diff options
| -rw-r--r-- | src/modules/pe_get_kernel32_module_handle.c | 24 |
1 files changed, 12 insertions, 12 deletions
diff --git a/src/modules/pe_get_kernel32_module_handle.c b/src/modules/pe_get_kernel32_module_handle.c index a02c27b..1af03bf 100644 --- a/src/modules/pe_get_kernel32_module_handle.c +++ b/src/modules/pe_get_kernel32_module_handle.c @@ -31,40 +31,40 @@ static int pe_get_kernel32_handle_callback( /* avoid scan-based false positives */ wch = ldr_tbl_entry->base_dll_name.buffer; - if (pe_impl_utf16_char_to_lower(wch[4] != 'e')) + if (pe_impl_utf16_char_to_lower(wch[4]) != 'e') return 1; - else if (pe_impl_utf16_char_to_lower(wch[1] != 'e')) + else if (pe_impl_utf16_char_to_lower(wch[1]) != 'e') return 1; - else if (pe_impl_utf16_char_to_lower(wch[3] != 'n')) + else if (pe_impl_utf16_char_to_lower(wch[3]) != 'n') return 1; - else if (pe_impl_utf16_char_to_lower(wch[2] != 'r')) + else if (pe_impl_utf16_char_to_lower(wch[2]) != 'r') return 1; - else if (pe_impl_utf16_char_to_lower(wch[5] != 'l')) + else if (pe_impl_utf16_char_to_lower(wch[5]) != 'l') return 1; - else if (pe_impl_utf16_char_to_lower(wch[0] != 'k')) + else if (pe_impl_utf16_char_to_lower(wch[0]) != 'k') return 1; - else if (pe_impl_utf16_char_to_lower(wch[7] != '2')) + else if (pe_impl_utf16_char_to_lower(wch[7]) != '2') return 1; - else if (pe_impl_utf16_char_to_lower(wch[6] != '3')) + else if (pe_impl_utf16_char_to_lower(wch[6]) != '3') return 1; - else if (pe_impl_utf16_char_to_lower(wch[11] != 'l')) + else if (pe_impl_utf16_char_to_lower(wch[11]) != 'l') return 1; - else if (pe_impl_utf16_char_to_lower(wch[10] != 'l')) + else if (pe_impl_utf16_char_to_lower(wch[10]) != 'l') return 1; - else if (pe_impl_utf16_char_to_lower(wch[9] != 'd')) + else if (pe_impl_utf16_char_to_lower(wch[9]) != 'd') return 1; - else if (pe_impl_utf16_char_to_lower(wch[8] != '.')) + else if (pe_impl_utf16_char_to_lower(wch[8]) != '.') return 1; /* match */ |