{"type": "func", "start": 6443720272, "end": 6443720470, "name": "__acrt_is_interactive", "pseudocode": "// \n// __acrt_is_interactive from 0x180135e50 to 0x180135f16 (198 bytes)\n// \n// 2 xrefs:\n// > unknown_libname_70 @ 0x180139397\n// > <???> @ 0x180203488\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\nbool _acrt_is_interactive()\n{\n  __int64 (*function)(void); // rbx\n  FARPROC v1; // rdi\n  __int64 v2; // rax\n  bool result; // al\n  __int64 v4; // [rsp+30h] [rbp-28h] BYREF\n  int v5; // [rsp+38h] [rbp-20h]\n\n  function = try_get_function(\n               0xCu,\n               \"GetProcessWindowStation\",\n               (unsigned int *)&unk_180174A10,\n               (unsigned int *)\"GetProcessWindowStation\");\n  result = true;\n  if ( function )\n  {\n    v1 = try_get_function(\n           0x10u,\n           \"GetUserObjectInformationW\",\n           (unsigned int *)&unk_180174A30,\n           (unsigned int *)\"GetUserObjectInformationW\");\n    if ( v1 )\n    {\n      v2 = function();\n      if ( !v2 )\n        return false;\n      v4 = 0;\n      v5 = 0;\n      if ( !((unsigned int (__fastcall *)(__int64, __int64, __int64 *, __int64, _QWORD))v1)(v2, 1, &v4, 12, 0)\n        || (v5 & 1) == 0 )\n      {\n        return false;\n      }\n    }\n  }\n  return result;\n}", "assembly": "; \n; __acrt_is_interactive from 0x180135e50 to 0x180135f16 (198 bytes)\n; \n; 2 xrefs:\n; > unknown_libname_70 @ 0x180139397\n; > <???> @ 0x180203488\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov     [rsp+arg_0], rbx                                               ; +0x0, 0x180135e50\npush    rdi                                                            ; +0x5, 0x180135e55\nsub     rsp, 50h                                                       ; +0x6, 0x180135e56\nmov     rax, cs:__security_cookie                                      ; +0xa, 0x180135e5a\nxor     rax, rsp                                                       ; +0x11, 0x180135e61\nmov     [rsp+58h+var_18], rax                                          ; +0x14, 0x180135e64\nlea     r9, aGetprocesswind                                            ; +0x19, 0x180135e69\nmov     ecx, 0Ch                                                       ; +0x20, 0x180135e70\nlea     r8, unk_180174A10                                              ; +0x25, 0x180135e75\nlea     rdx, aGetprocesswind                                           ; +0x2c, 0x180135e7c\ncall    ?try_get_function@@YAPEAXW4function_id@?A0x37284e77@@QEBDQEBW4module_id@2@2@Z ; +0x33, 0x180135e83\nmov     rbx, rax                                                       ; +0x38, 0x180135e88\ntest    rax, rax                                                       ; +0x3b, 0x180135e8b\njz      short loc_180135EFC                                            ; +0x3e, 0x180135e8e\nlea     r9, aGetuserobjecti                                            ; +0x40, 0x180135e90\nmov     ecx, 10h                                                       ; +0x47, 0x180135e97\nlea     r8, unk_180174A30                                              ; +0x4c, 0x180135e9c\nlea     rdx, aGetuserobjecti                                           ; +0x53, 0x180135ea3\ncall    ?try_get_function@@YAPEAXW4function_id@?A0x37284e77@@QEBDQEBW4module_id@2@2@Z ; +0x5a, 0x180135eaa\nmov     rdi, rax                                                       ; +0x5f, 0x180135eaf\ntest    rax, rax                                                       ; +0x62, 0x180135eb2\njz      short loc_180135EFC                                            ; +0x65, 0x180135eb5\nmov     rax, rbx                                                       ; +0x67, 0x180135eb7\ncall    cs:__guard_dispatch_icall_fptr                                 ; +0x6a, 0x180135eba\ntest    rax, rax                                                       ; +0x70, 0x180135ec0\njz      short loc_180135EF8                                            ; +0x73, 0x180135ec3\nxor     ecx, ecx                                                       ; +0x75, 0x180135ec5\nlea     r8, [rsp+58h+var_28]                                           ; +0x77, 0x180135ec7\nand     [rsp+58h+var_38], rcx                                          ; +0x7c, 0x180135ecc\nmov     [rsp+58h+var_28], rcx                                          ; +0x81, 0x180135ed1\nmov     [rsp+58h+var_20], ecx                                          ; +0x86, 0x180135ed6\nlea     r9d, [rcx+0Ch]                                                 ; +0x8a, 0x180135eda\nlea     edx, [rcx+1]                                                   ; +0x8e, 0x180135ede\nmov     rcx, rax                                                       ; +0x91, 0x180135ee1\nmov     rax, rdi                                                       ; +0x94, 0x180135ee4\ncall    cs:__guard_dispatch_icall_fptr                                 ; +0x97, 0x180135ee7\ntest    eax, eax                                                       ; +0x9d, 0x180135eed\njz      short loc_180135EF8                                            ; +0x9f, 0x180135eef\ntest    byte ptr [rsp+58h+var_20], 1                                   ; +0xa1, 0x180135ef1\njnz     short loc_180135EFC                                            ; +0xa6, 0x180135ef6\nxor     al, al                                                         ; +0xa8, 0x180135ef8\njmp     short loc_180135EFE                                            ; +0xaa, 0x180135efa\nmov     al, 1                                                          ; +0xac, 0x180135efc\nmov     rcx, [rsp+58h+var_18]                                          ; +0xae, 0x180135efe\nxor     rcx, rsp; StackCookie                                          ; +0xb3, 0x180135f03\ncall    __security_check_cookie                                        ; +0xb6, 0x180135f06\nmov     rbx, [rsp+58h+arg_0]                                           ; +0xbb, 0x180135f0b\nadd     rsp, 50h                                                       ; +0xc0, 0x180135f10\npop     rdi                                                            ; +0xc4, 0x180135f14\nretn                                                                   ; +0xc5, 0x180135f15", "xrefs": ["unknown_libname_70 @ 0x180139397", "<???> @ 0x180203488"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}