; ; __security_init_cookie from 0x180020078 to 0x180020124 (172 bytes) ; ; 3 xrefs: ; > DllEntryPoint @ 0x18001fb80 ; > @ 0x18004b2bc ; > @ 0x18004b2c8 ; ; This function is hookable on this platform! ; ; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA ; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings ; mov [rsp-8+arg_10], rbx ; +0x0, 0x180020078 push rbp ; +0x5, 0x18002007d mov rbp, rsp ; +0x6, 0x18002007e sub rsp, 30h ; +0x9, 0x180020081 mov rax, cs:__security_cookie ; +0xd, 0x180020085 mov rbx, 2B992DDFA232h ; +0x14, 0x18002008c cmp rax, rbx ; +0x1e, 0x180020096 jnz short loc_18002010F ; +0x21, 0x180020099 and qword ptr [rbp+SystemTimeAsFileTime.dwLowDateTime], 0 ; +0x23, 0x18002009b lea rcx, [rbp+SystemTimeAsFileTime]; lpSystemTimeAsFileTime ; +0x28, 0x1800200a0 call cs:GetSystemTimeAsFileTime ; +0x2c, 0x1800200a4 mov rax, qword ptr [rbp+SystemTimeAsFileTime.dwLowDateTime] ; +0x32, 0x1800200aa mov [rbp+var_10], rax ; +0x36, 0x1800200ae call cs:GetCurrentThreadId ; +0x3a, 0x1800200b2 mov eax, eax ; +0x40, 0x1800200b8 xor [rbp+var_10], rax ; +0x42, 0x1800200ba call cs:GetCurrentProcessId ; +0x46, 0x1800200be mov eax, eax ; +0x4c, 0x1800200c4 lea rcx, [rbp+PerformanceCount]; lpPerformanceCount ; +0x4e, 0x1800200c6 xor [rbp+var_10], rax ; +0x52, 0x1800200ca call cs:QueryPerformanceCounter ; +0x56, 0x1800200ce mov eax, dword ptr [rbp+PerformanceCount] ; +0x5c, 0x1800200d4 lea rcx, [rbp+var_10] ; +0x5f, 0x1800200d7 shl rax, 20h ; +0x63, 0x1800200db xor rax, qword ptr [rbp+PerformanceCount] ; +0x67, 0x1800200df xor rax, [rbp+var_10] ; +0x6b, 0x1800200e3 xor rax, rcx ; +0x6f, 0x1800200e7 mov rcx, 0FFFFFFFFFFFFh ; +0x72, 0x1800200ea and rax, rcx ; +0x7c, 0x1800200f4 mov rcx, 2B992DDFA233h ; +0x7f, 0x1800200f7 cmp rax, rbx ; +0x89, 0x180020101 cmovz rax, rcx ; +0x8c, 0x180020104 mov cs:__security_cookie, rax ; +0x90, 0x180020108 mov rbx, [rsp+30h+arg_10] ; +0x97, 0x18002010f not rax ; +0x9c, 0x180020114 mov cs:qword_180047080, rax ; +0x9f, 0x180020117 add rsp, 30h ; +0xa6, 0x18002011e pop rbp ; +0xaa, 0x180020122 retn ; +0xab, 0x180020123