{"ok":true,"data":{"evidence_id":"ev_30240ddc08f106e6b34c01d98a5d1704089112fddd03c05f9516194c4e322f40","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x18a071390;pdgo @ 0x18a071390;afij @ 0x18a071390","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x18a071390;pdgo @ 0x18a071390;afij @ 0x18a071390","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":" |\r\n 0x18a071390 |void fcn.18a071390(undefined8 placeholder_0, undefined8 placeholder_1, int64_t arg3)\r\n |{\r\n | undefined4 uVar1;\r\n | int32_t iVar2;\r\n | code *pcVar3;\r\n | int64_t iVar4;\r\n | undefined4 uVar5;\r\n | undefined8 uVar6;\r\n | undefined8 *puVar7;\r\n | int32_t *piVar8;\r\n | uint64_t uVar9;\r\n | uint64_t uVar10;\r\n | int64_t iVar11;\r\n | uint64_t uVar12;\r\n | undefined4 uVar13;\r\n | undefined4 uVar14;\r\n | undefined auStack_108 [40];\r\n | int64_t var_e0h;\r\n | int64_t var_d8h;\r\n | undefined4 uStack_d0;\r\n | undefined4 uStack_cc;\r\n | undefined4 uStack_c8;\r\n | undefined4 uStack_c4;\r\n | int64_t var_c0h;\r\n | int64_t var_b8h;\r\n | int64_t var_b0h;\r\n | int64_t var_a8h;\r\n | int64_t var_a0h;\r\n | undefined4 uStack_98;\r\n | undefined4 uStack_94;\r\n | int64_t var_90h;\r\n | int64_t var_88h;\r\n | int64_t var_80h;\r\n | int64_t var_78h;\r\n | int64_t var_68h;\r\n | int64_t var_58h;\r\n | \r\n 0x18a0713c8 | var_80h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_108;\r\n 0x18a0713d6 | var_b8h = 0;\r\n 0x18a0713d6 | var_b0h = 0;\r\n 0x18a0713db | var_a8h = 0;\r\n 0x18a0713ec | uVar13 = 0x42a00000;\r\n 0x18a0713f1 | if ((char)placeholder_1 == '\\0') {\r\n 0x18a0713f3 | uVar13 = 0x42200000;\r\n 0x18a071408 | uVar14 = 0x42b40000;\r\n | } else {\r\n 0x18a0713fd | uVar14 = 0x41f00000;\r\n | }\r\n 0x18a071426 | iVar11 = 0x190871800;\r\n 0x18a071439 | var_e0h = arg3;\r\n | do {\r\n 0x18a07155e | uVar5 = *(undefined4 *)(iVar11 + 4);\r\n 0x18a071561 | uVar1 = *(undefined4 *)(iVar11 + 8);\r\n 0x18a071565 | iVar2 = *(int32_t *)(iVar11 + 0xc);\r\n 0x18a07156e | puVar7 = (undefined8 *)func_0x000185f006b8(0x30);\r\n 0x18a071579 | func_0x000188da9ff0(puVar7);\r\n 0x18a071583 | var_88h = 0;\r\n 0x18a07158f | uVar9 = 4;\r\n 0x18a071594 | piVar8 = (int32_t *)0x190b49850;\r\n | do {\r\n 0x18a07159e | uVar10 = uVar9 >> 1;\r\n 0x18a0715a7 | uVar12 = ~uVar10 + uVar9;\r\n 0x18a0715b6 | uVar9 = uVar10;\r\n 0x18a0715b6 | if (piVar8[uVar10 * 2] < iVar2) {\r\n 0x18a0715ba | piVar8 = piVar8 + uVar10 * 2 + 2;\r\n 0x18a0715ba | uVar9 = uVar12;\r\n | }\r\n 0x18a0715c4 | } while (uVar9 != 0);\r\n 0x18a0715d0 | var_c0h = (int64_t)puVar7;\r\n 0x18a0715d5 | if ((piVar8 == (int32_t *)0x190b49870) || (iVar2 < *piVar8)) {\r\n 0x18a0715db | pcVar3 = (code *)swi(3);\r\n 0x18a0715db | (*pcVar3)();\r\n 0x18a0715db | return;\r\n | }\r\n 0x18a07145f | func_0x00018b5077c0(&var_88h, uVar5, piVar8[1]);\r\n 0x18a07146e | func_0x000181a25640(&var_a0h, uVar1);\r\n 0x18a071481 | if (*(char *)((int64_t)puVar7 + 0x17) < '\\0') {\r\n 0x18a071450 | func_0x0001841dcbe0(*puVar7, puVar7[2] & 0x7fffffffffffffff);\r\n | }\r\n 0x18a071488 | puVar7[2] = var_90h;\r\n 0x18a071492 | *(undefined4 *)puVar7 = (undefined4)var_a0h;\r\n 0x18a071492 | *(undefined4 *)((int64_t)puVar7 + 4) = var_a0h._4_4_;\r\n 0x18a071492 | *(undefined4 *)(puVar7 + 1) = uStack_98;\r\n 0x18a071492 | *(undefined4 *)((int64_t)puVar7 + 0xc) = uStack_94;\r\n 0x18a071497 | *(undefined4 *)(puVar7 + 3) = uVar5;\r\n 0x18a0714ab | uVar5 = func_0x00018b508a10(var_88h + 8, uVar13);\r\n 0x18a0714b0 | *(undefined4 *)((int64_t)puVar7 + 0x1c) = uVar5;\r\n 0x18a0714c5 | uVar5 = func_0x00018b508a10(var_88h + 8, uVar14);\r\n 0x18a0714ca | *(undefined4 *)(puVar7 + 4) = uVar5;\r\n 0x18a0714de | uVar6 = (*(code *)0x185f59da0)();\r\n 0x18a0714ea | uVar5 = func_0x00018b508a10(uVar6);\r\n 0x18a0714ea | iVar4 = var_88h;\r\n 0x18a0714ef | *(undefined4 *)((int64_t)puVar7 + 0x24) = uVar5;\r\n 0x18a0714f4 | *(int32_t *)(puVar7 + 5) = iVar2;\r\n 0x18a071501 | var_88h = 0;\r\n 0x18a071510 | if (iVar4 != 0) {\r\n 0x18a071517 | func_0x00018b5089a0(iVar4, 1);\r\n | }\r\n 0x18a07151c | func_0x00018a071a90(&var_b8h, &var_c0h);\r\n 0x18a071524 | iVar4 = var_c0h;\r\n 0x18a07152e | var_c0h = 0;\r\n 0x18a07153a | if (iVar4 != 0) {\r\n 0x18a07153f | func_0x000186c643b0(iVar4);\r\n 0x18a07154c | func_0x0001841dcbe0(iVar4, 0x30);\r\n | }\r\n 0x18a071551 | var_d8h = var_b8h;\r\n 0x18a071551 | iVar4 = var_e0h;\r\n 0x18a071551 | iVar11 = iVar11 + 0x10;\r\n 0x18a071558 | } while (iVar11 != 0x190871880);\r\n 0x18a0715f4 | var_b8h = 0;\r\n 0x18a071605 | uStack_d0 = (undefined4)var_b0h;\r\n 0x18a071605 | uStack_cc = var_b0h._4_4_;\r\n 0x18a071605 | uStack_c8 = (undefined4)var_a8h;\r\n 0x18a071605 | uStack_c4 = var_a8h._4_4_;\r\n 0x18a07160d | var_b0h = 0;\r\n 0x18a07160d | var_a8h = 0;\r\n 0x18a07161e | func_0x000189175e90(var_e0h);\r\n 0x18a071628 | var_a0h = (int64_t)&var_b8h;\r\n 0x18a071630 | func_0x000189176580();\r\n 0x18a071635 | piVar8 = *(int32_t **)iVar4;\r\n 0x18a07163b | if (piVar8 != (int32_t *)0x0) {\r\n 0x18a0715de | LOCK();\r\n 0x18a0715de | *piVar8 = *piVar8 + -1;\r\n 0x18a0715de | UNLOCK();\r\n 0x18a0715e1 | if (*piVar8 == 0) {\r\n 0x18a0715e7 | (*(code *)0x185f59da0)();\r\n | }\r\n | }\r\n 0x18a071652 | if (*(uint64_t *)0x191c71040 == (var_80h ^ (uint64_t)auStack_108)) {\r\n 0x18a071680 | return;\r\n | }\r\n 0x18a071689 | func_0x000185f05b40(var_80h ^ (uint64_t)auStack_108);\r\n 0x18a071691 | pcVar3 = (code *)swi(3);\r\n 0x18a071691 | (*pcVar3)();\r\n 0x18a071691 | return;\r\n |}\r\n[{\"offset\":6610686864,\"name\":\"fcn.18a071390\",\"size\":770,\"is-pure\":false,\"realsz\":768,\"noreturn\":false,\"stackframe\":264,\"calltype\":\"ms\",\"cost\":227,\"cc\":16,\"loops\":3,\"bits\":64,\"type\":\"fcn\",\"nbbs\":26,\"edges\":36,\"ebbs\":3,\"signature\":\"fcn.18a071390(int64_t arg3);\",\"minbound\":6610686864,\"maxbound\":6610687634,\"callrefs\":[{\"from\":6610686982,\"to\":6610686993,\"type\":\"CODE\"},{\"from\":6610687033,\"to\":6610687326,\"type\":\"CODE\"},{\"from\":6610687060,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6610687065,\"to\":6610687107,\"type\":\"CODE\"},{\"from\":6610687081,\"to\":6632273856,\"type\":\"CALL\"},{\"from\":6610687094,\"to\":6469867072,\"type\":\"CALL\"},{\"from\":6610687147,\"to\":6632278544,\"type\":\"CALL\"},{\"from\":6610687173,\"to\":6632278544,\"type\":\"CALL\"},{\"from\":6610687198,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6610687210,\"to\":6632278544,\"type\":\"CALL\"},{\"from\":6610687255,\"to\":6632278432,\"type\":\"CALL\"},{\"from\":6610687268,\"to\":6610688656,\"type\":\"CALL\"},{\"from\":6610687295,\"to\":6556107696,\"type\":\"CALL\"},{\"from\":6610687308,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6610687342,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6610687353,\"to\":6590996464,\"type\":\"CALL\"},{\"from\":6610687463,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6610687469,\"to\":6610687549,\"type\":\"CODE\"},{\"from\":6610687518,\"to\":6594977424,\"type\":\"CALL\"},{\"from\":6610687536,\"to\":6594979200,\"type\":\"CALL\"},{\"from\":6610687628,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6610686913,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6610686948,\"to\":6722721864,\"type\":\"DATA\"},{\"from\":6610686963,\"to\":6717634764,\"type\":\"DATA\"},{\"from\":6610686973,\"to\":6715022296,\"type\":\"DATA\"},{\"from\":6610686984,\"to\":6712509524,\"type\":\"DATA\"},{\"from\":6610686998,\"to\":6717354684,\"type\":\"DATA\"},{\"from\":6610687014,\"to\":6719739904,\"type\":\"DATA\"},{\"from\":6610687026,\"to\":6719740032,\"type\":\"DATA\"},{\"from\":6610687380,\"to\":6722721872,\"type\":\"DATA\"},{\"from\":6610687430,\"to\":6722721904,\"type\":\"DATA\"},{\"from\":6610687560,\"to\":6740709440,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6610686982,\"to\":6610686993,\"type\":\"CODE\"},{\"from\":6610687033,\"to\":6610687326,\"type\":\"CODE\"},{\"from\":6610687065,\"to\":6610687107,\"type\":\"CODE\"},{\"from\":6610687469,\"to\":6610687549,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":4,\"outdegree\":17,\"nlocals\":13,\"nargs\":1,\"stackvars\":[{\"name\":\"var_e0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-224}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_c0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-192}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_b0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-176}},{\"name\":\"var_a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-168}},{\"name\":\"var_a0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-160}},{\"name\":\"var_90h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-144}},{\"name\":\"var_88h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-136}},{\"name\":\"var_80h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-128}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}}],\"regvars\":[{\"name\":\"arg3\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r8\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":" |\r\n 0x18a071390 |void fcn.18a071390(undefined8 placeholder_0, undefined8 placeholder_1, int64_t arg3)\r\n |{\r\n | undefined4 uVar1;\r\n | int32_t iVar2;\r\n | code *pcVar3;\r\n | int64_t iVar4;\r\n | undefined4 uVar5;\r\n | undefined8 uVar6;\r\n | undefined8 *puVar7;\r\n | int32_t *piVar8;\r\n | uint64_t uVar9;\r\n | uint64_t uVar10;\r\n | int64_t iVar11;\r\n | uint64_t uVar12;\r\n | undefined4 uVar13;\r\n | undefined4 uVar14;\r\n | undefined auStack_108 [40];\r\n | int64_t var_e0h;\r\n | int64_t var_d8h;\r\n | undefined4 uStack_d0;\r\n | undefined4 uStack_cc;\r\n | undefined4 uStack_c8;\r\n | undefined4 uStack_c4;\r\n | int64_t var_c0h;\r\n | int64_t var_b8h;\r\n | int64_t var_b0h;\r\n | int64_t var_a8h;\r\n | int64_t var_a0h;\r\n | undefined4 uStack_98;\r\n | undefined4 uStack_94;\r\n | int64_t var_90h;\r\n | int64_t var_88h;\r\n | int64_t var_80h;\r\n | int64_t var_78h;\r\n | int64_t var_68h;\r\n | int64_t var_58h;\r\n | \r\n 0x18a0713c8 | var_80h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_108;\r\n 0x18a0713d6 | var_b8h = 0;\r\n 0x18a0713d6 | var_b0h = 0;\r\n 0x18a0713db | var_a8h = 0;\r\n 0x18a0713ec | uVar13 = 0x42a00000;\r\n 0x18a0713f1 | if ((char)placeholder_1 == '\\0') {\r\n 0x18a0713f3 | uVar13 = 0x42200000;\r\n 0x18a071408 | uVar14 = 0x42b40000;\r\n | } else {\r\n 0x18a0713fd | uVar14 = 0x41f00000;\r\n | }\r\n 0x18a071426 | iVar11 = 0x190871800;\r\n 0x18a071439 | var_e0h = arg3;\r\n | do {\r\n 0x18a07155e | uVar5 = *(undefined4 *)(iVar11 + 4);\r\n 0x18a071561 | uVar1 = *(undefined4 *)(iVar11 + 8);\r\n 0x18a071565 | iVar2 = *(int32_t *)(iVar11 + 0xc);\r\n 0x18a07156e | puVar7 = (undefined8 *)func_0x000185f006b8(0x30);\r\n 0x18a071579 | func_0x000188da9ff0(puVar7);\r\n 0x18a071583 | var_88h = 0;\r\n 0x18a07158f | uVar9 = 4;\r\n 0x18a071594 | piVar8 = (int32_t *)0x190b49850;\r\n | do {\r\n 0x18a07159e | uVar10 = uVar9 >> 1;\r\n 0x18a0715a7 | uVar12 = ~uVar10 + uVar9;\r\n 0x18a0715b6 | uVar9 = uVar10;\r\n 0x18a0715b6 | if (piVar8[uVar10 * 2] < iVar2) {\r\n 0x18a0715ba | piVar8 = piVar8 + uVar10 * 2 + 2;\r\n 0x18a0715ba | uVar9 = uVar12;\r\n | }\r\n 0x18a0715c4 | } while (uVar9 != 0);\r\n 0x18a0715d0 | var_c0h = (int64_t)puVar7;\r\n 0x18a0715d5 | if ((piVar8 == (int32_t *)0x190b49870) || (iVar2 < *piVar8)) {\r\n 0x18a0715db | pcVar3 = (code *)swi(3);\r\n 0x18a0715db | (*pcVar3)();\r\n 0x18a0715db | return;\r\n | }\r\n 0x18a07145f | func_0x00018b5077c0(&var_88h, uVar5, piVar8[1]);\r\n 0x18a07146e | func_0x000181a25640(&var_a0h, uVar1);\r\n 0x18a071481 | if (*(char *)((int64_t)puVar7 + 0x17) < '\\0') {\r\n 0x18a071450 | func_0x0001841dcbe0(*puVar7, puVar7[2] & 0x7fffffffffffffff);\r\n | }\r\n 0x18a071488 | puVar7[2] = var_90h;\r\n 0x18a071492 | *(undefined4 *)puVar7 = (undefined4)var_a0h;\r\n 0x18a071492 | *(undefined4 *)((int64_t)puVar7 + 4) = var_a0h._4_4_;\r\n 0x18a071492 | *(undefined4 *)(puVar7 + 1) = uStack_98;\r\n 0x18a071492 | *(undefined4 *)((int64_t)puVar7 + 0xc) = uStack_94;\r\n 0x18a071497 | *(undefined4 *)(puVar7 + 3) = uVar5;\r\n 0x18a0714ab | uVar5 = func_0x00018b508a10(var_88h + 8, uVar13);\r\n 0x18a0714b0 | *(undefined4 *)((int64_t)puVar7 + 0x1c) = uVar5;\r\n 0x18a0714c5 | uVar5 = func_0x00018b508a10(var_88h + 8, uVar14);\r\n 0x18a0714ca | *(undefined4 *)(puVar7 + 4) = uVar5;\r\n 0x18a0714de | uVar6 = (*(code *)0x185f59da0)();\r\n 0x18a0714ea | uVar5 = func_0x00018b508a10(uVar6);\r\n 0x18a0714ea | iVar4 = var_88h;\r\n 0x18a0714ef | *(undefined4 *)((int64_t)puVar7 + 0x24) = uVar5;\r\n 0x18a0714f4 | *(int32_t *)(puVar7 + 5) = iVar2;\r\n 0x18a071501 | var_88h = 0;\r\n 0x18a071510 | if (iVar4 != 0) {\r\n 0x18a071517 | func_0x00018b5089a0(iVar4, 1);\r\n | }\r\n 0x18a07151c | func_0x00018a071a90(&var_b8h, &var_c0h);\r\n 0x18a071524 | iVar4 = var_c0h;\r\n 0x18a07152e | var_c0h = 0;\r\n 0x18a07153a | if (iVar4 != 0) {\r\n 0x18a07153f | func_0x000186c643b0(iVar4);\r\n 0x18a07154c | func_0x0001841dcbe0(iVar4, 0x30);\r\n | }\r\n 0x18a071551 | var_d8h = var_b8h;\r\n 0x18a071551 | iVar4 = var_e0h;\r\n 0x18a071551 | iVar11 = iVar11 + 0x10;\r\n 0x18a071558 | } while (iVar11 != 0x190871880);\r\n 0x18a0715f4 | var_b8h = 0;\r\n 0x18a071605 | uStack_d0 = (undefined4)var_b0h;\r\n 0x18a071605 | uStack_cc = var_b0h._4_4_;\r\n 0x18a071605 | uStack_c8 = (undefined4)var_a8h;\r\n 0x18a071605 | uStack_c4 = var_a8h._4_4_;\r\n 0x18a07160d | var_b0h = 0;\r\n 0x18a07160d | var_a8h = 0;\r\n 0x18a07161e | func_0x000189175e90(var_e0h);\r\n 0x18a071628 | var_a0h = (int64_t)&var_b8h;\r\n 0x18a071630 | func_0x000189176580();\r\n 0x18a071635 | piVar8 = *(int32_t **)iVar4;\r\n 0x18a07163b | if (piVar8 != (int32_t *)0x0) {\r\n 0x18a0715de | LOCK();\r\n 0x18a0715de | *piVar8 = *piVar8 + -1;\r\n 0x18a0715de | UNLOCK();\r\n 0x18a0715e1 | if (*piVar8 == 0) {\r\n 0x18a0715e7 | (*(code *)0x185f59da0)();\r\n | }\r\n | }\r\n 0x18a071652 | if (*(uint64_t *)0x191c71040 == (var_80h ^ (uint64_t)auStack_108)) {\r\n 0x18a071680 | return;\r\n | }\r\n 0x18a071689 | func_0x000185f05b40(var_80h ^ (uint64_t)auStack_108);\r\n 0x18a071691 | pcVar3 = (code *)swi(3);\r\n 0x18a071691 | (*pcVar3)();\r\n 0x18a071691 | return;\r\n |}\r\n[{\"offset\":6610686864,\"name\":\"fcn.18a071390\",\"size\":770,\"is-pure\":false,\"realsz\":768,\"noreturn\":false,\"stackframe\":264,\"calltype\":\"ms\",\"cost\":227,\"cc\":16,\"loops\":3,\"bits\":64,\"type\":\"fcn\",\"nbbs\":26,\"edges\":36,\"ebbs\":3,\"signature\":\"fcn.18a071390(int64_t arg3);\",\"minbound\":6610686864,\"maxbound\":6610687634,\"callrefs\":[{\"from\":6610686982,\"to\":6610686993,\"type\":\"CODE\"},{\"from\":6610687033,\"to\":6610687326,\"type\":\"CODE\"},{\"from\":6610687060,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6610687065,\"to\":6610687107,\"type\":\"CODE\"},{\"from\":6610687081,\"to\":6632273856,\"type\":\"CALL\"},{\"from\":6610687094,\"to\":6469867072,\"type\":\"CALL\"},{\"from\":6610687147,\"to\":6632278544,\"type\":\"CALL\"},{\"from\":6610687173,\"to\":6632278544,\"type\":\"CALL\"},{\"from\":6610687198,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6610687210,\"to\":6632278544,\"type\":\"CALL\"},{\"from\":6610687255,\"to\":6632278432,\"type\":\"CALL\"},{\"from\":6610687268,\"to\":6610688656,\"type\":\"CALL\"},{\"from\":6610687295,\"to\":6556107696,\"type\":\"CALL\"},{\"from\":6610687308,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6610687342,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6610687353,\"to\":6590996464,\"type\":\"CALL\"},{\"from\":6610687463,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6610687469,\"to\":6610687549,\"type\":\"CODE\"},{\"from\":6610687518,\"to\":6594977424,\"type\":\"CALL\"},{\"from\":6610687536,\"to\":6594979200,\"type\":\"CALL\"},{\"from\":6610687628,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6610686913,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6610686948,\"to\":6722721864,\"type\":\"DATA\"},{\"from\":6610686963,\"to\":6717634764,\"type\":\"DATA\"},{\"from\":6610686973,\"to\":6715022296,\"type\":\"DATA\"},{\"from\":6610686984,\"to\":6712509524,\"type\":\"DATA\"},{\"from\":6610686998,\"to\":6717354684,\"type\":\"DATA\"},{\"from\":6610687014,\"to\":6719739904,\"type\":\"DATA\"},{\"from\":6610687026,\"to\":6719740032,\"type\":\"DATA\"},{\"from\":6610687380,\"to\":6722721872,\"type\":\"DATA\"},{\"from\":6610687430,\"to\":6722721904,\"type\":\"DATA\"},{\"from\":6610687560,\"to\":6740709440,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6610686982,\"to\":6610686993,\"type\":\"CODE\"},{\"from\":6610687033,\"to\":6610687326,\"type\":\"CODE\"},{\"from\":6610687065,\"to\":6610687107,\"type\":\"CODE\"},{\"from\":6610687469,\"to\":6610687549,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":4,\"outdegree\":17,\"nlocals\":13,\"nargs\":1,\"stackvars\":[{\"name\":\"var_e0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-224}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_c0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-192}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_b0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-176}},{\"name\":\"var_a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-168}},{\"name\":\"var_a0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-160}},{\"name\":\"var_90h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-144}},{\"name\":\"var_88h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-136}},{\"name\":\"var_80h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-128}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}}],\"regvars\":[{\"name\":\"arg3\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r8\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"5147ms"}}