{"type": "func", "start": 6443771360, "end": 6443771437, "name": "_IsNonwritableInCurrentImage", "pseudocode": "// \n// _IsNonwritableInCurrentImage from 0x1801425e0 to 0x18014262d (77 bytes)\n// \n// 2 xrefs:\n// > __C_specific_handler @ 0x1801249e8\n// > <???> @ 0x180203d58\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 __fastcall IsNonwritableInCurrentImage(__int64 a1)\n{\n  __int64 result; // rax\n\n  result = ValidateImageBase(0x180000000uLL);\n  if ( (_DWORD)result )\n  {\n    result = FindPESection(0x180000000LL, a1 - 0x180000000LL);\n    if ( result )\n      return *(int *)(result + 36) >= 0;\n  }\n  return result;\n}", "assembly": "; \n; _IsNonwritableInCurrentImage from 0x1801425e0 to 0x18014262d (77 bytes)\n; \n; 2 xrefs:\n; > __C_specific_handler @ 0x1801249e8\n; > <???> @ 0x180203d58\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov     [rsp+arg_0], rbx                                               ; +0x0, 0x1801425e0\npush    rdi                                                            ; +0x5, 0x1801425e5\nsub     rsp, 20h                                                       ; +0x6, 0x1801425e6\nmov     rbx, rcx                                                       ; +0xa, 0x1801425ea\nlea     rdi, cs:180000000h                                             ; +0xd, 0x1801425ed\nmov     rcx, rdi                                                       ; +0x14, 0x1801425f4\ncall    _ValidateImageBase                                             ; +0x17, 0x1801425f7\ntest    eax, eax                                                       ; +0x1c, 0x1801425fc\njz      short loc_180142622                                            ; +0x1e, 0x1801425fe\nsub     rbx, rdi                                                       ; +0x20, 0x180142600\nmov     rdx, rbx                                                       ; +0x23, 0x180142603\nmov     rcx, rdi                                                       ; +0x26, 0x180142606\ncall    _FindPESection                                                 ; +0x29, 0x180142609\ntest    rax, rax                                                       ; +0x2e, 0x18014260e\njz      short loc_180142622                                            ; +0x31, 0x180142611\nmov     eax, [rax+24h]                                                 ; +0x33, 0x180142613\nshr     eax, 1Fh                                                       ; +0x36, 0x180142616\nnot     eax                                                            ; +0x39, 0x180142619\nand     eax, 1                                                         ; +0x3b, 0x18014261b\njmp     short loc_180142622                                            ; +0x3e, 0x18014261e\nxor     eax, eax                                                       ; +0x40, 0x180142620\nmov     rbx, [rsp+28h+arg_0]                                           ; +0x42, 0x180142622\nadd     rsp, 20h                                                       ; +0x47, 0x180142627\npop     rdi                                                            ; +0x4b, 0x18014262b\nretn                                                                   ; +0x4c, 0x18014262c", "xrefs": ["__C_specific_handler @ 0x1801249e8", "<???> @ 0x180203d58"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}