55 lines
1.7 KiB
C
55 lines
1.7 KiB
C
/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469
|
|
* Ghidra 12.1.2 decompiler output for 0x14003b154 __report_gsfailure
|
|
* Pseudocode, not original source. */
|
|
|
|
/* WARNING: Globals starting with '_' overlap smaller symbols at the same address */
|
|
/* Library Function - Single Match
|
|
__report_gsfailure
|
|
|
|
Libraries: Visual Studio 2005 Debug, Visual Studio 2005 Release, Visual Studio 2010 Debug, Visual
|
|
Studio 2010 Release */
|
|
|
|
void __cdecl __report_gsfailure(uintptr_t _StackCookie)
|
|
|
|
{
|
|
HANDLE hProcess;
|
|
DWORD64 unaff_retaddr;
|
|
uintptr_t local_res8 [4];
|
|
PVOID local_48;
|
|
ulonglong local_40;
|
|
PRUNTIME_FUNCTION local_38;
|
|
DWORD64 local_30;
|
|
DWORD64 local_28;
|
|
undefined8 local_20;
|
|
undefined8 local_18;
|
|
|
|
local_res8[0] = _StackCookie;
|
|
RtlCaptureContext(&DAT_14015d930);
|
|
local_30 = DAT_14015da28;
|
|
local_38 = RtlLookupFunctionEntry(DAT_14015da28,&local_28,(PUNWIND_HISTORY_TABLE)0x0);
|
|
if (local_38 == (PRUNTIME_FUNCTION)0x0) {
|
|
_DAT_14015d9c8 = local_res8;
|
|
DAT_14015da28 = unaff_retaddr;
|
|
}
|
|
else {
|
|
RtlVirtualUnwind(0,local_28,local_30,local_38,(PCONTEXT)&DAT_14015d930,&local_48,&local_40,
|
|
(PKNONVOLATILE_CONTEXT_POINTERS)0x0);
|
|
}
|
|
_DAT_14015d8a0 = DAT_14015da28;
|
|
_DAT_14015d9b0 = local_res8[0];
|
|
_DAT_14015d890 = 0xc0000409;
|
|
_DAT_14015d894 = 1;
|
|
local_20 = DAT_1401555a0;
|
|
local_18 = DAT_1401555a8;
|
|
DAT_14015d928 = IsDebuggerPresent();
|
|
__crt_debugger_hook(1);
|
|
SetUnhandledExceptionFilter((LPTOP_LEVEL_EXCEPTION_FILTER)0x0);
|
|
UnhandledExceptionFilter((_EXCEPTION_POINTERS *)&PTR_DAT_1400f5a78);
|
|
if (DAT_14015d928 == 0) {
|
|
__crt_debugger_hook(1);
|
|
}
|
|
hProcess = GetCurrentProcess();
|
|
TerminateProcess(hProcess,0xc0000409);
|
|
return;
|
|
}
|
|
|