{"ok":true,"data":{"evidence_id":"ev_a168d099545b014774f19b86a28a9e7f07cbc78b49bb8f8bdb14f2046b8f815a","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x18377a0e0;pdgo @ 0x18377a0e0;afij @ 0x18377a0e0","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x18377a0e0;pdgo @ 0x18377a0e0;afij @ 0x18377a0e0","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":"                   |\r\n    0x18377a0e0    |void fcn.18377a0e0(int64_t arg1)\r\n                   |{\r\n                   |    int32_t iVar1;\r\n                   |    int32_t *piVar2;\r\n                   |    int64_t iVar3;\r\n                   |    undefined8 uVar4;\r\n                   |    code *pcVar5;\r\n                   |    int32_t iVar6;\r\n                   |    int32_t *piVar7;\r\n                   |    undefined8 *puVar8;\r\n                   |    int64_t iVar9;\r\n                   |    int64_t iVar10;\r\n                   |    undefined auStack_88 [32];\r\n                   |    int64_t var_68h;\r\n                   |    int64_t var_48h;\r\n                   |    int64_t var_40h;\r\n                   |    int64_t var_38h;\r\n                   |    \r\n    0x18377a0fa    |    var_40h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_88;\r\n    0x18377a109    |    if (*(int64_t *)(arg1 + 0x10) != 0) {\r\n    0x18377a10b    |        func_0x000183798570();\r\n                   |    }\r\n    0x18377a124    |    var_68h = arg1 + 0x18;\r\n    0x18377a11c    |    func_0x0001841d4a00(&var_68h, *(undefined8 *)(arg1 + 0x20));\r\n    0x18377a129    |    *(int64_t *)(arg1 + 0x18) = arg1 + 0x20;\r\n    0x18377a130    |    *(undefined8 *)(arg1 + 0x20) = 0;\r\n    0x18377a130    |    *(undefined8 *)(arg1 + 0x28) = 0;\r\n    0x18377a13b    |    if (*(char *)(arg1 + 0x370) == '\\0') {\r\n    0x18377a141    |        *(undefined *)(arg1 + 0x370) = 1;\r\n    0x18377a158    |        if ((*(int64_t *)(arg1 + 0x38) != 0) && (*(char *)(arg1 + 0x371) == '\\x01')) {\r\n    0x18377a148    |            func_0x00018573c0a0(*(int64_t *)(arg1 + 0x38) + 0xa0, arg1);\r\n                   |        }\r\n    0x18377a16b    |        *(undefined *)(arg1 + 0x371) = 0;\r\n    0x18377a179    |        *(undefined *)(*(int64_t *)(arg1 + 0x378) + 4) = 1;\r\n    0x18377a182    |        piVar7 = (int32_t *)func_0x000185f006b8(8);\r\n    0x18377a187    |        *piVar7 = 0;\r\n    0x18377a18d    |        *(undefined *)(piVar7 + 1) = 0;\r\n    0x18377a194    |        if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a19b    |            LOCK();\r\n    0x18377a19b    |            iVar1 = *piVar7;\r\n    0x18377a19b    |            *piVar7 = *piVar7 + 1;\r\n    0x18377a19b    |            UNLOCK();\r\n    0x18377a1a5    |            if (iVar1 == 0x7fffffff) {\r\n    0x18377a822    |                pcVar5 = (code *)swi(3);\r\n    0x18377a822    |                (*pcVar5)();\r\n    0x18377a822    |                return;\r\n                   |            }\r\n                   |        }\r\n    0x18377a1ab    |        piVar2 = *(int32_t **)(arg1 + 0x378);\r\n    0x18377a1b2    |        *(int32_t **)(arg1 + 0x378) = piVar7;\r\n    0x18377a1bc    |        if (piVar2 != (int32_t *)0x0) {\r\n    0x18377a1be    |            LOCK();\r\n    0x18377a1be    |            *piVar2 = *piVar2 + -1;\r\n    0x18377a1be    |            UNLOCK();\r\n    0x18377a1c1    |            if (*piVar2 == 0) {\r\n    0x18377a2dc    |                func_0x0001841dcbe0(piVar2, 8);\r\n                   |            }\r\n                   |        }\r\n    0x18377a1c7    |        func_0x000183796f10(*(undefined8 *)(arg1 + 0x128));\r\n    0x18377a1d3    |        iVar3 = *(int64_t *)(arg1 + 0x2c8);\r\n    0x18377a1da    |        *(undefined8 *)(arg1 + 0x2c8) = 0;\r\n    0x18377a1e8    |        if (iVar3 != 0) {\r\n    0x18377a1ef    |            func_0x000182c50850(iVar3, 1);\r\n                   |        }\r\n    0x18377a1f4    |        iVar3 = *(int64_t *)(arg1 + 0x2d0);\r\n    0x18377a1fb    |        *(undefined8 *)(arg1 + 0x2d0) = 0;\r\n    0x18377a209    |        if (iVar3 != 0) {\r\n    0x18377a210    |            func_0x000181516210(iVar3, 1);\r\n                   |        }\r\n    0x18377a215    |        iVar3 = *(int64_t *)(arg1 + 0x2d8);\r\n    0x18377a21c    |        *(undefined8 *)(arg1 + 0x2d8) = 0;\r\n    0x18377a22a    |        if (iVar3 != 0) {\r\n    0x18377a231    |            func_0x000181516210(iVar3, 1);\r\n                   |        }\r\n    0x18377a23d    |        func_0x000183791510(*(undefined8 *)(arg1 + 0x2e8));\r\n    0x18377a249    |        *(int64_t *)(arg1 + 0x2e0) = arg1 + 0x2e8;\r\n    0x18377a253    |        *(undefined8 *)(arg1 + 0x2e8) = 0;\r\n    0x18377a253    |        *(undefined8 *)(arg1 + 0x2f0) = 0;\r\n    0x18377a25a    |        func_0x000184cb7790(arg1 + 0x268);\r\n    0x18377a26d    |        func_0x000183791570(*(undefined8 *)(arg1 + 0x308));\r\n    0x18377a279    |        *(int64_t *)(arg1 + 0x300) = arg1 + 0x308;\r\n    0x18377a280    |        *(undefined8 *)(arg1 + 0x308) = 0;\r\n    0x18377a280    |        *(undefined8 *)(arg1 + 0x310) = 0;\r\n    0x18377a287    |        var_68h = arg1 + 800;\r\n    0x18377a29c    |        func_0x0001808bbde0(&var_68h, *(undefined8 *)(arg1 + 0x328));\r\n    0x18377a2a9    |        *(int64_t *)(arg1 + 800) = arg1 + 0x328;\r\n    0x18377a2b0    |        *(undefined8 *)(arg1 + 0x328) = 0;\r\n    0x18377a2b0    |        *(undefined8 *)(arg1 + 0x330) = 0;\r\n    0x18377a2b7    |        iVar3 = *(int64_t *)(arg1 + 0x358);\r\n    0x18377a2c5    |        iVar10 = *(int64_t *)(arg1 + 0x360) << 3;\r\n    0x18377a2cf    |        iVar9 = iVar3;\r\n    0x18377a2cf    |        if (iVar10 != 0) {\r\n                   |            do {\r\n    0x18377a2f9    |                puVar8 = (undefined8 *)(iVar3 + -8 + iVar10);\r\n    0x18377a2fc    |                if (puVar8 == (undefined8 *)0x0) goto code_r0x00018377a471;\r\n    0x18377a302    |                piVar7 = (int32_t *)*puVar8;\r\n    0x18377a308    |                if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a30a    |                    LOCK();\r\n    0x18377a30a    |                    *piVar7 = *piVar7 + -1;\r\n    0x18377a30a    |                    UNLOCK();\r\n    0x18377a30d    |                    if (*piVar7 == 0) {\r\n    0x18377a2ea    |                        (*(code *)0x185f59da0)();\r\n                   |                    }\r\n                   |                }\r\n    0x18377a2f0    |                iVar10 = iVar10 + -8;\r\n    0x18377a2f4    |            } while (iVar10 != 0);\r\n    0x18377a311    |            iVar9 = *(int64_t *)(arg1 + 0x358);\r\n                   |        }\r\n    0x18377a31f    |        *(int64_t *)(arg1 + 0x360) = iVar3 - iVar9 >> 3;\r\n    0x18377a326    |        *(undefined *)(arg1 + 0x351) = 0;\r\n    0x18377a32d    |        iVar3 = *(int64_t *)(arg1 + 0x130);\r\n    0x18377a337    |        if (iVar3 != 0) {\r\n    0x18377a339    |            uVar4 = *(undefined8 *)(arg1 + 0x118);\r\n    0x18377a340    |            *(undefined8 *)(arg1 + 0x130) = 0;\r\n    0x18377a36f    |            var_48h = iVar3;\r\n    0x18377a361    |            func_0x000184339cd0(&var_68h, 0x1902861f8, 0x190c1c4a0, 0x360);\r\n    0x18377a37d    |            func_0x00018377aea0(uVar4, &var_68h, &var_48h);\r\n                   |        }\r\n    0x18377a389    |        if (*(char *)(arg1 + 0x260) == '\\x01') {\r\n    0x18377a392    |            if (*(char *)(arg1 + 0x24f) < '\\0') {\r\n    0x18377a3a5    |                func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x238), *(uint64_t *)(arg1 + 0x248) & 0x7fffffffffffffff);\r\n                   |            }\r\n    0x18377a3b8    |            if (*(char *)(arg1 + 0x237) < '\\0') {\r\n    0x18377a3cb    |                func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x220), *(uint64_t *)(arg1 + 0x230) & 0x7fffffffffffffff);\r\n                   |            }\r\n    0x18377a3d7    |            *(undefined *)(arg1 + 0x260) = 0;\r\n                   |        }\r\n    0x18377a3de    |        *(undefined *)(arg1 + 0x350) = 0;\r\n    0x18377a3e5    |        *(undefined4 *)(arg1 + 0x150) = 0;\r\n                   |    }\r\n    0x18377a3ef    |    *(undefined8 *)(arg1 + 0x380) = 0;\r\n    0x18377a404    |    if (*(int64_t *)(arg1 + 0x378) != 0) {\r\n    0x18377a406    |        *(undefined *)(*(int64_t *)(arg1 + 0x378) + 4) = 1;\r\n    0x18377a40a    |        piVar7 = *(int32_t **)(arg1 + 0x378);\r\n    0x18377a414    |        if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a416    |            LOCK();\r\n    0x18377a416    |            *piVar7 = *piVar7 + -1;\r\n    0x18377a416    |            UNLOCK();\r\n    0x18377a419    |            if (*piVar7 == 0) {\r\n    0x18377a420    |                func_0x0001841dcbe0(piVar7, 8);\r\n                   |            }\r\n                   |        }\r\n                   |    }\r\n    0x18377a425    |    iVar3 = *(int64_t *)(arg1 + 0x358);\r\n    0x18377a42f    |    if (iVar3 != 0) {\r\n    0x18377a438    |        iVar10 = *(int64_t *)(arg1 + 0x360) << 3;\r\n    0x18377a442    |        iVar9 = iVar3;\r\n    0x18377a442    |        if (iVar10 != 0) {\r\n                   |            do {\r\n    0x18377a45d    |                puVar8 = (undefined8 *)(iVar3 + -8 + iVar10);\r\n    0x18377a460    |                if (puVar8 == (undefined8 *)0x0) {\r\n                   |code_r0x00018377a471:\r\n    0x18377a471    |    // WARNING: Does not return\r\n    0x18377a471    |                    pcVar5 = (code *)invalidInstructionException();\r\n    0x18377a471    |                    (*pcVar5)();\r\n                   |                }\r\n    0x18377a462    |                piVar7 = (int32_t *)*puVar8;\r\n    0x18377a468    |                if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a46a    |                    LOCK();\r\n    0x18377a46a    |                    *piVar7 = *piVar7 + -1;\r\n    0x18377a46a    |                    UNLOCK();\r\n    0x18377a46d    |                    if (*piVar7 == 0) {\r\n    0x18377a44e    |                        (*(code *)0x185f59da0)();\r\n                   |                    }\r\n                   |                }\r\n    0x18377a454    |                iVar10 = iVar10 + -8;\r\n    0x18377a458    |            } while (iVar10 != 0);\r\n    0x18377a48b    |            iVar9 = *(int64_t *)(arg1 + 0x358);\r\n                   |        }\r\n    0x18377a499    |        *(int64_t *)(arg1 + 0x360) = iVar3 - iVar9 >> 3;\r\n    0x18377a4ab    |        func_0x0001841dcbe0(iVar9, *(int64_t *)(arg1 + 0x368) << 3);\r\n                   |    }\r\n    0x18377a4b0    |    var_68h = arg1 + 800;\r\n    0x18377a4be    |    func_0x0001808bbde0(&var_68h, *(undefined8 *)(arg1 + 0x328));\r\n    0x18377a4cb    |    func_0x000183791570(*(undefined8 *)(arg1 + 0x308));\r\n    0x18377a4d7    |    func_0x000183791510(*(undefined8 *)(arg1 + 0x2e8));\r\n    0x18377a4e3    |    iVar3 = *(int64_t *)(arg1 + 0x2d8);\r\n    0x18377a4ea    |    *(undefined8 *)(arg1 + 0x2d8) = 0;\r\n    0x18377a4f8    |    if (iVar3 != 0) {\r\n    0x18377a4ff    |        func_0x000181516210(iVar3, 1);\r\n                   |    }\r\n    0x18377a504    |    iVar3 = *(int64_t *)(arg1 + 0x2d0);\r\n    0x18377a50b    |    *(undefined8 *)(arg1 + 0x2d0) = 0;\r\n    0x18377a519    |    if (iVar3 != 0) {\r\n    0x18377a520    |        func_0x000181516210(iVar3, 1);\r\n                   |    }\r\n    0x18377a525    |    iVar3 = *(int64_t *)(arg1 + 0x2c8);\r\n    0x18377a52c    |    *(undefined8 *)(arg1 + 0x2c8) = 0;\r\n    0x18377a53a    |    if (iVar3 != 0) {\r\n    0x18377a541    |        func_0x000182c50850(iVar3, 1);\r\n                   |    }\r\n    0x18377a546    |    func_0x0001847e5480(arg1 + 0x268);\r\n    0x18377a559    |    if (*(char *)(arg1 + 0x260) == '\\x01') {\r\n    0x18377a562    |        if (*(char *)(arg1 + 0x24f) < '\\0') {\r\n    0x18377a575    |            func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x238), *(uint64_t *)(arg1 + 0x248) & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x18377a588    |        if (*(char *)(arg1 + 0x237) < '\\0') {\r\n    0x18377a59b    |            func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x220), *(uint64_t *)(arg1 + 0x230) & 0x7fffffffffffffff);\r\n                   |        }\r\n                   |    }\r\n    0x18377a5ae    |    if (*(char *)(arg1 + 0x218) == '\\x01') {\r\n    0x18377a5b0    |        func_0x000183783bd0(arg1 + 0x158);\r\n                   |    }\r\n    0x18377a5bc    |    var_68h = arg1 + 0x138;\r\n    0x18377a5ca    |    func_0x0001841d4a00(&var_68h, *(undefined8 *)(arg1 + 0x140));\r\n    0x18377a5d7    |    iVar3 = *(int64_t *)(arg1 + 0x130);\r\n    0x18377a5de    |    *(undefined8 *)(arg1 + 0x130) = 0;\r\n    0x18377a5ec    |    if (iVar3 != 0) {\r\n    0x18377a5ee    |        iVar9 = *(int64_t *)(iVar3 + 0x20);\r\n    0x18377a5f2    |        *(undefined8 *)(iVar3 + 0x20) = 0;\r\n    0x18377a5fd    |        if (iVar9 != 0) {\r\n    0x18377a602    |            func_0x000181e9db30(iVar9);\r\n    0x18377a60f    |            func_0x0001841dcbe0(iVar9, 0x68);\r\n                   |        }\r\n    0x18377a61b    |        if (*(int64_t *)(iVar3 + 0x18) != 0) {\r\n    0x18377a61d    |            LOCK();\r\n    0x18377a61d    |            piVar7 = (int32_t *)(*(int64_t *)(iVar3 + 0x18) + 8);\r\n    0x18377a61d    |            *piVar7 = *piVar7 + -1;\r\n    0x18377a61d    |            UNLOCK();\r\n    0x18377a621    |            if (*piVar7 == 0) {\r\n    0x18377a623    |                func_0x000185578b40();\r\n                   |            }\r\n                   |        }\r\n    0x18377a628    |        piVar7 = *(int32_t **)(iVar3 + 8);\r\n    0x18377a62f    |        if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a473    |            LOCK();\r\n    0x18377a473    |            *piVar7 = *piVar7 + -1;\r\n    0x18377a473    |            UNLOCK();\r\n    0x18377a476    |            if (*piVar7 == 0) {\r\n    0x18377a481    |                func_0x0001841dcbe0(piVar7, 8);\r\n                   |            }\r\n                   |        }\r\n    0x18377a63d    |        func_0x0001841dcbe0(iVar3, 0x28);\r\n                   |    }\r\n    0x18377a642    |    iVar3 = *(int64_t *)(arg1 + 0x128);\r\n    0x18377a649    |    *(undefined8 *)(arg1 + 0x128) = 0;\r\n    0x18377a657    |    if (iVar3 != 0) {\r\n    0x18377a65c    |        func_0x0001837924f0(iVar3);\r\n    0x18377a669    |        func_0x0001841dcbe0(iVar3, 0x100);\r\n                   |    }\r\n    0x18377a66e    |    iVar3 = *(int64_t *)(arg1 + 0x120);\r\n    0x18377a675    |    *(undefined8 *)(arg1 + 0x120) = 0;\r\n    0x18377a683    |    if (iVar3 != 0) {\r\n    0x18377a688    |        func_0x0001837a3670(iVar3);\r\n    0x18377a695    |        func_0x0001841dcbe0(iVar3, 0x78);\r\n                   |    }\r\n    0x18377a6a4    |    if (*(int64_t *)(arg1 + 0x118) != 0) {\r\n    0x18377a6a6    |        LOCK();\r\n    0x18377a6a6    |        piVar7 = (int32_t *)(*(int64_t *)(arg1 + 0x118) + 8);\r\n    0x18377a6a6    |        *piVar7 = *piVar7 + -1;\r\n    0x18377a6a6    |        UNLOCK();\r\n    0x18377a6aa    |        if (*piVar7 == 0) {\r\n    0x18377a6ac    |            func_0x000185578b40();\r\n                   |        }\r\n                   |    }\r\n    0x18377a6b8    |    if (*(char *)(arg1 + 0x117) < '\\0') {\r\n    0x18377a6cb    |        func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x100), *(uint64_t *)(arg1 + 0x110) & 0x7fffffffffffffff);\r\n                   |    }\r\n    0x18377a6d7    |    piVar7 = *(int32_t **)(arg1 + 0xf8);\r\n    0x18377a6e1    |    if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a7e9    |        LOCK();\r\n    0x18377a7e9    |        *piVar7 = *piVar7 + -1;\r\n    0x18377a7e9    |        UNLOCK();\r\n    0x18377a7ec    |        if (*piVar7 == 0) {\r\n    0x18377a7f6    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x18377a6e7    |    piVar7 = *(int32_t **)(arg1 + 0xf0);\r\n    0x18377a6f1    |    if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a7d1    |        LOCK();\r\n    0x18377a7d1    |        *piVar7 = *piVar7 + -1;\r\n    0x18377a7d1    |        UNLOCK();\r\n    0x18377a7d4    |        if (*piVar7 == 0) {\r\n    0x18377a7de    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x18377a6f7    |    func_0x00018377a010(arg1 + 0x48);\r\n    0x18377a700    |    iVar3 = *(int64_t *)(arg1 + 0x40);\r\n    0x18377a707    |    if (iVar3 != 0) {\r\n    0x18377a709    |        iVar1 = *(int32_t *)(iVar3 + 8);\r\n    0x18377a70c    |        iVar6 = iVar1 + -1;\r\n    0x18377a70f    |        *(int32_t *)(iVar3 + 8) = iVar6;\r\n    0x18377a712    |        if (iVar1 == 0) goto code_r0x00018377a81f;\r\n    0x18377a718    |        if (iVar6 == 0) {\r\n    0x18377a725    |            (*(code *)0x185f59da0)(iVar3, 1);\r\n                   |        }\r\n                   |    }\r\n    0x18377a746    |    if ((*(uint64_t *)(arg1 + 0x38) & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n    0x18377a748    |        func_0x00018005f390();\r\n                   |    }\r\n    0x18377a74d    |    *(undefined8 *)(arg1 + 0x38) = 0;\r\n    0x18377a766    |    if ((*(uint64_t *)(arg1 + 0x30) & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n    0x18377a768    |        func_0x00018005f390();\r\n                   |    }\r\n    0x18377a76d    |    *(undefined8 *)(arg1 + 0x30) = 0;\r\n    0x18377a781    |    var_68h = arg1 + 0x18;\r\n    0x18377a779    |    func_0x0001841d4a00(&var_68h, *(undefined8 *)(arg1 + 0x20));\r\n    0x18377a794    |    if ((*(uint64_t *)(arg1 + 0x10) & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n    0x18377a796    |        func_0x00018005f390();\r\n                   |    }\r\n    0x18377a79b    |    *(undefined8 *)(arg1 + 0x10) = 0;\r\n    0x18377a7a3    |    piVar7 = *(int32_t **)(arg1 + 8);\r\n    0x18377a7aa    |    if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a801    |        LOCK();\r\n    0x18377a801    |        *piVar7 = *piVar7 + -1;\r\n    0x18377a801    |        UNLOCK();\r\n    0x18377a804    |        if (*piVar7 == 0) {\r\n    0x18377a80a    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x18377a7be    |    if (*(uint64_t *)0x191c71040 == (var_40h ^ (uint64_t)auStack_88)) {\r\n    0x18377a7d0    |        return;\r\n                   |    }\r\n    0x18377a817    |    func_0x000185f05b40(var_40h ^ (uint64_t)auStack_88);\r\n                   |code_r0x00018377a81f:\r\n    0x18377a81f    |    pcVar5 = (code *)swi(3);\r\n    0x18377a81f    |    (*pcVar5)();\r\n    0x18377a81f    |    return;\r\n                   |}\r\n[{\"offset\":6500622560,\"name\":\"fcn.18377a0e0\",\"size\":1859,\"is-pure\":false,\"realsz\":1857,\"noreturn\":false,\"stackframe\":136,\"calltype\":\"ms\",\"cost\":578,\"cc\":64,\"loops\":14,\"bits\":64,\"type\":\"fcn\",\"nbbs\":107,\"edges\":163,\"ebbs\":4,\"signature\":\"fcn.18377a0e0(int64_t arg1);\",\"minbound\":6500622560,\"maxbound\":6500624419,\"callrefs\":[{\"from\":6500622603,\"to\":6500746608,\"type\":\"CALL\"},{\"from\":6500622628,\"to\":6511479296,\"type\":\"CALL\"},{\"from\":6500622692,\"to\":6533922976,\"type\":\"CALL\"},{\"from\":6500622722,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6500622798,\"to\":6500740880,\"type\":\"CALL\"},{\"from\":6500622831,\"to\":6488918096,\"type\":\"CALL\"},{\"from\":6500622864,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6500622897,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6500622916,\"to\":6500717840,\"type\":\"CALL\"},{\"from\":6500622945,\"to\":6522894224,\"type\":\"CALL\"},{\"from\":6500622964,\"to\":6500717936,\"type\":\"CALL\"},{\"from\":6500623012,\"to\":6451609056,\"type\":\"CALL\"},{\"from\":6500623061,\"to\":6500623094,\"type\":\"CODE\"},{\"from\":6500623068,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623073,\"to\":6500622791,\"type\":\"CODE\"},{\"from\":6500623082,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500623119,\"to\":6500623078,\"type\":\"CODE\"},{\"from\":6500623215,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6500623229,\"to\":6500626080,\"type\":\"CALL\"},{\"from\":6500623276,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623314,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623392,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623432,\"to\":6500623450,\"type\":\"CODE\"},{\"from\":6500623438,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500623471,\"to\":6500623434,\"type\":\"CODE\"},{\"from\":6500623489,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623494,\"to\":6500623925,\"type\":\"CODE\"},{\"from\":6500623531,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623558,\"to\":6451609056,\"type\":\"CALL\"},{\"from\":6500623570,\"to\":6500717936,\"type\":\"CALL\"},{\"from\":6500623582,\"to\":6500717840,\"type\":\"CALL\"},{\"from\":6500623615,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6500623648,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6500623681,\"to\":6488918096,\"type\":\"CALL\"},{\"from\":6500623693,\"to\":6517838976,\"type\":\"CALL\"},{\"from\":6500623740,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623778,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623799,\"to\":6500662224,\"type\":\"CALL\"},{\"from\":6500623826,\"to\":6511479296,\"type\":\"CALL\"},{\"from\":6500623874,\"to\":6474554160,\"type\":\"CALL\"},{\"from\":6500623887,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623907,\"to\":6532074304,\"type\":\"CALL\"},{\"from\":6500623933,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623964,\"to\":6500721904,\"type\":\"CALL\"},{\"from\":6500623977,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500624008,\"to\":6500791920,\"type\":\"CALL\"},{\"from\":6500624021,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500624044,\"to\":6532074304,\"type\":\"CALL\"},{\"from\":6500624082,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500624123,\"to\":6500622352,\"type\":\"CALL\"},{\"from\":6500624165,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500624200,\"to\":6442840976,\"type\":\"CALL\"},{\"from\":6500624232,\"to\":6442840976,\"type\":\"CALL\"},{\"from\":6500624257,\"to\":6511479296,\"type\":\"CALL\"},{\"from\":6500624278,\"to\":6442840976,\"type\":\"CALL\"},{\"from\":6500624350,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500624356,\"to\":6500624119,\"type\":\"CODE\"},{\"from\":6500624374,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500624380,\"to\":6500624103,\"type\":\"CODE\"},{\"from\":6500624394,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500624400,\"to\":6500624300,\"type\":\"CODE\"},{\"from\":6500624410,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6500622579,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6500623187,\"to\":6713532920,\"type\":\"DATA\"},{\"from\":6500623194,\"to\":6723585184,\"type\":\"DATA\"},{\"from\":6500624191,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6500624223,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6500624269,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6500624308,\"to\":6740709440,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6500623061,\"to\":6500623094,\"type\":\"CODE\"},{\"from\":6500623073,\"to\":6500622791,\"type\":\"CODE\"},{\"from\":6500623119,\"to\":6500623078,\"type\":\"CODE\"},{\"from\":6500623432,\"to\":6500623450,\"type\":\"CODE\"},{\"from\":6500623471,\"to\":6500623434,\"type\":\"CODE\"},{\"from\":6500623494,\"to\":6500623925,\"type\":\"CODE\"},{\"from\":6500624356,\"to\":6500624119,\"type\":\"CODE\"},{\"from\":6500624380,\"to\":6500624103,\"type\":\"CODE\"},{\"from\":6500624400,\"to\":6500624300,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":9,\"outdegree\":53,\"nlocals\":4,\"nargs\":1,\"stackvars\":[{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}},{\"name\":\"var_38h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-56}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":"                   |\r\n    0x18377a0e0    |void fcn.18377a0e0(int64_t arg1)\r\n                   |{\r\n                   |    int32_t iVar1;\r\n                   |    int32_t *piVar2;\r\n                   |    int64_t iVar3;\r\n                   |    undefined8 uVar4;\r\n                   |    code *pcVar5;\r\n                   |    int32_t iVar6;\r\n                   |    int32_t *piVar7;\r\n                   |    undefined8 *puVar8;\r\n                   |    int64_t iVar9;\r\n                   |    int64_t iVar10;\r\n                   |    undefined auStack_88 [32];\r\n                   |    int64_t var_68h;\r\n                   |    int64_t var_48h;\r\n                   |    int64_t var_40h;\r\n                   |    int64_t var_38h;\r\n                   |    \r\n    0x18377a0fa    |    var_40h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_88;\r\n    0x18377a109    |    if (*(int64_t *)(arg1 + 0x10) != 0) {\r\n    0x18377a10b    |        func_0x000183798570();\r\n                   |    }\r\n    0x18377a124    |    var_68h = arg1 + 0x18;\r\n    0x18377a11c    |    func_0x0001841d4a00(&var_68h, *(undefined8 *)(arg1 + 0x20));\r\n    0x18377a129    |    *(int64_t *)(arg1 + 0x18) = arg1 + 0x20;\r\n    0x18377a130    |    *(undefined8 *)(arg1 + 0x20) = 0;\r\n    0x18377a130    |    *(undefined8 *)(arg1 + 0x28) = 0;\r\n    0x18377a13b    |    if (*(char *)(arg1 + 0x370) == '\\0') {\r\n    0x18377a141    |        *(undefined *)(arg1 + 0x370) = 1;\r\n    0x18377a158    |        if ((*(int64_t *)(arg1 + 0x38) != 0) && (*(char *)(arg1 + 0x371) == '\\x01')) {\r\n    0x18377a148    |            func_0x00018573c0a0(*(int64_t *)(arg1 + 0x38) + 0xa0, arg1);\r\n                   |        }\r\n    0x18377a16b    |        *(undefined *)(arg1 + 0x371) = 0;\r\n    0x18377a179    |        *(undefined *)(*(int64_t *)(arg1 + 0x378) + 4) = 1;\r\n    0x18377a182    |        piVar7 = (int32_t *)func_0x000185f006b8(8);\r\n    0x18377a187    |        *piVar7 = 0;\r\n    0x18377a18d    |        *(undefined *)(piVar7 + 1) = 0;\r\n    0x18377a194    |        if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a19b    |            LOCK();\r\n    0x18377a19b    |            iVar1 = *piVar7;\r\n    0x18377a19b    |            *piVar7 = *piVar7 + 1;\r\n    0x18377a19b    |            UNLOCK();\r\n    0x18377a1a5    |            if (iVar1 == 0x7fffffff) {\r\n    0x18377a822    |                pcVar5 = (code *)swi(3);\r\n    0x18377a822    |                (*pcVar5)();\r\n    0x18377a822    |                return;\r\n                   |            }\r\n                   |        }\r\n    0x18377a1ab    |        piVar2 = *(int32_t **)(arg1 + 0x378);\r\n    0x18377a1b2    |        *(int32_t **)(arg1 + 0x378) = piVar7;\r\n    0x18377a1bc    |        if (piVar2 != (int32_t *)0x0) {\r\n    0x18377a1be    |            LOCK();\r\n    0x18377a1be    |            *piVar2 = *piVar2 + -1;\r\n    0x18377a1be    |            UNLOCK();\r\n    0x18377a1c1    |            if (*piVar2 == 0) {\r\n    0x18377a2dc    |                func_0x0001841dcbe0(piVar2, 8);\r\n                   |            }\r\n                   |        }\r\n    0x18377a1c7    |        func_0x000183796f10(*(undefined8 *)(arg1 + 0x128));\r\n    0x18377a1d3    |        iVar3 = *(int64_t *)(arg1 + 0x2c8);\r\n    0x18377a1da    |        *(undefined8 *)(arg1 + 0x2c8) = 0;\r\n    0x18377a1e8    |        if (iVar3 != 0) {\r\n    0x18377a1ef    |            func_0x000182c50850(iVar3, 1);\r\n                   |        }\r\n    0x18377a1f4    |        iVar3 = *(int64_t *)(arg1 + 0x2d0);\r\n    0x18377a1fb    |        *(undefined8 *)(arg1 + 0x2d0) = 0;\r\n    0x18377a209    |        if (iVar3 != 0) {\r\n    0x18377a210    |            func_0x000181516210(iVar3, 1);\r\n                   |        }\r\n    0x18377a215    |        iVar3 = *(int64_t *)(arg1 + 0x2d8);\r\n    0x18377a21c    |        *(undefined8 *)(arg1 + 0x2d8) = 0;\r\n    0x18377a22a    |        if (iVar3 != 0) {\r\n    0x18377a231    |            func_0x000181516210(iVar3, 1);\r\n                   |        }\r\n    0x18377a23d    |        func_0x000183791510(*(undefined8 *)(arg1 + 0x2e8));\r\n    0x18377a249    |        *(int64_t *)(arg1 + 0x2e0) = arg1 + 0x2e8;\r\n    0x18377a253    |        *(undefined8 *)(arg1 + 0x2e8) = 0;\r\n    0x18377a253    |        *(undefined8 *)(arg1 + 0x2f0) = 0;\r\n    0x18377a25a    |        func_0x000184cb7790(arg1 + 0x268);\r\n    0x18377a26d    |        func_0x000183791570(*(undefined8 *)(arg1 + 0x308));\r\n    0x18377a279    |        *(int64_t *)(arg1 + 0x300) = arg1 + 0x308;\r\n    0x18377a280    |        *(undefined8 *)(arg1 + 0x308) = 0;\r\n    0x18377a280    |        *(undefined8 *)(arg1 + 0x310) = 0;\r\n    0x18377a287    |        var_68h = arg1 + 800;\r\n    0x18377a29c    |        func_0x0001808bbde0(&var_68h, *(undefined8 *)(arg1 + 0x328));\r\n    0x18377a2a9    |        *(int64_t *)(arg1 + 800) = arg1 + 0x328;\r\n    0x18377a2b0    |        *(undefined8 *)(arg1 + 0x328) = 0;\r\n    0x18377a2b0    |        *(undefined8 *)(arg1 + 0x330) = 0;\r\n    0x18377a2b7    |        iVar3 = *(int64_t *)(arg1 + 0x358);\r\n    0x18377a2c5    |        iVar10 = *(int64_t *)(arg1 + 0x360) << 3;\r\n    0x18377a2cf    |        iVar9 = iVar3;\r\n    0x18377a2cf    |        if (iVar10 != 0) {\r\n                   |            do {\r\n    0x18377a2f9    |                puVar8 = (undefined8 *)(iVar3 + -8 + iVar10);\r\n    0x18377a2fc    |                if (puVar8 == (undefined8 *)0x0) goto code_r0x00018377a471;\r\n    0x18377a302    |                piVar7 = (int32_t *)*puVar8;\r\n    0x18377a308    |                if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a30a    |                    LOCK();\r\n    0x18377a30a    |                    *piVar7 = *piVar7 + -1;\r\n    0x18377a30a    |                    UNLOCK();\r\n    0x18377a30d    |                    if (*piVar7 == 0) {\r\n    0x18377a2ea    |                        (*(code *)0x185f59da0)();\r\n                   |                    }\r\n                   |                }\r\n    0x18377a2f0    |                iVar10 = iVar10 + -8;\r\n    0x18377a2f4    |            } while (iVar10 != 0);\r\n    0x18377a311    |            iVar9 = *(int64_t *)(arg1 + 0x358);\r\n                   |        }\r\n    0x18377a31f    |        *(int64_t *)(arg1 + 0x360) = iVar3 - iVar9 >> 3;\r\n    0x18377a326    |        *(undefined *)(arg1 + 0x351) = 0;\r\n    0x18377a32d    |        iVar3 = *(int64_t *)(arg1 + 0x130);\r\n    0x18377a337    |        if (iVar3 != 0) {\r\n    0x18377a339    |            uVar4 = *(undefined8 *)(arg1 + 0x118);\r\n    0x18377a340    |            *(undefined8 *)(arg1 + 0x130) = 0;\r\n    0x18377a36f    |            var_48h = iVar3;\r\n    0x18377a361    |            func_0x000184339cd0(&var_68h, 0x1902861f8, 0x190c1c4a0, 0x360);\r\n    0x18377a37d    |            func_0x00018377aea0(uVar4, &var_68h, &var_48h);\r\n                   |        }\r\n    0x18377a389    |        if (*(char *)(arg1 + 0x260) == '\\x01') {\r\n    0x18377a392    |            if (*(char *)(arg1 + 0x24f) < '\\0') {\r\n    0x18377a3a5    |                func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x238), *(uint64_t *)(arg1 + 0x248) & 0x7fffffffffffffff);\r\n                   |            }\r\n    0x18377a3b8    |            if (*(char *)(arg1 + 0x237) < '\\0') {\r\n    0x18377a3cb    |                func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x220), *(uint64_t *)(arg1 + 0x230) & 0x7fffffffffffffff);\r\n                   |            }\r\n    0x18377a3d7    |            *(undefined *)(arg1 + 0x260) = 0;\r\n                   |        }\r\n    0x18377a3de    |        *(undefined *)(arg1 + 0x350) = 0;\r\n    0x18377a3e5    |        *(undefined4 *)(arg1 + 0x150) = 0;\r\n                   |    }\r\n    0x18377a3ef    |    *(undefined8 *)(arg1 + 0x380) = 0;\r\n    0x18377a404    |    if (*(int64_t *)(arg1 + 0x378) != 0) {\r\n    0x18377a406    |        *(undefined *)(*(int64_t *)(arg1 + 0x378) + 4) = 1;\r\n    0x18377a40a    |        piVar7 = *(int32_t **)(arg1 + 0x378);\r\n    0x18377a414    |        if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a416    |            LOCK();\r\n    0x18377a416    |            *piVar7 = *piVar7 + -1;\r\n    0x18377a416    |            UNLOCK();\r\n    0x18377a419    |            if (*piVar7 == 0) {\r\n    0x18377a420    |                func_0x0001841dcbe0(piVar7, 8);\r\n                   |            }\r\n                   |        }\r\n                   |    }\r\n    0x18377a425    |    iVar3 = *(int64_t *)(arg1 + 0x358);\r\n    0x18377a42f    |    if (iVar3 != 0) {\r\n    0x18377a438    |        iVar10 = *(int64_t *)(arg1 + 0x360) << 3;\r\n    0x18377a442    |        iVar9 = iVar3;\r\n    0x18377a442    |        if (iVar10 != 0) {\r\n                   |            do {\r\n    0x18377a45d    |                puVar8 = (undefined8 *)(iVar3 + -8 + iVar10);\r\n    0x18377a460    |                if (puVar8 == (undefined8 *)0x0) {\r\n                   |code_r0x00018377a471:\r\n    0x18377a471    |    // WARNING: Does not return\r\n    0x18377a471    |                    pcVar5 = (code *)invalidInstructionException();\r\n    0x18377a471    |                    (*pcVar5)();\r\n                   |                }\r\n    0x18377a462    |                piVar7 = (int32_t *)*puVar8;\r\n    0x18377a468    |                if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a46a    |                    LOCK();\r\n    0x18377a46a    |                    *piVar7 = *piVar7 + -1;\r\n    0x18377a46a    |                    UNLOCK();\r\n    0x18377a46d    |                    if (*piVar7 == 0) {\r\n    0x18377a44e    |                        (*(code *)0x185f59da0)();\r\n                   |                    }\r\n                   |                }\r\n    0x18377a454    |                iVar10 = iVar10 + -8;\r\n    0x18377a458    |            } while (iVar10 != 0);\r\n    0x18377a48b    |            iVar9 = *(int64_t *)(arg1 + 0x358);\r\n                   |        }\r\n    0x18377a499    |        *(int64_t *)(arg1 + 0x360) = iVar3 - iVar9 >> 3;\r\n    0x18377a4ab    |        func_0x0001841dcbe0(iVar9, *(int64_t *)(arg1 + 0x368) << 3);\r\n                   |    }\r\n    0x18377a4b0    |    var_68h = arg1 + 800;\r\n    0x18377a4be    |    func_0x0001808bbde0(&var_68h, *(undefined8 *)(arg1 + 0x328));\r\n    0x18377a4cb    |    func_0x000183791570(*(undefined8 *)(arg1 + 0x308));\r\n    0x18377a4d7    |    func_0x000183791510(*(undefined8 *)(arg1 + 0x2e8));\r\n    0x18377a4e3    |    iVar3 = *(int64_t *)(arg1 + 0x2d8);\r\n    0x18377a4ea    |    *(undefined8 *)(arg1 + 0x2d8) = 0;\r\n    0x18377a4f8    |    if (iVar3 != 0) {\r\n    0x18377a4ff    |        func_0x000181516210(iVar3, 1);\r\n                   |    }\r\n    0x18377a504    |    iVar3 = *(int64_t *)(arg1 + 0x2d0);\r\n    0x18377a50b    |    *(undefined8 *)(arg1 + 0x2d0) = 0;\r\n    0x18377a519    |    if (iVar3 != 0) {\r\n    0x18377a520    |        func_0x000181516210(iVar3, 1);\r\n                   |    }\r\n    0x18377a525    |    iVar3 = *(int64_t *)(arg1 + 0x2c8);\r\n    0x18377a52c    |    *(undefined8 *)(arg1 + 0x2c8) = 0;\r\n    0x18377a53a    |    if (iVar3 != 0) {\r\n    0x18377a541    |        func_0x000182c50850(iVar3, 1);\r\n                   |    }\r\n    0x18377a546    |    func_0x0001847e5480(arg1 + 0x268);\r\n    0x18377a559    |    if (*(char *)(arg1 + 0x260) == '\\x01') {\r\n    0x18377a562    |        if (*(char *)(arg1 + 0x24f) < '\\0') {\r\n    0x18377a575    |            func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x238), *(uint64_t *)(arg1 + 0x248) & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x18377a588    |        if (*(char *)(arg1 + 0x237) < '\\0') {\r\n    0x18377a59b    |            func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x220), *(uint64_t *)(arg1 + 0x230) & 0x7fffffffffffffff);\r\n                   |        }\r\n                   |    }\r\n    0x18377a5ae    |    if (*(char *)(arg1 + 0x218) == '\\x01') {\r\n    0x18377a5b0    |        func_0x000183783bd0(arg1 + 0x158);\r\n                   |    }\r\n    0x18377a5bc    |    var_68h = arg1 + 0x138;\r\n    0x18377a5ca    |    func_0x0001841d4a00(&var_68h, *(undefined8 *)(arg1 + 0x140));\r\n    0x18377a5d7    |    iVar3 = *(int64_t *)(arg1 + 0x130);\r\n    0x18377a5de    |    *(undefined8 *)(arg1 + 0x130) = 0;\r\n    0x18377a5ec    |    if (iVar3 != 0) {\r\n    0x18377a5ee    |        iVar9 = *(int64_t *)(iVar3 + 0x20);\r\n    0x18377a5f2    |        *(undefined8 *)(iVar3 + 0x20) = 0;\r\n    0x18377a5fd    |        if (iVar9 != 0) {\r\n    0x18377a602    |            func_0x000181e9db30(iVar9);\r\n    0x18377a60f    |            func_0x0001841dcbe0(iVar9, 0x68);\r\n                   |        }\r\n    0x18377a61b    |        if (*(int64_t *)(iVar3 + 0x18) != 0) {\r\n    0x18377a61d    |            LOCK();\r\n    0x18377a61d    |            piVar7 = (int32_t *)(*(int64_t *)(iVar3 + 0x18) + 8);\r\n    0x18377a61d    |            *piVar7 = *piVar7 + -1;\r\n    0x18377a61d    |            UNLOCK();\r\n    0x18377a621    |            if (*piVar7 == 0) {\r\n    0x18377a623    |                func_0x000185578b40();\r\n                   |            }\r\n                   |        }\r\n    0x18377a628    |        piVar7 = *(int32_t **)(iVar3 + 8);\r\n    0x18377a62f    |        if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a473    |            LOCK();\r\n    0x18377a473    |            *piVar7 = *piVar7 + -1;\r\n    0x18377a473    |            UNLOCK();\r\n    0x18377a476    |            if (*piVar7 == 0) {\r\n    0x18377a481    |                func_0x0001841dcbe0(piVar7, 8);\r\n                   |            }\r\n                   |        }\r\n    0x18377a63d    |        func_0x0001841dcbe0(iVar3, 0x28);\r\n                   |    }\r\n    0x18377a642    |    iVar3 = *(int64_t *)(arg1 + 0x128);\r\n    0x18377a649    |    *(undefined8 *)(arg1 + 0x128) = 0;\r\n    0x18377a657    |    if (iVar3 != 0) {\r\n    0x18377a65c    |        func_0x0001837924f0(iVar3);\r\n    0x18377a669    |        func_0x0001841dcbe0(iVar3, 0x100);\r\n                   |    }\r\n    0x18377a66e    |    iVar3 = *(int64_t *)(arg1 + 0x120);\r\n    0x18377a675    |    *(undefined8 *)(arg1 + 0x120) = 0;\r\n    0x18377a683    |    if (iVar3 != 0) {\r\n    0x18377a688    |        func_0x0001837a3670(iVar3);\r\n    0x18377a695    |        func_0x0001841dcbe0(iVar3, 0x78);\r\n                   |    }\r\n    0x18377a6a4    |    if (*(int64_t *)(arg1 + 0x118) != 0) {\r\n    0x18377a6a6    |        LOCK();\r\n    0x18377a6a6    |        piVar7 = (int32_t *)(*(int64_t *)(arg1 + 0x118) + 8);\r\n    0x18377a6a6    |        *piVar7 = *piVar7 + -1;\r\n    0x18377a6a6    |        UNLOCK();\r\n    0x18377a6aa    |        if (*piVar7 == 0) {\r\n    0x18377a6ac    |            func_0x000185578b40();\r\n                   |        }\r\n                   |    }\r\n    0x18377a6b8    |    if (*(char *)(arg1 + 0x117) < '\\0') {\r\n    0x18377a6cb    |        func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x100), *(uint64_t *)(arg1 + 0x110) & 0x7fffffffffffffff);\r\n                   |    }\r\n    0x18377a6d7    |    piVar7 = *(int32_t **)(arg1 + 0xf8);\r\n    0x18377a6e1    |    if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a7e9    |        LOCK();\r\n    0x18377a7e9    |        *piVar7 = *piVar7 + -1;\r\n    0x18377a7e9    |        UNLOCK();\r\n    0x18377a7ec    |        if (*piVar7 == 0) {\r\n    0x18377a7f6    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x18377a6e7    |    piVar7 = *(int32_t **)(arg1 + 0xf0);\r\n    0x18377a6f1    |    if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a7d1    |        LOCK();\r\n    0x18377a7d1    |        *piVar7 = *piVar7 + -1;\r\n    0x18377a7d1    |        UNLOCK();\r\n    0x18377a7d4    |        if (*piVar7 == 0) {\r\n    0x18377a7de    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x18377a6f7    |    func_0x00018377a010(arg1 + 0x48);\r\n    0x18377a700    |    iVar3 = *(int64_t *)(arg1 + 0x40);\r\n    0x18377a707    |    if (iVar3 != 0) {\r\n    0x18377a709    |        iVar1 = *(int32_t *)(iVar3 + 8);\r\n    0x18377a70c    |        iVar6 = iVar1 + -1;\r\n    0x18377a70f    |        *(int32_t *)(iVar3 + 8) = iVar6;\r\n    0x18377a712    |        if (iVar1 == 0) goto code_r0x00018377a81f;\r\n    0x18377a718    |        if (iVar6 == 0) {\r\n    0x18377a725    |            (*(code *)0x185f59da0)(iVar3, 1);\r\n                   |        }\r\n                   |    }\r\n    0x18377a746    |    if ((*(uint64_t *)(arg1 + 0x38) & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n    0x18377a748    |        func_0x00018005f390();\r\n                   |    }\r\n    0x18377a74d    |    *(undefined8 *)(arg1 + 0x38) = 0;\r\n    0x18377a766    |    if ((*(uint64_t *)(arg1 + 0x30) & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n    0x18377a768    |        func_0x00018005f390();\r\n                   |    }\r\n    0x18377a76d    |    *(undefined8 *)(arg1 + 0x30) = 0;\r\n    0x18377a781    |    var_68h = arg1 + 0x18;\r\n    0x18377a779    |    func_0x0001841d4a00(&var_68h, *(undefined8 *)(arg1 + 0x20));\r\n    0x18377a794    |    if ((*(uint64_t *)(arg1 + 0x10) & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n    0x18377a796    |        func_0x00018005f390();\r\n                   |    }\r\n    0x18377a79b    |    *(undefined8 *)(arg1 + 0x10) = 0;\r\n    0x18377a7a3    |    piVar7 = *(int32_t **)(arg1 + 8);\r\n    0x18377a7aa    |    if (piVar7 != (int32_t *)0x0) {\r\n    0x18377a801    |        LOCK();\r\n    0x18377a801    |        *piVar7 = *piVar7 + -1;\r\n    0x18377a801    |        UNLOCK();\r\n    0x18377a804    |        if (*piVar7 == 0) {\r\n    0x18377a80a    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x18377a7be    |    if (*(uint64_t *)0x191c71040 == (var_40h ^ (uint64_t)auStack_88)) {\r\n    0x18377a7d0    |        return;\r\n                   |    }\r\n    0x18377a817    |    func_0x000185f05b40(var_40h ^ (uint64_t)auStack_88);\r\n                   |code_r0x00018377a81f:\r\n    0x18377a81f    |    pcVar5 = (code *)swi(3);\r\n    0x18377a81f    |    (*pcVar5)();\r\n    0x18377a81f    |    return;\r\n                   |}\r\n[{\"offset\":6500622560,\"name\":\"fcn.18377a0e0\",\"size\":1859,\"is-pure\":false,\"realsz\":1857,\"noreturn\":false,\"stackframe\":136,\"calltype\":\"ms\",\"cost\":578,\"cc\":64,\"loops\":14,\"bits\":64,\"type\":\"fcn\",\"nbbs\":107,\"edges\":163,\"ebbs\":4,\"signature\":\"fcn.18377a0e0(int64_t arg1);\",\"minbound\":6500622560,\"maxbound\":6500624419,\"callrefs\":[{\"from\":6500622603,\"to\":6500746608,\"type\":\"CALL\"},{\"from\":6500622628,\"to\":6511479296,\"type\":\"CALL\"},{\"from\":6500622692,\"to\":6533922976,\"type\":\"CALL\"},{\"from\":6500622722,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6500622798,\"to\":6500740880,\"type\":\"CALL\"},{\"from\":6500622831,\"to\":6488918096,\"type\":\"CALL\"},{\"from\":6500622864,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6500622897,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6500622916,\"to\":6500717840,\"type\":\"CALL\"},{\"from\":6500622945,\"to\":6522894224,\"type\":\"CALL\"},{\"from\":6500622964,\"to\":6500717936,\"type\":\"CALL\"},{\"from\":6500623012,\"to\":6451609056,\"type\":\"CALL\"},{\"from\":6500623061,\"to\":6500623094,\"type\":\"CODE\"},{\"from\":6500623068,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623073,\"to\":6500622791,\"type\":\"CODE\"},{\"from\":6500623082,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500623119,\"to\":6500623078,\"type\":\"CODE\"},{\"from\":6500623215,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6500623229,\"to\":6500626080,\"type\":\"CALL\"},{\"from\":6500623276,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623314,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623392,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623432,\"to\":6500623450,\"type\":\"CODE\"},{\"from\":6500623438,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500623471,\"to\":6500623434,\"type\":\"CODE\"},{\"from\":6500623489,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623494,\"to\":6500623925,\"type\":\"CODE\"},{\"from\":6500623531,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623558,\"to\":6451609056,\"type\":\"CALL\"},{\"from\":6500623570,\"to\":6500717936,\"type\":\"CALL\"},{\"from\":6500623582,\"to\":6500717840,\"type\":\"CALL\"},{\"from\":6500623615,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6500623648,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6500623681,\"to\":6488918096,\"type\":\"CALL\"},{\"from\":6500623693,\"to\":6517838976,\"type\":\"CALL\"},{\"from\":6500623740,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623778,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623799,\"to\":6500662224,\"type\":\"CALL\"},{\"from\":6500623826,\"to\":6511479296,\"type\":\"CALL\"},{\"from\":6500623874,\"to\":6474554160,\"type\":\"CALL\"},{\"from\":6500623887,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623907,\"to\":6532074304,\"type\":\"CALL\"},{\"from\":6500623933,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500623964,\"to\":6500721904,\"type\":\"CALL\"},{\"from\":6500623977,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500624008,\"to\":6500791920,\"type\":\"CALL\"},{\"from\":6500624021,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500624044,\"to\":6532074304,\"type\":\"CALL\"},{\"from\":6500624082,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6500624123,\"to\":6500622352,\"type\":\"CALL\"},{\"from\":6500624165,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500624200,\"to\":6442840976,\"type\":\"CALL\"},{\"from\":6500624232,\"to\":6442840976,\"type\":\"CALL\"},{\"from\":6500624257,\"to\":6511479296,\"type\":\"CALL\"},{\"from\":6500624278,\"to\":6442840976,\"type\":\"CALL\"},{\"from\":6500624350,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500624356,\"to\":6500624119,\"type\":\"CODE\"},{\"from\":6500624374,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500624380,\"to\":6500624103,\"type\":\"CODE\"},{\"from\":6500624394,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6500624400,\"to\":6500624300,\"type\":\"CODE\"},{\"from\":6500624410,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6500622579,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6500623187,\"to\":6713532920,\"type\":\"DATA\"},{\"from\":6500623194,\"to\":6723585184,\"type\":\"DATA\"},{\"from\":6500624191,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6500624223,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6500624269,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6500624308,\"to\":6740709440,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6500623061,\"to\":6500623094,\"type\":\"CODE\"},{\"from\":6500623073,\"to\":6500622791,\"type\":\"CODE\"},{\"from\":6500623119,\"to\":6500623078,\"type\":\"CODE\"},{\"from\":6500623432,\"to\":6500623450,\"type\":\"CODE\"},{\"from\":6500623471,\"to\":6500623434,\"type\":\"CODE\"},{\"from\":6500623494,\"to\":6500623925,\"type\":\"CODE\"},{\"from\":6500624356,\"to\":6500624119,\"type\":\"CODE\"},{\"from\":6500624380,\"to\":6500624103,\"type\":\"CODE\"},{\"from\":6500624400,\"to\":6500624300,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":9,\"outdegree\":53,\"nlocals\":4,\"nargs\":1,\"stackvars\":[{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}},{\"name\":\"var_38h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-56}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"5123ms"}}