{"ok":true,"data":{"evidence_id":"ev_630ca1da1365a44bcf6cafeaa2c1265e92a253124ab39a299cc74fc7b242b2e9","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x183819180;pdgo @ 0x183819180;afij @ 0x183819180","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x183819180;pdgo @ 0x183819180;afij @ 0x183819180","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":"                   |\r\n    0x183819180    |void fcn.183819180(int64_t arg1)\r\n                   |{\r\n                   |    int32_t iVar1;\r\n                   |    int64_t iVar2;\r\n                   |    int32_t *piVar3;\r\n                   |    code *pcVar4;\r\n                   |    undefined8 uVar5;\r\n                   |    int32_t *piVar6;\r\n                   |    int64_t var_158h;\r\n                   |    int64_t var_148h;\r\n                   |    int64_t var_140h;\r\n                   |    int64_t iStack_138;\r\n                   |    int64_t var_100h;\r\n                   |    int64_t var_f0h;\r\n                   |    int64_t var_d8h;\r\n                   |    int64_t var_28h;\r\n                   |    \r\n    0x1838191b3    |    if ((*(int32_t *)0x191de85c0 < 1) && ((*(int32_t *)0x191cd6be0 != 0 || (*(int64_t *)0x191de85c8 != 0)))) {\r\n    0x1838191c0    |        func_0x00018030d390(&var_158h, 0x190c23b08, 0x4a3, 0);\r\n    0x1838191eb    |        uVar5 = func_0x000184dcd0d0(&var_148h, 0x1908fb27c, 6);\r\n    0x183819200    |        uVar5 = func_0x000184dcd0d0(uVar5, 0x190c24058, 0x25);\r\n    0x18381920c    |        uVar5 = func_0x0001813014a0(uVar5, *(undefined8 *)(arg1 + 0x20));\r\n    0x183819221    |        uVar5 = func_0x000184dcd0d0(uVar5, 0x190c24080, 0x17);\r\n    0x18381922d    |        func_0x0001813014a0(uVar5, *(undefined8 *)(arg1 + 0x40));\r\n    0x183819239    |        var_158h = 0x18ff81648;\r\n    0x1838191c0    |        func_0x00018030e9d0(&var_158h);\r\n    0x183819253    |        *(undefined8 *)((int64_t)&var_148h + (int64_t)*(int32_t *)(var_148h + 4)) = 0x18fe1b290;\r\n    0x18381925f    |        var_140h = 0x18fe20d40;\r\n    0x183819267    |        if (var_f0h._7_1_ < '\\0') {\r\n    0x183819280    |            func_0x0001841dcbe0(var_100h, CONCAT17(var_f0h._7_1_, (unkbyte7)var_f0h) & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x183819291    |        var_140h = 0x18fe20db0;\r\n    0x1838192a2    |        if (iStack_138 != 0x191de1450) {\r\n    0x1838193b4    |            LOCK();\r\n    0x1838193b4    |            piVar6 = (int32_t *)(iStack_138 + 8);\r\n    0x1838193b4    |            iVar1 = *piVar6;\r\n    0x1838193b4    |            *piVar6 = *piVar6 + -1;\r\n    0x1838193b4    |            UNLOCK();\r\n    0x1838193bb    |            if (iVar1 == 0) {\r\n    0x1838193c8    |                (*(code *)0x185f59da0)();\r\n                   |            }\r\n                   |        }\r\n    0x183819285    |        func_0x00018424db70(&var_140h);\r\n    0x1838192a8    |        func_0x0001848f8b80(&var_d8h);\r\n                   |    }\r\n    0x1838192c0    |    iVar2 = *(int64_t *)(arg1 + 0x88);\r\n    0x1838192c7    |    *(undefined8 *)(arg1 + 0x88) = 0;\r\n    0x1838192d5    |    if (iVar2 != 0) {\r\n    0x1838192dc    |        func_0x000183829160(iVar2, 1);\r\n                   |    }\r\n    0x1838192e8    |    func_0x00018382c020(*(undefined8 *)(arg1 + 0xa0));\r\n    0x1838192f4    |    *(int64_t *)(arg1 + 0x98) = arg1 + 0xa0;\r\n    0x1838192fe    |    *(undefined8 *)(arg1 + 0xa0) = 0;\r\n    0x1838192fe    |    *(undefined8 *)(arg1 + 0xa8) = 0;\r\n    0x183819309    |    func_0x00018382be90(*(undefined8 *)(arg1 + 0x18));\r\n    0x183819312    |    *(int64_t *)(arg1 + 0x10) = arg1 + 0x18;\r\n    0x183819316    |    *(undefined8 *)(arg1 + 0x18) = 0;\r\n    0x183819316    |    *(undefined8 *)(arg1 + 0x20) = 0;\r\n    0x18381931e    |    func_0x00018382bf70(*(undefined8 *)(arg1 + 0x38));\r\n    0x183819327    |    *(int64_t *)(arg1 + 0x30) = arg1 + 0x38;\r\n    0x18381932b    |    *(undefined8 *)(arg1 + 0x38) = 0;\r\n    0x18381932b    |    *(undefined8 *)(arg1 + 0x40) = 0;\r\n    0x183819339    |    if (*(int64_t *)(arg1 + 0x90) != 0) {\r\n    0x18381933b    |        func_0x0001838193e0();\r\n                   |    }\r\n    0x183819347    |    *(undefined *)(*(int64_t *)(arg1 + 0xb8) + 4) = 1;\r\n    0x183819350    |    piVar6 = (int32_t *)func_0x000185f006b8(8);\r\n    0x183819355    |    *piVar6 = 0;\r\n    0x18381935b    |    *(undefined *)(piVar6 + 1) = 0;\r\n    0x183819362    |    if (piVar6 != (int32_t *)0x0) {\r\n    0x183819369    |        LOCK();\r\n    0x183819369    |        iVar1 = *piVar6;\r\n    0x183819369    |        *piVar6 = *piVar6 + 1;\r\n    0x183819369    |        UNLOCK();\r\n    0x183819373    |        if (iVar1 == 0x7fffffff) {\r\n    0x1838193ac    |            pcVar4 = (code *)swi(3);\r\n    0x1838193ac    |            (*pcVar4)();\r\n    0x1838193ac    |            return;\r\n                   |        }\r\n                   |    }\r\n    0x183819375    |    piVar3 = *(int32_t **)(arg1 + 0xb8);\r\n    0x18381937c    |    *(int32_t **)(arg1 + 0xb8) = piVar6;\r\n    0x183819386    |    if (piVar3 != (int32_t *)0x0) {\r\n    0x183819388    |        LOCK();\r\n    0x183819388    |        *piVar3 = *piVar3 + -1;\r\n    0x183819388    |        UNLOCK();\r\n    0x18381938b    |        if (*piVar3 == 0) {\r\n    0x1838193a5    |            func_0x0001841dcbe0(piVar3, 8);\r\n                   |        }\r\n                   |    }\r\n    0x18381939f    |    return;\r\n                   |}\r\n[{\"offset\":6501273984,\"name\":\"fcn.183819180\",\"size\":595,\"is-pure\":false,\"realsz\":593,\"noreturn\":false,\"stackframe\":376,\"calltype\":\"ms\",\"cost\":180,\"cc\":14,\"loops\":3,\"bits\":64,\"type\":\"fcn\",\"nbbs\":20,\"edges\":30,\"ebbs\":2,\"signature\":\"fcn.183819180(int64_t arg1);\",\"minbound\":6501273984,\"maxbound\":6501274579,\"callrefs\":[{\"from\":6501274065,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6501274091,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501274112,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501274124,\"to\":6462379168,\"type\":\"CALL\"},{\"from\":6501274145,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501274157,\"to\":6462379168,\"type\":\"CALL\"},{\"from\":6501274176,\"to\":6445656528,\"type\":\"CALL\"},{\"from\":6501274240,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501274291,\"to\":6511975280,\"type\":\"CALL\"},{\"from\":6501274299,\"to\":6518967168,\"type\":\"CALL\"},{\"from\":6501274332,\"to\":6501339488,\"type\":\"CALL\"},{\"from\":6501274351,\"to\":6501351456,\"type\":\"CALL\"},{\"from\":6501274381,\"to\":6501351056,\"type\":\"CALL\"},{\"from\":6501274402,\"to\":6501351280,\"type\":\"CALL\"},{\"from\":6501274427,\"to\":6501274592,\"type\":\"CALL\"},{\"from\":6501274448,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6501274533,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501274538,\"to\":6501274509,\"type\":\"CODE\"},{\"from\":6501274568,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6501274574,\"to\":6501274280,\"type\":\"CODE\"}],\"datarefs\":[{\"from\":6501274005,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6501274018,\"to\":6741126112,\"type\":\"DATA\"},{\"from\":6501274027,\"to\":6742246856,\"type\":\"DATA\"},{\"from\":6501274041,\"to\":6723615496,\"type\":\"DATA\"},{\"from\":6501274075,\"to\":6720303740,\"type\":\"DATA\"},{\"from\":6501274096,\"to\":6723616856,\"type\":\"DATA\"},{\"from\":6501274129,\"to\":6723616896,\"type\":\"DATA\"},{\"from\":6501274162,\"to\":6710367816,\"type\":\"DATA\"},{\"from\":6501274188,\"to\":6708900496,\"type\":\"DATA\"},{\"from\":6501274200,\"to\":6708923712,\"type\":\"DATA\"},{\"from\":6501274250,\"to\":6708923824,\"type\":\"DATA\"},{\"from\":6501274264,\"to\":6742217808,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6501274538,\"to\":6501274509,\"type\":\"CODE\"},{\"from\":6501274574,\"to\":6501274280,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":2,\"outdegree\":18,\"nlocals\":7,\"nargs\":1,\"stackvars\":[{\"name\":\"var_158h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-344}},{\"name\":\"var_148h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-328}},{\"name\":\"var_140h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-320}},{\"name\":\"var_100h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-256}},{\"name\":\"var_f0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-240}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_28h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-40}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":"                   |\r\n    0x183819180    |void fcn.183819180(int64_t arg1)\r\n                   |{\r\n                   |    int32_t iVar1;\r\n                   |    int64_t iVar2;\r\n                   |    int32_t *piVar3;\r\n                   |    code *pcVar4;\r\n                   |    undefined8 uVar5;\r\n                   |    int32_t *piVar6;\r\n                   |    int64_t var_158h;\r\n                   |    int64_t var_148h;\r\n                   |    int64_t var_140h;\r\n                   |    int64_t iStack_138;\r\n                   |    int64_t var_100h;\r\n                   |    int64_t var_f0h;\r\n                   |    int64_t var_d8h;\r\n                   |    int64_t var_28h;\r\n                   |    \r\n    0x1838191b3    |    if ((*(int32_t *)0x191de85c0 < 1) && ((*(int32_t *)0x191cd6be0 != 0 || (*(int64_t *)0x191de85c8 != 0)))) {\r\n    0x1838191c0    |        func_0x00018030d390(&var_158h, 0x190c23b08, 0x4a3, 0);\r\n    0x1838191eb    |        uVar5 = func_0x000184dcd0d0(&var_148h, 0x1908fb27c, 6);\r\n    0x183819200    |        uVar5 = func_0x000184dcd0d0(uVar5, 0x190c24058, 0x25);\r\n    0x18381920c    |        uVar5 = func_0x0001813014a0(uVar5, *(undefined8 *)(arg1 + 0x20));\r\n    0x183819221    |        uVar5 = func_0x000184dcd0d0(uVar5, 0x190c24080, 0x17);\r\n    0x18381922d    |        func_0x0001813014a0(uVar5, *(undefined8 *)(arg1 + 0x40));\r\n    0x183819239    |        var_158h = 0x18ff81648;\r\n    0x1838191c0    |        func_0x00018030e9d0(&var_158h);\r\n    0x183819253    |        *(undefined8 *)((int64_t)&var_148h + (int64_t)*(int32_t *)(var_148h + 4)) = 0x18fe1b290;\r\n    0x18381925f    |        var_140h = 0x18fe20d40;\r\n    0x183819267    |        if (var_f0h._7_1_ < '\\0') {\r\n    0x183819280    |            func_0x0001841dcbe0(var_100h, CONCAT17(var_f0h._7_1_, (unkbyte7)var_f0h) & 0x7fffffffffffffff);\r\n                   |        }\r\n    0x183819291    |        var_140h = 0x18fe20db0;\r\n    0x1838192a2    |        if (iStack_138 != 0x191de1450) {\r\n    0x1838193b4    |            LOCK();\r\n    0x1838193b4    |            piVar6 = (int32_t *)(iStack_138 + 8);\r\n    0x1838193b4    |            iVar1 = *piVar6;\r\n    0x1838193b4    |            *piVar6 = *piVar6 + -1;\r\n    0x1838193b4    |            UNLOCK();\r\n    0x1838193bb    |            if (iVar1 == 0) {\r\n    0x1838193c8    |                (*(code *)0x185f59da0)();\r\n                   |            }\r\n                   |        }\r\n    0x183819285    |        func_0x00018424db70(&var_140h);\r\n    0x1838192a8    |        func_0x0001848f8b80(&var_d8h);\r\n                   |    }\r\n    0x1838192c0    |    iVar2 = *(int64_t *)(arg1 + 0x88);\r\n    0x1838192c7    |    *(undefined8 *)(arg1 + 0x88) = 0;\r\n    0x1838192d5    |    if (iVar2 != 0) {\r\n    0x1838192dc    |        func_0x000183829160(iVar2, 1);\r\n                   |    }\r\n    0x1838192e8    |    func_0x00018382c020(*(undefined8 *)(arg1 + 0xa0));\r\n    0x1838192f4    |    *(int64_t *)(arg1 + 0x98) = arg1 + 0xa0;\r\n    0x1838192fe    |    *(undefined8 *)(arg1 + 0xa0) = 0;\r\n    0x1838192fe    |    *(undefined8 *)(arg1 + 0xa8) = 0;\r\n    0x183819309    |    func_0x00018382be90(*(undefined8 *)(arg1 + 0x18));\r\n    0x183819312    |    *(int64_t *)(arg1 + 0x10) = arg1 + 0x18;\r\n    0x183819316    |    *(undefined8 *)(arg1 + 0x18) = 0;\r\n    0x183819316    |    *(undefined8 *)(arg1 + 0x20) = 0;\r\n    0x18381931e    |    func_0x00018382bf70(*(undefined8 *)(arg1 + 0x38));\r\n    0x183819327    |    *(int64_t *)(arg1 + 0x30) = arg1 + 0x38;\r\n    0x18381932b    |    *(undefined8 *)(arg1 + 0x38) = 0;\r\n    0x18381932b    |    *(undefined8 *)(arg1 + 0x40) = 0;\r\n    0x183819339    |    if (*(int64_t *)(arg1 + 0x90) != 0) {\r\n    0x18381933b    |        func_0x0001838193e0();\r\n                   |    }\r\n    0x183819347    |    *(undefined *)(*(int64_t *)(arg1 + 0xb8) + 4) = 1;\r\n    0x183819350    |    piVar6 = (int32_t *)func_0x000185f006b8(8);\r\n    0x183819355    |    *piVar6 = 0;\r\n    0x18381935b    |    *(undefined *)(piVar6 + 1) = 0;\r\n    0x183819362    |    if (piVar6 != (int32_t *)0x0) {\r\n    0x183819369    |        LOCK();\r\n    0x183819369    |        iVar1 = *piVar6;\r\n    0x183819369    |        *piVar6 = *piVar6 + 1;\r\n    0x183819369    |        UNLOCK();\r\n    0x183819373    |        if (iVar1 == 0x7fffffff) {\r\n    0x1838193ac    |            pcVar4 = (code *)swi(3);\r\n    0x1838193ac    |            (*pcVar4)();\r\n    0x1838193ac    |            return;\r\n                   |        }\r\n                   |    }\r\n    0x183819375    |    piVar3 = *(int32_t **)(arg1 + 0xb8);\r\n    0x18381937c    |    *(int32_t **)(arg1 + 0xb8) = piVar6;\r\n    0x183819386    |    if (piVar3 != (int32_t *)0x0) {\r\n    0x183819388    |        LOCK();\r\n    0x183819388    |        *piVar3 = *piVar3 + -1;\r\n    0x183819388    |        UNLOCK();\r\n    0x18381938b    |        if (*piVar3 == 0) {\r\n    0x1838193a5    |            func_0x0001841dcbe0(piVar3, 8);\r\n                   |        }\r\n                   |    }\r\n    0x18381939f    |    return;\r\n                   |}\r\n[{\"offset\":6501273984,\"name\":\"fcn.183819180\",\"size\":595,\"is-pure\":false,\"realsz\":593,\"noreturn\":false,\"stackframe\":376,\"calltype\":\"ms\",\"cost\":180,\"cc\":14,\"loops\":3,\"bits\":64,\"type\":\"fcn\",\"nbbs\":20,\"edges\":30,\"ebbs\":2,\"signature\":\"fcn.183819180(int64_t arg1);\",\"minbound\":6501273984,\"maxbound\":6501274579,\"callrefs\":[{\"from\":6501274065,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6501274091,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501274112,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501274124,\"to\":6462379168,\"type\":\"CALL\"},{\"from\":6501274145,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501274157,\"to\":6462379168,\"type\":\"CALL\"},{\"from\":6501274176,\"to\":6445656528,\"type\":\"CALL\"},{\"from\":6501274240,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501274291,\"to\":6511975280,\"type\":\"CALL\"},{\"from\":6501274299,\"to\":6518967168,\"type\":\"CALL\"},{\"from\":6501274332,\"to\":6501339488,\"type\":\"CALL\"},{\"from\":6501274351,\"to\":6501351456,\"type\":\"CALL\"},{\"from\":6501274381,\"to\":6501351056,\"type\":\"CALL\"},{\"from\":6501274402,\"to\":6501351280,\"type\":\"CALL\"},{\"from\":6501274427,\"to\":6501274592,\"type\":\"CALL\"},{\"from\":6501274448,\"to\":6542067384,\"type\":\"CALL\"},{\"from\":6501274533,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501274538,\"to\":6501274509,\"type\":\"CODE\"},{\"from\":6501274568,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6501274574,\"to\":6501274280,\"type\":\"CODE\"}],\"datarefs\":[{\"from\":6501274005,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6501274018,\"to\":6741126112,\"type\":\"DATA\"},{\"from\":6501274027,\"to\":6742246856,\"type\":\"DATA\"},{\"from\":6501274041,\"to\":6723615496,\"type\":\"DATA\"},{\"from\":6501274075,\"to\":6720303740,\"type\":\"DATA\"},{\"from\":6501274096,\"to\":6723616856,\"type\":\"DATA\"},{\"from\":6501274129,\"to\":6723616896,\"type\":\"DATA\"},{\"from\":6501274162,\"to\":6710367816,\"type\":\"DATA\"},{\"from\":6501274188,\"to\":6708900496,\"type\":\"DATA\"},{\"from\":6501274200,\"to\":6708923712,\"type\":\"DATA\"},{\"from\":6501274250,\"to\":6708923824,\"type\":\"DATA\"},{\"from\":6501274264,\"to\":6742217808,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6501274538,\"to\":6501274509,\"type\":\"CODE\"},{\"from\":6501274574,\"to\":6501274280,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":2,\"outdegree\":18,\"nlocals\":7,\"nargs\":1,\"stackvars\":[{\"name\":\"var_158h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-344}},{\"name\":\"var_148h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-328}},{\"name\":\"var_140h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-320}},{\"name\":\"var_100h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-256}},{\"name\":\"var_f0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-240}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_28h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-40}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"4970ms"}}