{"ok":true,"data":{"evidence_id":"ev_e2d499574ded223a15e75c25d416333dd080248c73fab22c2061ae5369911ee0","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x183696610;pdgo @ 0x183696610;afij @ 0x183696610","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x183696610;pdgo @ 0x183696610;afij @ 0x183696610","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":"    0x183696610    |\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_68h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_88h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_c9h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_e1h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_d0h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_e0h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_b1h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_60h\r\n                   |\r\n    0x183696610    |void fcn.183696610(int64_t arg1, int64_t arg2, undefined8 placeholder_2, int64_t arg4)\r\n                   |{\r\n                   |    int32_t iVar1;\r\n                   |    undefined8 uVar2;\r\n                   |    int32_t *piVar3;\r\n                   |    code *pcVar4;\r\n                   |    char cVar5;\r\n                   |    undefined8 uVar6;\r\n                   |    int64_t iVar7;\r\n                   |    uint64_t uVar8;\r\n                   |    int64_t iVar9;\r\n                   |    undefined4 *puVar10;\r\n                   |    undefined4 *puVar11;\r\n                   |    undefined8 *puVar12;\r\n                   |    int64_t *piVar13;\r\n                   |    undefined auStack_138 [32];\r\n                   |    int64_t var_118h;\r\n                   |    int64_t var_f8h;\r\n                   |    undefined8 uStack_f0;\r\n                   |    int64_t var_e8h;\r\n                   |    undefined8 var_e0h;\r\n                   |    int64_t var_d8h;\r\n                   |    uint64_t var_d0h;\r\n                   |    int64_t var_c8h;\r\n                   |    undefined8 uStack_c0;\r\n                   |    int64_t var_b8h;\r\n                   |    int64_t var_b0h;\r\n                   |    int64_t var_a8h;\r\n                   |    int64_t var_a0h;\r\n                   |    int64_t var_98h;\r\n                   |    int64_t var_90h;\r\n                   |    undefined var_88h [7];\r\n                   |    int64_t var_81h;\r\n                   |    int64_t var_78h;\r\n                   |    undefined8 uStack_70;\r\n                   |    undefined var_68h [7];\r\n                   |    int64_t var_61h;\r\n                   |    int64_t var_58h;\r\n                   |    int64_t var_50h;\r\n                   |    int64_t var_48h;\r\n                   |    \r\n    0x183696639    |    var_50h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_138;\r\n    0x183696647    |    cVar5 = func_0x000183696cd0(arg2);\r\n    0x18369664e    |    if (cVar5 == '\\0') {\r\n    0x18369665f    |        var_78h = 0;\r\n    0x18369665f    |        uStack_70 = 0;\r\n    0x183696664    |        _var_68h = 0;\r\n    0x183696670    |        _var_88h = 0;\r\n    0x183696674    |        var_98h = 0;\r\n    0x183696674    |        var_90h = 0;\r\n    0x18369667d    |        cVar5 = func_0x000183696de0(arg2, &var_78h, &var_98h);\r\n    0x183696684    |        if (cVar5 == '\\0') {\r\n    0x1836967ba    |            var_f8h = 0;\r\n    0x1836967c3    |            piVar3 = *(int32_t **)arg4;\r\n    0x1836967c9    |            if (piVar3 == (int32_t *)0x0) {\r\n    0x183696c63    |                pcVar4 = (code *)swi(3);\r\n    0x183696c63    |                (*pcVar4)();\r\n    0x183696c63    |                return;\r\n                   |            }\r\n    0x1836967cf    |            *(undefined8 *)arg4 = 0;\r\n    0x1836967e2    |            (*(code *)0x185f59da0)(piVar3, &var_f8h);\r\n    0x1836967e8    |            LOCK();\r\n    0x1836967e8    |            *piVar3 = *piVar3 + -1;\r\n    0x1836967e8    |            UNLOCK();\r\n    0x1836967eb    |            if (*piVar3 == 0) {\r\n    0x1836967f4    |                (*(code *)0x185f59da0)(piVar3);\r\n                   |            }\r\n    0x183696802    |            if (var_f8h != 0) {\r\n    0x183696c89    |                LOCK();\r\n    0x183696c89    |                piVar3 = (int32_t *)(var_f8h + 8);\r\n    0x183696c89    |                *piVar3 = *piVar3 + -1;\r\n    0x183696c89    |                UNLOCK();\r\n    0x183696c8d    |                if (*piVar3 == 0) {\r\n    0x183696c9e    |                    (*(code *)0x185f59da0)(var_f8h, 1);\r\n                   |                }\r\n                   |            }\r\n                   |        } else {\r\n    0x18369668a    |            uVar2 = *(undefined8 *)(arg1 + 8);\r\n    0x183696695    |            uVar6 = func_0x0001824c9f20(0x191dd7a60);\r\n    0x1836966a3    |            iVar7 = func_0x000184300b20(uVar6, uVar2, 1);\r\n    0x1836966a8    |            var_a8h = 0;\r\n    0x1836966a8    |            var_a0h = 0;\r\n    0x1836966b0    |            var_b8h = 0;\r\n    0x1836966b0    |            var_b0h = 0;\r\n    0x1836966b8    |            var_c8h = 0;\r\n    0x1836966b8    |            uStack_c0 = 0;\r\n    0x1836966bd    |            var_d8h = 0;\r\n    0x1836966bd    |            var_d0h = 0;\r\n    0x1836966c2    |            var_e8h = 0;\r\n    0x1836966c2    |            var_e0h = 0;\r\n    0x1836966c7    |            var_f8h = 0;\r\n    0x1836966c7    |            uStack_f0 = 0;\r\n    0x1836966cf    |            if (iVar7 == 0) {\r\n                   |code_r0x0001836966f3:\r\n    0x1836966f3    |                var_118h = 0;\r\n    0x1836966fc    |                piVar3 = *(int32_t **)arg4;\r\n    0x183696702    |                if (piVar3 == (int32_t *)0x0) {\r\n    0x183696c86    |                    pcVar4 = (code *)swi(3);\r\n    0x183696c86    |                    (*pcVar4)();\r\n    0x183696c86    |                    return;\r\n                   |                }\r\n    0x183696708    |                *(undefined8 *)arg4 = 0;\r\n    0x18369671b    |                (*(code *)0x185f59da0)(piVar3, &var_118h);\r\n    0x183696721    |                LOCK();\r\n    0x183696721    |                *piVar3 = *piVar3 + -1;\r\n    0x183696721    |                UNLOCK();\r\n    0x183696724    |                iVar7 = var_118h;\r\n    0x183696724    |                if (*piVar3 == 0) {\r\n    0x18369672d    |                    (*(code *)0x185f59da0)(piVar3);\r\n    0x18369672d    |                    iVar7 = var_118h;\r\n                   |                }\r\n                   |code_r0x000183696738:\r\n    0x18369673b    |                if (iVar7 != 0) {\r\n    0x183696c2b    |                    LOCK();\r\n    0x183696c2b    |                    piVar3 = (int32_t *)(iVar7 + 8);\r\n    0x183696c2b    |                    *piVar3 = *piVar3 + -1;\r\n    0x183696c2b    |                    UNLOCK();\r\n    0x183696c2f    |                    if (*piVar3 == 0) {\r\n    0x183696c40    |                        (*(code *)0x185f59da0)(iVar7, 1);\r\n                   |                    }\r\n                   |                }\r\n                   |            } else {\r\n    0x1836966e4    |                func_0x00018369b100(iVar7, &var_f8h, &var_78h);\r\n    0x1836966e4    |                uVar8 = _var_88h;\r\n    0x1836966e4    |                iVar7 = var_90h;\r\n    0x1836966ed    |                if ((char)var_a0h == '\\0') goto code_r0x0001836966f3;\r\n    0x1836969b6    |                iVar9 = (int64_t)(char)var_81h;\r\n    0x1836969b6    |                if ((int64_t)(char)var_81h < 0) {\r\n    0x1836969b6    |                    iVar9 = var_90h;\r\n                   |                }\r\n    0x1836969be    |                if (iVar9 == 10) {\r\n    0x1836969c3    |                    piVar13 = &var_98h;\r\n    0x1836969c3    |                    if ((int64_t)_var_88h < 0) {\r\n    0x1836969c5    |                        piVar13 = (int64_t *)var_98h;\r\n                   |                    }\r\n    0x1836969e8    |                    if ((int16_t)piVar13[1] != 0x6c6d || *piVar13 != 0x74682e7865646e69) goto code_r0x0001836969ee;\r\n    0x183696bba    |                    func_0x00018a006310(&var_58h, &var_e0h);\r\n    0x183696bc5    |                    var_118h = var_58h;\r\n    0x183696bcd    |                    var_58h = 0;\r\n    0x183696bd9    |                    piVar3 = *(int32_t **)arg4;\r\n    0x183696bdf    |                    if (piVar3 == (int32_t *)0x0) {\r\n    0x183696ca9    |                        pcVar4 = (code *)swi(3);\r\n    0x183696ca9    |                        (*pcVar4)();\r\n    0x183696ca9    |                        return;\r\n                   |                    }\r\n    0x183696be5    |                    *(undefined8 *)arg4 = 0;\r\n    0x183696bf8    |                    (*(code *)0x185f59da0)(piVar3, &var_118h);\r\n    0x183696bfe    |                    LOCK();\r\n    0x183696bfe    |                    *piVar3 = *piVar3 + -1;\r\n    0x183696bfe    |                    UNLOCK();\r\n    0x183696c01    |                    if (*piVar3 == 0) {\r\n    0x183696c0a    |                        (*(code *)0x185f59da0)(piVar3);\r\n                   |                    }\r\n    0x183696c18    |                    iVar7 = var_58h;\r\n    0x183696c18    |                    if (var_118h != 0) {\r\n    0x183696cac    |                        LOCK();\r\n    0x183696cac    |                        piVar3 = (int32_t *)(var_118h + 8);\r\n    0x183696cac    |                        *piVar3 = *piVar3 + -1;\r\n    0x183696cac    |                        UNLOCK();\r\n    0x183696cb0    |                        if (*piVar3 == 0) {\r\n    0x183696cc1    |                            (*(code *)0x185f59da0)(var_118h, 1);\r\n    0x183696cc7    |                            iVar7 = var_58h;\r\n                   |                        }\r\n                   |                    }\r\n                   |                    goto code_r0x000183696738;\r\n                   |                }\r\n                   |code_r0x0001836969ee:\r\n    0x1836969f3    |                puVar10 = (undefined4 *)func_0x000185f006b8(0x30);\r\n    0x183696a00    |                *puVar10 = 1;\r\n    0x183696a09    |                *(undefined8 *)(puVar10 + 2) = 0x183697f50;\r\n    0x183696a14    |                *(undefined8 *)(puVar10 + 4) = 0x183283eb0;\r\n    0x183696a1f    |                *(undefined8 *)(puVar10 + 6) = 0x1841d75d0;\r\n    0x183696a2a    |                *(undefined8 *)(puVar10 + 8) = 0x183697350;\r\n    0x183696a31    |                *(undefined8 *)(puVar10 + 10) = *(undefined8 *)arg4;\r\n    0x183696a35    |                *(undefined8 *)arg4 = 0;\r\n    0x183696a41    |                puVar11 = (undefined4 *)func_0x000185f006b8(0x98);\r\n    0x183696a49    |                *puVar11 = 1;\r\n    0x183696a52    |                *(undefined8 *)(puVar11 + 2) = 0x183698010;\r\n    0x183696a5d    |                *(undefined8 *)(puVar11 + 4) = 0x1836980a0;\r\n    0x183696a61    |                *(undefined8 *)(puVar11 + 6) = 0x1841d75d0;\r\n    0x183696a6c    |                *(undefined8 *)(puVar11 + 8) = 0x183699fb0;\r\n    0x183696a70    |                func_0x000183698720(puVar11 + 10, &var_f8h);\r\n    0x183696a88    |                if ((int64_t)uVar8 < 0) {\r\n    0x183696a7e    |                    func_0x0001841dd0f0(puVar11 + 0x20, var_98h, iVar7);\r\n                   |                } else {\r\n    0x183696a96    |                    *(uint64_t *)(puVar11 + 0x24) = _var_88h;\r\n    0x183696aa2    |                    puVar11[0x20] = (undefined4)var_98h;\r\n    0x183696aa2    |                    puVar11[0x21] = var_98h._4_4_;\r\n    0x183696aa2    |                    puVar11[0x22] = (undefined4)var_90h;\r\n    0x183696aa2    |                    puVar11[0x23] = var_90h._4_4_;\r\n                   |                }\r\n    0x183696ab3    |                func_0x000184339cd0(&var_118h, 0x190b42c78, 0x190c0acf0, 0x5e);\r\n    0x183696ac8    |                puVar12 = (undefined8 *)func_0x000185f006b8(8);\r\n    0x183696ad0    |                *puVar12 = 0;\r\n    0x183696adc    |                var_58h = func_0x000185f006b8(0x38);\r\n    0x183696ae6    |                *(undefined4 *)var_58h = 1;\r\n    0x183696aef    |                *(undefined8 *)(var_58h + 8) = 0x181346940;\r\n    0x183696afa    |                *(undefined8 *)(var_58h + 0x10) = 0x1836984a0;\r\n    0x183696afe    |                *(undefined8 *)(var_58h + 0x18) = 0x1841d75d0;\r\n    0x183696b09    |                *(undefined8 *)(var_58h + 0x20) = 0x183698140;\r\n    0x183696b0d    |                *(undefined4 **)(var_58h + 0x28) = puVar10;\r\n    0x183696b11    |                *(undefined8 **)(var_58h + 0x30) = puVar12;\r\n    0x183696b22    |                *(undefined4 **)0x0 = (undefined4 *)func_0x000185f006b8(0x38);\r\n    0x183696b2a    |                **(undefined4 **)0x0 = 1;\r\n    0x183696b33    |                *(undefined8 *)(*(undefined4 **)0x0 + 2) = 0x1800b3540;\r\n    0x183696b3e    |                *(undefined8 *)(*(undefined4 **)0x0 + 4) = 0x18336e440;\r\n    0x183696b42    |                *(undefined8 *)(*(undefined4 **)0x0 + 6) = 0x1841d75d0;\r\n    0x183696b4d    |                *(undefined8 *)(*(undefined4 **)0x0 + 8) = 0x1836982a0;\r\n    0x183696b51    |                *(undefined4 **)(*(undefined4 **)0x0 + 10) = puVar11;\r\n    0x183696b69    |                if (((uint64_t)puVar12 & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n    0x183696b6e    |                    func_0x0001841c7180(puVar12);\r\n                   |                }\r\n    0x183696b73    |                *(undefined8 **)(*(undefined4 **)0x0 + 0xc) = puVar12;\r\n    0x183696b89    |                func_0x000181401ac0(&var_118h, 0x190c0acdc, (int64_t)&var_61h + 1, &var_58h);\r\n                   |            }\r\n    0x183696749    |            if ((char)var_a0h == '\\x01') {\r\n    0x183696761    |                if (((char)var_b0h == '\\x01') && (var_b8h < 0)) {\r\n    0x183696773    |                    func_0x0001841dcbe0(var_c8h, var_b8h * 2);\r\n                   |                }\r\n    0x18369677d    |                if ((int64_t)var_d0h < 0) {\r\n    0x183696793    |                    func_0x0001841dcbe0(var_e0h, var_d0h & 0x7fffffffffffffff);\r\n                   |                }\r\n    0x18369679d    |                if (var_e8h < 0) {\r\n    0x1836967b3    |                    func_0x0001841dcbe0(var_f8h, var_e8h & 0x7fffffffffffffff);\r\n                   |                }\r\n                   |            }\r\n                   |        }\r\n    0x183696810    |        if ((int64_t)_var_88h < 0) {\r\n    0x18369682c    |            func_0x0001841dcbe0(var_98h, _var_88h & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x183696839    |        if ((int64_t)_var_68h < 0) {\r\n    0x183696859    |            func_0x0001841dcbe0(var_78h, _var_68h & 0x7fffffffffffffff);\r\n                   |        }\r\n                   |    } else {\r\n    0x183696868    |        puVar12 = (undefined8 *)func_0x000185f006b8(0x28);\r\n    0x183696875    |        uVar8 = func_0x000185f006b8(0x50);\r\n    0x18369689f    |        if ((uVar8 + 0x48 < uVar8) || (0x190c0ac90 < uVar8 + 0x48 && uVar8 < 0x190c0ac91)) goto code_r0x000183696c5b;\r\n    0x1836968b5    |        func_0x000185f5a940(uVar8, 0x190c0ac90, 0x48);\r\n    0x1836968ba    |        *(undefined *)(uVar8 + 0x48) = 0;\r\n    0x1836968be    |        *(undefined4 *)(puVar12 + 1) = 0;\r\n    0x1836968cc    |        *puVar12 = 0x18ff78af0;\r\n    0x1836968cf    |        puVar12[2] = uVar8;\r\n    0x1836968d3    |        puVar12[3] = 0x48;\r\n    0x1836968e9    |        puVar12[4] = 0x8000000000000050;\r\n    0x1836968f0    |        if (puVar12 != (undefined8 *)0x0) {\r\n    0x1836968f7    |            LOCK();\r\n    0x1836968f7    |            piVar3 = (int32_t *)(puVar12 + 1);\r\n    0x1836968f7    |            iVar1 = *piVar3;\r\n    0x1836968f7    |            *piVar3 = *piVar3 + 1;\r\n    0x1836968f7    |            UNLOCK();\r\n    0x183696901    |            if (iVar1 == 0x7fffffff) {\r\n    0x183696c60    |                pcVar4 = (code *)swi(3);\r\n    0x183696c60    |                (*pcVar4)();\r\n    0x183696c60    |                return;\r\n                   |            }\r\n                   |        }\r\n    0x18369690c    |        piVar3 = *(int32_t **)arg4;\r\n    0x183696912    |        var_f8h = (int64_t)puVar12;\r\n    0x183696912    |        if (piVar3 == (int32_t *)0x0) {\r\n    0x183696c5d    |            pcVar4 = (code *)swi(3);\r\n    0x183696c5d    |            (*pcVar4)();\r\n    0x183696c5d    |            return;\r\n                   |        }\r\n    0x183696918    |        *(undefined8 *)arg4 = 0;\r\n    0x18369692b    |        (*(code *)0x185f59da0)(piVar3, &var_f8h);\r\n    0x183696931    |        LOCK();\r\n    0x183696931    |        *piVar3 = *piVar3 + -1;\r\n    0x183696931    |        UNLOCK();\r\n    0x183696934    |        if (*piVar3 == 0) {\r\n    0x18369693d    |            (*(code *)0x185f59da0)(piVar3);\r\n                   |        }\r\n    0x18369694b    |        if (var_f8h != 0) {\r\n    0x183696c66    |            LOCK();\r\n    0x183696c66    |            piVar3 = (int32_t *)(var_f8h + 8);\r\n    0x183696c66    |            *piVar3 = *piVar3 + -1;\r\n    0x183696c66    |            UNLOCK();\r\n    0x183696c6a    |            if (*piVar3 == 0) {\r\n    0x183696c7b    |                (*(code *)0x185f59da0)(var_f8h, 1);\r\n                   |            }\r\n                   |        }\r\n                   |    }\r\n    0x183696951    |    piVar3 = *(int32_t **)arg4;\r\n    0x183696957    |    if (piVar3 != (int32_t *)0x0) {\r\n    0x18369698e    |        LOCK();\r\n    0x18369698e    |        *piVar3 = *piVar3 + -1;\r\n    0x18369698e    |        UNLOCK();\r\n    0x183696991    |        if (*piVar3 == 0) {\r\n    0x183696997    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x18369696e    |    if (*(uint64_t *)0x191c71040 == (var_50h ^ (uint64_t)auStack_138)) {\r\n    0x18369698d    |        return;\r\n                   |    }\r\n    0x183696c53    |    func_0x000185f05b40(var_50h ^ (uint64_t)auStack_138);\r\n                   |code_r0x000183696c5b:\r\n    0x183696c5b    |    // WARNING: Does not return\r\n    0x183696c5b    |    pcVar4 = (code *)invalidInstructionException();\r\n    0x183696c5b    |    (*pcVar4)();\r\n                   |}\r\n[{\"offset\":6499690000,\"name\":\"fcn.183696610\",\"size\":1724,\"is-pure\":false,\"realsz\":1714,\"noreturn\":false,\"stackframe\":312,\"calltype\":\"ms\",\"cost\":508,\"cc\":46,\"loops\":13,\"bits\":64,\"type\":\"fcn\",\"nbbs\":68,\"edges\":100,\"ebbs\":7,\"signature\":\"fcn.183696610(int64_t arg1, int64_t arg2, int64_t arg4);\",\"minbound\":6499690000,\"maxbound\":6499691724,\"callrefs\":[{\"from\":6499690055,\"to\":6499691728,\"type\":\"CALL\"},{\"from\":6499690109,\"to\":6499692000,\"type\":\"CALL\"},{\"from\":6499690133,\"to\":6481026848,\"type\":\"CALL\"},{\"from\":6499690147,\"to\":6512708384,\"type\":\"CALL\"},{\"from\":6499690212,\"to\":6499709184,\"type\":\"CALL\"},{\"from\":6499690267,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690285,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690355,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690387,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690419,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690424,\"to\":6499690504,\"type\":\"CODE\"},{\"from\":6499690466,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690484,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690540,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690585,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690590,\"to\":6499690833,\"type\":\"CODE\"},{\"from\":6499690600,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499690613,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499690677,\"to\":6542436672,\"type\":\"CALL\"},{\"from\":6499690795,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690813,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690903,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690909,\"to\":6499690841,\"type\":\"CODE\"},{\"from\":6499690995,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691073,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691129,\"to\":6499698464,\"type\":\"CALL\"},{\"from\":6499691198,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6499691208,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691228,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691298,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691374,\"to\":6511423872,\"type\":\"CALL\"},{\"from\":6499691414,\"to\":6463429312,\"type\":\"CALL\"},{\"from\":6499691419,\"to\":6499690305,\"type\":\"CODE\"},{\"from\":6499691435,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6499691440,\"to\":6499691173,\"type\":\"CODE\"},{\"from\":6499691461,\"to\":6610248464,\"type\":\"CALL\"},{\"from\":6499691512,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691530,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691558,\"to\":6499690296,\"type\":\"CODE\"},{\"from\":6499691584,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691590,\"to\":6499690305,\"type\":\"CODE\"},{\"from\":6499691606,\"to\":6542089024,\"type\":\"CALL\"},{\"from\":6499691643,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691649,\"to\":6499690833,\"type\":\"CODE\"},{\"from\":6499691678,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691684,\"to\":6499690504,\"type\":\"CODE\"},{\"from\":6499691713,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691719,\"to\":6499691550,\"type\":\"CODE\"}],\"datarefs\":[{\"from\":6499690034,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6499690126,\"to\":6742178400,\"type\":\"DATA\"},{\"from\":6499690634,\"to\":6723513488,\"type\":\"DATA\"},{\"from\":6499690661,\"to\":6723513488,\"type\":\"DATA\"},{\"from\":6499690693,\"to\":6710332144,\"type\":\"DATA\"},{\"from\":6499690852,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6499690960,\"to\":6718095440,\"type\":\"DATA\"},{\"from\":6499690971,\"to\":6718095448,\"type\":\"DATA\"},{\"from\":6499691010,\"to\":6499696464,\"type\":\"DATA\"},{\"from\":6499691021,\"to\":6495420080,\"type\":\"DATA\"},{\"from\":6499691032,\"to\":6511490512,\"type\":\"DATA\"},{\"from\":6499691043,\"to\":6499693392,\"type\":\"DATA\"},{\"from\":6499691083,\"to\":6499696656,\"type\":\"DATA\"},{\"from\":6499691094,\"to\":6499696800,\"type\":\"DATA\"},{\"from\":6499691109,\"to\":6499704752,\"type\":\"DATA\"},{\"from\":6499691173,\"to\":6722694264,\"type\":\"DATA\"},{\"from\":6499691180,\"to\":6723513584,\"type\":\"DATA\"},{\"from\":6499691240,\"to\":6462662976,\"type\":\"DATA\"},{\"from\":6499691251,\"to\":6499697824,\"type\":\"DATA\"},{\"from\":6499691266,\"to\":6499696960,\"type\":\"DATA\"},{\"from\":6499691308,\"to\":6443185472,\"type\":\"DATA\"},{\"from\":6499691319,\"to\":6496379968,\"type\":\"DATA\"},{\"from\":6499691334,\"to\":6499697312,\"type\":\"DATA\"},{\"from\":6499691362,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6499691394,\"to\":6723513564,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6499690424,\"to\":6499690504,\"type\":\"CODE\"},{\"from\":6499690590,\"to\":6499690833,\"type\":\"CODE\"},{\"from\":6499690909,\"to\":6499690841,\"type\":\"CODE\"},{\"from\":6499691419,\"to\":6499690305,\"type\":\"CODE\"},{\"from\":6499691440,\"to\":6499691173,\"type\":\"CODE\"},{\"from\":6499691558,\"to\":6499690296,\"type\":\"CODE\"},{\"from\":6499691590,\"to\":6499690305,\"type\":\"CODE\"},{\"from\":6499691649,\"to\":6499690833,\"type\":\"CODE\"},{\"from\":6499691684,\"to\":6499690504,\"type\":\"CODE\"},{\"from\":6499691719,\"to\":6499691550,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":10,\"outdegree\":38,\"nlocals\":25,\"nargs\":3,\"stackvars\":[{\"name\":\"var_118h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-280}},{\"name\":\"var_f8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-248}},{\"name\":\"var_e8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-232}},{\"name\":\"var_e1h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-225}},{\"name\":\"var_e0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-224}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-208}},{\"name\":\"var_c9h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-201}},{\"name\":\"var_c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-200}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_b1h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-177}},{\"name\":\"var_b0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-176}},{\"name\":\"var_a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-168}},{\"name\":\"var_a0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-160}},{\"name\":\"var_98h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-152}},{\"name\":\"var_90h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-144}},{\"name\":\"var_88h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-136}},{\"name\":\"var_81h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-129}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_61h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-97}},{\"name\":\"var_60h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-96}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}},{\"name\":\"var_50h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-80}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}}],\"regvars\":[{\"name\":\"arg4\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r9\"}},{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":"    0x183696610    |\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_68h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_88h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_c9h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_e1h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_d0h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_e0h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_b1h\r\n    0x183696610    |// WARNING: [rz-ghidra] Detected overlap for variable var_60h\r\n                   |\r\n    0x183696610    |void fcn.183696610(int64_t arg1, int64_t arg2, undefined8 placeholder_2, int64_t arg4)\r\n                   |{\r\n                   |    int32_t iVar1;\r\n                   |    undefined8 uVar2;\r\n                   |    int32_t *piVar3;\r\n                   |    code *pcVar4;\r\n                   |    char cVar5;\r\n                   |    undefined8 uVar6;\r\n                   |    int64_t iVar7;\r\n                   |    uint64_t uVar8;\r\n                   |    int64_t iVar9;\r\n                   |    undefined4 *puVar10;\r\n                   |    undefined4 *puVar11;\r\n                   |    undefined8 *puVar12;\r\n                   |    int64_t *piVar13;\r\n                   |    undefined auStack_138 [32];\r\n                   |    int64_t var_118h;\r\n                   |    int64_t var_f8h;\r\n                   |    undefined8 uStack_f0;\r\n                   |    int64_t var_e8h;\r\n                   |    undefined8 var_e0h;\r\n                   |    int64_t var_d8h;\r\n                   |    uint64_t var_d0h;\r\n                   |    int64_t var_c8h;\r\n                   |    undefined8 uStack_c0;\r\n                   |    int64_t var_b8h;\r\n                   |    int64_t var_b0h;\r\n                   |    int64_t var_a8h;\r\n                   |    int64_t var_a0h;\r\n                   |    int64_t var_98h;\r\n                   |    int64_t var_90h;\r\n                   |    undefined var_88h [7];\r\n                   |    int64_t var_81h;\r\n                   |    int64_t var_78h;\r\n                   |    undefined8 uStack_70;\r\n                   |    undefined var_68h [7];\r\n                   |    int64_t var_61h;\r\n                   |    int64_t var_58h;\r\n                   |    int64_t var_50h;\r\n                   |    int64_t var_48h;\r\n                   |    \r\n    0x183696639    |    var_50h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_138;\r\n    0x183696647    |    cVar5 = func_0x000183696cd0(arg2);\r\n    0x18369664e    |    if (cVar5 == '\\0') {\r\n    0x18369665f    |        var_78h = 0;\r\n    0x18369665f    |        uStack_70 = 0;\r\n    0x183696664    |        _var_68h = 0;\r\n    0x183696670    |        _var_88h = 0;\r\n    0x183696674    |        var_98h = 0;\r\n    0x183696674    |        var_90h = 0;\r\n    0x18369667d    |        cVar5 = func_0x000183696de0(arg2, &var_78h, &var_98h);\r\n    0x183696684    |        if (cVar5 == '\\0') {\r\n    0x1836967ba    |            var_f8h = 0;\r\n    0x1836967c3    |            piVar3 = *(int32_t **)arg4;\r\n    0x1836967c9    |            if (piVar3 == (int32_t *)0x0) {\r\n    0x183696c63    |                pcVar4 = (code *)swi(3);\r\n    0x183696c63    |                (*pcVar4)();\r\n    0x183696c63    |                return;\r\n                   |            }\r\n    0x1836967cf    |            *(undefined8 *)arg4 = 0;\r\n    0x1836967e2    |            (*(code *)0x185f59da0)(piVar3, &var_f8h);\r\n    0x1836967e8    |            LOCK();\r\n    0x1836967e8    |            *piVar3 = *piVar3 + -1;\r\n    0x1836967e8    |            UNLOCK();\r\n    0x1836967eb    |            if (*piVar3 == 0) {\r\n    0x1836967f4    |                (*(code *)0x185f59da0)(piVar3);\r\n                   |            }\r\n    0x183696802    |            if (var_f8h != 0) {\r\n    0x183696c89    |                LOCK();\r\n    0x183696c89    |                piVar3 = (int32_t *)(var_f8h + 8);\r\n    0x183696c89    |                *piVar3 = *piVar3 + -1;\r\n    0x183696c89    |                UNLOCK();\r\n    0x183696c8d    |                if (*piVar3 == 0) {\r\n    0x183696c9e    |                    (*(code *)0x185f59da0)(var_f8h, 1);\r\n                   |                }\r\n                   |            }\r\n                   |        } else {\r\n    0x18369668a    |            uVar2 = *(undefined8 *)(arg1 + 8);\r\n    0x183696695    |            uVar6 = func_0x0001824c9f20(0x191dd7a60);\r\n    0x1836966a3    |            iVar7 = func_0x000184300b20(uVar6, uVar2, 1);\r\n    0x1836966a8    |            var_a8h = 0;\r\n    0x1836966a8    |            var_a0h = 0;\r\n    0x1836966b0    |            var_b8h = 0;\r\n    0x1836966b0    |            var_b0h = 0;\r\n    0x1836966b8    |            var_c8h = 0;\r\n    0x1836966b8    |            uStack_c0 = 0;\r\n    0x1836966bd    |            var_d8h = 0;\r\n    0x1836966bd    |            var_d0h = 0;\r\n    0x1836966c2    |            var_e8h = 0;\r\n    0x1836966c2    |            var_e0h = 0;\r\n    0x1836966c7    |            var_f8h = 0;\r\n    0x1836966c7    |            uStack_f0 = 0;\r\n    0x1836966cf    |            if (iVar7 == 0) {\r\n                   |code_r0x0001836966f3:\r\n    0x1836966f3    |                var_118h = 0;\r\n    0x1836966fc    |                piVar3 = *(int32_t **)arg4;\r\n    0x183696702    |                if (piVar3 == (int32_t *)0x0) {\r\n    0x183696c86    |                    pcVar4 = (code *)swi(3);\r\n    0x183696c86    |                    (*pcVar4)();\r\n    0x183696c86    |                    return;\r\n                   |                }\r\n    0x183696708    |                *(undefined8 *)arg4 = 0;\r\n    0x18369671b    |                (*(code *)0x185f59da0)(piVar3, &var_118h);\r\n    0x183696721    |                LOCK();\r\n    0x183696721    |                *piVar3 = *piVar3 + -1;\r\n    0x183696721    |                UNLOCK();\r\n    0x183696724    |                iVar7 = var_118h;\r\n    0x183696724    |                if (*piVar3 == 0) {\r\n    0x18369672d    |                    (*(code *)0x185f59da0)(piVar3);\r\n    0x18369672d    |                    iVar7 = var_118h;\r\n                   |                }\r\n                   |code_r0x000183696738:\r\n    0x18369673b    |                if (iVar7 != 0) {\r\n    0x183696c2b    |                    LOCK();\r\n    0x183696c2b    |                    piVar3 = (int32_t *)(iVar7 + 8);\r\n    0x183696c2b    |                    *piVar3 = *piVar3 + -1;\r\n    0x183696c2b    |                    UNLOCK();\r\n    0x183696c2f    |                    if (*piVar3 == 0) {\r\n    0x183696c40    |                        (*(code *)0x185f59da0)(iVar7, 1);\r\n                   |                    }\r\n                   |                }\r\n                   |            } else {\r\n    0x1836966e4    |                func_0x00018369b100(iVar7, &var_f8h, &var_78h);\r\n    0x1836966e4    |                uVar8 = _var_88h;\r\n    0x1836966e4    |                iVar7 = var_90h;\r\n    0x1836966ed    |                if ((char)var_a0h == '\\0') goto code_r0x0001836966f3;\r\n    0x1836969b6    |                iVar9 = (int64_t)(char)var_81h;\r\n    0x1836969b6    |                if ((int64_t)(char)var_81h < 0) {\r\n    0x1836969b6    |                    iVar9 = var_90h;\r\n                   |                }\r\n    0x1836969be    |                if (iVar9 == 10) {\r\n    0x1836969c3    |                    piVar13 = &var_98h;\r\n    0x1836969c3    |                    if ((int64_t)_var_88h < 0) {\r\n    0x1836969c5    |                        piVar13 = (int64_t *)var_98h;\r\n                   |                    }\r\n    0x1836969e8    |                    if ((int16_t)piVar13[1] != 0x6c6d || *piVar13 != 0x74682e7865646e69) goto code_r0x0001836969ee;\r\n    0x183696bba    |                    func_0x00018a006310(&var_58h, &var_e0h);\r\n    0x183696bc5    |                    var_118h = var_58h;\r\n    0x183696bcd    |                    var_58h = 0;\r\n    0x183696bd9    |                    piVar3 = *(int32_t **)arg4;\r\n    0x183696bdf    |                    if (piVar3 == (int32_t *)0x0) {\r\n    0x183696ca9    |                        pcVar4 = (code *)swi(3);\r\n    0x183696ca9    |                        (*pcVar4)();\r\n    0x183696ca9    |                        return;\r\n                   |                    }\r\n    0x183696be5    |                    *(undefined8 *)arg4 = 0;\r\n    0x183696bf8    |                    (*(code *)0x185f59da0)(piVar3, &var_118h);\r\n    0x183696bfe    |                    LOCK();\r\n    0x183696bfe    |                    *piVar3 = *piVar3 + -1;\r\n    0x183696bfe    |                    UNLOCK();\r\n    0x183696c01    |                    if (*piVar3 == 0) {\r\n    0x183696c0a    |                        (*(code *)0x185f59da0)(piVar3);\r\n                   |                    }\r\n    0x183696c18    |                    iVar7 = var_58h;\r\n    0x183696c18    |                    if (var_118h != 0) {\r\n    0x183696cac    |                        LOCK();\r\n    0x183696cac    |                        piVar3 = (int32_t *)(var_118h + 8);\r\n    0x183696cac    |                        *piVar3 = *piVar3 + -1;\r\n    0x183696cac    |                        UNLOCK();\r\n    0x183696cb0    |                        if (*piVar3 == 0) {\r\n    0x183696cc1    |                            (*(code *)0x185f59da0)(var_118h, 1);\r\n    0x183696cc7    |                            iVar7 = var_58h;\r\n                   |                        }\r\n                   |                    }\r\n                   |                    goto code_r0x000183696738;\r\n                   |                }\r\n                   |code_r0x0001836969ee:\r\n    0x1836969f3    |                puVar10 = (undefined4 *)func_0x000185f006b8(0x30);\r\n    0x183696a00    |                *puVar10 = 1;\r\n    0x183696a09    |                *(undefined8 *)(puVar10 + 2) = 0x183697f50;\r\n    0x183696a14    |                *(undefined8 *)(puVar10 + 4) = 0x183283eb0;\r\n    0x183696a1f    |                *(undefined8 *)(puVar10 + 6) = 0x1841d75d0;\r\n    0x183696a2a    |                *(undefined8 *)(puVar10 + 8) = 0x183697350;\r\n    0x183696a31    |                *(undefined8 *)(puVar10 + 10) = *(undefined8 *)arg4;\r\n    0x183696a35    |                *(undefined8 *)arg4 = 0;\r\n    0x183696a41    |                puVar11 = (undefined4 *)func_0x000185f006b8(0x98);\r\n    0x183696a49    |                *puVar11 = 1;\r\n    0x183696a52    |                *(undefined8 *)(puVar11 + 2) = 0x183698010;\r\n    0x183696a5d    |                *(undefined8 *)(puVar11 + 4) = 0x1836980a0;\r\n    0x183696a61    |                *(undefined8 *)(puVar11 + 6) = 0x1841d75d0;\r\n    0x183696a6c    |                *(undefined8 *)(puVar11 + 8) = 0x183699fb0;\r\n    0x183696a70    |                func_0x000183698720(puVar11 + 10, &var_f8h);\r\n    0x183696a88    |                if ((int64_t)uVar8 < 0) {\r\n    0x183696a7e    |                    func_0x0001841dd0f0(puVar11 + 0x20, var_98h, iVar7);\r\n                   |                } else {\r\n    0x183696a96    |                    *(uint64_t *)(puVar11 + 0x24) = _var_88h;\r\n    0x183696aa2    |                    puVar11[0x20] = (undefined4)var_98h;\r\n    0x183696aa2    |                    puVar11[0x21] = var_98h._4_4_;\r\n    0x183696aa2    |                    puVar11[0x22] = (undefined4)var_90h;\r\n    0x183696aa2    |                    puVar11[0x23] = var_90h._4_4_;\r\n                   |                }\r\n    0x183696ab3    |                func_0x000184339cd0(&var_118h, 0x190b42c78, 0x190c0acf0, 0x5e);\r\n    0x183696ac8    |                puVar12 = (undefined8 *)func_0x000185f006b8(8);\r\n    0x183696ad0    |                *puVar12 = 0;\r\n    0x183696adc    |                var_58h = func_0x000185f006b8(0x38);\r\n    0x183696ae6    |                *(undefined4 *)var_58h = 1;\r\n    0x183696aef    |                *(undefined8 *)(var_58h + 8) = 0x181346940;\r\n    0x183696afa    |                *(undefined8 *)(var_58h + 0x10) = 0x1836984a0;\r\n    0x183696afe    |                *(undefined8 *)(var_58h + 0x18) = 0x1841d75d0;\r\n    0x183696b09    |                *(undefined8 *)(var_58h + 0x20) = 0x183698140;\r\n    0x183696b0d    |                *(undefined4 **)(var_58h + 0x28) = puVar10;\r\n    0x183696b11    |                *(undefined8 **)(var_58h + 0x30) = puVar12;\r\n    0x183696b22    |                *(undefined4 **)0x0 = (undefined4 *)func_0x000185f006b8(0x38);\r\n    0x183696b2a    |                **(undefined4 **)0x0 = 1;\r\n    0x183696b33    |                *(undefined8 *)(*(undefined4 **)0x0 + 2) = 0x1800b3540;\r\n    0x183696b3e    |                *(undefined8 *)(*(undefined4 **)0x0 + 4) = 0x18336e440;\r\n    0x183696b42    |                *(undefined8 *)(*(undefined4 **)0x0 + 6) = 0x1841d75d0;\r\n    0x183696b4d    |                *(undefined8 *)(*(undefined4 **)0x0 + 8) = 0x1836982a0;\r\n    0x183696b51    |                *(undefined4 **)(*(undefined4 **)0x0 + 10) = puVar11;\r\n    0x183696b69    |                if (((uint64_t)puVar12 & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n    0x183696b6e    |                    func_0x0001841c7180(puVar12);\r\n                   |                }\r\n    0x183696b73    |                *(undefined8 **)(*(undefined4 **)0x0 + 0xc) = puVar12;\r\n    0x183696b89    |                func_0x000181401ac0(&var_118h, 0x190c0acdc, (int64_t)&var_61h + 1, &var_58h);\r\n                   |            }\r\n    0x183696749    |            if ((char)var_a0h == '\\x01') {\r\n    0x183696761    |                if (((char)var_b0h == '\\x01') && (var_b8h < 0)) {\r\n    0x183696773    |                    func_0x0001841dcbe0(var_c8h, var_b8h * 2);\r\n                   |                }\r\n    0x18369677d    |                if ((int64_t)var_d0h < 0) {\r\n    0x183696793    |                    func_0x0001841dcbe0(var_e0h, var_d0h & 0x7fffffffffffffff);\r\n                   |                }\r\n    0x18369679d    |                if (var_e8h < 0) {\r\n    0x1836967b3    |                    func_0x0001841dcbe0(var_f8h, var_e8h & 0x7fffffffffffffff);\r\n                   |                }\r\n                   |            }\r\n                   |        }\r\n    0x183696810    |        if ((int64_t)_var_88h < 0) {\r\n    0x18369682c    |            func_0x0001841dcbe0(var_98h, _var_88h & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x183696839    |        if ((int64_t)_var_68h < 0) {\r\n    0x183696859    |            func_0x0001841dcbe0(var_78h, _var_68h & 0x7fffffffffffffff);\r\n                   |        }\r\n                   |    } else {\r\n    0x183696868    |        puVar12 = (undefined8 *)func_0x000185f006b8(0x28);\r\n    0x183696875    |        uVar8 = func_0x000185f006b8(0x50);\r\n    0x18369689f    |        if ((uVar8 + 0x48 < uVar8) || (0x190c0ac90 < uVar8 + 0x48 && uVar8 < 0x190c0ac91)) goto code_r0x000183696c5b;\r\n    0x1836968b5    |        func_0x000185f5a940(uVar8, 0x190c0ac90, 0x48);\r\n    0x1836968ba    |        *(undefined *)(uVar8 + 0x48) = 0;\r\n    0x1836968be    |        *(undefined4 *)(puVar12 + 1) = 0;\r\n    0x1836968cc    |        *puVar12 = 0x18ff78af0;\r\n    0x1836968cf    |        puVar12[2] = uVar8;\r\n    0x1836968d3    |        puVar12[3] = 0x48;\r\n    0x1836968e9    |        puVar12[4] = 0x8000000000000050;\r\n    0x1836968f0    |        if (puVar12 != (undefined8 *)0x0) {\r\n    0x1836968f7    |            LOCK();\r\n    0x1836968f7    |            piVar3 = (int32_t *)(puVar12 + 1);\r\n    0x1836968f7    |            iVar1 = *piVar3;\r\n    0x1836968f7    |            *piVar3 = *piVar3 + 1;\r\n    0x1836968f7    |            UNLOCK();\r\n    0x183696901    |            if (iVar1 == 0x7fffffff) {\r\n    0x183696c60    |                pcVar4 = (code *)swi(3);\r\n    0x183696c60    |                (*pcVar4)();\r\n    0x183696c60    |                return;\r\n                   |            }\r\n                   |        }\r\n    0x18369690c    |        piVar3 = *(int32_t **)arg4;\r\n    0x183696912    |        var_f8h = (int64_t)puVar12;\r\n    0x183696912    |        if (piVar3 == (int32_t *)0x0) {\r\n    0x183696c5d    |            pcVar4 = (code *)swi(3);\r\n    0x183696c5d    |            (*pcVar4)();\r\n    0x183696c5d    |            return;\r\n                   |        }\r\n    0x183696918    |        *(undefined8 *)arg4 = 0;\r\n    0x18369692b    |        (*(code *)0x185f59da0)(piVar3, &var_f8h);\r\n    0x183696931    |        LOCK();\r\n    0x183696931    |        *piVar3 = *piVar3 + -1;\r\n    0x183696931    |        UNLOCK();\r\n    0x183696934    |        if (*piVar3 == 0) {\r\n    0x18369693d    |            (*(code *)0x185f59da0)(piVar3);\r\n                   |        }\r\n    0x18369694b    |        if (var_f8h != 0) {\r\n    0x183696c66    |            LOCK();\r\n    0x183696c66    |            piVar3 = (int32_t *)(var_f8h + 8);\r\n    0x183696c66    |            *piVar3 = *piVar3 + -1;\r\n    0x183696c66    |            UNLOCK();\r\n    0x183696c6a    |            if (*piVar3 == 0) {\r\n    0x183696c7b    |                (*(code *)0x185f59da0)(var_f8h, 1);\r\n                   |            }\r\n                   |        }\r\n                   |    }\r\n    0x183696951    |    piVar3 = *(int32_t **)arg4;\r\n    0x183696957    |    if (piVar3 != (int32_t *)0x0) {\r\n    0x18369698e    |        LOCK();\r\n    0x18369698e    |        *piVar3 = *piVar3 + -1;\r\n    0x18369698e    |        UNLOCK();\r\n    0x183696991    |        if (*piVar3 == 0) {\r\n    0x183696997    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x18369696e    |    if (*(uint64_t *)0x191c71040 == (var_50h ^ (uint64_t)auStack_138)) {\r\n    0x18369698d    |        return;\r\n                   |    }\r\n    0x183696c53    |    func_0x000185f05b40(var_50h ^ (uint64_t)auStack_138);\r\n                   |code_r0x000183696c5b:\r\n    0x183696c5b    |    // WARNING: Does not return\r\n    0x183696c5b    |    pcVar4 = (code *)invalidInstructionException();\r\n    0x183696c5b    |    (*pcVar4)();\r\n                   |}\r\n[{\"offset\":6499690000,\"name\":\"fcn.183696610\",\"size\":1724,\"is-pure\":false,\"realsz\":1714,\"noreturn\":false,\"stackframe\":312,\"calltype\":\"ms\",\"cost\":508,\"cc\":46,\"loops\":13,\"bits\":64,\"type\":\"fcn\",\"nbbs\":68,\"edges\":100,\"ebbs\":7,\"signature\":\"fcn.183696610(int64_t arg1, int64_t arg2, int64_t arg4);\",\"minbound\":6499690000,\"maxbound\":6499691724,\"callrefs\":[{\"from\":6499690055,\"to\":6499691728,\"type\":\"CALL\"},{\"from\":6499690109,\"to\":6499692000,\"type\":\"CALL\"},{\"from\":6499690133,\"to\":6481026848,\"type\":\"CALL\"},{\"from\":6499690147,\"to\":6512708384,\"type\":\"CALL\"},{\"from\":6499690212,\"to\":6499709184,\"type\":\"CALL\"},{\"from\":6499690267,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690285,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690355,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690387,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690419,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690424,\"to\":6499690504,\"type\":\"CODE\"},{\"from\":6499690466,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690484,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690540,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690585,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6499690590,\"to\":6499690833,\"type\":\"CODE\"},{\"from\":6499690600,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499690613,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499690677,\"to\":6542436672,\"type\":\"CALL\"},{\"from\":6499690795,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690813,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690903,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499690909,\"to\":6499690841,\"type\":\"CODE\"},{\"from\":6499690995,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691073,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691129,\"to\":6499698464,\"type\":\"CALL\"},{\"from\":6499691198,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6499691208,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691228,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691298,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6499691374,\"to\":6511423872,\"type\":\"CALL\"},{\"from\":6499691414,\"to\":6463429312,\"type\":\"CALL\"},{\"from\":6499691419,\"to\":6499690305,\"type\":\"CODE\"},{\"from\":6499691435,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6499691440,\"to\":6499691173,\"type\":\"CODE\"},{\"from\":6499691461,\"to\":6610248464,\"type\":\"CALL\"},{\"from\":6499691512,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691530,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691558,\"to\":6499690296,\"type\":\"CODE\"},{\"from\":6499691584,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691590,\"to\":6499690305,\"type\":\"CODE\"},{\"from\":6499691606,\"to\":6542089024,\"type\":\"CALL\"},{\"from\":6499691643,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691649,\"to\":6499690833,\"type\":\"CODE\"},{\"from\":6499691678,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691684,\"to\":6499690504,\"type\":\"CODE\"},{\"from\":6499691713,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6499691719,\"to\":6499691550,\"type\":\"CODE\"}],\"datarefs\":[{\"from\":6499690034,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6499690126,\"to\":6742178400,\"type\":\"DATA\"},{\"from\":6499690634,\"to\":6723513488,\"type\":\"DATA\"},{\"from\":6499690661,\"to\":6723513488,\"type\":\"DATA\"},{\"from\":6499690693,\"to\":6710332144,\"type\":\"DATA\"},{\"from\":6499690852,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6499690960,\"to\":6718095440,\"type\":\"DATA\"},{\"from\":6499690971,\"to\":6718095448,\"type\":\"DATA\"},{\"from\":6499691010,\"to\":6499696464,\"type\":\"DATA\"},{\"from\":6499691021,\"to\":6495420080,\"type\":\"DATA\"},{\"from\":6499691032,\"to\":6511490512,\"type\":\"DATA\"},{\"from\":6499691043,\"to\":6499693392,\"type\":\"DATA\"},{\"from\":6499691083,\"to\":6499696656,\"type\":\"DATA\"},{\"from\":6499691094,\"to\":6499696800,\"type\":\"DATA\"},{\"from\":6499691109,\"to\":6499704752,\"type\":\"DATA\"},{\"from\":6499691173,\"to\":6722694264,\"type\":\"DATA\"},{\"from\":6499691180,\"to\":6723513584,\"type\":\"DATA\"},{\"from\":6499691240,\"to\":6462662976,\"type\":\"DATA\"},{\"from\":6499691251,\"to\":6499697824,\"type\":\"DATA\"},{\"from\":6499691266,\"to\":6499696960,\"type\":\"DATA\"},{\"from\":6499691308,\"to\":6443185472,\"type\":\"DATA\"},{\"from\":6499691319,\"to\":6496379968,\"type\":\"DATA\"},{\"from\":6499691334,\"to\":6499697312,\"type\":\"DATA\"},{\"from\":6499691362,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6499691394,\"to\":6723513564,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6499690424,\"to\":6499690504,\"type\":\"CODE\"},{\"from\":6499690590,\"to\":6499690833,\"type\":\"CODE\"},{\"from\":6499690909,\"to\":6499690841,\"type\":\"CODE\"},{\"from\":6499691419,\"to\":6499690305,\"type\":\"CODE\"},{\"from\":6499691440,\"to\":6499691173,\"type\":\"CODE\"},{\"from\":6499691558,\"to\":6499690296,\"type\":\"CODE\"},{\"from\":6499691590,\"to\":6499690305,\"type\":\"CODE\"},{\"from\":6499691649,\"to\":6499690833,\"type\":\"CODE\"},{\"from\":6499691684,\"to\":6499690504,\"type\":\"CODE\"},{\"from\":6499691719,\"to\":6499691550,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":10,\"outdegree\":38,\"nlocals\":25,\"nargs\":3,\"stackvars\":[{\"name\":\"var_118h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-280}},{\"name\":\"var_f8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-248}},{\"name\":\"var_e8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-232}},{\"name\":\"var_e1h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-225}},{\"name\":\"var_e0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-224}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-208}},{\"name\":\"var_c9h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-201}},{\"name\":\"var_c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-200}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_b1h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-177}},{\"name\":\"var_b0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-176}},{\"name\":\"var_a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-168}},{\"name\":\"var_a0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-160}},{\"name\":\"var_98h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-152}},{\"name\":\"var_90h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-144}},{\"name\":\"var_88h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-136}},{\"name\":\"var_81h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-129}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_61h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-97}},{\"name\":\"var_60h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-96}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}},{\"name\":\"var_50h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-80}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}}],\"regvars\":[{\"name\":\"arg4\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r9\"}},{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"5324ms"}}