{"type": "func", "start": 6443705932, "end": 6443706210, "name": "_lambda_f03950bc5685219e0bcd2087efbe011e_::operator", "pseudocode": "// \n// _lambda_f03950bc5685219e0bcd2087efbe011e_::operator from 0x18013264c to 0x180132762 (278 bytes)\n// \n// 3 xrefs:\n// > __crt_seh_guarded_call::operator @ 0x180132480\n// > @ 0x180203014\n// > @ 0x180203020\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 __fastcall _lambda_f03950bc5685219e0bcd2087efbe011e_::operator()(_QWORD **a1)\n{\n _QWORD *v2; // rbx\n uintptr_t v4; // r8\n uintptr_t *v5; // rdi\n uintptr_t *v6; // rbx\n uintptr_t v7; // r14\n char v8; // cl\n uintptr_t *v9; // r15\n uintptr_t *v10; // rbp\n uintptr_t v11; // rax\n _QWORD *v12; // rdx\n char *v13; // r9\n uintptr_t *v14; // rax\n\n v2 = (_QWORD *)**a1;\n if ( !v2 )\n return 0xFFFFFFFFLL;\n v4 = _security_cookie;\n v5 = (uintptr_t *)__ROR8__(*v2 ^ _security_cookie, _security_cookie & 0x3F);\n v6 = (uintptr_t *)__ROR8__(_security_cookie ^ v2[1], _security_cookie & 0x3F);\n if ( (unsigned __int64)v5 - 1 <= 0xFFFFFFFFFFFFFFFDuLL )\n {\n v7 = _security_cookie;\n v8 = _security_cookie & 0x3F;\n v9 = v5;\n v10 = v6;\n while ( --v6 >= v5 )\n {\n v11 = *v6;\n if ( *v6 != v7 )\n {\n *v6 = v7;\n ((void (*)(void))__ROR8__(v4 ^ v11, v8))();\n v4 = _security_cookie;\n v8 = _security_cookie & 0x3F;\n v12 = (_QWORD *)**a1;\n v13 = (char *)__ROR8__(_security_cookie ^ *v12, _security_cookie & 0x3F);\n v14 = (uintptr_t *)__ROR8__(_security_cookie ^ v12[1], _security_cookie & 0x3F);\n if ( v13 != (char *)v9 || v14 != v10 )\n {\n v9 = (uintptr_t *)v13;\n v5 = (uintptr_t *)v13;\n v10 = v14;\n v6 = v14;\n }\n }\n }\n if ( v5 != (uintptr_t *)-1LL )\n {\n free_base(v5);\n v4 = _security_cookie;\n }\n *(_QWORD *)**a1 = v4;\n *(_QWORD *)(**a1 + 8LL) = v4;\n *(_QWORD *)(**a1 + 16LL) = v4;\n }\n return 0;\n}", "assembly": "; \n; _lambda_f03950bc5685219e0bcd2087efbe011e_::operator from 0x18013264c to 0x180132762 (278 bytes)\n; \n; 3 xrefs:\n; > __crt_seh_guarded_call::operator @ 0x180132480\n; > @ 0x180203014\n; > @ 0x180203020\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov [rsp+arg_0], rbx ; +0x0, 0x18013264c\nmov [rsp+arg_8], rbp ; +0x5, 0x180132651\nmov [rsp+arg_10], rsi ; +0xa, 0x180132656\npush rdi ; +0xf, 0x18013265b\npush r14 ; +0x10, 0x18013265c\npush r15 ; +0x12, 0x18013265e\nsub rsp, 20h ; +0x14, 0x180132660\nmov rax, [rcx] ; +0x18, 0x180132664\nmov rsi, rcx ; +0x1b, 0x180132667\nmov rbx, [rax] ; +0x1e, 0x18013266a\ntest rbx, rbx ; +0x21, 0x18013266d\njnz short loc_18013267A ; +0x24, 0x180132670\nor eax, 0FFFFFFFFh ; +0x26, 0x180132672\njmp loc_180132749 ; +0x29, 0x180132675\nmov r8, cs:__security_cookie ; +0x2e, 0x18013267a\nmov ecx, r8d ; +0x35, 0x180132681\nmov rdi, r8 ; +0x38, 0x180132684\nxor rdi, [rbx] ; +0x3b, 0x180132687\nand ecx, 3Fh ; +0x3e, 0x18013268a\nmov rbx, [rbx+8] ; +0x41, 0x18013268d\nror rdi, cl ; +0x45, 0x180132691\nxor rbx, r8 ; +0x48, 0x180132694\nror rbx, cl ; +0x4b, 0x180132697\nlea rax, [rdi-1] ; +0x4e, 0x18013269a\ncmp rax, 0FFFFFFFFFFFFFFFDh ; +0x52, 0x18013269e\nja loc_180132747 ; +0x56, 0x1801326a2\nmov ecx, r8d ; +0x5c, 0x1801326a8\nmov r14, r8 ; +0x5f, 0x1801326ab\nand ecx, 3Fh ; +0x62, 0x1801326ae\nmov r15, rdi ; +0x65, 0x1801326b1\nmov rbp, rbx ; +0x68, 0x1801326b4\nsub rbx, 8 ; +0x6b, 0x1801326b7\ncmp rbx, rdi ; +0x6f, 0x1801326bb\njb short loc_180132715 ; +0x72, 0x1801326be\nmov rax, [rbx] ; +0x74, 0x1801326c0\ncmp rax, r14 ; +0x77, 0x1801326c3\njz short loc_1801326B7 ; +0x7a, 0x1801326c6\nxor rax, r8 ; +0x7c, 0x1801326c8\nmov [rbx], r14 ; +0x7f, 0x1801326cb\nror rax, cl ; +0x82, 0x1801326ce\ncall cs:__guard_dispatch_icall_fptr ; +0x85, 0x1801326d1\nmov r8, cs:__security_cookie ; +0x8b, 0x1801326d7\nmov rax, [rsi] ; +0x92, 0x1801326de\nmov ecx, r8d ; +0x95, 0x1801326e1\nand ecx, 3Fh ; +0x98, 0x1801326e4\nmov rdx, [rax] ; +0x9b, 0x1801326e7\nmov r9, [rdx] ; +0x9e, 0x1801326ea\nmov rax, [rdx+8] ; +0xa1, 0x1801326ed\nxor r9, r8 ; +0xa5, 0x1801326f1\nxor rax, r8 ; +0xa8, 0x1801326f4\nror r9, cl ; +0xab, 0x1801326f7\nror rax, cl ; +0xae, 0x1801326fa\ncmp r9, r15 ; +0xb1, 0x1801326fd\njnz short loc_180132707 ; +0xb4, 0x180132700\ncmp rax, rbp ; +0xb6, 0x180132702\njz short loc_1801326B7 ; +0xb9, 0x180132705\nmov r15, r9 ; +0xbb, 0x180132707\nmov rdi, r9 ; +0xbe, 0x18013270a\nmov rbp, rax ; +0xc1, 0x18013270d\nmov rbx, rax ; +0xc4, 0x180132710\njmp short loc_1801326B7 ; +0xc7, 0x180132713\ncmp rdi, 0FFFFFFFFFFFFFFFFh ; +0xc9, 0x180132715\njz short loc_18013272A ; +0xcd, 0x180132719\nmov rcx, rdi; Block ; +0xcf, 0x18013271b\ncall _free_base ; +0xd2, 0x18013271e\nmov r8, cs:__security_cookie ; +0xd7, 0x180132723\nmov rax, [rsi] ; +0xde, 0x18013272a\nmov rcx, [rax] ; +0xe1, 0x18013272d\nmov [rcx], r8 ; +0xe4, 0x180132730\nmov rax, [rsi] ; +0xe7, 0x180132733\nmov rcx, [rax] ; +0xea, 0x180132736\nmov [rcx+8], r8 ; +0xed, 0x180132739\nmov rax, [rsi] ; +0xf1, 0x18013273d\nmov rcx, [rax] ; +0xf4, 0x180132740\nmov [rcx+10h], r8 ; +0xf7, 0x180132743\nxor eax, eax ; +0xfb, 0x180132747\nmov rbx, [rsp+38h+arg_0] ; +0xfd, 0x180132749\nmov rbp, [rsp+38h+arg_8] ; +0x102, 0x18013274e\nmov rsi, [rsp+38h+arg_10] ; +0x107, 0x180132753\nadd rsp, 20h ; +0x10c, 0x180132758\npop r15 ; +0x110, 0x18013275c\npop r14 ; +0x112, 0x18013275e\npop rdi ; +0x114, 0x180132760\nretn ; +0x115, 0x180132761", "xrefs": ["__crt_seh_guarded_call::operator @ 0x180132480", " @ 0x180203014", " @ 0x180203020"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}