; ; __FrameHandler3::UnwindNestedFrames from 0x180125604 to 0x180125707 (259 bytes) ; ; 3 xrefs: ; > CatchIt<__FrameHandler3> @ 0x180125cf8 ; > FindHandler<__FrameHandler3> @ 0x180126120 ; > @ 0x18020281c ; ; This function is hookable on this platform! ; ; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA ; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings ; push rbp ; +0x0, 0x180125604 lea rbp, [rsp-1Fh] ; +0x2, 0x180125606 sub rsp, 0E0h ; +0x7, 0x18012560b mov rax, cs:__security_cookie ; +0xe, 0x180125612 xor rax, rsp ; +0x15, 0x180125619 mov [rbp+1Fh+var_10], rax ; +0x18, 0x18012561c mov r10, [rbp+1Fh+arg_48] ; +0x1c, 0x180125620 lea rax, byte_180170B30 ; +0x20, 0x180125624 movups xmm0, xmmword ptr [rax] ; +0x27, 0x18012562b mov r11, rcx ; +0x2a, 0x18012562e lea rcx, [rsp+0E0h+ExceptionRecord] ; +0x2d, 0x180125631 movups xmm1, xmmword ptr [rax+10h] ; +0x32, 0x180125636 movups xmmword ptr [rcx], xmm0 ; +0x36, 0x18012563a movups xmm0, xmmword ptr [rax+20h] ; +0x39, 0x18012563d movups xmmword ptr [rcx+10h], xmm1 ; +0x3d, 0x180125641 movups xmm1, xmmword ptr [rax+30h] ; +0x41, 0x180125645 movups xmmword ptr [rcx+20h], xmm0 ; +0x45, 0x180125649 movups xmm0, xmmword ptr [rax+40h] ; +0x49, 0x18012564d movups xmmword ptr [rcx+30h], xmm1 ; +0x4d, 0x180125651 movups xmm1, xmmword ptr [rax+50h] ; +0x51, 0x180125655 movups xmmword ptr [rcx+40h], xmm0 ; +0x55, 0x180125659 movups xmm0, xmmword ptr [rax+60h] ; +0x59, 0x18012565d movups xmmword ptr [rcx+50h], xmm1 ; +0x5d, 0x180125661 movups xmm1, xmmword ptr [rax+80h] ; +0x61, 0x180125665 movups xmmword ptr [rcx+60h], xmm0 ; +0x68, 0x18012566c movups xmm0, xmmword ptr [rax+70h] ; +0x6c, 0x180125670 mov rax, [rax+90h] ; +0x70, 0x180125674 movups xmmword ptr [rcx+70h], xmm0 ; +0x77, 0x18012567b movups xmmword ptr [rcx+80h], xmm1 ; +0x7b, 0x18012567f mov [rcx+90h], rax ; +0x82, 0x180125686 lea rax, unknown_libname_19; Microsoft VisualC v14 64bit runtime ; +0x89, 0x18012568d mov rcx, [r11]; TargetFrame ; +0x90, 0x180125694 mov [rbp+1Fh+ExceptionRecord.ExceptionInformation], rax ; +0x93, 0x180125697 mov rax, [rbp+1Fh+arg_20] ; +0x97, 0x18012569b mov [rbp+1Fh+ExceptionRecord.ExceptionInformation+10h], rax ; +0x9b, 0x18012569f movsxd rax, [rbp+1Fh+arg_30] ; +0x9f, 0x1801256a3 mov [rbp+1Fh+ExceptionRecord.ExceptionInformation+18h], rax ; +0xa3, 0x1801256a7 mov rax, [rbp+1Fh+arg_28] ; +0xa7, 0x1801256ab mov [rbp+1Fh+ExceptionRecord.ExceptionInformation+28h], rax ; +0xab, 0x1801256af movzx eax, [rbp+1Fh+arg_50] ; +0xaf, 0x1801256b3 mov [rbp+1Fh+ExceptionRecord.ExceptionInformation+38h], rax ; +0xb3, 0x1801256b7 mov rax, [r10+40h] ; +0xb7, 0x1801256bb mov [rsp+0E0h+HistoryTable], rax; HistoryTable ; +0xbb, 0x1801256bf mov rax, [r10+28h] ; +0xc0, 0x1801256c4 mov [rbp+1Fh+ExceptionRecord.ExceptionInformation+8], r9 ; +0xc4, 0x1801256c8 xor r9d, r9d; ReturnValue ; +0xc8, 0x1801256cc mov [rbp+1Fh+ExceptionRecord.ExceptionInformation+20h], r8 ; +0xcb, 0x1801256cf lea r8, [rsp+0E0h+ExceptionRecord]; ExceptionRecord ; +0xcf, 0x1801256d3 mov [rbp+1Fh+ExceptionRecord.ExceptionInformation+30h], rdx ; +0xd4, 0x1801256d8 mov rdx, [r10]; TargetIp ; +0xd8, 0x1801256dc mov [rsp+0E0h+ContextRecord], rax; ContextRecord ; +0xdb, 0x1801256df mov [rbp+1Fh+ExceptionRecord.ExceptionInformation+40h], 19930520h ; +0xe0, 0x1801256e4 call cs:RtlUnwindEx ; +0xe8, 0x1801256ec mov rcx, [rbp+1Fh+var_10] ; +0xee, 0x1801256f2 xor rcx, rsp; StackCookie ; +0xf2, 0x1801256f6 call __security_check_cookie ; +0xf5, 0x1801256f9 add rsp, 0E0h ; +0xfa, 0x1801256fe pop rbp ; +0x101, 0x180125705 retn ; +0x102, 0x180125706