; ; _seh_filter_exe from 0x180131670 to 0x1801317f2 (386 bytes) ; ; 3 xrefs: ; > _seh_filter_dll @ 0x18013166a ; > unknown_libname_61 @ 0x180142da1 ; > @ 0x180202ef4 ; ; This function is hookable on this platform! ; ; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA ; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings ; mov [rsp+arg_0], rbx ; +0x0, 0x180131670 mov [rsp+arg_8], rbp ; +0x5, 0x180131675 mov [rsp+arg_10], rsi ; +0xa, 0x18013167a push rdi ; +0xf, 0x18013167f sub rsp, 20h ; +0x10, 0x180131680 mov rsi, rdx ; +0x14, 0x180131684 mov edi, ecx ; +0x17, 0x180131687 call __acrt_getptd_noexit ; +0x19, 0x180131689 xor r9d, r9d ; +0x1e, 0x18013168e mov rbx, rax ; +0x21, 0x180131691 test rax, rax ; +0x24, 0x180131694 jz loc_1801317DB ; +0x27, 0x180131697 mov rcx, [rax] ; +0x2d, 0x18013169d mov rax, rcx ; +0x30, 0x1801316a0 lea r8, [rcx+0C0h] ; +0x33, 0x1801316a3 cmp rcx, r8 ; +0x3a, 0x1801316aa jz short loc_1801316BC ; +0x3d, 0x1801316ad cmp [rax], edi ; +0x3f, 0x1801316af jz short loc_1801316BF ; +0x41, 0x1801316b1 add rax, 10h ; +0x43, 0x1801316b3 cmp rax, r8 ; +0x47, 0x1801316b7 jnz short loc_1801316AF ; +0x4a, 0x1801316ba mov rax, r9 ; +0x4c, 0x1801316bc test rax, rax ; +0x4f, 0x1801316bf jz loc_1801317DB ; +0x52, 0x1801316c2 mov r8, [rax+8] ; +0x58, 0x1801316c8 test r8, r8 ; +0x5c, 0x1801316cc jz loc_1801317DB ; +0x5f, 0x1801316cf cmp r8, 5 ; +0x65, 0x1801316d5 jnz short loc_1801316E8 ; +0x69, 0x1801316d9 mov [rax+8], r9 ; +0x6b, 0x1801316db lea eax, [r8-4] ; +0x6f, 0x1801316df jmp loc_1801317DD ; +0x73, 0x1801316e3 cmp r8, 1 ; +0x78, 0x1801316e8 jnz short loc_1801316F6 ; +0x7c, 0x1801316ec or eax, 0FFFFFFFFh ; +0x7e, 0x1801316ee jmp loc_1801317DD ; +0x81, 0x1801316f1 mov rbp, [rbx+8] ; +0x86, 0x1801316f6 mov [rbx+8], rsi ; +0x8a, 0x1801316fa cmp dword ptr [rax+4], 8 ; +0x8e, 0x1801316fe jnz loc_1801317C2 ; +0x92, 0x180131702 add rcx, 30h ; '0' ; +0x98, 0x180131708 lea rdx, [rcx+90h] ; +0x9c, 0x18013170c jmp short loc_18013171D ; +0xa3, 0x180131713 mov [rcx+8], r9 ; +0xa5, 0x180131715 add rcx, 10h ; +0xa9, 0x180131719 cmp rcx, rdx ; +0xad, 0x18013171d jnz short loc_180131715 ; +0xb0, 0x180131720 cmp dword ptr [rax], 0C000008Dh ; +0xb2, 0x180131722 mov edi, [rbx+10h] ; +0xb8, 0x180131728 jz short loc_1801317A7 ; +0xbb, 0x18013172b cmp dword ptr [rax], 0C000008Eh ; +0xbd, 0x18013172d jz short loc_1801317A0 ; +0xc3, 0x180131733 cmp dword ptr [rax], 0C000008Fh ; +0xc5, 0x180131735 jz short loc_180131799 ; +0xcb, 0x18013173b cmp dword ptr [rax], 0C0000090h ; +0xcd, 0x18013173d jz short loc_180131792 ; +0xd3, 0x180131743 cmp dword ptr [rax], 0C0000091h ; +0xd5, 0x180131745 jz short loc_18013178B ; +0xdb, 0x18013174b cmp dword ptr [rax], 0C0000092h ; +0xdd, 0x18013174d jz short loc_180131784 ; +0xe3, 0x180131753 cmp dword ptr [rax], 0C0000093h ; +0xe5, 0x180131755 jz short loc_18013177D ; +0xeb, 0x18013175b cmp dword ptr [rax], 0C00002B4h ; +0xed, 0x18013175d jz short loc_180131776 ; +0xf3, 0x180131763 cmp dword ptr [rax], 0C00002B5h ; +0xf5, 0x180131765 mov edx, edi ; +0xfb, 0x18013176b jnz short loc_1801317AF ; +0xfd, 0x18013176d mov edx, 8Dh ; +0xff, 0x18013176f jmp short loc_1801317AC ; +0x104, 0x180131774 mov edx, 8Eh ; +0x106, 0x180131776 jmp short loc_1801317AC ; +0x10b, 0x18013177b mov edx, 85h ; +0x10d, 0x18013177d jmp short loc_1801317AC ; +0x112, 0x180131782 mov edx, 8Ah ; +0x114, 0x180131784 jmp short loc_1801317AC ; +0x119, 0x180131789 mov edx, 84h ; +0x11b, 0x18013178b jmp short loc_1801317AC ; +0x120, 0x180131790 mov edx, 81h ; +0x122, 0x180131792 jmp short loc_1801317AC ; +0x127, 0x180131797 mov edx, 86h ; +0x129, 0x180131799 jmp short loc_1801317AC ; +0x12e, 0x18013179e mov edx, 83h ; +0x130, 0x1801317a0 jmp short loc_1801317AC ; +0x135, 0x1801317a5 mov edx, 82h ; +0x137, 0x1801317a7 mov [rbx+10h], edx ; +0x13c, 0x1801317ac mov ecx, 8 ; +0x13f, 0x1801317af mov rax, r8 ; +0x144, 0x1801317b4 call cs:__guard_dispatch_icall_fptr ; +0x147, 0x1801317b7 mov [rbx+10h], edi ; +0x14d, 0x1801317bd jmp short loc_1801317D2 ; +0x150, 0x1801317c0 mov ecx, [rax+4] ; +0x152, 0x1801317c2 mov [rax+8], r9 ; +0x155, 0x1801317c5 mov rax, r8 ; +0x159, 0x1801317c9 call cs:__guard_dispatch_icall_fptr ; +0x15c, 0x1801317cc mov [rbx+8], rbp ; +0x162, 0x1801317d2 jmp loc_1801316EE ; +0x166, 0x1801317d6 xor eax, eax ; +0x16b, 0x1801317db mov rbx, [rsp+28h+arg_0] ; +0x16d, 0x1801317dd mov rbp, [rsp+28h+arg_8] ; +0x172, 0x1801317e2 mov rsi, [rsp+28h+arg_10] ; +0x177, 0x1801317e7 add rsp, 20h ; +0x17c, 0x1801317ec pop rdi ; +0x180, 0x1801317f0 retn ; +0x181, 0x1801317f1