{"ok":true,"data":{"evidence_id":"ev_61feb3d30d9485597ef22bf3af26f4e48d1f1100b57c19ce5374a1e2705d0b92","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x18ab92010;pdgo @ 0x18ab92010;afij @ 0x18ab92010","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x18ab92010;pdgo @ 0x18ab92010;afij @ 0x18ab92010","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":" |\r\n 0x18ab92010 |void fcn.18ab92010(int64_t arg1, int64_t arg2)\r\n |{\r\n | int32_t *piVar1;\r\n | code *pcVar2;\r\n | int64_t iVar3;\r\n | int64_t iVar4;\r\n | int64_t *piVar5;\r\n | undefined8 uVar6;\r\n | int64_t iVar7;\r\n | int64_t iVar8;\r\n | int64_t var_138h;\r\n | int64_t var_118h;\r\n | int64_t var_f8h;\r\n | int64_t var_d8h;\r\n | int64_t var_d0h;\r\n | int64_t var_b8h;\r\n | int64_t iStack_b0;\r\n | undefined8 uStack_a8;\r\n | int64_t var_98h;\r\n | int64_t var_90h;\r\n | int64_t var_78h;\r\n | int64_t var_70h;\r\n | int64_t var_58h;\r\n | undefined8 uStack_50;\r\n | int64_t var_48h;\r\n | \r\n 0x18ab92030 | var_48h = *(uint64_t *)0x191c71040 ^ (uint64_t)&var_138h;\r\n 0x18ab9204a | var_58h = 0x1908d8410;\r\n 0x18ab9204d | uStack_50 = 0xe;\r\n 0x18ab92055 | func_0x00018ab8fad0();\r\n 0x18ab92062 | iVar4 = func_0x000182273330(*(undefined8 *)(*(int64_t *)(arg1 + 0x78) + 0x10));\r\n 0x18ab92073 | if ((iVar4 == 0) || (*(char *)(iVar4 + 0x28) == '\\0')) {\r\n 0x18ab920ba | var_78h._0_1_ = 1;\r\n 0x18ab920b2 | func_0x0001855b8070(&var_70h, 0x190c4cd88, &var_f8h);\r\n 0x18ab920cf | piVar5 = &var_78h;\r\n | } else {\r\n 0x18ab9207d | piVar5 = (int64_t *)func_0x000185eb74b0(*(undefined8 *)(*(int64_t *)(arg1 + 0x78) + 0x30));\r\n 0x18ab92085 | if (piVar5 != (int64_t *)0x0) {\r\n 0x18ab92134 | uVar6 = (*(code *)0x185f59da0)(piVar5, *(undefined8 *)(*piVar5 + 0x68));\r\n 0x18ab92145 | var_b8h = 0;\r\n 0x18ab92145 | iStack_b0 = 0;\r\n 0x18ab92148 | uStack_a8 = 0;\r\n 0x18ab92159 | func_0x00018b8ee930(iVar4, &var_b8h, uVar6);\r\n 0x18ab92159 | iVar3 = var_b8h;\r\n 0x18ab92165 | if (iStack_b0 == 0) {\r\n 0x18ab9216c | var_d8h._0_1_ = 1;\r\n 0x18ab92167 | func_0x0001855b8070(&var_d0h, 0x190c4cda8, &var_f8h);\r\n 0x18ab92181 | piVar5 = &var_d8h;\r\n | } else {\r\n 0x18ab921a0 | iVar8 = iStack_b0 << 3;\r\n 0x18ab921a7 | if (iVar8 != 0) {\r\n 0x18ab921b1 | iVar7 = 0;\r\n | do {\r\n 0x18ab921c1 | func_0x000184339cd0(&var_f8h, 0x1908d8410, 0x190c4cdc8, 0x261);\r\n 0x18ab921e8 | func_0x00018b8eb600(iVar4, *(undefined8 *)(iVar3 + iVar7), 0, &var_f8h);\r\n 0x18ab921ed | iVar7 = iVar7 + 8;\r\n 0x18ab921f4 | } while (iVar8 != iVar7);\r\n | }\r\n 0x18ab921f6 | piVar5 = &var_118h;\r\n 0x18ab921fb | var_118h._0_1_ = 0;\r\n | }\r\n 0x18ab92189 | func_0x0001890e3330(arg2, piVar5);\r\n 0x18ab92196 | var_f8h = (int64_t)&var_b8h;\r\n 0x18ab92196 | func_0x000183293330();\r\n 0x18ab9219b | goto code_r0x00018ab920df;\r\n | }\r\n 0x18ab92093 | var_98h._0_1_ = 1;\r\n 0x18ab9208b | func_0x0001855b8070(&var_90h, 0x190c40870, &var_f8h);\r\n 0x18ab920a8 | piVar5 = &var_98h;\r\n | }\r\n 0x18ab920da | func_0x0001890e3330(arg2, piVar5);\r\n |code_r0x00018ab920df:\r\n 0x18ab920df | piVar1 = *(int32_t **)arg2;\r\n 0x18ab920e5 | if (piVar1 != (int32_t *)0x0) {\r\n 0x18ab92116 | LOCK();\r\n 0x18ab92116 | *piVar1 = *piVar1 + -1;\r\n 0x18ab92116 | UNLOCK();\r\n 0x18ab92119 | if (*piVar1 == 0) {\r\n 0x18ab9211f | (*(code *)0x185f59da0)();\r\n | }\r\n | }\r\n 0x18ab920fc | if (*(uint64_t *)0x191c71040 == (var_48h ^ (uint64_t)&var_138h)) {\r\n 0x18ab92115 | return;\r\n | }\r\n 0x18ab92213 | func_0x000185f05b40(var_48h ^ (uint64_t)&var_138h);\r\n 0x18ab9221b | pcVar2 = (code *)swi(3);\r\n 0x18ab9221b | (*pcVar2)();\r\n 0x18ab9221b | return;\r\n |}\r\n[{\"offset\":6622355472,\"name\":\"fcn.18ab92010\",\"size\":524,\"is-pure\":false,\"realsz\":524,\"noreturn\":false,\"stackframe\":312,\"calltype\":\"ms\",\"cost\":174,\"cc\":11,\"loops\":4,\"bits\":64,\"type\":\"fcn\",\"nbbs\":19,\"edges\":26,\"ebbs\":2,\"signature\":\"fcn.18ab92010(int64_t arg1, int64_t arg2);\",\"minbound\":6622355472,\"maxbound\":6622355996,\"callrefs\":[{\"from\":6622355541,\"to\":6622345936,\"type\":\"CALL\"},{\"from\":6622355554,\"to\":6478574384,\"type\":\"CALL\"},{\"from\":6622355581,\"to\":6541767856,\"type\":\"CALL\"},{\"from\":6622355619,\"to\":6532333680,\"type\":\"CALL\"},{\"from\":6622355632,\"to\":6622355671,\"type\":\"CODE\"},{\"from\":6622355658,\"to\":6532333680,\"type\":\"CALL\"},{\"from\":6622355674,\"to\":6594376496,\"type\":\"CALL\"},{\"from\":6622355743,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6622355749,\"to\":6622355687,\"type\":\"CODE\"},{\"from\":6622355764,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6622355801,\"to\":6636366128,\"type\":\"CALL\"},{\"from\":6622355836,\"to\":6532333680,\"type\":\"CALL\"},{\"from\":6622355849,\"to\":6594376496,\"type\":\"CALL\"},{\"from\":6622355862,\"to\":6495482672,\"type\":\"CALL\"},{\"from\":6622355867,\"to\":6622355679,\"type\":\"CODE\"},{\"from\":6622355925,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6622355944,\"to\":6636353024,\"type\":\"CALL\"},{\"from\":6622355974,\"to\":6622355846,\"type\":\"CODE\"},{\"from\":6622355990,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6622355497,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6622355515,\"to\":6720160784,\"type\":\"DATA\"},{\"from\":6622355607,\"to\":6723733616,\"type\":\"DATA\"},{\"from\":6622355646,\"to\":6723784072,\"type\":\"DATA\"},{\"from\":6622355698,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6622355824,\"to\":6723784104,\"type\":\"DATA\"},{\"from\":6622355891,\"to\":6720160784,\"type\":\"DATA\"},{\"from\":6622355898,\"to\":6723784136,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6622355632,\"to\":6622355671,\"type\":\"CODE\"},{\"from\":6622355749,\"to\":6622355687,\"type\":\"CODE\"},{\"from\":6622355867,\"to\":6622355679,\"type\":\"CODE\"},{\"from\":6622355974,\"to\":6622355846,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":4,\"outdegree\":15,\"nlocals\":12,\"nargs\":2,\"stackvars\":[{\"name\":\"var_138h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-312}},{\"name\":\"var_118h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-280}},{\"name\":\"var_f8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-248}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-208}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_98h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-152}},{\"name\":\"var_90h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-144}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_70h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-112}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":" |\r\n 0x18ab92010 |void fcn.18ab92010(int64_t arg1, int64_t arg2)\r\n |{\r\n | int32_t *piVar1;\r\n | code *pcVar2;\r\n | int64_t iVar3;\r\n | int64_t iVar4;\r\n | int64_t *piVar5;\r\n | undefined8 uVar6;\r\n | int64_t iVar7;\r\n | int64_t iVar8;\r\n | int64_t var_138h;\r\n | int64_t var_118h;\r\n | int64_t var_f8h;\r\n | int64_t var_d8h;\r\n | int64_t var_d0h;\r\n | int64_t var_b8h;\r\n | int64_t iStack_b0;\r\n | undefined8 uStack_a8;\r\n | int64_t var_98h;\r\n | int64_t var_90h;\r\n | int64_t var_78h;\r\n | int64_t var_70h;\r\n | int64_t var_58h;\r\n | undefined8 uStack_50;\r\n | int64_t var_48h;\r\n | \r\n 0x18ab92030 | var_48h = *(uint64_t *)0x191c71040 ^ (uint64_t)&var_138h;\r\n 0x18ab9204a | var_58h = 0x1908d8410;\r\n 0x18ab9204d | uStack_50 = 0xe;\r\n 0x18ab92055 | func_0x00018ab8fad0();\r\n 0x18ab92062 | iVar4 = func_0x000182273330(*(undefined8 *)(*(int64_t *)(arg1 + 0x78) + 0x10));\r\n 0x18ab92073 | if ((iVar4 == 0) || (*(char *)(iVar4 + 0x28) == '\\0')) {\r\n 0x18ab920ba | var_78h._0_1_ = 1;\r\n 0x18ab920b2 | func_0x0001855b8070(&var_70h, 0x190c4cd88, &var_f8h);\r\n 0x18ab920cf | piVar5 = &var_78h;\r\n | } else {\r\n 0x18ab9207d | piVar5 = (int64_t *)func_0x000185eb74b0(*(undefined8 *)(*(int64_t *)(arg1 + 0x78) + 0x30));\r\n 0x18ab92085 | if (piVar5 != (int64_t *)0x0) {\r\n 0x18ab92134 | uVar6 = (*(code *)0x185f59da0)(piVar5, *(undefined8 *)(*piVar5 + 0x68));\r\n 0x18ab92145 | var_b8h = 0;\r\n 0x18ab92145 | iStack_b0 = 0;\r\n 0x18ab92148 | uStack_a8 = 0;\r\n 0x18ab92159 | func_0x00018b8ee930(iVar4, &var_b8h, uVar6);\r\n 0x18ab92159 | iVar3 = var_b8h;\r\n 0x18ab92165 | if (iStack_b0 == 0) {\r\n 0x18ab9216c | var_d8h._0_1_ = 1;\r\n 0x18ab92167 | func_0x0001855b8070(&var_d0h, 0x190c4cda8, &var_f8h);\r\n 0x18ab92181 | piVar5 = &var_d8h;\r\n | } else {\r\n 0x18ab921a0 | iVar8 = iStack_b0 << 3;\r\n 0x18ab921a7 | if (iVar8 != 0) {\r\n 0x18ab921b1 | iVar7 = 0;\r\n | do {\r\n 0x18ab921c1 | func_0x000184339cd0(&var_f8h, 0x1908d8410, 0x190c4cdc8, 0x261);\r\n 0x18ab921e8 | func_0x00018b8eb600(iVar4, *(undefined8 *)(iVar3 + iVar7), 0, &var_f8h);\r\n 0x18ab921ed | iVar7 = iVar7 + 8;\r\n 0x18ab921f4 | } while (iVar8 != iVar7);\r\n | }\r\n 0x18ab921f6 | piVar5 = &var_118h;\r\n 0x18ab921fb | var_118h._0_1_ = 0;\r\n | }\r\n 0x18ab92189 | func_0x0001890e3330(arg2, piVar5);\r\n 0x18ab92196 | var_f8h = (int64_t)&var_b8h;\r\n 0x18ab92196 | func_0x000183293330();\r\n 0x18ab9219b | goto code_r0x00018ab920df;\r\n | }\r\n 0x18ab92093 | var_98h._0_1_ = 1;\r\n 0x18ab9208b | func_0x0001855b8070(&var_90h, 0x190c40870, &var_f8h);\r\n 0x18ab920a8 | piVar5 = &var_98h;\r\n | }\r\n 0x18ab920da | func_0x0001890e3330(arg2, piVar5);\r\n |code_r0x00018ab920df:\r\n 0x18ab920df | piVar1 = *(int32_t **)arg2;\r\n 0x18ab920e5 | if (piVar1 != (int32_t *)0x0) {\r\n 0x18ab92116 | LOCK();\r\n 0x18ab92116 | *piVar1 = *piVar1 + -1;\r\n 0x18ab92116 | UNLOCK();\r\n 0x18ab92119 | if (*piVar1 == 0) {\r\n 0x18ab9211f | (*(code *)0x185f59da0)();\r\n | }\r\n | }\r\n 0x18ab920fc | if (*(uint64_t *)0x191c71040 == (var_48h ^ (uint64_t)&var_138h)) {\r\n 0x18ab92115 | return;\r\n | }\r\n 0x18ab92213 | func_0x000185f05b40(var_48h ^ (uint64_t)&var_138h);\r\n 0x18ab9221b | pcVar2 = (code *)swi(3);\r\n 0x18ab9221b | (*pcVar2)();\r\n 0x18ab9221b | return;\r\n |}\r\n[{\"offset\":6622355472,\"name\":\"fcn.18ab92010\",\"size\":524,\"is-pure\":false,\"realsz\":524,\"noreturn\":false,\"stackframe\":312,\"calltype\":\"ms\",\"cost\":174,\"cc\":11,\"loops\":4,\"bits\":64,\"type\":\"fcn\",\"nbbs\":19,\"edges\":26,\"ebbs\":2,\"signature\":\"fcn.18ab92010(int64_t arg1, int64_t arg2);\",\"minbound\":6622355472,\"maxbound\":6622355996,\"callrefs\":[{\"from\":6622355541,\"to\":6622345936,\"type\":\"CALL\"},{\"from\":6622355554,\"to\":6478574384,\"type\":\"CALL\"},{\"from\":6622355581,\"to\":6541767856,\"type\":\"CALL\"},{\"from\":6622355619,\"to\":6532333680,\"type\":\"CALL\"},{\"from\":6622355632,\"to\":6622355671,\"type\":\"CODE\"},{\"from\":6622355658,\"to\":6532333680,\"type\":\"CALL\"},{\"from\":6622355674,\"to\":6594376496,\"type\":\"CALL\"},{\"from\":6622355743,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6622355749,\"to\":6622355687,\"type\":\"CODE\"},{\"from\":6622355764,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6622355801,\"to\":6636366128,\"type\":\"CALL\"},{\"from\":6622355836,\"to\":6532333680,\"type\":\"CALL\"},{\"from\":6622355849,\"to\":6594376496,\"type\":\"CALL\"},{\"from\":6622355862,\"to\":6495482672,\"type\":\"CALL\"},{\"from\":6622355867,\"to\":6622355679,\"type\":\"CODE\"},{\"from\":6622355925,\"to\":6512942288,\"type\":\"CALL\"},{\"from\":6622355944,\"to\":6636353024,\"type\":\"CALL\"},{\"from\":6622355974,\"to\":6622355846,\"type\":\"CODE\"},{\"from\":6622355990,\"to\":6542089024,\"type\":\"CALL\"}],\"datarefs\":[{\"from\":6622355497,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6622355515,\"to\":6720160784,\"type\":\"DATA\"},{\"from\":6622355607,\"to\":6723733616,\"type\":\"DATA\"},{\"from\":6622355646,\"to\":6723784072,\"type\":\"DATA\"},{\"from\":6622355698,\"to\":6740709440,\"type\":\"DATA\"},{\"from\":6622355824,\"to\":6723784104,\"type\":\"DATA\"},{\"from\":6622355891,\"to\":6720160784,\"type\":\"DATA\"},{\"from\":6622355898,\"to\":6723784136,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6622355632,\"to\":6622355671,\"type\":\"CODE\"},{\"from\":6622355749,\"to\":6622355687,\"type\":\"CODE\"},{\"from\":6622355867,\"to\":6622355679,\"type\":\"CODE\"},{\"from\":6622355974,\"to\":6622355846,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":4,\"outdegree\":15,\"nlocals\":12,\"nargs\":2,\"stackvars\":[{\"name\":\"var_138h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-312}},{\"name\":\"var_118h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-280}},{\"name\":\"var_f8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-248}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}},{\"name\":\"var_d0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-208}},{\"name\":\"var_b8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-184}},{\"name\":\"var_98h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-152}},{\"name\":\"var_90h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-144}},{\"name\":\"var_78h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-120}},{\"name\":\"var_70h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-112}},{\"name\":\"var_58h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-88}},{\"name\":\"var_48h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-72}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}},{\"name\":\"arg2\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rdx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"5071ms"}}