{"type": "func", "start": 6442582720, "end": 6442582811, "name": "__GSHandlerCheckCommon", "pseudocode": "// \n// __GSHandlerCheckCommon from 0x1800202c0 to 0x18002031b (91 bytes)\n// \n// 3 xrefs:\n// > __GSHandlerCheck @ 0x1800202ae\n// > __GSHandlerCheck_EH4 @ 0x18002034f\n// > <???> @ 0x18004b310\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 __fastcall _GSHandlerCheckCommon(__int64 a1, __int64 a2)\n{\n  __int64 v2; // rcx\n  __int64 result; // rax\n\n  v2 = *(unsigned int *)(*(_QWORD *)(a2 + 16) + 8LL);\n  result = *(_QWORD *)(a2 + 8);\n  if ( (*(_BYTE *)(v2 + result + 3) & 0xF) != 0 )\n    return *(_BYTE *)(v2 + result + 3) & 0xF0;\n  return result;\n}", "assembly": "; \n; __GSHandlerCheckCommon from 0x1800202c0 to 0x18002031b (91 bytes)\n; \n; 3 xrefs:\n; > __GSHandlerCheck @ 0x1800202ae\n; > __GSHandlerCheck_EH4 @ 0x18002034f\n; > <???> @ 0x18004b310\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\npush    rbx                                                            ; +0x0, 0x1800202c0\nmov     r11d, [r8]                                                     ; +0x2, 0x1800202c2\nmov     rbx, rdx                                                       ; +0x5, 0x1800202c5\nand     r11d, 0FFFFFFF8h                                               ; +0x8, 0x1800202c8\nmov     r9, rcx                                                        ; +0xc, 0x1800202cc\ntest    byte ptr [r8], 4                                               ; +0xf, 0x1800202cf\nmov     r10, rcx                                                       ; +0x13, 0x1800202d3\njz      short loc_1800202EB                                            ; +0x16, 0x1800202d6\nmov     eax, [r8+8]                                                    ; +0x18, 0x1800202d8\nmovsxd  r10, dword ptr [r8+4]                                          ; +0x1c, 0x1800202dc\nneg     eax                                                            ; +0x20, 0x1800202e0\nadd     r10, rcx                                                       ; +0x22, 0x1800202e2\nmovsxd  rcx, eax                                                       ; +0x25, 0x1800202e5\nand     r10, rcx                                                       ; +0x28, 0x1800202e8\nmovsxd  rax, r11d                                                      ; +0x2b, 0x1800202eb\nmov     rdx, [rax+r10]                                                 ; +0x2e, 0x1800202ee\nmov     rax, [rbx+10h]                                                 ; +0x32, 0x1800202f2\nmov     ecx, [rax+8]                                                   ; +0x36, 0x1800202f6\nmov     rax, [rbx+8]                                                   ; +0x39, 0x1800202f9\ntest    byte ptr [rcx+rax+3], 0Fh                                      ; +0x3d, 0x1800202fd\njz      short loc_18002030F                                            ; +0x42, 0x180020302\nmovzx   eax, byte ptr [rcx+rax+3]                                      ; +0x44, 0x180020304\nand     eax, 0FFFFFFF0h                                                ; +0x49, 0x180020309\nadd     r9, rax                                                        ; +0x4c, 0x18002030c\nxor     r9, rdx                                                        ; +0x4f, 0x18002030f\nmov     rcx, r9; StackCookie                                           ; +0x52, 0x180020312\npop     rbx                                                            ; +0x55, 0x180020315\njmp     __security_check_cookie                                        ; +0x56, 0x180020316", "xrefs": ["__GSHandlerCheck @ 0x1800202ae", "__GSHandlerCheck_EH4 @ 0x18002034f", "<???> @ 0x18004b310"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}