{"type": "func", "start": 6443732612, "end": 6443732720, "name": "__acrt_get_windowing_model_policy", "pseudocode": "// \n// __acrt_get_windowing_model_policy from 0x180138e84 to 0x180138ef0 (108 bytes)\n// \n// 4 xrefs:\n// > __acrt_can_show_message_box @ 0x180135d40\n// > unknown_libname_70 @ 0x180139373\n// > <???> @ 0x180203740\n// > <???> @ 0x18020374c\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 _acrt_get_windowing_model_policy()\n{\n  unsigned __int32 v0; // ebx\n  int v2; // [rsp+30h] [rbp+8h] BYREF\n\n  v0 = dword_1801F5590;\n  if ( !dword_1801F5590 )\n  {\n    v0 = 2;\n    v2 = 2;\n    if ( (NtCurrentPeb()->ProcessParameters->Flags & 0x80000000) == 0 )\n      _acrt_AppPolicyGetWindowingModelInternal((__int64)&v2);\n    if ( v2 != 1 )\n    {\n      if ( v2 == 2 )\n      {\n        v0 = 1;\n      }\n      else if ( v2 == 3 )\n      {\n        v0 = 3;\n      }\n      else\n      {\n        v0 = 4;\n      }\n    }\n    _InterlockedExchange(&dword_1801F5590, v0);\n  }\n  return v0;\n}", "assembly": "; \n; __acrt_get_windowing_model_policy from 0x180138e84 to 0x180138ef0 (108 bytes)\n; \n; 4 xrefs:\n; > __acrt_can_show_message_box @ 0x180135d40\n; > unknown_libname_70 @ 0x180139373\n; > <???> @ 0x180203740\n; > <???> @ 0x18020374c\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\npush    rbx                                                            ; +0x0, 0x180138e84\nsub     rsp, 20h                                                       ; +0x2, 0x180138e86\nmov     ebx, cs:dword_1801F5590                                        ; +0x6, 0x180138e8a\ntest    ebx, ebx                                                       ; +0xc, 0x180138e90\njnz     short loc_180138EE8                                            ; +0xe, 0x180138e92\nmov     ebx, 2                                                         ; +0x10, 0x180138e94\nmov     [rsp+28h+arg_0], ebx                                           ; +0x15, 0x180138e99\nmov     rax, gs:60h                                                    ; +0x19, 0x180138e9d\nmov     rcx, [rax+20h]                                                 ; +0x22, 0x180138ea6\ncmp     dword ptr [rcx+8], 0                                           ; +0x26, 0x180138eaa\njl      short loc_180138EBA                                            ; +0x2a, 0x180138eae\nlea     rcx, [rsp+28h+arg_0]                                           ; +0x2c, 0x180138eb0\ncall    __acrt_AppPolicyGetWindowingModelInternal                      ; +0x31, 0x180138eb5\nmov     ecx, [rsp+28h+arg_0]                                           ; +0x36, 0x180138eba\nsub     ecx, 1                                                         ; +0x3a, 0x180138ebe\njz      short loc_180138EE0                                            ; +0x3d, 0x180138ec1\nsub     ecx, 1                                                         ; +0x3f, 0x180138ec3\njz      short loc_180138EDB                                            ; +0x42, 0x180138ec6\ncmp     ecx, 1                                                         ; +0x44, 0x180138ec8\njz      short loc_180138ED4                                            ; +0x47, 0x180138ecb\nmov     ebx, 4                                                         ; +0x49, 0x180138ecd\njmp     short loc_180138EE0                                            ; +0x4e, 0x180138ed2\nmov     ebx, 3                                                         ; +0x50, 0x180138ed4\njmp     short loc_180138EE0                                            ; +0x55, 0x180138ed9\nmov     ebx, 1                                                         ; +0x57, 0x180138edb\nmov     ecx, ebx                                                       ; +0x5c, 0x180138ee0\nxchg    ecx, cs:dword_1801F5590                                        ; +0x5e, 0x180138ee2\nmov     eax, ebx                                                       ; +0x64, 0x180138ee8\nadd     rsp, 20h                                                       ; +0x66, 0x180138eea\npop     rbx                                                            ; +0x6a, 0x180138eee\nretn                                                                   ; +0x6b, 0x180138eef", "xrefs": ["__acrt_can_show_message_box @ 0x180135d40", "unknown_libname_70 @ 0x180139373", "<???> @ 0x180203740", "<???> @ 0x18020374c"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}