/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469 * Ghidra 12.1.2 decompiler output for 0x14003b390 _ValidateImageBase * Pseudocode, not original source. */ /* Library Function - Single Match _ValidateImageBase Libraries: Visual Studio 2008 Release, Visual Studio 2010 Release */ BOOL __cdecl _ValidateImageBase(PBYTE pImageBase) { uint uVar1; if (*(short *)pImageBase != 0x5a4d) { return 0; } uVar1 = 0; if (*(int *)(pImageBase + *(int *)(pImageBase + 0x3c)) == 0x4550) { uVar1 = (uint)((short)*(int *)((longlong)(pImageBase + *(int *)(pImageBase + 0x3c)) + 0x18) == 0x20b); } return uVar1; }