add agent manager release decomp

This commit is contained in:
Benjamin Palko 2026-10-15 09:58:24 -04:00
parent 31ff800b2a
commit fac6117145
7019 changed files with 254032 additions and 5 deletions

View file

@ -31,7 +31,8 @@ Additional observations from the lift (`cpp/AgentProcessControl.cpp`):
- Watcher thread never closes the process handle → handle leak per launch (observed).
- `LaunchProcess` passes a stack `PROCESS_INFORMATION*` to the watcher thread; safe only because of the following `Sleep(1000)` (observed race, inference about intent).
- `KillProcessByName` leaks the snapshot handle on the success path (observed).
- RMI stubs give the protocol handler tables: `AgentManager2AgentStub` 24 slots, `Server2AgentStub` 19 (`full/vtables.tsv`).
- RMI stubs give the protocol handler tables: `AgentManager2AgentStub` 24 slots (= 7 base + 17 RMIs 0x85fd–0x860d, identical to AgentManager's proxy; see `../AgentManager_Release_x64/evidence.md`), `Server2AgentStub` 19 (`full/vtables.tsv`).
- Server-command switch is `0x14000e1e0` (0 on, 1/3 kill by PID, 4 patch, 7/0xb auto-revive toggles, others forwarded to the server); string commands `serveron`/`auto`/`update` in `0x140005950`.
## Findings