{"ok":true,"data":{"evidence_id":"ev_aa01512ad4d607dca1dfe718f1c1ef3e7c58d8244f32dcb2cef86987bc8f7f17","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x1834b6b60;pdgo @ 0x1834b6b60;afij @ 0x1834b6b60","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x1834b6b60;pdgo @ 0x1834b6b60;afij @ 0x1834b6b60","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":"                   |\r\n    0x1834b6b60    |void fcn.1834b6b60(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4)\r\n                   |{\r\n                   |    undefined8 *puVar1;\r\n                   |    int32_t iVar2;\r\n                   |    uint8_t uVar3;\r\n                   |    int32_t *piVar4;\r\n                   |    int32_t *piVar5;\r\n                   |    code *pcVar6;\r\n                   |    undefined4 uVar7;\r\n                   |    undefined4 uVar8;\r\n                   |    undefined4 uVar9;\r\n                   |    int64_t iVar10;\r\n                   |    undefined4 *puVar11;\r\n                   |    undefined8 uVar12;\r\n                   |    uint64_t uVar13;\r\n                   |    undefined auStack_e8 [32];\r\n                   |    int64_t var_c8h;\r\n                   |    int64_t var_c0h;\r\n                   |    int64_t var_b8h;\r\n                   |    int64_t var_b0h;\r\n                   |    int64_t var_a8h;\r\n                   |    unkbyte3 Stack_a0;\r\n                   |    undefined4 uStack_98;\r\n                   |    undefined4 uStack_94;\r\n                   |    undefined4 uStack_90;\r\n                   |    undefined4 uStack_8c;\r\n                   |    undefined4 uStack_88;\r\n                   |    undefined4 uStack_84;\r\n                   |    undefined4 uStack_80;\r\n                   |    undefined4 uStack_7c;\r\n                   |    undefined4 uStack_78;\r\n                   |    undefined4 uStack_74;\r\n                   |    undefined4 uStack_70;\r\n                   |    undefined4 uStack_6c;\r\n                   |    undefined4 uStack_68;\r\n                   |    undefined4 uStack_64;\r\n                   |    undefined4 uStack_60;\r\n                   |    undefined4 uStack_5c;\r\n                   |    undefined2 uStack_58;\r\n                   |    undefined8 uStack_50;\r\n                   |    undefined8 uStack_48;\r\n                   |    int64_t var_40h;\r\n                   |    \r\n    0x1834b6b84    |    var_40h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_e8;\r\n    0x1834b6b8f    |    iVar10 = *(int64_t *)(arg1 + 8);\r\n    0x1834b6b93    |    *(undefined8 *)(arg1 + 8) = 0;\r\n    0x1834b6b9e    |    if (iVar10 != 0) {\r\n    0x1834b6ba5    |        func_0x000181516210(iVar10, 1);\r\n                   |    }\r\n    0x1834b6baa    |    puVar1 = (undefined8 *)(arg1 + 0x10);\r\n    0x1834b6bb1    |    if (puVar1 != (undefined8 *)arg2) {\r\n    0x1834b6bb8    |        uVar3 = *(uint8_t *)(arg2 + 0x17);\r\n    0x1834b6bb8    |        uVar13 = (uint64_t)uVar3;\r\n    0x1834b6bbd    |        if (*(char *)(arg1 + 0x27) < '\\0') {\r\n    0x1834b6fbf    |            if ((char)uVar3 < '\\0') {\r\n    0x1834b6fc1    |                uVar13 = *(uint64_t *)(arg2 + 8);\r\n    0x1834b6fc5    |                arg2 = *(int64_t *)arg2;\r\n                   |            }\r\n    0x1834b6fcb    |            func_0x000184211e70(puVar1, arg2, uVar13);\r\n    0x1834b6bc6    |        } else if ((char)uVar3 < '\\0') {\r\n    0x1834b6d91    |            func_0x000184211d10(puVar1, *(undefined8 *)arg2, *(undefined8 *)(arg2 + 8));\r\n                   |        } else {\r\n    0x1834b6bd0    |            *(undefined8 *)(arg1 + 0x20) = *(undefined8 *)(arg2 + 0x10);\r\n    0x1834b6bd4    |            uVar12 = *(undefined8 *)(arg2 + 8);\r\n    0x1834b6bd7    |            *puVar1 = *(undefined8 *)arg2;\r\n    0x1834b6bd7    |            *(undefined8 *)(arg1 + 0x18) = uVar12;\r\n                   |        }\r\n                   |    }\r\n    0x1834b6be4    |    puVar1 = (undefined8 *)(arg1 + 0x28);\r\n    0x1834b6bed    |    if (*(char *)(arg1 + 0x3f) < '\\0') {\r\n    0x1834b6e6b    |        func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x28), *(uint64_t *)(arg1 + 0x38) & 0x7fffffffffffffff);\r\n    0x1834b6e77    |        *puVar1 = 0;\r\n    0x1834b6e77    |        *(undefined8 *)(arg1 + 0x30) = 0;\r\n    0x1834b6e7c    |        *(undefined8 *)(arg1 + 0x38) = 0;\r\n                   |    }\r\n    0x1834b6bf7    |    *(undefined8 *)(arg1 + 0x38) = *(undefined8 *)(arg3 + 0x10);\r\n    0x1834b6bfc    |    uVar7 = *(undefined4 *)(arg3 + 4);\r\n    0x1834b6bfc    |    uVar8 = *(undefined4 *)(arg3 + 8);\r\n    0x1834b6bfc    |    uVar9 = *(undefined4 *)(arg3 + 0xc);\r\n    0x1834b6bff    |    *(undefined4 *)puVar1 = *(undefined4 *)arg3;\r\n    0x1834b6bff    |    *(undefined4 *)(arg1 + 0x2c) = uVar7;\r\n    0x1834b6bff    |    *(undefined4 *)(arg1 + 0x30) = uVar8;\r\n    0x1834b6bff    |    *(undefined4 *)(arg1 + 0x34) = uVar9;\r\n    0x1834b6c06    |    *(undefined *)(arg3 + 0x17) = 0;\r\n    0x1834b6c09    |    *(undefined *)arg3 = 0;\r\n    0x1834b6c0b    |    uVar12 = *(undefined8 *)arg4;\r\n    0x1834b6c0e    |    *(undefined8 *)arg4 = 0;\r\n    0x1834b6c15    |    piVar4 = *(int32_t **)(arg1 + 0x40);\r\n    0x1834b6c19    |    *(undefined8 *)(arg1 + 0x40) = uVar12;\r\n    0x1834b6c20    |    if (piVar4 != (int32_t *)0x0) {\r\n    0x1834b6e3c    |        LOCK();\r\n    0x1834b6e3c    |        *piVar4 = *piVar4 + -1;\r\n    0x1834b6e3c    |        UNLOCK();\r\n    0x1834b6e40    |        if (*piVar4 == 0) {\r\n    0x1834b6e54    |            if (*(int64_t *)(piVar4 + 4) == 0x182bf38a0) {\r\n    0x1834b6e8a    |                piVar5 = *(int32_t **)(piVar4 + 0xc);\r\n    0x1834b6e91    |                if (piVar5 != (int32_t *)0x0) {\r\n    0x1834b6fd5    |                    LOCK();\r\n    0x1834b6fd5    |                    *piVar5 = *piVar5 + -1;\r\n    0x1834b6fd5    |                    UNLOCK();\r\n    0x1834b6fd8    |                    if (*piVar5 == 0) {\r\n    0x1834b6fe3    |                        func_0x0001841dcbe0(piVar5, 8);\r\n                   |                    }\r\n                   |                }\r\n    0x1834b6e9f    |                func_0x0001841dcbe0(piVar4, 0x48);\r\n                   |            } else {\r\n    0x1834b6e59    |                (*(code *)0x185f59da0)(piVar4);\r\n                   |            }\r\n                   |        }\r\n                   |    }\r\n    0x1834b6c2b    |    if (*(char *)(arg1 + 0x5f) < '\\0') {\r\n    0x1834b6d7a    |        **(undefined **)(arg1 + 0x48) = 0;\r\n    0x1834b6d7d    |        *(undefined8 *)(arg1 + 0x50) = 0;\r\n                   |    } else {\r\n    0x1834b6c33    |        *(undefined *)(arg1 + 0x48) = 0;\r\n    0x1834b6c37    |        *(undefined *)(arg1 + 0x5f) = 0;\r\n                   |    }\r\n    0x1834b6c43    |    var_a8h._0_3_ = 0;\r\n    0x1834b6c43    |    var_a8h._3_5_ = 0;\r\n    0x1834b6c43    |    Stack_a0 = 0;\r\n    0x1834b6c48    |    var_b8h = 0;\r\n    0x1834b6c48    |    var_b0h._0_3_ = 0;\r\n    0x1834b6c48    |    var_b0h._3_5_ = 0;\r\n    0x1834b6c53    |    uStack_98 = 0;\r\n    0x1834b6c53    |    uStack_94 = 0xffffffff;\r\n    0x1834b6c53    |    uStack_90 = 0;\r\n    0x1834b6c53    |    uStack_8c = 0xffffffff;\r\n    0x1834b6c58    |    uStack_88 = 0;\r\n    0x1834b6c58    |    uStack_84 = 0xffffffff;\r\n    0x1834b6c58    |    uStack_80 = 0;\r\n    0x1834b6c58    |    uStack_7c = 0xffffffff;\r\n    0x1834b6c5d    |    uStack_78 = 0;\r\n    0x1834b6c5d    |    uStack_74 = 0xffffffff;\r\n    0x1834b6c5d    |    uStack_70 = 0;\r\n    0x1834b6c5d    |    uStack_6c = 0xffffffff;\r\n    0x1834b6c62    |    uStack_68 = 0;\r\n    0x1834b6c62    |    uStack_64 = 0xffffffff;\r\n    0x1834b6c62    |    uStack_60 = 0;\r\n    0x1834b6c62    |    uStack_5c = 0xffffffff;\r\n    0x1834b6c67    |    uStack_58 = 0;\r\n    0x1834b6c6e    |    uStack_50 = 0;\r\n    0x1834b6c6e    |    uStack_48 = 0;\r\n    0x1834b6c73    |    func_0x0001844c91b0(arg1 + 0x60, &var_b8h);\r\n    0x1834b6c3e    |    func_0x0001841c04a0(&var_b8h);\r\n    0x1834b6c8b    |    if (*(int64_t *)arg1 == 0) {\r\n    0x1834b6db1    |        puVar11 = (undefined4 *)func_0x000185f006b8(0x30);\r\n    0x1834b6dbe    |        var_b0h._0_3_ = 0x2f;\r\n    0x1834b6dbe    |        var_b0h._3_5_ = 0;\r\n    0x1834b6dcb    |        var_a8h._0_3_ = 0x30;\r\n    0x1834b6dcb    |        var_a8h._3_5_ = 0x8000000000;\r\n    0x1834b6dd7    |        var_b8h = (int64_t)puVar11;\r\n    0x1834b6df2    |        if (((undefined4 *)((int64_t)puVar11 + 0x2f) < puVar11) ||\r\n    0x1834b6ded    |           ((undefined4 *)0x190b22b40 < (undefined4 *)((int64_t)puVar11 + 0x2f) && puVar11 < (undefined4 *)0x190b22b41))\r\n    0x1834b6df2    |        goto code_r0x0001834b6ffd;\r\n    0x1834b6dff    |        *(undefined8 *)((int64_t)puVar11 + 0x1f) = 0x656361727420726f;\r\n    0x1834b6dff    |        *(undefined8 *)((int64_t)puVar11 + 0x27) = 0x2e64616f6c707520;\r\n    0x1834b6e0b    |        *(undefined8 *)(puVar11 + 4) = 0x696176616e752073;\r\n    0x1834b6e0b    |        *(undefined8 *)(puVar11 + 6) = 0x6f6620656c62616c;\r\n    0x1834b6e17    |        *puVar11 = 0x7774654e;\r\n    0x1834b6e17    |        puVar11[1] = 0x206b726f;\r\n    0x1834b6e17    |        puVar11[2] = 0x64616f6c;\r\n    0x1834b6e17    |        puVar11[3] = 0x69207265;\r\n    0x1834b6e1b    |        *(undefined *)((int64_t)puVar11 + 0x2f) = 0;\r\n    0x1834b6e2d    |        func_0x0001834b7010(arg1, 1, &var_b8h);\r\n    0x1834b6e32    |        uVar12 = 0x30;\r\n                   |code_r0x0001834b6d24:\r\n    0x1834b6d27    |        func_0x0001841dcbe0(puVar11, uVar12);\r\n                   |    } else {\r\n    0x1834b6c91    |        iVar10 = (int64_t)*(char *)(arg1 + 0x3f);\r\n    0x1834b6c99    |        if (iVar10 < 0) {\r\n    0x1834b6c9b    |            iVar10 = *(int64_t *)(arg1 + 0x30);\r\n                   |        }\r\n    0x1834b6ca2    |        if (iVar10 == 0) {\r\n    0x1834b6cad    |            puVar11 = (undefined4 *)func_0x000185f006b8(0x20);\r\n    0x1834b6cba    |            var_b0h._0_3_ = 0x1b;\r\n    0x1834b6cba    |            var_b0h._3_5_ = 0;\r\n    0x1834b6cc7    |            var_a8h._0_3_ = 0x20;\r\n    0x1834b6cc7    |            var_a8h._3_5_ = 0x8000000000;\r\n    0x1834b6cd3    |            var_b8h = (int64_t)puVar11;\r\n    0x1834b6cee    |            if (((undefined4 *)((int64_t)puVar11 + 0x1b) < puVar11) ||\r\n    0x1834b6ce9    |               ((undefined4 *)0x190b22b70 < (undefined4 *)((int64_t)puVar11 + 0x1b) &&\r\n    0x1834b6ce3    |                puVar11 < (undefined4 *)0x190b22b71)) goto code_r0x0001834b6ffd;\r\n    0x1834b6cfb    |            *(undefined8 *)((int64_t)puVar11 + 0xb) = 0x692064616f6c7961;\r\n    0x1834b6cfb    |            *(undefined8 *)((int64_t)puVar11 + 0x13) = 0x2e7974706d652073;\r\n    0x1834b6d07    |            *puVar11 = 0x20656854;\r\n    0x1834b6d07    |            puVar11[1] = 0x63617274;\r\n    0x1834b6d07    |            puVar11[2] = 0x61702065;\r\n    0x1834b6d07    |            puVar11[3] = 0x616f6c79;\r\n    0x1834b6d0b    |            *(undefined *)((int64_t)puVar11 + 0x1b) = 0;\r\n    0x1834b6d1a    |            func_0x0001834b7010(arg1, 0, &var_b8h);\r\n    0x1834b6d1f    |            uVar12 = 0x20;\r\n    0x1834b6d1f    |            goto code_r0x0001834b6d24;\r\n                   |        }\r\n    0x1834b6ea9    |        piVar4 = *(int32_t **)(arg1 + 0xd8);\r\n    0x1834b6eb0    |        uVar12 = *(undefined8 *)(arg1 + 0xe0);\r\n    0x1834b6eba    |        if (piVar4 != (int32_t *)0x0) {\r\n    0x1834b6ec1    |            LOCK();\r\n    0x1834b6ec1    |            iVar2 = *piVar4;\r\n    0x1834b6ec1    |            *piVar4 = *piVar4 + 1;\r\n    0x1834b6ec1    |            UNLOCK();\r\n    0x1834b6ecb    |            if (iVar2 == 0x7fffffff) {\r\n    0x1834b6fff    |                pcVar6 = (code *)swi(3);\r\n    0x1834b6fff    |                (*pcVar6)();\r\n    0x1834b6fff    |                return;\r\n                   |            }\r\n                   |        }\r\n    0x1834b6ed6    |        var_c0h = func_0x000185f006b8(0x38);\r\n    0x1834b6ee0    |        *(undefined4 *)var_c0h = 1;\r\n    0x1834b6ee9    |        *(undefined8 *)(var_c0h + 8) = 0x1834b93c0;\r\n    0x1834b6ef4    |        *(undefined8 *)(var_c0h + 0x10) = 0x182beced0;\r\n    0x1834b6eff    |        *(undefined8 *)(var_c0h + 0x18) = 0x18339cdd0;\r\n    0x1834b6f0a    |        *(undefined8 *)(var_c0h + 0x20) = 0x1834b7180;\r\n    0x1834b6f0e    |        *(int32_t **)(var_c0h + 0x28) = piVar4;\r\n    0x1834b6f12    |        *(undefined8 *)(var_c0h + 0x30) = uVar12;\r\n    0x1834b6f23    |        var_c8h = func_0x000185f006b8(0x40);\r\n    0x1834b6f28    |        *(undefined4 *)var_c8h = 1;\r\n    0x1834b6f31    |        *(undefined8 *)(var_c8h + 8) = 0x1833e7f20;\r\n    0x1834b6f3c    |        *(undefined8 *)(var_c8h + 0x10) = 0x182bf39b0;\r\n    0x1834b6f47    |        *(undefined8 *)(var_c8h + 0x18) = 0x1841d75d0;\r\n    0x1834b6f52    |        *(undefined8 *)(var_c8h + 0x20) = 0x189f78b20;\r\n    0x1834b6f5b    |        *(undefined8 *)(var_c8h + 0x38) = *(undefined8 *)(arg1 + 0x38);\r\n    0x1834b6f5f    |        uVar12 = *(undefined8 *)(arg1 + 0x30);\r\n    0x1834b6f64    |        *(undefined8 *)(var_c8h + 0x28) = *puVar1;\r\n    0x1834b6f64    |        *(undefined8 *)(var_c8h + 0x30) = uVar12;\r\n    0x1834b6f6b    |        *puVar1 = 0;\r\n    0x1834b6f6b    |        *(undefined8 *)(arg1 + 0x30) = 0;\r\n    0x1834b6f70    |        *(undefined8 *)(arg1 + 0x38) = 0;\r\n    0x1834b6f8f    |        func_0x000184339cd0(&var_b8h, 0x19073863c, 0x190b22b98, 0xb0);\r\n    0x1834b6f8f    |        func_0x000189251440(&var_b8h, 0x190b22b8c, &var_c8h, &var_c0h);\r\n                   |    }\r\n    0x1834b6d30    |    if (*(char *)(arg3 + 0x17) < '\\0') {\r\n    0x1834b6d36    |        func_0x0001841dcbe0(*(undefined8 *)arg3, *(uint64_t *)(arg3 + 0x10) & 0x7fffffffffffffff);\r\n                   |    }\r\n    0x1834b6d41    |    piVar4 = *(int32_t **)arg4;\r\n    0x1834b6d47    |    if (piVar4 != (int32_t *)0x0) {\r\n    0x1834b6d9b    |        LOCK();\r\n    0x1834b6d9b    |        *piVar4 = *piVar4 + -1;\r\n    0x1834b6d9b    |        UNLOCK();\r\n    0x1834b6d9e    |        if (*piVar4 == 0) {\r\n    0x1834b6da4    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x1834b6d5e    |    if (*(uint64_t *)0x191c71040 == (var_40h ^ (uint64_t)auStack_e8)) {\r\n    0x1834b6d75    |        return;\r\n                   |    }\r\n    0x1834b6ff5    |    func_0x000185f05b40(var_40h ^ (uint64_t)auStack_e8);\r\n                   |code_r0x0001834b6ffd:\r\n    0x1834b6ffd    |    // WARNING: Does not return\r\n    0x1834b6ffd    |    pcVar6 = (code *)invalidInstructionException();\r\n    0x1834b6ffd    |    (*pcVar6)();\r\n                   |}\r\n[{\"offset\":6497725280,\"name\":\"fcn.1834b6b60\",\"size\":1184,\"is-pure\":false,\"realsz\":1184,\"noreturn\":false,\"stackframe\":232,\"calltype\":\"ms\",\"cost\":352,\"cc\":28,\"loops\":13,\"bits\":64,\"type\":\"fcn\",\"nbbs\":47,\"edges\":69,\"ebbs\":3,\"signature\":\"fcn.1834b6b60(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);\",\"minbound\":6497725280,\"maxbound\":6497726464,\"callrefs\":[{\"from\":6497725349,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6497725562,\"to\":6514577840,\"type\":\"CALL\"},{\"from\":6497725570,\"to\":6511396000,\"type\":\"CALL\"},{\"from\":6497725613,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6497725722,\"to\":6497726480,\"type\":\"CALL\"},{\"from\":6497725735,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497725756,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497725829,\"to\":6497725499,\"type\":\"CODE\"},{\"from\":6497725841,\"to\":6511729936,\"type\":\"CALL\"},{\"from\":6497725846,\"to\":6497725402,\"type\":\"CODE\"},{\"from\":6497725860,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6497725866,\"to\":6497725769,\"type\":\"CODE\"},{\"from\":6497725873,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6497725997,\"to\":6497726480,\"type\":\"CALL\"},{\"from\":6497726007,\"to\":6497725732,\"type\":\"CODE\"},{\"from\":6497726041,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6497726047,\"to\":6497725478,\"type\":\"CODE\"},{\"from\":6497726063,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497726085,\"to\":6497725427,\"type\":\"CODE\"},{\"from\":6497726111,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497726116,\"to\":6497725478,\"type\":\"CODE\"},{\"from\":6497726166,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6497726243,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6497726365,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6497726386,\"to\":6595875904,\"type\":\"CALL\"},{\"from\":6497726391,\"to\":6497725740,\"type\":\"CODE\"},{\"from\":6497726411,\"to\":6511730288,\"type\":\"CALL\"},{\"from\":6497726416,\"to\":6497725402,\"type\":\"CODE\"},{\"from\":6497726435,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497726440,\"to\":6497726103,\"type\":\"CODE\"},{\"from\":6497726456,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6497725309,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6497725516,\"to\":6712085216,\"type\":\"DATA\"},{\"from\":6497725657,\"to\":6722562928,\"type\":\"DATA\"},{\"from\":6497725684,\"to\":6722562939,\"type\":\"DATA\"},{\"from\":6497725696,\"to\":6722562928,\"type\":\"DATA\"},{\"from\":6497725780,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6497725917,\"to\":6722562880,\"type\":\"DATA\"},{\"from\":6497725944,\"to\":6722562911,\"type\":\"DATA\"},{\"from\":6497725956,\"to\":6722562896,\"type\":\"DATA\"},{\"from\":6497725968,\"to\":6722562880,\"type\":\"DATA\"},{\"from\":6497726026,\"to\":6488537248,\"type\":\"DATA\"},{\"from\":6497726178,\"to\":6497735616,\"type\":\"DATA\"},{\"from\":6497726189,\"to\":6488510160,\"type\":\"DATA\"},{\"from\":6497726200,\"to\":6496570832,\"type\":\"DATA\"},{\"from\":6497726211,\"to\":6497726848,\"type\":\"DATA\"},{\"from\":6497726250,\"to\":6496878368,\"type\":\"DATA\"},{\"from\":6497726261,\"to\":6488537520,\"type\":\"DATA\"},{\"from\":6497726272,\"to\":6511490512,\"type\":\"DATA\"},{\"from\":6497726283,\"to\":6609668896,\"type\":\"DATA\"},{\"from\":6497726337,\"to\":6718457404,\"type\":\"DATA\"},{\"from\":6497726344,\"to\":6722562968,\"type\":\"DATA\"},{\"from\":6497726370,\"to\":6722562956,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6497725829,\"to\":6497725499,\"type\":\"CODE\"},{\"from\":6497725846,\"to\":6497725402,\"type\":\"CODE\"},{\"from\":6497725866,\"to\":6497725769,\"type\":\"CODE\"},{\"from\":6497726007,\"to\":6497725732,\"type\":\"CODE\"},{\"from\":6497726047,\"to\":6497725478,\"type\":\"CODE\"},{\"from\":6497726085,\"to\":6497725427,\"type\":\"CODE\"},{\"from\":6497726116,\"to\":6497725478,\"type\":\"CODE\"},{\"from\":6497726391,\"to\":6497725740,\"type\":\"CODE\"},{\"from\":6497726416,\"to\":6497725402,\"type\":\"CODE\"},{\"from\":6497726440,\"to\":6497726103,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":10,\"outdegree\":21,\"nlocals\":6,\"nargs\":4,\"stackvars\":[{\"name\":\"var_c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-200}},{\"name\":\"var_c0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-192}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_b0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-176}},{\"name\":\"var_a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-168}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}}],\"regvars\":[{\"name\":\"arg3\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r8\"}},{\"name\":\"arg4\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r9\"}},{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":"                   |\r\n    0x1834b6b60    |void fcn.1834b6b60(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4)\r\n                   |{\r\n                   |    undefined8 *puVar1;\r\n                   |    int32_t iVar2;\r\n                   |    uint8_t uVar3;\r\n                   |    int32_t *piVar4;\r\n                   |    int32_t *piVar5;\r\n                   |    code *pcVar6;\r\n                   |    undefined4 uVar7;\r\n                   |    undefined4 uVar8;\r\n                   |    undefined4 uVar9;\r\n                   |    int64_t iVar10;\r\n                   |    undefined4 *puVar11;\r\n                   |    undefined8 uVar12;\r\n                   |    uint64_t uVar13;\r\n                   |    undefined auStack_e8 [32];\r\n                   |    int64_t var_c8h;\r\n                   |    int64_t var_c0h;\r\n                   |    int64_t var_b8h;\r\n                   |    int64_t var_b0h;\r\n                   |    int64_t var_a8h;\r\n                   |    unkbyte3 Stack_a0;\r\n                   |    undefined4 uStack_98;\r\n                   |    undefined4 uStack_94;\r\n                   |    undefined4 uStack_90;\r\n                   |    undefined4 uStack_8c;\r\n                   |    undefined4 uStack_88;\r\n                   |    undefined4 uStack_84;\r\n                   |    undefined4 uStack_80;\r\n                   |    undefined4 uStack_7c;\r\n                   |    undefined4 uStack_78;\r\n                   |    undefined4 uStack_74;\r\n                   |    undefined4 uStack_70;\r\n                   |    undefined4 uStack_6c;\r\n                   |    undefined4 uStack_68;\r\n                   |    undefined4 uStack_64;\r\n                   |    undefined4 uStack_60;\r\n                   |    undefined4 uStack_5c;\r\n                   |    undefined2 uStack_58;\r\n                   |    undefined8 uStack_50;\r\n                   |    undefined8 uStack_48;\r\n                   |    int64_t var_40h;\r\n                   |    \r\n    0x1834b6b84    |    var_40h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_e8;\r\n    0x1834b6b8f    |    iVar10 = *(int64_t *)(arg1 + 8);\r\n    0x1834b6b93    |    *(undefined8 *)(arg1 + 8) = 0;\r\n    0x1834b6b9e    |    if (iVar10 != 0) {\r\n    0x1834b6ba5    |        func_0x000181516210(iVar10, 1);\r\n                   |    }\r\n    0x1834b6baa    |    puVar1 = (undefined8 *)(arg1 + 0x10);\r\n    0x1834b6bb1    |    if (puVar1 != (undefined8 *)arg2) {\r\n    0x1834b6bb8    |        uVar3 = *(uint8_t *)(arg2 + 0x17);\r\n    0x1834b6bb8    |        uVar13 = (uint64_t)uVar3;\r\n    0x1834b6bbd    |        if (*(char *)(arg1 + 0x27) < '\\0') {\r\n    0x1834b6fbf    |            if ((char)uVar3 < '\\0') {\r\n    0x1834b6fc1    |                uVar13 = *(uint64_t *)(arg2 + 8);\r\n    0x1834b6fc5    |                arg2 = *(int64_t *)arg2;\r\n                   |            }\r\n    0x1834b6fcb    |            func_0x000184211e70(puVar1, arg2, uVar13);\r\n    0x1834b6bc6    |        } else if ((char)uVar3 < '\\0') {\r\n    0x1834b6d91    |            func_0x000184211d10(puVar1, *(undefined8 *)arg2, *(undefined8 *)(arg2 + 8));\r\n                   |        } else {\r\n    0x1834b6bd0    |            *(undefined8 *)(arg1 + 0x20) = *(undefined8 *)(arg2 + 0x10);\r\n    0x1834b6bd4    |            uVar12 = *(undefined8 *)(arg2 + 8);\r\n    0x1834b6bd7    |            *puVar1 = *(undefined8 *)arg2;\r\n    0x1834b6bd7    |            *(undefined8 *)(arg1 + 0x18) = uVar12;\r\n                   |        }\r\n                   |    }\r\n    0x1834b6be4    |    puVar1 = (undefined8 *)(arg1 + 0x28);\r\n    0x1834b6bed    |    if (*(char *)(arg1 + 0x3f) < '\\0') {\r\n    0x1834b6e6b    |        func_0x0001841dcbe0(*(undefined8 *)(arg1 + 0x28), *(uint64_t *)(arg1 + 0x38) & 0x7fffffffffffffff);\r\n    0x1834b6e77    |        *puVar1 = 0;\r\n    0x1834b6e77    |        *(undefined8 *)(arg1 + 0x30) = 0;\r\n    0x1834b6e7c    |        *(undefined8 *)(arg1 + 0x38) = 0;\r\n                   |    }\r\n    0x1834b6bf7    |    *(undefined8 *)(arg1 + 0x38) = *(undefined8 *)(arg3 + 0x10);\r\n    0x1834b6bfc    |    uVar7 = *(undefined4 *)(arg3 + 4);\r\n    0x1834b6bfc    |    uVar8 = *(undefined4 *)(arg3 + 8);\r\n    0x1834b6bfc    |    uVar9 = *(undefined4 *)(arg3 + 0xc);\r\n    0x1834b6bff    |    *(undefined4 *)puVar1 = *(undefined4 *)arg3;\r\n    0x1834b6bff    |    *(undefined4 *)(arg1 + 0x2c) = uVar7;\r\n    0x1834b6bff    |    *(undefined4 *)(arg1 + 0x30) = uVar8;\r\n    0x1834b6bff    |    *(undefined4 *)(arg1 + 0x34) = uVar9;\r\n    0x1834b6c06    |    *(undefined *)(arg3 + 0x17) = 0;\r\n    0x1834b6c09    |    *(undefined *)arg3 = 0;\r\n    0x1834b6c0b    |    uVar12 = *(undefined8 *)arg4;\r\n    0x1834b6c0e    |    *(undefined8 *)arg4 = 0;\r\n    0x1834b6c15    |    piVar4 = *(int32_t **)(arg1 + 0x40);\r\n    0x1834b6c19    |    *(undefined8 *)(arg1 + 0x40) = uVar12;\r\n    0x1834b6c20    |    if (piVar4 != (int32_t *)0x0) {\r\n    0x1834b6e3c    |        LOCK();\r\n    0x1834b6e3c    |        *piVar4 = *piVar4 + -1;\r\n    0x1834b6e3c    |        UNLOCK();\r\n    0x1834b6e40    |        if (*piVar4 == 0) {\r\n    0x1834b6e54    |            if (*(int64_t *)(piVar4 + 4) == 0x182bf38a0) {\r\n    0x1834b6e8a    |                piVar5 = *(int32_t **)(piVar4 + 0xc);\r\n    0x1834b6e91    |                if (piVar5 != (int32_t *)0x0) {\r\n    0x1834b6fd5    |                    LOCK();\r\n    0x1834b6fd5    |                    *piVar5 = *piVar5 + -1;\r\n    0x1834b6fd5    |                    UNLOCK();\r\n    0x1834b6fd8    |                    if (*piVar5 == 0) {\r\n    0x1834b6fe3    |                        func_0x0001841dcbe0(piVar5, 8);\r\n                   |                    }\r\n                   |                }\r\n    0x1834b6e9f    |                func_0x0001841dcbe0(piVar4, 0x48);\r\n                   |            } else {\r\n    0x1834b6e59    |                (*(code *)0x185f59da0)(piVar4);\r\n                   |            }\r\n                   |        }\r\n                   |    }\r\n    0x1834b6c2b    |    if (*(char *)(arg1 + 0x5f) < '\\0') {\r\n    0x1834b6d7a    |        **(undefined **)(arg1 + 0x48) = 0;\r\n    0x1834b6d7d    |        *(undefined8 *)(arg1 + 0x50) = 0;\r\n                   |    } else {\r\n    0x1834b6c33    |        *(undefined *)(arg1 + 0x48) = 0;\r\n    0x1834b6c37    |        *(undefined *)(arg1 + 0x5f) = 0;\r\n                   |    }\r\n    0x1834b6c43    |    var_a8h._0_3_ = 0;\r\n    0x1834b6c43    |    var_a8h._3_5_ = 0;\r\n    0x1834b6c43    |    Stack_a0 = 0;\r\n    0x1834b6c48    |    var_b8h = 0;\r\n    0x1834b6c48    |    var_b0h._0_3_ = 0;\r\n    0x1834b6c48    |    var_b0h._3_5_ = 0;\r\n    0x1834b6c53    |    uStack_98 = 0;\r\n    0x1834b6c53    |    uStack_94 = 0xffffffff;\r\n    0x1834b6c53    |    uStack_90 = 0;\r\n    0x1834b6c53    |    uStack_8c = 0xffffffff;\r\n    0x1834b6c58    |    uStack_88 = 0;\r\n    0x1834b6c58    |    uStack_84 = 0xffffffff;\r\n    0x1834b6c58    |    uStack_80 = 0;\r\n    0x1834b6c58    |    uStack_7c = 0xffffffff;\r\n    0x1834b6c5d    |    uStack_78 = 0;\r\n    0x1834b6c5d    |    uStack_74 = 0xffffffff;\r\n    0x1834b6c5d    |    uStack_70 = 0;\r\n    0x1834b6c5d    |    uStack_6c = 0xffffffff;\r\n    0x1834b6c62    |    uStack_68 = 0;\r\n    0x1834b6c62    |    uStack_64 = 0xffffffff;\r\n    0x1834b6c62    |    uStack_60 = 0;\r\n    0x1834b6c62    |    uStack_5c = 0xffffffff;\r\n    0x1834b6c67    |    uStack_58 = 0;\r\n    0x1834b6c6e    |    uStack_50 = 0;\r\n    0x1834b6c6e    |    uStack_48 = 0;\r\n    0x1834b6c73    |    func_0x0001844c91b0(arg1 + 0x60, &var_b8h);\r\n    0x1834b6c3e    |    func_0x0001841c04a0(&var_b8h);\r\n    0x1834b6c8b    |    if (*(int64_t *)arg1 == 0) {\r\n    0x1834b6db1    |        puVar11 = (undefined4 *)func_0x000185f006b8(0x30);\r\n    0x1834b6dbe    |        var_b0h._0_3_ = 0x2f;\r\n    0x1834b6dbe    |        var_b0h._3_5_ = 0;\r\n    0x1834b6dcb    |        var_a8h._0_3_ = 0x30;\r\n    0x1834b6dcb    |        var_a8h._3_5_ = 0x8000000000;\r\n    0x1834b6dd7    |        var_b8h = (int64_t)puVar11;\r\n    0x1834b6df2    |        if (((undefined4 *)((int64_t)puVar11 + 0x2f) < puVar11) ||\r\n    0x1834b6ded    |           ((undefined4 *)0x190b22b40 < (undefined4 *)((int64_t)puVar11 + 0x2f) && puVar11 < (undefined4 *)0x190b22b41))\r\n    0x1834b6df2    |        goto code_r0x0001834b6ffd;\r\n    0x1834b6dff    |        *(undefined8 *)((int64_t)puVar11 + 0x1f) = 0x656361727420726f;\r\n    0x1834b6dff    |        *(undefined8 *)((int64_t)puVar11 + 0x27) = 0x2e64616f6c707520;\r\n    0x1834b6e0b    |        *(undefined8 *)(puVar11 + 4) = 0x696176616e752073;\r\n    0x1834b6e0b    |        *(undefined8 *)(puVar11 + 6) = 0x6f6620656c62616c;\r\n    0x1834b6e17    |        *puVar11 = 0x7774654e;\r\n    0x1834b6e17    |        puVar11[1] = 0x206b726f;\r\n    0x1834b6e17    |        puVar11[2] = 0x64616f6c;\r\n    0x1834b6e17    |        puVar11[3] = 0x69207265;\r\n    0x1834b6e1b    |        *(undefined *)((int64_t)puVar11 + 0x2f) = 0;\r\n    0x1834b6e2d    |        func_0x0001834b7010(arg1, 1, &var_b8h);\r\n    0x1834b6e32    |        uVar12 = 0x30;\r\n                   |code_r0x0001834b6d24:\r\n    0x1834b6d27    |        func_0x0001841dcbe0(puVar11, uVar12);\r\n                   |    } else {\r\n    0x1834b6c91    |        iVar10 = (int64_t)*(char *)(arg1 + 0x3f);\r\n    0x1834b6c99    |        if (iVar10 < 0) {\r\n    0x1834b6c9b    |            iVar10 = *(int64_t *)(arg1 + 0x30);\r\n                   |        }\r\n    0x1834b6ca2    |        if (iVar10 == 0) {\r\n    0x1834b6cad    |            puVar11 = (undefined4 *)func_0x000185f006b8(0x20);\r\n    0x1834b6cba    |            var_b0h._0_3_ = 0x1b;\r\n    0x1834b6cba    |            var_b0h._3_5_ = 0;\r\n    0x1834b6cc7    |            var_a8h._0_3_ = 0x20;\r\n    0x1834b6cc7    |            var_a8h._3_5_ = 0x8000000000;\r\n    0x1834b6cd3    |            var_b8h = (int64_t)puVar11;\r\n    0x1834b6cee    |            if (((undefined4 *)((int64_t)puVar11 + 0x1b) < puVar11) ||\r\n    0x1834b6ce9    |               ((undefined4 *)0x190b22b70 < (undefined4 *)((int64_t)puVar11 + 0x1b) &&\r\n    0x1834b6ce3    |                puVar11 < (undefined4 *)0x190b22b71)) goto code_r0x0001834b6ffd;\r\n    0x1834b6cfb    |            *(undefined8 *)((int64_t)puVar11 + 0xb) = 0x692064616f6c7961;\r\n    0x1834b6cfb    |            *(undefined8 *)((int64_t)puVar11 + 0x13) = 0x2e7974706d652073;\r\n    0x1834b6d07    |            *puVar11 = 0x20656854;\r\n    0x1834b6d07    |            puVar11[1] = 0x63617274;\r\n    0x1834b6d07    |            puVar11[2] = 0x61702065;\r\n    0x1834b6d07    |            puVar11[3] = 0x616f6c79;\r\n    0x1834b6d0b    |            *(undefined *)((int64_t)puVar11 + 0x1b) = 0;\r\n    0x1834b6d1a    |            func_0x0001834b7010(arg1, 0, &var_b8h);\r\n    0x1834b6d1f    |            uVar12 = 0x20;\r\n    0x1834b6d1f    |            goto code_r0x0001834b6d24;\r\n                   |        }\r\n    0x1834b6ea9    |        piVar4 = *(int32_t **)(arg1 + 0xd8);\r\n    0x1834b6eb0    |        uVar12 = *(undefined8 *)(arg1 + 0xe0);\r\n    0x1834b6eba    |        if (piVar4 != (int32_t *)0x0) {\r\n    0x1834b6ec1    |            LOCK();\r\n    0x1834b6ec1    |            iVar2 = *piVar4;\r\n    0x1834b6ec1    |            *piVar4 = *piVar4 + 1;\r\n    0x1834b6ec1    |            UNLOCK();\r\n    0x1834b6ecb    |            if (iVar2 == 0x7fffffff) {\r\n    0x1834b6fff    |                pcVar6 = (code *)swi(3);\r\n    0x1834b6fff    |                (*pcVar6)();\r\n    0x1834b6fff    |                return;\r\n                   |            }\r\n                   |        }\r\n    0x1834b6ed6    |        var_c0h = func_0x000185f006b8(0x38);\r\n    0x1834b6ee0    |        *(undefined4 *)var_c0h = 1;\r\n    0x1834b6ee9    |        *(undefined8 *)(var_c0h + 8) = 0x1834b93c0;\r\n    0x1834b6ef4    |        *(undefined8 *)(var_c0h + 0x10) = 0x182beced0;\r\n    0x1834b6eff    |        *(undefined8 *)(var_c0h + 0x18) = 0x18339cdd0;\r\n    0x1834b6f0a    |        *(undefined8 *)(var_c0h + 0x20) = 0x1834b7180;\r\n    0x1834b6f0e    |        *(int32_t **)(var_c0h + 0x28) = piVar4;\r\n    0x1834b6f12    |        *(undefined8 *)(var_c0h + 0x30) = uVar12;\r\n    0x1834b6f23    |        var_c8h = func_0x000185f006b8(0x40);\r\n    0x1834b6f28    |        *(undefined4 *)var_c8h = 1;\r\n    0x1834b6f31    |        *(undefined8 *)(var_c8h + 8) = 0x1833e7f20;\r\n    0x1834b6f3c    |        *(undefined8 *)(var_c8h + 0x10) = 0x182bf39b0;\r\n    0x1834b6f47    |        *(undefined8 *)(var_c8h + 0x18) = 0x1841d75d0;\r\n    0x1834b6f52    |        *(undefined8 *)(var_c8h + 0x20) = 0x189f78b20;\r\n    0x1834b6f5b    |        *(undefined8 *)(var_c8h + 0x38) = *(undefined8 *)(arg1 + 0x38);\r\n    0x1834b6f5f    |        uVar12 = *(undefined8 *)(arg1 + 0x30);\r\n    0x1834b6f64    |        *(undefined8 *)(var_c8h + 0x28) = *puVar1;\r\n    0x1834b6f64    |        *(undefined8 *)(var_c8h + 0x30) = uVar12;\r\n    0x1834b6f6b    |        *puVar1 = 0;\r\n    0x1834b6f6b    |        *(undefined8 *)(arg1 + 0x30) = 0;\r\n    0x1834b6f70    |        *(undefined8 *)(arg1 + 0x38) = 0;\r\n    0x1834b6f8f    |        func_0x000184339cd0(&var_b8h, 0x19073863c, 0x190b22b98, 0xb0);\r\n    0x1834b6f8f    |        func_0x000189251440(&var_b8h, 0x190b22b8c, &var_c8h, &var_c0h);\r\n                   |    }\r\n    0x1834b6d30    |    if (*(char *)(arg3 + 0x17) < '\\0') {\r\n    0x1834b6d36    |        func_0x0001841dcbe0(*(undefined8 *)arg3, *(uint64_t *)(arg3 + 0x10) & 0x7fffffffffffffff);\r\n                   |    }\r\n    0x1834b6d41    |    piVar4 = *(int32_t **)arg4;\r\n    0x1834b6d47    |    if (piVar4 != (int32_t *)0x0) {\r\n    0x1834b6d9b    |        LOCK();\r\n    0x1834b6d9b    |        *piVar4 = *piVar4 + -1;\r\n    0x1834b6d9b    |        UNLOCK();\r\n    0x1834b6d9e    |        if (*piVar4 == 0) {\r\n    0x1834b6da4    |            (*(code *)0x185f59da0)();\r\n                   |        }\r\n                   |    }\r\n    0x1834b6d5e    |    if (*(uint64_t *)0x191c71040 == (var_40h ^ (uint64_t)auStack_e8)) {\r\n    0x1834b6d75    |        return;\r\n                   |    }\r\n    0x1834b6ff5    |    func_0x000185f05b40(var_40h ^ (uint64_t)auStack_e8);\r\n                   |code_r0x0001834b6ffd:\r\n    0x1834b6ffd    |    // WARNING: Does not return\r\n    0x1834b6ffd    |    pcVar6 = (code *)invalidInstructionException();\r\n    0x1834b6ffd    |    (*pcVar6)();\r\n                   |}\r\n[{\"offset\":6497725280,\"name\":\"fcn.1834b6b60\",\"size\":1184,\"is-pure\":false,\"realsz\":1184,\"noreturn\":false,\"stackframe\":232,\"calltype\":\"ms\",\"cost\":352,\"cc\":28,\"loops\":13,\"bits\":64,\"type\":\"fcn\",\"nbbs\":47,\"edges\":69,\"ebbs\":3,\"signature\":\"fcn.1834b6b60(int64_t arg1, int64_t arg2, int64_t arg3, int64_t arg4);\",\"minbound\":6497725280,\"maxbound\":6497726464,\"callrefs\":[{\"from\":6497725349,\"to\":6464561680,\"type\":\"CALL\"},{\"from\":6497725562,\"to\":6514577840,\"type\":\"CALL\"},{\"from\":6497725570,\"to\":6511396000,\"type\":\"CALL\"},{\"from\":6497725613,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6497725722,\"to\":6497726480,\"type\":\"CALL\"},{\"from\":6497725735,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497725756,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497725829,\"to\":6497725499,\"type\":\"CODE\"},{\"from\":6497725841,\"to\":6511729936,\"type\":\"CALL\"},{\"from\":6497725846,\"to\":6497725402,\"type\":\"CODE\"},{\"from\":6497725860,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6497725866,\"to\":6497725769,\"type\":\"CODE\"},{\"from\":6497725873,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6497725997,\"to\":6497726480,\"type\":\"CALL\"},{\"from\":6497726007,\"to\":6497725732,\"type\":\"CODE\"},{\"from\":6497726041,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6497726047,\"to\":6497725478,\"type\":\"CODE\"},{\"from\":6497726063,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497726085,\"to\":6497725427,\"type\":\"CODE\"},{\"from\":6497726111,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497726116,\"to\":6497725478,\"type\":\"CODE\"},{\"from\":6497726166,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6497726243,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6497726365,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6497726386,\"to\":6595875904,\"type\":\"CALL\"},{\"from\":6497726391,\"to\":6497725740,\"type\":\"CODE\"},{\"from\":6497726411,\"to\":6511730288,\"type\":\"CALL\"},{\"from\":6497726416,\"to\":6497725402,\"type\":\"CODE\"},{\"from\":6497726435,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6497726440,\"to\":6497726103,\"type\":\"CODE\"},{\"from\":6497726456,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6497725309,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6497725516,\"to\":6712085216,\"type\":\"DATA\"},{\"from\":6497725657,\"to\":6722562928,\"type\":\"DATA\"},{\"from\":6497725684,\"to\":6722562939,\"type\":\"DATA\"},{\"from\":6497725696,\"to\":6722562928,\"type\":\"DATA\"},{\"from\":6497725780,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6497725917,\"to\":6722562880,\"type\":\"DATA\"},{\"from\":6497725944,\"to\":6722562911,\"type\":\"DATA\"},{\"from\":6497725956,\"to\":6722562896,\"type\":\"DATA\"},{\"from\":6497725968,\"to\":6722562880,\"type\":\"DATA\"},{\"from\":6497726026,\"to\":6488537248,\"type\":\"DATA\"},{\"from\":6497726178,\"to\":6497735616,\"type\":\"DATA\"},{\"from\":6497726189,\"to\":6488510160,\"type\":\"DATA\"},{\"from\":6497726200,\"to\":6496570832,\"type\":\"DATA\"},{\"from\":6497726211,\"to\":6497726848,\"type\":\"DATA\"},{\"from\":6497726250,\"to\":6496878368,\"type\":\"DATA\"},{\"from\":6497726261,\"to\":6488537520,\"type\":\"DATA\"},{\"from\":6497726272,\"to\":6511490512,\"type\":\"DATA\"},{\"from\":6497726283,\"to\":6609668896,\"type\":\"DATA\"},{\"from\":6497726337,\"to\":6718457404,\"type\":\"DATA\"},{\"from\":6497726344,\"to\":6722562968,\"type\":\"DATA\"},{\"from\":6497726370,\"to\":6722562956,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6497725829,\"to\":6497725499,\"type\":\"CODE\"},{\"from\":6497725846,\"to\":6497725402,\"type\":\"CODE\"},{\"from\":6497725866,\"to\":6497725769,\"type\":\"CODE\"},{\"from\":6497726007,\"to\":6497725732,\"type\":\"CODE\"},{\"from\":6497726047,\"to\":6497725478,\"type\":\"CODE\"},{\"from\":6497726085,\"to\":6497725427,\"type\":\"CODE\"},{\"from\":6497726116,\"to\":6497725478,\"type\":\"CODE\"},{\"from\":6497726391,\"to\":6497725740,\"type\":\"CODE\"},{\"from\":6497726416,\"to\":6497725402,\"type\":\"CODE\"},{\"from\":6497726440,\"to\":6497726103,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":10,\"outdegree\":21,\"nlocals\":6,\"nargs\":4,\"stackvars\":[{\"name\":\"var_c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-200}},{\"name\":\"var_c0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-192}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_b0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-176}},{\"name\":\"var_a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-168}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}}],\"regvars\":[{\"name\":\"arg3\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r8\"}},{\"name\":\"arg4\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r9\"}},{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"5108ms"}}