a

[supervoidcoder]

No description provided.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch main

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

🧪 Test Results

❌ X86

5/5 tests passed

Test Details

✅ help.bat - PASSED
  Output: 
  D:\a\win-witr\win-witr>win-witr
  
  win-witr - Why is this running? Windows version by supervoidcoder.
  �[1;32mRunning with elevated privileges (Admin).�[0m
  �[1;32mUsage:�[0m win-witr [options]
  �[1;32mOptions:�[0m
    �[1;33m-h, --help�[0m       Show this help message and exit
    �[1;33m-v, --version�[0m    Show version information and exit
    �[1;33m--port <port>�[0m    Specify the port to check
    �[1;33m--pid <pid>�[0m      Specify the PID to check
    �[1;33m <name>�[0m          Specify the process name to check
  
  D:\a\win-witr\win-witr>win-witr -h 
  
  win-witr - Why is this running? Windows version by supervoidcoder.
  �[1;32mRunning with elevated privileges (Admin).�[0m
  �[1;32mUsage:�[0m win-witr [options]
  �[1;32mOptions:�[0m
    �[1;33m-h, --help�[0m       Show this help message and exit
    �[1;33m-v, --version�[0m    Show version information and exit
    �[1;33m--port <port>�[0m    Specify the port to check
    �[1;33m--pid <pid>�[0m      Specify the PID to check
    �[1;33m <name>�[0m          Specify the process name to check
  
  D:\a\win-witr\win-witr>win-witr --help 
  
  win-witr - Why is this running? Windows version by supervoidcoder.
  �[1;32mRunning with elevated privileges (Admin).�[0m
  �[1;32mUsage:�[0m win-witr [options]
  �[1;32mOptions:�[0m
    �[1;33m-h, --help�[0m       Show this help message and exit
    �[1;33m-v, --version�[0m    Show version information and exit
    �[1;33m--port <port>�[0m    Specify the port to check
    �[1;33m--pid <pid>�[0m      Specify the PID to check
    �[1;33m <name>�[0m          Specify the process name to check
✅ stess_nested_shells.bat - PASSED
  Output: Running nested shell stress test...
  Layer 0 (powershell) -> spawning cmd...
  Layer 1 (cmd) -> spawning powershell...
  Layer 2 (powershell) -> spawning cmd...
  Layer 3 (cmd) -> spawning powershell...
  Layer 4 (powershell) -> spawning cmd...
  Layer 5 (cmd) -> spawning powershell...
  Layer 6 (powershell) -> spawning cmd...
  Layer 7 (cmd) -> spawning powershell...
  Layer 8 (powershell) -> spawning cmd...
  Layer 9 (cmd) -> spawning powershell...
  Layer 10 (powershell) -> spawning cmd...
  Layer 11 (cmd) -> spawning powershell...
  Layer 12 (powershell) -> spawning cmd...
  Layer 13 (cmd) -> spawning powershell...
  Layer 14 (powershell) -> spawning cmd...
  Layer 15 (cmd) -> spawning powershell...
  Layer 16 (powershell) -> spawning cmd...
  Layer 17 (cmd) -> spawning powershell...
  Layer 18 (powershell) -> spawning cmd...
  Layer 19 (cmd) -> spawning powershell...
  Layer 20 (powershell) -> spawning cmd...
  Layer 21 (cmd) -> spawning powershell...
  Layer 22 (powershell) -> spawning cmd...
  Layer 23 (cmd) -> spawning powershell...
  Layer 24 (powershell) -> spawning cmd...
  Layer 25 (cmd) -> spawning powershell...
  Layer 26 (powershell) -> spawning cmd...
  Layer 27 (cmd) -> spawning powershell...
  Layer 28 (powershell) -> spawning cmd...
  Layer 29 (cmd) -> spawning powershell...
  Layer 30 (powershell) -> spawning cmd...
  Layer 31 (cmd) -> spawning powershell...
  Layer 32 (powershell) -> spawning cmd...
  Layer 33 (cmd) -> spawning powershell...
  Layer 34 (powershell) -> spawning cmd...
  Layer 35 (cmd) -> spawning powershell...
  Layer 36 (powershell) -> spawning cmd...
  Layer 37 (cmd) -> spawning powershell...
  Layer 38 (powershell) -> spawning cmd...
  Layer 39 (cmd) -> spawning powershell...
  Layer 40 (powershell) -> spawning cmd...
  Layer 41 (cmd) -> spawning powershell...
  Layer 42 (powershell) -> spawning cmd...
  Layer 43 (cmd) -> spawning powershell...
  Layer 44 (powershell) -> spawning cmd...
  Layer 45 (cmd) -> spawning powershell...
  Layer 46 (powershell) -> spawning cmd...
  Layer 47 (cmd) -> spawning powershell...
  Layer 48 (powershell) -> spawning cmd...
  Layer 49 (cmd) -> spawning powershell...
  Layer 50 (powershell) -> spawning cmd...
  Layer 51 (cmd) -> spawning powershell...
  Layer 52 (powershell) -> spawning cmd...
  Layer 53 (cmd) -> spawning powershell...
  Layer 54 (powershell) -> spawning cmd...
  Layer 55 (cmd) -> spawning powershell...
  Layer 56 (powershell) -> spawning cmd...
  Layer 57 (cmd) -> spawning powershell...
  Layer 58 (powershell) -> spawning cmd...
  Layer 59 (cmd) -> spawning powershell...
  Layer 60 (powershell) -> spawning cmd...
  Layer 61 (cmd) -> spawning powershell...
  Layer 62 (powershell) -> spawning cmd...
  Layer 63 (cmd) -> spawning powershell...
  Layer 64 (powershell) -> spawning cmd...
  Layer 65 (cmd) -> spawning powershell...
  Layer 66 (powershell) -> spawning cmd...
  Layer 67 (cmd) -> spawning powershell...
  Layer 68 (powershell) -> spawning cmd...
  Layer 69 (cmd) -> spawning powershell...
  Layer 70 (powershell) -> spawning cmd...
  Layer 71 (cmd) -> spawning powershell...
  Layer 72 (powershell) -> spawning cmd...
  Layer 73 (cmd) -> spawning powershell...
  Layer 74 (powershell) -> spawning cmd...
  Layer 75 (cmd) -> spawning powershell...
  Layer 76 (powershell) -> spawning cmd...
  Layer 77 (cmd) -> spawning powershell...
  Layer 78 (powershell) -> spawning cmd...
  Layer 79 (cmd) -> spawning powershell...
  Layer 80 (powershell) -> spawning cmd...
  Layer 81 (cmd) -> spawning powershell...
  Layer 82 (powershell) -> spawning cmd...
  Layer 83 (cmd) -> spawning powershell...
  Layer 84 (powershell) -> spawning cmd...
  Layer 85 (cmd) -> spawning powershell...
  Layer 86 (powershell) -> spawning cmd...
  Layer 87 (cmd) -> spawning powershell...
  Layer 88 (powershell) -> spawning cmd...
  Layer 89 (cmd) -> spawning powershell...
  Layer 90 (powershell) -> spawning cmd...
  Layer 91 (cmd) -> spawning powershell...
  Layer 92 (powershell) -> spawning cmd...
  Layer 93 (cmd) -> spawning powershell...
  Layer 94 (powershell) -> spawning cmd...
  Layer 95 (cmd) -> spawning powershell...
  Layer 96 (powershell) -> spawning cmd...
  Layer 97 (cmd) -> spawning powershell...
  Layer 98 (powershell) -> spawning cmd...
  Layer 99 (cmd) -> spawning powershell...
  Reached depth 100 - Running stress test...
  �[34mTarget:�[0m win-witr.exe�[0m
  �[34mProcess:�[0m win-witr.exe�[90m (pid 16428)�[0m
  Executable Path: D:\a\win-witr\win-witr\win-witr.exe
  �[1;34mUser�[0m: runneradmin
  �[1;34mCommand�[0m: Failed to Access (wwitr:cmdLStructFail)
  Why It Exists:
  wininit.exe (PID 868)
      �[35m└─�[0m services.exe (PID 964)
        �[35m└─�[0m svchost.exe (PID 2652)
          �[35m└─�[0m hosted-compute-agent (PID 492)
            �[35m└─�[0m Runner.Listener.exe (PID 8960)
              �[35m└─�[0m Runner.Worker.exe (PID 8928)
                �[35m└─�[0m pwsh.exe (PID 6756)
                  �[35m└─�[0m cmd.exe (PID 2748)
                    �[35m└─�[0m powershell.exe (PID 5768)
                      �[35m└─�[0m cmd.exe (PID 5316)
                        �[35m└─�[0m powershell.exe (PID 5988)
                          �[35m└─�[0m powershell.exe (PID 5788)
                            �[35m└─�[0m cmd.exe (PID 4132)
                              �[35m└─�[0m powershell.exe (PID 5280)
                                �[35m└─�[0m powershell.exe (PID 7964)
                                  �[35m└─�[0m cmd.exe (PID 8392)
                                    �[35m└─�[0m powershell.exe (PID 9184)
                                      �[35m└─�[0m powershell.exe (PID 8064)
                                        �[35m└─�[0m cmd.exe (PID 8336)
                                          �[35m└─�[0m powershell.exe (PID 1680)
                                            �[35m└─�[0m powershell.exe (PID 8340)
                                              �[35m└─�[0m cmd.exe (PID 8172)
                                                �[35m└─�[0m powershell.exe (PID 8364)
                                                  �[35m└─�[0m powershell.exe (PID 8260)
                                                    �[35m└─�[0m cmd.exe (PID 8532)
                                                      �[35m└─�[0m powershell.exe (PID 9196)
                                                        �[35m└─�[0m powershell.exe (PID 9068)
                                                          �[35m└─�[0m cmd.exe (PID 6588)
                                                            �[35m└─�[0m powershell.exe (PID 5772)
                                                              �[35m└─�[0m powershell.exe (PID 6532)
                                                                �[35m└─�[0m cmd.exe (PID 9272)
                                                                  �[35m└─�[0m powershell.exe (PID 9284)
                                                                    �[35m└─�[0m powershell.exe (PID 9380)
                                                                      �[35m└─�[0m cmd.exe (PID 9468)
                                                                        �[35m└─�[0m powershell.exe (PID 9480)
                                                                          �[35m└─�[0m powershell.exe (PID 9572)
                                                                            �[35m└─�[0m cmd.exe (PID 9660)
                                                                              �[35m└─�[0m powershell.exe (PID 9672)
                                                                                �[35m└─�[0m powershell.exe (PID 9760)
                                                                                  �[35m└─�[0m cmd.exe (PID 9848)
                                                                                    �[35m└─�[0m powershell.exe (PID 9860)
                                                                                      �[35m└─�[0m powershell.exe (PID 9948)
                                                                                        �[35m└─�[0m cmd.exe (PID 10036)
                                                                                          �[35m└─�[0m powershell.exe (PID 10052)
                                                                                            �[35m└─�[0m powershell.exe (PID 10140)
                                                                                              �[35m└─�[0m cmd.exe (PID 10228)
                                                                                                �[35m└─�[0m powershell.exe (PID 6960)
                                                                                                  �[35m└─�[0m powershell.exe (PID 10256)
                                                                                                    �[35m└─�[0m cmd.exe (PID 10356)
                                                                                                      �[35m└─�[0m powershell.exe (PID 10368)
                                                                                                        �[35m└─�[0m powershell.exe (PID 10456)
                                                                                                          �[35m└─�[0m cmd.exe (PID 10544)
                                                                                                            �[35m└─�[0m powershell.exe (PID 10556)
                                                                                                              �[35m└─�[0m powershell.exe (PID 10644)
                                                                                                                �[35m└─�[0m cmd.exe (PID 10732)
                                                                                                                  �[35m└─�[0m powershell.exe (PID 10744)
                                                                                                                    �[35m└─�[0m powershell.exe (PID 10844)
                                                                                                                      �[35m└─�[0m cmd.exe (PID 10932)
                                                                                                                        �[35m└─�[0m powershell.exe (PID 10944)
                                                                                                                          �[35m└─�[0m powershell.exe (PID 11036)
                                                                                                                            �[35m└─�[0m cmd.exe (PID 11124)
                                                                                                                              �[35m└─�[0m powershell.exe (PID 11136)
                                                                                                                                �[35m└─�[0m powershell.exe (PID 11224)
                                                                                                                                  �[35m└─�[0m cmd.exe (PID 10300)
                                                                                                                                    �[35m└─�[0m powershell.exe (PID 10412)
                                                                                                                                      �[35m└─�[0m powershell.exe (PID 11292)
                                                                                                                                        �[35m└─�[0m cmd.exe (PID 11384)
                                                                                                                                          �[35m└─�[0m powershell.exe (PID 11396)
                                                                                                                                            �[35m└─�[0m powershell.exe (PID 11488)
                                                                                                                                              �[35m└─�[0m cmd.exe (PID 11580)
                                                                                                                                                �[35m└─�[0m powershell.exe (PID 11592)
                                                                                                                                                  �[35m└─�[0m powershell.exe (PID 11684)
                                                                                                                                                    �[35m└─�[0m cmd.exe (PID 11776)
                                                                                                                                                      �[35m└─�[0m powershell.exe (PID 11788)
                                                                                                                                                        �[35m└─�[0m powershell.exe (PID 11880)
                                                                                                                                                          �[35m└─�[0m cmd.exe (PID 11976)
                                                                                                                                                            �[35m└─�[0m powershell.exe (PID 11988)
                                                                                                                                                              �[35m└─�[0m powershell.exe (PID 12112)
                                                                                                                                                                �[35m└─�[0m cmd.exe (PID 4084)
                                                                                                                                                                  �[35m└─�[0m powershell.exe (PID 1372)
                                                                                                                                                                    �[35m└─�[0m powershell.exe (PID 12384)
                                                                                                                                                                      �[35m└─�[0m cmd.exe (PID 12576)
                                                                                                                                                                        �[35m└─�[0m powershell.exe (PID 12596)
                                                                                                                                                                          �[35m└─�[0m powershell.exe (PID 12768)
                                                                                                                                                                            �[35m└─�[0m cmd.exe (PID 12860)
                                                                                                                                                                              �[35m└─�[0m powershell.exe (PID 12872)
                                                                                                                                                                                �[35m└─�[0m powershell.exe (PID 12980)
                                                                                                                                                                                  �[35m└─�[0m cmd.exe (PID 13080)
                                                                                                                                                                                    �[35m└─�[0m powershell.exe (PID 13092)
                                                                                                                                                                                      �[35m└─�[0m powershell.exe (PID 13184)
                                                                                                                                                                                        �[35m└─�[0m cmd.exe (PID 13276)
                                                                                                                                                                                          �[35m└─�[0m powershell.exe (PID 13288)
                                                                                                                                                                                            �[35m└─�[0m powershell.exe (PID 9640)
                                                                                                                                                                                              �[35m└─�[0m cmd.exe (PID 13444)
                                                                                                                                                                                                �[35m└─�[0m powershell.exe (PID 13456)
                                                                                                                                                                                                  �[35m└─�[0m powershell.exe (PID 13604)
                                                                                                                                                                                                    �[35m└─�[0m cmd.exe (PID 13708)
                                                                                                                                                                                                      �[35m└─�[0m powershell.exe (PID 13724)
                                                                                                                                                                                                        �[35m└─�[0m powershell.exe (PID 13816)
                                                                                                                                                                                                          �[35m└─�[0m cmd.exe (PID 13908)
                                                                                                                                                                                                            �[35m└─�[0m powershell.exe (PID 13920)
                                                                                                                                                                                                              �[35m└─�[0m powershell.exe (PID 14012)
                                                                                                                                                                                                                �[35m└─�[0m cmd.exe (PID 14104)
                                                                                                                                                                                                                  �[35m└─�[0m powershell.exe (PID 14116)
                                                                                                                                                                                                                    �[35m└─�[0m powershell.exe (PID 14260)
                                                                                                                                                                                                                      �[35m└─�[0m cmd.exe (PID 12976)
                                                                                                                                                                                                                        �[35m└─�[0m powershell.exe (PID 13544)
                                                                                                                                                                                                                          �[35m└─�[0m powershell.exe (PID 13500)
                                                                                                                                                                                                                            �[35m└─�[0m cmd.exe (PID 13716)
                                                                                                                                                                                                                              �[35m└─�[0m powershell.exe (PID 10824)
                                                                                                                                                                                                                                �[35m└─�[0m powershell.exe (PID 14400)
                                                                                                                                                                                                                                  �[35m└─�[0m cmd.exe (PID 14488)
                                                                                                                                                                                                                                    �[35m└─�[0m powershell.exe (PID 14504)
                                                                                                                                                                                                                                      �[35m└─�[0m powershell.exe (PID 14596)
                                                                                                                                                                                                                                        �[35m└─�[0m cmd.exe (PID 14684)
                                                                                                                                                                                                                                          �[35m└─�[0m powershell.exe (PID 14700)
                                                                                                                                                                                                                                            �[35m└─�[0m powershell.exe (PID 14800)
                                                                                                                                                                                                                                              �[35m└─�[0m cmd.exe (PID 14888)
                                                                                                                                                                                                                                                �[35m└─�[0m powershell.exe (PID 14900)
                                                                                                                                                                                                                                                  �[35m└─�[0m powershell.exe (PID 15000)
                                                                                                                                                                                                                                                    �[35m└─�[0m cmd.exe (PID 15088)
                                                                                                                                                                                                                                                      �[35m└─�[0m powershell.exe (PID 15104)
                                                                                                                                                                                                                                                        �[35m└─�[0m powershell.exe (PID 15192)
                                                                                                                                                                                                                                                          �[35m└─�[0m cmd.exe (PID 15284)
                                                                                                                                                                                                                                                            �[35m└─�[0m powershell.exe (PID 15300)
                                                                                                                                                                                                                                                              �[35m└─�[0m powershell.exe (PID 6260)
                                                                                                                                                                                                                                                                �[35m└─�[0m cmd.exe (PID 11464)
                                                                                                                                                                                                                                                                  �[35m└─�[0m powershell.exe (PID 5888)
                                                                                                                                                                                                                                                                    �[35m└─�[0m powershell.exe (PID 1460)
                                                                                                                                                                                                                                                                      �[35m└─�[0m cmd.exe (PID 5296)
                                                                                                                                                                                                                                                                        �[35m└─�[0m powershell.exe (PID 3124)
                                                                                                                                                                                                                                                                          �[35m└─�[0m powershell.exe (PID 4736)
                                                                                                                                                                                                                                                                            �[35m└─�[0m cmd.exe (PID 11948)
                                                                                                                                                                                                                                                                              �[35m└─�[0m powershell.exe (PID 2268)
                                                                                                                                                                                                                                                                                �[35m└─�[0m powershell.exe (PID 12060)
                                                                                                                                                                                                                                                                                  �[35m└─�[0m cmd.exe (PID 3612)
                                                                                                                                                                                                                                                                                    �[35m└─�[0m powershell.exe (PID 3580)
                                                                                                                                                                                                                                                                                      �[35m└─�[0m powershell.exe (PID 4976)
                                                                                                                                                                                                                                                                                        �[35m└─�[0m cmd.exe (PID 7580)
                                                                                                                                                                                                                                                                                          �[35m└─�[0m powershell.exe (PID 14220)
                                                                                                                                                                                                                                                                                            �[35m└─�[0m powershell.exe (PID 15380)
                                                                                                                                                                                                                                                                                              �[35m└─�[0m cmd.exe (PID 15472)
                                                                                                                                                                                                                                                                                                �[35m└─�[0m powershell.exe (PID 15484)
                                                                                                                                                                                                                                                                                                  �[35m└─�[0m powershell.exe (PID 15576)
                                                                                                                                                                                                                                                                                                    �[35m└─�[0m cmd.exe (PID 15672)
                                                                                                                                                                                                                                                                                                      �[35m└─�[0m powershell.exe (PID 15684)
                                                                                                                                                                                                                                                                                                        �[35m└─�[0m powershell.exe (PID 15784)
                                                                                                                                                                                                                                                                                                          �[35m└─�[0m cmd.exe (PID 15876)
                                                                                                                                                                                                                                                                                                            �[35m└─�[0m powershell.exe (PID 15888)
                                                                                                                                                                                                                                                                                                              �[35m└─�[0m powershell.exe (PID 15980)
                                                                                                                                                                                                                                                                                                                �[35m└─�[0m cmd.exe (PID 16072)
                                                                                                                                                                                                                                                                                                                  �[35m└─�[0m powershell.exe (PID 16084)
                                                                                                                                                                                                                                                                                                                    �[35m└─�[0m powershell.exe (PID 16192)
                                                                                                                                                                                                                                                                                                                      �[35m└─�[0m cmd.exe (PID 16284)
                                                                                                                                                                                                                                                                                                                        �[35m└─�[0m powershell.exe (PID 16296)
                                                                                                                                                                                                                                                                                                                          �[35m└─�[0m powershell.exe (PID 13160)
                                                                                                                                                                                                                                                                                                                            �[35m└─�[0m cmd.exe (PID 13796)
                                                                                                                                                                                                                                                                                                                              �[35m└─�[0m powershell.exe (PID 5904)
                                                                                                                                                                                                                                                                                                                                �[35m└─�[0m powershell.exe (PID 7068)
                                                                                                                                                                                                                                                                                                                                  �[35m└─�[0m �[1;32mwin-witr.exe (PID 16428)�[0m
  
  Started: 0 seconds ago (Sun 2026-02-01 02:54:02 +0000)
  Time taken at depth 100: 258.7956ms
  Stress test passed!
✅ pid.bat - PASSED
  Output: 
  D:\a\win-witr\win-witr>win-witr --pid 4 
  �[34mTarget:�[0m System�[0m
  �[34mProcess:�[0m System�[90m (pid 4)�[0m
  �[1;34mUser�[0m: �[1;31mN/A (Failed to access info)�[0m
  �[1;34mCommand�[0m: Failed to Access (wwitr:procParamPtrRead)
  Why It Exists:
  Secure System (PID 92)
      �[35m└─�[0m Registry (PID 132)
        �[35m└─�[0m smss.exe (PID 544)
  
  Started: 2 minutes ago (Sun 2026-02-01 02:51:33 +0000)
  �[1;31mError:�[0m Unable to query executable path. Error code: 31
   Maybe Access is Denied or the process is running entirely in RAM.
  �[1;33mHint:�[0m This error indicates a driver error, but in win-witr, it often means you are calling a pseudo-process, such as System, Registry, or other processes that only exist in RAM as a kernel process. It is often easy to tell them apart if they lack a .exe extension.
✅ process.bat - PASSED
  Output: 
  D:\a\win-witr\win-witr>win-witr winlogon.exe 
  �[34mTarget:�[0m winlogon.exe�[0m
  �[34mProcess:�[0m winlogon.exe�[90m (pid 6832)�[0m
  Executable Path: C:\Windows\System32\winlogon.exe
  �[1;34mUser�[0m: SYSTEM
  �[1;34mCommand�[0m: Failed to Access (wwitr:procParamPtrRead)
  Why It Exists:
  �[1;32mwinlogon.exe (PID 6832)�[0m
    �[35m└─�[0m fontdrvhost.exe (PID 6880)
    �[35m└─�[0m dwm.exe (PID 6912)
  
  Started: 2 minutes ago (Sun 2026-02-01 02:52:04 +0000)
  
  D:\a\win-witr\win-witr>win-witr lsass.exe 
  �[34mTarget:�[0m lsass.exe�[0m
  �[34mProcess:�[0m lsass.exe�[90m (pid 992)�[0m
  Executable Path: C:\Windows\System32\lsass.exe
  �[1;34mUser�[0m: SYSTEM
  �[1;34mCommand�[0m: Failed to Access (wwitr:procParamPtrRead)
  Why It Exists:
  wininit.exe (PID 868)
      �[35m└─�[0m �[1;32mlsass.exe (PID 992)�[0m
  
  Started: 2 minutes ago (Sun 2026-02-01 02:51:37 +0000)
  
  D:\a\win-witr\win-witr>win-witr win-witr.exe 
  �[34mTarget:�[0m win-witr.exe�[0m
  �[34mProcess:�[0m win-witr.exe�[90m (pid 16956)�[0m
  Executable Path: D:\a\win-witr\win-witr\win-witr.exe
  �[1;34mUser�[0m: runneradmin
  �[1;34mCommand�[0m: Failed to Access (wwitr:cmdLStructFail)
  Why It Exists:
  wininit.exe (PID 868)
      �[35m└─�[0m services.exe (PID 964)
        �[35m└─�[0m svchost.exe (PID 2652)
          �[35m└─�[0m hosted-compute-agent (PID 492)
            �[35m└─�[0m Runner.Listener.exe (PID 8960)
              �[35m└─�[0m Runner.Worker.exe (PID 8928)
                �[35m└─�[0m pwsh.exe (PID 6756)
                  �[35m└─�[0m cmd.exe (PID 16908)
                    �[35m└─�[0m �[1;32mwin-witr.exe (PID 16956)�[0m
  
  Started: 0 seconds ago (Sun 2026-02-01 02:54:04 +0000)
  
  D:\a\win-witr\win-witr>win-witr wininit.exe  
  �[34mTarget:�[0m wininit.exe�[0m
  �[34mProcess:�[0m wininit.exe�[90m (pid 868)�[0m
  Executable Path: C:\Windows\System32\wininit.exe
  �[1;34mUser�[0m: SYSTEM
  �[1;34mCommand�[0m: Failed to Access (wwitr:procParamPtrRead)
  Why It Exists:
  �[1;32mwininit.exe (PID 868)�[0m
    �[35m└─�[0m services.exe (PID 964)
    �[35m└─�[0m LsaIso.exe (PID 984)
    �[35m└─�[0m lsass.exe (PID 992)
    �[35m└─�[0m fontdrvhost.exe (PID 1012)
  
  Started: 2 minutes ago (Sun 2026-02-01 02:51:36 +0000)
✅ version.bat - PASSED
  Output: 
  D:\a\win-witr\win-witr>win-witr -v 
  
  win-witr v0.1.0
  
  D:\a\win-witr\win-witr>win-witr --version 
  
  win-witr v0.1.0

✨ All tests passed across all architectures!