{"ok":true,"data":{"evidence_id":"ev_78572e5af7cb9b973cca6d364cef0fc8ccd22a71b737eb6c4000c8622a2f0e06","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x18383d0f0;pdgo @ 0x18383d0f0;afij @ 0x18383d0f0","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x18383d0f0;pdgo @ 0x18383d0f0;afij @ 0x18383d0f0","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":"    0x18383d0f0    |\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Removing arg arg_280h because it doesn't fit into ProtoModel\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_78h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_1d9h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_70h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_1c1h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_251h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_2a1h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_201h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_260h\r\n                   |\r\n    0x18383d0f0    |int64_t fcn.18383d0f0(int64_t arg1, int64_t arg2)\r\n                   |{\r\n                   |    code *pcVar1;\r\n                   |    undefined4 uVar2;\r\n                   |    undefined4 uVar3;\r\n                   |    undefined4 uVar4;\r\n                   |    int64_t iVar5;\r\n                   |    undefined8 uVar6;\r\n                   |    undefined4 *puVar7;\r\n                   |    undefined8 *puVar8;\r\n                   |    int64_t *piVar9;\r\n                   |    int64_t iVar10;\r\n                   |    int64_t iVar11;\r\n                   |    undefined4 *puVar12;\r\n                   |    uint64_t uVar13;\r\n                   |    int64_t iVar14;\r\n                   |    undefined8 *puVar15;\r\n                   |    undefined auStack_2e8 [16];\r\n                   |    int64_t var_2d8h;\r\n                   |    int64_t var_2d0h;\r\n                   |    int64_t var_2c8h;\r\n                   |    int64_t var_2c0h;\r\n                   |    int64_t var_2b8h;\r\n                   |    int64_t var_2b0h;\r\n                   |    undefined var_2a1h;\r\n                   |    int64_t var_2a0h;\r\n                   |    int64_t iStack_298;\r\n                   |    int64_t iStack_290;\r\n                   |    int64_t var_288h;\r\n                   |    undefined uStack_271;\r\n                   |    int64_t var_270h;\r\n                   |    int64_t var_268h;\r\n                   |    unkbyte7 var_260h;\r\n                   |    int64_t var_259h;\r\n                   |    undefined var_251h;\r\n                   |    int64_t var_250h;\r\n                   |    undefined8 uStack_248;\r\n                   |    undefined8 uStack_240;\r\n                   |    int64_t var_238h;\r\n                   |    int64_t iStack_230;\r\n                   |    int64_t var_228h;\r\n                   |    int64_t var_218h;\r\n                   |    undefined8 uStack_210;\r\n                   |    int64_t var_208h;\r\n                   |    int64_t var_1f8h;\r\n                   |    int64_t var_1f0h;\r\n                   |    int64_t var_1e8h;\r\n                   |    undefined var_1d9h;\r\n                   |    int64_t var_1d8h;\r\n                   |    int64_t var_1d0h;\r\n                   |    int64_t var_1c8h;\r\n                   |    int64_t var_a8h;\r\n                   |    int64_t var_a0h;\r\n                   |    int64_t var_98h;\r\n                   |    undefined8 uStack_90;\r\n                   |    int64_t var_88h;\r\n                   |    int64_t var_80h;\r\n                   |    undefined var_78h [7];\r\n                   |    int64_t var_71h;\r\n                   |    int64_t var_68h;\r\n                   |    int64_t var_60h;\r\n                   |    int64_t var_58h;\r\n                   |    \r\n    0x18383d112    |    var_60h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_2e8;\r\n    0x18383d121    |    if (*(char *)(arg1 + 0x30) == '\\0') {\r\n                   |code_r0x00018383d829:\r\n    0x18383d829    |    // WARNING: Does not return\r\n    0x18383d829    |        pcVar1 = (code *)invalidInstructionException();\r\n    0x18383d829    |        (*pcVar1)();\r\n                   |    }\r\n    0x18383d138    |    _var_78h = 0;\r\n    0x18383d138    |    stack0xffffffffffffff90 = 0;\r\n    0x18383d13c    |    var_88h = 0;\r\n    0x18383d13c    |    var_80h = 0;\r\n    0x18383d140    |    var_98h = 0;\r\n    0x18383d140    |    uStack_90 = 0;\r\n    0x18383d144    |    var_a8h = 0;\r\n    0x18383d144    |    var_a0h = 0;\r\n    0x18383d147    |    var_68h = 0;\r\n    0x18383d130    |    func_0x000183921080(&var_a8h, arg1 + 0x18);\r\n    0x18383d156    |    iVar11 = *(int64_t *)0x191dd6118;\r\n    0x18383d15f    |    if ((var_68h & 1U) == 0) {\r\n    0x18383d309    |        func_0x000188ac4df0(arg1);\r\n    0x18383d314    |        func_0x000188ac4b60(arg2, arg1);\r\n    0x18383d16f    |    } else if (*(int64_t *)0x191dd6118 == 0) {\r\n    0x18383d216    |        if ((*(int32_t *)0x191de85c0 < 2) && ((*(int32_t *)0x191cd6be0 != 0 || (*(int64_t *)0x191de85c8 != 0)))) {\r\n    0x18383d21f    |            func_0x00018030d390(&var_1d8h, 0x190c262e0, 0x24, 1);\r\n    0x18383d23b    |            func_0x000184dcd0d0(&var_1c8h, 0x190c26328, 0x33);\r\n    0x18383d21f    |            func_0x0001804b0120(&var_1d8h);\r\n                   |        }\r\n    0x18383d262    |        var_1f8h = func_0x000185f006b8(0x30);\r\n    0x18383d26f    |        var_1f0h = 0x24;\r\n    0x18383d289    |        var_1e8h = -0x7fffffffffffffd0;\r\n    0x18383d2b5    |        if (((undefined4 *)(var_1f8h + 0x24) < (uint64_t)var_1f8h) ||\r\n    0x18383d2af    |           ((undefined4 *)0x190c26360 < (undefined4 *)(var_1f8h + 0x24) &&\r\n    0x18383d2a8    |            (uint64_t)var_1f8h < (undefined4 *)0x190c26361)) goto code_r0x00018383d829;\r\n    0x18383d2c2    |        *(undefined8 *)(var_1f8h + 0x10) = 0x72206e6f6974617a;\r\n    0x18383d2c2    |        *(undefined8 *)(var_1f8h + 0x18) = 0x6620747365757165;\r\n    0x18383d2cd    |        *(undefined4 *)var_1f8h = 0x61206f4e;\r\n    0x18383d2cd    |        *(undefined4 *)(var_1f8h + 4) = 0x76697463;\r\n    0x18383d2cd    |        *(undefined4 *)(var_1f8h + 8) = 0x726f2065;\r\n    0x18383d2cd    |        *(undefined4 *)(var_1f8h + 0xc) = 0x696e6167;\r\n    0x18383d2d0    |        *(undefined4 *)(var_1f8h + 0x20) = 0x646e756f;\r\n    0x18383d2d7    |        *(undefined *)(var_1f8h + 0x24) = 0;\r\n    0x18383d2f1    |        func_0x000188ac4940(arg1, &var_1d9h, &var_1f8h);\r\n    0x18383d2ff    |        func_0x000188ac4bd0(arg1, arg2, &var_1d9h);\r\n    0x18383d17d    |    } else if ((var_a8h & 1U) == 0) {\r\n    0x18383d434    |        var_1d8h = 0;\r\n    0x18383d434    |        var_1d0h = 0;\r\n    0x18383d43c    |        var_1c8h = 0;\r\n    0x18383d450    |        if (var_71h._1_1_ == '\\x01') {\r\n    0x18383d45a    |            if ((int64_t)_var_78h < 0) {\r\n    0x18383d490    |                func_0x0001841dd0f0(&var_1d8h, var_88h, var_80h);\r\n                   |            } else {\r\n    0x18383d468    |                var_1c8h = _var_78h;\r\n    0x18383d473    |                var_1d8h = var_88h;\r\n    0x18383d473    |                var_1d0h = var_80h;\r\n                   |            }\r\n                   |        } else {\r\n    0x18383d4a4    |            var_1d8h = func_0x000185f006b8(0x20);\r\n    0x18383d4b1    |            var_1d0h = 0x1d;\r\n    0x18383d4cb    |            var_1c8h = -0x7fffffffffffffe0;\r\n    0x18383d4f7    |            if (((undefined4 *)(var_1d8h + 0x1d) < (uint64_t)var_1d8h) ||\r\n    0x18383d4f1    |               ((undefined4 *)0x190c26388 < (undefined4 *)(var_1d8h + 0x1d) &&\r\n    0x18383d4ea    |                (uint64_t)var_1d8h < (undefined4 *)0x190c26389)) goto code_r0x00018383d829;\r\n    0x18383d504    |            *(undefined8 *)(var_1d8h + 0xd) = 0x6f6974617a696e61;\r\n    0x18383d504    |            *(undefined8 *)(var_1d8h + 0x15) = 0x64656c696166206e;\r\n    0x18383d50f    |            *(undefined4 *)var_1d8h = 0x65747845;\r\n    0x18383d50f    |            *(undefined4 *)(var_1d8h + 4) = 0x6f69736e;\r\n    0x18383d50f    |            *(undefined4 *)(var_1d8h + 8) = 0x726f206e;\r\n    0x18383d50f    |            *(undefined4 *)(var_1d8h + 0xc) = 0x696e6167;\r\n    0x18383d512    |            *(undefined *)(var_1d8h + 0x1d) = 0;\r\n                   |        }\r\n    0x18383d51e    |        if (var_1c8h < 0) {\r\n    0x18383d530    |            func_0x0001841dd0f0(&var_238h, var_1d8h, var_1d0h);\r\n                   |        } else {\r\n    0x18383d547    |            var_228h = var_1c8h;\r\n    0x18383d557    |            var_238h = var_1d8h;\r\n    0x18383d557    |            iStack_230 = var_1d0h;\r\n                   |        }\r\n    0x18383d56a    |        var_218h = 0;\r\n    0x18383d56a    |        uStack_210 = 0;\r\n    0x18383d577    |        var_250h = 0;\r\n    0x18383d57a    |        uStack_248 = 0;\r\n    0x18383d57a    |        uStack_240 = 0;\r\n    0x18383d57f    |        var_208h = 0;\r\n    0x18383d590    |        func_0x0001835fe440(iVar11, 0, &var_250h, &var_238h);\r\n    0x18383d59a    |        var_270h._0_1_ = 0;\r\n    0x18383d5ac    |        func_0x000188cd29d0(arg1, &var_251h);\r\n    0x18383d5ba    |        func_0x000188ac4bd0(arg1, arg2, &var_251h);\r\n    0x18383d562    |        func_0x000183608e00(&var_218h);\r\n    0x18383d5cf    |        if (var_1c8h < 0) {\r\n    0x18383d5ef    |            func_0x0001841dcbe0(var_1d8h, var_1c8h & 0x7fffffffffffffff);\r\n                   |        }\r\n                   |    } else {\r\n    0x18383d186    |        var_1d8h = 0;\r\n    0x18383d186    |        var_1d0h = 0;\r\n    0x18383d18e    |        var_1c8h = 0;\r\n    0x18383d1ac    |        iVar14 = 0;\r\n    0x18383d1b1    |        iVar11 = 0;\r\n    0x18383d1b9    |        iVar5 = 0;\r\n    0x18383d1b9    |        iVar10 = *(int64_t *)0x191dd6118;\r\n    0x18383d1b9    |        if (var_98h * 0x30 != 0) {\r\n    0x18383d1bf    |            var_2c8h = *(int64_t *)0x191dd6118;\r\n    0x18383d1d6    |            puVar8 = (undefined8 *)(var_98h * 0x30 + var_a0h);\r\n    0x18383d1e3    |            iVar14 = 0;\r\n    0x18383d1f2    |            iVar11 = 0;\r\n    0x18383d1f7    |            puVar15 = (undefined8 *)var_a0h;\r\n    0x18383d1f7    |            var_2c0h = arg1;\r\n    0x18383d1f7    |            var_2b8h = arg2;\r\n                   |            do {\r\n    0x18383d63e    |                if (puVar15[4] != 0) {\r\n    0x18383d648    |                    if (iVar14 == var_1c8h) {\r\n    0x18383d83a    |                        puVar7 = (undefined4 *)func_0x00018383d860(&var_1d8h, puVar15, puVar15 + 3);\r\n                   |                    } else {\r\n    0x18383d656    |                        puVar12 = (undefined4 *)(iVar11 + iVar14 * 0x30);\r\n    0x18383d659    |                        if (puVar12 == (undefined4 *)0x0) goto code_r0x00018383d829;\r\n    0x18383d664    |                        if (*(char *)((int64_t)puVar15 + 0x17) < '\\0') {\r\n    0x18383d603    |                            func_0x0001841dd0f0(puVar12, *puVar15, puVar15[1]);\r\n                   |                        } else {\r\n    0x18383d66a    |                            *(undefined8 *)(puVar12 + 4) = puVar15[2];\r\n    0x18383d66e    |                            uVar2 = *(undefined4 *)((int64_t)puVar15 + 4);\r\n    0x18383d66e    |                            uVar3 = *(undefined4 *)(puVar15 + 1);\r\n    0x18383d66e    |                            uVar4 = *(undefined4 *)((int64_t)puVar15 + 0xc);\r\n    0x18383d672    |                            *puVar12 = *(undefined4 *)puVar15;\r\n    0x18383d672    |                            puVar12[1] = uVar2;\r\n    0x18383d672    |                            puVar12[2] = uVar3;\r\n    0x18383d672    |                            puVar12[3] = uVar4;\r\n                   |                        }\r\n    0x18383d676    |                        puVar7 = puVar12 + 0xc;\r\n    0x18383d67a    |                        *(undefined8 *)(puVar12 + 6) = 0;\r\n    0x18383d67a    |                        *(undefined8 *)(puVar12 + 8) = 0;\r\n    0x18383d67e    |                        *(undefined8 *)(puVar12 + 10) = 0;\r\n    0x18383d686    |                        uVar13 = puVar15[4];\r\n    0x18383d68d    |                        if (uVar13 != 0) {\r\n    0x18383d696    |                            if (uVar13 >> 0x3e != 0) goto code_r0x00018383d857;\r\n    0x18383d69f    |                            var_2b0h = puVar15[3];\r\n    0x18383d6a8    |                            iVar11 = uVar13 * 4;\r\n    0x18383d6b3    |                            uVar6 = func_0x000185f006b8(iVar11);\r\n    0x18383d6b8    |                            *(undefined8 *)(puVar12 + 6) = uVar6;\r\n    0x18383d6bc    |                            *(undefined8 *)(puVar12 + 8) = 0;\r\n    0x18383d6c4    |                            *(uint64_t *)(puVar12 + 10) = uVar13;\r\n    0x18383d6d3    |                            func_0x000185f5a940(uVar6, var_2b0h, iVar11);\r\n    0x18383d6dc    |                            *(int64_t *)(puVar12 + 8) = iVar11 >> 2;\r\n                   |                        }\r\n                   |                    }\r\n    0x18383d6ed    |                    iVar11 = var_1d8h;\r\n    0x18383d709    |                    iVar14 = ((int64_t)puVar7 - var_1d8h >> 4) * -0x5555555555555555;\r\n    0x18383d718    |                    var_1d0h = iVar14;\r\n    0x18383d718    |                    if (puVar7 == (undefined4 *)var_1d8h) goto code_r0x00018383d829;\r\n    0x18383d71e    |                    var_218h = 0;\r\n    0x18383d71e    |                    uStack_210 = 0;\r\n    0x18383d726    |                    var_208h = 0;\r\n    0x18383d737    |                    if (puVar15[4] != 0) {\r\n    0x18383d1e5    |                        func_0x000185486710(&var_270h, *(undefined4 *)puVar15[3]);\r\n    0x18383d75d    |                        piVar9 = &var_270h;\r\n    0x18383d75d    |                        iVar5 = (int64_t)(char)var_259h;\r\n    0x18383d75d    |                        if ((int64_t)(char)var_259h < 0) {\r\n    0x18383d767    |                            piVar9 = (int64_t *)CONCAT71(var_270h._1_7_, (undefined)var_270h);\r\n    0x18383d767    |                            iVar5 = var_268h;\r\n                   |                        }\r\n    0x18383d1ea    |                        func_0x000184212ca0(&var_218h, piVar9, iVar5);\r\n    0x18383d77c    |                        if ((char)var_259h < '\\0') {\r\n    0x18383d789    |                            func_0x0001841dcbe0(CONCAT71(var_270h._1_7_, (undefined)var_270h), \r\n    0x18383d77e    |                                                CONCAT17((char)var_259h, var_260h) & 0x7fffffffffffffff);\r\n                   |                        }\r\n    0x18383d798    |                        if (1 < (uint64_t)puVar15[4]) {\r\n    0x18383d79e    |                            uVar13 = 1;\r\n                   |                            do {\r\n    0x18383d1ea    |                                func_0x000184212ca0(&var_218h, 0x19012a0b4, 2);\r\n    0x18383d7e0    |                                if ((uint64_t)puVar15[4] <= uVar13) goto code_r0x00018383d829;\r\n    0x18383d1e5    |                                func_0x000185486710(&var_270h, *(undefined4 *)(puVar15[3] + uVar13 * 4));\r\n    0x18383d803    |                                piVar9 = &var_270h;\r\n    0x18383d803    |                                iVar5 = (int64_t)(char)var_259h;\r\n    0x18383d803    |                                if ((int64_t)(char)var_259h < 0) {\r\n    0x18383d80d    |                                    piVar9 = (int64_t *)CONCAT71(var_270h._1_7_, (undefined)var_270h);\r\n    0x18383d80d    |                                    iVar5 = var_268h;\r\n                   |                                }\r\n    0x18383d1ea    |                                func_0x000184212ca0(&var_218h, piVar9, iVar5);\r\n    0x18383d822    |                                if ((char)var_259h < '\\0') {\r\n    0x18383d7b0    |                                    func_0x0001841dcbe0(CONCAT71(var_270h._1_7_, (undefined)var_270h), \r\n    0x18383d7a5    |                                                        CONCAT17((char)var_259h, var_260h) & 0x7fffffffffffffff);\r\n                   |                                }\r\n    0x18383d7ba    |                                uVar13 = uVar13 + 1;\r\n    0x18383d7c1    |                            } while (uVar13 < (uint64_t)puVar15[4]);\r\n                   |                        }\r\n    0x18383d612    |                        if (var_208h < 0) {\r\n    0x18383d627    |                            func_0x0001841dcbe0(var_218h, var_208h & 0x7fffffffffffffff);\r\n                   |                        }\r\n                   |                    }\r\n                   |                }\r\n    0x18383d62c    |                puVar15 = puVar15 + 6;\r\n    0x18383d633    |                iVar5 = var_1c8h;\r\n    0x18383d633    |                iVar10 = var_2c8h;\r\n    0x18383d633    |                arg2 = var_2b8h;\r\n    0x18383d633    |                arg1 = var_2c0h;\r\n    0x18383d633    |            } while (puVar15 != puVar8);\r\n                   |        }\r\n    0x18383d3c6    |        uStack_271 = 0;\r\n    0x18383d3ca    |        var_288h._0_1_ = 0;\r\n    0x18383d3d5    |        var_1d8h = 0;\r\n    0x18383d3e4    |        var_1d0h = 0;\r\n    0x18383d3e4    |        var_1c8h = 0;\r\n    0x18383d3f5    |        var_2a0h = iVar11;\r\n    0x18383d3f5    |        iStack_298 = iVar14;\r\n    0x18383d3f5    |        iStack_290 = iVar5;\r\n    0x18383d3f5    |        func_0x0001835fe440(iVar10, 1);\r\n    0x18383d402    |        var_218h = CONCAT71(var_218h._1_7_, 1);\r\n    0x18383d411    |        func_0x000188cd29d0(arg1, &var_2a1h);\r\n    0x18383d41f    |        func_0x000188ac4bd0(arg1, arg2, &var_2a1h);\r\n    0x18383d3cd    |        func_0x000183608e00(&var_1d8h);\r\n                   |    }\r\n    0x18383d321    |    if ((char)var_68h == '\\x01') {\r\n    0x18383d335    |        if ((var_71h._1_1_ == '\\x01') && ((int64_t)_var_78h < 0)) {\r\n    0x18383d351    |            func_0x0001841dcbe0(var_88h, _var_78h & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x18383d356    |        var_1d8h = (int64_t)&var_a0h;\r\n    0x18383d369    |        func_0x000183921950();\r\n                   |    }\r\n    0x18383d383    |    if (*(uint64_t *)0x191c71040 == (var_60h ^ (uint64_t)auStack_2e8)) {\r\n    0x18383d3a7    |        return arg2;\r\n                   |    }\r\n    0x18383d84f    |    func_0x000185f05b40(var_60h ^ (uint64_t)auStack_2e8);\r\n                   |code_r0x00018383d857:\r\n    0x18383d857    |    func_0x00018628dc40();\r\n    0x18383d85c    |    pcVar1 = (code *)swi(3);\r\n    0x18383d85c    |    iVar11 = (*pcVar1)();\r\n    0x18383d85c    |    return iVar11;\r\n                   |}\r\n[{\"offset\":6501421296,\"name\":\"fcn.18383d0f0\",\"size\":1901,\"is-pure\":false,\"realsz\":1901,\"noreturn\":false,\"stackframe\":744,\"calltype\":\"ms\",\"cost\":512,\"cc\":40,\"loops\":12,\"bits\":64,\"type\":\"fcn\",\"nbbs\":67,\"edges\":101,\"ebbs\":3,\"signature\":\"fcn.18383d0f0(int64_t arg1, int64_t arg2, int64_t arg_280h);\",\"minbound\":6501421296,\"maxbound\":6501423197,\"callrefs\":[{\"from\":6501421398,\"to\":6502355072,\"type\":\"CALL\"},{\"from\":6501421559,\"to\":6501422649,\"type\":\"CODE\"},{\"from\":6501421622,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6501421648,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501421656,\"to\":6447366432,\"type\":\"CALL\"},{\"from\":6501421666,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6501421809,\"to\":6587959616,\"type\":\"CALL\"},{\"from\":6501421823,\"to\":6587960272,\"type\":\"CALL\"},{\"from\":6501421828,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501421833,\"to\":6587960816,\"type\":\"CALL\"},{\"from\":6501421844,\"to\":6587960160,\"type\":\"CALL\"},{\"from\":6501421905,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501421929,\"to\":6502357328,\"type\":\"CALL\"},{\"from\":6501422069,\"to\":6499066944,\"type\":\"CALL\"},{\"from\":6501422097,\"to\":6590114256,\"type\":\"CALL\"},{\"from\":6501422111,\"to\":6587960272,\"type\":\"CALL\"},{\"from\":6501422119,\"to\":6499110400,\"type\":\"CALL\"},{\"from\":6501422124,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422203,\"to\":6501422358,\"type\":\"CODE\"},{\"from\":6501422232,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6501422237,\"to\":6501422358,\"type\":\"CODE\"},{\"from\":6501422244,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6501422392,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6501422397,\"to\":6501422431,\"type\":\"CODE\"},{\"from\":6501422480,\"to\":6499066944,\"type\":\"CALL\"},{\"from\":6501422508,\"to\":6590114256,\"type\":\"CALL\"},{\"from\":6501422522,\"to\":6587960272,\"type\":\"CALL\"},{\"from\":6501422530,\"to\":6499110400,\"type\":\"CALL\"},{\"from\":6501422575,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501422580,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422595,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6501422600,\"to\":6501422710,\"type\":\"CODE\"},{\"from\":6501422631,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501422771,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6501422803,\"to\":6542436672,\"type\":\"CALL\"},{\"from\":6501422921,\"to\":6531082000,\"type\":\"CALL\"},{\"from\":6501422959,\"to\":6511733920,\"type\":\"CALL\"},{\"from\":6501422990,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501423011,\"to\":6501423047,\"type\":\"CODE\"},{\"from\":6501423029,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501423063,\"to\":6511733920,\"type\":\"CALL\"},{\"from\":6501423087,\"to\":6531082000,\"type\":\"CALL\"},{\"from\":6501423125,\"to\":6511733920,\"type\":\"CALL\"},{\"from\":6501423140,\"to\":6501423013,\"type\":\"CODE\"},{\"from\":6501423162,\"to\":6501423200,\"type\":\"CALL\"},{\"from\":6501423170,\"to\":6501422829,\"type\":\"CODE\"},{\"from\":6501423186,\"to\":6542089024,\"type\":\"CALL\"},{\"from\":6501423191,\"to\":6545792064,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6501421323,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6501421413,\"to\":6742171928,\"type\":\"DATA\"},{\"from\":6501421564,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6501421573,\"to\":6741126112,\"type\":\"DATA\"},{\"from\":6501421582,\"to\":6742246856,\"type\":\"DATA\"},{\"from\":6501421592,\"to\":6723625696,\"type\":\"DATA\"},{\"from\":6501421635,\"to\":6723625768,\"type\":\"DATA\"},{\"from\":6501421726,\"to\":6723625824,\"type\":\"DATA\"},{\"from\":6501421755,\"to\":6723625840,\"type\":\"DATA\"},{\"from\":6501421766,\"to\":6723625824,\"type\":\"DATA\"},{\"from\":6501421945,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6501422304,\"to\":6723625864,\"type\":\"DATA\"},{\"from\":6501422333,\"to\":6723625877,\"type\":\"DATA\"},{\"from\":6501422344,\"to\":6723625864,\"type\":\"DATA\"},{\"from\":6501423056,\"to\":6712107188,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6501421559,\"to\":6501422649,\"type\":\"CODE\"},{\"from\":6501421828,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422124,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422203,\"to\":6501422358,\"type\":\"CODE\"},{\"from\":6501422237,\"to\":6501422358,\"type\":\"CODE\"},{\"from\":6501422397,\"to\":6501422431,\"type\":\"CODE\"},{\"from\":6501422580,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422600,\"to\":6501422710,\"type\":\"CODE\"},{\"from\":6501423011,\"to\":6501423047,\"type\":\"CODE\"},{\"from\":6501423140,\"to\":6501423013,\"type\":\"CODE\"},{\"from\":6501423170,\"to\":6501422829,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":11,\"outdegree\":37,\"nlocals\":39,\"nargs\":3,\"stackvars\":[{\"name\":\"var_2d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-728}},{\"name\":\"var_2d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-720}},{\"name\":\"var_2c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-712}},{\"name\":\"var_2c0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-704}},{\"name\":\"var_2b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-696}},{\"name\":\"var_2b0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-688}},{\"name\":\"var_2a1h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-673}},{\"name\":\"var_2a0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-672}},{\"name\":\"var_288h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-648}},{\"name\":\"var_270h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-624}},{\"name\":\"var_268h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-616}},{\"name\":\"var_260h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-608}},{\"name\":\"var_259h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-601}},{\"name\":\"var_251h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-593}},{\"name\":\"var_250h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-592}},{\"name\":\"var_238h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-568}},{\"name\":\"var_228h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-552}},{\"name\":\"var_218h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-536}},{\"name\":\"var_208h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-520}},{\"name\":\"var_201h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-513}},{\"name\":\"var_1f8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-504}},{\"name\":\"var_1f0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-496}},{\"name\":\"var_1e8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-488}},{\"name\":\"var_1d9h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-473}},{\"name\":\"var_1d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-472}},{\"name\":\"var_1d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-464}},{\"name\":\"var_1c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-456}},{\"name\":\"var_1c1h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-449}},{\"name\":\"var_a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-168}},{\"name\":\"var_a0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-160}},{\"name\":\"var_98h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-152}},{\"name\":\"var_88h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-136}},{\"name\":\"var_80h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-128}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_71h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-113}},{\"name\":\"var_70h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-112}},{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_60h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-96}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}},{\"name\":\"arg_280h\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":640}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":"    0x18383d0f0    |\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Removing arg arg_280h because it doesn't fit into ProtoModel\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_78h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_1d9h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_70h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_1c1h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_251h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_2a1h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_201h\r\n    0x18383d0f0    |// WARNING: [rz-ghidra] Detected overlap for variable var_260h\r\n                   |\r\n    0x18383d0f0    |int64_t fcn.18383d0f0(int64_t arg1, int64_t arg2)\r\n                   |{\r\n                   |    code *pcVar1;\r\n                   |    undefined4 uVar2;\r\n                   |    undefined4 uVar3;\r\n                   |    undefined4 uVar4;\r\n                   |    int64_t iVar5;\r\n                   |    undefined8 uVar6;\r\n                   |    undefined4 *puVar7;\r\n                   |    undefined8 *puVar8;\r\n                   |    int64_t *piVar9;\r\n                   |    int64_t iVar10;\r\n                   |    int64_t iVar11;\r\n                   |    undefined4 *puVar12;\r\n                   |    uint64_t uVar13;\r\n                   |    int64_t iVar14;\r\n                   |    undefined8 *puVar15;\r\n                   |    undefined auStack_2e8 [16];\r\n                   |    int64_t var_2d8h;\r\n                   |    int64_t var_2d0h;\r\n                   |    int64_t var_2c8h;\r\n                   |    int64_t var_2c0h;\r\n                   |    int64_t var_2b8h;\r\n                   |    int64_t var_2b0h;\r\n                   |    undefined var_2a1h;\r\n                   |    int64_t var_2a0h;\r\n                   |    int64_t iStack_298;\r\n                   |    int64_t iStack_290;\r\n                   |    int64_t var_288h;\r\n                   |    undefined uStack_271;\r\n                   |    int64_t var_270h;\r\n                   |    int64_t var_268h;\r\n                   |    unkbyte7 var_260h;\r\n                   |    int64_t var_259h;\r\n                   |    undefined var_251h;\r\n                   |    int64_t var_250h;\r\n                   |    undefined8 uStack_248;\r\n                   |    undefined8 uStack_240;\r\n                   |    int64_t var_238h;\r\n                   |    int64_t iStack_230;\r\n                   |    int64_t var_228h;\r\n                   |    int64_t var_218h;\r\n                   |    undefined8 uStack_210;\r\n                   |    int64_t var_208h;\r\n                   |    int64_t var_1f8h;\r\n                   |    int64_t var_1f0h;\r\n                   |    int64_t var_1e8h;\r\n                   |    undefined var_1d9h;\r\n                   |    int64_t var_1d8h;\r\n                   |    int64_t var_1d0h;\r\n                   |    int64_t var_1c8h;\r\n                   |    int64_t var_a8h;\r\n                   |    int64_t var_a0h;\r\n                   |    int64_t var_98h;\r\n                   |    undefined8 uStack_90;\r\n                   |    int64_t var_88h;\r\n                   |    int64_t var_80h;\r\n                   |    undefined var_78h [7];\r\n                   |    int64_t var_71h;\r\n                   |    int64_t var_68h;\r\n                   |    int64_t var_60h;\r\n                   |    int64_t var_58h;\r\n                   |    \r\n    0x18383d112    |    var_60h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_2e8;\r\n    0x18383d121    |    if (*(char *)(arg1 + 0x30) == '\\0') {\r\n                   |code_r0x00018383d829:\r\n    0x18383d829    |    // WARNING: Does not return\r\n    0x18383d829    |        pcVar1 = (code *)invalidInstructionException();\r\n    0x18383d829    |        (*pcVar1)();\r\n                   |    }\r\n    0x18383d138    |    _var_78h = 0;\r\n    0x18383d138    |    stack0xffffffffffffff90 = 0;\r\n    0x18383d13c    |    var_88h = 0;\r\n    0x18383d13c    |    var_80h = 0;\r\n    0x18383d140    |    var_98h = 0;\r\n    0x18383d140    |    uStack_90 = 0;\r\n    0x18383d144    |    var_a8h = 0;\r\n    0x18383d144    |    var_a0h = 0;\r\n    0x18383d147    |    var_68h = 0;\r\n    0x18383d130    |    func_0x000183921080(&var_a8h, arg1 + 0x18);\r\n    0x18383d156    |    iVar11 = *(int64_t *)0x191dd6118;\r\n    0x18383d15f    |    if ((var_68h & 1U) == 0) {\r\n    0x18383d309    |        func_0x000188ac4df0(arg1);\r\n    0x18383d314    |        func_0x000188ac4b60(arg2, arg1);\r\n    0x18383d16f    |    } else if (*(int64_t *)0x191dd6118 == 0) {\r\n    0x18383d216    |        if ((*(int32_t *)0x191de85c0 < 2) && ((*(int32_t *)0x191cd6be0 != 0 || (*(int64_t *)0x191de85c8 != 0)))) {\r\n    0x18383d21f    |            func_0x00018030d390(&var_1d8h, 0x190c262e0, 0x24, 1);\r\n    0x18383d23b    |            func_0x000184dcd0d0(&var_1c8h, 0x190c26328, 0x33);\r\n    0x18383d21f    |            func_0x0001804b0120(&var_1d8h);\r\n                   |        }\r\n    0x18383d262    |        var_1f8h = func_0x000185f006b8(0x30);\r\n    0x18383d26f    |        var_1f0h = 0x24;\r\n    0x18383d289    |        var_1e8h = -0x7fffffffffffffd0;\r\n    0x18383d2b5    |        if (((undefined4 *)(var_1f8h + 0x24) < (uint64_t)var_1f8h) ||\r\n    0x18383d2af    |           ((undefined4 *)0x190c26360 < (undefined4 *)(var_1f8h + 0x24) &&\r\n    0x18383d2a8    |            (uint64_t)var_1f8h < (undefined4 *)0x190c26361)) goto code_r0x00018383d829;\r\n    0x18383d2c2    |        *(undefined8 *)(var_1f8h + 0x10) = 0x72206e6f6974617a;\r\n    0x18383d2c2    |        *(undefined8 *)(var_1f8h + 0x18) = 0x6620747365757165;\r\n    0x18383d2cd    |        *(undefined4 *)var_1f8h = 0x61206f4e;\r\n    0x18383d2cd    |        *(undefined4 *)(var_1f8h + 4) = 0x76697463;\r\n    0x18383d2cd    |        *(undefined4 *)(var_1f8h + 8) = 0x726f2065;\r\n    0x18383d2cd    |        *(undefined4 *)(var_1f8h + 0xc) = 0x696e6167;\r\n    0x18383d2d0    |        *(undefined4 *)(var_1f8h + 0x20) = 0x646e756f;\r\n    0x18383d2d7    |        *(undefined *)(var_1f8h + 0x24) = 0;\r\n    0x18383d2f1    |        func_0x000188ac4940(arg1, &var_1d9h, &var_1f8h);\r\n    0x18383d2ff    |        func_0x000188ac4bd0(arg1, arg2, &var_1d9h);\r\n    0x18383d17d    |    } else if ((var_a8h & 1U) == 0) {\r\n    0x18383d434    |        var_1d8h = 0;\r\n    0x18383d434    |        var_1d0h = 0;\r\n    0x18383d43c    |        var_1c8h = 0;\r\n    0x18383d450    |        if (var_71h._1_1_ == '\\x01') {\r\n    0x18383d45a    |            if ((int64_t)_var_78h < 0) {\r\n    0x18383d490    |                func_0x0001841dd0f0(&var_1d8h, var_88h, var_80h);\r\n                   |            } else {\r\n    0x18383d468    |                var_1c8h = _var_78h;\r\n    0x18383d473    |                var_1d8h = var_88h;\r\n    0x18383d473    |                var_1d0h = var_80h;\r\n                   |            }\r\n                   |        } else {\r\n    0x18383d4a4    |            var_1d8h = func_0x000185f006b8(0x20);\r\n    0x18383d4b1    |            var_1d0h = 0x1d;\r\n    0x18383d4cb    |            var_1c8h = -0x7fffffffffffffe0;\r\n    0x18383d4f7    |            if (((undefined4 *)(var_1d8h + 0x1d) < (uint64_t)var_1d8h) ||\r\n    0x18383d4f1    |               ((undefined4 *)0x190c26388 < (undefined4 *)(var_1d8h + 0x1d) &&\r\n    0x18383d4ea    |                (uint64_t)var_1d8h < (undefined4 *)0x190c26389)) goto code_r0x00018383d829;\r\n    0x18383d504    |            *(undefined8 *)(var_1d8h + 0xd) = 0x6f6974617a696e61;\r\n    0x18383d504    |            *(undefined8 *)(var_1d8h + 0x15) = 0x64656c696166206e;\r\n    0x18383d50f    |            *(undefined4 *)var_1d8h = 0x65747845;\r\n    0x18383d50f    |            *(undefined4 *)(var_1d8h + 4) = 0x6f69736e;\r\n    0x18383d50f    |            *(undefined4 *)(var_1d8h + 8) = 0x726f206e;\r\n    0x18383d50f    |            *(undefined4 *)(var_1d8h + 0xc) = 0x696e6167;\r\n    0x18383d512    |            *(undefined *)(var_1d8h + 0x1d) = 0;\r\n                   |        }\r\n    0x18383d51e    |        if (var_1c8h < 0) {\r\n    0x18383d530    |            func_0x0001841dd0f0(&var_238h, var_1d8h, var_1d0h);\r\n                   |        } else {\r\n    0x18383d547    |            var_228h = var_1c8h;\r\n    0x18383d557    |            var_238h = var_1d8h;\r\n    0x18383d557    |            iStack_230 = var_1d0h;\r\n                   |        }\r\n    0x18383d56a    |        var_218h = 0;\r\n    0x18383d56a    |        uStack_210 = 0;\r\n    0x18383d577    |        var_250h = 0;\r\n    0x18383d57a    |        uStack_248 = 0;\r\n    0x18383d57a    |        uStack_240 = 0;\r\n    0x18383d57f    |        var_208h = 0;\r\n    0x18383d590    |        func_0x0001835fe440(iVar11, 0, &var_250h, &var_238h);\r\n    0x18383d59a    |        var_270h._0_1_ = 0;\r\n    0x18383d5ac    |        func_0x000188cd29d0(arg1, &var_251h);\r\n    0x18383d5ba    |        func_0x000188ac4bd0(arg1, arg2, &var_251h);\r\n    0x18383d562    |        func_0x000183608e00(&var_218h);\r\n    0x18383d5cf    |        if (var_1c8h < 0) {\r\n    0x18383d5ef    |            func_0x0001841dcbe0(var_1d8h, var_1c8h & 0x7fffffffffffffff);\r\n                   |        }\r\n                   |    } else {\r\n    0x18383d186    |        var_1d8h = 0;\r\n    0x18383d186    |        var_1d0h = 0;\r\n    0x18383d18e    |        var_1c8h = 0;\r\n    0x18383d1ac    |        iVar14 = 0;\r\n    0x18383d1b1    |        iVar11 = 0;\r\n    0x18383d1b9    |        iVar5 = 0;\r\n    0x18383d1b9    |        iVar10 = *(int64_t *)0x191dd6118;\r\n    0x18383d1b9    |        if (var_98h * 0x30 != 0) {\r\n    0x18383d1bf    |            var_2c8h = *(int64_t *)0x191dd6118;\r\n    0x18383d1d6    |            puVar8 = (undefined8 *)(var_98h * 0x30 + var_a0h);\r\n    0x18383d1e3    |            iVar14 = 0;\r\n    0x18383d1f2    |            iVar11 = 0;\r\n    0x18383d1f7    |            puVar15 = (undefined8 *)var_a0h;\r\n    0x18383d1f7    |            var_2c0h = arg1;\r\n    0x18383d1f7    |            var_2b8h = arg2;\r\n                   |            do {\r\n    0x18383d63e    |                if (puVar15[4] != 0) {\r\n    0x18383d648    |                    if (iVar14 == var_1c8h) {\r\n    0x18383d83a    |                        puVar7 = (undefined4 *)func_0x00018383d860(&var_1d8h, puVar15, puVar15 + 3);\r\n                   |                    } else {\r\n    0x18383d656    |                        puVar12 = (undefined4 *)(iVar11 + iVar14 * 0x30);\r\n    0x18383d659    |                        if (puVar12 == (undefined4 *)0x0) goto code_r0x00018383d829;\r\n    0x18383d664    |                        if (*(char *)((int64_t)puVar15 + 0x17) < '\\0') {\r\n    0x18383d603    |                            func_0x0001841dd0f0(puVar12, *puVar15, puVar15[1]);\r\n                   |                        } else {\r\n    0x18383d66a    |                            *(undefined8 *)(puVar12 + 4) = puVar15[2];\r\n    0x18383d66e    |                            uVar2 = *(undefined4 *)((int64_t)puVar15 + 4);\r\n    0x18383d66e    |                            uVar3 = *(undefined4 *)(puVar15 + 1);\r\n    0x18383d66e    |                            uVar4 = *(undefined4 *)((int64_t)puVar15 + 0xc);\r\n    0x18383d672    |                            *puVar12 = *(undefined4 *)puVar15;\r\n    0x18383d672    |                            puVar12[1] = uVar2;\r\n    0x18383d672    |                            puVar12[2] = uVar3;\r\n    0x18383d672    |                            puVar12[3] = uVar4;\r\n                   |                        }\r\n    0x18383d676    |                        puVar7 = puVar12 + 0xc;\r\n    0x18383d67a    |                        *(undefined8 *)(puVar12 + 6) = 0;\r\n    0x18383d67a    |                        *(undefined8 *)(puVar12 + 8) = 0;\r\n    0x18383d67e    |                        *(undefined8 *)(puVar12 + 10) = 0;\r\n    0x18383d686    |                        uVar13 = puVar15[4];\r\n    0x18383d68d    |                        if (uVar13 != 0) {\r\n    0x18383d696    |                            if (uVar13 >> 0x3e != 0) goto code_r0x00018383d857;\r\n    0x18383d69f    |                            var_2b0h = puVar15[3];\r\n    0x18383d6a8    |                            iVar11 = uVar13 * 4;\r\n    0x18383d6b3    |                            uVar6 = func_0x000185f006b8(iVar11);\r\n    0x18383d6b8    |                            *(undefined8 *)(puVar12 + 6) = uVar6;\r\n    0x18383d6bc    |                            *(undefined8 *)(puVar12 + 8) = 0;\r\n    0x18383d6c4    |                            *(uint64_t *)(puVar12 + 10) = uVar13;\r\n    0x18383d6d3    |                            func_0x000185f5a940(uVar6, var_2b0h, iVar11);\r\n    0x18383d6dc    |                            *(int64_t *)(puVar12 + 8) = iVar11 >> 2;\r\n                   |                        }\r\n                   |                    }\r\n    0x18383d6ed    |                    iVar11 = var_1d8h;\r\n    0x18383d709    |                    iVar14 = ((int64_t)puVar7 - var_1d8h >> 4) * -0x5555555555555555;\r\n    0x18383d718    |                    var_1d0h = iVar14;\r\n    0x18383d718    |                    if (puVar7 == (undefined4 *)var_1d8h) goto code_r0x00018383d829;\r\n    0x18383d71e    |                    var_218h = 0;\r\n    0x18383d71e    |                    uStack_210 = 0;\r\n    0x18383d726    |                    var_208h = 0;\r\n    0x18383d737    |                    if (puVar15[4] != 0) {\r\n    0x18383d1e5    |                        func_0x000185486710(&var_270h, *(undefined4 *)puVar15[3]);\r\n    0x18383d75d    |                        piVar9 = &var_270h;\r\n    0x18383d75d    |                        iVar5 = (int64_t)(char)var_259h;\r\n    0x18383d75d    |                        if ((int64_t)(char)var_259h < 0) {\r\n    0x18383d767    |                            piVar9 = (int64_t *)CONCAT71(var_270h._1_7_, (undefined)var_270h);\r\n    0x18383d767    |                            iVar5 = var_268h;\r\n                   |                        }\r\n    0x18383d1ea    |                        func_0x000184212ca0(&var_218h, piVar9, iVar5);\r\n    0x18383d77c    |                        if ((char)var_259h < '\\0') {\r\n    0x18383d789    |                            func_0x0001841dcbe0(CONCAT71(var_270h._1_7_, (undefined)var_270h), \r\n    0x18383d77e    |                                                CONCAT17((char)var_259h, var_260h) & 0x7fffffffffffffff);\r\n                   |                        }\r\n    0x18383d798    |                        if (1 < (uint64_t)puVar15[4]) {\r\n    0x18383d79e    |                            uVar13 = 1;\r\n                   |                            do {\r\n    0x18383d1ea    |                                func_0x000184212ca0(&var_218h, 0x19012a0b4, 2);\r\n    0x18383d7e0    |                                if ((uint64_t)puVar15[4] <= uVar13) goto code_r0x00018383d829;\r\n    0x18383d1e5    |                                func_0x000185486710(&var_270h, *(undefined4 *)(puVar15[3] + uVar13 * 4));\r\n    0x18383d803    |                                piVar9 = &var_270h;\r\n    0x18383d803    |                                iVar5 = (int64_t)(char)var_259h;\r\n    0x18383d803    |                                if ((int64_t)(char)var_259h < 0) {\r\n    0x18383d80d    |                                    piVar9 = (int64_t *)CONCAT71(var_270h._1_7_, (undefined)var_270h);\r\n    0x18383d80d    |                                    iVar5 = var_268h;\r\n                   |                                }\r\n    0x18383d1ea    |                                func_0x000184212ca0(&var_218h, piVar9, iVar5);\r\n    0x18383d822    |                                if ((char)var_259h < '\\0') {\r\n    0x18383d7b0    |                                    func_0x0001841dcbe0(CONCAT71(var_270h._1_7_, (undefined)var_270h), \r\n    0x18383d7a5    |                                                        CONCAT17((char)var_259h, var_260h) & 0x7fffffffffffffff);\r\n                   |                                }\r\n    0x18383d7ba    |                                uVar13 = uVar13 + 1;\r\n    0x18383d7c1    |                            } while (uVar13 < (uint64_t)puVar15[4]);\r\n                   |                        }\r\n    0x18383d612    |                        if (var_208h < 0) {\r\n    0x18383d627    |                            func_0x0001841dcbe0(var_218h, var_208h & 0x7fffffffffffffff);\r\n                   |                        }\r\n                   |                    }\r\n                   |                }\r\n    0x18383d62c    |                puVar15 = puVar15 + 6;\r\n    0x18383d633    |                iVar5 = var_1c8h;\r\n    0x18383d633    |                iVar10 = var_2c8h;\r\n    0x18383d633    |                arg2 = var_2b8h;\r\n    0x18383d633    |                arg1 = var_2c0h;\r\n    0x18383d633    |            } while (puVar15 != puVar8);\r\n                   |        }\r\n    0x18383d3c6    |        uStack_271 = 0;\r\n    0x18383d3ca    |        var_288h._0_1_ = 0;\r\n    0x18383d3d5    |        var_1d8h = 0;\r\n    0x18383d3e4    |        var_1d0h = 0;\r\n    0x18383d3e4    |        var_1c8h = 0;\r\n    0x18383d3f5    |        var_2a0h = iVar11;\r\n    0x18383d3f5    |        iStack_298 = iVar14;\r\n    0x18383d3f5    |        iStack_290 = iVar5;\r\n    0x18383d3f5    |        func_0x0001835fe440(iVar10, 1);\r\n    0x18383d402    |        var_218h = CONCAT71(var_218h._1_7_, 1);\r\n    0x18383d411    |        func_0x000188cd29d0(arg1, &var_2a1h);\r\n    0x18383d41f    |        func_0x000188ac4bd0(arg1, arg2, &var_2a1h);\r\n    0x18383d3cd    |        func_0x000183608e00(&var_1d8h);\r\n                   |    }\r\n    0x18383d321    |    if ((char)var_68h == '\\x01') {\r\n    0x18383d335    |        if ((var_71h._1_1_ == '\\x01') && ((int64_t)_var_78h < 0)) {\r\n    0x18383d351    |            func_0x0001841dcbe0(var_88h, _var_78h & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x18383d356    |        var_1d8h = (int64_t)&var_a0h;\r\n    0x18383d369    |        func_0x000183921950();\r\n                   |    }\r\n    0x18383d383    |    if (*(uint64_t *)0x191c71040 == (var_60h ^ (uint64_t)auStack_2e8)) {\r\n    0x18383d3a7    |        return arg2;\r\n                   |    }\r\n    0x18383d84f    |    func_0x000185f05b40(var_60h ^ (uint64_t)auStack_2e8);\r\n                   |code_r0x00018383d857:\r\n    0x18383d857    |    func_0x00018628dc40();\r\n    0x18383d85c    |    pcVar1 = (code *)swi(3);\r\n    0x18383d85c    |    iVar11 = (*pcVar1)();\r\n    0x18383d85c    |    return iVar11;\r\n                   |}\r\n[{\"offset\":6501421296,\"name\":\"fcn.18383d0f0\",\"size\":1901,\"is-pure\":false,\"realsz\":1901,\"noreturn\":false,\"stackframe\":744,\"calltype\":\"ms\",\"cost\":512,\"cc\":40,\"loops\":12,\"bits\":64,\"type\":\"fcn\",\"nbbs\":67,\"edges\":101,\"ebbs\":3,\"signature\":\"fcn.18383d0f0(int64_t arg1, int64_t arg2, int64_t arg_280h);\",\"minbound\":6501421296,\"maxbound\":6501423197,\"callrefs\":[{\"from\":6501421398,\"to\":6502355072,\"type\":\"CALL\"},{\"from\":6501421559,\"to\":6501422649,\"type\":\"CODE\"},{\"from\":6501421622,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6501421648,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501421656,\"to\":6447366432,\"type\":\"CALL\"},{\"from\":6501421666,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6501421809,\"to\":6587959616,\"type\":\"CALL\"},{\"from\":6501421823,\"to\":6587960272,\"type\":\"CALL\"},{\"from\":6501421828,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501421833,\"to\":6587960816,\"type\":\"CALL\"},{\"from\":6501421844,\"to\":6587960160,\"type\":\"CALL\"},{\"from\":6501421905,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501421929,\"to\":6502357328,\"type\":\"CALL\"},{\"from\":6501422069,\"to\":6499066944,\"type\":\"CALL\"},{\"from\":6501422097,\"to\":6590114256,\"type\":\"CALL\"},{\"from\":6501422111,\"to\":6587960272,\"type\":\"CALL\"},{\"from\":6501422119,\"to\":6499110400,\"type\":\"CALL\"},{\"from\":6501422124,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422203,\"to\":6501422358,\"type\":\"CODE\"},{\"from\":6501422232,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6501422237,\"to\":6501422358,\"type\":\"CODE\"},{\"from\":6501422244,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6501422392,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6501422397,\"to\":6501422431,\"type\":\"CODE\"},{\"from\":6501422480,\"to\":6499066944,\"type\":\"CALL\"},{\"from\":6501422508,\"to\":6590114256,\"type\":\"CALL\"},{\"from\":6501422522,\"to\":6587960272,\"type\":\"CALL\"},{\"from\":6501422530,\"to\":6499110400,\"type\":\"CALL\"},{\"from\":6501422575,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501422580,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422595,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6501422600,\"to\":6501422710,\"type\":\"CODE\"},{\"from\":6501422631,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501422771,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6501422803,\"to\":6542436672,\"type\":\"CALL\"},{\"from\":6501422921,\"to\":6531082000,\"type\":\"CALL\"},{\"from\":6501422959,\"to\":6511733920,\"type\":\"CALL\"},{\"from\":6501422990,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501423011,\"to\":6501423047,\"type\":\"CODE\"},{\"from\":6501423029,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501423063,\"to\":6511733920,\"type\":\"CALL\"},{\"from\":6501423087,\"to\":6531082000,\"type\":\"CALL\"},{\"from\":6501423125,\"to\":6511733920,\"type\":\"CALL\"},{\"from\":6501423140,\"to\":6501423013,\"type\":\"CODE\"},{\"from\":6501423162,\"to\":6501423200,\"type\":\"CALL\"},{\"from\":6501423170,\"to\":6501422829,\"type\":\"CODE\"},{\"from\":6501423186,\"to\":6542089024,\"type\":\"CALL\"},{\"from\":6501423191,\"to\":6545792064,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6501421323,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6501421413,\"to\":6742171928,\"type\":\"DATA\"},{\"from\":6501421564,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6501421573,\"to\":6741126112,\"type\":\"DATA\"},{\"from\":6501421582,\"to\":6742246856,\"type\":\"DATA\"},{\"from\":6501421592,\"to\":6723625696,\"type\":\"DATA\"},{\"from\":6501421635,\"to\":6723625768,\"type\":\"DATA\"},{\"from\":6501421726,\"to\":6723625824,\"type\":\"DATA\"},{\"from\":6501421755,\"to\":6723625840,\"type\":\"DATA\"},{\"from\":6501421766,\"to\":6723625824,\"type\":\"DATA\"},{\"from\":6501421945,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6501422304,\"to\":6723625864,\"type\":\"DATA\"},{\"from\":6501422333,\"to\":6723625877,\"type\":\"DATA\"},{\"from\":6501422344,\"to\":6723625864,\"type\":\"DATA\"},{\"from\":6501423056,\"to\":6712107188,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6501421559,\"to\":6501422649,\"type\":\"CODE\"},{\"from\":6501421828,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422124,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422203,\"to\":6501422358,\"type\":\"CODE\"},{\"from\":6501422237,\"to\":6501422358,\"type\":\"CODE\"},{\"from\":6501422397,\"to\":6501422431,\"type\":\"CODE\"},{\"from\":6501422580,\"to\":6501421849,\"type\":\"CODE\"},{\"from\":6501422600,\"to\":6501422710,\"type\":\"CODE\"},{\"from\":6501423011,\"to\":6501423047,\"type\":\"CODE\"},{\"from\":6501423140,\"to\":6501423013,\"type\":\"CODE\"},{\"from\":6501423170,\"to\":6501422829,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":11,\"outdegree\":37,\"nlocals\":39,\"nargs\":3,\"stackvars\":[{\"name\":\"var_2d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-728}},{\"name\":\"var_2d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-720}},{\"name\":\"var_2c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-712}},{\"name\":\"var_2c0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-704}},{\"name\":\"var_2b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-696}},{\"name\":\"var_2b0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-688}},{\"name\":\"var_2a1h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-673}},{\"name\":\"var_2a0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-672}},{\"name\":\"var_288h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-648}},{\"name\":\"var_270h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-624}},{\"name\":\"var_268h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-616}},{\"name\":\"var_260h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-608}},{\"name\":\"var_259h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-601}},{\"name\":\"var_251h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-593}},{\"name\":\"var_250h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-592}},{\"name\":\"var_238h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-568}},{\"name\":\"var_228h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-552}},{\"name\":\"var_218h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-536}},{\"name\":\"var_208h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-520}},{\"name\":\"var_201h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-513}},{\"name\":\"var_1f8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-504}},{\"name\":\"var_1f0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-496}},{\"name\":\"var_1e8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-488}},{\"name\":\"var_1d9h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-473}},{\"name\":\"var_1d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-472}},{\"name\":\"var_1d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-464}},{\"name\":\"var_1c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-456}},{\"name\":\"var_1c1h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-449}},{\"name\":\"var_a8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-168}},{\"name\":\"var_a0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-160}},{\"name\":\"var_98h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-152}},{\"name\":\"var_88h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-136}},{\"name\":\"var_80h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-128}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_71h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-113}},{\"name\":\"var_70h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-112}},{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_60h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-96}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}},{\"name\":\"arg_280h\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":640}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"5099ms"}}