{"ok":true,"data":{"evidence_id":"ev_9330ca8fa6bd91459e2e5d26010305445daf763b144ba8fea777be6aae1837e1","subject":{"name":"Tabbit.dll","digest":{"sha256":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c"},"local_path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","format":"unknown","architecture":null},"provider":{"id":"rizin","name":"Rizin","version":null},"analysis_profile":null,"predicate_type":"rea.reverse-engineering.command-observation","operation":"execute_rizin_command","parameters":{"path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll","command":"e scr.color=0;af @ 0x18388abe0;pdgo @ 0x18388abe0;afij @ 0x18388abe0","provider_executable":"C:\\Users\\tjzhong\\Documents\\Codex\\tools\\cutter-2.5.0\\Cutter-v2.5.0-Windows-x86_64\\rizin.exe","command_arguments":["-N","-q","-c","e scr.color=0;af @ 0x18388abe0;pdgo @ 0x18388abe0;afij @ 0x18388abe0","C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"]},"raw_result":{"stdout":"    0x18388abe0    |\r\n    0x18388abe0    |// WARNING: Removing unreachable block (ram,0x00018388ae03)\r\n    0x18388abe0    |// WARNING: [rz-ghidra] Detected overlap for variable var_150h\r\n    0x18388abe0    |// WARNING: [rz-ghidra] Detected overlap for variable var_148h\r\n                   |\r\n    0x18388abe0    |void fcn.18388abe0(int64_t arg1)\r\n                   |{\r\n                   |    int64_t *piVar1;\r\n                   |    int32_t *piVar2;\r\n                   |    int32_t iVar3;\r\n                   |    int64_t iVar4;\r\n                   |    code *pcVar5;\r\n                   |    char cVar6;\r\n                   |    undefined8 uVar7;\r\n                   |    int64_t var_178h;\r\n                   |    int64_t var_170h;\r\n                   |    int64_t var_158h;\r\n                   |    undefined var_150h;\r\n                   |    int64_t var_14fh;\r\n                   |    char cStack_141;\r\n                   |    int64_t var_140h;\r\n                   |    int64_t iStack_138;\r\n                   |    int64_t var_100h;\r\n                   |    int64_t var_f0h;\r\n                   |    int64_t var_d8h;\r\n                   |    \r\n    0x18388abf1    |    iVar4 = *(int64_t *)(*(int64_t *)arg1 + 0x78);\r\n    0x18388ac41    |    if ((((iVar4 != 0) && (*(int32_t *)(iVar4 + 0x48) == 0)) && (cVar6 = func_0x000180866b40(), cVar6 != '\\0')) &&\r\n    0x18388ac41    |       (0 < *(int64_t *)(arg1 + 0x68))) {\r\n    0x18388ac61    |        if ((*(int32_t *)0x191de85c0 < 2) && ((*(int32_t *)0x191cd6be0 != 0 || (*(int64_t *)0x191de85c8 != 0)))) {\r\n    0x18388ac6e    |            func_0x00018030d390(&var_158h, 0x190c46e38, 0x58, 1);\r\n    0x18388ac9c    |            uVar7 = func_0x000184dcd0d0((int64_t)&var_14fh + 7, 0x190c46f38, 0x28);\r\n    0x18388aca7    |            uVar7 = func_0x000184dd1300(uVar7, 0);\r\n    0x18388acbc    |            uVar7 = func_0x000184dcd0d0(uVar7, 0x190c46f68, 0xd);\r\n    0x18388acc8    |            func_0x000184dd1300(uVar7, *(undefined8 *)(arg1 + 0x68));\r\n    0x18388acd4    |            var_158h = 0x18ff81648;\r\n    0x18388ac6e    |            func_0x00018030e9d0(&var_158h);\r\n    0x18388acee    |            *(undefined8 *)\r\n    0x18388acee    |             ((int64_t)&var_14fh + (int64_t)*(int32_t *)(CONCAT17(cStack_141, stack0xfffffffffffffeb8) + 4) + 7) =\r\n    0x18388acee    |                 0x18fe1b290;\r\n    0x18388acfa    |            var_140h = 0x18fe20d40;\r\n    0x18388ad02    |            if (var_f0h._7_1_ < '\\0') {\r\n    0x18388ad1e    |                func_0x0001841dcbe0(var_100h, CONCAT17(var_f0h._7_1_, (unkbyte7)var_f0h) & 0x7fffffffffffffff);\r\n                   |            }\r\n    0x18388ad2f    |            var_140h = 0x18fe20db0;\r\n    0x18388ad40    |            if (iStack_138 != 0x191de1450) {\r\n    0x18388ae12    |                LOCK();\r\n    0x18388ae12    |                piVar2 = (int32_t *)(iStack_138 + 8);\r\n    0x18388ae12    |                iVar3 = *piVar2;\r\n    0x18388ae12    |                *piVar2 = *piVar2 + -1;\r\n    0x18388ae12    |                UNLOCK();\r\n    0x18388ae19    |                if (iVar3 == 0) {\r\n    0x18388ae26    |                    (*(code *)0x185f59da0)();\r\n                   |                }\r\n                   |            }\r\n    0x18388ad23    |            func_0x00018424db70(&var_140h);\r\n    0x18388ad46    |            func_0x0001848f8b80(&var_d8h);\r\n                   |        }\r\n    0x18388ad63    |        cStack_141 = '\\t';\r\n    0x18388ad83    |        if ((int64_t *)0x190c46f78 < &var_14fh && &var_158h < (int64_t *)0x190c46f79) {\r\n    0x18388ae0b    |    // WARNING: Does not return\r\n    0x18388ae0b    |            pcVar5 = (code *)invalidInstructionException();\r\n    0x18388ae0b    |            (*pcVar5)();\r\n                   |        }\r\n    0x18388ad93    |        var_158h = 0x76697463616f7270;\r\n    0x18388ad98    |        _var_150h = CONCAT22(var_14fh._1_2_, 0x65);\r\n    0x18388ad9f    |        piVar1 = (int64_t *)(iVar4 + 0x60);\r\n    0x18388ada6    |        if (piVar1 != &var_158h) {\r\n    0x18388adad    |            if (*(char *)(iVar4 + 0x77) < '\\0') {\r\n    0x18388addd    |                func_0x000184211e70(piVar1, &var_158h, 9);\r\n    0x18388ade6    |                if (cStack_141 < '\\0') {\r\n    0x18388adfc    |                    func_0x0001841dcbe0(var_158h, CONCAT17(cStack_141, stack0xfffffffffffffeb8) & 0x7fffffffffffffff);\r\n                   |                }\r\n                   |            } else {\r\n    0x18388adb4    |                *(uint64_t *)(iVar4 + 0x70) = CONCAT17(9, stack0xfffffffffffffeb8);\r\n    0x18388adbd    |                *(undefined4 *)piVar1 = 0x616f7270;\r\n    0x18388adbd    |                *(undefined4 *)(iVar4 + 100) = 0x76697463;\r\n    0x18388adbd    |                *(undefined4 *)(iVar4 + 0x68) = _var_150h;\r\n    0x18388adbd    |                *(undefined4 *)(iVar4 + 0x6c) = var_14fh._3_4_;\r\n                   |            }\r\n                   |        }\r\n    0x18388adc5    |        func_0x00018adb6860(1);\r\n                   |    }\r\n    0x18388ac0f    |    return;\r\n                   |}\r\n[{\"offset\":6501739488,\"name\":\"fcn.18388abe0\",\"size\":593,\"is-pure\":false,\"realsz\":586,\"noreturn\":false,\"stackframe\":408,\"calltype\":\"ms\",\"cost\":183,\"cc\":18,\"loops\":7,\"bits\":64,\"type\":\"fcn\",\"nbbs\":24,\"edges\":36,\"ebbs\":3,\"signature\":\"fcn.18388abe0(int64_t arg1);\",\"minbound\":6501739488,\"maxbound\":6501740081,\"callrefs\":[{\"from\":6501739554,\"to\":6451260224,\"type\":\"CALL\"},{\"from\":6501739650,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6501739676,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501739687,\"to\":6524048128,\"type\":\"CALL\"},{\"from\":6501739708,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501739720,\"to\":6524048128,\"type\":\"CALL\"},{\"from\":6501739739,\"to\":6445656528,\"type\":\"CALL\"},{\"from\":6501739806,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501739857,\"to\":6511975280,\"type\":\"CALL\"},{\"from\":6501739865,\"to\":6518967168,\"type\":\"CALL\"},{\"from\":6501739973,\"to\":6624602208,\"type\":\"CALL\"},{\"from\":6501739978,\"to\":6501739521,\"type\":\"CODE\"},{\"from\":6501739997,\"to\":6511730288,\"type\":\"CALL\"},{\"from\":6501740028,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501740033,\"to\":6501739968,\"type\":\"CODE\"},{\"from\":6501740070,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6501740076,\"to\":6501739846,\"type\":\"CODE\"}],\"datarefs\":[{\"from\":6501739587,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6501739600,\"to\":6741126112,\"type\":\"DATA\"},{\"from\":6501739609,\"to\":6742246856,\"type\":\"DATA\"},{\"from\":6501739623,\"to\":6723759672,\"type\":\"DATA\"},{\"from\":6501739660,\"to\":6723759928,\"type\":\"DATA\"},{\"from\":6501739692,\"to\":6723759976,\"type\":\"DATA\"},{\"from\":6501739725,\"to\":6710367816,\"type\":\"DATA\"},{\"from\":6501739751,\"to\":6708900496,\"type\":\"DATA\"},{\"from\":6501739763,\"to\":6708923712,\"type\":\"DATA\"},{\"from\":6501739816,\"to\":6708923824,\"type\":\"DATA\"},{\"from\":6501739830,\"to\":6742217808,\"type\":\"DATA\"},{\"from\":6501739879,\"to\":6723759992,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6501739978,\"to\":6501739521,\"type\":\"CODE\"},{\"from\":6501740033,\"to\":6501739968,\"type\":\"CODE\"},{\"from\":6501740076,\"to\":6501739846,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":3,\"outdegree\":14,\"nlocals\":10,\"nargs\":1,\"stackvars\":[{\"name\":\"var_178h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-376}},{\"name\":\"var_170h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-368}},{\"name\":\"var_158h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-344}},{\"name\":\"var_150h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-336}},{\"name\":\"var_14fh\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-335}},{\"name\":\"var_148h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-328}},{\"name\":\"var_140h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-320}},{\"name\":\"var_100h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-256}},{\"name\":\"var_f0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-240}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"normalized_result":{"stdout":"    0x18388abe0    |\r\n    0x18388abe0    |// WARNING: Removing unreachable block (ram,0x00018388ae03)\r\n    0x18388abe0    |// WARNING: [rz-ghidra] Detected overlap for variable var_150h\r\n    0x18388abe0    |// WARNING: [rz-ghidra] Detected overlap for variable var_148h\r\n                   |\r\n    0x18388abe0    |void fcn.18388abe0(int64_t arg1)\r\n                   |{\r\n                   |    int64_t *piVar1;\r\n                   |    int32_t *piVar2;\r\n                   |    int32_t iVar3;\r\n                   |    int64_t iVar4;\r\n                   |    code *pcVar5;\r\n                   |    char cVar6;\r\n                   |    undefined8 uVar7;\r\n                   |    int64_t var_178h;\r\n                   |    int64_t var_170h;\r\n                   |    int64_t var_158h;\r\n                   |    undefined var_150h;\r\n                   |    int64_t var_14fh;\r\n                   |    char cStack_141;\r\n                   |    int64_t var_140h;\r\n                   |    int64_t iStack_138;\r\n                   |    int64_t var_100h;\r\n                   |    int64_t var_f0h;\r\n                   |    int64_t var_d8h;\r\n                   |    \r\n    0x18388abf1    |    iVar4 = *(int64_t *)(*(int64_t *)arg1 + 0x78);\r\n    0x18388ac41    |    if ((((iVar4 != 0) && (*(int32_t *)(iVar4 + 0x48) == 0)) && (cVar6 = func_0x000180866b40(), cVar6 != '\\0')) &&\r\n    0x18388ac41    |       (0 < *(int64_t *)(arg1 + 0x68))) {\r\n    0x18388ac61    |        if ((*(int32_t *)0x191de85c0 < 2) && ((*(int32_t *)0x191cd6be0 != 0 || (*(int64_t *)0x191de85c8 != 0)))) {\r\n    0x18388ac6e    |            func_0x00018030d390(&var_158h, 0x190c46e38, 0x58, 1);\r\n    0x18388ac9c    |            uVar7 = func_0x000184dcd0d0((int64_t)&var_14fh + 7, 0x190c46f38, 0x28);\r\n    0x18388aca7    |            uVar7 = func_0x000184dd1300(uVar7, 0);\r\n    0x18388acbc    |            uVar7 = func_0x000184dcd0d0(uVar7, 0x190c46f68, 0xd);\r\n    0x18388acc8    |            func_0x000184dd1300(uVar7, *(undefined8 *)(arg1 + 0x68));\r\n    0x18388acd4    |            var_158h = 0x18ff81648;\r\n    0x18388ac6e    |            func_0x00018030e9d0(&var_158h);\r\n    0x18388acee    |            *(undefined8 *)\r\n    0x18388acee    |             ((int64_t)&var_14fh + (int64_t)*(int32_t *)(CONCAT17(cStack_141, stack0xfffffffffffffeb8) + 4) + 7) =\r\n    0x18388acee    |                 0x18fe1b290;\r\n    0x18388acfa    |            var_140h = 0x18fe20d40;\r\n    0x18388ad02    |            if (var_f0h._7_1_ < '\\0') {\r\n    0x18388ad1e    |                func_0x0001841dcbe0(var_100h, CONCAT17(var_f0h._7_1_, (unkbyte7)var_f0h) & 0x7fffffffffffffff);\r\n                   |            }\r\n    0x18388ad2f    |            var_140h = 0x18fe20db0;\r\n    0x18388ad40    |            if (iStack_138 != 0x191de1450) {\r\n    0x18388ae12    |                LOCK();\r\n    0x18388ae12    |                piVar2 = (int32_t *)(iStack_138 + 8);\r\n    0x18388ae12    |                iVar3 = *piVar2;\r\n    0x18388ae12    |                *piVar2 = *piVar2 + -1;\r\n    0x18388ae12    |                UNLOCK();\r\n    0x18388ae19    |                if (iVar3 == 0) {\r\n    0x18388ae26    |                    (*(code *)0x185f59da0)();\r\n                   |                }\r\n                   |            }\r\n    0x18388ad23    |            func_0x00018424db70(&var_140h);\r\n    0x18388ad46    |            func_0x0001848f8b80(&var_d8h);\r\n                   |        }\r\n    0x18388ad63    |        cStack_141 = '\\t';\r\n    0x18388ad83    |        if ((int64_t *)0x190c46f78 < &var_14fh && &var_158h < (int64_t *)0x190c46f79) {\r\n    0x18388ae0b    |    // WARNING: Does not return\r\n    0x18388ae0b    |            pcVar5 = (code *)invalidInstructionException();\r\n    0x18388ae0b    |            (*pcVar5)();\r\n                   |        }\r\n    0x18388ad93    |        var_158h = 0x76697463616f7270;\r\n    0x18388ad98    |        _var_150h = CONCAT22(var_14fh._1_2_, 0x65);\r\n    0x18388ad9f    |        piVar1 = (int64_t *)(iVar4 + 0x60);\r\n    0x18388ada6    |        if (piVar1 != &var_158h) {\r\n    0x18388adad    |            if (*(char *)(iVar4 + 0x77) < '\\0') {\r\n    0x18388addd    |                func_0x000184211e70(piVar1, &var_158h, 9);\r\n    0x18388ade6    |                if (cStack_141 < '\\0') {\r\n    0x18388adfc    |                    func_0x0001841dcbe0(var_158h, CONCAT17(cStack_141, stack0xfffffffffffffeb8) & 0x7fffffffffffffff);\r\n                   |                }\r\n                   |            } else {\r\n    0x18388adb4    |                *(uint64_t *)(iVar4 + 0x70) = CONCAT17(9, stack0xfffffffffffffeb8);\r\n    0x18388adbd    |                *(undefined4 *)piVar1 = 0x616f7270;\r\n    0x18388adbd    |                *(undefined4 *)(iVar4 + 100) = 0x76697463;\r\n    0x18388adbd    |                *(undefined4 *)(iVar4 + 0x68) = _var_150h;\r\n    0x18388adbd    |                *(undefined4 *)(iVar4 + 0x6c) = var_14fh._3_4_;\r\n                   |            }\r\n                   |        }\r\n    0x18388adc5    |        func_0x00018adb6860(1);\r\n                   |    }\r\n    0x18388ac0f    |    return;\r\n                   |}\r\n[{\"offset\":6501739488,\"name\":\"fcn.18388abe0\",\"size\":593,\"is-pure\":false,\"realsz\":586,\"noreturn\":false,\"stackframe\":408,\"calltype\":\"ms\",\"cost\":183,\"cc\":18,\"loops\":7,\"bits\":64,\"type\":\"fcn\",\"nbbs\":24,\"edges\":36,\"ebbs\":3,\"signature\":\"fcn.18388abe0(int64_t arg1);\",\"minbound\":6501739488,\"maxbound\":6501740081,\"callrefs\":[{\"from\":6501739554,\"to\":6451260224,\"type\":\"CALL\"},{\"from\":6501739650,\"to\":6445650832,\"type\":\"CALL\"},{\"from\":6501739676,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501739687,\"to\":6524048128,\"type\":\"CALL\"},{\"from\":6501739708,\"to\":6524031184,\"type\":\"CALL\"},{\"from\":6501739720,\"to\":6524048128,\"type\":\"CALL\"},{\"from\":6501739739,\"to\":6445656528,\"type\":\"CALL\"},{\"from\":6501739806,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501739857,\"to\":6511975280,\"type\":\"CALL\"},{\"from\":6501739865,\"to\":6518967168,\"type\":\"CALL\"},{\"from\":6501739973,\"to\":6624602208,\"type\":\"CALL\"},{\"from\":6501739978,\"to\":6501739521,\"type\":\"CODE\"},{\"from\":6501739997,\"to\":6511730288,\"type\":\"CALL\"},{\"from\":6501740028,\"to\":6511512544,\"type\":\"CALL\"},{\"from\":6501740033,\"to\":6501739968,\"type\":\"CODE\"},{\"from\":6501740070,\"to\":6740346544,\"type\":\"CALL\"},{\"from\":6501740076,\"to\":6501739846,\"type\":\"CODE\"}],\"datarefs\":[{\"from\":6501739587,\"to\":6742246848,\"type\":\"DATA\"},{\"from\":6501739600,\"to\":6741126112,\"type\":\"DATA\"},{\"from\":6501739609,\"to\":6742246856,\"type\":\"DATA\"},{\"from\":6501739623,\"to\":6723759672,\"type\":\"DATA\"},{\"from\":6501739660,\"to\":6723759928,\"type\":\"DATA\"},{\"from\":6501739692,\"to\":6723759976,\"type\":\"DATA\"},{\"from\":6501739725,\"to\":6710367816,\"type\":\"DATA\"},{\"from\":6501739751,\"to\":6708900496,\"type\":\"DATA\"},{\"from\":6501739763,\"to\":6708923712,\"type\":\"DATA\"},{\"from\":6501739816,\"to\":6708923824,\"type\":\"DATA\"},{\"from\":6501739830,\"to\":6742217808,\"type\":\"DATA\"},{\"from\":6501739879,\"to\":6723759992,\"type\":\"DATA\"}],\"codexrefs\":[{\"from\":6501739978,\"to\":6501739521,\"type\":\"CODE\"},{\"from\":6501740033,\"to\":6501739968,\"type\":\"CODE\"},{\"from\":6501740076,\"to\":6501739846,\"type\":\"CODE\"}],\"dataxrefs\":[],\"indegree\":3,\"outdegree\":14,\"nlocals\":10,\"nargs\":1,\"stackvars\":[{\"name\":\"var_178h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-376}},{\"name\":\"var_170h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-368}},{\"name\":\"var_158h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-344}},{\"name\":\"var_150h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-336}},{\"name\":\"var_14fh\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-335}},{\"name\":\"var_148h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-328}},{\"name\":\"var_140h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-320}},{\"name\":\"var_100h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-256}},{\"name\":\"var_f0h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-240}},{\"name\":\"var_d8h\",\"arg\":false,\"type\":\"int64_t\",\"storage\":{\"type\":\"stack\",\"stack\":-216}}],\"regvars\":[{\"name\":\"arg1\",\"arg\":true,\"type\":\"int64_t\",\"storage\":{\"type\":\"reg\",\"reg\":\"rcx\"}}]}]\r\n","stderr":"WARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0xfb71e00) exceeds max region size (0xa00000), skipping it.\r\nWARNING: bin_file_strings: search interval size (0x20fd400) exceeds max region size (0xa00000), skipping it.\r\n","exit_code":0,"signal":null,"output_truncated":false,"completion_status":"complete","artifact_sha256_after":"a10ee34ead4a08c906e09f3dd4449042fb084a69ce59210b1c8cee815723bf3c","artifact_changed":false},"confidence":"observed","authority":"shipped-artifact","environment":null,"limitations":["The executable version and supported formats are reported as unknown because no reliable version probe was performed.","A non-zero process exit is preserved as an observed command result.","Rizin commands and retained plugins may read files or access network resources outside the selected artifact; those external inputs are not bound to Evidence.","When both are available, pre-run and post-run digests detect artifact changes across the provider call but cannot prove the exact bytes consumed during the call."],"relationship_coverage":null,"locations":[{"kind":"artifact-path","path":"C:\\Users\\tjzhong\\AppData\\Local\\Tabbit\\Application\\1.18.21.0\\Tabbit.dll"}],"evidence_links":[]},"meta":{"command":"execute-rizin-command","duration":"4900ms"}}