{"type": "func", "start": 6443732552, "end": 6443732612, "name": "__acrt_get_process_end_policy", "pseudocode": "// \n// __acrt_get_process_end_policy from 0x180138e48 to 0x180138e84 (60 bytes)\n// \n// 2 xrefs:\n// > exit_or_terminate_process @ 0x1801319c0\n// > <???> @ 0x180203740\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 _acrt_get_process_end_policy()\n{\n  unsigned int v0; // ebx\n  int v2; // [rsp+30h] [rbp+8h] BYREF\n\n  v0 = 0;\n  v2 = 0;\n  if ( (NtCurrentPeb()->ProcessParameters->Flags & 0x80000000) != 0 )\n    return 1;\n  _acrt_AppPolicyGetProcessTerminationMethodInternal((__int64)&v2);\n  if ( v2 != 1 )\n    return 1;\n  return v0;\n}", "assembly": "; \n; __acrt_get_process_end_policy from 0x180138e48 to 0x180138e84 (60 bytes)\n; \n; 2 xrefs:\n; > exit_or_terminate_process @ 0x1801319c0\n; > <???> @ 0x180203740\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\npush    rbx                                                            ; +0x0, 0x180138e48\nsub     rsp, 20h                                                       ; +0x2, 0x180138e4a\nxor     ebx, ebx                                                       ; +0x6, 0x180138e4e\nmov     [rsp+28h+arg_0], ebx                                           ; +0x8, 0x180138e50\nmov     rax, gs:60h                                                    ; +0xc, 0x180138e54\nmov     rcx, [rax+20h]                                                 ; +0x15, 0x180138e5d\ncmp     [rcx+8], ebx                                                   ; +0x19, 0x180138e61\njl      short loc_180138E77                                            ; +0x1c, 0x180138e64\nlea     rcx, [rsp+28h+arg_0]                                           ; +0x1e, 0x180138e66\ncall    __acrt_AppPolicyGetProcessTerminationMethodInternal            ; +0x23, 0x180138e6b\ncmp     [rsp+28h+arg_0], 1                                             ; +0x28, 0x180138e70\njz      short loc_180138E7C                                            ; +0x2d, 0x180138e75\nmov     ebx, 1                                                         ; +0x2f, 0x180138e77\nmov     eax, ebx                                                       ; +0x34, 0x180138e7c\nadd     rsp, 20h                                                       ; +0x36, 0x180138e7e\npop     rbx                                                            ; +0x3a, 0x180138e82\nretn                                                                   ; +0x3b, 0x180138e83", "xrefs": ["exit_or_terminate_process @ 0x1801319c0", "<???> @ 0x180203740"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}