decompiled agent_release
This commit is contained in:
parent
baac905ef2
commit
11a3488883
6439 changed files with 229565 additions and 1 deletions
30
decomp/Agent_Release_x64/full/functions/0x14003b410.c
Normal file
30
decomp/Agent_Release_x64/full/functions/0x14003b410.c
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469
|
||||
* Ghidra 12.1.2 decompiler output for 0x14003b410 _IsNonwritableInCurrentImage
|
||||
* Pseudocode, not original source. */
|
||||
|
||||
/* Library Function - Single Match
|
||||
_IsNonwritableInCurrentImage
|
||||
|
||||
Library: Visual Studio 2010 Release */
|
||||
|
||||
BOOL __cdecl _IsNonwritableInCurrentImage(PBYTE pTarget)
|
||||
|
||||
{
|
||||
BOOL BVar1;
|
||||
uint uVar2;
|
||||
PIMAGE_SECTION_HEADER p_Var3;
|
||||
IMAGE_DOS_HEADER *pImageBase;
|
||||
|
||||
pImageBase = &IMAGE_DOS_HEADER_140000000;
|
||||
BVar1 = _ValidateImageBase((PBYTE)&IMAGE_DOS_HEADER_140000000);
|
||||
uVar2 = 0;
|
||||
if (BVar1 != 0) {
|
||||
p_Var3 = _FindPESection((PBYTE)pImageBase,(longlong)pTarget - (longlong)pImageBase);
|
||||
uVar2 = 0;
|
||||
if (p_Var3 != (PIMAGE_SECTION_HEADER)0x0) {
|
||||
uVar2 = ~(p_Var3->Characteristics >> 0x1f) & 1;
|
||||
}
|
||||
}
|
||||
return uVar2;
|
||||
}
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue