{"type": "func", "start": 6443705500, "end": 6443705932, "name": "_lambda_22ebabd17bc4fa466a2aca6d8deb888d_::operator", "pseudocode": "// \n// _lambda_22ebabd17bc4fa466a2aca6d8deb888d_::operator from 0x18013249c to 0x18013264c (432 bytes)\n// \n// 2 xrefs:\n// > __crt_seh_guarded_call::operator @ 0x180132444\n// > @ 0x180203014\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 __fastcall _lambda_22ebabd17bc4fa466a2aca6d8deb888d_::operator()(_QWORD **a1)\n{\n _QWORD *v2; // rbx\n uintptr_t v3; // r10\n uintptr_t v4; // rsi\n uintptr_t v5; // r9\n char *v6; // rbx\n _BYTE *v7; // rsi\n uintptr_t *v8; // r9\n unsigned __int64 v9; // rbx\n __int64 v10; // rdi\n size_t v11; // rdi\n char *v12; // r14\n unsigned __int64 v13; // rcx\n\n v2 = (_QWORD *)**a1;\n if ( v2 )\n {\n v3 = _security_cookie;\n v4 = *v2 ^ _security_cookie;\n v5 = _security_cookie ^ v2[1];\n v6 = (char *)__ROR8__(_security_cookie ^ v2[2], _security_cookie & 0x3F);\n v7 = (_BYTE *)__ROR8__(v4, _security_cookie & 0x3F);\n v8 = (uintptr_t *)__ROR8__(v5, _security_cookie & 0x3F);\n if ( v8 != (uintptr_t *)v6 )\n {\nLABEL_14:\n *v8 = v3 ^ __ROR8__(*a1[1], 64 - ((unsigned __int8)v3 & 0x3Fu));\n *(_QWORD *)**a1 = _security_cookie ^ __ROR8__(v7, 64 - ((unsigned __int8)_security_cookie & 0x3Fu));\n *(_QWORD *)(**a1 + 8LL) = _security_cookie ^ __ROR8__(v8 + 1, 64 - ((unsigned __int8)_security_cookie & 0x3Fu));\n *(_QWORD *)(**a1 + 16LL) = _security_cookie ^ __ROR8__(v6, 64 - ((unsigned __int8)_security_cookie & 0x3Fu));\n return 0;\n }\n v9 = (v6 - v7) >> 3;\n v10 = v9;\n if ( v9 > 0x200 )\n v10 = 512;\n v11 = v9 + v10;\n if ( !v11 )\n v11 = 32;\n if ( v11 >= v9 && (v12 = (char *)recalloc_base(v7, v11, 8u), free_base(nullptr), v12)\n || (v11 = v9 + 4, v12 = (char *)recalloc_base(v7, v9 + 4, 8u), free_base(nullptr), v12) )\n {\n v3 = _security_cookie;\n v8 = (uintptr_t *)&v12[8 * v9];\n v6 = &v12[8 * v11];\n v7 = v12;\n v13 = (unsigned __int64)(v6 - (char *)v8 + 7) >> 3;\n if ( v8 > (uintptr_t *)v6 )\n v13 = 0;\n if ( v13 )\n {\n memset64(v8, _security_cookie, v13);\n v3 = _security_cookie;\n }\n goto LABEL_14;\n }\n }\n return 0xFFFFFFFFLL;\n}", "assembly": "; \n; _lambda_22ebabd17bc4fa466a2aca6d8deb888d_::operator from 0x18013249c to 0x18013264c (432 bytes)\n; \n; 2 xrefs:\n; > __crt_seh_guarded_call::operator @ 0x180132444\n; > @ 0x180203014\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov [rsp+arg_8], rbx ; +0x0, 0x18013249c\nmov [rsp+arg_10], rbp ; +0x5, 0x1801324a1\nmov [rsp+arg_18], rsi ; +0xa, 0x1801324a6\npush rdi ; +0xf, 0x1801324ab\npush r14 ; +0x10, 0x1801324ac\npush r15 ; +0x12, 0x1801324ae\nsub rsp, 20h ; +0x14, 0x1801324b0\nmov rax, [rcx] ; +0x18, 0x1801324b4\nxor ebp, ebp ; +0x1b, 0x1801324b7\nmov r15, rcx ; +0x1d, 0x1801324b9\nmov rbx, [rax] ; +0x20, 0x1801324bc\ntest rbx, rbx ; +0x23, 0x1801324bf\njz loc_180132630 ; +0x26, 0x1801324c2\nmov r10, cs:__security_cookie ; +0x2c, 0x1801324c8\nmov r9, [rbx+8] ; +0x33, 0x1801324cf\nmov rsi, r10 ; +0x37, 0x1801324d3\nxor rsi, [rbx] ; +0x3a, 0x1801324d6\nxor r9, r10 ; +0x3d, 0x1801324d9\nmov rbx, [rbx+10h] ; +0x40, 0x1801324dc\nmov ecx, r10d ; +0x44, 0x1801324e0\nand ecx, 3Fh ; +0x47, 0x1801324e3\nxor rbx, r10 ; +0x4a, 0x1801324e6\nror rbx, cl ; +0x4d, 0x1801324e9\nror rsi, cl ; +0x50, 0x1801324ec\nror r9, cl ; +0x53, 0x1801324ef\ncmp r9, rbx ; +0x56, 0x1801324f2\njnz loc_1801325A2 ; +0x59, 0x1801324f5\nsub rbx, rsi ; +0x5f, 0x1801324fb\nmov eax, 200h ; +0x62, 0x1801324fe\nsar rbx, 3 ; +0x67, 0x180132503\ncmp rbx, rax ; +0x6b, 0x180132507\nmov rdi, rbx ; +0x6e, 0x18013250a\ncmova rdi, rax ; +0x71, 0x18013250d\nlea eax, [rbp+20h] ; +0x75, 0x180132511\nadd rdi, rbx ; +0x78, 0x180132514\ncmovz rdi, rax ; +0x7b, 0x180132517\ncmp rdi, rbx ; +0x7f, 0x18013251b\njb short loc_18013253E ; +0x82, 0x18013251e\nlea r8d, [rbp+8]; Size ; +0x84, 0x180132520\nmov rdx, rdi; Count ; +0x88, 0x180132524\nmov rcx, rsi; Block ; +0x8b, 0x180132527\ncall _recalloc_base ; +0x8e, 0x18013252a\nxor ecx, ecx; Block ; +0x93, 0x18013252f\nmov r14, rax ; +0x95, 0x180132531\ncall _free_base ; +0x98, 0x180132534\ntest r14, r14 ; +0x9d, 0x180132539\njnz short loc_180132566 ; +0xa0, 0x18013253c\nlea rdi, [rbx+4] ; +0xa2, 0x18013253e\nmov r8d, 8; Size ; +0xa6, 0x180132542\nmov rdx, rdi; Count ; +0xac, 0x180132548\nmov rcx, rsi; Block ; +0xaf, 0x18013254b\ncall _recalloc_base ; +0xb2, 0x18013254e\nxor ecx, ecx; Block ; +0xb7, 0x180132553\nmov r14, rax ; +0xb9, 0x180132555\ncall _free_base ; +0xbc, 0x180132558\ntest r14, r14 ; +0xc1, 0x18013255d\njz loc_180132630 ; +0xc4, 0x180132560\nmov r10, cs:__security_cookie ; +0xca, 0x180132566\nlea r9, [r14+rbx*8] ; +0xd1, 0x18013256d\nlea rbx, [r14+rdi*8] ; +0xd5, 0x180132571\nmov rsi, r14 ; +0xd9, 0x180132575\nmov rcx, rbx ; +0xdc, 0x180132578\nsub rcx, r9 ; +0xdf, 0x18013257b\nadd rcx, 7 ; +0xe2, 0x18013257e\nshr rcx, 3 ; +0xe6, 0x180132582\ncmp r9, rbx ; +0xea, 0x180132586\ncmova rcx, rbp ; +0xed, 0x180132589\ntest rcx, rcx ; +0xf1, 0x18013258d\njz short loc_1801325A2 ; +0xf4, 0x180132590\nmov rax, r10 ; +0xf6, 0x180132592\nmov rdi, r9 ; +0xf9, 0x180132595\nrep stosq ; +0xfc, 0x180132598\nmov r10, cs:__security_cookie ; +0xff, 0x18013259b\nmov r8d, 40h ; '@' ; +0x106, 0x1801325a2\nlea rdi, [r9+8] ; +0x10c, 0x1801325a8\nmov ecx, r8d ; +0x110, 0x1801325ac\nmov eax, r10d ; +0x113, 0x1801325af\nand eax, 3Fh ; +0x116, 0x1801325b2\nsub ecx, eax ; +0x119, 0x1801325b5\nmov rax, [r15+8] ; +0x11b, 0x1801325b7\nmov rdx, [rax] ; +0x11f, 0x1801325bb\nmov eax, r8d ; +0x122, 0x1801325be\nror rdx, cl ; +0x125, 0x1801325c1\nxor rdx, r10 ; +0x128, 0x1801325c4\nmov [r9], rdx ; +0x12b, 0x1801325c7\nmov rdx, cs:__security_cookie ; +0x12e, 0x1801325ca\nmov ecx, edx ; +0x135, 0x1801325d1\nand ecx, 3Fh ; +0x137, 0x1801325d3\nsub eax, ecx ; +0x13a, 0x1801325d6\nmov cl, al ; +0x13c, 0x1801325d8\nmov rax, [r15] ; +0x13e, 0x1801325da\nror rsi, cl ; +0x141, 0x1801325dd\nxor rsi, rdx ; +0x144, 0x1801325e0\nmov rcx, [rax] ; +0x147, 0x1801325e3\nmov [rcx], rsi ; +0x14a, 0x1801325e6\nmov ecx, r8d ; +0x14d, 0x1801325e9\nmov rdx, cs:__security_cookie ; +0x150, 0x1801325ec\nmov eax, edx ; +0x157, 0x1801325f3\nand eax, 3Fh ; +0x159, 0x1801325f5\nsub ecx, eax ; +0x15c, 0x1801325f8\nmov rax, [r15] ; +0x15e, 0x1801325fa\nror rdi, cl ; +0x161, 0x1801325fd\nxor rdi, rdx ; +0x164, 0x180132600\nmov rdx, [rax] ; +0x167, 0x180132603\nmov [rdx+8], rdi ; +0x16a, 0x180132606\nmov rdx, cs:__security_cookie ; +0x16e, 0x18013260a\nmov eax, edx ; +0x175, 0x180132611\nand eax, 3Fh ; +0x177, 0x180132613\nsub r8d, eax ; +0x17a, 0x180132616\nmov rax, [r15] ; +0x17d, 0x180132619\nmov cl, r8b ; +0x180, 0x18013261c\nror rbx, cl ; +0x183, 0x18013261f\nxor rbx, rdx ; +0x186, 0x180132622\nmov rcx, [rax] ; +0x189, 0x180132625\nxor eax, eax ; +0x18c, 0x180132628\nmov [rcx+10h], rbx ; +0x18e, 0x18013262a\njmp short loc_180132633 ; +0x192, 0x18013262e\nor eax, 0FFFFFFFFh ; +0x194, 0x180132630\nmov rbx, [rsp+38h+arg_8] ; +0x197, 0x180132633\nmov rbp, [rsp+38h+arg_10] ; +0x19c, 0x180132638\nmov rsi, [rsp+38h+arg_18] ; +0x1a1, 0x18013263d\nadd rsp, 20h ; +0x1a6, 0x180132642\npop r15 ; +0x1aa, 0x180132646\npop r14 ; +0x1ac, 0x180132648\npop rdi ; +0x1ae, 0x18013264a\nretn ; +0x1af, 0x18013264b", "xrefs": ["__crt_seh_guarded_call::operator @ 0x180132444", " @ 0x180203014"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}