decompiled agent_release

This commit is contained in:
Benjamin Palko 2026-10-14 16:45:19 -04:00
parent baac905ef2
commit 11a3488883
6439 changed files with 229565 additions and 1 deletions

View file

@ -0,0 +1,55 @@
/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469
* Ghidra 12.1.2 decompiler output for 0x1400023e0 FUN_1400023e0
* Pseudocode, not original source. */
/* WARNING: Function: __security_check_cookie replaced with injection: security_check_cookie */
void FUN_1400023e0(longlong param_1)
{
undefined2 *puVar1;
undefined *puVar2;
ulonglong uVar3;
undefined1 auStack_68 [32];
undefined8 local_48;
undefined2 local_40;
undefined6 uStack_3e;
undefined8 local_30;
ulonglong local_28;
ulonglong local_18;
local_48 = 0xfffffffffffffffe;
local_18 = DAT_1401555a0 ^ (ulonglong)auStack_68;
puVar2 = *(undefined **)(param_1 + 0x30);
if ((((puVar2 != (undefined *)0x0) && (puVar2 != PTR_DAT_140155010)) &&
(0 < *(int *)(puVar2 + -8))) && (*(char *)(param_1 + 0x18) != '\0')) {
if (*(char *)(param_1 + 0x1b) == '\0') {
if ((*(char *)(param_1 + 0x1a) != '\0') && (*(longlong *)(param_1 + 0x10) != 0)) {
(**(code **)(**(longlong **)(param_1 + 0x10) + 0x98))(*(longlong **)(param_1 + 0x10),0);
}
}
else if (*(char *)(param_1 + 0x1c) != '\0') {
Sleep((DWORD)(longlong)*(double *)(param_1 + 0x28));
local_28 = 7;
local_30 = 0;
local_40 = 0;
FUN_140002990(param_1,(ulonglong *)&local_40);
puVar2 = *(undefined **)(param_1 + 0x30);
if (*(undefined **)(param_1 + 0x30) == (undefined *)0x0) {
puVar2 = PTR_DAT_140155010;
}
puVar1 = &local_40;
if (7 < local_28) {
puVar1 = (undefined2 *)CONCAT62(uStack_3e,local_40);
}
uVar3 = (ulonglong)*(ushort *)(param_1 + 0x38);
wprintf(L"%s : RETRY CONNECT : IP[ %s ] PORT[ %d ]\n");
FUN_140002180(param_1,puVar1,puVar2,uVar3);
if (7 < local_28) {
operator_delete((void *)CONCAT62(uStack_3e,local_40));
}
}
}
return;
}