501376391, "to": 6501374389, "type": "CODE" }, { "from": 6501376421, "to": 6740346544, "type": "CALL" }, { "from": 6501376427, "to": 6501373750, "type": "CODE" }, { "from": 6501376457, "to": 6740346544, "type": "CALL" }, { "from": 6501376463, "to": 6501370319, "type": "CODE" }, { "from": 6501376493, "to": 6740346544, "type": "CALL" }, { "from": 6501376499, "to": 6501368682, "type": "CODE" }, { "from": 6501376529, "to": 6740346544, "type": "CALL" }, { "from": 6501376535, "to": 6501375199, "type": "CODE" }, { "from": 6501376565, "to": 6740346544, "type": "CALL" }, { "from": 6501376571, "to": 6501369102, "type": "CODE" } ], "datarefs": [ { "from": 6501357398, "to": 6742246848, "type": "DATA" }, { "from": 6501357411, "to": 6741126112, "type": "DATA" }, { "from": 6501357420, "to": 6742246856, "type": "DATA" }, { "from": 6501357434, "to": 6723620928, "type": "DATA" }, { "from": 6501357471, "to": 6720303740, "type": "DATA" }, { "from": 6501357489, "to": 6723621520, "type": "DATA" }, { "from": 6501357524, "to": 6723625536, "type": "DATA" }, { "from": 6501357557, "to": 6723621568, "type": "DATA" }, { "from": 6501357593, "to": 6710367816, "type": "DATA" }, { "from": 6501357627, "to": 6708900496, "type": "DATA" }, { "from": 6501357642, "to": 6708923712, "type": "DATA" }, { "from": 6501357698, "to": 6708923824, "type": "DATA" }, { "from": 6501357712, "to": 6742217808, "type": "DATA" }, { "from": 6501357816, "to": 6742246848, "type": "DATA" }, { "from": 6501357825, "to": 6741126112, "type": "DATA" }, { "from": 6501357838, "to": 6742246856, "type": "DATA" }, { "from": 6501357915, "to": 6723620896, "type": "DATA" }, { "from": 6501357985, "to": 6723625521, "type": "DATA" }, { "from": 6501358029, "to": 6742246848, "type": "DATA" }, { "from": 6501358042, "to": 6741126112, "type": "DATA" }, { "from": 6501358051, "to": 6742246856, "type": "DATA" }, { "from": 6501358065, "to": 6723620928, "type": "DATA" }, { "from": 6501358105, "to": 6720303740, "type": "DATA" }, { "from": 6501358126, "to": 6723622128, "type": "DATA" }, { "from": 6501358147, "to": 6710367816, "type": "DATA" }, { "from": 6501358173, "to": 6708900496, "type": "DATA" }, { "from": 6501358188, "to": 6708923712, "type": "DATA" }, { "from": 6501358244, "to": 6708923824, "type": "DATA" }, { "from": 6501358258, "to": 6742217808, "type": "DATA" }, { "from": 6501358300, "to": 6742246848, "type": "DATA" }, { "from": 6501358320, "to": 6741126112, "type": "DATA" }, { "from": 6501358329, "to": 6742246856, "type": "DATA" }, { "from": 6501358343, "to": 6723620928, "type": "DATA" }, { "from": 6501358383, "to": 6720303740, "type": "DATA" }, { "from": 6501358404, "to": 6723622216, "type": "DATA" }, { "from": 6501358435, "to": 6723622264, "type": "DATA" }, { "from": 6501358494, "to": 6710367816, "type": "DATA" }, { "from": 6501358520, "to": 6708900496, "type": "DATA" }, { "from": 6501358535, "to": 6708923712, "type": "DATA" }, { "from": 6501358591, "to": 6708923824, "type": "DATA" }, { "from": 6501358605, "to": 6742217808, "type": "DATA" }, { "from": 6501358959, "to": 6742246848, "type": "DATA" }, { "from": 6501358972, "to": 6741126112, "type": "DATA" }, { "from": 6501358981, "to": 6742246856, "type": "DATA" }, { "from": 6501358995, "to": 6723620928, "type": "DATA" }, { "from": 6501359035, "to": 6720303740, "type": "DATA" }, { "from": 6501359053, "to": 6723622288, "type": "DATA" }, { "from": 6501359087, "to": 6723622368, "type": "DATA" }, { "from": 6501359140, "to": 6710367816, "type": "DATA" }, { "from": 6501359175, "to": 6708900496, "type": "DATA" }, { "from": 6501359190, "to": 6708923712, "type": "DATA" }, { "from": 6501359254, "to": 6708923824, "type": "DATA" }, { "from": 6501359268, "to": 6742217808, "type": "DATA" }, { "from": 6501359362, "to": 6706266448, "type": "DATA" }, { "from": 6501359370, "to": 6723620912, "type": "DATA" }, { "from": 6501359416, "to": 6742246848, "type": "DATA" }, { "from": 6501359429, "to": 6741126112, "type": "DATA" }, { "from": 6501359438, "to": 6742246856, "type": "DATA" }, { "from": 6501359452, "to": 6723620928, "type": "DATA" }, { "from": 6501359492, "to": 6720303740, "type": "DATA" }, { "from": 6501359513, "to": 6723622488, "type": "DATA" }, { "from": 6501359534, "to": 6710367816, "type": "DATA" }, { "from": 6501359560, "to": 6708900496, "type": "DATA" }, { "from": 6501359575, "to": 6708923712, "type": "DATA" }, { "from": 6501359631, "to": 6708923824, "type": "DATA" }, { "from": 6501359645, "to": 6742217808, "type": "DATA" }, { "from": 6501360015, "to": 6501407248, "type": "DATA" }, { "from": 6501360026, "to": 6488537312, "type": "DATA" }, { "from": 6501360037, "to": 6496570832, "type": "DATA" }, { "from": 6501360048, "to": 6501378704, "type": "DATA" }, { "from": 6501360665, "to": 6712687036, "type": "DATA" }, { "from": 6501360789, "to": 6742246848, "type": "DATA" }, { "from": 6501360802, "to": 6741126112, "type": "DATA" }, { "from": 6501361320, "to": 6723625568, "type": "DATA" }, { "from": 6501361532, "to": 6742246848, "type": "DATA" }, { "from": 6501361545, "to": 6741126112, "type": "DATA" }, { "from": 6501361554, "to": 6742246856, "type": "DATA" }, { "from": 6501361571, "to": 6723620928, "type": "DATA" }, { "from": 6501361606, "to": 6720303740, "type": "DATA" }, { "from": 6501361627, "to": 6723621680, "type": "DATA" }, { "from": 6501361659, "to": 6723381692, "type": "DATA" }, { "from": 6501361691, "to": 6728089104, "type": "DATA" }, { "from": 6501361763, "to": 6723621736, "type": "DATA" }, { "from": 6501361799, "to": 6723621664, "type": "DATA" }, { "from": 6501361920, "to": 6723621752, "type": "DATA" }, { "from": 6501361956, "to": 6723621768, "type": "DATA" }, { "from": 6501362099, "to": 6710367816, "type": "DATA" }, { "from": 6501362134, "to": 6708900496, "type": "DATA" }, { "from": 6501362149, "to": 6708923712, "type": "DATA" }, { "from": 6501362208, "to": 6708923824, "type": "DATA" }, { "from": 6501362231, "to": 6742217808, "type": "DATA" }, { "from": 6501362407, "to": 6742246848, "type": "DATA" }, { "from": 6501362420, "to": 6741126112, "type": "DATA" }, { "from": 6501362429, "to": 6742246856, "type": "DATA" }, { "from": 6501362446, "to": 6723620928, "type": "DATA" }, { "from": 6501362481, "to": 6720303740, "type": "DATA" }, { "from": 6501362502, "to": 6723621792, "type": "DATA" }, { "from": 6501362552, "to": 6742246848, "type": "DATA" }, { "from": 6501362565, "to": 6741126112, "type": "DATA" }, { "from": 6501362574, "to": 6742246856, "type": "DATA" }, { "from": 6501362591, "to": 6723620928, "type": "DATA" }, { "from": 6501362626, "to": 6720303740, "type": "DATA" }, { "from": 6501362647, "to": 6723621984, "type": "DATA" }, { "from": 6501362668, "to": 6723622056, "type": "DATA" }, { "from": 6501362695, "to": 6728089104, "type": "DATA" }, { "from": 6501362767, "to": 6723622088, "type": "DATA" }, { "from": 6501362967, "to": 6710367816, "type": "DATA" }, { "from": 6501363002, "to": 6708900496, "type": "DATA" }, { "from": 6501363017, "to": 6708923712, "type": "DATA" }, { "from": 6501363076, "to": 6708923824, "type": "DATA" }, { "from": 6501363099, "to": 6742217808, "type": "DATA" }, { "from": 6501363327, "to": 6742246848, "type": "DATA" }, { "from": 6501363340, "to": 6741126112, "type": "DATA" }, { "from": 6501363349, "to": 6742246856, "type": "DATA" }, { "from": 6501363366, "to": 6723620928, "type": "DATA" }, { "from": 6501363401, "to": 6720303740, "type": "DATA" }, { "from": 6501363422, "to": 6723621872, "type": "DATA" }, { "from": 6501363443, "to": 6723621944, "type": "DATA" }, { "from": 6501366361, "to": 6742246848, "type": "DATA" }, { "from": 6501366382, "to": 6741126112, "type": "DATA" }, { "from": 6501366391, "to": 6742246856, "type": "DATA" }, { "from": 6501366408, "to": 6723620928, "type": "DATA" }, { "from": 6501366443, "to": 6720303740, "type": "DATA" }, { "from": 6501366464, "to": 6723622800, "type": "DATA" }, { "from": 6501366485, "to": 6723622852, "type": "DATA" }, { "from": 6501366624, "to": 6720260796, "type": "DATA" }, { "from": 6501366685, "to": 6723622864, "type": "DATA" }, { "from": 6501366753, "to": 6710367816, "type": "DATA" }, { "from": 6501366788, "to": 6708900496, "type": "DATA" }, { "from": 6501366803, "to": 6708923712, "type": "DATA" }, { "from": 6501366870, "to": 6708923824, "type": "DATA" }, { "from": 6501366893, "to": 6742217808, "type": "DATA" }, { "from": 6501367929, "to": 6742246848, "type": "DATA" }, { "from": 6501367938, "to": 6741126112, "type": "DATA" }, { "from": 6501367951, "to": 6742246856, "type": "DATA" }, { "from": 6501368324, "to": 6714604800, "type": "DATA" }, { "from": 6501368333, "to": 6723620904, "type": "DATA" }, { "from": 6501368342, "to": 6717630184, "type": "DATA" }, { "from": 6501368351, "to": 6706266416, "type": "DATA" }, { "from": 6501368360, "to": 6706288624, "type": "DATA" }, { "from": 6501368369, "to": 6716133880, "type": "DATA" }, { "from": 6501368406, "to": 6742246848, "type": "DATA" }, { "from": 6501368419, "to": 6741126112, "type": "DATA" }, { "from": 6501368428, "to": 6742246856, "type": "DATA" }, { "from": 6501368442, "to": 6723620928, "type": "DATA" }, { "from": 6501368482, "to": 6720303740, "type": "DATA" }, { "from": 6501368503, "to": 6723622872, "type": "DATA" }, { "from": 6501368534, "to": 6723622904, "type": "DATA" }, { "from": 6501368555, "to": 6710367816, "type": "DATA" }, { "from": 6501368581, "to": 6708900496, "type": "DATA" }, { "from": 6501368596, "to": 6708923712, "type": "DATA" }, { "from": 6501368652, "to": 6708923824, "type": "DATA" }, { "from": 6501368666, "to": 6742217808, "type": "DATA" }, { "from": 6501368847, "to": 6742246848, "type": "DATA" }, { "from": 6501368860, "to": 6741126112, "type": "DATA" }, { "from": 6501368869, "to": 6742246856, "type": "DATA" }, { "from": 6501368883, "to": 6723620928, "type": "DATA" }, { "from": 6501368923, "to": 6720303740, "type": "DATA" }, { "from": 6501368944, "to": 6723622936, "type": "DATA" }, { "from": 6501368975, "to": 6710367816, "type": "DATA" }, { "from": 6501369001, "to": 6708900496, "type": "DATA" }, { "from": 6501369016, "to": 6708923712, "type": "DATA" }, { "from": 6501369072, "to": 6708923824, "type": "DATA" }, { "from": 6501369086, "to": 6742217808, "type": "DATA" }, { "from": 6501369583, "to": 6741126408, "type": "DATA" }, { "from": 6501369742, "to": 6461708272, "type": "DATA" }, { "from": 6501369764, "to": 6741850168, "type": "DATA" }, { "from": 6501369802, "to": 6461708240, "type": "DATA" }, { "from": 6501369873, "to": 6523219744, "type": "DATA" }, { "from": 6501370037, "to": 6742246848, "type": "DATA" }, { "from": 6501370050, "to": 6741126112, "type": "DATA" }, { "from": 6501370059, "to": 6742246856, "type": "DATA" }, { "from": 6501370073, "to": 6723620928, "type": "DATA" }, { "from": 6501370113, "to": 6720303740, "type": "DATA" }, { "from": 6501370134, "to": 6723622648, "type": "DATA" }, { "from": 6501370171, "to": 6723622680, "type": "DATA" }, { "from": 6501370192, "to": 6710367816, "type": "DATA" }, { "from": 6501370218, "to": 6708900496, "type": "DATA" }, { "from": 6501370233, "to": 6708923712, "type": "DATA" }, { "from": 6501370289, "to": 6708923824, "type": "DATA" }, { "from": 6501370303, "to": 6742217808, "type": "DATA" }, { "from": 6501370421, "to": 6712109264, "type": "DATA" }, { "from": 6501370698, "to": 6720260020, "type": "DATA" }, { "from": 6501370835, "to": 6741126408, "type": "DATA" }, { "from": 6501370866, "to": 6741126408, "type": "DATA" }, { "from": 6501371151, "to": 6741126408, "type": "DATA" }, { "from": 6501372514, "to": 6723620928, "type": "DATA" }, { "from": 6501372551, "to": 6720303740, "type": "DATA" }, { "from": 6501372569, "to": 6723621584, "type": "DATA" }, { "from": 6501372590, "to": 6723621652, "type": "DATA" }, { "from": 6501372630, "to": 6728089104, "type": "DATA" }, { "from": 6501372705, "to": 6723621664, "type": "DATA" }, { "from": 6501372892, "to": 6710367816, "type": "DATA" }, { "from": 6501372926, "to": 6708900496, "type": "DATA" }, { "from": 6501372941, "to": 6708923712, "type": "DATA" }, { "from": 6501372997, "to": 6708923824, "type": "DATA" }, { "from": 6501373011, "to": 6742217808, "type": "DATA" }, { "from": 6501373380, "to": 6742246848, "type": "DATA" }, { "from": 6501373402, "to": 6741126112, "type": "DATA" }, { "from": 6501373411, "to": 6742246856, "type": "DATA" }, { "from": 6501373425, "to": 6723620928, "type": "DATA" }, { "from": 6501373462, "to": 6720303740, "type": "DATA" }, { "from": 6501373480, "to": 6723622384, "type": "DATA" }, { "from": 6501373515, "to": 6723625536, "type": "DATA" }, { "from": 6501373548, "to": 6723622456, "type": "DATA" }, { "from": 6501373615, "to": 6710367816, "type": "DATA" }, { "from": 6501373649, "to": 6708900496, "type": "DATA" }, { "from": 6501373664, "to": 6708923712, "type": "DATA" }, { "from": 6501373720, "to": 6708923824, "type": "DATA" }, { "from": 6501373734, "to": 6742217808, "type": "DATA" }, { "from": 6501373783, "to": 6741832416, "type": "DATA" }, { "from": 6501373850, "to": 6741126408, "type": "DATA" }, { "from": 6501373886, "to": 6457993728, "type": "DATA" }, { "from": 6501373897, "to": 6488660704, "type": "DATA" }, { "from": 6501373908, "to": 6511490512, "type": "DATA" }, { "from": 6501373919, "to": 6501378304, "type": "DATA" }, { "from": 6501373966, "to": 6723622472, "type": "DATA" }, { "from": 6501373973, "to": 6723620928, "type": "DATA" }, { "from": 6501374091, "to": 6742246856, "type": "DATA" }, { "from": 6501374108, "to": 6723620928, "type": "DATA" }, { "from": 6501374143, "to": 6720303740, "type": "DATA" }, { "from": 6501374164, "to": 6723625392, "type": "DATA" }, { "from": 6501374185, "to": 6723625448, "type": "DATA" }, { "from": 6501374241, "to": 6710367816, "type": "DATA" }, { "from": 6501374276, "to": 6708900496, "type": "DATA" }, { "from": 6501374291, "to": 6708923712, "type": "DATA" }, { "from": 6501374350, "to": 6708923824, "type": "DATA" }, { "from": 6501374373, "to": 6742217808, "type": "DATA" }, { "from": 6501374610, "to": 6717673432, "type": "DATA" }, { "from": 6501374622, "to": 6717673434, "type": "DATA" }, { "from": 6501374893, "to": 6723620928, "type": "DATA" }, { "from": 6501374928, "to": 6720303740, "type": "DATA" }, { "from": 6501374949, "to": 6723622704, "type": "DATA" }, { "from": 6501374970, "to": 6723622772, "type": "DATA" }, { "from": 6501375020, "to": 6723622784, "type": "DATA" }, { "from": 6501375046, "to": 6710367816, "type": "DATA" }, { "from": 6501375086, "to": 6708900496, "type": "DATA" }, { "from": 6501375101, "to": 6708923712, "type": "DATA" }, { "from": 6501375160, "to": 6708923824, "type": "DATA" }, { "from": 6501375183, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190c25040", "offset": 281166912, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_omnibox\\tab_omnibox_api.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c25290", "offset": 281167504, "ascii": "TabOmniboxRequest::ProcessResults: phase=", "wide": null }, { "va": "0x190c252c0", "offset": 281167552, "ascii": " result_count=", "wide": null }, { "va": "0x190c254f0", "offset": 281168112, "ascii": "TabOmniboxRequest::ProcessResults: cancelling async phase due to quality local results", "wide": null }, { "va": "0x190c25548", "offset": 281168200, "ascii": "TabOmniboxRequest::ProcessResults: has_more=", "wide": null }, { "va": "0x190c25578", "offset": 281168248, "ascii": " controller_done=", "wide": null }, { "va": "0x190c25590", "offset": 281168272, "ascii": "TabOmniboxRequest::ProcessResults: request completed, final suggestions count=", "wide": null }, { "va": "0x190c255e0", "offset": 281168352, "ascii": " request_id=", "wide": null }, { "va": "0x190c25658", "offset": 281168472, "ascii": "TabOmniboxRequest::ProcessResults: debouncing async results", "wide": null }, { "va": "0x1901b79bc", "offset": 270233020, "ascii": "file", "wide": null }, { "va": "0x190c25330", "offset": 281167664, "ascii": "TabOmniboxRequest::ProcessResults: processing match ", "wide": null }, { "va": "0x190bea9bc", "offset": 280927676, "ascii": " type=", "wide": null }, { "va": "0x190c25368", "offset": 281167720, "ascii": " swap_content=", "wide": null }, { "va": "0x190c25320", "offset": 281167648, "ascii": " content=", "wide": null }, { "va": "0x190c25378", "offset": 281167736, "ascii": " description=", "wide": null }, { "va": "0x190c25388", "offset": 281167752, "ascii": " iconUrl=", "wide": null }, { "va": "0x190c253a0", "offset": 281167776, "ascii": "TabOmniboxRequest::ProcessResults: excluding TILE_MOST_VISITED_SITE match", "wide": null }, { "va": "0x190c25460", "offset": 281167968, "ascii": "TabOmniboxRequest::ProcessResults: excluding SEARCH_SUGGEST type match ", "wide": null }, { "va": "0x190c254a8", "offset": 281168040, "ascii": "because result contains ", "wide": null }, { "va": "0x190c254c8", "offset": 281168072, "ascii": " match - search_content=", "wide": null }, { "va": "0x190c253f0", "offset": 281167856, "ascii": "TabOmniboxRequest::ProcessResults: excluding SEARCH_SUGGEST_ENTITY ", "wide": null }, { "va": "0x190c25438", "offset": 281167928, "ascii": "due to duplicate with same content=", "wide": null }, { "va": "0x190c25790", "offset": 281168784, "ascii": "MarkOpenTabSuggestions: found matching open tab - ", "wide": null }, { "va": "0x190c257c4", "offset": 281168836, "ascii": "title=", "wide": null }, { "va": "0x1908f0abc", "offset": 277806780, "ascii": " url=", "wide": null }, { "va": "0x190c257d0", "offset": 281168848, "ascii": " score=", "wide": null }, { "va": "0x190c257d8", "offset": 281168856, "ascii": "MarkOpenTabSuggestions: added ", "wide": null }, { "va": "0x190c257f8", "offset": 281168888, "ascii": " new open tab suggestions", "wide": null }, { "va": "0x190c25818", "offset": 281168920, "ascii": "MarkOpenTabSuggestions: trimmed suggestions to ", "wide": null }, { "va": "0x190c256f8", "offset": 281168632, "ascii": "MarkOpenTabSuggestions: found ", "wide": null }, { "va": "0x190c25718", "offset": 281168664, "ascii": " open tabs", "wide": null }, { "va": "0x190c252d0", "offset": 281167568, "ascii": "TabOmniboxRequest::ProcessResults: found quality local result - ", "wide": null }, { "va": "0x190c25314", "offset": 281167636, "ascii": "type=", "wide": null }, { "va": "0x190c255f0", "offset": 281168368, "ascii": "TabOmniboxRequest::ProcessResults: skipping identical results, phase=", "wide": null }, { "va": "0x190c25638", "offset": 281168440, "ascii": " last_phase=", "wide": null }, { "va": "0x190c25648", "offset": 281168456, "ascii": "ProcessResults", "wide": null }, { "va": "0x190c261b0", "offset": 281171376, "ascii": "ShouldConvertUrlToSearch: user input contains spaces, ", "wide": null }, { "va": "0x190c261e8", "offset": 281171432, "ascii": "converting to search. input=", "wide": null }, { "va": "0x190678fd8", "offset": 275219416, "ascii": "://", "wide": null }, { "va": "0x190c25730", "offset": 281168688, "ascii": "MarkOpenTabSuggestions: marked existing suggestion as open tab - ", "wide": null }, { "va": "0x190c25774", "offset": 281168756, "ascii": "url=", "wide": null }, { "va": "0x190c25780", "offset": 281168768, "ascii": " tab_id=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 185670 }, { "label": "p-omnibox-search-engine", "file": "rea-p-omnibox-search-engine.json", "file_sha256": "cd47925cd07b59e920b0a5469bea6ae4f04874025b7a867a213653cf43fb99d4", "status": "completed", "evidence_id": "ev_2146415e26010271e149990efb67a7ad1f5dc429839c037f8655b2d2107da86d", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183838900;pdgo @ 0x183838900;afij @ 0x183838900", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183838900", "size": 3146, "nargs": 2, "signature": "fcn.183838900(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6501402963, "to": 6445650832, "type": "CALL" }, { "from": 6501402992, "to": 6524031184, "type": "CALL" }, { "from": 6501403013, "to": 6524031184, "type": "CALL" }, { "from": 6501403032, "to": 6445656528, "type": "CALL" }, { "from": 6501403102, "to": 6511512544, "type": "CALL" }, { "from": 6501403156, "to": 6511975280, "type": "CALL" }, { "from": 6501403164, "to": 6518967168, "type": "CALL" }, { "from": 6501403197, "to": 6536348800, "type": "CALL" }, { "from": 6501403285, "to": 6445650832, "type": "CALL" }, { "from": 6501403314, "to": 6524031184, "type": "CALL" }, { "from": 6501403335, "to": 6524031184, "type": "CALL" }, { "from": 6501403354, "to": 6445656528, "type": "CALL" }, { "from": 6501403424, "to": 6511512544, "type": "CALL" }, { "from": 6501403478, "to": 6511975280, "type": "CALL" }, { "from": 6501403486, "to": 6518967168, "type": "CALL" }, { "from": 6501403496, "to": 6542067384, "type": "CALL" }, { "from": 6501403614, "to": 6501404345, "type": "CODE" }, { "from": 6501403626, "to": 6501403230, "type": "CODE" }, { "from": 6501403674, "to": 6445650832, "type": "CALL" }, { "from": 6501403703, "to": 6524031184, "type": "CALL" }, { "from": 6501403724, "to": 6524031184, "type": "CALL" }, { "from": 6501403743, "to": 6445656528, "type": "CALL" }, { "from": 6501403813, "to": 6511512544, "type": "CALL" }, { "from": 6501403867, "to": 6511975280, "type": "CALL" }, { "from": 6501403875, "to": 6518967168, "type": "CALL" }, { "from": 6501403962, "to": 6501404345, "type": "CODE" }, { "from": 6501404010, "to": 6445650832, "type": "CALL" }, { "from": 6501404039, "to": 6524031184, "type": "CALL" }, { "from": 6501404060, "to": 6524031184, "type": "CALL" }, { "from": 6501404079, "to": 6445656528, "type": "CALL" }, { "from": 6501404149, "to": 6511512544, "type": "CALL" }, { "from": 6501404203, "to": 6511975280, "type": "CALL" }, { "from": 6501404211, "to": 6518967168, "type": "CALL" }, { "from": 6501404221, "to": 6542067384, "type": "CALL" }, { "from": 6501404351, "to": 6587959616, "type": "CALL" }, { "from": 6501404396, "to": 6587967968, "type": "CALL" }, { "from": 6501404471, "to": 6459600352, "type": "CALL" }, { "from": 6501404495, "to": 6501404511, "type": "CODE" }, { "from": 6501404534, "to": 6534927440, "type": "CALL" }, { "from": 6501404566, "to": 6511512544, "type": "CALL" }, { "from": 6501404660, "to": 6445650832, "type": "CALL" }, { "from": 6501404689, "to": 6524031184, "type": "CALL" }, { "from": 6501404710, "to": 6524031184, "type": "CALL" }, { "from": 6501404740, "to": 6524031184, "type": "CALL" }, { "from": 6501404759, "to": 6445656528, "type": "CALL" }, { "from": 6501404830, "to": 6511512544, "type": "CALL" }, { "from": 6501404884, "to": 6511975280, "type": "CALL" }, { "from": 6501404892, "to": 6518967168, "type": "CALL" }, { "from": 6501404900, "to": 6459600352, "type": "CALL" }, { "from": 6501404932, "to": 6501404940, "type": "CODE" }, { "from": 6501404963, "to": 6534927440, "type": "CALL" }, { "from": 6501405000, "to": 6511512544, "type": "CALL" }, { "from": 6501405032, "to": 6459600352, "type": "CALL" }, { "from": 6501405055, "to": 6522230240, "type": "CALL" }, { "from": 6501405102, "to": 6501405169, "type": "CODE" }, { "from": 6501405111, "to": 6511729936, "type": "CALL" }, { "from": 6501405116, "to": 6501405169, "type": "CODE" }, { "from": 6501405134, "to": 6501405166, "type": "CODE" }, { "from": 6501405150, "to": 6501405240, "type": "CODE" }, { "from": 6501405172, "to": 6459600352, "type": "CALL" }, { "from": 6501405235, "to": 6511513840, "type": "CALL" }, { "from": 6501405251, "to": 6459600352, "type": "CALL" }, { "from": 6501405334, "to": 6445650832, "type": "CALL" }, { "from": 6501405363, "to": 6524031184, "type": "CALL" }, { "from": 6501405384, "to": 6524031184, "type": "CALL" }, { "from": 6501405403, "to": 6445656528, "type": "CALL" }, { "from": 6501405473, "to": 6511512544, "type": "CALL" }, { "from": 6501405527, "to": 6511975280, "type": "CALL" }, { "from": 6501405535, "to": 6518967168, "type": "CALL" }, { "from": 6501405571, "to": 6457900480, "type": "CALL" }, { "from": 6501405595, "to": 6502372192, "type": "CALL" }, { "from": 6501405606, "to": 6462063728, "type": "CALL" }, { "from": 6501405614, "to": 6537217088, "type": "CALL" }, { "from": 6501405628, "to": 6587962400, "type": "CALL" }, { "from": 6501405677, "to": 6587967968, "type": "CALL" }, { "from": 6501405693, "to": 6502372064, "type": "CALL" }, { "from": 6501405698, "to": 6501404409, "type": "CODE" }, { "from": 6501405737, "to": 6501405248, "type": "CODE" }, { "from": 6501405745, "to": 6511729936, "type": "CALL" }, { "from": 6501405750, "to": 6501405248, "type": "CODE" }, { "from": 6501405763, "to": 6501405772, "type": "CODE" }, { "from": 6501405775, "to": 6511730288, "type": "CALL" }, { "from": 6501405780, "to": 6501405169, "type": "CODE" }, { "from": 6501405798, "to": 6511730288, "type": "CALL" }, { "from": 6501405803, "to": 6501405248, "type": "CODE" }, { "from": 6501405835, "to": 6740346544, "type": "CALL" }, { "from": 6501405841, "to": 6501403145, "type": "CODE" }, { "from": 6501405871, "to": 6740346544, "type": "CALL" }, { "from": 6501405877, "to": 6501404192, "type": "CODE" }, { "from": 6501405907, "to": 6740346544, "type": "CALL" }, { "from": 6501405913, "to": 6501403856, "type": "CODE" }, { "from": 6501405943, "to": 6740346544, "type": "CALL" }, { "from": 6501405949, "to": 6501403467, "type": "CODE" }, { "from": 6501405979, "to": 6740346544, "type": "CALL" }, { "from": 6501405985, "to": 6501404873, "type": "CODE" }, { "from": 6501406015, "to": 6740346544, "type": "CALL" }, { "from": 6501406021, "to": 6501405516, "type": "CODE" } ], "datarefs": [ { "from": 6501402900, "to": 6742246848, "type": "DATA" }, { "from": 6501402913, "to": 6741126112, "type": "DATA" }, { "from": 6501402922, "to": 6742246856, "type": "DATA" }, { "from": 6501402936, "to": 6723620928, "type": "DATA" }, { "from": 6501402976, "to": 6720303740, "type": "DATA" }, { "from": 6501402997, "to": 6723624744, "type": "DATA" }, { "from": 6501403018, "to": 6710367816, "type": "DATA" }, { "from": 6501403044, "to": 6708900496, "type": "DATA" }, { "from": 6501403059, "to": 6708923712, "type": "DATA" }, { "from": 6501403115, "to": 6708923824, "type": "DATA" }, { "from": 6501403129, "to": 6742217808, "type": "DATA" }, { "from": 6501403242, "to": 6742246848, "type": "DATA" }, { "from": 6501403255, "to": 6723620928, "type": "DATA" }, { "from": 6501403298, "to": 6720303740, "type": "DATA" }, { "from": 6501403319, "to": 6723625024, "type": "DATA" }, { "from": 6501403340, "to": 6710367816, "type": "DATA" }, { "from": 6501403366, "to": 6708900496, "type": "DATA" }, { "from": 6501403381, "to": 6708923712, "type": "DATA" }, { "from": 6501403437, "to": 6708923824, "type": "DATA" }, { "from": 6501403451, "to": 6742217808, "type": "DATA" }, { "from": 6501403552, "to": 6723625104, "type": "DATA" }, { "from": 6501403581, "to": 6723625114, "type": "DATA" }, { "from": 6501403592, "to": 6723625104, "type": "DATA" }, { "from": 6501403631, "to": 6742246848, "type": "DATA" }, { "from": 6501403644, "to": 6723620928, "type": "DATA" }, { "from": 6501403687, "to": 6720303740, "type": "DATA" }, { "from": 6501403708, "to": 6723624816, "type": "DATA" }, { "from": 6501403729, "to": 6710367816, "type": "DATA" }, { "from": 6501403755, "to": 6708900496, "type": "DATA" }, { "from": 6501403770, "to": 6708923712, "type": "DATA" }, { "from": 6501403826, "to": 6708923824, "type": "DATA" }, { "from": 6501403840, "to": 6742217808, "type": "DATA" }, { "from": 6501403892, "to": 6722947088, "type": "DATA" }, { "from": 6501403927, "to": 6722947101, "type": "DATA" }, { "from": 6501403946, "to": 6722947088, "type": "DATA" }, { "from": 6501403967, "to": 6742246848, "type": "DATA" }, { "from": 6501403980, "to": 6723620928, "type": "DATA" }, { "from": 6501404023, "to": 6720303740, "type": "DATA" }, { "from": 6501404044, "to": 6723624896, "type": "DATA" }, { "from": 6501404065, "to": 6710367816, "type": "DATA" }, { "from": 6501404091, "to": 6708900496, "type": "DATA" }, { "from": 6501404106, "to": 6708923712, "type": "DATA" }, { "from": 6501404162, "to": 6708923824, "type": "DATA" }, { "from": 6501404176, "to": 6742217808, "type": "DATA" }, { "from": 6501404277, "to": 6723624984, "type": "DATA" }, { "from": 6501404306, "to": 6723625000, "type": "DATA" }, { "from": 6501404317, "to": 6723624984, "type": "DATA" }, { "from": 6501404364, "to": 6587963136, "type": "DATA" }, { "from": 6501404389, "to": 6545109024, "type": "DATA" }, { "from": 6501404597, "to": 6742246848, "type": "DATA" }, { "from": 6501404610, "to": 6741126112, "type": "DATA" }, { "from": 6501404619, "to": 6742246856, "type": "DATA" }, { "from": 6501404633, "to": 6723620928, "type": "DATA" }, { "from": 6501404673, "to": 6720303740, "type": "DATA" }, { "from": 6501404694, "to": 6723625136, "type": "DATA" }, { "from": 6501404745, "to": 6710367816, "type": "DATA" }, { "from": 6501404771, "to": 6708900496, "type": "DATA" }, { "from": 6501404786, "to": 6708923712, "type": "DATA" }, { "from": 6501404843, "to": 6708923824, "type": "DATA" }, { "from": 6501404857, "to": 6742217808, "type": "DATA" }, { "from": 6501405271, "to": 6742246848, "type": "DATA" }, { "from": 6501405284, "to": 6741126112, "type": "DATA" }, { "from": 6501405293, "to": 6742246856, "type": "DATA" }, { "from": 6501405307, "to": 6723620928, "type": "DATA" }, { "from": 6501405347, "to": 6720303740, "type": "DATA" }, { "from": 6501405368, "to": 6723625200, "type": "DATA" }, { "from": 6501405389, "to": 6710367816, "type": "DATA" }, { "from": 6501405415, "to": 6708900496, "type": "DATA" }, { "from": 6501405430, "to": 6708923712, "type": "DATA" }, { "from": 6501405486, "to": 6708923824, "type": "DATA" }, { "from": 6501405500, "to": 6742217808, "type": "DATA" }, { "from": 6501405644, "to": 6587963136, "type": "DATA" }, { "from": 6501405662, "to": 6545109024, "type": "DATA" } ] }, "strings": [ { "va": "0x190c25040", "offset": 281166912, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_omnibox\\tab_omnibox_api.cc", "wide": null }, { "va": "0x1908fb27c", "offset": 277849724, "ascii": "[TAB] ", "wide": null }, { "va": "0x190c25f28", "offset": 281170728, "ascii": "TabOmniboxGetDefaultSearchEngineFunction::Run: function called", "wide": null }, { "va": "0x190c26040", "offset": 281171008, "ascii": "TabOmniboxGetDefaultSearchEngineFunction::Run: no default search provider", "wide": null }, { "va": "0x190c26090", "offset": 281171088, "ascii": "No default search provider", "wide": null }, { "va": "0x190c2609a", "offset": 281171098, "ascii": " search provider", "wide": null }, { "va": "0x190c25f70", "offset": 281170800, "ascii": "TabOmniboxGetDefaultSearchEngineFunction::Run: profile not available", "wide": null }, { "va": "0x190b80810", "offset": 280493072, "ascii": "Profile not available", "wide": null }, { "va": "0x190b8081d", "offset": 280493085, "ascii": "vailable", "wide": null }, { "va": "0x190c25fc0", "offset": 281170880, "ascii": "TabOmniboxGetDefaultSearchEngineFunction::Run: template URL service not available", "wide": null }, { "va": "0x190c26018", "offset": 281170968, "ascii": "Template URL service not available", "wide": null }, { "va": "0x190c26028", "offset": 281170984, "ascii": "vice not available", "wide": null }, { "va": "0x190c260b0", "offset": 281171120, "ascii": "TabOmniboxGetDefaultSearchEngineFunction::Run: name=", "wide": null }, { "va": "0x190c260f0", "offset": 281171184, "ascii": "TabOmniboxGetDefaultSearchEngineFunction::Run: returning search engine info", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 26721 }, { "label": "p-organize-controller-result", "file": "rea-p-organize-controller-result.json", "file_sha256": "8f8d9e7ca371bed1999670b4796b03f165933259cb93d9cd2c366896bb11eab3", "status": "completed", "evidence_id": "ev_a78a1f59a6144e77f1461ab0c729811c54843f63593cd6a14ad38bff44a269b6", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1835fe440;pdgo @ 0x1835fe440;afij @ 0x1835fe440", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1835fe440", "size": 1899, "nargs": 4, "signature": "fcn.1835fe440(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6499067055, "to": 6512953824, "type": "CALL" }, { "from": 6499067080, "to": 6499070192, "type": "CALL" }, { "from": 6499067085, "to": 6499067822, "type": "CODE" }, { "from": 6499067111, "to": 6522894224, "type": "CALL" }, { "from": 6499067186, "to": 6499068579, "type": "CODE" }, { "from": 6499067195, "to": 6499111744, "type": "CALL" }, { "from": 6499067265, "to": 6499098608, "type": "CALL" }, { "from": 6499067277, "to": 6522894224, "type": "CALL" }, { "from": 6499067282, "to": 6499067428, "type": "CODE" }, { "from": 6499067299, "to": 6499111744, "type": "CALL" }, { "from": 6499067333, "to": 6499110400, "type": "CALL" }, { "from": 6499067366, "to": 6499068848, "type": "CALL" }, { "from": 6499067403, "to": 6522894224, "type": "CALL" }, { "from": 6499067415, "to": 6522894224, "type": "CALL" }, { "from": 6499067423, "to": 6499098992, "type": "CALL" }, { "from": 6499067431, "to": 6499099376, "type": "CALL" }, { "from": 6499067436, "to": 6499067822, "type": "CODE" }, { "from": 6499067456, "to": 6511513840, "type": "CALL" }, { "from": 6499067461, "to": 6499067497, "type": "CODE" }, { "from": 6499067623, "to": 6499068347, "type": "CODE" }, { "from": 6499067656, "to": 6499067748, "type": "CODE" }, { "from": 6499067670, "to": 6499111744, "type": "CALL" }, { "from": 6499067771, "to": 6499110400, "type": "CALL" }, { "from": 6499067817, "to": 6511512544, "type": "CALL" }, { "from": 6499067825, "to": 6499110400, "type": "CALL" }, { "from": 6499067853, "to": 6511512544, "type": "CALL" }, { "from": 6499067944, "to": 6445650832, "type": "CALL" }, { "from": 6499067970, "to": 6524031184, "type": "CALL" }, { "from": 6499067991, "to": 6524031184, "type": "CALL" }, { "from": 6499068006, "to": 6446762512, "type": "CALL" }, { "from": 6499068027, "to": 6524031184, "type": "CALL" }, { "from": 6499068055, "to": 6499068068, "type": "CODE" }, { "from": 6499068071, "to": 6542435920, "type": "CALL" }, { "from": 6499068085, "to": 6524031184, "type": "CALL" }, { "from": 6499068106, "to": 6524031184, "type": "CALL" }, { "from": 6499068116, "to": 6451143232, "type": "CALL" }, { "from": 6499068142, "to": 6445656528, "type": "CALL" }, { "from": 6499068213, "to": 6511512544, "type": "CALL" }, { "from": 6499068267, "to": 6511975280, "type": "CALL" }, { "from": 6499068275, "to": 6518967168, "type": "CALL" }, { "from": 6499068283, "to": 6499067822, "type": "CODE" }, { "from": 6499068327, "to": 6511512544, "type": "CALL" }, { "from": 6499068386, "to": 6499068429, "type": "CODE" }, { "from": 6499068411, "to": 6511512544, "type": "CALL" }, { "from": 6499068472, "to": 6511733920, "type": "CALL" }, { "from": 6499068483, "to": 6531082000, "type": "CALL" }, { "from": 6499068515, "to": 6511733920, "type": "CALL" }, { "from": 6499068527, "to": 6499068388, "type": "CODE" }, { "from": 6499068561, "to": 6511512544, "type": "CALL" }, { "from": 6499068615, "to": 6531082000, "type": "CALL" }, { "from": 6499068647, "to": 6511733920, "type": "CALL" }, { "from": 6499068672, "to": 6511512544, "type": "CALL" }, { "from": 6499068693, "to": 6499068726, "type": "CODE" }, { "from": 6499068708, "to": 6511512544, "type": "CALL" }, { "from": 6499068738, "to": 6511733920, "type": "CALL" }, { "from": 6499068759, "to": 6531082000, "type": "CALL" }, { "from": 6499068791, "to": 6511733920, "type": "CALL" }, { "from": 6499068803, "to": 6499068695, "type": "CODE" }, { "from": 6499068832, "to": 6740346544, "type": "CALL" }, { "from": 6499068838, "to": 6499068256, "type": "CODE" } ], "datarefs": [ { "from": 6499067048, "to": 6723044728, "type": "DATA" }, { "from": 6499067179, "to": 6712107188, "type": "DATA" }, { "from": 6499067338, "to": 6742171928, "type": "DATA" }, { "from": 6499067347, "to": 6742171928, "type": "DATA" }, { "from": 6499067616, "to": 6712107188, "type": "DATA" }, { "from": 6499067649, "to": 6742171928, "type": "DATA" }, { "from": 6499067741, "to": 6742171928, "type": "DATA" }, { "from": 6499067755, "to": 6742171928, "type": "DATA" }, { "from": 6499067886, "to": 6742246848, "type": "DATA" }, { "from": 6499067895, "to": 6741126112, "type": "DATA" }, { "from": 6499067904, "to": 6742246856, "type": "DATA" }, { "from": 6499067917, "to": 6723254800, "type": "DATA" }, { "from": 6499067957, "to": 6723254944, "type": "DATA" }, { "from": 6499067975, "to": 6723254968, "type": "DATA" }, { "from": 6499068011, "to": 6723255008, "type": "DATA" }, { "from": 6499068048, "to": 6712266856, "type": "DATA" }, { "from": 6499068057, "to": 6723257336, "type": "DATA" }, { "from": 6499068090, "to": 6723255016, "type": "DATA" }, { "from": 6499068121, "to": 6710367816, "type": "DATA" }, { "from": 6499068155, "to": 6708900496, "type": "DATA" }, { "from": 6499068170, "to": 6708923712, "type": "DATA" }, { "from": 6499068226, "to": 6708923824, "type": "DATA" }, { "from": 6499068240, "to": 6742217808, "type": "DATA" } ] }, "strings": [ { "va": "0x190bcba10", "offset": 280800784, "ascii": "..\\..\\chrome\\browser\\ui\\tabs\\tab_organize_controller.cc", "wide": null }, { "va": "0x190bcbaa0", "offset": 280800928, "ascii": "[TAB_ORGANIZE_PERF]", "wide": null }, { "va": "0x190bcbab8", "offset": 280800952, "ascii": " stale_response_ignored request_id=", "wide": null }, { "va": "0x190bcbae0", "offset": 280800992, "ascii": " state=", "wide": null }, { "va": "0x190151068", "offset": 269812840, "ascii": "Unknown", "wide": null }, { "va": "0x190bcbae8", "offset": 280801000, "ascii": " success=", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 18555 }, { "label": "p-organize-run", "file": "rea-p-organize-run.json", "file_sha256": "32356d0b82b50ea08bf47c7032d83f38cd5e2e770312593e50916c0307e985f0", "status": "completed", "evidence_id": "ev_78572e5af7cb9b973cca6d364cef0fc8ccd22a71b737eb6c4000c8622a2f0e06", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x18383d0f0;pdgo @ 0x18383d0f0;afij @ 0x18383d0f0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x18383d0f0", "size": 1901, "nargs": 3, "signature": "fcn.18383d0f0(int64_t arg1, int64_t arg2, int64_t arg_280h);", "callrefs": [ { "from": 6501421398, "to": 6502355072, "type": "CALL" }, { "from": 6501421559, "to": 6501422649, "type": "CODE" }, { "from": 6501421622, "to": 6445650832, "type": "CALL" }, { "from": 6501421648, "to": 6524031184, "type": "CALL" }, { "from": 6501421656, "to": 6447366432, "type": "CALL" }, { "from": 6501421666, "to": 6542067384, "type": "CALL" }, { "from": 6501421809, "to": 6587959616, "type": "CALL" }, { "from": 6501421823, "to": 6587960272, "type": "CALL" }, { "from": 6501421828, "to": 6501421849, "type": "CODE" }, { "from": 6501421833, "to": 6587960816, "type": "CALL" }, { "from": 6501421844, "to": 6587960160, "type": "CALL" }, { "from": 6501421905, "to": 6511512544, "type": "CALL" }, { "from": 6501421929, "to": 6502357328, "type": "CALL" }, { "from": 6501422069, "to": 6499066944, "type": "CALL" }, { "from": 6501422097, "to": 6590114256, "type": "CALL" }, { "from": 6501422111, "to": 6587960272, "type": "CALL" }, { "from": 6501422119, "to": 6499110400, "type": "CALL" }, { "from": 6501422124, "to": 6501421849, "type": "CODE" }, { "from": 6501422203, "to": 6501422358, "type": "CODE" }, { "from": 6501422232, "to": 6511513840, "type": "CALL" }, { "from": 6501422237, "to": 6501422358, "type": "CODE" }, { "from": 6501422244, "to": 6542067384, "type": "CALL" }, { "from": 6501422392, "to": 6511513840, "type": "CALL" }, { "from": 6501422397, "to": 6501422431, "type": "CODE" }, { "from": 6501422480, "to": 6499066944, "type": "CALL" }, { "from": 6501422508, "to": 6590114256, "type": "CALL" }, { "from": 6501422522, "to": 6587960272, "type": "CALL" }, { "from": 6501422530, "to": 6499110400, "type": "CALL" }, { "from": 6501422575, "to": 6511512544, "type": "CALL" }, { "from": 6501422580, "to": 6501421849, "type": "CODE" }, { "from": 6501422595, "to": 6511513840, "type": "CALL" }, { "from": 6501422600, "to": 6501422710, "type": "CODE" }, { "from": 6501422631, "to": 6511512544, "type": "CALL" }, { "from": 6501422771, "to": 6542067384, "type": "CALL" }, { "from": 6501422803, "to": 6542436672, "type": "CALL" }, { "from": 6501422921, "to": 6531082000, "type": "CALL" }, { "from": 6501422959, "to": 6511733920, "type": "CALL" }, { "from": 6501422990, "to": 6511512544, "type": "CALL" }, { "from": 6501423011, "to": 6501423047, "type": "CODE" }, { "from": 6501423029, "to": 6511512544, "type": "CALL" }, { "from": 6501423063, "to": 6511733920, "type": "CALL" }, { "from": 6501423087, "to": 6531082000, "type": "CALL" }, { "from": 6501423125, "to": 6511733920, "type": "CALL" }, { "from": 6501423140, "to": 6501423013, "type": "CODE" }, { "from": 6501423162, "to": 6501423200, "type": "CALL" }, { "from": 6501423170, "to": 6501422829, "type": "CODE" }, { "from": 6501423186, "to": 6542089024, "type": "CALL" }, { "from": 6501423191, "to": 6545792064, "type": "CALL" } ], "datarefs": [ { "from": 6501421323, "to": 6740709440, "type": "DATA" }, { "from": 6501421413, "to": 6742171928, "type": "DATA" }, { "from": 6501421564, "to": 6742246848, "type": "DATA" }, { "from": 6501421573, "to": 6741126112, "type": "DATA" }, { "from": 6501421582, "to": 6742246856, "type": "DATA" }, { "from": 6501421592, "to": 6723625696, "type": "DATA" }, { "from": 6501421635, "to": 6723625768, "type": "DATA" }, { "from": 6501421726, "to": 6723625824, "type": "DATA" }, { "from": 6501421755, "to": 6723625840, "type": "DATA" }, { "from": 6501421766, "to": 6723625824, "type": "DATA" }, { "from": 6501421945, "to": 6740709440, "type": "DATA" }, { "from": 6501422304, "to": 6723625864, "type": "DATA" }, { "from": 6501422333, "to": 6723625877, "type": "DATA" }, { "from": 6501422344, "to": 6723625864, "type": "DATA" }, { "from": 6501423056, "to": 6712107188, "type": "DATA" } ] }, "strings": [ { "va": "0x190c262e0", "offset": 281171680, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_organize\\tab_organize_api.cc", "wide": null }, { "va": "0x190c26328", "offset": 281171752, "ascii": "[TabOrganize] No active organizing controller found", "wide": null }, { "va": "0x190c26360", "offset": 281171808, "ascii": "No active organization request found", "wide": null }, { "va": "0x190c26370", "offset": 281171824, "ascii": "zation request found", "wide": null }, { "va": "0x190c26388", "offset": 281171848, "ascii": "Extension organization failed", "wide": null }, { "va": "0x190c26395", "offset": 281171861, "ascii": "anization failed", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 18431 }, { "label": "p-pdf-text-adapter", "file": "rea-p-pdf-text-adapter.json", "file_sha256": "5924b6067c793e0caa58bc608165b1617b0c93b0e84a968f2d6d39313983362c", "status": "completed", "evidence_id": "ev_8baa989aaa69eb26b610c0b9a03686c2636f18daa1b05aaefbbfbaf8b18a92d4", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836dbb70;pdgo @ 0x1836dbb70;afij @ 0x1836dbb70", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836dbb70", "size": 1116, "nargs": 6, "signature": "fcn.1836dbb70(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4, int64_t arg_28h, int64_t arg_48h);", "callrefs": [ { "from": 6499974173, "to": 6464405264, "type": "CALL" }, { "from": 6499974255, "to": 6740346544, "type": "CALL" }, { "from": 6499974284, "to": 6499974293, "type": "CODE" }, { "from": 6499974376, "to": 6542067384, "type": "CALL" }, { "from": 6499974477, "to": 6512942288, "type": "CALL" }, { "from": 6499974545, "to": 6517399712, "type": "CALL" }, { "from": 6499974562, "to": 6499975392, "type": "CALL" }, { "from": 6499974657, "to": 6740346544, "type": "CALL" }, { "from": 6499974663, "to": 6499974501, "type": "CODE" }, { "from": 6499974699, "to": 6542067384, "type": "CALL" }, { "from": 6499974769, "to": 6593739920, "type": "CALL" }, { "from": 6499974774, "to": 6499974567, "type": "CODE" }, { "from": 6499974860, "to": 6587959616, "type": "CALL" }, { "from": 6499974905, "to": 6587967968, "type": "CALL" }, { "from": 6499974918, "to": 6499974574, "type": "CODE" }, { "from": 6499974928, "to": 6542067384, "type": "CALL" }, { "from": 6499975045, "to": 6499974854, "type": "CODE" }, { "from": 6499975067, "to": 6511512544, "type": "CALL" }, { "from": 6499975072, "to": 6499974501, "type": "CODE" }, { "from": 6499975087, "to": 6511512544, "type": "CALL" }, { "from": 6499975092, "to": 6499975059, "type": "CODE" }, { "from": 6499975105, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499974035, "to": 6740709440, "type": "DATA" }, { "from": 6499974226, "to": 6489794112, "type": "DATA" }, { "from": 6499974390, "to": 6467877968, "type": "DATA" }, { "from": 6499974402, "to": 6496176416, "type": "DATA" }, { "from": 6499974414, "to": 6511490512, "type": "DATA" }, { "from": 6499974426, "to": 6499975120, "type": "DATA" }, { "from": 6499974452, "to": 6723553808, "type": "DATA" }, { "from": 6499974459, "to": 6723552192, "type": "DATA" }, { "from": 6499974585, "to": 6740709440, "type": "DATA" }, { "from": 6499974638, "to": 6488537248, "type": "DATA" }, { "from": 6499974710, "to": 6467877968, "type": "DATA" }, { "from": 6499974721, "to": 6496176416, "type": "DATA" }, { "from": 6499974736, "to": 6499975392, "type": "DATA" }, { "from": 6499974791, "to": 6722732536, "type": "DATA" }, { "from": 6499974823, "to": 6722732541, "type": "DATA" }, { "from": 6499974839, "to": 6722732536, "type": "DATA" }, { "from": 6499974876, "to": 6587963136, "type": "DATA" }, { "from": 6499974898, "to": 6545109024, "type": "DATA" }, { "from": 6499974979, "to": 6723553760, "type": "DATA" }, { "from": 6499975004, "to": 6723553789, "type": "DATA" }, { "from": 6499975015, "to": 6723553776, "type": "DATA" }, { "from": 6499975026, "to": 6723553760, "type": "DATA" } ] }, "strings": [ { "va": "0x190c14a10", "offset": 281099792, "ascii": "StartPdfTextExtraction", "wide": null }, { "va": "0x190c143c0", "offset": 281098176, "ascii": "..\\..\\chrome\\browser\\extensions\\api\\tab_content_extractor\\tab_content_extractor_api.cc", "wide": null }, { "va": "0x190b4c1f8", "offset": 280278520, "ascii": "Tab not found", "wide": null }, { "va": "0x190b4c1fd", "offset": 280278525, "ascii": "ot found", "wide": null }, { "va": "0x190c149e0", "offset": 281099744, "ascii": "Tab is not displaying a Chromium PDF document", "wide": null }, { "va": "0x190c149fd", "offset": 281099773, "ascii": "ium PDF document", "wide": null }, { "va": "0x190c149f0", "offset": 281099760, "ascii": "aying a Chromium PDF document", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 11392 }, { "label": "p-pdf-text-run", "file": "rea-p-pdf-text-run.json", "file_sha256": "6a118f9bfb66dc81272708cfebc42b6f06f9bfe40f88a84d5e6ad6d2424b173a", "status": "completed", "evidence_id": "ev_84c08b3803f576087a07ea76e4e156473466971834bf377ae674615b674559a1", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836dd870;pdgo @ 0x1836dd870;afij @ 0x1836dd870", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836dd870", "size": 657, "nargs": 2, "signature": "fcn.1836dd870(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6499981500, "to": 6502377968, "type": "CALL" }, { "from": 6499981619, "to": 6499981662, "type": "CODE" }, { "from": 6499981651, "to": 6499981662, "type": "CODE" }, { "from": 6499981714, "to": 6499974000, "type": "CALL" }, { "from": 6499981840, "to": 6587959616, "type": "CALL" }, { "from": 6499981885, "to": 6587967968, "type": "CALL" }, { "from": 6499981898, "to": 6499981719, "type": "CODE" }, { "from": 6499981908, "to": 6542067384, "type": "CALL" }, { "from": 6499982026, "to": 6587959616, "type": "CALL" }, { "from": 6499982057, "to": 6499981868, "type": "CODE" }, { "from": 6499982075, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499981434, "to": 6740709440, "type": "DATA" }, { "from": 6499981730, "to": 6740709440, "type": "DATA" }, { "from": 6499981769, "to": 6716742096, "type": "DATA" }, { "from": 6499981801, "to": 6716742112, "type": "DATA" }, { "from": 6499981818, "to": 6716742096, "type": "DATA" }, { "from": 6499981856, "to": 6587963136, "type": "DATA" }, { "from": 6499981878, "to": 6545109024, "type": "DATA" }, { "from": 6499981951, "to": 6723554016, "type": "DATA" }, { "from": 6499981976, "to": 6723554032, "type": "DATA" }, { "from": 6499981987, "to": 6723554016, "type": "DATA" }, { "from": 6499982042, "to": 6587963136, "type": "DATA" } ] }, "strings": [ { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x190c14ae0", "offset": 281100000, "ascii": "PDF extraction limits are out of bounds", "wide": null }, { "va": "0x190c14af0", "offset": 281100016, "ascii": "imits are out of bounds", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 6829 }, { "label": "p-pet-api-run", "file": "rea-p-pet-api-run.json", "file_sha256": "bdaf2d6ec62066b23283eabb04471baf73a4e7605b920eb39f011683f8c0840e", "status": "completed", "evidence_id": "ev_fff0bffa3a3b97dcc393e24e81cd97928f243a3ad8179c4308c08df8f452a128", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836f0b70;pdgo @ 0x1836f0b70;afij @ 0x1836f0b70", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836f0b70", "size": 1093, "nargs": 3, "signature": "fcn.1836f0b70(int64_t arg1, int64_t arg2, int64_t arg_a8h);", "callrefs": [ { "from": 6500060096, "to": 6502362016, "type": "CALL" }, { "from": 6500060166, "to": 6500061120, "type": "CALL" }, { "from": 6500060229, "to": 6512708384, "type": "CALL" }, { "from": 6500060251, "to": 6542067384, "type": "CALL" }, { "from": 6500060373, "to": 6497682384, "type": "CALL" }, { "from": 6500060449, "to": 6511512544, "type": "CALL" }, { "from": 6500060502, "to": 6587960816, "type": "CALL" }, { "from": 6500060513, "to": 6587960160, "type": "CALL" }, { "from": 6500060518, "to": 6500060393, "type": "CODE" }, { "from": 6500060540, "to": 6740346544, "type": "CALL" }, { "from": 6500060600, "to": 6445488624, "type": "CALL" }, { "from": 6500060619, "to": 6588529392, "type": "CALL" }, { "from": 6500060668, "to": 6587967968, "type": "CALL" }, { "from": 6500060720, "to": 6524603600, "type": "CALL" }, { "from": 6500060757, "to": 6511512544, "type": "CALL" }, { "from": 6500060762, "to": 6500060393, "type": "CODE" }, { "from": 6500060772, "to": 6542067384, "type": "CALL" }, { "from": 6500060899, "to": 6587959616, "type": "CALL" }, { "from": 6500060944, "to": 6587967968, "type": "CALL" }, { "from": 6500060957, "to": 6500060393, "type": "CODE" }, { "from": 6500061031, "to": 6500060893, "type": "CODE" }, { "from": 6500061043, "to": 6542069736, "type": "CALL" }, { "from": 6500061068, "to": 6479662928, "type": "CALL" }, { "from": 6500061080, "to": 6542069628, "type": "CALL" }, { "from": 6500061085, "to": 6500060216, "type": "CODE" }, { "from": 6500061103, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6500060030, "to": 6740709440, "type": "DATA" }, { "from": 6500060179, "to": 6742148608, "type": "DATA" }, { "from": 6500060185, "to": 6741832416, "type": "DATA" }, { "from": 6500060216, "to": 6742148552, "type": "DATA" }, { "from": 6500060262, "to": 6471738512, "type": "DATA" }, { "from": 6500060273, "to": 6496176416, "type": "DATA" }, { "from": 6500060284, "to": 6511490512, "type": "DATA" }, { "from": 6500060295, "to": 6619761280, "type": "DATA" }, { "from": 6500060465, "to": 6740709440, "type": "DATA" }, { "from": 6500060565, "to": 6712487008, "type": "DATA" }, { "from": 6500060635, "to": 6587963136, "type": "DATA" }, { "from": 6500060653, "to": 6545109024, "type": "DATA" }, { "from": 6500060823, "to": 6723562576, "type": "DATA" }, { "from": 6500060852, "to": 6723562606, "type": "DATA" }, { "from": 6500060863, "to": 6723562592, "type": "DATA" }, { "from": 6500060874, "to": 6723562576, "type": "DATA" }, { "from": 6500060915, "to": 6587963136, "type": "DATA" }, { "from": 6500060937, "to": 6545109024, "type": "DATA" }, { "from": 6500060971, "to": 6722947088, "type": "DATA" }, { "from": 6500060999, "to": 6722947101, "type": "DATA" }, { "from": 6500061015, "to": 6722947088, "type": "DATA" }, { "from": 6500061036, "to": 6742148608, "type": "DATA" }, { "from": 6500061048, "to": 6742148608, "type": "DATA" }, { "from": 6500061061, "to": 6742148552, "type": "DATA" }, { "from": 6500061073, "to": 6742148608, "type": "DATA" } ] }, "strings": [ { "va": "0x190186c60", "offset": 270032992, "ascii": "success", "wide": null }, { "va": "0x190c16c50", "offset": 281108560, "ascii": "direction must be one of up, down, left, right", "wide": null }, { "va": "0x190c16c6e", "offset": 281108590, "ascii": "own, left, right", "wide": null }, { "va": "0x190c16c60", "offset": 281108576, "ascii": "e one of up, down, left, right", "wide": null }, { "va": "0x190b80810", "offset": 280493072, "ascii": "Profile not available", "wide": null }, { "va": "0x190b8081d", "offset": 280493085, "ascii": "vailable", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 11395 }, { "label": "p-pet-controller", "file": "rea-p-pet-controller.json", "file_sha256": "5c549245289cf68566164d3fa9ebc44c7437c27c107f33cdc1e8397c191db468", "status": "completed", "evidence_id": "ev_113a921423bc9b622019a7abb376e5007321c8e5c94bd7169b862ed31d392179", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1834aa5d0;pdgo @ 0x1834aa5d0;afij @ 0x1834aa5d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834aa5d0", "size": 4919, "nargs": 2, "signature": "fcn.1834aa5d0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6497674862, "to": 6474313248, "type": "CALL" }, { "from": 6497674893, "to": 6542067384, "type": "CALL" }, { "from": 6497674914, "to": 6474313248, "type": "CALL" }, { "from": 6497674933, "to": 6474313632, "type": "CALL" }, { "from": 6497674957, "to": 6474313248, "type": "CALL" }, { "from": 6497674971, "to": 6473438608, "type": "CALL" }, { "from": 6497674984, "to": 6511512544, "type": "CALL" }, { "from": 6497675025, "to": 6479283424, "type": "CALL" }, { "from": 6497675043, "to": 6542067384, "type": "CALL" }, { "from": 6497675133, "to": 6479965808, "type": "CALL" }, { "from": 6497675146, "to": 6511512544, "type": "CALL" }, { "from": 6497675192, "to": 6442908368, "type": "CALL" }, { "from": 6497675207, "to": 6474132112, "type": "CALL" }, { "from": 6497675399, "to": 6511423872, "type": "CALL" }, { "from": 6497675426, "to": 6442840976, "type": "CALL" }, { "from": 6497675453, "to": 6542067384, "type": "CALL" }, { "from": 6497675464, "to": 6450805712, "type": "CALL" }, { "from": 6497675526, "to": 6451792640, "type": "CALL" }, { "from": 6497675536, "to": 6542067384, "type": "CALL" }, { "from": 6497675569, "to": 6447217056, "type": "CALL" }, { "from": 6497675600, "to": 6472510432, "type": "CALL" }, { "from": 6497675636, "to": 6512942288, "type": "CALL" }, { "from": 6497675701, "to": 6462372144, "type": "CALL" }, { "from": 6497675712, "to": 6511396000, "type": "CALL" }, { "from": 6497675742, "to": 6740346544, "type": "CALL" }, { "from": 6497675753, "to": 6475081008, "type": "CALL" }, { "from": 6497675768, "to": 6740346544, "type": "CALL" }, { "from": 6497675795, "to": 6740346544, "type": "CALL" }, { "from": 6497675818, "to": 6740346544, "type": "CALL" }, { "from": 6497675847, "to": 6740346544, "type": "CALL" }, { "from": 6497675863, "to": 6740346544, "type": "CALL" }, { "from": 6497675906, "to": 6515567520, "type": "CALL" }, { "from": 6497675925, "to": 6475081856, "type": "CALL" }, { "from": 6497675944, "to": 6475082272, "type": "CALL" }, { "from": 6497675970, "to": 6475083440, "type": "CALL" }, { "from": 6497675983, "to": 6511396000, "type": "CALL" }, { "from": 6497676012, "to": 6442908368, "type": "CALL" }, { "from": 6497676023, "to": 6449494400, "type": "CALL" }, { "from": 6497676162, "to": 6529243952, "type": "CALL" }, { "from": 6497676184, "to": 6511423872, "type": "CALL" }, { "from": 6497676288, "to": 6497676341, "type": "CODE" }, { "from": 6497676304, "to": 6511512544, "type": "CALL" }, { "from": 6497676309, "to": 6497675962, "type": "CODE" }, { "from": 6497676314, "to": 6442840976, "type": "CALL" }, { "from": 6497676365, "to": 6442908368, "type": "CALL" }, { "from": 6497676386, "to": 6449494400, "type": "CALL" }, { "from": 6497676518, "to": 6542067384, "type": "CALL" }, { "from": 6497676541, "to": 6542067384, "type": "CALL" }, { "from": 6497676620, "to": 6511423872, "type": "CALL" }, { "from": 6497676661, "to": 6740346544, "type": "CALL" }, { "from": 6497676695, "to": 6529243952, "type": "CALL" }, { "from": 6497676718, "to": 6511423872, "type": "CALL" }, { "from": 6497676750, "to": 6497676314, "type": "CODE" }, { "from": 6497676757, "to": 6497678004, "type": "CODE" }, { "from": 6497676780, "to": 6511423872, "type": "CALL" }, { "from": 6497676812, "to": 6442840976, "type": "CALL" }, { "from": 6497676849, "to": 6511423872, "type": "CALL" }, { "from": 6497676876, "to": 6442840976, "type": "CALL" }, { "from": 6497676932, "to": 6542067384, "type": "CALL" }, { "from": 6497677011, "to": 6542067384, "type": "CALL" }, { "from": 6497677022, "to": 6466026416, "type": "CALL" }, { "from": 6497677069, "to": 6497677087, "type": "CODE" }, { "from": 6497677074, "to": 6511423872, "type": "CALL" }, { "from": 6497677112, "to": 6442840976, "type": "CALL" }, { "from": 6497677150, "to": 6740346544, "type": "CALL" }, { "from": 6497677179, "to": 6623621280, "type": "CALL" }, { "from": 6497677214, "to": 6740346544, "type": "CALL" }, { "from": 6497677239, "to": 6542434496, "type": "CALL" }, { "from": 6497677255, "to": 6466011504, "type": "CALL" }, { "from": 6497677299, "to": 6511423872, "type": "CALL" }, { "from": 6497677327, "to": 6442840976, "type": "CALL" }, { "from": 6497677370, "to": 6497677384, "type": "CODE" }, { "from": 6497677502, "to": 6442908368, "type": "CALL" }, { "from": 6497677529, "to": 6466011024, "type": "CALL" }, { "from": 6497677540, "to": 6623622640, "type": "CALL" }, { "from": 6497677671, "to": 6740346544, "type": "CALL" }, { "from": 6497677706, "to": 6519295696, "type": "CALL" }, { "from": 6497677738, "to": 6623627456, "type": "CALL" }, { "from": 6497677750, "to": 6623631568, "type": "CALL" }, { "from": 6497677778, "to": 6623625088, "type": "CALL" }, { "from": 6497677894, "to": 6740346544, "type": "CALL" }, { "from": 6497677998, "to": 6740346544, "type": "CALL" }, { "from": 6497678037, "to": 6525086592, "type": "CALL" }, { "from": 6497678103, "to": 6542067384, "type": "CALL" }, { "from": 6497678164, "to": 6511423872, "type": "CALL" }, { "from": 6497678186, "to": 6511423872, "type": "CALL" }, { "from": 6497678231, "to": 6542067384, "type": "CALL" }, { "from": 6497678358, "to": 6474245552, "type": "CALL" }, { "from": 6497678383, "to": 6474245552, "type": "CALL" }, { "from": 6497678408, "to": 6474245552, "type": "CALL" }, { "from": 6497678548, "to": 6623555024, "type": "CALL" }, { "from": 6497678582, "to": 6740346544, "type": "CALL" }, { "from": 6497678607, "to": 6443011232, "type": "CALL" }, { "from": 6497678650, "to": 6497702384, "type": "CALL" }, { "from": 6497678668, "to": 6740346544, "type": "CALL" }, { "from": 6497678696, "to": 6740346544, "type": "CALL" }, { "from": 6497678719, "to": 6740346544, "type": "CALL" }, { "from": 6497678744, "to": 6740346544, "type": "CALL" }, { "from": 6497678819, "to": 6542067384, "type": "CALL" }, { "from": 6497678961, "to": 6542067384, "type": "CALL" }, { "from": 6497679085, "to": 6542067384, "type": "CALL" }, { "from": 6497679166, "to": 6502803072, "type": "CALL" }, { "from": 6497679179, "to": 6466023056, "type": "CALL" }, { "from": 6497679184, "to": 6497674787, "type": "CODE" }, { "from": 6497679189, "to": 6740346544, "type": "CALL" }, { "from": 6497679198, "to": 6497678523, "type": "CODE" }, { "from": 6497679221, "to": 6511512544, "type": "CALL" }, { "from": 6497679226, "to": 6497678621, "type": "CODE" }, { "from": 6497679239, "to": 6497678523, "type": "CODE" }, { "from": 6497679272, "to": 6740346544, "type": "CALL" }, { "from": 6497679278, "to": 6497678917, "type": "CODE" }, { "from": 6497679311, "to": 6740346544, "type": "CALL" }, { "from": 6497679317, "to": 6497679041, "type": "CODE" }, { "from": 6497679339, "to": 6511512544, "type": "CALL" }, { "from": 6497679344, "to": 6497678917, "type": "CODE" }, { "from": 6497679359, "to": 6511512544, "type": "CALL" }, { "from": 6497679364, "to": 6497679331, "type": "CODE" }, { "from": 6497679383, "to": 6511512544, "type": "CALL" }, { "from": 6497679388, "to": 6497679041, "type": "CODE" }, { "from": 6497679403, "to": 6511512544, "type": "CALL" }, { "from": 6497679408, "to": 6497679375, "type": "CODE" }, { "from": 6497679421, "to": 6542089024, "type": "CALL" }, { "from": 6497679432, "to": 6642659040, "type": "CALL" }, { "from": 6497679440, "to": 6497676357, "type": "CODE" }, { "from": 6497679453, "to": 6497678523, "type": "CODE" }, { "from": 6497679482, "to": 6642659040, "type": "CALL" }, { "from": 6497679490, "to": 6497675174, "type": "CODE" }, { "from": 6497679495, "to": 6642659040, "type": "CALL" }, { "from": 6497679503, "to": 6497676004, "type": "CODE" }, { "from": 6497679508, "to": 6642659040, "type": "CALL" }, { "from": 6497679516, "to": 6497677494, "type": "CODE" }, { "from": 6497679549, "to": 6740346544, "type": "CALL" }, { "from": 6497679558, "to": 6623631568, "type": "CALL" }, { "from": 6497679563, "to": 6497677165, "type": "CODE" }, { "from": 6497679582, "to": 6542067384, "type": "CALL" }, { "from": 6497679610, "to": 6497678144, "type": "CODE" }, { "from": 6497679617, "to": 6497675111, "type": "CODE" } ], "datarefs": [ { "from": 6497674750, "to": 6740709440, "type": "DATA" }, { "from": 6497674798, "to": 6740709440, "type": "DATA" }, { "from": 6497675158, "to": 6742465472, "type": "DATA" }, { "from": 6497675212, "to": 6710527144, "type": "DATA" }, { "from": 6497675223, "to": 6707113648, "type": "DATA" }, { "from": 6497675235, "to": 6707113664, "type": "DATA" }, { "from": 6497675247, "to": 6707113696, "type": "DATA" }, { "from": 6497675259, "to": 6707113728, "type": "DATA" }, { "from": 6497675271, "to": 6707113792, "type": "DATA" }, { "from": 6497675286, "to": 6707113872, "type": "DATA" }, { "from": 6497675301, "to": 6707113896, "type": "DATA" }, { "from": 6497675316, "to": 6707113920, "type": "DATA" }, { "from": 6497675331, "to": 6707114896, "type": "DATA" }, { "from": 6497675346, "to": 6707115904, "type": "DATA" }, { "from": 6497675361, "to": 6707115928, "type": "DATA" }, { "from": 6497675387, "to": 6741126408, "type": "DATA" }, { "from": 6497675417, "to": 6741126408, "type": "DATA" }, { "from": 6497675469, "to": 6709941680, "type": "DATA" }, { "from": 6497675479, "to": 6708054016, "type": "DATA" }, { "from": 6497675541, "to": 6708091312, "type": "DATA" }, { "from": 6497675605, "to": 6722516280, "type": "DATA" }, { "from": 6497675612, "to": 6722516192, "type": "DATA" }, { "from": 6497675651, "to": 6712085216, "type": "DATA" }, { "from": 6497675872, "to": 6722516296, "type": "DATA" }, { "from": 6497675988, "to": 6742465472, "type": "DATA" }, { "from": 6497676028, "to": 6710528008, "type": "DATA" }, { "from": 6497676038, "to": 6707115944, "type": "DATA" }, { "from": 6497676049, "to": 6707115968, "type": "DATA" }, { "from": 6497676060, "to": 6707116000, "type": "DATA" }, { "from": 6497676071, "to": 6707116032, "type": "DATA" }, { "from": 6497676082, "to": 6707116096, "type": "DATA" }, { "from": 6497676096, "to": 6707116176, "type": "DATA" }, { "from": 6497676110, "to": 6707116200, "type": "DATA" }, { "from": 6497676172, "to": 6741126408, "type": "DATA" }, { "from": 6497676217, "to": 6707116216, "type": "DATA" }, { "from": 6497676229, "to": 6710528840, "type": "DATA" }, { "from": 6497676245, "to": 6707116304, "type": "DATA" }, { "from": 6497676257, "to": 6707116272, "type": "DATA" }, { "from": 6497676274, "to": 6709781856, "type": "DATA" }, { "from": 6497676281, "to": 6709781728, "type": "DATA" }, { "from": 6497676341, "to": 6742465472, "type": "DATA" }, { "from": 6497676373, "to": 6718511896, "type": "DATA" }, { "from": 6497676405, "to": 6707116240, "type": "DATA" }, { "from": 6497676424, "to": 6707116368, "type": "DATA" }, { "from": 6497676439, "to": 6707116448, "type": "DATA" }, { "from": 6497676454, "to": 6707116472, "type": "DATA" }, { "from": 6497676469, "to": 6707116496, "type": "DATA" }, { "from": 6497676608, "to": 6741126408, "type": "DATA" }, { "from": 6497676706, "to": 6741126408, "type": "DATA" }, { "from": 6497676737, "to": 6741126408, "type": "DATA" }, { "from": 6497676768, "to": 6741126408, "type": "DATA" }, { "from": 6497676803, "to": 6741126408, "type": "DATA" }, { "from": 6497676837, "to": 6741126408, "type": "DATA" }, { "from": 6497676867, "to": 6741126408, "type": "DATA" }, { "from": 6497676946, "to": 6462684592, "type": "DATA" }, { "from": 6497676957, "to": 6488509552, "type": "DATA" }, { "from": 6497676968, "to": 6495410336, "type": "DATA" }, { "from": 6497676979, "to": 6497687776, "type": "DATA" }, { "from": 6497677027, "to": 6707116528, "type": "DATA" }, { "from": 6497677058, "to": 6741126408, "type": "DATA" }, { "from": 6497677103, "to": 6741126408, "type": "DATA" }, { "from": 6497677287, "to": 6741126408, "type": "DATA" }, { "from": 6497677318, "to": 6741126408, "type": "DATA" }, { "from": 6497677394, "to": 6722516328, "type": "DATA" }, { "from": 6497677478, "to": 6742465472, "type": "DATA" }, { "from": 6497677545, "to": 6707116880, "type": "DATA" }, { "from": 6497677555, "to": 6707117360, "type": "DATA" }, { "from": 6497677566, "to": 6707117392, "type": "DATA" }, { "from": 6497677577, "to": 6707117424, "type": "DATA" }, { "from": 6497677588, "to": 6707117456, "type": "DATA" }, { "from": 6497677599, "to": 6707117488, "type": "DATA" }, { "from": 6497677613, "to": 6707117520, "type": "DATA" }, { "from": 6497677627, "to": 6707117544, "type": "DATA" }, { "from": 6497677718, "to": 6722516096, "type": "DATA" }, { "from": 6497678111, "to": 6707117560, "type": "DATA" }, { "from": 6497678152, "to": 6741126408, "type": "DATA" }, { "from": 6497678174, "to": 6741126408, "type": "DATA" }, { "from": 6497678345, "to": 6722516720, "type": "DATA" }, { "from": 6497678370, "to": 6722516724, "type": "DATA" }, { "from": 6497678395, "to": 6722516728, "type": "DATA" }, { "from": 6497678500, "to": 6537573920, "type": "DATA" }, { "from": 6497678759, "to": 6719537096, "type": "DATA" }, { "from": 6497678830, "to": 6462684592, "type": "DATA" }, { "from": 6497678841, "to": 6488509552, "type": "DATA" }, { "from": 6497678852, "to": 6495410336, "type": "DATA" }, { "from": 6497678863, "to": 6497687984, "type": "DATA" }, { "from": 6497678972, "to": 6497702576, "type": "DATA" }, { "from": 6497678983, "to": 6488510160, "type": "DATA" }, { "from": 6497678994, "to": 6511490512, "type": "DATA" }, { "from": 6497679096, "to": 6495410400, "type": "DATA" }, { "from": 6497679107, "to": 6488509552, "type": "DATA" }, { "from": 6497679118, "to": 6495410336, "type": "DATA" }, { "from": 6497679129, "to": 6497688560, "type": "DATA" }, { "from": 6497679257, "to": 6488537248, "type": "DATA" }, { "from": 6497679296, "to": 6488537248, "type": "DATA" }, { "from": 6497679590, "to": 6707117560, "type": "DATA" } ] }, "strings": [ { "va": "0x190b17538", "offset": 280062264, "ascii": "ShowPetWindow", "wide": null }, { "va": "0x190b174e0", "offset": 280062176, "ascii": "..\\..\\chrome\\browser\\glic\\widget\\tabbit_desktop_pet_controller.cc", "wide": null }, { "va": "0x190b17548", "offset": 280062280, "ascii": "chrome://tabbit-desktop-pet/", "wide": null }, { "va": "0x190b17568", "offset": 280062312, "ascii": "TabbitDesktopPetWidget", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 43877 }, { "label": "p-pet-show", "file": "rea-p-pet-show.json", "file_sha256": "788cb1a3739ffb5178eddd4b2977fa6d747e5dc35e51cd12d80f95ee779769b8", "status": "completed", "evidence_id": "ev_ce9d6ea4a3578999750006dc67bc6126ad946a5e87df1dd7e15db5eeb2a9147b", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1834ac3d0;pdgo @ 0x1834ac3d0;afij @ 0x1834ac3d0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834ac3d0", "size": 1622, "nargs": 3, "signature": "fcn.1834ac3d0(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6497682450, "to": 6740346544, "type": "CALL" }, { "from": 6497682482, "to": 6524006080, "type": "CALL" }, { "from": 6497682559, "to": 6740346544, "type": "CALL" }, { "from": 6497682565, "to": 6497682501, "type": "CODE" }, { "from": 6497682578, "to": 6497679632, "type": "CALL" }, { "from": 6497682589, "to": 6497674704, "type": "CALL" }, { "from": 6497682606, "to": 6497682620, "type": "CODE" }, { "from": 6497682685, "to": 6542067384, "type": "CALL" }, { "from": 6497682787, "to": 6512942288, "type": "CALL" }, { "from": 6497682818, "to": 6740346544, "type": "CALL" }, { "from": 6497682826, "to": 6497682493, "type": "CODE" }, { "from": 6497682904, "to": 6740346544, "type": "CALL" }, { "from": 6497682970, "to": 6542067384, "type": "CALL" }, { "from": 6497683072, "to": 6497682787, "type": "CODE" }, { "from": 6497683089, "to": 6623625088, "type": "CALL" }, { "from": 6497683136, "to": 6497683148, "type": "CODE" }, { "from": 6497683162, "to": 6740346544, "type": "CALL" }, { "from": 6497683231, "to": 6447968000, "type": "CALL" }, { "from": 6497683287, "to": 6447968000, "type": "CALL" }, { "from": 6497683343, "to": 6447968000, "type": "CALL" }, { "from": 6497683397, "to": 6447968000, "type": "CALL" }, { "from": 6497683438, "to": 6542434496, "type": "CALL" }, { "from": 6497683511, "to": 6740346544, "type": "CALL" }, { "from": 6497683625, "to": 6497683703, "type": "CODE" }, { "from": 6497683637, "to": 6497683703, "type": "CODE" }, { "from": 6497683706, "to": 6497684016, "type": "CALL" }, { "from": 6497683773, "to": 6497683788, "type": "CODE" }, { "from": 6497683773, "to": 6497683915, "type": "CODE" }, { "from": 6497683800, "to": 6497683837, "type": "CODE" }, { "from": 6497683905, "to": 6497684416, "type": "CALL" }, { "from": 6497683910, "to": 6497682493, "type": "CODE" }, { "from": 6497683922, "to": 6511512544, "type": "CALL" }, { "from": 6497683934, "to": 6497683576, "type": "CODE" }, { "from": 6497683950, "to": 6542089024, "type": "CALL" }, { "from": 6497683996, "to": 6511512544, "type": "CALL" }, { "from": 6497684001, "to": 6497683547, "type": "CODE" } ], "datarefs": [ { "from": 6497682406, "to": 6740709440, "type": "DATA" }, { "from": 6497682456, "to": 6722491976, "type": "DATA" }, { "from": 6497682512, "to": 6740709440, "type": "DATA" }, { "from": 6497682633, "to": 6741832416, "type": "DATA" }, { "from": 6497682699, "to": 6495489424, "type": "DATA" }, { "from": 6497682710, "to": 6488395152, "type": "DATA" }, { "from": 6497682721, "to": 6495390160, "type": "DATA" }, { "from": 6497682759, "to": 6722516260, "type": "DATA" }, { "from": 6497682766, "to": 6722516192, "type": "DATA" }, { "from": 6497682918, "to": 6741832416, "type": "DATA" }, { "from": 6497682984, "to": 6495489424, "type": "DATA" }, { "from": 6497682995, "to": 6488395152, "type": "DATA" }, { "from": 6497683006, "to": 6495390160, "type": "DATA" }, { "from": 6497683044, "to": 6722516260, "type": "DATA" }, { "from": 6497683051, "to": 6722516192, "type": "DATA" }, { "from": 6497683192, "to": 6722492064, "type": "DATA" }, { "from": 6497683249, "to": 6722492104, "type": "DATA" }, { "from": 6497683307, "to": 6722492144, "type": "DATA" }, { "from": 6497683363, "to": 6722492184, "type": "DATA" }, { "from": 6497683443, "to": 6742268000, "type": "DATA" }, { "from": 6497683614, "to": 6722516732, "type": "DATA" }, { "from": 6497683759, "to": 6722516740, "type": "DATA" } ] }, "strings": [ { "va": "0x190b11648", "offset": 280037960, "ascii": "glic.desktop_pet.enabled", "wide": null }, { "va": "0x190b17524", "offset": 280062244, "ascii": "GoOut", "wide": null }, { "va": "0x190b174e0", "offset": 280062176, "ascii": "..\\..\\chrome\\browser\\glic\\widget\\tabbit_desktop_pet_controller.cc", "wide": null }, { "va": "0x190b116a0", "offset": 280038048, "ascii": "glic.desktop_pet.previous_position_x", "wide": null }, { "va": "0x190b116c8", "offset": 280038088, "ascii": "glic.desktop_pet.previous_position_y", "wide": null }, { "va": "0x190b116f0", "offset": 280038128, "ascii": "glic.desktop_pet.previous_size_width", "wide": null }, { "va": "0x190b11718", "offset": 280038168, "ascii": "glic.desktop_pet.previous_size_height", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 14764 }, { "label": "p-pet-widget", "file": "rea-p-pet-widget.json", "file_sha256": "2ea15b92cc97ee9162212938b5332d2d4be5c1d695e22583e2d037f3d9412771", "status": "completed", "evidence_id": "ev_5fb3b89fcd027f4056307abe214e52f5cc8f2cf632dd8f68e01ac3310f4f0168", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1834ad100;pdgo @ 0x1834ad100;afij @ 0x1834ad100", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1834ad100", "size": 1266, "nargs": 3, "signature": "fcn.1834ad100(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6497685844, "to": 6740346544, "type": "CALL" }, { "from": 6497685879, "to": 6524006080, "type": "CALL" }, { "from": 6497685972, "to": 6740346544, "type": "CALL" }, { "from": 6497685978, "to": 6497685898, "type": "CODE" }, { "from": 6497685986, "to": 6497679632, "type": "CALL" }, { "from": 6497686033, "to": 6542434496, "type": "CALL" }, { "from": 6497686099, "to": 6740346544, "type": "CALL" }, { "from": 6497686240, "to": 6497686361, "type": "CODE" }, { "from": 6497686280, "to": 6497686361, "type": "CODE" }, { "from": 6497686313, "to": 6497686361, "type": "CODE" }, { "from": 6497686512, "to": 6740346544, "type": "CALL" }, { "from": 6497686605, "to": 6740346544, "type": "CALL" }, { "from": 6497686631, "to": 6483758384, "type": "CALL" }, { "from": 6497686652, "to": 6447664672, "type": "CALL" }, { "from": 6497686657, "to": 6497686672, "type": "CODE" }, { "from": 6497686667, "to": 6497674704, "type": "CALL" }, { "from": 6497686709, "to": 6497684016, "type": "CALL" }, { "from": 6497686743, "to": 6497684416, "type": "CALL" }, { "from": 6497686748, "to": 6497685890, "type": "CODE" }, { "from": 6497686805, "to": 6542067384, "type": "CALL" }, { "from": 6497686907, "to": 6512942288, "type": "CALL" }, { "from": 6497686938, "to": 6740346544, "type": "CALL" }, { "from": 6497686944, "to": 6497685890, "type": "CODE" }, { "from": 6497686954, "to": 6511512544, "type": "CALL" }, { "from": 6497686959, "to": 6497686157, "type": "CODE" }, { "from": 6497686975, "to": 6542089024, "type": "CALL" }, { "from": 6497687015, "to": 6511512544, "type": "CALL" }, { "from": 6497687020, "to": 6497686135, "type": "CODE" } ], "datarefs": [ { "from": 6497685800, "to": 6740709440, "type": "DATA" }, { "from": 6497685850, "to": 6722491976, "type": "DATA" }, { "from": 6497685909, "to": 6740709440, "type": "DATA" }, { "from": 6497686038, "to": 6742268000, "type": "DATA" }, { "from": 6497686753, "to": 6741832416, "type": "DATA" }, { "from": 6497686819, "to": 6495489424, "type": "DATA" }, { "from": 6497686830, "to": 6488395152, "type": "DATA" }, { "from": 6497686841, "to": 6495390160, "type": "DATA" }, { "from": 6497686879, "to": 6722516268, "type": "DATA" }, { "from": 6497686886, "to": 6722516192, "type": "DATA" } ] }, "strings": [ { "va": "0x190b11648", "offset": 280037960, "ascii": "glic.desktop_pet.enabled", "wide": null }, { "va": "0x190b1752c", "offset": 280062252, "ascii": "GoHome", "wide": null }, { "va": "0x190b174e0", "offset": 280062176, "ascii": "..\\..\\chrome\\browser\\glic\\widget\\tabbit_desktop_pet_controller.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 13200 }, { "label": "p-prewarm", "file": "rea-p-prewarm.json", "file_sha256": "ed482bae613dde4ecb267405d0e0d0b63f61f960a764f1ac9c87816d66e46acd", "status": "completed", "evidence_id": "ev_84210b6a55cdde8cd0a8215f19c38c69c17ab2bf0e6523c959248689e5be52dc", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1824d33c0;pdgo @ 0x1824d33c0;afij @ 0x1824d33c0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1824d33c0", "size": 395, "nargs": 0, "signature": "fcn.1824d33c0();", "callrefs": [ { "from": 6481064925, "to": 6511730640, "type": "CALL" }, { "from": 6481064965, "to": 6531704832, "type": "CALL" }, { "from": 6481064978, "to": 6501750784, "type": "CALL" }, { "from": 6481064997, "to": 6514715792, "type": "CALL" }, { "from": 6481065030, "to": 6740346544, "type": "CALL" }, { "from": 6481065060, "to": 6511512544, "type": "CALL" }, { "from": 6481065065, "to": 6481065249, "type": "CODE" }, { "from": 6481065073, "to": 6517335696, "type": "CALL" }, { "from": 6481065078, "to": 6481065036, "type": "CODE" }, { "from": 6481065085, "to": 6542067384, "type": "CALL" }, { "from": 6481065154, "to": 6542067384, "type": "CALL" }, { "from": 6481065223, "to": 6512942288, "type": "CALL" }, { "from": 6481065244, "to": 6501749216, "type": "CALL" }, { "from": 6481065285, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6481064903, "to": 6740709440, "type": "DATA" }, { "from": 6481064918, "to": 6741280392, "type": "DATA" }, { "from": 6481064985, "to": 6723760512, "type": "DATA" }, { "from": 6481065012, "to": 6517335696, "type": "DATA" }, { "from": 6481065097, "to": 6501750672, "type": "DATA" }, { "from": 6481065108, "to": 6488393984, "type": "DATA" }, { "from": 6481065119, "to": 6511490512, "type": "DATA" }, { "from": 6481065130, "to": 6501750480, "type": "DATA" }, { "from": 6481065161, "to": 6501749600, "type": "DATA" }, { "from": 6481065172, "to": 6454368560, "type": "DATA" }, { "from": 6481065195, "to": 6723760488, "type": "DATA" }, { "from": 6481065202, "to": 6723760432, "type": "DATA" }, { "from": 6481065228, "to": 6723760421, "type": "DATA" }, { "from": 6481065257, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190c47180", "offset": 281306496, "ascii": "Memory.Tabbit.LogonPrewarm.BrowserWriteOk", "wide": null }, { "va": "0x190c47168", "offset": 281306472, "ascii": "GetShouldPrewarmAsync", "wide": null }, { "va": "0x190c47130", "offset": 281306416, "ascii": "..\\..\\tab\\browser\\prewarm\\prewarm_disk_policy.cc", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 3128 }, { "label": "p-privacy-url-events", "file": "rea-p-privacy-url-events.json", "file_sha256": "065cc7971e8e52f73c81ec71ac320111d705c55b29e3bb3c8fa8150eb7aec5a6", "status": "completed", "evidence_id": "ev_f0433022e0041673265625c4a60f2835b2015786439bd90d8cb29929679fbe58", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1836bdb90;pdgo @ 0x1836bdb90;afij @ 0x1836bdb90", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1836bdb90", "size": 1420, "nargs": 4, "signature": "fcn.1836bdb90(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);", "callrefs": [ { "from": 6499851213, "to": 6448258368, "type": "CALL" }, { "from": 6499851227, "to": 6512708384, "type": "CALL" }, { "from": 6499851413, "to": 6502388016, "type": "CALL" }, { "from": 6499851424, "to": 6462063728, "type": "CALL" }, { "from": 6499851464, "to": 6467620752, "type": "CALL" }, { "from": 6499851474, "to": 6542067384, "type": "CALL" }, { "from": 6499851546, "to": 6480339856, "type": "CALL" }, { "from": 6499851562, "to": 6457893264, "type": "CALL" }, { "from": 6499851629, "to": 6511512544, "type": "CALL" }, { "from": 6499851639, "to": 6542067384, "type": "CALL" }, { "from": 6499851704, "to": 6480339856, "type": "CALL" }, { "from": 6499851720, "to": 6457893264, "type": "CALL" }, { "from": 6499851789, "to": 6511513840, "type": "CALL" }, { "from": 6499851794, "to": 6499851286, "type": "CODE" }, { "from": 6499851807, "to": 6517426816, "type": "CALL" }, { "from": 6499851823, "to": 6511512544, "type": "CALL" }, { "from": 6499851828, "to": 6499851579, "type": "CODE" }, { "from": 6499851841, "to": 6517426816, "type": "CALL" }, { "from": 6499851857, "to": 6511512544, "type": "CALL" }, { "from": 6499851862, "to": 6499851593, "type": "CODE" }, { "from": 6499851882, "to": 6511513840, "type": "CALL" }, { "from": 6499851887, "to": 6499851918, "type": "CODE" }, { "from": 6499852045, "to": 6502388016, "type": "CALL" }, { "from": 6499852056, "to": 6462063728, "type": "CALL" }, { "from": 6499852096, "to": 6467620752, "type": "CALL" }, { "from": 6499852106, "to": 6542067384, "type": "CALL" }, { "from": 6499852178, "to": 6480339856, "type": "CALL" }, { "from": 6499852188, "to": 6499851556, "type": "CODE" }, { "from": 6499852220, "to": 6511729936, "type": "CALL" }, { "from": 6499852283, "to": 6511512544, "type": "CALL" }, { "from": 6499852288, "to": 6499852007, "type": "CODE" }, { "from": 6499852318, "to": 6524603600, "type": "CALL" }, { "from": 6499852364, "to": 6511512544, "type": "CALL" }, { "from": 6499852369, "to": 6499852073, "type": "CODE" }, { "from": 6499852401, "to": 6511729936, "type": "CALL" }, { "from": 6499852464, "to": 6511512544, "type": "CALL" }, { "from": 6499852469, "to": 6499851375, "type": "CODE" }, { "from": 6499852499, "to": 6524603600, "type": "CALL" }, { "from": 6499852545, "to": 6511512544, "type": "CALL" }, { "from": 6499852550, "to": 6499851441, "type": "CODE" }, { "from": 6499852566, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6499851173, "to": 6740709440, "type": "DATA" }, { "from": 6499851512, "to": 6723547808, "type": "DATA" }, { "from": 6499851670, "to": 6723547880, "type": "DATA" }, { "from": 6499851736, "to": 6740709440, "type": "DATA" }, { "from": 6499852144, "to": 6723547840, "type": "DATA" } ] }, "strings": [ { "va": "0x190c132a0", "offset": 281093792, "ascii": "tabAiPrivacy.onBlockedUrlsAdded", "wide": null }, { "va": "0x190c132e8", "offset": 281093864, "ascii": "tabAiPrivacy.onBlockedUrlListChanged", "wide": null }, { "va": "0x190c132c0", "offset": 281093824, "ascii": "tabAiPrivacy.onBlockedUrlsRemoved", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 11193 }, { "label": "p-sidebar-run", "file": "rea-p-sidebar-run.json", "file_sha256": "3b70454fe8bc17af7e5eeeac106c508b3ef12e632ade9d254a0d2cdd1353aaff", "status": "completed", "evidence_id": "ev_1d51e473e1e466d415605ec69f6a41b3f59ee980614247bb130c2d12863dee30", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183aa1c70;pdgo @ 0x183aa1c70;afij @ 0x183aa1c70", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183aa1c70", "size": 1456, "nargs": 3, "signature": "fcn.183aa1c70(int64_t arg1, int64_t arg2, int64_t arg_8fh);", "callrefs": [ { "from": 6503931066, "to": 6502310480, "type": "CALL" }, { "from": 6503931096, "to": 6542067384, "type": "CALL" }, { "from": 6503931203, "to": 6514565536, "type": "CALL" }, { "from": 6503931216, "to": 6532013296, "type": "CALL" }, { "from": 6503931242, "to": 6740346544, "type": "CALL" }, { "from": 6503931325, "to": 6740346544, "type": "CALL" }, { "from": 6503931377, "to": 6462089824, "type": "CALL" }, { "from": 6503931442, "to": 6476506384, "type": "CALL" }, { "from": 6503931534, "to": 6512708384, "type": "CALL" }, { "from": 6503931564, "to": 6503931580, "type": "CODE" }, { "from": 6503931608, "to": 6503931627, "type": "CODE" }, { "from": 6503931622, "to": 6526594288, "type": "CALL" }, { "from": 6503931683, "to": 6503931708, "type": "CODE" }, { "from": 6503931703, "to": 6511513840, "type": "CALL" }, { "from": 6503931752, "to": 6672753616, "type": "CALL" }, { "from": 6503931766, "to": 6587962400, "type": "CALL" }, { "from": 6503931810, "to": 6587967968, "type": "CALL" }, { "from": 6503931849, "to": 6511512544, "type": "CALL" }, { "from": 6503931878, "to": 6511512544, "type": "CALL" }, { "from": 6503931883, "to": 6503932029, "type": "CODE" }, { "from": 6503931968, "to": 6587959616, "type": "CALL" }, { "from": 6503932016, "to": 6587967968, "type": "CALL" }, { "from": 6503932072, "to": 6511512544, "type": "CALL" }, { "from": 6503932158, "to": 6740346544, "type": "CALL" }, { "from": 6503932204, "to": 6740346544, "type": "CALL" }, { "from": 6503932217, "to": 6503932226, "type": "CODE" }, { "from": 6503932231, "to": 6526594288, "type": "CALL" }, { "from": 6503932317, "to": 6503931708, "type": "CODE" }, { "from": 6503932331, "to": 6542069736, "type": "CALL" }, { "from": 6503932356, "to": 6479662928, "type": "CALL" }, { "from": 6503932368, "to": 6542069628, "type": "CALL" }, { "from": 6503932373, "to": 6503931521, "type": "CODE" }, { "from": 6503932389, "to": 6542089024, "type": "CALL" }, { "from": 6503932402, "to": 6547637840, "type": "CALL" }, { "from": 6503932407, "to": 6503931475, "type": "CODE" }, { "from": 6503932426, "to": 6503931461, "type": "CODE" }, { "from": 6503932439, "to": 6503931461, "type": "CODE" } ], "datarefs": [ { "from": 6503931010, "to": 6740709440, "type": "DATA" }, { "from": 6503931137, "to": 6732211304, "type": "DATA" }, { "from": 6503931166, "to": 6732211317, "type": "DATA" }, { "from": 6503931177, "to": 6732211304, "type": "DATA" }, { "from": 6503931286, "to": 6461708272, "type": "DATA" }, { "from": 6503931308, "to": 6741850168, "type": "DATA" }, { "from": 6503931346, "to": 6461708240, "type": "DATA" }, { "from": 6503931484, "to": 6742148608, "type": "DATA" }, { "from": 6503931490, "to": 6741832416, "type": "DATA" }, { "from": 6503931521, "to": 6742148552, "type": "DATA" }, { "from": 6503931580, "to": 6732211336, "type": "DATA" }, { "from": 6503931610, "to": 6732211280, "type": "DATA" }, { "from": 6503931782, "to": 6587963136, "type": "DATA" }, { "from": 6503931800, "to": 6545109024, "type": "DATA" }, { "from": 6503931897, "to": 6716742096, "type": "DATA" }, { "from": 6503931929, "to": 6716742112, "type": "DATA" }, { "from": 6503931946, "to": 6716742096, "type": "DATA" }, { "from": 6503931984, "to": 6587963136, "type": "DATA" }, { "from": 6503932009, "to": 6545109024, "type": "DATA" }, { "from": 6503932088, "to": 6740709440, "type": "DATA" }, { "from": 6503932210, "to": 6732211392, "type": "DATA" }, { "from": 6503932219, "to": 6732211360, "type": "DATA" }, { "from": 6503932260, "to": 6712689744, "type": "DATA" }, { "from": 6503932283, "to": 6712689747, "type": "DATA" }, { "from": 6503932296, "to": 6712689744, "type": "DATA" }, { "from": 6503932324, "to": 6742148608, "type": "DATA" }, { "from": 6503932336, "to": 6742148608, "type": "DATA" }, { "from": 6503932349, "to": 6742148552, "type": "DATA" }, { "from": 6503932361, "to": 6742148608, "type": "DATA" } ] }, "strings": [ { "va": "0x191456468", "offset": 289757288, "ascii": "Failed to show tab side panel", "wide": null }, { "va": "0x191456475", "offset": 289757301, "ascii": "w tab side panel", "wide": null }, { "va": "0x191456488", "offset": 289757320, "ascii": "GLIC is not available", "wide": null }, { "va": "0x191456450", "offset": 289757264, "ascii": "No active browser found", "wide": null }, { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x1914564c0", "offset": 289757376, "ascii": "Tab side panel shown successfully", "wide": null }, { "va": "0x1914564a0", "offset": 289757344, "ascii": "Tab side panel is already shown", "wide": null }, { "va": "0x1901b8450", "offset": 270235728, "ascii": "Success", "wide": null }, { "va": "0x1901b8453", "offset": 270235731, "ascii": "cess", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 13184 }, { "label": "p-theme-mode-setter", "file": "rea-p-theme-mode-setter.json", "file_sha256": "c8c88c8ce4dc181a3806a9ee2872cf5b0db8e8e0d9eb8c962ebf57292ff5da06", "status": "completed", "evidence_id": "ev_30376900aaa8c467bce4b43a32d493cbba03aa708fb3d5aa70e97cc15a6936ec", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x1893211b0;pdgo @ 0x1893211b0;afij @ 0x1893211b0", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x1893211b0", "size": 287, "nargs": 2, "signature": "fcn.1893211b0(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6596727278, "to": 6511423872, "type": "CALL" }, { "from": 6596727309, "to": 6740346544, "type": "CALL" }, { "from": 6596727318, "to": 6596718288, "type": "CALL" }, { "from": 6596727366, "to": 6740346544, "type": "CALL" }, { "from": 6596727386, "to": 6740346544, "type": "CALL" }, { "from": 6596727421, "to": 6491009888, "type": "CALL" }, { "from": 6596727445, "to": 6442840976, "type": "CALL" }, { "from": 6596727453, "to": 6480812608, "type": "CALL" }, { "from": 6596727497, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6596727231, "to": 6740709440, "type": "DATA" }, { "from": 6596727266, "to": 6741126408, "type": "DATA" }, { "from": 6596727392, "to": 6719734136, "type": "DATA" }, { "from": 6596727433, "to": 6741126408, "type": "DATA" }, { "from": 6596727466, "to": 6740709440, "type": "DATA" } ] }, "strings": [ { "va": "0x190870178", "offset": 277280120, "ascii": "browser.theme.color_scheme2", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 2725 }, { "label": "p-theme-run", "file": "rea-p-theme-run.json", "file_sha256": "81aa37f7c0f40fc5abfe243aeb46d012710ac9a8f0bdcbd5e3b74226648b5d09", "status": "completed", "evidence_id": "ev_572995ccc485496ed71abbb3b006662bce5699599136af3faff8fe3aef342a9b", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183842c70;pdgo @ 0x183842c70;afij @ 0x183842c70", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183842c70", "size": 530, "nargs": 2, "signature": "fcn.183842c70(int64_t arg1, int64_t arg2);", "callrefs": [ { "from": 6501444784, "to": 6502326704, "type": "CALL" }, { "from": 6501444827, "to": 6536221472, "type": "CALL" }, { "from": 6501444864, "to": 6596727216, "type": "CALL" }, { "from": 6501444880, "to": 6587962272, "type": "CALL" }, { "from": 6501444885, "to": 6501445104, "type": "CODE" }, { "from": 6501444895, "to": 6542067384, "type": "CALL" }, { "from": 6501445006, "to": 6501445093, "type": "CODE" }, { "from": 6501445099, "to": 6587959616, "type": "CALL" }, { "from": 6501445113, "to": 6587960272, "type": "CALL" }, { "from": 6501445226, "to": 6501445093, "type": "CODE" }, { "from": 6501445244, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6501444730, "to": 6740709440, "type": "DATA" }, { "from": 6501444942, "to": 6723627568, "type": "DATA" }, { "from": 6501444971, "to": 6723627579, "type": "DATA" }, { "from": 6501444982, "to": 6723627568, "type": "DATA" }, { "from": 6501445020, "to": 6716742096, "type": "DATA" }, { "from": 6501445052, "to": 6716742112, "type": "DATA" }, { "from": 6501445069, "to": 6716742096, "type": "DATA" }, { "from": 6501445129, "to": 6740709440, "type": "DATA" }, { "from": 6501445164, "to": 6723627360, "type": "DATA" }, { "from": 6501445192, "to": 6723627360, "type": "DATA" } ] }, "strings": [ { "va": "0x190c26a30", "offset": 281173552, "ascii": "Theme service not available", "wide": null }, { "va": "0x190c26a3b", "offset": 281173563, "ascii": "ce not available", "wide": null }, { "va": "0x1905959d0", "offset": 274288080, "ascii": "Invalid parameters", "wide": null }, { "va": "0x190c26960", "offset": 281173344, "ascii": "No profile available", "wide": null } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 5745 }, { "label": "p-trace-recording", "file": "rea-p-trace-recording.json", "file_sha256": "03957f3cc46e416bab00e03625d7fe1011e33b39bebd2dc3d084bed8f6ab35ab", "status": "completed", "evidence_id": "ev_49a5765371ce53d8377e6f95cfde259f05851e800c375c560eda74616abb0300", "subject": { "name": "Tabbit.dll", "digest": { "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c" }, "local_path": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll", "format": "unknown", "architecture": null }, "command": "e scr.color=0;af @ 0x183506850;pdgo @ 0x183506850;afij @ 0x183506850", "artifact_changed": false, "artifact_sha256_after": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "output_truncated": false, "limitations": [ "The executable version and supported formats are reported as unknown because no reliable version probe was performed.", "A non-zero process exit is preserved as an observed command result.", "Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.", "When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call." ], "function": { "address": "0x183506850", "size": 787, "nargs": 3, "signature": "fcn.183506850(int64_t arg1, int64_t arg2, int64_t arg3);", "callrefs": [ { "from": 6498052265, "to": 6542067384, "type": "CALL" }, { "from": 6498052282, "to": 6498080688, "type": "CALL" }, { "from": 6498052303, "to": 6498080848, "type": "CALL" }, { "from": 6498052316, "to": 6511512544, "type": "CALL" }, { "from": 6498052337, "to": 6542434496, "type": "CALL" }, { "from": 6498052391, "to": 6624333584, "type": "CALL" }, { "from": 6498052429, "to": 6583793008, "type": "CALL" }, { "from": 6498052470, "to": 6511423872, "type": "CALL" }, { "from": 6498052484, "to": 6542067384, "type": "CALL" }, { "from": 6498052571, "to": 6512942288, "type": "CALL" }, { "from": 6498052629, "to": 6517399712, "type": "CALL" }, { "from": 6498052642, "to": 6612339888, "type": "CALL" }, { "from": 6498052652, "to": 6447869184, "type": "CALL" }, { "from": 6498052657, "to": 6498052211, "type": "CODE" }, { "from": 6498052682, "to": 6498080848, "type": "CALL" }, { "from": 6498052695, "to": 6511512544, "type": "CALL" }, { "from": 6498052705, "to": 6542067384, "type": "CALL" }, { "from": 6498052801, "to": 6542436672, "type": "CALL" }, { "from": 6498052823, "to": 6612340096, "type": "CALL" }, { "from": 6498052851, "to": 6511512544, "type": "CALL" }, { "from": 6498052856, "to": 6498052647, "type": "CODE" }, { "from": 6498052889, "to": 6740346544, "type": "CALL" }, { "from": 6498052895, "to": 6498052593, "type": "CODE" }, { "from": 6498052917, "to": 6511512544, "type": "CALL" }, { "from": 6498052922, "to": 6498052593, "type": "CODE" }, { "from": 6498052937, "to": 6511512544, "type": "CALL" }, { "from": 6498052942, "to": 6498052909, "type": "CODE" }, { "from": 6498052957, "to": 6542089024, "type": "CALL" } ], "datarefs": [ { "from": 6498052188, "to": 6740709440, "type": "DATA" }, { "from": 6498052222, "to": 6740709440, "type": "DATA" }, { "from": 6498052342, "to": 6722919528, "type": "DATA" }, { "from": 6498052365, "to": 6722919552, "type": "DATA" }, { "from": 6498052404, "to": 6742076936, "type": "DATA" }, { "from": 6498052458, "to": 6741126408, "type": "DATA" }, { "from": 6498052498, "to": 6446192048, "type": "DATA" }, { "from": 6498052509, "to": 6488516144, "type": "DATA" }, { "from": 6498052520, "to": 6511490512, "type": "DATA" }, { "from": 6498052531, "to": 6498052976, "type": "DATA" }, { "from": 6498052546, "to": 6722920016, "type": "DATA" }, { "from": 6498052553, "to": 6722919960, "type": "DATA" }, { "from": 6498052758, "to": 6722919792, "type": "DATA" }, { "from": 6498052785, "to": 6722919792, "type": "DATA" }, { "from": 6498052874, "to": 6488537248, "type": "DATA" } ] }, "strings": [ { "va": "0x190b79c68", "offset": 280465512, "ascii": "record-continuously", "wide": null }, { "va": "0x190b79c80", "offset": 280465536, "ascii": "toplevel,toplevel.flow,cc,benchmark,viz,gpu,latency,loading,browser,navigation,blink,blink.user_timing,renderer,input,ui,views,v8,mojom,ipc,net,disabled-by-default-v8.cpu_profiler,disabled-by-default-extensions.tab_attribution", "wide": null }, { "va": "0x190b79e50", "offset": 280466000, "ascii": "StartRecording", "wide": null }, { "va": "0x190b79e18", "offset": 280465944, "ascii": "..\\..\\tab\\browser\\tracing\\trace_recording_manager.cc", "wide": null }, { "va": "0x190b79d70", "offset": 280465776, "ascii": null, "wide": "Unable to start performance recording. Close other active tracing tools and retry." } ], "imports": [], "status_display": "伪代码已输出", "record_kind": "pseudocode", "pseudocode_chars": 7237 } ], "reused": [ { "label": "reuse-channel-dispatch", "address": "0x1837b9f90", "evidence_id": "ev_3703eb301523fe553ffffc308c2a098b0e92b722c51cbf50a50e5d1f54eb6b0c", "status": "completed-output", "behavior": "Private frame buffering and dispatch", "source_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\rea-rizin-channel-dispatch.json", "stdout_text_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\native-channel-dispatch.txt", "rerun": false, "file": "evidence/reused/rea-rizin-channel-dispatch.json", "text_file": "evidence/reused/native-channel-dispatch.txt" }, { "label": "reuse-extra-init", "address": "0x1837c5c40", "evidence_id": "ev_bb53514dbf26e51e2b6e50c8380549421f9ce74232a16b8556b0ac2a81ed451a", "status": "completed-output", "behavior": "MaybeInstallHostIntegration candidate", "source_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\rea-rizin-extra-init.json", "stdout_text_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\native-extra-init.txt", "rerun": false, "file": "evidence/reused/rea-rizin-extra-init.json", "text_file": "evidence/reused/native-extra-init.txt" }, { "label": "reuse-host-launch", "address": "0x1837bf640", "evidence_id": "ev_1d65fecef88321a0555234d4515d9b5a169f035634af24bf6b81f36e4a083cfa", "status": "completed-output", "behavior": "Browser Runtime Service startup path candidate", "source_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\rea-rizin-host-launch.json", "stdout_text_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\native-host-launch.txt", "rerun": false, "file": "evidence/reused/rea-rizin-host-launch.json", "text_file": "evidence/reused/native-host-launch.txt" }, { "label": "reuse-private-transport", "address": "0x1837fc860", "evidence_id": "ev_8e72d252af5ba8ed32751232481c17493338e524a738ac7d1b347a2d15f7b18f", "status": "completed-output", "behavior": "Private Windows named-pipe creation", "source_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\rea-rizin-private-transport.json", "stdout_text_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\native-private-transport.txt", "rerun": false, "file": "evidence/reused/rea-rizin-private-transport.json", "text_file": "evidence/reused/native-private-transport.txt" }, { "label": "reuse-transport-create", "address": "0x1837fdab0", "evidence_id": "ev_7e32fe74ef1e8f3a536a7ebb6897049e9310aeb1c00fa0cc0ca96acc5bc80a11", "status": "completed-output", "behavior": "Transport Start callback setup", "source_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\rea-rizin-transport-create.json", "stdout_text_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\native-transport-create.txt", "rerun": false, "file": "evidence/reused/rea-rizin-transport-create.json", "text_file": "evidence/reused/native-transport-create.txt" }, { "label": "reuse-transport-read", "address": "0x1837fe860", "evidence_id": "ev_0060dde16419bfb42735208a96a17618c0582ff5407d60ee3e684637297cd19b", "status": "completed-output", "behavior": "Transport Close/cleanup (initial seed label was read)", "source_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\rea-rizin-transport-read.json", "stdout_text_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\native-transport-read.txt", "rerun": false, "file": "evidence/reused/rea-rizin-transport-read.json", "text_file": "evidence/reused/native-transport-read.txt" }, { "label": "reuse-transport-write", "address": "0x1837fec00", "evidence_id": "ev_3868eeddfa09ba43642f3a0d3a6490f71ddab43601f3c18b43702b75abea5445", "status": "completed-output", "behavior": "Cancel and drain overlapped I/O (initial seed label was write)", "source_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\rea-rizin-transport-write.json", "stdout_text_file": "C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\research-output\\evidence\\native-transport-write.txt", "rerun": false, "file": "evidence/reused/rea-rizin-transport-write.json", "text_file": "evidence/reused/native-transport-write.txt" } ], "coverage": { "bookmarkHistory": { "date": "2026-10-27", "bookmark_domains": { "recovered": [ "bookmark open/new-tab/legacy-host branch", "extension API schema additions for GUID, metadata, usage, import/export and selective events", "bookmarks WebUI data source candidates", "local bookmark creation and cloud switch/login coupling in the retained extension bundle", "AI bookmark summary queue and summary metadata key" ], "partial_or_unknown": [ "exact native persistence of every metadata key", "complete native bookmark manager page diff", "cloud synchronization protocol and ordering", "all bookmark favicon and UI render paths" ] }, "history_domains": { "recovered": [ "history page is backed by the same history.mojom PageHandler surface as pinned Chromium", "address-bar suggestion deletion reaches HistoryService::DeleteURLs", "tab_data_migration native JSON history parser requires metadata.schema_version==1", "tab_data_migration imports history and profile-related data through tab_data_migration_service.cc" ], "partial_or_unknown": [ "exact SQL/backend call sequence for imported history", "history query/ranking/deduplication differences from upstream", "exact scheduled callback type and database completion semantics for address-bar deletion", "full history page visual diff" ] }, "evidence_boundaries": [ "No whole-program decompilation, no complete source repository and no full binary diff.", "Observed source paths are strings retained in two PE files; they do not restore file contents.", "Resource.pak JavaScript is read as data; the target JavaScript is not executed.", "The user Profile, personal bookmark/history records and cloud credentials were not read." ] }, "resourcesPak": { "summary": { "resources": 6268, "text_resources": 4957, "binary_resources": 1311, "product_keyword_matches": 1218, "tabbit_authored_text_resources": 4, "tab_patch_marked_resources": 15, "translation_extension_version": "2.2026.1021.1302", "tab_local_files_runtime_version": "0.1.7" }, "curated_pages": 35, "notable_findings": [ "resources.pak contains full text payloads for Tabbit WebUI pages, not only string tables.", "Tabbit-authored WebUI sources are visible for Tabbit Debug, Voice Input, and Desktop Pet.", "Tabbit also packages extension pages and large content bundles: quick actions, popup, LLM bridge, subtitle fetcher, Readability, screenshot, onboarding, organizer and local-file preview.", "Tabbit Translation is shipped as a full MV3 extension inside resources.pak with its own manifest, localized messages, options page and popup.", "TabLocalFiles/Previewer ships HTML, JS, CSS, theme and document-viewer assets; this is a product web application bundled into the browser." ] }, "extensions": { "count": 6, "packed_builtins": 4, "unpacked": 2, "webui_pages": 22, "extensions": [ { "id": "ckahjbbpcheepodannonaakeaeekplpo", "name": "uBlock Origin", "version": "1.74.0.1", "enabled": false, "packaging": "unpacked-secure-preferences", "function": "uBlock Origin 广告/跟踪器拦截扩展，使用 webRequestBlocking、内容脚本和过滤列表。" }, { "id": "iobiajbbjgoiehijaledajjiainhmafb", "name": "Tabbit翻译", "version": "2.2026.1021.1302", "enabled": true, "packaging": "packed-builtin-resource", "function": "Tabbit翻译：网页、选区和输入框翻译，PDF/Previewer 翻译、YouTube/Bilibili 字幕、X/Twitter 适配。" }, { "id": "keehmdfandnlnejjadmpehgololofkai", "name": "Taste", "version": "2.2026.1021.1351", "enabled": true, "packaging": "unpacked-secure-preferences", "function": "Taste 学习/Agent 侧栏扩展：打开侧栏、页面内容脚本、Claude iframe 注入、MCP/Taste Kit。" }, { "id": "mbpebkdabcipnkcjgmoaejclfnpakpdj", "name": "Previewer", "version": "2.2026.1021.1300", "enabled": true, "packaging": "packed-builtin-resource", "function": "Previewer 本地文件扩展：file:// 预览、Markdown/Office/PDF、收藏和最近文件、阅读模式、文件关联设置。" }, { "id": "mhjfbmdgcfjbbpaeojofohoefgiehjai", "name": "Chromium PDF Viewer", "version": "1", "enabled": true, "packaging": "packed-builtin-resource", "function": "Chromium PDF Viewer：上游内置 PDF 扩展，被 Previewer/Tabbit翻译复用。" }, { "id": "nmbemfeekdkfhjikjegnegkndcehpfej", "name": "Tabbit Assistant", "version": "2.2026.1021.1301", "enabled": true, "packaging": "packed-builtin-resource", "function": "Tabbit Assistant 核心 AI 扩展：侧栏/聊天、截图与收藏、书签历史、内容提取、标签整理、Glic、隐私和本地 Agent。" } ] }, "sourceTree": { "unique_paths": 9243, "occurrences": 10878, "counts": { "apps": 2, "base": 105, "cc": 38, "chrome": 2364, "cjs": 1, "components": 1337, "content": 525, "core": 1, "crypto": 10, "deps": 61, "device": 77, "extensions": 152, "gin": 3, "google_apis": 28, "gpu": 85, "ipc": 6, "media": 221, "mojo": 33, "net": 299, "pdf": 10, "printing": 8, "sandbox": 5, "services": 218, "skia": 1, "sql": 4, "storage": 43, "tab": 54, "third_party": 3238, "types": 1, "ui": 257, "url": 1, "v8": 55 }, "artifacts": [ { "file": "Application/1.18.21.0/chrome_elf.dll", "bytes": 4805992, "sha256": "b8568e90be4f431beb938fef1767c7dbb67f65022df2b3c2a5941d546a6d9959", "role": "chromium-likely", "pe_status": "valid", "path_occurrences": 120, "unique_paths": 120 }, { "file": "Application/1.18.21.0/chrome_pwa_launcher.exe", "bytes": 3255144, "sha256": "3fa9f1fed196804e4ebbe9020b55b6b890bcf059827e9d8e1997700ac64cd54a", "role": "chromium-likely", "pe_status": "valid", "path_occurrences": 106, "unique_paths": 106 }, { "file": "Application/1.18.21.0/chrome_wer.dll", "bytes": 121192, "sha256": "5d969c04d382b803369ca6fd7722338107c09105d359217bdf6ab7a4445a9c9b", "role": "chromium-likely", "pe_status": "valid", "path_occurrences": 0, "unique_paths": 0 }, { "file": "Application/1.18.21.0/d3dcompiler_47.dll", "bytes": 4753864, "sha256": "f5c95e919b4ffa1ac71049cd45b9f986d2965e6888395ca2806337985334fa56", "role": "graphics-likely", "pe_status": "valid", "path_occurrences": 0, "unique_paths": 0 }, { "file": "Application/1.18.21.0/dxcompiler.dll", "bytes": 25859944, "sha256": "853149b2c48d7205d0dbb2e7dfed4368a028624e053af5799702a1426d3f2eeb", "role": "graphics-likely", "pe_status": "valid", "path_occurrences": 406, "unique_paths": 406 }, { "file": "Application/1.18.21.0/dxil.dll", "bytes": 1503728, "sha256": "88d83e71c4f9f2a60deeaa685a6d034a182ca197b6ec53f86144335f663fd690", "role": "graphics-likely", "pe_status": "valid", "path_occurrences": 0, "unique_paths": 0 }, { "file": "Application/1.18.21.0/elevation_service.exe", "bytes": 3947376, "sha256": "dc212a98331443b7620a432233f835c4ffc1f04ab4763a5f965c2d28a4491f5f", "role": "chromium-likely", "pe_status": "valid", "path_occurrences": 140, "unique_paths": 140 }, { "file": "Application/1.18.21.0/eventlog_provider.dll", "bytes": 16744, "sha256": "e661331c1772a0cc52213a987b34fc6988e29848d625949ca6417c74fb775ff3", "role": "chromium-likely", "pe_status": "valid", "path_occurrences": 0, "unique_paths": 0 }, { "file": "Application/1.18.21.0/Installer/setup.exe", "bytes": 6866800, "sha256": "d400692b8c0124996ed85a6effac7036bd7ae6a7e230227dcb55be2a733dc759", "role": "installer", "pe_status": "valid", "path_occurrences": 252, "unique_paths": 252 }, { "file": "Application/1.18.21.0/libEGL.dll", "bytes": 461168, "sha256": "d76fc55555a0999c28c14d6a7e7006fe6dbf641ee0b374ad0f40f00807dcec66", "role": "graphics-likely", "pe_status": "valid", "path_occurrences": 0, "unique_paths": 0 }, { "file": "Application/1.18.21.0/libGLESv2.dll", "bytes": 461168, "sha256": "c8ff6392f06508a91a70eedff916e5fb13957ba0b43d5bc4a642d0dcfa71d606", "role": "graphics-likely", "pe_status": "valid", "path_occurrences": 0, "unique_paths": 0 }, { "file": "Application/1.18.21.0/notification_helper.exe", "bytes": 4899696, "sha256": "1382b2291c22f74ca4d554257362f4c5b545386721b855422f3a50ab27b2469e", "role": "chromium-likely", "pe_status": "valid", "path_occurrences": 131, "unique_paths": 131 }, { "file": "Application/1.18.21.0/Tabbit.dll", "bytes": 311068016, "sha256": "a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c", "role": "tabbit-core", "pe_status": "valid", "path_occurrences": 8570, "unique_paths": 8552 }, { "file": "Application/1.18.21.0/TabbitDance/node.exe", "bytes": 89935872, "sha256": "2ffe3acc0458fdde999f50d11809bbe7c9b7ef204dcf17094e325d26ace101d8", "role": "runtime", "pe_status": "valid", "path_occurrences": 204, "unique_paths": 65 }, { "file": "Application/1.18.21.0/TabbitDance/tabbit-playwright-cli.exe", "bytes": 2670440, "sha256": "01d581aa65e3f7689a554b5bdc7cefa637daa5c43ed2a943ff504ff79037a9a9", "role": "runtime", "pe_status": "valid", "path_occurrences": 96, "unique_paths": 96 }, { "file": "Application/1.18.21.0/TabbitDance/tabbit-playwright-launcher.exe", "bytes": 2687856, "sha256": "5ab3f70168d402bbdc57453532965b40e06eb801e1bbc4f7eaeb957915b9de7b", "role": "runtime", "pe_status": "valid", "path_occurrences": 96, "unique_paths": 96 }, { "file": "Application/1.18.21.0/vk_swiftshader.dll", "bytes": 5423976, "sha256": "dbe6d3e0c05150b6db3ba2e374f49aa8b111cf85f378e7c60f061ffec57b2815", "role": "graphics-likely", "pe_status": "valid", "path_occurrences": 40, "unique_paths": 40 }, { "file": "Application/1.18.21.0/vulkan-1.dll", "bytes": 995184, "sha256": "2192aa4c2bd60f97bdaed38c49a1989f577aa425c950fe29e7341b7bb486ba1d", "role": "graphics-likely", "pe_status": "valid", "path_occurrences": 0, "unique_paths": 0 }, { "file": "Application/chrome_proxy.exe", "bytes": 2616688, "sha256": "e766b7b65e9b59d9f90321c50a3495e551fcb7dd0a7702b29a6e458b519c6bf4", "role": "chromium-likely", "pe_status": "valid", "path_occurrences": 102, "unique_paths": 102 }, { "file": "Application/Tabbit Browser.exe", "bytes": 20435304, "sha256": "be7cb26a01c6038b593b2a2c60b352c066d06f521e8bee272e195e5effd3502e", "role": "tabbit-core", "pe_status": "valid", "path_occurrences": 204, "unique_paths": 204 }, { "file": "TabbitUpdater/1.17.14.0/updater.exe", "bytes": 9940336, "sha256": "3ec96a52546612023a6e2b6a925aad70a1ab1aa7c664c3d5075f2c953c36f771", "role": "updater", "pe_status": "valid", "path_occurrences": 411, "unique_paths": 411 } ], "scope": "All .dll/.exe artifacts discovered under selected installed program roots, full-file printable ASCII and Latin UTF16 source-location path scan. Analyst derivation; not REA pseudocode.", "chromium_tree": { "revision": "154.0.8037.58", "commit": "a654841425914cbb703a2931e07b70a83aedbafd", "files": 502668, "directories": 44435, "observed_share_of_root_files": 1.84, "present_in_root_tree": 6928, "absent_from_root_tree": 2315 }, "section_distribution": { "total_locations": 10878, "encodings": { "ascii": 10868, "utf16le": 10 }, "sections": { ".rdata": { "total": 10878, "ascii": 10868, "utf16le": 10 } } }, "upstream_comparison": { "revision": "154.0.8037.58", "candidates": 2526, "present": 2360, "absent": 166, "unknown": 0, "new_candidate_count": 150 } }, "installInventory": { "file_count": 2687, "directory_count": 643, "selected_roots": [ "Application", "TabbitUpdater" ], "scope": "Actual installed program paths present during traversal, excluding personal User Data and analyst report trees. No reconstruction of original source." } }, "limitations": [ "No original source recovery, full program decompilation, full repository reconstruction or whole Chromium binary comparison.", "Observed source paths are strings retained in selected PE files; they do not restore file contents or establish authorship.", "The observed 9,243 paths are only 1.84% of the 502,668 files in the pinned Chromium root repository; this is not a complete source tree.", "Upstream 404 path comparison is a new-file candidate filter, not a complete source diff.", "Paths, vtables, local direct-call graphs and API schemas have separate evidentiary scope.", "Static network/request construction is not observed execution." ] }