{"ok":true,"data":{"evidence_id":"ev_8370cea805119f685ea13e5a9f097c06997ed3a4256b8ea16e2fcd9e7d69f76e","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x183673330;pdgo @ 0x183673330;afij @ 0x183673330","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x183673330;pdgo @ 0x183673330;afij @ 0x183673330","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":"    0x183673330    |\r\n    0x183673330    |// WARNING: [rz-ghidra] Detected overlap for variable var_41h\r\n    0x183673330    |// WARNING: [rz-ghidra] Detected overlap for variable var_40h\r\n    0x183673330    |// WARNING: [rz-ghidra] Detected overlap for variable var_17ch\r\n                   |\r\n    0x183673330    |void fcn.183673330(int64_t arg1, int64_t arg2, int64_t arg3)\r\n                   |{\r\n                   |    int32_t *piVar1;\r\n                   |    int32_t *piVar2;\r\n                   |    code *pcVar3;\r\n                   |    char cVar4;\r\n                   |    int32_t iVar5;\r\n                   |    int64_t iVar6;\r\n                   |    undefined8 uVar7;\r\n                   |    undefined4 *puVar8;\r\n                   |    int64_t *piVar9;\r\n                   |    int64_t iVar10;\r\n                   |    uint64_t uVar11;\r\n                   |    bool bVar12;\r\n                   |    undefined auStack_1c8 [32];\r\n                   |    int64_t var_1a8h;\r\n                   |    int64_t iStack_1a0;\r\n                   |    int64_t var_198h;\r\n                   |    int64_t var_188h;\r\n                   |    int64_t var_180h;\r\n                   |    int64_t var_178h;\r\n                   |    int64_t var_170h;\r\n                   |    int64_t var_58h;\r\n                   |    int64_t var_50h;\r\n                   |    int64_t var_48h;\r\n                   |    int64_t *var_40h;\r\n                   |    int64_t iStack_38;\r\n                   |    int64_t var_30h;\r\n                   |    \r\n    0x183673348    |    var_30h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_1c8;\r\n    0x183673357    |    if (*(int32_t *)(arg1 + 0x10) == 3) {\r\n    0x183673366    |        var_58h = 0;\r\n    0x183673366    |        var_50h = 0;\r\n    0x18367336e    |        var_48h = 0;\r\n    0x18367337d    |        piVar9 = (int64_t *)arg2;\r\n    0x18367337d    |        if (*(char *)arg3 == '\\x01') {\r\n    0x18367337f    |            iVar6 = (int64_t)*(char *)(arg3 + 0x1f);\r\n    0x183673387    |            if (iVar6 < 0) {\r\n    0x183673389    |                iVar6 = *(int64_t *)(arg3 + 0x10);\r\n                   |            }\r\n    0x183673390    |            if (iVar6 != 0) {\r\n    0x183673396    |                piVar9 = (int64_t *)(arg3 + 8);\r\n                   |            }\r\n                   |        }\r\n    0x1836733b5    |        if (*(char *)((int64_t)piVar9 + 0x17) < '\\0') {\r\n    0x18367339f    |            func_0x0001841dd0f0(&var_58h, *piVar9, piVar9[1]);\r\n                   |        } else {\r\n    0x1836733b7    |            var_48h = piVar9[2];\r\n    0x1836733c3    |            var_58h = *piVar9;\r\n    0x1836733c3    |            var_50h = piVar9[1];\r\n                   |        }\r\n    0x1836733d5    |        if (*(char *)(arg1 + 0x91) == '\\x01') {\r\n    0x1836733e2    |            if (*(int32_t *)0x191de85c0 < 3) {\r\n    0x1836733ef    |                func_0x00018030d390(&var_188h, 0x190bfffb0, 799, 2);\r\n    0x183673417    |                uVar7 = func_0x000184dcd0d0(&var_178h, 0x190c00a88, 0x2a);\r\n    0x183673421    |                uVar7 = func_0x00018084a240(uVar7, *(undefined *)arg3);\r\n    0x183673436    |                uVar7 = func_0x000184dcd0d0(uVar7, 0x190c00ab8, 9);\r\n    0x18367344d    |                iVar6 = (int64_t)var_48h._7_1_;\r\n    0x18367344d    |                if ((int64_t)var_48h._7_1_ < 0) {\r\n    0x18367344f    |                    iVar6 = var_50h;\r\n                   |                }\r\n    0x183673457    |                iVar10 = (int64_t)*(char *)(arg2 + 0x17);\r\n    0x183673462    |                if (iVar10 < 0) {\r\n    0x183673464    |                    iVar10 = *(int64_t *)(arg2 + 8);\r\n                   |                }\r\n    0x183673468    |                bVar12 = true;\r\n    0x18367346d    |                if (iVar6 == iVar10) {\r\n    0x183673471    |                    if (*(char *)(arg2 + 0x17) < '\\0') {\r\n    0x183673473    |                        arg2 = *(int64_t *)arg2;\r\n                   |                    }\r\n    0x183673478    |                    piVar9 = (int64_t *)var_58h;\r\n    0x183673478    |                    if (-1 < var_48h) {\r\n    0x183673482    |                        piVar9 = &var_58h;\r\n                   |                    }\r\n    0x18367348f    |                    iVar5 = func_0x000185f59f10(piVar9, arg2);\r\n    0x183673494    |                    bVar12 = iVar5 != 0;\r\n                   |                }\r\n    0x18367349c    |                func_0x00018084a240(uVar7, bVar12);\r\n    0x1836734a1    |                func_0x0001804b0120(&var_188h);\r\n                   |            }\r\n                   |code_r0x0001836734ab:\r\n    0x1836734b6    |            func_0x000183673ae0(arg1, &var_58h);\r\n                   |        } else {\r\n    0x183673519    |            if (*(char *)arg3 == '\\0') {\r\n    0x183673526    |                if (*(int32_t *)0x191de85c0 < 3) {\r\n    0x18367352f    |                    func_0x00018030d390(&var_188h, 0x190bfffb0, 0x326, 2);\r\n    0x18367355a    |                    uVar7 = func_0x000184dcd0d0(&var_178h, 0x190c00ac8, 0x22);\r\n    0x18367355f    |                    iVar6 = (int64_t)*(char *)(arg3 + 0x67);\r\n    0x183673567    |                    if (iVar6 < 0) {\r\n    0x18367356f    |                        iVar6 = *(int64_t *)(arg3 + 0x58);\r\n    0x183673573    |                        iVar10 = *(int64_t *)(arg3 + 0x50);\r\n                   |                    } else {\r\n    0x183673569    |                        iVar10 = arg3 + 0x50;\r\n                   |                    }\r\n    0x18367357a    |                    func_0x000184dcd0d0(uVar7, iVar10, iVar6);\r\n    0x18367352f    |                    func_0x0001804b0120(&var_188h);\r\n                   |                }\r\n    0x183673587    |                uVar7 = *(undefined8 *)(arg1 + 0xb0);\r\n    0x18367358e    |                func_0x0001836719e0(&var_188h, 0x3866);\r\n    0x1836735a6    |                func_0x00018367d860(uVar7, &var_188h);\r\n    0x1836735b0    |                if (var_178h._4_4_ < 0) {\r\n    0x1836735c6    |                    func_0x0001841dcbe0(var_188h, CONCAT44(var_178h._4_4_, (undefined4)var_178h) & 0x7fffffffffffffff);\r\n                   |                }\r\n    0x1836735cb    |                piVar1 = *(int32_t **)(arg1 + 0x1e8);\r\n    0x1836735d2    |                uVar7 = *(undefined8 *)(arg1 + 0x1f0);\r\n    0x1836735dc    |                if (piVar1 != (int32_t *)0x0) {\r\n    0x1836735e3    |                    LOCK();\r\n    0x1836735e3    |                    iVar5 = *piVar1;\r\n    0x1836735e3    |                    *piVar1 = *piVar1 + 1;\r\n    0x1836735e3    |                    UNLOCK();\r\n    0x1836735ed    |                    if (iVar5 == 0x7fffffff) {\r\n    0x183673ad5    |                        pcVar3 = (code *)swi(3);\r\n    0x183673ad5    |                        (*pcVar3)();\r\n    0x183673ad5    |                        return;\r\n                   |                    }\r\n                   |                }\r\n    0x1836735f8    |                puVar8 = (undefined4 *)func_0x000185f006b8(0x50);\r\n    0x183673600    |                *puVar8 = 1;\r\n    0x18367360d    |                *(undefined8 *)(puVar8 + 2) = 0x182cb32b0;\r\n    0x183673618    |                *(undefined8 *)(puVar8 + 4) = 0x18337f500;\r\n    0x183673623    |                *(undefined8 *)(puVar8 + 6) = 0x18339cdd0;\r\n    0x18367362e    |                *(undefined8 *)(puVar8 + 8) = 0x183673ae0;\r\n    0x183673632    |                *(int32_t **)(puVar8 + 10) = piVar1;\r\n    0x183673636    |                *(undefined8 *)(puVar8 + 0xc) = uVar7;\r\n    0x183673646    |                if (var_48h < 0) {\r\n    0x18367363a    |                    func_0x0001841dd0f0(puVar8 + 0xe, var_58h, var_50h);\r\n                   |                } else {\r\n    0x183673654    |                    *(int64_t *)(puVar8 + 0x12) = var_48h;\r\n    0x183673660    |                    puVar8[0xe] = (undefined4)var_58h;\r\n    0x183673660    |                    puVar8[0xf] = var_58h._4_4_;\r\n    0x183673660    |                    puVar8[0x10] = (undefined4)var_50h;\r\n    0x183673660    |                    puVar8[0x11] = var_50h._4_4_;\r\n                   |                }\r\n    0x183673678    |                func_0x000184339cd0(&var_188h, 0x190c00af0, 0x190bfffb0, 0x329);\r\n    0x183673688    |                piVar1 = *(int32_t **)(arg1 + 0x1e0);\r\n    0x18367368f    |                *(undefined4 **)(arg1 + 0x1e0) = puVar8;\r\n    0x183673699    |                if (piVar1 != (int32_t *)0x0) {\r\n    0x183673a43    |                    LOCK();\r\n    0x183673a43    |                    *piVar1 = *piVar1 + -1;\r\n    0x183673a43    |                    UNLOCK();\r\n    0x183673a47    |                    if (*piVar1 == 0) {\r\n    0x183673a5b    |                        if (*(int64_t *)(piVar1 + 4) == 0x182bf38a0) {\r\n    0x183673a6b    |                            piVar2 = *(int32_t **)(piVar1 + 0xc);\r\n    0x183673a72    |                            if (piVar2 != (int32_t *)0x0) {\r\n    0x183673ab2    |                                LOCK();\r\n    0x183673ab2    |                                *piVar2 = *piVar2 + -1;\r\n    0x183673ab2    |                                UNLOCK();\r\n    0x183673ab5    |                                if (*piVar2 == 0) {\r\n    0x183673abc    |                                    func_0x0001841dcbe0(piVar2, 8);\r\n                   |                                }\r\n                   |                            }\r\n    0x183673a7c    |                            func_0x0001841dcbe0(piVar1, 0x48);\r\n                   |                        } else {\r\n    0x183673a60    |                            (*(code *)0x185f59da0)(piVar1);\r\n                   |                        }\r\n                   |                    }\r\n                   |                }\r\n    0x1836736a3    |                *(undefined4 *)(arg1 + 0x1a8) = (undefined4)var_178h;\r\n    0x1836736ae    |                *(undefined4 *)(arg1 + 0x198) = (undefined4)var_188h;\r\n    0x1836736ae    |                *(undefined4 *)(arg1 + 0x19c) = var_188h._4_4_;\r\n    0x1836736ae    |                *(undefined4 *)(arg1 + 0x1a0) = (undefined4)var_180h;\r\n    0x1836736ae    |                *(undefined4 *)(arg1 + 0x1a4) = var_180h._4_4_;\r\n    0x1836736ba    |                *(int64_t *)(arg1 + 0x1b0) = var_170h;\r\n    0x1836736c1    |                *(undefined8 *)(arg1 + 0x1c8) = 1500000;\r\n                   |            } else {\r\n    0x183673705    |                iVar6 = (int64_t)var_48h._7_1_;\r\n    0x183673705    |                if ((int64_t)var_48h._7_1_ < 0) {\r\n    0x183673707    |                    iVar6 = var_50h;\r\n                   |                }\r\n    0x18367370f    |                iVar10 = (int64_t)*(char *)(arg2 + 0x17);\r\n    0x18367371a    |                if (iVar10 < 0) {\r\n    0x18367371c    |                    iVar10 = *(int64_t *)(arg2 + 8);\r\n                   |                }\r\n    0x183673723    |                if (iVar6 == iVar10) {\r\n    0x183673727    |                    if (*(char *)(arg2 + 0x17) < '\\0') {\r\n    0x183673729    |                        arg2 = *(int64_t *)arg2;\r\n                   |                    }\r\n    0x18367372e    |                    piVar9 = (int64_t *)var_58h;\r\n    0x18367372e    |                    if (-1 < var_48h) {\r\n    0x183673738    |                        piVar9 = &var_58h;\r\n                   |                    }\r\n    0x183673745    |                    iVar5 = func_0x000185f59f10(piVar9, arg2);\r\n    0x18367374c    |                    if (iVar5 == 0) goto code_r0x0001836734ab;\r\n                   |                }\r\n    0x183673752    |                uVar7 = *(undefined8 *)(arg1 + 0xb0);\r\n    0x183673760    |                var_188h = 0x1906ae820;\r\n    0x183673765    |                var_180h = 2;\r\n    0x183673778    |                if (*(int64_t *)0x191deaa10 == 0) {\r\n    0x183673ad8    |                    pcVar3 = (code *)swi(3);\r\n    0x183673ad8    |                    (*pcVar3)();\r\n    0x183673ad8    |                    return;\r\n                   |                }\r\n    0x18367377e    |                iStack_1a0 = (int64_t)*(char *)(*(int64_t *)0x191deaa10 + 0x147);\r\n    0x183673789    |                if (iStack_1a0 < 0) {\r\n    0x18367378b    |                    iStack_1a0 = *(int64_t *)(*(int64_t *)0x191deaa10 + 0x138);\r\n    0x183673792    |                    var_1a8h = *(int64_t *)(*(int64_t *)0x191deaa10 + 0x130);\r\n                   |                } else {\r\n    0x18367379b    |                    var_1a8h = *(int64_t *)0x191deaa10 + 0x130;\r\n                   |                }\r\n    0x1836737bb    |                cVar4 = func_0x000184304880(&var_1a8h, &var_188h, 1);\r\n    0x1836737c2    |                if (cVar4 == '\\0') {\r\n    0x1836739e7    |                    iStack_38 = (int64_t)var_48h._7_1_;\r\n    0x1836739ef    |                    var_40h = &var_58h;\r\n    0x1836739ef    |                    if (iStack_38 < 0) {\r\n    0x1836739f4    |                        var_40h = (int64_t *)var_58h;\r\n    0x1836739f4    |                        iStack_38 = var_50h;\r\n                   |                    }\r\n    0x183673a07    |                    func_0x0001854229f0(&var_188h);\r\n    0x183673a14    |                    func_0x00018af4cce0(&var_1a8h, 0x3868, &var_188h);\r\n    0x183673a2b    |                    if (var_178h._4_4_ < 0) {\r\n    0x183673a3b    |                        uVar11 = CONCAT44(var_178h._4_4_, (undefined4)var_178h) * 2;\r\n                   |code_r0x000183673866:\r\n    0x183673866    |                        func_0x0001841dcbe0(var_188h, uVar11);\r\n                   |                    }\r\n                   |                } else {\r\n    0x1836737cd    |                    var_178h._4_4_ = CONCAT13(0xc, var_178h._4_3_);\r\n    0x1836737e6    |                    if (0x190c00cb8 < (int64_t)&var_180h + 4U && &var_188h < (int64_t *)0x190c00cb9)\r\n    0x1836737e6    |                    goto code_r0x000183673ad3;\r\n    0x1836737fb    |                    var_188h = -0x731a67431b4d481b;\r\n    0x18367380e    |                    iVar10 = (int64_t)var_48h._7_1_;\r\n    0x183673816    |                    iVar6 = iVar10;\r\n    0x183673816    |                    if (iVar10 < 0) {\r\n    0x183673816    |                        iVar6 = var_50h;\r\n                   |                    }\r\n    0x18367381b    |                    var_180h = CONCAT35(var_180h._5_3_, 0x9abcef96);\r\n    0x183673820    |                    piVar9 = &var_58h;\r\n    0x183673820    |                    if (iVar10 < 0) {\r\n    0x183673820    |                        piVar9 = (int64_t *)var_58h;\r\n                   |                    }\r\n    0x183673827    |                    piVar9 = (int64_t *)func_0x000184212ca0(&var_188h, piVar9, iVar6);\r\n    0x18367382c    |                    var_198h = piVar9[2];\r\n    0x183673835    |                    var_1a8h = *piVar9;\r\n    0x183673835    |                    iStack_1a0 = piVar9[1];\r\n    0x183673840    |                    *piVar9 = 0;\r\n    0x183673840    |                    piVar9[1] = 0;\r\n    0x183673843    |                    piVar9[2] = 0;\r\n    0x183673850    |                    if (var_178h._4_4_ < 0) {\r\n    0x18367385c    |                        uVar11 = CONCAT44(var_178h._4_4_, (undefined4)var_178h) & 0x7fffffffffffffff;\r\n    0x18367385c    |                        goto code_r0x000183673866;\r\n                   |                    }\r\n                   |                }\r\n    0x183673876    |                func_0x00018367d860(uVar7, &var_1a8h);\r\n    0x183673880    |                if (var_198h < 0) {\r\n    0x183673896    |                    func_0x0001841dcbe0(var_1a8h, var_198h & 0x7fffffffffffffff);\r\n                   |                }\r\n    0x18367389b    |                piVar1 = *(int32_t **)(arg1 + 0x1e8);\r\n    0x1836738a2    |                uVar7 = *(undefined8 *)(arg1 + 0x1f0);\r\n    0x1836738ac    |                if (piVar1 != (int32_t *)0x0) {\r\n    0x1836738b3    |                    LOCK();\r\n    0x1836738b3    |                    iVar5 = *piVar1;\r\n    0x1836738b3    |                    *piVar1 = *piVar1 + 1;\r\n    0x1836738b3    |                    UNLOCK();\r\n    0x1836738bd    |                    if (iVar5 == 0x7fffffff) {\r\n    0x183673adb    |                        pcVar3 = (code *)swi(3);\r\n    0x183673adb    |                        (*pcVar3)();\r\n    0x183673adb    |                        return;\r\n                   |                    }\r\n                   |                }\r\n    0x1836738c8    |                puVar8 = (undefined4 *)func_0x000185f006b8(0x50);\r\n    0x1836738d0    |                *puVar8 = 1;\r\n    0x1836738dd    |                *(undefined8 *)(puVar8 + 2) = 0x182cb32b0;\r\n    0x1836738e8    |                *(undefined8 *)(puVar8 + 4) = 0x18337f500;\r\n    0x1836738f3    |                *(undefined8 *)(puVar8 + 6) = 0x18339cdd0;\r\n    0x1836738fe    |                *(undefined8 *)(puVar8 + 8) = 0x183673ae0;\r\n    0x183673902    |                *(int32_t **)(puVar8 + 10) = piVar1;\r\n    0x183673906    |                *(undefined8 *)(puVar8 + 0xc) = uVar7;\r\n    0x183673916    |                if (var_48h < 0) {\r\n    0x18367390a    |                    func_0x0001841dd0f0(puVar8 + 0xe, var_58h, var_50h);\r\n                   |                } else {\r\n    0x183673924    |                    *(int64_t *)(puVar8 + 0x12) = var_48h;\r\n    0x183673930    |                    puVar8[0xe] = (undefined4)var_58h;\r\n    0x183673930    |                    puVar8[0xf] = var_58h._4_4_;\r\n    0x183673930    |                    puVar8[0x10] = (undefined4)var_50h;\r\n    0x183673930    |                    puVar8[0x11] = var_50h._4_4_;\r\n                   |                }\r\n    0x183673948    |                func_0x000184339cd0(&var_188h, 0x190c00af0, 0x190bfffb0, 0x332);\r\n    0x183673958    |                piVar1 = *(int32_t **)(arg1 + 0x1e0);\r\n    0x18367395f    |                *(undefined4 **)(arg1 + 0x1e0) = puVar8;\r\n    0x183673969    |                if (piVar1 != (int32_t *)0x0) {\r\n    0x1836739ba    |                    LOCK();\r\n    0x1836739ba    |                    *piVar1 = *piVar1 + -1;\r\n    0x1836739ba    |                    UNLOCK();\r\n    0x1836739be    |                    if (*piVar1 == 0) {\r\n    0x1836739ce    |                        if (*(int64_t *)(piVar1 + 4) == 0x182bf38a0) {\r\n    0x183673a86    |                            piVar2 = *(int32_t **)(piVar1 + 0xc);\r\n    0x183673a8d    |                            if (piVar2 != (int32_t *)0x0) {\r\n    0x183673aa1    |                                LOCK();\r\n    0x183673aa1    |                                *piVar2 = *piVar2 + -1;\r\n    0x183673aa1    |                                UNLOCK();\r\n    0x183673aa4    |                                if (*piVar2 == 0) {\r\n    0x183673aab    |                                    func_0x0001841dcbe0(piVar2, 8);\r\n                   |                                }\r\n                   |                            }\r\n    0x183673a97    |                            func_0x0001841dcbe0(piVar1, 0x48);\r\n                   |                        } else {\r\n    0x1836739d7    |                            (*(code *)0x185f59da0)(piVar1);\r\n                   |                        }\r\n                   |                    }\r\n                   |                }\r\n    0x18367396f    |                *(undefined4 *)(arg1 + 0x1a8) = (undefined4)var_178h;\r\n    0x18367397a    |                *(undefined4 *)(arg1 + 0x198) = (undefined4)var_188h;\r\n    0x18367397a    |                *(undefined4 *)(arg1 + 0x19c) = var_188h._4_4_;\r\n    0x18367397a    |                *(undefined4 *)(arg1 + 0x1a0) = (undefined4)var_180h;\r\n    0x18367397a    |                *(undefined4 *)(arg1 + 0x1a4) = var_180h._4_4_;\r\n    0x183673986    |                *(int64_t *)(arg1 + 0x1b0) = var_170h;\r\n    0x18367398d    |                *(undefined8 *)(arg1 + 0x1c8) = 1000000;\r\n                   |            }\r\n    0x183673663    |            func_0x00018477a0a0(arg1 + 0x188);\r\n                   |        }\r\n    0x1836734c3    |        if (var_48h < 0) {\r\n    0x1836734df    |            func_0x0001841dcbe0(var_58h, var_48h & 0x7fffffffffffffff);\r\n                   |        }\r\n                   |    }\r\n    0x1836734e7    |    func_0x000183668aa0(arg3);\r\n    0x183673501    |    if (*(uint64_t *)0x191c71040 == (var_30h ^ (uint64_t)auStack_1c8)) {\r\n    0x183673515    |        return;\r\n                   |    }\r\n    0x183673acb    |    func_0x000185f05b40(var_30h ^ (uint64_t)auStack_1c8);\r\n                   |code_r0x000183673ad3:\r\n    0x183673ad3    |    // WARNING: Does not return\r\n    0x183673ad3    |    pcVar3 = (code *)invalidInstructionException();\r\n    0x183673ad3    |    (*pcVar3)();\r\n                   |}\r\n[{\"offset\":6499545904,\"name\":\"fcn.183673330\",\"size\":1964,\"is-pure\":false,\"realsz\":1960,\"noreturn\":false,\"stackframe\":456,\"calltype\":\"ms\",\"cost\":566,\"cc\":52,\"loops\":18,\"bits\":64,\"type\":\"fcn\",\"nbbs\":95,\"edges\":137,\"ebbs\":5,\"signature\":\"fcn.183673330(int64_t arg1, int64_t arg2, int64_t arg3);\",\"minbound\":6499545904,\"maxbound\":6499547868,\"callrefs\":[{\"from\":6499546006,\"to\":6499546033,\"type\":\"CODE\"},{\"from\":6499546023,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6499546028,\"to\":6499546062,\"type\":\"CODE\"},{\"from\":6499546112,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6499546135,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6499546145,\"to\":6451143232,\"type\":\"CALL\"},{\"from\":6499546166,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6499546242,\"to\":6499546252,\"type\":\"CODE\"},{\"from\":6499546255,\"to\":6542434064,\"type\":\"CALL\"},{\"from\":6499546268,\"to\":6451143232,\"type\":\"CALL\"},{\"from\":6499546278,\"to\":6447366432,\"type\":\"CALL\"},{\"from\":6499546294,\"to\":6499547872,\"type\":\"CALL\"},{\"from\":6499546335,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499546343,\"to\":6499502752,\"type\":\"CALL\"},{\"from\":6499546435,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6499546458,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6499546477,\"to\":6499546487,\"type\":\"CODE\"},{\"from\":6499546490,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6499546498,\"to\":6447366432,\"type\":\"CALL\"},{\"from\":6499546523,\"to\":6499539424,\"type\":\"CALL\"},{\"from\":6499546534,\"to\":6499588192,\"type\":\"CALL\"},{\"from\":6499546566,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499546616,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499546755,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6499546831,\"to\":6517399712,\"type\":\"CALL\"},{\"from\":6499546836,\"to\":6499546299,\"type\":\"CODE\"},{\"from\":6499546860,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6499546865,\"to\":6499546723,\"type\":\"CODE\"},{\"from\":6499546936,\"to\":6499546946,\"type\":\"CODE\"},{\"from\":6499546949,\"to\":6542434064,\"type\":\"CALL\"},{\"from\":6499547033,\"to\":6499547041,\"type\":\"CODE\"},{\"from\":6499547067,\"to\":6512724096,\"type\":\"CALL\"},{\"from\":6499547175,\"to\":6511733920,\"type\":\"CALL\"},{\"from\":6499547238,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547254,\"to\":6499588192,\"type\":\"CALL\"},{\"from\":6499547286,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547336,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499547475,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6499547544,\"to\":6499546828,\"type\":\"CODE\"},{\"from\":6499547568,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6499547573,\"to\":6499547443,\"type\":\"CODE\"},{\"from\":6499547607,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499547613,\"to\":6499547499,\"type\":\"CODE\"},{\"from\":6499547663,\"to\":6530673136,\"type\":\"CALL\"},{\"from\":6499547681,\"to\":6626266336,\"type\":\"CALL\"},{\"from\":6499547710,\"to\":6499547238,\"type\":\"CODE\"},{\"from\":6499547744,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499547750,\"to\":6499546783,\"type\":\"CODE\"},{\"from\":6499547772,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547777,\"to\":6499546783,\"type\":\"CODE\"},{\"from\":6499547799,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547804,\"to\":6499547499,\"type\":\"CODE\"},{\"from\":6499547819,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547824,\"to\":6499547791,\"type\":\"CODE\"},{\"from\":6499547836,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547841,\"to\":6499547764,\"type\":\"CODE\"},{\"from\":6499547854,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6499545921,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6499546075,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6499546088,\"to\":6723469232,\"type\":\"DATA\"},{\"from\":6499546122,\"to\":6723472008,\"type\":\"DATA\"},{\"from\":6499546150,\"to\":6723472056,\"type\":\"DATA\"},{\"from\":6499546359,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6499546399,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6499546408,\"to\":6723469232,\"type\":\"DATA\"},{\"from\":6499546445,\"to\":6723472072,\"type\":\"DATA\"},{\"from\":6499546630,\"to\":6489322160,\"type\":\"DATA\"},{\"from\":6499546641,\"to\":6496449792,\"type\":\"DATA\"},{\"from\":6499546652,\"to\":6496570832,\"type\":\"DATA\"},{\"from\":6499546663,\"to\":6499547872,\"type\":\"DATA\"},{\"from\":6499546730,\"to\":6723472112,\"type\":\"DATA\"},{\"from\":6499546737,\"to\":6723469232,\"type\":\"DATA\"},{\"from\":6499546969,\"to\":6717892640,\"type\":\"DATA\"},{\"from\":6499546990,\"to\":6742256144,\"type\":\"DATA\"},{\"from\":6499547089,\"to\":6723472568,\"type\":\"DATA\"},{\"from\":6499547350,\"to\":6489322160,\"type\":\"DATA\"},{\"from\":6499547361,\"to\":6496449792,\"type\":\"DATA\"},{\"from\":6499547372,\"to\":6496570832,\"type\":\"DATA\"},{\"from\":6499547383,\"to\":6499547872,\"type\":\"DATA\"},{\"from\":6499547450,\"to\":6723472112,\"type\":\"DATA\"},{\"from\":6499547457,\"to\":6723469232,\"type\":\"DATA\"},{\"from\":6499547588,\"to\":6488537248,\"type\":\"DATA\"},{\"from\":6499547729,\"to\":6488537248,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6499546006,\"to\":6499546033,\"type\":\"CODE\"},{\"from\":6499546028,\"to\":6499546062,\"type\":\"CODE\"},{\"from\":6499546242,\"to\":6499546252,\"type\":\"CODE\"},{\"from\":6499546477,\"to\":6499546487,\"type\":\"CODE\"},{\"from\":6499546836,\"to\":6499546299,\"type\":\"CODE\"},{\"from\":6499546865,\"to\":6499546723,\"type\":\"CODE\"},{\"from\":6499546936,\"to\":6499546946,\"type\":\"CODE\"},{\"from\":6499547033,\"to\":6499547041,\"type\":\"CODE\"},{\"from\":6499547544,\"to\":6499546828,\"type\":\"CODE\"},{\"from\":6499547573,\"to\":6499547443,\"type\":\"CODE\"},{\"from\":6499547613,\"to\":6499547499,\"type\":\"CODE\"},{\"from\":6499547710,\"to\":6499547238,\"type\":\"CODE\"},{\"from\":6499547750,\"to\":6499546783,\"type\":\"CODE\"},{\"from\":6499547777,\"to\":6499546783,\"type\":\"CODE\"},{\"from\":6499547804,\"to\":6499547499,\"type\":\"CODE\"},{\"from\":6499547824,\"to\":6499547791,\"type\":\"CODE\"},{\"from\":6499547841,\"to\":6499547764,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":17,\"outdegree\":40,\"nlocals\":13,\"nargs\":3,\"stackvars\":[{\"name\":\"var_1a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-424}},{\"name\":\"var_198h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-408}},{\"name\":\"var_188h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-392}},{\"name\":\"var_180h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-384}},{\"name\":\"var_17ch\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-380}},{\"name\":\"var_178h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-376}},{\"name\":\"var_170h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-368}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}},{\"name\":\"var_50h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-80}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}},{\"name\":\"var_41h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-65}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}},{\"name\":\"var_30h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-48}}],\"regvars\":[{\"name\":\"arg3\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r8\"}},{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":"    0x183673330    |\r\n    0x183673330    |// WARNING: [rz-ghidra] Detected overlap for variable var_41h\r\n    0x183673330    |// WARNING: [rz-ghidra] Detected overlap for variable var_40h\r\n    0x183673330    |// WARNING: [rz-ghidra] Detected overlap for variable var_17ch\r\n                   |\r\n    0x183673330    |void fcn.183673330(int64_t arg1, int64_t arg2, int64_t arg3)\r\n                   |{\r\n                   |    int32_t *piVar1;\r\n                   |    int32_t *piVar2;\r\n                   |    code *pcVar3;\r\n                   |    char cVar4;\r\n                   |    int32_t iVar5;\r\n                   |    int64_t iVar6;\r\n                   |    undefined8 uVar7;\r\n                   |    undefined4 *puVar8;\r\n                   |    int64_t *piVar9;\r\n                   |    int64_t iVar10;\r\n                   |    uint64_t uVar11;\r\n                   |    bool bVar12;\r\n                   |    undefined auStack_1c8 [32];\r\n                   |    int64_t var_1a8h;\r\n                   |    int64_t iStack_1a0;\r\n                   |    int64_t var_198h;\r\n                   |    int64_t var_188h;\r\n                   |    int64_t var_180h;\r\n                   |    int64_t var_178h;\r\n                   |    int64_t var_170h;\r\n                   |    int64_t var_58h;\r\n                   |    int64_t var_50h;\r\n                   |    int64_t var_48h;\r\n                   |    int64_t *var_40h;\r\n                   |    int64_t iStack_38;\r\n                   |    int64_t var_30h;\r\n                   |    \r\n    0x183673348    |    var_30h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_1c8;\r\n    0x183673357    |    if (*(int32_t *)(arg1 + 0x10) == 3) {\r\n    0x183673366    |        var_58h = 0;\r\n    0x183673366    |        var_50h = 0;\r\n    0x18367336e    |        var_48h = 0;\r\n    0x18367337d    |        piVar9 = (int64_t *)arg2;\r\n    0x18367337d    |        if (*(char *)arg3 == '\\x01') {\r\n    0x18367337f    |            iVar6 = (int64_t)*(char *)(arg3 + 0x1f);\r\n    0x183673387    |            if (iVar6 < 0) {\r\n    0x183673389    |                iVar6 = *(int64_t *)(arg3 + 0x10);\r\n                   |            }\r\n    0x183673390    |            if (iVar6 != 0) {\r\n    0x183673396    |                piVar9 = (int64_t *)(arg3 + 8);\r\n                   |            }\r\n                   |        }\r\n    0x1836733b5    |        if (*(char *)((int64_t)piVar9 + 0x17) < '\\0') {\r\n    0x18367339f    |            func_0x0001841dd0f0(&var_58h, *piVar9, piVar9[1]);\r\n                   |        } else {\r\n    0x1836733b7    |            var_48h = piVar9[2];\r\n    0x1836733c3    |            var_58h = *piVar9;\r\n    0x1836733c3    |            var_50h = piVar9[1];\r\n                   |        }\r\n    0x1836733d5    |        if (*(char *)(arg1 + 0x91) == '\\x01') {\r\n    0x1836733e2    |            if (*(int32_t *)0x191de85c0 < 3) {\r\n    0x1836733ef    |                func_0x00018030d390(&var_188h, 0x190bfffb0, 799, 2);\r\n    0x183673417    |                uVar7 = func_0x000184dcd0d0(&var_178h, 0x190c00a88, 0x2a);\r\n    0x183673421    |                uVar7 = func_0x00018084a240(uVar7, *(undefined *)arg3);\r\n    0x183673436    |                uVar7 = func_0x000184dcd0d0(uVar7, 0x190c00ab8, 9);\r\n    0x18367344d    |                iVar6 = (int64_t)var_48h._7_1_;\r\n    0x18367344d    |                if ((int64_t)var_48h._7_1_ < 0) {\r\n    0x18367344f    |                    iVar6 = var_50h;\r\n                   |                }\r\n    0x183673457    |                iVar10 = (int64_t)*(char *)(arg2 + 0x17);\r\n    0x183673462    |                if (iVar10 < 0) {\r\n    0x183673464    |                    iVar10 = *(int64_t *)(arg2 + 8);\r\n                   |                }\r\n    0x183673468    |                bVar12 = true;\r\n    0x18367346d    |                if (iVar6 == iVar10) {\r\n    0x183673471    |                    if (*(char *)(arg2 + 0x17) < '\\0') {\r\n    0x183673473    |                        arg2 = *(int64_t *)arg2;\r\n                   |                    }\r\n    0x183673478    |                    piVar9 = (int64_t *)var_58h;\r\n    0x183673478    |                    if (-1 < var_48h) {\r\n    0x183673482    |                        piVar9 = &var_58h;\r\n                   |                    }\r\n    0x18367348f    |                    iVar5 = func_0x000185f59f10(piVar9, arg2);\r\n    0x183673494    |                    bVar12 = iVar5 != 0;\r\n                   |                }\r\n    0x18367349c    |                func_0x00018084a240(uVar7, bVar12);\r\n    0x1836734a1    |                func_0x0001804b0120(&var_188h);\r\n                   |            }\r\n                   |code_r0x0001836734ab:\r\n    0x1836734b6    |            func_0x000183673ae0(arg1, &var_58h);\r\n                   |        } else {\r\n    0x183673519    |            if (*(char *)arg3 == '\\0') {\r\n    0x183673526    |                if (*(int32_t *)0x191de85c0 < 3) {\r\n    0x18367352f    |                    func_0x00018030d390(&var_188h, 0x190bfffb0, 0x326, 2);\r\n    0x18367355a    |                    uVar7 = func_0x000184dcd0d0(&var_178h, 0x190c00ac8, 0x22);\r\n    0x18367355f    |                    iVar6 = (int64_t)*(char *)(arg3 + 0x67);\r\n    0x183673567    |                    if (iVar6 < 0) {\r\n    0x18367356f    |                        iVar6 = *(int64_t *)(arg3 + 0x58);\r\n    0x183673573    |                        iVar10 = *(int64_t *)(arg3 + 0x50);\r\n                   |                    } else {\r\n    0x183673569    |                        iVar10 = arg3 + 0x50;\r\n                   |                    }\r\n    0x18367357a    |                    func_0x000184dcd0d0(uVar7, iVar10, iVar6);\r\n    0x18367352f    |                    func_0x0001804b0120(&var_188h);\r\n                   |                }\r\n    0x183673587    |                uVar7 = *(undefined8 *)(arg1 + 0xb0);\r\n    0x18367358e    |                func_0x0001836719e0(&var_188h, 0x3866);\r\n    0x1836735a6    |                func_0x00018367d860(uVar7, &var_188h);\r\n    0x1836735b0    |                if (var_178h._4_4_ < 0) {\r\n    0x1836735c6    |                    func_0x0001841dcbe0(var_188h, CONCAT44(var_178h._4_4_, (undefined4)var_178h) & 0x7fffffffffffffff);\r\n                   |                }\r\n    0x1836735cb    |                piVar1 = *(int32_t **)(arg1 + 0x1e8);\r\n    0x1836735d2    |                uVar7 = *(undefined8 *)(arg1 + 0x1f0);\r\n    0x1836735dc    |                if (piVar1 != (int32_t *)0x0) {\r\n    0x1836735e3    |                    LOCK();\r\n    0x1836735e3    |                    iVar5 = *piVar1;\r\n    0x1836735e3    |                    *piVar1 = *piVar1 + 1;\r\n    0x1836735e3    |                    UNLOCK();\r\n    0x1836735ed    |                    if (iVar5 == 0x7fffffff) {\r\n    0x183673ad5    |                        pcVar3 = (code *)swi(3);\r\n    0x183673ad5    |                        (*pcVar3)();\r\n    0x183673ad5    |                        return;\r\n                   |                    }\r\n                   |                }\r\n    0x1836735f8    |                puVar8 = (undefined4 *)func_0x000185f006b8(0x50);\r\n    0x183673600    |                *puVar8 = 1;\r\n    0x18367360d    |                *(undefined8 *)(puVar8 + 2) = 0x182cb32b0;\r\n    0x183673618    |                *(undefined8 *)(puVar8 + 4) = 0x18337f500;\r\n    0x183673623    |                *(undefined8 *)(puVar8 + 6) = 0x18339cdd0;\r\n    0x18367362e    |                *(undefined8 *)(puVar8 + 8) = 0x183673ae0;\r\n    0x183673632    |                *(int32_t **)(puVar8 + 10) = piVar1;\r\n    0x183673636    |                *(undefined8 *)(puVar8 + 0xc) = uVar7;\r\n    0x183673646    |                if (var_48h < 0) {\r\n    0x18367363a    |                    func_0x0001841dd0f0(puVar8 + 0xe, var_58h, var_50h);\r\n                   |                } else {\r\n    0x183673654    |                    *(int64_t *)(puVar8 + 0x12) = var_48h;\r\n    0x183673660    |                    puVar8[0xe] = (undefined4)var_58h;\r\n    0x183673660    |                    puVar8[0xf] = var_58h._4_4_;\r\n    0x183673660    |                    puVar8[0x10] = (undefined4)var_50h;\r\n    0x183673660    |                    puVar8[0x11] = var_50h._4_4_;\r\n                   |                }\r\n    0x183673678    |                func_0x000184339cd0(&var_188h, 0x190c00af0, 0x190bfffb0, 0x329);\r\n    0x183673688    |                piVar1 = *(int32_t **)(arg1 + 0x1e0);\r\n    0x18367368f    |                *(undefined4 **)(arg1 + 0x1e0) = puVar8;\r\n    0x183673699    |                if (piVar1 != (int32_t *)0x0) {\r\n    0x183673a43    |                    LOCK();\r\n    0x183673a43    |                    *piVar1 = *piVar1 + -1;\r\n    0x183673a43    |                    UNLOCK();\r\n    0x183673a47    |                    if (*piVar1 == 0) {\r\n    0x183673a5b    |                        if (*(int64_t *)(piVar1 + 4) == 0x182bf38a0) {\r\n    0x183673a6b    |                            piVar2 = *(int32_t **)(piVar1 + 0xc);\r\n    0x183673a72    |                            if (piVar2 != (int32_t *)0x0) {\r\n    0x183673ab2    |                                LOCK();\r\n    0x183673ab2    |                                *piVar2 = *piVar2 + -1;\r\n    0x183673ab2    |                                UNLOCK();\r\n    0x183673ab5    |                                if (*piVar2 == 0) {\r\n    0x183673abc    |                                    func_0x0001841dcbe0(piVar2, 8);\r\n                   |                                }\r\n                   |                            }\r\n    0x183673a7c    |                            func_0x0001841dcbe0(piVar1, 0x48);\r\n                   |                        } else {\r\n    0x183673a60    |                            (*(code *)0x185f59da0)(piVar1);\r\n                   |                        }\r\n                   |                    }\r\n                   |                }\r\n    0x1836736a3    |                *(undefined4 *)(arg1 + 0x1a8) = (undefined4)var_178h;\r\n    0x1836736ae    |                *(undefined4 *)(arg1 + 0x198) = (undefined4)var_188h;\r\n    0x1836736ae    |                *(undefined4 *)(arg1 + 0x19c) = var_188h._4_4_;\r\n    0x1836736ae    |                *(undefined4 *)(arg1 + 0x1a0) = (undefined4)var_180h;\r\n    0x1836736ae    |                *(undefined4 *)(arg1 + 0x1a4) = var_180h._4_4_;\r\n    0x1836736ba    |                *(int64_t *)(arg1 + 0x1b0) = var_170h;\r\n    0x1836736c1    |                *(undefined8 *)(arg1 + 0x1c8) = 1500000;\r\n                   |            } else {\r\n    0x183673705    |                iVar6 = (int64_t)var_48h._7_1_;\r\n    0x183673705    |                if ((int64_t)var_48h._7_1_ < 0) {\r\n    0x183673707    |                    iVar6 = var_50h;\r\n                   |                }\r\n    0x18367370f    |                iVar10 = (int64_t)*(char *)(arg2 + 0x17);\r\n    0x18367371a    |                if (iVar10 < 0) {\r\n    0x18367371c    |                    iVar10 = *(int64_t *)(arg2 + 8);\r\n                   |                }\r\n    0x183673723    |                if (iVar6 == iVar10) {\r\n    0x183673727    |                    if (*(char *)(arg2 + 0x17) < '\\0') {\r\n    0x183673729    |                        arg2 = *(int64_t *)arg2;\r\n                   |                    }\r\n    0x18367372e    |                    piVar9 = (int64_t *)var_58h;\r\n    0x18367372e    |                    if (-1 < var_48h) {\r\n    0x183673738    |                        piVar9 = &var_58h;\r\n                   |                    }\r\n    0x183673745    |                    iVar5 = func_0x000185f59f10(piVar9, arg2);\r\n    0x18367374c    |                    if (iVar5 == 0) goto code_r0x0001836734ab;\r\n                   |                }\r\n    0x183673752    |                uVar7 = *(undefined8 *)(arg1 + 0xb0);\r\n    0x183673760    |                var_188h = 0x1906ae820;\r\n    0x183673765    |                var_180h = 2;\r\n    0x183673778    |                if (*(int64_t *)0x191deaa10 == 0) {\r\n    0x183673ad8    |                    pcVar3 = (code *)swi(3);\r\n    0x183673ad8    |                    (*pcVar3)();\r\n    0x183673ad8    |                    return;\r\n                   |                }\r\n    0x18367377e    |                iStack_1a0 = (int64_t)*(char *)(*(int64_t *)0x191deaa10 + 0x147);\r\n    0x183673789    |                if (iStack_1a0 < 0) {\r\n    0x18367378b    |                    iStack_1a0 = *(int64_t *)(*(int64_t *)0x191deaa10 + 0x138);\r\n    0x183673792    |                    var_1a8h = *(int64_t *)(*(int64_t *)0x191deaa10 + 0x130);\r\n                   |                } else {\r\n    0x18367379b    |                    var_1a8h = *(int64_t *)0x191deaa10 + 0x130;\r\n                   |                }\r\n    0x1836737bb    |                cVar4 = func_0x000184304880(&var_1a8h, &var_188h, 1);\r\n    0x1836737c2    |                if (cVar4 == '\\0') {\r\n    0x1836739e7    |                    iStack_38 = (int64_t)var_48h._7_1_;\r\n    0x1836739ef    |                    var_40h = &var_58h;\r\n    0x1836739ef    |                    if (iStack_38 < 0) {\r\n    0x1836739f4    |                        var_40h = (int64_t *)var_58h;\r\n    0x1836739f4    |                        iStack_38 = var_50h;\r\n                   |                    }\r\n    0x183673a07    |                    func_0x0001854229f0(&var_188h);\r\n    0x183673a14    |                    func_0x00018af4cce0(&var_1a8h, 0x3868, &var_188h);\r\n    0x183673a2b    |                    if (var_178h._4_4_ < 0) {\r\n    0x183673a3b    |                        uVar11 = CONCAT44(var_178h._4_4_, (undefined4)var_178h) * 2;\r\n                   |code_r0x000183673866:\r\n    0x183673866    |                        func_0x0001841dcbe0(var_188h, uVar11);\r\n                   |                    }\r\n                   |                } else {\r\n    0x1836737cd    |                    var_178h._4_4_ = CONCAT13(0xc, var_178h._4_3_);\r\n    0x1836737e6    |                    if (0x190c00cb8 < (int64_t)&var_180h + 4U && &var_188h < (int64_t *)0x190c00cb9)\r\n    0x1836737e6    |                    goto code_r0x000183673ad3;\r\n    0x1836737fb    |                    var_188h = -0x731a67431b4d481b;\r\n    0x18367380e    |                    iVar10 = (int64_t)var_48h._7_1_;\r\n    0x183673816    |                    iVar6 = iVar10;\r\n    0x183673816    |                    if (iVar10 < 0) {\r\n    0x183673816    |                        iVar6 = var_50h;\r\n                   |                    }\r\n    0x18367381b    |                    var_180h = CONCAT35(var_180h._5_3_, 0x9abcef96);\r\n    0x183673820    |                    piVar9 = &var_58h;\r\n    0x183673820    |                    if (iVar10 < 0) {\r\n    0x183673820    |                        piVar9 = (int64_t *)var_58h;\r\n                   |                    }\r\n    0x183673827    |                    piVar9 = (int64_t *)func_0x000184212ca0(&var_188h, piVar9, iVar6);\r\n    0x18367382c    |                    var_198h = piVar9[2];\r\n    0x183673835    |                    var_1a8h = *piVar9;\r\n    0x183673835    |                    iStack_1a0 = piVar9[1];\r\n    0x183673840    |                    *piVar9 = 0;\r\n    0x183673840    |                    piVar9[1] = 0;\r\n    0x183673843    |                    piVar9[2] = 0;\r\n    0x183673850    |                    if (var_178h._4_4_ < 0) {\r\n    0x18367385c    |                        uVar11 = CONCAT44(var_178h._4_4_, (undefined4)var_178h) & 0x7fffffffffffffff;\r\n    0x18367385c    |                        goto code_r0x000183673866;\r\n                   |                    }\r\n                   |                }\r\n    0x183673876    |                func_0x00018367d860(uVar7, &var_1a8h);\r\n    0x183673880    |                if (var_198h < 0) {\r\n    0x183673896    |                    func_0x0001841dcbe0(var_1a8h, var_198h & 0x7fffffffffffffff);\r\n                   |                }\r\n    0x18367389b    |                piVar1 = *(int32_t **)(arg1 + 0x1e8);\r\n    0x1836738a2    |                uVar7 = *(undefined8 *)(arg1 + 0x1f0);\r\n    0x1836738ac    |                if (piVar1 != (int32_t *)0x0) {\r\n    0x1836738b3    |                    LOCK();\r\n    0x1836738b3    |                    iVar5 = *piVar1;\r\n    0x1836738b3    |                    *piVar1 = *piVar1 + 1;\r\n    0x1836738b3    |                    UNLOCK();\r\n    0x1836738bd    |                    if (iVar5 == 0x7fffffff) {\r\n    0x183673adb    |                        pcVar3 = (code *)swi(3);\r\n    0x183673adb    |                        (*pcVar3)();\r\n    0x183673adb    |                        return;\r\n                   |                    }\r\n                   |                }\r\n    0x1836738c8    |                puVar8 = (undefined4 *)func_0x000185f006b8(0x50);\r\n    0x1836738d0    |                *puVar8 = 1;\r\n    0x1836738dd    |                *(undefined8 *)(puVar8 + 2) = 0x182cb32b0;\r\n    0x1836738e8    |                *(undefined8 *)(puVar8 + 4) = 0x18337f500;\r\n    0x1836738f3    |                *(undefined8 *)(puVar8 + 6) = 0x18339cdd0;\r\n    0x1836738fe    |                *(undefined8 *)(puVar8 + 8) = 0x183673ae0;\r\n    0x183673902    |                *(int32_t **)(puVar8 + 10) = piVar1;\r\n    0x183673906    |                *(undefined8 *)(puVar8 + 0xc) = uVar7;\r\n    0x183673916    |                if (var_48h < 0) {\r\n    0x18367390a    |                    func_0x0001841dd0f0(puVar8 + 0xe, var_58h, var_50h);\r\n                   |                } else {\r\n    0x183673924    |                    *(int64_t *)(puVar8 + 0x12) = var_48h;\r\n    0x183673930    |                    puVar8[0xe] = (undefined4)var_58h;\r\n    0x183673930    |                    puVar8[0xf] = var_58h._4_4_;\r\n    0x183673930    |                    puVar8[0x10] = (undefined4)var_50h;\r\n    0x183673930    |                    puVar8[0x11] = var_50h._4_4_;\r\n                   |                }\r\n    0x183673948    |                func_0x000184339cd0(&var_188h, 0x190c00af0, 0x190bfffb0, 0x332);\r\n    0x183673958    |                piVar1 = *(int32_t **)(arg1 + 0x1e0);\r\n    0x18367395f    |                *(undefined4 **)(arg1 + 0x1e0) = puVar8;\r\n    0x183673969    |                if (piVar1 != (int32_t *)0x0) {\r\n    0x1836739ba    |                    LOCK();\r\n    0x1836739ba    |                    *piVar1 = *piVar1 + -1;\r\n    0x1836739ba    |                    UNLOCK();\r\n    0x1836739be    |                    if (*piVar1 == 0) {\r\n    0x1836739ce    |                        if (*(int64_t *)(piVar1 + 4) == 0x182bf38a0) {\r\n    0x183673a86    |                            piVar2 = *(int32_t **)(piVar1 + 0xc);\r\n    0x183673a8d    |                            if (piVar2 != (int32_t *)0x0) {\r\n    0x183673aa1    |                                LOCK();\r\n    0x183673aa1    |                                *piVar2 = *piVar2 + -1;\r\n    0x183673aa1    |                                UNLOCK();\r\n    0x183673aa4    |                                if (*piVar2 == 0) {\r\n    0x183673aab    |                                    func_0x0001841dcbe0(piVar2, 8);\r\n                   |                                }\r\n                   |                            }\r\n    0x183673a97    |                            func_0x0001841dcbe0(piVar1, 0x48);\r\n                   |                        } else {\r\n    0x1836739d7    |                            (*(code *)0x185f59da0)(piVar1);\r\n                   |                        }\r\n                   |                    }\r\n                   |                }\r\n    0x18367396f    |                *(undefined4 *)(arg1 + 0x1a8) = (undefined4)var_178h;\r\n    0x18367397a    |                *(undefined4 *)(arg1 + 0x198) = (undefined4)var_188h;\r\n    0x18367397a    |                *(undefined4 *)(arg1 + 0x19c) = var_188h._4_4_;\r\n    0x18367397a    |                *(undefined4 *)(arg1 + 0x1a0) = (undefined4)var_180h;\r\n    0x18367397a    |                *(undefined4 *)(arg1 + 0x1a4) = var_180h._4_4_;\r\n    0x183673986    |                *(int64_t *)(arg1 + 0x1b0) = var_170h;\r\n    0x18367398d    |                *(undefined8 *)(arg1 + 0x1c8) = 1000000;\r\n                   |            }\r\n    0x183673663    |            func_0x00018477a0a0(arg1 + 0x188);\r\n                   |        }\r\n    0x1836734c3    |        if (var_48h < 0) {\r\n    0x1836734df    |            func_0x0001841dcbe0(var_58h, var_48h & 0x7fffffffffffffff);\r\n                   |        }\r\n                   |    }\r\n    0x1836734e7    |    func_0x000183668aa0(arg3);\r\n    0x183673501    |    if (*(uint64_t *)0x191c71040 == (var_30h ^ (uint64_t)auStack_1c8)) {\r\n    0x183673515    |        return;\r\n                   |    }\r\n    0x183673acb    |    func_0x000185f05b40(var_30h ^ (uint64_t)auStack_1c8);\r\n                   |code_r0x000183673ad3:\r\n    0x183673ad3    |    // WARNING: Does not return\r\n    0x183673ad3    |    pcVar3 = (code *)invalidInstructionException();\r\n    0x183673ad3    |    (*pcVar3)();\r\n                   |}\r\n[{\"offset\":6499545904,\"name\":\"fcn.183673330\",\"size\":1964,\"is-pure\":false,\"realsz\":1960,\"noreturn\":false,\"stackframe\":456,\"calltype\":\"ms\",\"cost\":566,\"cc\":52,\"loops\":18,\"bits\":64,\"type\":\"fcn\",\"nbbs\":95,\"edges\":137,\"ebbs\":5,\"signature\":\"fcn.183673330(int64_t arg1, int64_t arg2, int64_t arg3);\",\"minbound\":6499545904,\"maxbound\":6499547868,\"callrefs\":[{\"from\":6499546006,\"to\":6499546033,\"type\":\"CODE\"},{\"from\":6499546023,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6499546028,\"to\":6499546062,\"type\":\"CODE\"},{\"from\":6499546112,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6499546135,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6499546145,\"to\":6451143232,\"type\":\"CALL\"},{\"from\":6499546166,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6499546242,\"to\":6499546252,\"type\":\"CODE\"},{\"from\":6499546255,\"to\":6542434064,\"type\":\"CALL\"},{\"from\":6499546268,\"to\":6451143232,\"type\":\"CALL\"},{\"from\":6499546278,\"to\":6447366432,\"type\":\"CALL\"},{\"from\":6499546294,\"to\":6499547872,\"type\":\"CALL\"},{\"from\":6499546335,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499546343,\"to\":6499502752,\"type\":\"CALL\"},{\"from\":6499546435,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6499546458,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6499546477,\"to\":6499546487,\"type\":\"CODE\"},{\"from\":6499546490,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6499546498,\"to\":6447366432,\"type\":\"CALL\"},{\"from\":6499546523,\"to\":6499539424,\"type\":\"CALL\"},{\"from\":6499546534,\"to\":6499588192,\"type\":\"CALL\"},{\"from\":6499546566,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499546616,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499546755,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6499546831,\"to\":6517399712,\"type\":\"CALL\"},{\"from\":6499546836,\"to\":6499546299,\"type\":\"CODE\"},{\"from\":6499546860,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6499546865,\"to\":6499546723,\"type\":\"CODE\"},{\"from\":6499546936,\"to\":6499546946,\"type\":\"CODE\"},{\"from\":6499546949,\"to\":6542434064,\"type\":\"CALL\"},{\"from\":6499547033,\"to\":6499547041,\"type\":\"CODE\"},{\"from\":6499547067,\"to\":6512724096,\"type\":\"CALL\"},{\"from\":6499547175,\"to\":6511733920,\"type\":\"CALL\"},{\"from\":6499547238,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547254,\"to\":6499588192,\"type\":\"CALL\"},{\"from\":6499547286,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547336,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499547475,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6499547544,\"to\":6499546828,\"type\":\"CODE\"},{\"from\":6499547568,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6499547573,\"to\":6499547443,\"type\":\"CODE\"},{\"from\":6499547607,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499547613,\"to\":6499547499,\"type\":\"CODE\"},{\"from\":6499547663,\"to\":6530673136,\"type\":\"CALL\"},{\"from\":6499547681,\"to\":6626266336,\"type\":\"CALL\"},{\"from\":6499547710,\"to\":6499547238,\"type\":\"CODE\"},{\"from\":6499547744,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499547750,\"to\":6499546783,\"type\":\"CODE\"},{\"from\":6499547772,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547777,\"to\":6499546783,\"type\":\"CODE\"},{\"from\":6499547799,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547804,\"to\":6499547499,\"type\":\"CODE\"},{\"from\":6499547819,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547824,\"to\":6499547791,\"type\":\"CODE\"},{\"from\":6499547836,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499547841,\"to\":6499547764,\"type\":\"CODE\"},{\"from\":6499547854,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6499545921,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6499546075,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6499546088,\"to\":6723469232,\"type\":\"DATA\"},{\"from\":6499546122,\"to\":6723472008,\"type\":\"DATA\"},{\"from\":6499546150,\"to\":6723472056,\"type\":\"DATA\"},{\"from\":6499546359,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6499546399,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6499546408,\"to\":6723469232,\"type\":\"DATA\"},{\"from\":6499546445,\"to\":6723472072,\"type\":\"DATA\"},{\"from\":6499546630,\"to\":6489322160,\"type\":\"DATA\"},{\"from\":6499546641,\"to\":6496449792,\"type\":\"DATA\"},{\"from\":6499546652,\"to\":6496570832,\"type\":\"DATA\"},{\"from\":6499546663,\"to\":6499547872,\"type\":\"DATA\"},{\"from\":6499546730,\"to\":6723472112,\"type\":\"DATA\"},{\"from\":6499546737,\"to\":6723469232,\"type\":\"DATA\"},{\"from\":6499546969,\"to\":6717892640,\"type\":\"DATA\"},{\"from\":6499546990,\"to\":6742256144,\"type\":\"DATA\"},{\"from\":6499547089,\"to\":6723472568,\"type\":\"DATA\"},{\"from\":6499547350,\"to\":6489322160,\"type\":\"DATA\"},{\"from\":6499547361,\"to\":6496449792,\"type\":\"DATA\"},{\"from\":6499547372,\"to\":6496570832,\"type\":\"DATA\"},{\"from\":6499547383,\"to\":6499547872,\"type\":\"DATA\"},{\"from\":6499547450,\"to\":6723472112,\"type\":\"DATA\"},{\"from\":6499547457,\"to\":6723469232,\"type\":\"DATA\"},{\"from\":6499547588,\"to\":6488537248,\"type\":\"DATA\"},{\"from\":6499547729,\"to\":6488537248,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6499546006,\"to\":6499546033,\"type\":\"CODE\"},{\"from\":6499546028,\"to\":6499546062,\"type\":\"CODE\"},{\"from\":6499546242,\"to\":6499546252,\"type\":\"CODE\"},{\"from\":6499546477,\"to\":6499546487,\"type\":\"CODE\"},{\"from\":6499546836,\"to\":6499546299,\"type\":\"CODE\"},{\"from\":6499546865,\"to\":6499546723,\"type\":\"CODE\"},{\"from\":6499546936,\"to\":6499546946,\"type\":\"CODE\"},{\"from\":6499547033,\"to\":6499547041,\"type\":\"CODE\"},{\"from\":6499547544,\"to\":6499546828,\"type\":\"CODE\"},{\"from\":6499547573,\"to\":6499547443,\"type\":\"CODE\"},{\"from\":6499547613,\"to\":6499547499,\"type\":\"CODE\"},{\"from\":6499547710,\"to\":6499547238,\"type\":\"CODE\"},{\"from\":6499547750,\"to\":6499546783,\"type\":\"CODE\"},{\"from\":6499547777,\"to\":6499546783,\"type\":\"CODE\"},{\"from\":6499547804,\"to\":6499547499,\"type\":\"CODE\"},{\"from\":6499547824,\"to\":6499547791,\"type\":\"CODE\"},{\"from\":6499547841,\"to\":6499547764,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":17,\"outdegree\":40,\"nlocals\":13,\"nargs\":3,\"stackvars\":[{\"name\":\"var_1a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-424}},{\"name\":\"var_198h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-408}},{\"name\":\"var_188h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-392}},{\"name\":\"var_180h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-384}},{\"name\":\"var_17ch\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-380}},{\"name\":\"var_178h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-376}},{\"name\":\"var_170h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-368}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}},{\"name\":\"var_50h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-80}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}},{\"name\":\"var_41h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-65}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}},{\"name\":\"var_30h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-48}}],\"regvars\":[{\"name\":\"arg3\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r8\"}},{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"5235ms"}}