{"name": "check_is_frozen", "code": "__int64 __fastcall check_is_frozen ( __int64 @@a1@@ ) { int * v1 ; char * v2 ; __int64 result ; struct stat64 @@v4@@ ; unsigned __int64 @@v5@@ ; @@v5@@ = __readfsqword ( Number ) ; if ( stat64 ( * ( const char * * ) ( @@a1@@ + Number ) , & @@v4@@ ) == Number ) { if ( * _errno_location ( ) == Number ) { result = Number L ; } else { v1 = _errno_location ( ) ; v2 = strerror ( * v1 ) ; g_log ( Number L , Number L , String , * ( const char * * ) ( @@a1@@ + Number ) , v2 ) ; result = Number L ; } } else { g_log ( Number L , Number L , String String , * ( const char * * ) ( @@a1@@ + Number ) ) ; result = Number L ; } return result ; }", "source": [{"n": "a1", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r56"}, {"n": "v4", "t": {"T": 6, "n": "struct stat64", "l": [{"T": 4, "n": "st_dev", "t": "__dev_t", "s": 8}, {"T": 4, "n": "st_ino", "t": "__ino64_t", "s": 8}, {"T": 4, "n": "st_nlink", "t": "__nlink_t", "s": 8}, {"T": 4, "n": "st_mode", "t": "__mode_t", "s": 4}, {"T": 4, "n": "st_uid", "t": "__uid_t", "s": 4}, {"T": 4, "n": "st_gid", "t": "__gid_t", "s": 4}, {"T": 4, "n": "__pad0", "t": "int", "s": 4}, {"T": 4, "n": "st_rdev", "t": "__dev_t", "s": 8}, {"T": 4, "n": "st_size", "t": "__off_t", "s": 8}, {"T": 4, "n": "st_blksize", "t": "__blksize_t", "s": 8}, {"T": 4, "n": "st_blocks", "t": "__blkcnt64_t", "s": 8}, {"T": 4, "n": "st_atim", "t": "timespec", "s": 16}, {"T": 4, "n": "st_mtim", "t": "timespec", "s": 16}, {"T": 4, "n": "st_ctim", "t": "timespec", "s": 16}, {"T": 4, "n": "__unused", "t": "__syscall_slong_t[3]", "s": 24}]}, "location": "s160"}, {"n": "v5", "t": {"T": 1, "n": "unsigned __int64", "s": 8}, "location": "s8"}]}
{"name": "main", "code": "int __cdecl main ( int @@argc@@ , const char * * @@argv@@ , const char * * @@envp@@ ) { __int64 v3 ; int @@v5@@ ; __int64 @@v6@@ ; __int64 @@v7@@ ; @@v5@@ = Number ; @@v6@@ = g_malloc0_n ( Number L , Number L , @@envp@@ ) ; @@v7@@ = g_malloc0_n ( Number L , Number L , v3 ) ; * ( _DWORD * ) ( @@v7@@ + Number ) = Number ; module_call_init ( Number L ) ; init_dfl_pathnames ( ) ; config_load ( @@v7@@ ) ; config_parse ( @@v7@@ , @@argc@@ , ( char * const * ) @@argv@@ ) ; if ( ! * ( _QWORD * ) ( @@v7@@ + Number ) ) * ( _QWORD * ) ( @@v7@@ + Number ) = g_strdup ( qword_3018 ) ; if ( ! * ( _QWORD * ) ( @@v7@@ + Number ) ) * ( _QWORD * ) ( @@v7@@ + Number ) = g_strdup ( dfl_pathnames ) ; if ( ! * ( _QWORD * ) ( @@v7@@ + Number ) ) * ( _QWORD * ) ( @@v7@@ + Number ) = g_strdup ( String ) ; if ( ! * ( _QWORD * ) @@v7@@ ) { if ( ! strcmp ( * ( const char * * ) ( @@v7@@ + Number ) , String ) ) { * ( _QWORD * ) @@v7@@ = g_strdup ( String ) ; } else { if ( strcmp ( * ( const char * * ) ( @@v7@@ + Number ) , String ) ) { g_log ( Number L , Number L , String ) ; @@v5@@ = Number ; goto LABEL_16 ; } * ( _QWORD * ) @@v7@@ = g_strdup ( String ) ; } } * ( _DWORD * ) ( @@v6@@ + Number ) = * ( _DWORD * ) ( @@v7@@ + Number ) ; * ( _QWORD * ) ( @@v6@@ + Number ) = stderr ; * ( _QWORD * ) ( @@v6@@ + Number ) = * ( _QWORD * ) ( @@v7@@ + Number ) ; * ( _QWORD * ) ( @@v6@@ + Number ) = g_strdup_printf ( String , * ( const char * * ) ( @@v7@@ + Number ) ) ; * ( _QWORD * ) ( @@v6@@ + Number ) = g_strdup_printf ( String , * ( const char * * ) ( @@v7@@ + Number ) ) ; * ( _BYTE * ) ( @@v6@@ + Number ) = check_is_frozen ( @@v6@@ ) ; if ( * ( _DWORD * ) ( @@v7@@ + Number ) ) config_dump ( @@v7@@ ) ; else @@v5@@ = run_agent ( @@v6@@ , @@v7@@ ) ; LABEL_16 : if ( * ( _QWORD * ) ( @@v6@@ + Number ) ) { ga_command_state_cleanup_all ( * ( _QWORD * ) ( @@v6@@ + Number ) ) ; ga_command_state_free ( * ( _QWORD * ) ( @@v6@@ + Number ) ) ; json_message_parser_destroy ( @@v6@@ ) ; } if ( * ( _QWORD * ) ( @@v6@@ + Number ) ) ga_channel_free ( * ( _QWORD * ) ( @@v6@@ + Number ) ) ; g_free ( * ( _QWORD * ) ( @@v6@@ + Number ) ) ; g_free ( * ( _QWORD * ) ( @@v6@@ + Number ) ) ; if ( * ( _DWORD * ) ( @@v7@@ + Number ) ) unlink ( * ( const char * * ) ( @@v7@@ + Number ) ) ; config_free ( ( _QWORD * ) @@v7@@ ) ; if ( * ( _QWORD * ) ( @@v6@@ + Number ) ) g_main_loop_unref ( * ( _QWORD * ) ( @@v6@@ + Number ) ) ; g_free ( @@v6@@ ) ; return @@v5@@ ; }", "source": [{"n": "envp", "t": {"T": 3, "t": "const char *"}, "location": "r16"}, {"n": "argc", "t": {"T": 1, "n": "int", "s": 4}, "location": "r56"}, {"n": "argv", "t": {"T": 3, "t": "const char *"}, "location": "r64"}, {"n": "v6", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "s16"}, {"n": "v5", "t": {"T": 1, "n": "int", "s": 4}, "location": "s20"}, {"n": "v7", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "s8"}]}