82 lines
2.9 KiB
C
82 lines
2.9 KiB
C
/* AgentManager_Release_x64.exe sha256 8fd8ca91725858651a7839d34257b10c2970ac16c97e60c523b8b0c983fcb186
|
|
* Ghidra 12.1.2 decompiler output for 0x1400c7c40 FUN_1400c7c40
|
|
* Pseudocode, not original source. */
|
|
|
|
void FUN_1400c7c40(longlong param_1,IMAGE_DOS_HEADER *param_2,undefined **param_3,
|
|
undefined ***param_4)
|
|
|
|
{
|
|
int iVar1;
|
|
int iVar2;
|
|
longlong lVar3;
|
|
longlong *plVar4;
|
|
undefined8 *puVar5;
|
|
IMAGE_DOS_HEADER *pIVar6;
|
|
IMAGE_DOS_HEADER *pIVar7;
|
|
undefined8 uVar8;
|
|
|
|
FUN_14003d040((int *)(param_1 + 0x10));
|
|
if (*(IMAGE_DOS_HEADER **)(param_1 + 0x298) != (IMAGE_DOS_HEADER *)0x0) {
|
|
pIVar6 = *(IMAGE_DOS_HEADER **)(param_1 + 0x298);
|
|
do {
|
|
if (*(longlong *)(param_1 + 0x2b8) == 0) {
|
|
iVar1._0_1_ = pIVar6[2].e_magic[0];
|
|
iVar1._1_1_ = pIVar6[2].e_magic[1];
|
|
iVar1._2_2_ = pIVar6[2].e_cblp;
|
|
if (iVar1 < 5) {
|
|
pIVar6->e_program[0] = 0;
|
|
pIVar6->e_program[1] = 0;
|
|
pIVar6->e_program[2] = 0;
|
|
pIVar6->e_program[3] = 0;
|
|
pIVar6[2].e_magic[0] = '\x05';
|
|
pIVar6[2].e_magic[1] = '\0';
|
|
pIVar6[2].e_cblp = 0;
|
|
uVar8 = (**(code **)(*(longlong *)(*(longlong *)&pIVar6[2].e_cparhdr + 0x70) + 0x1c0))();
|
|
pIVar6[1].e_magic[0] = (char)uVar8;
|
|
pIVar6[1].e_magic[1] = (char)((ulonglong)uVar8 >> 8);
|
|
pIVar6[1].e_cblp = (short)((ulonglong)uVar8 >> 0x10);
|
|
pIVar6[1].e_cp = (short)((ulonglong)uVar8 >> 0x20);
|
|
pIVar6[1].e_crlc = (short)((ulonglong)uVar8 >> 0x30);
|
|
pIVar6[1].e_program[0] = 0;
|
|
}
|
|
}
|
|
else {
|
|
FUN_1400c7bb0(pIVar6,param_2,param_3,param_4);
|
|
}
|
|
iVar2._0_1_ = pIVar6[2].e_magic[0];
|
|
iVar2._1_1_ = pIVar6[2].e_magic[1];
|
|
iVar2._2_2_ = pIVar6[2].e_cblp;
|
|
if (iVar2 == 5) {
|
|
pIVar7 = *(IMAGE_DOS_HEADER **)&pIVar6->e_cparhdr;
|
|
param_2 = pIVar6;
|
|
FUN_1400c1f90(param_1,(longlong *)pIVar6,(ulonglong)param_3,param_4);
|
|
lVar3 = *(longlong *)&pIVar6[2].e_cparhdr;
|
|
if (*(longlong *)(lVar3 + 0x5d0) != 0) {
|
|
*(longlong *)(*(longlong *)(lVar3 + 0x5d0) + 8) =
|
|
*(longlong *)(*(longlong *)(lVar3 + 0x5d0) + 8) + -1;
|
|
puVar5 = (undefined8 *)0x0;
|
|
if (*(longlong *)(*(longlong *)(lVar3 + 0x5d0) + 8) == 0) {
|
|
puVar5 = *(undefined8 **)(lVar3 + 0x5d0);
|
|
}
|
|
*(undefined8 *)(lVar3 + 0x5d0) = 0;
|
|
if (puVar5 != (undefined8 *)0x0) {
|
|
plVar4 = (longlong *)*puVar5;
|
|
if (plVar4 != (longlong *)0x0) {
|
|
FUN_1400c0900(plVar4,param_2,(ulonglong)param_3,(ulonglong)param_4);
|
|
operator_delete(plVar4);
|
|
}
|
|
FUN_14003e8b0(puVar5);
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
pIVar7 = *(IMAGE_DOS_HEADER **)&pIVar6->e_cparhdr;
|
|
}
|
|
pIVar6 = pIVar7;
|
|
} while (pIVar7 != (IMAGE_DOS_HEADER *)0x0);
|
|
}
|
|
FUN_1400c4d40(param_1);
|
|
FUN_14003d0d0(param_1 + 0x10);
|
|
return;
|
|
}
|
|
|