25 lines
701 B
C
25 lines
701 B
C
/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469
|
|
* Ghidra 12.1.2 decompiler output for 0x14003b390 _ValidateImageBase
|
|
* Pseudocode, not original source. */
|
|
|
|
/* Library Function - Single Match
|
|
_ValidateImageBase
|
|
|
|
Libraries: Visual Studio 2008 Release, Visual Studio 2010 Release */
|
|
|
|
BOOL __cdecl _ValidateImageBase(PBYTE pImageBase)
|
|
|
|
{
|
|
uint uVar1;
|
|
|
|
if (*(short *)pImageBase != 0x5a4d) {
|
|
return 0;
|
|
}
|
|
uVar1 = 0;
|
|
if (*(int *)(pImageBase + *(int *)(pImageBase + 0x3c)) == 0x4550) {
|
|
uVar1 = (uint)((short)*(int *)((longlong)(pImageBase + *(int *)(pImageBase + 0x3c)) + 0x18) ==
|
|
0x20b);
|
|
}
|
|
return uVar1;
|
|
}
|
|
|