32 lines
988 B
C
32 lines
988 B
C
/* Agent_Release_x64.exe sha256 6f2be7b8eb799ba51b359d1958720aac5baee5b7ee0d1d36684d3cbd72d45469
|
|
* Ghidra 12.1.2 decompiler output for 0x14002fe90 FUN_14002fe90
|
|
* Pseudocode, not original source. */
|
|
|
|
/* WARNING: Function: __security_check_cookie replaced with injection: security_check_cookie */
|
|
|
|
longlong * FUN_14002fe90(longlong *param_1,undefined8 param_2,undefined8 param_3,undefined8 param_4)
|
|
|
|
{
|
|
int iVar1;
|
|
undefined *puVar2;
|
|
undefined8 uVar3;
|
|
LPWSTR lpBuffer;
|
|
undefined1 auStack_258 [32];
|
|
undefined4 local_238;
|
|
WCHAR local_228 [264];
|
|
ulonglong local_18;
|
|
|
|
local_18 = DAT_1401555a0 ^ (ulonglong)auStack_258;
|
|
lpBuffer = local_228;
|
|
uVar3 = 0x104;
|
|
local_238 = 0;
|
|
GetCurrentDirectoryW(0x104,lpBuffer);
|
|
FUN_140030200(uVar3,lpBuffer,param_3,param_4);
|
|
*param_1 = (longlong)PTR_DAT_140155010;
|
|
iVar1 = FUN_140030080(local_228);
|
|
puVar2 = FUN_140002f90(param_1,iVar1);
|
|
FUN_1400300b0(puVar2,local_228,iVar1);
|
|
FUN_140003070(param_1);
|
|
return param_1;
|
|
}
|
|
|