generalised isBeaconThread condition.

This commit is contained in:
mgeeky
2021-10-07 16:32:27 +02:00
parent 78373b10df
commit c1b026ef3e
+2 -1
View File
@@ -166,7 +166,8 @@ bool isShellcodeThread(LPVOID address)
{
const DWORD expectedProtection = (g_fluctuate == FluctuateToRW) ? PAGE_READWRITE : PAGE_NOACCESS;
return ((mbi.Protect & Shellcode_Memory_Protection)
return ((mbi.Protect & PAGE_EXECUTE_READ)
|| (mbi.Protect & PAGE_EXECUTE_READWRITE)
|| (mbi.Protect & expectedProtection));
}
}