{"ok":true,"data":{"evidence_id":"ev_1d51e473e1e466d415605ec69f6a41b3f59ee980614247bb130c2d12863dee30","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x183aa1c70;pdgo @ 0x183aa1c70;afij @ 0x183aa1c70","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x183aa1c70;pdgo @ 0x183aa1c70;afij @ 0x183aa1c70","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":"    0x183aa1c70    |\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_129h\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_130h\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_71h\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_75h\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Removing arg arg_8fh because it doesn't fit into ProtoModel\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_cfh\r\n                   |\r\n    0x183aa1c70    |int64_t fcn.183aa1c70(int64_t arg1, int64_t arg2)\r\n                   |{\r\n                   |    code *pcVar1;\r\n                   |    char cVar2;\r\n                   |    int64_t iVar3;\r\n                   |    int64_t *piVar4;\r\n                   |    undefined8 uVar5;\r\n                   |    int64_t *piVar6;\r\n                   |    char unaff_R13B;\r\n                   |    int64_t *unaff_R14;\r\n                   |    int64_t *unaff_R15;\r\n                   |    int64_t unaff_GS_OFFSET;\r\n                   |    undefined auStack_178 [32];\r\n                   |    int64_t var_158h;\r\n                   |    int64_t var_140h;\r\n                   |    int64_t var_138h;\r\n                   |    undefined8 var_130h;\r\n                   |    int64_t var_128h;\r\n                   |    undefined4 uStack_120;\r\n                   |    undefined4 uStack_11c;\r\n                   |    undefined2 uStack_118;\r\n                   |    int64_t var_116h;\r\n                   |    int64_t var_108h;\r\n                   |    undefined8 uStack_100;\r\n                   |    int64_t var_f8h;\r\n                   |    int64_t var_f0h;\r\n                   |    int64_t var_e0h;\r\n                   |    int64_t var_d8h;\r\n                   |    int64_t var_d0h;\r\n                   |    int64_t var_c8h;\r\n                   |    undefined4 uStack_c0;\r\n                   |    undefined4 uStack_bc;\r\n                   |    int64_t var_b8h;\r\n                   |    int64_t var_80h;\r\n                   |    int64_t var_78h;\r\n                   |    undefined8 uStack_70;\r\n                   |    int64_t var_68h;\r\n                   |    undefined uStack_58;\r\n                   |    int64_t var_48h;\r\n                   |    int64_t var_40h;\r\n                   |    \r\n    0x183aa1c89    |    var_40h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_178;\r\n    0x183aa1c98    |    if (*(char *)(arg1 + 0x30) == '\\0') {\r\n                   |code_r0x000183aa21a2:\r\n    0x183aa21a2    |    // WARNING: Does not return\r\n    0x183aa21a2    |        pcVar1 = (code *)invalidInstructionException();\r\n    0x183aa21a2    |        (*pcVar1)();\r\n                   |    }\r\n    0x183aa1ca7    |    piVar6 = &var_108h;\r\n    0x183aa1cac    |    var_f8h = 0;\r\n    0x183aa1cac    |    var_f0h = 0;\r\n    0x183aa1cb0    |    var_108h = 0;\r\n    0x183aa1cb0    |    uStack_100 = 0;\r\n    0x183aa1cba    |    func_0x000183916250(piVar6, arg1 + 0x18);\r\n    0x183aa1cc3    |    if ((char)var_f0h == '\\0') {\r\n    0x183aa1ff5    |        var_116h._5_1_ = 0x12;\r\n    0x183aa2013    |        if (&var_116h < (int64_t *)0x1905959d1 || (int64_t *)0x1905959d0 < &var_128h) {\r\n    0x183aa2025    |            uStack_118 = 0x7372;\r\n    0x183aa2031    |            var_128h._0_4_ = 0x61766e49;\r\n    0x183aa2031    |            var_128h._4_4_ = 0x2064696c;\r\n    0x183aa2031    |            uStack_120 = 0x61726170;\r\n    0x183aa2031    |            uStack_11c = 0x6574656d;\r\n    0x183aa2035    |            var_116h._0_1_ = 0;\r\n    0x183aa2040    |            func_0x000188ac4940(arg1, arg2);\r\n    0x183aa205f    |            var_d0h = 0x188ac5700;\r\n    0x183aa2062    |            var_c8h = var_c8h & 0xffffffff00000000;\r\n    0x183aa2070    |            var_78h = arg1;\r\n    0x183aa2070    |            uVar5 = func_0x000188ac69e0(0x1861e7020);\r\n    0x183aa2075    |            *(undefined8 *)(arg2 + 8) = uVar5;\r\n    0x183aa2079    |            *(undefined *)(arg2 + 0x10) = 1;\r\n    0x183aa2079    |            goto code_r0x000183aa207d;\r\n                   |        }\r\n                   |        goto code_r0x000183aa21a2;\r\n                   |    }\r\n    0x183aa1cc9    |    piVar6 = (int64_t *)0x7fffffffffffffff;\r\n    0x183aa1cd8    |    var_140h = func_0x000185f006b8(0x20);\r\n    0x183aa1ce2    |    var_138h = 0x1d;\r\n    0x183aa1cef    |    var_130h = 0x8000000000000020;\r\n    0x183aa1d18    |    if (((undefined4 *)(var_140h + 0x1d) < (uint64_t)var_140h) ||\r\n    0x183aa1d12    |       ((undefined4 *)0x191456468 < (undefined4 *)(var_140h + 0x1d) && (uint64_t)var_140h < (undefined4 *)0x191456469))\r\n    0x183aa1d18    |    goto code_r0x000183aa21a2;\r\n    0x183aa1d25    |    *(undefined8 *)(var_140h + 0xd) = 0x6973206261742077;\r\n    0x183aa1d25    |    *(undefined8 *)(var_140h + 0x15) = 0x6c656e6170206564;\r\n    0x183aa1d30    |    *(undefined4 *)var_140h = 0x6c696146;\r\n    0x183aa1d30    |    *(undefined4 *)(var_140h + 4) = 0x74206465;\r\n    0x183aa1d30    |    *(undefined4 *)(var_140h + 8) = 0x6873206f;\r\n    0x183aa1d30    |    *(undefined4 *)(var_140h + 0xc) = 0x7420776f;\r\n    0x183aa1d33    |    *(undefined *)(var_140h + 0x1d) = 0;\r\n    0x183aa1d41    |    if (*(int64_t *)(arg1 + 0x1e0) != 0) {\r\n    0x183aa1d43    |        iVar3 = func_0x0001844c61a0();\r\n    0x183aa1d4b    |        if (iVar3 != 0) {\r\n    0x183aa1d50    |            piVar4 = (int64_t *)func_0x000185569cf0(iVar3);\r\n    0x183aa1d58    |            if (piVar4 != (int64_t *)0x0) {\r\n    0x183aa1d6a    |                unaff_R15 = (int64_t *)(*(code *)0x185f59da0)(piVar4, *(undefined8 *)(*piVar4 + 0xe0));\r\n    0x183aa1d76    |                if (unaff_R15 != (int64_t *)0x0) goto code_r0x000183aa1e02;\r\n                   |            }\r\n                   |        }\r\n                   |    }\r\n    0x183aa1d7c    |    var_e0h = (int64_t)&var_d8h;\r\n    0x183aa1d84    |    var_d8h = 0;\r\n    0x183aa1d8b    |    var_78h = (int64_t)&var_e0h;\r\n    0x183aa1da5    |    uStack_70 = 0x18125d7f0;\r\n    0x183aa1dbd    |    iVar3 = (*(code *)0x185f59da0)();\r\n    0x183aa1dc7    |    var_d0h = (int64_t)&var_48h;\r\n    0x183aa1de1    |    var_c8h = 0x18125d7d0;\r\n    0x183aa1df1    |    var_48h = (int64_t)&var_78h;\r\n    0x183aa1dc3    |    func_0x0001812baa60(*(undefined8 *)(iVar3 + 8), &var_d0h, 1, 0);\r\n    0x183aa1dfc    |    unaff_R15 = (int64_t *)var_d8h;\r\n    0x183aa1dfc    |    if (var_d8h == 0) {\r\n    0x183aa1ee1    |        func_0x00018503ecf0(&var_140h, 0x191456450);\r\n    0x183aa1ee6    |        goto code_r0x000183aa1eeb;\r\n                   |    }\r\n                   |code_r0x000183aa1e02:\r\n    0x183aa1e09    |    if (unaff_R15[2] == 0) goto code_r0x000183aa1e9c;\r\n    0x183aa1e0f    |    unaff_R13B = false;\r\n    0x183aa1e12    |    unaff_R14 = &var_78h;\r\n    0x183aa1e1a    |    var_78h = var_78h & 0xffffffffffffff00;\r\n    0x183aa1e1d    |    uStack_58 = 0;\r\n    0x183aa1e21    |    func_0x00018207a510(&var_d0h, unaff_R15[2], unaff_R14, 0);\r\n    0x183aa1e3f    |    if ((~(uint8_t)var_d0h & 0xcf) == 0) {\r\n    0x183aa2205    |        if ((var_d0h & 0x100U) == 0) {\r\n    0x183aa2207    |            unaff_R13B = false;\r\n                   |        } else {\r\n    0x183aa2211    |            unaff_R13B = (~var_d0h._1_1_ & 0xc) == 0;\r\n                   |        }\r\n                   |    }\r\n    0x183aa1e4d    |    if ((char)var_80h == '\\x01') goto code_r0x000183aa21ea;\r\n                   |    do {\r\n    0x183aa1e56    |        if (unaff_R13B == '\\0') {\r\n                   |code_r0x000183aa1e9c:\r\n    0x183aa1ea1    |            if ((int64_t)var_130h < 0) {\r\n    0x183aa1eae    |                var_138h = 0x15;\r\n    0x183aa1eb7    |                piVar4 = (int64_t *)var_140h;\r\n                   |            } else {\r\n    0x183aa1ea8    |                var_130h = CONCAT17(0x15, (unkbyte7)var_130h);\r\n    0x183aa1eac    |                piVar4 = &var_140h;\r\n                   |            }\r\n    0x183aa1ec3    |            *(undefined4 *)piVar4 = 0x43494c47;\r\n    0x183aa1ec3    |            *(undefined4 *)((int64_t)piVar4 + 4) = 0x20736920;\r\n    0x183aa1ec3    |            *(undefined4 *)(piVar4 + 1) = 0x20746f6e;\r\n    0x183aa1ec3    |            *(undefined4 *)((int64_t)piVar4 + 0xc) = 0x69617661;\r\n    0x183aa1ed0    |            *(undefined8 *)((int64_t)piVar4 + 0xd) = 0x656c62616c696176;\r\n    0x183aa1ed4    |            *(undefined *)((int64_t)piVar4 + 0x15) = 0;\r\n                   |code_r0x000183aa1eeb:\r\n    0x183aa1ef7    |            var_d0h = 1;\r\n    0x183aa1f07    |            if ((int64_t)var_130h < 0) {\r\n    0x183aa1f2f    |                func_0x0001841dd0f0(&var_78h, var_140h, var_138h);\r\n                   |            } else {\r\n    0x183aa1f0e    |                var_68h = var_130h;\r\n    0x183aa1f1b    |                var_78h = var_140h;\r\n    0x183aa1f1b    |                uStack_70 = var_138h;\r\n                   |            }\r\n                   |        } else {\r\n    0x183aa1e58    |            iVar3 = unaff_R15[2];\r\n    0x183aa1e7b    |            if (*(int32_t *)\r\n    0x183aa1e71    |                 (*(int64_t *)(*(int64_t *)(unaff_GS_OFFSET + 0x58) + (uint64_t)*(uint32_t *)0x191d832e0 * 8) + 4) <\r\n    0x183aa1e7b    |                *(int32_t *)0x191dd0600) {\r\n    0x183aa21ab    |                func_0x000185f00fe8(0x191dd0600);\r\n    0x183aa21b7    |                if (*(int32_t *)0x191dd0600 == -1) {\r\n    0x183aa21c4    |                    func_0x00018237cf50(0x191dd05c8);\r\n    0x183aa21d0    |                    func_0x000185f00f7c(0x191dd0600);\r\n                   |                }\r\n                   |            }\r\n    0x183aa1e8e    |            iVar3 = func_0x000184300b20(0x191dd05c8, iVar3, 0);\r\n    0x183aa1e96    |            if (iVar3 == 0) goto code_r0x000183aa1e9c;\r\n    0x183aa20eb    |            if (*(int64_t *)(iVar3 + 0xc0) == 0) {\r\n    0x183aa221c    |                pcVar1 = (code *)swi(3);\r\n    0x183aa221c    |                iVar3 = (*pcVar1)();\r\n    0x183aa221c    |                return iVar3;\r\n                   |            }\r\n    0x183aa20fe    |            cVar2 = (*(code *)0x185f59da0)(*(int64_t *)(iVar3 + 0xc0), unaff_R15);\r\n    0x183aa2106    |            if (cVar2 == '\\0') {\r\n    0x183aa2113    |                if (*(int64_t *)(iVar3 + 0xc0) == 0) {\r\n    0x183aa221f    |                    pcVar1 = (code *)swi(3);\r\n    0x183aa221f    |                    iVar3 = (*pcVar1)();\r\n    0x183aa221f    |                    return iVar3;\r\n                   |                }\r\n    0x183aa212c    |                (*(code *)0x185f59da0)(*(int64_t *)(iVar3 + 0xc0), unaff_R15, 1, 3);\r\n    0x183aa2132    |                uVar5 = 0x1914564c0;\r\n                   |            } else {\r\n    0x183aa213b    |                uVar5 = 0x1914564a0;\r\n                   |            }\r\n    0x183aa2142    |            func_0x00018503ecf0(&var_140h, uVar5);\r\n    0x183aa214c    |            var_d0h = 0;\r\n    0x183aa2160    |            var_68h = CONCAT17(7, (unkbyte7)var_68h);\r\n    0x183aa2179    |            if (0x1901b8450 < (int64_t)&var_78h + 7U && unaff_R14 < (int64_t *)0x1901b8451) goto code_r0x000183aa21a2;\r\n    0x183aa218e    |            var_78h = 0x73736563637553;\r\n                   |        }\r\n    0x183aa1f3c    |        unaff_R15 = &var_78h;\r\n    0x183aa1f48    |        unaff_R14 = &var_d0h;\r\n    0x183aa1f50    |        var_b8h = var_68h;\r\n    0x183aa1f58    |        var_c8h = var_78h;\r\n    0x183aa1f58    |        uStack_c0 = (undefined4)uStack_70;\r\n    0x183aa1f58    |        uStack_bc = uStack_70._4_4_;\r\n    0x183aa1f5d    |        func_0x00018dba23d0(&var_158h, unaff_R14);\r\n    0x183aa1f76    |        func_0x000188ac5420(arg1, arg2, &var_158h);\r\n    0x183aa1f8d    |        var_78h = 0x188ac5700;\r\n    0x183aa1f90    |        uStack_70 = uStack_70 & 0xffffffff00000000;\r\n    0x183aa1fa2    |        var_48h = arg1;\r\n    0x183aa1fa2    |        uVar5 = func_0x000188ac69e0(0x1861e7020, unaff_R15);\r\n    0x183aa1fa7    |        *(undefined8 *)(arg2 + 8) = uVar5;\r\n    0x183aa1fab    |        *(undefined *)(arg2 + 0x10) = 1;\r\n    0x183aa1fb4    |        if (var_b8h < 0) {\r\n    0x183aa1fc9    |            func_0x0001841dcbe0(var_c8h, var_b8h & (uint64_t)piVar6);\r\n                   |        }\r\n    0x183aa1fd3    |        if ((int64_t)var_130h < 0) {\r\n    0x183aa1fd9    |            piVar6 = (int64_t *)((uint64_t)piVar6 & var_130h);\r\n    0x183aa1fe6    |            func_0x0001841dcbe0(var_140h, piVar6);\r\n                   |        }\r\n                   |code_r0x000183aa207d:\r\n    0x183aa208f    |        if (((char)var_f0h == '\\x01') && (var_f8h < 0)) {\r\n    0x183aa20a8    |            func_0x0001841dcbe0(var_108h, var_f8h & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x183aa20c2    |        if (*(uint64_t *)0x191c71040 == (var_40h ^ (uint64_t)auStack_178)) {\r\n    0x183aa20dd    |            return arg2;\r\n                   |        }\r\n    0x183aa21e2    |        func_0x000185f05b40(var_40h ^ (uint64_t)auStack_178);\r\n                   |code_r0x000183aa21ea:\r\n    0x183aa21ea    |        func_0x000186450650(&var_c8h);\r\n    0x183aa21f7    |    } while( true );\r\n                   |}\r\n[{\"offset\":6503930992,\"name\":\"fcn.183aa1c70\",\"size\":1456,\"is-pure\":false,\"realsz\":1454,\"noreturn\":false,\"stackframe\":376,\"calltype\":\"ms\",\"cost\":406,\"cc\":33,\"loops\":6,\"bits\":64,\"type\":\"fcn\",\"nbbs\":51,\"edges\":76,\"ebbs\":4,\"signature\":\"fcn.183aa1c70(int64_t arg1, int64_t arg2, int64_t arg_8fh);\",\"minbound\":6503930992,\"maxbound\":6503932448,\"callrefs\":[{\"from\":6503931066,\"to\":6502310480,\"type\":\"CALL\"},{\"from\":6503931096,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6503931203,\"to\":6514565536,\"type\":\"CALL\"},{\"from\":6503931216,\"to\":6532013296,\"type\":\"CALL\"},{\"from\":6503931242,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6503931325,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6503931377,\"to\":6462089824,\"type\":\"CALL\"},{\"from\":6503931442,\"to\":6476506384,\"type\":\"CALL\"},{\"from\":6503931534,\"to\":6512708384,\"type\":\"CALL\"},{\"from\":6503931564,\"to\":6503931580,\"type\":\"CODE\"},{\"from\":6503931608,\"to\":6503931627,\"type\":\"CODE\"},{\"from\":6503931622,\"to\":6526594288,\"type\":\"CALL\"},{\"from\":6503931683,\"to\":6503931708,\"type\":\"CODE\"},{\"from\":6503931703,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6503931752,\"to\":6672753616,\"type\":\"CALL\"},{\"from\":6503931766,\"to\":6587962400,\"type\":\"CALL\"},{\"from\":6503931810,\"to\":6587967968,\"type\":\"CALL\"},{\"from\":6503931849,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6503931878,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6503931883,\"to\":6503932029,\"type\":\"CODE\"},{\"from\":6503931968,\"to\":6587959616,\"type\":\"CALL\"},{\"from\":6503932016,\"to\":6587967968,\"type\":\"CALL\"},{\"from\":6503932072,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6503932158,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6503932204,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6503932217,\"to\":6503932226,\"type\":\"CODE\"},{\"from\":6503932231,\"to\":6526594288,\"type\":\"CALL\"},{\"from\":6503932317,\"to\":6503931708,\"type\":\"CODE\"},{\"from\":6503932331,\"to\":6542069736,\"type\":\"CALL\"},{\"from\":6503932356,\"to\":6479662928,\"type\":\"CALL\"},{\"from\":6503932368,\"to\":6542069628,\"type\":\"CALL\"},{\"from\":6503932373,\"to\":6503931521,\"type\":\"CODE\"},{\"from\":6503932389,\"to\":6542089024,\"type\":\"CALL\"},{\"from\":6503932402,\"to\":6547637840,\"type\":\"CALL\"},{\"from\":6503932407,\"to\":6503931475,\"type\":\"CODE\"},{\"from\":6503932426,\"to\":6503931461,\"type\":\"CODE\"},{\"from\":6503932439,\"to\":6503931461,\"type\":\"CODE\"}],\"datarefs\":[{\"from\":6503931010,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6503931137,\"to\":6732211304,\"type\":\"DATA\"},{\"from\":6503931166,\"to\":6732211317,\"type\":\"DATA\"},{\"from\":6503931177,\"to\":6732211304,\"type\":\"DATA\"},{\"from\":6503931286,\"to\":6461708272,\"type\":\"DATA\"},{\"from\":6503931308,\"to\":6741850168,\"type\":\"DATA\"},{\"from\":6503931346,\"to\":6461708240,\"type\":\"DATA\"},{\"from\":6503931484,\"to\":6742148608,\"type\":\"DATA\"},{\"from\":6503931490,\"to\":6741832416,\"type\":\"DATA\"},{\"from\":6503931521,\"to\":6742148552,\"type\":\"DATA\"},{\"from\":6503931580,\"to\":6732211336,\"type\":\"DATA\"},{\"from\":6503931610,\"to\":6732211280,\"type\":\"DATA\"},{\"from\":6503931782,\"to\":6587963136,\"type\":\"DATA\"},{\"from\":6503931800,\"to\":6545109024,\"type\":\"DATA\"},{\"from\":6503931897,\"to\":6716742096,\"type\":\"DATA\"},{\"from\":6503931929,\"to\":6716742112,\"type\":\"DATA\"},{\"from\":6503931946,\"to\":6716742096,\"type\":\"DATA\"},{\"from\":6503931984,\"to\":6587963136,\"type\":\"DATA\"},{\"from\":6503932009,\"to\":6545109024,\"type\":\"DATA\"},{\"from\":6503932088,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6503932210,\"to\":6732211392,\"type\":\"DATA\"},{\"from\":6503932219,\"to\":6732211360,\"type\":\"DATA\"},{\"from\":6503932260,\"to\":6712689744,\"type\":\"DATA\"},{\"from\":6503932283,\"to\":6712689747,\"type\":\"DATA\"},{\"from\":6503932296,\"to\":6712689744,\"type\":\"DATA\"},{\"from\":6503932324,\"to\":6742148608,\"type\":\"DATA\"},{\"from\":6503932336,\"to\":6742148608,\"type\":\"DATA\"},{\"from\":6503932349,\"to\":6742148552,\"type\":\"DATA\"},{\"from\":6503932361,\"to\":6742148608,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6503931564,\"to\":6503931580,\"type\":\"CODE\"},{\"from\":6503931608,\"to\":6503931627,\"type\":\"CODE\"},{\"from\":6503931683,\"to\":6503931708,\"type\":\"CODE\"},{\"from\":6503931883,\"to\":6503932029,\"type\":\"CODE\"},{\"from\":6503932217,\"to\":6503932226,\"type\":\"CODE\"},{\"from\":6503932317,\"to\":6503931708,\"type\":\"CODE\"},{\"from\":6503932373,\"to\":6503931521,\"type\":\"CODE\"},{\"from\":6503932407,\"to\":6503931475,\"type\":\"CODE\"},{\"from\":6503932426,\"to\":6503931461,\"type\":\"CODE\"},{\"from\":6503932439,\"to\":6503931461,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":10,\"outdegree\":27,\"nlocals\":23,\"nargs\":3,\"stackvars\":[{\"name\":\"var_158h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-344}},{\"name\":\"var_140h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-320}},{\"name\":\"var_138h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-312}},{\"name\":\"var_130h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-304}},{\"name\":\"var_129h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-297}},{\"name\":\"var_128h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-296}},{\"name\":\"var_116h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-278}},{\"name\":\"var_108h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-264}},{\"name\":\"var_f8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-248}},{\"name\":\"var_f0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-240}},{\"name\":\"var_e0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-224}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-208}},{\"name\":\"var_cfh\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-207}},{\"name\":\"var_c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-200}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_80h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-128}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_75h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-117}},{\"name\":\"var_71h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-113}},{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}},{\"name\":\"arg_8fh\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":143}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":"    0x183aa1c70    |\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_129h\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_130h\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_71h\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_75h\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Removing arg arg_8fh because it doesn't fit into ProtoModel\r\n    0x183aa1c70    |// WARNING: [rz-ghidra] Detected overlap for variable var_cfh\r\n                   |\r\n    0x183aa1c70    |int64_t fcn.183aa1c70(int64_t arg1, int64_t arg2)\r\n                   |{\r\n                   |    code *pcVar1;\r\n                   |    char cVar2;\r\n                   |    int64_t iVar3;\r\n                   |    int64_t *piVar4;\r\n                   |    undefined8 uVar5;\r\n                   |    int64_t *piVar6;\r\n                   |    char unaff_R13B;\r\n                   |    int64_t *unaff_R14;\r\n                   |    int64_t *unaff_R15;\r\n                   |    int64_t unaff_GS_OFFSET;\r\n                   |    undefined auStack_178 [32];\r\n                   |    int64_t var_158h;\r\n                   |    int64_t var_140h;\r\n                   |    int64_t var_138h;\r\n                   |    undefined8 var_130h;\r\n                   |    int64_t var_128h;\r\n                   |    undefined4 uStack_120;\r\n                   |    undefined4 uStack_11c;\r\n                   |    undefined2 uStack_118;\r\n                   |    int64_t var_116h;\r\n                   |    int64_t var_108h;\r\n                   |    undefined8 uStack_100;\r\n                   |    int64_t var_f8h;\r\n                   |    int64_t var_f0h;\r\n                   |    int64_t var_e0h;\r\n                   |    int64_t var_d8h;\r\n                   |    int64_t var_d0h;\r\n                   |    int64_t var_c8h;\r\n                   |    undefined4 uStack_c0;\r\n                   |    undefined4 uStack_bc;\r\n                   |    int64_t var_b8h;\r\n                   |    int64_t var_80h;\r\n                   |    int64_t var_78h;\r\n                   |    undefined8 uStack_70;\r\n                   |    int64_t var_68h;\r\n                   |    undefined uStack_58;\r\n                   |    int64_t var_48h;\r\n                   |    int64_t var_40h;\r\n                   |    \r\n    0x183aa1c89    |    var_40h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_178;\r\n    0x183aa1c98    |    if (*(char *)(arg1 + 0x30) == '\\0') {\r\n                   |code_r0x000183aa21a2:\r\n    0x183aa21a2    |    // WARNING: Does not return\r\n    0x183aa21a2    |        pcVar1 = (code *)invalidInstructionException();\r\n    0x183aa21a2    |        (*pcVar1)();\r\n                   |    }\r\n    0x183aa1ca7    |    piVar6 = &var_108h;\r\n    0x183aa1cac    |    var_f8h = 0;\r\n    0x183aa1cac    |    var_f0h = 0;\r\n    0x183aa1cb0    |    var_108h = 0;\r\n    0x183aa1cb0    |    uStack_100 = 0;\r\n    0x183aa1cba    |    func_0x000183916250(piVar6, arg1 + 0x18);\r\n    0x183aa1cc3    |    if ((char)var_f0h == '\\0') {\r\n    0x183aa1ff5    |        var_116h._5_1_ = 0x12;\r\n    0x183aa2013    |        if (&var_116h < (int64_t *)0x1905959d1 || (int64_t *)0x1905959d0 < &var_128h) {\r\n    0x183aa2025    |            uStack_118 = 0x7372;\r\n    0x183aa2031    |            var_128h._0_4_ = 0x61766e49;\r\n    0x183aa2031    |            var_128h._4_4_ = 0x2064696c;\r\n    0x183aa2031    |            uStack_120 = 0x61726170;\r\n    0x183aa2031    |            uStack_11c = 0x6574656d;\r\n    0x183aa2035    |            var_116h._0_1_ = 0;\r\n    0x183aa2040    |            func_0x000188ac4940(arg1, arg2);\r\n    0x183aa205f    |            var_d0h = 0x188ac5700;\r\n    0x183aa2062    |            var_c8h = var_c8h & 0xffffffff00000000;\r\n    0x183aa2070    |            var_78h = arg1;\r\n    0x183aa2070    |            uVar5 = func_0x000188ac69e0(0x1861e7020);\r\n    0x183aa2075    |            *(undefined8 *)(arg2 + 8) = uVar5;\r\n    0x183aa2079    |            *(undefined *)(arg2 + 0x10) = 1;\r\n    0x183aa2079    |            goto code_r0x000183aa207d;\r\n                   |        }\r\n                   |        goto code_r0x000183aa21a2;\r\n                   |    }\r\n    0x183aa1cc9    |    piVar6 = (int64_t *)0x7fffffffffffffff;\r\n    0x183aa1cd8    |    var_140h = func_0x000185f006b8(0x20);\r\n    0x183aa1ce2    |    var_138h = 0x1d;\r\n    0x183aa1cef    |    var_130h = 0x8000000000000020;\r\n    0x183aa1d18    |    if (((undefined4 *)(var_140h + 0x1d) < (uint64_t)var_140h) ||\r\n    0x183aa1d12    |       ((undefined4 *)0x191456468 < (undefined4 *)(var_140h + 0x1d) && (uint64_t)var_140h < (undefined4 *)0x191456469))\r\n    0x183aa1d18    |    goto code_r0x000183aa21a2;\r\n    0x183aa1d25    |    *(undefined8 *)(var_140h + 0xd) = 0x6973206261742077;\r\n    0x183aa1d25    |    *(undefined8 *)(var_140h + 0x15) = 0x6c656e6170206564;\r\n    0x183aa1d30    |    *(undefined4 *)var_140h = 0x6c696146;\r\n    0x183aa1d30    |    *(undefined4 *)(var_140h + 4) = 0x74206465;\r\n    0x183aa1d30    |    *(undefined4 *)(var_140h + 8) = 0x6873206f;\r\n    0x183aa1d30    |    *(undefined4 *)(var_140h + 0xc) = 0x7420776f;\r\n    0x183aa1d33    |    *(undefined *)(var_140h + 0x1d) = 0;\r\n    0x183aa1d41    |    if (*(int64_t *)(arg1 + 0x1e0) != 0) {\r\n    0x183aa1d43    |        iVar3 = func_0x0001844c61a0();\r\n    0x183aa1d4b    |        if (iVar3 != 0) {\r\n    0x183aa1d50    |            piVar4 = (int64_t *)func_0x000185569cf0(iVar3);\r\n    0x183aa1d58    |            if (piVar4 != (int64_t *)0x0) {\r\n    0x183aa1d6a    |                unaff_R15 = (int64_t *)(*(code *)0x185f59da0)(piVar4, *(undefined8 *)(*piVar4 + 0xe0));\r\n    0x183aa1d76    |                if (unaff_R15 != (int64_t *)0x0) goto code_r0x000183aa1e02;\r\n                   |            }\r\n                   |        }\r\n                   |    }\r\n    0x183aa1d7c    |    var_e0h = (int64_t)&var_d8h;\r\n    0x183aa1d84    |    var_d8h = 0;\r\n    0x183aa1d8b    |    var_78h = (int64_t)&var_e0h;\r\n    0x183aa1da5    |    uStack_70 = 0x18125d7f0;\r\n    0x183aa1dbd    |    iVar3 = (*(code *)0x185f59da0)();\r\n    0x183aa1dc7    |    var_d0h = (int64_t)&var_48h;\r\n    0x183aa1de1    |    var_c8h = 0x18125d7d0;\r\n    0x183aa1df1    |    var_48h = (int64_t)&var_78h;\r\n    0x183aa1dc3    |    func_0x0001812baa60(*(undefined8 *)(iVar3 + 8), &var_d0h, 1, 0);\r\n    0x183aa1dfc    |    unaff_R15 = (int64_t *)var_d8h;\r\n    0x183aa1dfc    |    if (var_d8h == 0) {\r\n    0x183aa1ee1    |        func_0x00018503ecf0(&var_140h, 0x191456450);\r\n    0x183aa1ee6    |        goto code_r0x000183aa1eeb;\r\n                   |    }\r\n                   |code_r0x000183aa1e02:\r\n    0x183aa1e09    |    if (unaff_R15[2] == 0) goto code_r0x000183aa1e9c;\r\n    0x183aa1e0f    |    unaff_R13B = false;\r\n    0x183aa1e12    |    unaff_R14 = &var_78h;\r\n    0x183aa1e1a    |    var_78h = var_78h & 0xffffffffffffff00;\r\n    0x183aa1e1d    |    uStack_58 = 0;\r\n    0x183aa1e21    |    func_0x00018207a510(&var_d0h, unaff_R15[2], unaff_R14, 0);\r\n    0x183aa1e3f    |    if ((~(uint8_t)var_d0h & 0xcf) == 0) {\r\n    0x183aa2205    |        if ((var_d0h & 0x100U) == 0) {\r\n    0x183aa2207    |            unaff_R13B = false;\r\n                   |        } else {\r\n    0x183aa2211    |            unaff_R13B = (~var_d0h._1_1_ & 0xc) == 0;\r\n                   |        }\r\n                   |    }\r\n    0x183aa1e4d    |    if ((char)var_80h == '\\x01') goto code_r0x000183aa21ea;\r\n                   |    do {\r\n    0x183aa1e56    |        if (unaff_R13B == '\\0') {\r\n                   |code_r0x000183aa1e9c:\r\n    0x183aa1ea1    |            if ((int64_t)var_130h < 0) {\r\n    0x183aa1eae    |                var_138h = 0x15;\r\n    0x183aa1eb7    |                piVar4 = (int64_t *)var_140h;\r\n                   |            } else {\r\n    0x183aa1ea8    |                var_130h = CONCAT17(0x15, (unkbyte7)var_130h);\r\n    0x183aa1eac    |                piVar4 = &var_140h;\r\n                   |            }\r\n    0x183aa1ec3    |            *(undefined4 *)piVar4 = 0x43494c47;\r\n    0x183aa1ec3    |            *(undefined4 *)((int64_t)piVar4 + 4) = 0x20736920;\r\n    0x183aa1ec3    |            *(undefined4 *)(piVar4 + 1) = 0x20746f6e;\r\n    0x183aa1ec3    |            *(undefined4 *)((int64_t)piVar4 + 0xc) = 0x69617661;\r\n    0x183aa1ed0    |            *(undefined8 *)((int64_t)piVar4 + 0xd) = 0x656c62616c696176;\r\n    0x183aa1ed4    |            *(undefined *)((int64_t)piVar4 + 0x15) = 0;\r\n                   |code_r0x000183aa1eeb:\r\n    0x183aa1ef7    |            var_d0h = 1;\r\n    0x183aa1f07    |            if ((int64_t)var_130h < 0) {\r\n    0x183aa1f2f    |                func_0x0001841dd0f0(&var_78h, var_140h, var_138h);\r\n                   |            } else {\r\n    0x183aa1f0e    |                var_68h = var_130h;\r\n    0x183aa1f1b    |                var_78h = var_140h;\r\n    0x183aa1f1b    |                uStack_70 = var_138h;\r\n                   |            }\r\n                   |        } else {\r\n    0x183aa1e58    |            iVar3 = unaff_R15[2];\r\n    0x183aa1e7b    |            if (*(int32_t *)\r\n    0x183aa1e71    |                 (*(int64_t *)(*(int64_t *)(unaff_GS_OFFSET + 0x58) + (uint64_t)*(uint32_t *)0x191d832e0 * 8) + 4) <\r\n    0x183aa1e7b    |                *(int32_t *)0x191dd0600) {\r\n    0x183aa21ab    |                func_0x000185f00fe8(0x191dd0600);\r\n    0x183aa21b7    |                if (*(int32_t *)0x191dd0600 == -1) {\r\n    0x183aa21c4    |                    func_0x00018237cf50(0x191dd05c8);\r\n    0x183aa21d0    |                    func_0x000185f00f7c(0x191dd0600);\r\n                   |                }\r\n                   |            }\r\n    0x183aa1e8e    |            iVar3 = func_0x000184300b20(0x191dd05c8, iVar3, 0);\r\n    0x183aa1e96    |            if (iVar3 == 0) goto code_r0x000183aa1e9c;\r\n    0x183aa20eb    |            if (*(int64_t *)(iVar3 + 0xc0) == 0) {\r\n    0x183aa221c    |                pcVar1 = (code *)swi(3);\r\n    0x183aa221c    |                iVar3 = (*pcVar1)();\r\n    0x183aa221c    |                return iVar3;\r\n                   |            }\r\n    0x183aa20fe    |            cVar2 = (*(code *)0x185f59da0)(*(int64_t *)(iVar3 + 0xc0), unaff_R15);\r\n    0x183aa2106    |            if (cVar2 == '\\0') {\r\n    0x183aa2113    |                if (*(int64_t *)(iVar3 + 0xc0) == 0) {\r\n    0x183aa221f    |                    pcVar1 = (code *)swi(3);\r\n    0x183aa221f    |                    iVar3 = (*pcVar1)();\r\n    0x183aa221f    |                    return iVar3;\r\n                   |                }\r\n    0x183aa212c    |                (*(code *)0x185f59da0)(*(int64_t *)(iVar3 + 0xc0), unaff_R15, 1, 3);\r\n    0x183aa2132    |                uVar5 = 0x1914564c0;\r\n                   |            } else {\r\n    0x183aa213b    |                uVar5 = 0x1914564a0;\r\n                   |            }\r\n    0x183aa2142    |            func_0x00018503ecf0(&var_140h, uVar5);\r\n    0x183aa214c    |            var_d0h = 0;\r\n    0x183aa2160    |            var_68h = CONCAT17(7, (unkbyte7)var_68h);\r\n    0x183aa2179    |            if (0x1901b8450 < (int64_t)&var_78h + 7U && unaff_R14 < (int64_t *)0x1901b8451) goto code_r0x000183aa21a2;\r\n    0x183aa218e    |            var_78h = 0x73736563637553;\r\n                   |        }\r\n    0x183aa1f3c    |        unaff_R15 = &var_78h;\r\n    0x183aa1f48    |        unaff_R14 = &var_d0h;\r\n    0x183aa1f50    |        var_b8h = var_68h;\r\n    0x183aa1f58    |        var_c8h = var_78h;\r\n    0x183aa1f58    |        uStack_c0 = (undefined4)uStack_70;\r\n    0x183aa1f58    |        uStack_bc = uStack_70._4_4_;\r\n    0x183aa1f5d    |        func_0x00018dba23d0(&var_158h, unaff_R14);\r\n    0x183aa1f76    |        func_0x000188ac5420(arg1, arg2, &var_158h);\r\n    0x183aa1f8d    |        var_78h = 0x188ac5700;\r\n    0x183aa1f90    |        uStack_70 = uStack_70 & 0xffffffff00000000;\r\n    0x183aa1fa2    |        var_48h = arg1;\r\n    0x183aa1fa2    |        uVar5 = func_0x000188ac69e0(0x1861e7020, unaff_R15);\r\n    0x183aa1fa7    |        *(undefined8 *)(arg2 + 8) = uVar5;\r\n    0x183aa1fab    |        *(undefined *)(arg2 + 0x10) = 1;\r\n    0x183aa1fb4    |        if (var_b8h < 0) {\r\n    0x183aa1fc9    |            func_0x0001841dcbe0(var_c8h, var_b8h & (uint64_t)piVar6);\r\n                   |        }\r\n    0x183aa1fd3    |        if ((int64_t)var_130h < 0) {\r\n    0x183aa1fd9    |            piVar6 = (int64_t *)((uint64_t)piVar6 & var_130h);\r\n    0x183aa1fe6    |            func_0x0001841dcbe0(var_140h, piVar6);\r\n                   |        }\r\n                   |code_r0x000183aa207d:\r\n    0x183aa208f    |        if (((char)var_f0h == '\\x01') && (var_f8h < 0)) {\r\n    0x183aa20a8    |            func_0x0001841dcbe0(var_108h, var_f8h & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x183aa20c2    |        if (*(uint64_t *)0x191c71040 == (var_40h ^ (uint64_t)auStack_178)) {\r\n    0x183aa20dd    |            return arg2;\r\n                   |        }\r\n    0x183aa21e2    |        func_0x000185f05b40(var_40h ^ (uint64_t)auStack_178);\r\n                   |code_r0x000183aa21ea:\r\n    0x183aa21ea    |        func_0x000186450650(&var_c8h);\r\n    0x183aa21f7    |    } while( true );\r\n                   |}\r\n[{\"offset\":6503930992,\"name\":\"fcn.183aa1c70\",\"size\":1456,\"is-pure\":false,\"realsz\":1454,\"noreturn\":false,\"stackframe\":376,\"calltype\":\"ms\",\"cost\":406,\"cc\":33,\"loops\":6,\"bits\":64,\"type\":\"fcn\",\"nbbs\":51,\"edges\":76,\"ebbs\":4,\"signature\":\"fcn.183aa1c70(int64_t arg1, int64_t arg2, int64_t arg_8fh);\",\"minbound\":6503930992,\"maxbound\":6503932448,\"callrefs\":[{\"from\":6503931066,\"to\":6502310480,\"type\":\"CALL\"},{\"from\":6503931096,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6503931203,\"to\":6514565536,\"type\":\"CALL\"},{\"from\":6503931216,\"to\":6532013296,\"type\":\"CALL\"},{\"from\":6503931242,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6503931325,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6503931377,\"to\":6462089824,\"type\":\"CALL\"},{\"from\":6503931442,\"to\":6476506384,\"type\":\"CALL\"},{\"from\":6503931534,\"to\":6512708384,\"type\":\"CALL\"},{\"from\":6503931564,\"to\":6503931580,\"type\":\"CODE\"},{\"from\":6503931608,\"to\":6503931627,\"type\":\"CODE\"},{\"from\":6503931622,\"to\":6526594288,\"type\":\"CALL\"},{\"from\":6503931683,\"to\":6503931708,\"type\":\"CODE\"},{\"from\":6503931703,\"to\":6511513840,\"type\":\"CALL\"},{\"from\":6503931752,\"to\":6672753616,\"type\":\"CALL\"},{\"from\":6503931766,\"to\":6587962400,\"type\":\"CALL\"},{\"from\":6503931810,\"to\":6587967968,\"type\":\"CALL\"},{\"from\":6503931849,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6503931878,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6503931883,\"to\":6503932029,\"type\":\"CODE\"},{\"from\":6503931968,\"to\":6587959616,\"type\":\"CALL\"},{\"from\":6503932016,\"to\":6587967968,\"type\":\"CALL\"},{\"from\":6503932072,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6503932158,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6503932204,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6503932217,\"to\":6503932226,\"type\":\"CODE\"},{\"from\":6503932231,\"to\":6526594288,\"type\":\"CALL\"},{\"from\":6503932317,\"to\":6503931708,\"type\":\"CODE\"},{\"from\":6503932331,\"to\":6542069736,\"type\":\"CALL\"},{\"from\":6503932356,\"to\":6479662928,\"type\":\"CALL\"},{\"from\":6503932368,\"to\":6542069628,\"type\":\"CALL\"},{\"from\":6503932373,\"to\":6503931521,\"type\":\"CODE\"},{\"from\":6503932389,\"to\":6542089024,\"type\":\"CALL\"},{\"from\":6503932402,\"to\":6547637840,\"type\":\"CALL\"},{\"from\":6503932407,\"to\":6503931475,\"type\":\"CODE\"},{\"from\":6503932426,\"to\":6503931461,\"type\":\"CODE\"},{\"from\":6503932439,\"to\":6503931461,\"type\":\"CODE\"}],\"datarefs\":[{\"from\":6503931010,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6503931137,\"to\":6732211304,\"type\":\"DATA\"},{\"from\":6503931166,\"to\":6732211317,\"type\":\"DATA\"},{\"from\":6503931177,\"to\":6732211304,\"type\":\"DATA\"},{\"from\":6503931286,\"to\":6461708272,\"type\":\"DATA\"},{\"from\":6503931308,\"to\":6741850168,\"type\":\"DATA\"},{\"from\":6503931346,\"to\":6461708240,\"type\":\"DATA\"},{\"from\":6503931484,\"to\":6742148608,\"type\":\"DATA\"},{\"from\":6503931490,\"to\":6741832416,\"type\":\"DATA\"},{\"from\":6503931521,\"to\":6742148552,\"type\":\"DATA\"},{\"from\":6503931580,\"to\":6732211336,\"type\":\"DATA\"},{\"from\":6503931610,\"to\":6732211280,\"type\":\"DATA\"},{\"from\":6503931782,\"to\":6587963136,\"type\":\"DATA\"},{\"from\":6503931800,\"to\":6545109024,\"type\":\"DATA\"},{\"from\":6503931897,\"to\":6716742096,\"type\":\"DATA\"},{\"from\":6503931929,\"to\":6716742112,\"type\":\"DATA\"},{\"from\":6503931946,\"to\":6716742096,\"type\":\"DATA\"},{\"from\":6503931984,\"to\":6587963136,\"type\":\"DATA\"},{\"from\":6503932009,\"to\":6545109024,\"type\":\"DATA\"},{\"from\":6503932088,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6503932210,\"to\":6732211392,\"type\":\"DATA\"},{\"from\":6503932219,\"to\":6732211360,\"type\":\"DATA\"},{\"from\":6503932260,\"to\":6712689744,\"type\":\"DATA\"},{\"from\":6503932283,\"to\":6712689747,\"type\":\"DATA\"},{\"from\":6503932296,\"to\":6712689744,\"type\":\"DATA\"},{\"from\":6503932324,\"to\":6742148608,\"type\":\"DATA\"},{\"from\":6503932336,\"to\":6742148608,\"type\":\"DATA\"},{\"from\":6503932349,\"to\":6742148552,\"type\":\"DATA\"},{\"from\":6503932361,\"to\":6742148608,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6503931564,\"to\":6503931580,\"type\":\"CODE\"},{\"from\":6503931608,\"to\":6503931627,\"type\":\"CODE\"},{\"from\":6503931683,\"to\":6503931708,\"type\":\"CODE\"},{\"from\":6503931883,\"to\":6503932029,\"type\":\"CODE\"},{\"from\":6503932217,\"to\":6503932226,\"type\":\"CODE\"},{\"from\":6503932317,\"to\":6503931708,\"type\":\"CODE\"},{\"from\":6503932373,\"to\":6503931521,\"type\":\"CODE\"},{\"from\":6503932407,\"to\":6503931475,\"type\":\"CODE\"},{\"from\":6503932426,\"to\":6503931461,\"type\":\"CODE\"},{\"from\":6503932439,\"to\":6503931461,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":10,\"outdegree\":27,\"nlocals\":23,\"nargs\":3,\"stackvars\":[{\"name\":\"var_158h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-344}},{\"name\":\"var_140h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-320}},{\"name\":\"var_138h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-312}},{\"name\":\"var_130h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-304}},{\"name\":\"var_129h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-297}},{\"name\":\"var_128h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-296}},{\"name\":\"var_116h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-278}},{\"name\":\"var_108h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-264}},{\"name\":\"var_f8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-248}},{\"name\":\"var_f0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-240}},{\"name\":\"var_e0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-224}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-208}},{\"name\":\"var_cfh\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-207}},{\"name\":\"var_c8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-200}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_80h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-128}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_75h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-117}},{\"name\":\"var_71h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-113}},{\"name\":\"var_68h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-104}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}},{\"name\":\"arg_8fh\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":143}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"4974ms"}}