{"type": "func", "start": 6443718456, "end": 6443718534, "name": "__acrt_AppPolicyGetProcessTerminationMethodInternal", "pseudocode": "// \n// __acrt_AppPolicyGetProcessTerminationMethodInternal from 0x180135738 to 0x180135786 (78 bytes)\n// \n// 2 xrefs:\n// > __acrt_get_process_end_policy @ 0x180138e6b\n// > <???> @ 0x1802033a4\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 __fastcall _acrt_AppPolicyGetProcessTerminationMethodInternal(__int64 a1)\n{\n  FARPROC function; // rax\n\n  function = try_get_function(0x1Cu, \"AppPolicyGetProcessTerminationMethod\", &dword_180174AF0, &dword_180174AF4);\n  if ( function )\n    return ((__int64 (__fastcall *)(__int64, __int64))function)(-6, a1);\n  else\n    return 3221226021LL;\n}", "assembly": "; \n; __acrt_AppPolicyGetProcessTerminationMethodInternal from 0x180135738 to 0x180135786 (78 bytes)\n; \n; 2 xrefs:\n; > __acrt_get_process_end_policy @ 0x180138e6b\n; > <???> @ 0x1802033a4\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\npush    rbx                                                            ; +0x0, 0x180135738\nsub     rsp, 20h                                                       ; +0x2, 0x18013573a\nmov     rbx, rcx                                                       ; +0x6, 0x18013573e\nlea     r9, dword_180174AF4                                            ; +0x9, 0x180135741\nmov     ecx, 1Ch                                                       ; +0x10, 0x180135748\nlea     r8, dword_180174AF0                                            ; +0x15, 0x18013574d\nlea     rdx, aApppolicygetpr                                           ; +0x1c, 0x180135754\ncall    ?try_get_function@@YAPEAXW4function_id@?A0x37284e77@@QEBDQEBW4module_id@2@2@Z ; +0x23, 0x18013575b\ntest    rax, rax                                                       ; +0x28, 0x180135760\njz      short loc_18013577B                                            ; +0x2b, 0x180135763\nmov     rdx, rbx                                                       ; +0x2d, 0x180135765\nmov     rcx, 0FFFFFFFFFFFFFFFAh                                        ; +0x30, 0x180135768\nadd     rsp, 20h                                                       ; +0x37, 0x18013576f\npop     rbx                                                            ; +0x3b, 0x180135773\njmp     cs:__guard_dispatch_icall_fptr                                 ; +0x3c, 0x180135774\nmov     eax, 0C0000225h                                                ; +0x43, 0x18013577b\nadd     rsp, 20h                                                       ; +0x48, 0x180135780\npop     rbx                                                            ; +0x4c, 0x180135784\nretn                                                                   ; +0x4d, 0x180135785", "xrefs": ["__acrt_get_process_end_policy @ 0x180138e6b", "<???> @ 0x1802033a4"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}