MCPcopy Create free account
hub / github.com/NtQuery/Scylla / isAddressValidImageMemory

Method isAddressValidImageMemory

Scylla/IATReferenceScan.cpp:283–293  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

281}
282
283bool IATReferenceScan::isAddressValidImageMemory( DWORD_PTR address )
284{
285 MEMORY_BASIC_INFORMATION memBasic = {0};
286
287 if (!VirtualQueryEx(ProcessAccessHelp::hProcess, (LPCVOID)address, &memBasic, sizeof(MEMORY_BASIC_INFORMATION)))
288 {
289 return false;
290 }
291
292 return (memBasic.Type == MEM_IMAGE && ProcessAccessHelp::isPageExecutable(memBasic.Protect));
293}
294
295void IATReferenceScan::patchReferenceInMemory( IATReference * ref )
296{

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected