; ; __scrt_is_nonwritable_in_current_image from 0x18001f5c4 to 0x18001f65c (152 bytes) ; ; 2 xrefs: ; > dllmain_crt_process_attach @ 0x18001f95c ; > @ 0x18004b1f0 ; ; This function is hookable on this platform! ; ; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA ; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings ; sub rsp, 18h ; +0x0, 0x18001f5c4 mov r8, rcx ; +0x4, 0x18001f5c8 mov eax, 5A4Dh ; +0x7, 0x18001f5cb cmp cs:180000000h, ax ; +0xc, 0x18001f5d0 jnz short loc_18001F651 ; +0x13, 0x18001f5d7 movsxd rcx, dword ptr cs:18000003Ch ; +0x15, 0x18001f5d9 lea rdx, cs:180000000h ; +0x1c, 0x18001f5e0 add rcx, rdx ; +0x23, 0x18001f5e7 cmp dword ptr [rcx], 4550h ; +0x26, 0x18001f5ea jnz short loc_18001F651 ; +0x2c, 0x18001f5f0 mov eax, 20Bh ; +0x2e, 0x18001f5f2 cmp [rcx+18h], ax ; +0x33, 0x18001f5f7 jnz short loc_18001F651 ; +0x37, 0x18001f5fb sub r8, rdx ; +0x39, 0x18001f5fd movzx edx, word ptr [rcx+14h] ; +0x3c, 0x18001f600 add rdx, 18h ; +0x40, 0x18001f604 add rdx, rcx ; +0x44, 0x18001f608 movzx eax, word ptr [rcx+6] ; +0x47, 0x18001f60b lea rcx, [rax+rax*4] ; +0x4b, 0x18001f60f lea r9, [rdx+rcx*8] ; +0x4f, 0x18001f613 mov [rsp+18h+var_18], rdx ; +0x53, 0x18001f617 cmp rdx, r9 ; +0x57, 0x18001f61b jz short loc_18001F638 ; +0x5a, 0x18001f61e mov ecx, [rdx+0Ch] ; +0x5c, 0x18001f620 cmp r8, rcx ; +0x5f, 0x18001f623 jb short loc_18001F632 ; +0x62, 0x18001f626 mov eax, [rdx+8] ; +0x64, 0x18001f628 add eax, ecx ; +0x67, 0x18001f62b cmp r8, rax ; +0x69, 0x18001f62d jb short loc_18001F63A ; +0x6c, 0x18001f630 add rdx, 28h ; '(' ; +0x6e, 0x18001f632 jmp short loc_18001F617 ; +0x72, 0x18001f636 xor edx, edx ; +0x74, 0x18001f638 test rdx, rdx ; +0x76, 0x18001f63a jnz short loc_18001F643 ; +0x79, 0x18001f63d xor al, al ; +0x7b, 0x18001f63f jmp short loc_18001F657 ; +0x7d, 0x18001f641 cmp dword ptr [rdx+24h], 0 ; +0x7f, 0x18001f643 jge short loc_18001F64D ; +0x83, 0x18001f647 xor al, al ; +0x85, 0x18001f649 jmp short loc_18001F657 ; +0x87, 0x18001f64b mov al, 1 ; +0x89, 0x18001f64d jmp short loc_18001F657 ; +0x8b, 0x18001f64f xor al, al ; +0x8d, 0x18001f651 jmp short loc_18001F657 ; +0x8f, 0x18001f653 xor al, al ; +0x91, 0x18001f655 add rsp, 18h ; +0x93, 0x18001f657 retn ; +0x97, 0x18001f65b