// // __scrt_is_nonwritable_in_current_image from 0x18001f5c4 to 0x18001f65c (152 bytes) // // 2 xrefs: // > dllmain_crt_process_attach @ 0x18001f95c // > @ 0x18004b1f0 // // This function is hookable on this platform! // // Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA // Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings // bool __fastcall _scrt_is_nonwritable_in_current_image(__int64 a1) { _DWORD *v2; // rcx unsigned __int64 v3; // r8 _DWORD *v4; // rdx _DWORD *v5; // r9 unsigned __int64 v6; // rcx if ( MEMORY[0x180000000] != 23117 ) return 0; v2 = (_DWORD *)(0x180000000LL + MEMORY[0x18000003C]); if ( *v2 != 17744 || *(_WORD *)(0x180000018LL + MEMORY[0x18000003C]) != 523 ) return 0; v3 = a1 - 0x180000000LL; v4 = (_DWORD *)((char *)v2 + *(unsigned __int16 *)(0x180000014LL + MEMORY[0x18000003C]) + 24); v5 = &v4[10 * *(unsigned __int16 *)(0x180000006LL + MEMORY[0x18000003C])]; while ( v4 != v5 ) { v6 = (unsigned int)v4[3]; if ( v3 >= v6 && v3 < (unsigned int)(v6 + v4[2]) ) return v4 && v4[9] >= 0; v4 += 10; } v4 = nullptr; return v4 && v4[9] >= 0; }