55 lines
1.8 KiB
C
55 lines
1.8 KiB
C
/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469
|
|
* Ghidra 12.1.2 decompiler output for 0x1400023e0 FUN_1400023e0
|
|
* Pseudocode, not original source. */
|
|
|
|
/* WARNING: Function: __security_check_cookie replaced with injection: security_check_cookie */
|
|
|
|
void FUN_1400023e0(longlong param_1)
|
|
|
|
{
|
|
undefined2 *puVar1;
|
|
undefined *puVar2;
|
|
ulonglong uVar3;
|
|
undefined1 auStack_68 [32];
|
|
undefined8 local_48;
|
|
undefined2 local_40;
|
|
undefined6 uStack_3e;
|
|
undefined8 local_30;
|
|
ulonglong local_28;
|
|
ulonglong local_18;
|
|
|
|
local_48 = 0xfffffffffffffffe;
|
|
local_18 = DAT_1401555a0 ^ (ulonglong)auStack_68;
|
|
puVar2 = *(undefined **)(param_1 + 0x30);
|
|
if ((((puVar2 != (undefined *)0x0) && (puVar2 != PTR_DAT_140155010)) &&
|
|
(0 < *(int *)(puVar2 + -8))) && (*(char *)(param_1 + 0x18) != '\0')) {
|
|
if (*(char *)(param_1 + 0x1b) == '\0') {
|
|
if ((*(char *)(param_1 + 0x1a) != '\0') && (*(longlong *)(param_1 + 0x10) != 0)) {
|
|
(**(code **)(**(longlong **)(param_1 + 0x10) + 0x98))(*(longlong **)(param_1 + 0x10),0);
|
|
}
|
|
}
|
|
else if (*(char *)(param_1 + 0x1c) != '\0') {
|
|
Sleep((DWORD)(longlong)*(double *)(param_1 + 0x28));
|
|
local_28 = 7;
|
|
local_30 = 0;
|
|
local_40 = 0;
|
|
FUN_140002990(param_1,(ulonglong *)&local_40);
|
|
puVar2 = *(undefined **)(param_1 + 0x30);
|
|
if (*(undefined **)(param_1 + 0x30) == (undefined *)0x0) {
|
|
puVar2 = PTR_DAT_140155010;
|
|
}
|
|
puVar1 = &local_40;
|
|
if (7 < local_28) {
|
|
puVar1 = (undefined2 *)CONCAT62(uStack_3e,local_40);
|
|
}
|
|
uVar3 = (ulonglong)*(ushort *)(param_1 + 0x38);
|
|
wprintf(L"%s : RETRY CONNECT : IP[ %s ] PORT[ %d ]\n");
|
|
FUN_140002180(param_1,puVar1,puVar2,uVar3);
|
|
if (7 < local_28) {
|
|
operator_delete((void *)CONCAT62(uStack_3e,local_40));
|
|
}
|
|
}
|
|
}
|
|
return;
|
|
}
|
|
|