30 lines
865 B
C
30 lines
865 B
C
/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469
|
|
* Ghidra 12.1.2 decompiler output for 0x14003b410 _IsNonwritableInCurrentImage
|
|
* Pseudocode, not original source. */
|
|
|
|
/* Library Function - Single Match
|
|
_IsNonwritableInCurrentImage
|
|
|
|
Library: Visual Studio 2010 Release */
|
|
|
|
BOOL __cdecl _IsNonwritableInCurrentImage(PBYTE pTarget)
|
|
|
|
{
|
|
BOOL BVar1;
|
|
uint uVar2;
|
|
PIMAGE_SECTION_HEADER p_Var3;
|
|
IMAGE_DOS_HEADER *pImageBase;
|
|
|
|
pImageBase = &IMAGE_DOS_HEADER_140000000;
|
|
BVar1 = _ValidateImageBase((PBYTE)&IMAGE_DOS_HEADER_140000000);
|
|
uVar2 = 0;
|
|
if (BVar1 != 0) {
|
|
p_Var3 = _FindPESection((PBYTE)pImageBase,(longlong)pTarget - (longlong)pImageBase);
|
|
uVar2 = 0;
|
|
if (p_Var3 != (PIMAGE_SECTION_HEADER)0x0) {
|
|
uVar2 = ~(p_Var3->Characteristics >> 0x1f) & 1;
|
|
}
|
|
}
|
|
return uVar2;
|
|
}
|
|
|