add agent manager release decomp
This commit is contained in:
parent
31ff800b2a
commit
fac6117145
7019 changed files with 254032 additions and 5 deletions
|
|
@ -31,7 +31,8 @@ Additional observations from the lift (`cpp/AgentProcessControl.cpp`):
|
|||
- Watcher thread never closes the process handle → handle leak per launch (observed).
|
||||
- `LaunchProcess` passes a stack `PROCESS_INFORMATION*` to the watcher thread; safe only because of the following `Sleep(1000)` (observed race, inference about intent).
|
||||
- `KillProcessByName` leaks the snapshot handle on the success path (observed).
|
||||
- RMI stubs give the protocol handler tables: `AgentManager2AgentStub` 24 slots, `Server2AgentStub` 19 (`full/vtables.tsv`).
|
||||
- RMI stubs give the protocol handler tables: `AgentManager2AgentStub` 24 slots (= 7 base + 17 RMIs 0x85fd–0x860d, identical to AgentManager's proxy; see `../AgentManager_Release_x64/evidence.md`), `Server2AgentStub` 19 (`full/vtables.tsv`).
|
||||
- Server-command switch is `0x14000e1e0` (0 on, 1/3 kill by PID, 4 patch, 7/0xb auto-revive toggles, others forwarded to the server); string commands `serveron`/`auto`/`update` in `0x140005950`.
|
||||
|
||||
## Findings
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue