40 lines
1.1 KiB
C
40 lines
1.1 KiB
C
/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469
|
|
* Ghidra 12.1.2 decompiler output for 0x14003b464 __security_init_cookie
|
|
* Pseudocode, not original source. */
|
|
|
|
/* Library Function - Single Match
|
|
__security_init_cookie
|
|
|
|
Libraries: Visual Studio 2008 Release, Visual Studio 2010 Release */
|
|
|
|
void __cdecl __security_init_cookie(void)
|
|
|
|
{
|
|
_FILETIME _Var1;
|
|
DWORD DVar2;
|
|
DWORD DVar3;
|
|
DWORD DVar4;
|
|
_FILETIME local_res8;
|
|
LARGE_INTEGER local_res10;
|
|
|
|
local_res8.dwLowDateTime = 0;
|
|
local_res8.dwHighDateTime = 0;
|
|
if (DAT_1401555a0 == 0x2b992ddfa232) {
|
|
GetSystemTimeAsFileTime(&local_res8);
|
|
_Var1 = local_res8;
|
|
DVar2 = GetCurrentProcessId();
|
|
DVar3 = GetCurrentThreadId();
|
|
DVar4 = GetTickCount();
|
|
QueryPerformanceCounter(&local_res10);
|
|
DAT_1401555a0 =
|
|
(local_res10.QuadPart ^
|
|
(ulonglong)_Var1 ^ (ulonglong)DVar2 ^ (ulonglong)DVar3 ^ (ulonglong)DVar4) & 0xffffffffffff
|
|
;
|
|
if (DAT_1401555a0 == 0x2b992ddfa232) {
|
|
DAT_1401555a0 = 0x2b992ddfa233;
|
|
}
|
|
}
|
|
DAT_1401555a8 = ~DAT_1401555a0;
|
|
return;
|
|
}
|
|
|