{"ok":true,"data":{"evidence_id":"ev_2dd29f5ed28d2bc9ec785f47d8a1547dfecb8382497c9982775c06e575a86c17","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x18336d6a0;pdgo @ 0x18336d6a0;afij @ 0x18336d6a0","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x18336d6a0;pdgo @ 0x18336d6a0;afij @ 0x18336d6a0","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":" |\r\n 0x18336d6a0 |void fcn.18336d6a0(int64_t arg1, int64_t arg2, int64_t arg3)\r\n |{\r\n | int32_t *piVar1;\r\n | int32_t iVar2;\r\n | int64_t iVar3;\r\n | code *pcVar4;\r\n | undefined4 *puVar5;\r\n | undefined4 *puVar6;\r\n | undefined8 *puVar7;\r\n | undefined auStack_98 [40];\r\n | int64_t var_70h;\r\n | int64_t var_50h;\r\n | int64_t var_48h;\r\n | int64_t var_40h;\r\n | \r\n 0x18336d6b5 | var_40h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_98;\r\n 0x18336d6c0 | if ((int32_t)arg2 == 0x3f) {\r\n 0x18336d6cc | iVar3 = *(int64_t *)(arg1 + 8);\r\n 0x18336d6d5 | puVar5 = (undefined4 *)fcn.185f006b8(0x40);\r\n 0x18336d6dd | *puVar5 = 1;\r\n 0x18336d6ea | *(undefined8 *)(puVar5 + 2) = 0x18336e4b0;\r\n 0x18336d6f5 | *(undefined8 *)(puVar5 + 4) = 0x18336e570;\r\n 0x18336d700 | *(undefined8 *)(puVar5 + 6) = 0x1841d75d0;\r\n 0x18336d70b | *(undefined8 *)(puVar5 + 8) = 0x18336d9c0;\r\n 0x18336d70f | puVar5[10] = 0x3f;\r\n 0x18336d716 | *(int64_t *)(puVar5 + 0xc) = iVar3;\r\n 0x18336d71d | if (iVar3 != 0) {\r\n 0x18336d724 | LOCK();\r\n 0x18336d724 | piVar1 = (int32_t *)(iVar3 + 8);\r\n 0x18336d724 | iVar2 = *piVar1;\r\n 0x18336d724 | *piVar1 = *piVar1 + 1;\r\n 0x18336d724 | UNLOCK();\r\n 0x18336d72e | if (iVar2 == 0x7fffffff) {\r\n 0x18336d8d9 | pcVar4 = (code *)swi(3);\r\n 0x18336d8d9 | (*pcVar4)();\r\n 0x18336d8d9 | return;\r\n | }\r\n | }\r\n 0x18336d737 | *(undefined8 *)(puVar5 + 0xe) = *(undefined8 *)arg3;\r\n 0x18336d73b | *(undefined8 *)arg3 = 0;\r\n 0x18336d747 | puVar6 = (undefined4 *)fcn.185f006b8(0x38);\r\n 0x18336d74f | *puVar6 = 1;\r\n 0x18336d75c | *(undefined8 *)(puVar6 + 2) = 0x18336e5d0;\r\n 0x18336d767 | *(undefined8 *)(puVar6 + 4) = 0x18336e5f0;\r\n 0x18336d76b | *(undefined8 *)(puVar6 + 6) = 0x1841d75d0;\r\n 0x18336d776 | *(undefined8 *)(puVar6 + 8) = 0x18336dc00;\r\n 0x18336d77a | puVar6[10] = 0x3f;\r\n 0x18336d782 | piVar1 = *(int32_t **)(arg1 + 0x10);\r\n 0x18336d786 | *(int32_t **)(puVar6 + 0xc) = piVar1;\r\n 0x18336d78d | if (piVar1 != (int32_t *)0x0) {\r\n 0x18336d794 | LOCK();\r\n 0x18336d794 | iVar2 = *piVar1;\r\n 0x18336d794 | *piVar1 = *piVar1 + 1;\r\n 0x18336d794 | UNLOCK();\r\n 0x18336d79e | if (iVar2 == 0x7fffffff) {\r\n 0x18336d8dc | pcVar4 = (code *)swi(3);\r\n 0x18336d8dc | (*pcVar4)();\r\n 0x18336d8dc | return;\r\n | }\r\n | }\r\n 0x18336d7b2 | fcn.184339cd0(&var_70h, 0x19088b9d8, 0x19088b990, 0x86);\r\n 0x18336d7c7 | puVar7 = (undefined8 *)fcn.185f006b8(8);\r\n 0x18336d7cf | *puVar7 = 0;\r\n 0x18336d7db | var_48h = fcn.185f006b8(0x38);\r\n 0x18336d7e5 | *(undefined4 *)var_48h = 1;\r\n 0x18336d7ee | *(undefined8 *)(var_48h + 8) = 0x181346940;\r\n 0x18336d7f9 | *(undefined8 *)(var_48h + 0x10) = 0x18336e300;\r\n 0x18336d7fd | *(undefined8 *)(var_48h + 0x18) = 0x1841d75d0;\r\n 0x18336d808 | *(undefined8 *)(var_48h + 0x20) = 0x18336df80;\r\n 0x18336d80c | *(undefined4 **)(var_48h + 0x28) = puVar5;\r\n 0x18336d810 | *(undefined8 **)(var_48h + 0x30) = puVar7;\r\n 0x18336d81e | var_50h = fcn.185f006b8(0x38);\r\n 0x18336d826 | *(undefined4 *)var_50h = 1;\r\n 0x18336d82f | *(undefined8 *)(var_50h + 8) = 0x1800b3540;\r\n 0x18336d83a | *(undefined8 *)(var_50h + 0x10) = 0x18336e440;\r\n 0x18336d83e | *(undefined8 *)(var_50h + 0x18) = 0x1841d75d0;\r\n 0x18336d849 | *(undefined8 *)(var_50h + 0x20) = 0x18336e0e0;\r\n 0x18336d84d | *(undefined4 **)(var_50h + 0x28) = puVar6;\r\n 0x18336d865 | if (((uint64_t)puVar7 & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n 0x18336d86a | fcn.1841c7180(puVar7);\r\n | }\r\n 0x18336d86f | *(undefined8 **)(var_50h + 0x30) = puVar7;\r\n 0x18336d888 | fcn.185549590(iVar3, &var_70h, &var_50h, &var_48h);\r\n 0x18336d88d | piVar1 = *(int32_t **)arg3;\r\n 0x18336d893 | if (piVar1 != (int32_t *)0x0) {\r\n 0x18336d8b8 | LOCK();\r\n 0x18336d8b8 | *piVar1 = *piVar1 + -1;\r\n 0x18336d8b8 | UNLOCK();\r\n 0x18336d8bb | if (*piVar1 == 0) {\r\n 0x18336d8c1 | (*(code *)0x185f59da0)();\r\n | }\r\n | }\r\n 0x18336d8a7 | if (*(uint64_t *)0x191c71040 == (var_40h ^ (uint64_t)auStack_98)) {\r\n 0x18336d8b7 | return;\r\n | }\r\n 0x18336d8ce | fcn.185f05b40(var_40h ^ (uint64_t)auStack_98);\r\n | }\r\n 0x18336d8d6 | pcVar4 = (code *)swi(3);\r\n 0x18336d8d6 | (*pcVar4)();\r\n 0x18336d8d6 | return;\r\n |}\r\n[{\"offset\":6496376480,\"name\":\"fcn.18336d6a0\",\"size\":573,\"is-pure\":false,\"realsz\":569,\"noreturn\":false,\"stackframe\":152,\"calltype\":\"ms\",\"cost\":168,\"cc\":13,\"loops\":2,\"bits\":64,\"type\":\"fcn\",\"nbbs\":16,\"edges\":21,\"ebbs\":4,\"signature\":\"fcn.18336d6a0(int64_t arg1, int64_t arg2, int64_t arg3);\",\"minbound\":6496376480,\"maxbound\":6496377053,\"callrefs\":[{\"from\":6496376533,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376647,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376765,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6496376775,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376795,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376862,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376938,\"to\":6511423872,\"type\":\"CALL\"},{\"from\":6496376968,\"to\":6531880336,\"type\":\"CALL\"},{\"from\":6496377025,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6496377031,\"to\":6496376981,\"type\":\"CODE\"},{\"from\":6496377041,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6496376494,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6496376547,\"to\":6496380080,\"type\":\"DATA\"},{\"from\":6496376558,\"to\":6496380272,\"type\":\"DATA\"},{\"from\":6496376569,\"to\":6511490512,\"type\":\"DATA\"},{\"from\":6496376580,\"to\":6496377280,\"type\":\"DATA\"},{\"from\":6496376661,\"to\":6496380368,\"type\":\"DATA\"},{\"from\":6496376672,\"to\":6496380400,\"type\":\"DATA\"},{\"from\":6496376687,\"to\":6496377856,\"type\":\"DATA\"},{\"from\":6496376740,\"to\":6719846872,\"type\":\"DATA\"},{\"from\":6496376747,\"to\":6719846800,\"type\":\"DATA\"},{\"from\":6496376807,\"to\":6462662976,\"type\":\"DATA\"},{\"from\":6496376818,\"to\":6496379648,\"type\":\"DATA\"},{\"from\":6496376833,\"to\":6496378752,\"type\":\"DATA\"},{\"from\":6496376872,\"to\":6443185472,\"type\":\"DATA\"},{\"from\":6496376883,\"to\":6496379968,\"type\":\"DATA\"},{\"from\":6496376898,\"to\":6496379104,\"type\":\"DATA\"},{\"from\":6496376926,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6496376989,\"to\":6740709440,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6496377031,\"to\":6496376981,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":1,\"outdegree\":10,\"nlocals\":4,\"nargs\":3,\"stackvars\":[{\"name\":\"var_70h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-112}},{\"name\":\"var_50h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-80}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}}],\"regvars\":[{\"name\":\"arg3\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r8\"}},{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":" |\r\n 0x18336d6a0 |void fcn.18336d6a0(int64_t arg1, int64_t arg2, int64_t arg3)\r\n |{\r\n | int32_t *piVar1;\r\n | int32_t iVar2;\r\n | int64_t iVar3;\r\n | code *pcVar4;\r\n | undefined4 *puVar5;\r\n | undefined4 *puVar6;\r\n | undefined8 *puVar7;\r\n | undefined auStack_98 [40];\r\n | int64_t var_70h;\r\n | int64_t var_50h;\r\n | int64_t var_48h;\r\n | int64_t var_40h;\r\n | \r\n 0x18336d6b5 | var_40h = *(uint64_t *)0x191c71040 ^ (uint64_t)auStack_98;\r\n 0x18336d6c0 | if ((int32_t)arg2 == 0x3f) {\r\n 0x18336d6cc | iVar3 = *(int64_t *)(arg1 + 8);\r\n 0x18336d6d5 | puVar5 = (undefined4 *)fcn.185f006b8(0x40);\r\n 0x18336d6dd | *puVar5 = 1;\r\n 0x18336d6ea | *(undefined8 *)(puVar5 + 2) = 0x18336e4b0;\r\n 0x18336d6f5 | *(undefined8 *)(puVar5 + 4) = 0x18336e570;\r\n 0x18336d700 | *(undefined8 *)(puVar5 + 6) = 0x1841d75d0;\r\n 0x18336d70b | *(undefined8 *)(puVar5 + 8) = 0x18336d9c0;\r\n 0x18336d70f | puVar5[10] = 0x3f;\r\n 0x18336d716 | *(int64_t *)(puVar5 + 0xc) = iVar3;\r\n 0x18336d71d | if (iVar3 != 0) {\r\n 0x18336d724 | LOCK();\r\n 0x18336d724 | piVar1 = (int32_t *)(iVar3 + 8);\r\n 0x18336d724 | iVar2 = *piVar1;\r\n 0x18336d724 | *piVar1 = *piVar1 + 1;\r\n 0x18336d724 | UNLOCK();\r\n 0x18336d72e | if (iVar2 == 0x7fffffff) {\r\n 0x18336d8d9 | pcVar4 = (code *)swi(3);\r\n 0x18336d8d9 | (*pcVar4)();\r\n 0x18336d8d9 | return;\r\n | }\r\n | }\r\n 0x18336d737 | *(undefined8 *)(puVar5 + 0xe) = *(undefined8 *)arg3;\r\n 0x18336d73b | *(undefined8 *)arg3 = 0;\r\n 0x18336d747 | puVar6 = (undefined4 *)fcn.185f006b8(0x38);\r\n 0x18336d74f | *puVar6 = 1;\r\n 0x18336d75c | *(undefined8 *)(puVar6 + 2) = 0x18336e5d0;\r\n 0x18336d767 | *(undefined8 *)(puVar6 + 4) = 0x18336e5f0;\r\n 0x18336d76b | *(undefined8 *)(puVar6 + 6) = 0x1841d75d0;\r\n 0x18336d776 | *(undefined8 *)(puVar6 + 8) = 0x18336dc00;\r\n 0x18336d77a | puVar6[10] = 0x3f;\r\n 0x18336d782 | piVar1 = *(int32_t **)(arg1 + 0x10);\r\n 0x18336d786 | *(int32_t **)(puVar6 + 0xc) = piVar1;\r\n 0x18336d78d | if (piVar1 != (int32_t *)0x0) {\r\n 0x18336d794 | LOCK();\r\n 0x18336d794 | iVar2 = *piVar1;\r\n 0x18336d794 | *piVar1 = *piVar1 + 1;\r\n 0x18336d794 | UNLOCK();\r\n 0x18336d79e | if (iVar2 == 0x7fffffff) {\r\n 0x18336d8dc | pcVar4 = (code *)swi(3);\r\n 0x18336d8dc | (*pcVar4)();\r\n 0x18336d8dc | return;\r\n | }\r\n | }\r\n 0x18336d7b2 | fcn.184339cd0(&var_70h, 0x19088b9d8, 0x19088b990, 0x86);\r\n 0x18336d7c7 | puVar7 = (undefined8 *)fcn.185f006b8(8);\r\n 0x18336d7cf | *puVar7 = 0;\r\n 0x18336d7db | var_48h = fcn.185f006b8(0x38);\r\n 0x18336d7e5 | *(undefined4 *)var_48h = 1;\r\n 0x18336d7ee | *(undefined8 *)(var_48h + 8) = 0x181346940;\r\n 0x18336d7f9 | *(undefined8 *)(var_48h + 0x10) = 0x18336e300;\r\n 0x18336d7fd | *(undefined8 *)(var_48h + 0x18) = 0x1841d75d0;\r\n 0x18336d808 | *(undefined8 *)(var_48h + 0x20) = 0x18336df80;\r\n 0x18336d80c | *(undefined4 **)(var_48h + 0x28) = puVar5;\r\n 0x18336d810 | *(undefined8 **)(var_48h + 0x30) = puVar7;\r\n 0x18336d81e | var_50h = fcn.185f006b8(0x38);\r\n 0x18336d826 | *(undefined4 *)var_50h = 1;\r\n 0x18336d82f | *(undefined8 *)(var_50h + 8) = 0x1800b3540;\r\n 0x18336d83a | *(undefined8 *)(var_50h + 0x10) = 0x18336e440;\r\n 0x18336d83e | *(undefined8 *)(var_50h + 0x18) = 0x1841d75d0;\r\n 0x18336d849 | *(undefined8 *)(var_50h + 0x20) = 0x18336e0e0;\r\n 0x18336d84d | *(undefined4 **)(var_50h + 0x28) = puVar6;\r\n 0x18336d865 | if (((uint64_t)puVar7 & 0xfffffffc00000000) == *(uint64_t *)0x191cd6d08) {\r\n 0x18336d86a | fcn.1841c7180(puVar7);\r\n | }\r\n 0x18336d86f | *(undefined8 **)(var_50h + 0x30) = puVar7;\r\n 0x18336d888 | fcn.185549590(iVar3, &var_70h, &var_50h, &var_48h);\r\n 0x18336d88d | piVar1 = *(int32_t **)arg3;\r\n 0x18336d893 | if (piVar1 != (int32_t *)0x0) {\r\n 0x18336d8b8 | LOCK();\r\n 0x18336d8b8 | *piVar1 = *piVar1 + -1;\r\n 0x18336d8b8 | UNLOCK();\r\n 0x18336d8bb | if (*piVar1 == 0) {\r\n 0x18336d8c1 | (*(code *)0x185f59da0)();\r\n | }\r\n | }\r\n 0x18336d8a7 | if (*(uint64_t *)0x191c71040 == (var_40h ^ (uint64_t)auStack_98)) {\r\n 0x18336d8b7 | return;\r\n | }\r\n 0x18336d8ce | fcn.185f05b40(var_40h ^ (uint64_t)auStack_98);\r\n | }\r\n 0x18336d8d6 | pcVar4 = (code *)swi(3);\r\n 0x18336d8d6 | (*pcVar4)();\r\n 0x18336d8d6 | return;\r\n |}\r\n[{\"offset\":6496376480,\"name\":\"fcn.18336d6a0\",\"size\":573,\"is-pure\":false,\"realsz\":569,\"noreturn\":false,\"stackframe\":152,\"calltype\":\"ms\",\"cost\":168,\"cc\":13,\"loops\":2,\"bits\":64,\"type\":\"fcn\",\"nbbs\":16,\"edges\":21,\"ebbs\":4,\"signature\":\"fcn.18336d6a0(int64_t arg1, int64_t arg2, int64_t arg3);\",\"minbound\":6496376480,\"maxbound\":6496377053,\"callrefs\":[{\"from\":6496376533,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376647,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376765,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6496376775,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376795,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376862,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6496376938,\"to\":6511423872,\"type\":\"CALL\"},{\"from\":6496376968,\"to\":6531880336,\"type\":\"CALL\"},{\"from\":6496377025,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6496377031,\"to\":6496376981,\"type\":\"CODE\"},{\"from\":6496377041,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6496376494,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6496376547,\"to\":6496380080,\"type\":\"DATA\"},{\"from\":6496376558,\"to\":6496380272,\"type\":\"DATA\"},{\"from\":6496376569,\"to\":6511490512,\"type\":\"DATA\"},{\"from\":6496376580,\"to\":6496377280,\"type\":\"DATA\"},{\"from\":6496376661,\"to\":6496380368,\"type\":\"DATA\"},{\"from\":6496376672,\"to\":6496380400,\"type\":\"DATA\"},{\"from\":6496376687,\"to\":6496377856,\"type\":\"DATA\"},{\"from\":6496376740,\"to\":6719846872,\"type\":\"DATA\"},{\"from\":6496376747,\"to\":6719846800,\"type\":\"DATA\"},{\"from\":6496376807,\"to\":6462662976,\"type\":\"DATA\"},{\"from\":6496376818,\"to\":6496379648,\"type\":\"DATA\"},{\"from\":6496376833,\"to\":6496378752,\"type\":\"DATA\"},{\"from\":6496376872,\"to\":6443185472,\"type\":\"DATA\"},{\"from\":6496376883,\"to\":6496379968,\"type\":\"DATA\"},{\"from\":6496376898,\"to\":6496379104,\"type\":\"DATA\"},{\"from\":6496376926,\"to\":6741126408,\"type\":\"DATA\"},{\"from\":6496376989,\"to\":6740709440,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6496377031,\"to\":6496376981,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":1,\"outdegree\":10,\"nlocals\":4,\"nargs\":3,\"stackvars\":[{\"name\":\"var_70h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-112}},{\"name\":\"var_50h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-80}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}},{\"name\":\"var_40h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-64}}],\"regvars\":[{\"name\":\"arg3\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"r8\"}},{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"5198ms"}}